[Tue Nov 11 10:14:36.811062 2025] [:error] [pid 53414:tid 53421] [client 48.210.57.6:42691] File does not exist: /usr/local/apache/htdocs/suspended-page/k90.php
[Tue Nov 11 10:14:36.930236 2025] [:error] [pid 53414:tid 53417] [client 48.210.57.6:42691] File does not exist: /usr/local/apache/htdocs/suspended-page/uwu2.php
[Tue Nov 11 10:14:37.048515 2025] [:error] [pid 53414:tid 53440] [client 48.210.57.6:42691] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Tue Nov 11 10:14:37.167925 2025] [:error] [pid 53414:tid 53434] [client 48.210.57.6:42691] File does not exist: /usr/local/apache/htdocs/suspended-page/ctex1.php
[Tue Nov 11 10:14:37.285422 2025] [:error] [pid 53414:tid 53428] [client 48.210.57.6:42691] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php
[Tue Nov 11 10:14:37.405029 2025] [:error] [pid 53414:tid 53429] [client 48.210.57.6:42691] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Nov 11 10:14:37.524753 2025] [:error] [pid 53414:tid 53420] [client 48.210.57.6:42691] File does not exist: /usr/local/apache/htdocs/suspended-page/zews.php
[Tue Nov 11 10:14:37.643628 2025] [:error] [pid 53414:tid 53430] [client 48.210.57.6:42691] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Tue Nov 11 10:14:37.760615 2025] [:error] [pid 53414:tid 53418] [client 48.210.57.6:42691] File does not exist: /usr/local/apache/htdocs/suspended-page/124.php
[Tue Nov 11 10:14:37.877709 2025] [:error] [pid 53414:tid 53435] [client 48.210.57.6:42691] File does not exist: /usr/local/apache/htdocs/suspended-page/epinyins.php
[Tue Nov 11 10:14:37.991744 2025] [:error] [pid 53414:tid 53437] [client 48.210.57.6:42691] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/geck.php"] [unique_id "aRKcDQs6pHd_Z5oc1ecK6AAAARU"]
[Tue Nov 11 10:14:38.219515 2025] [:error] [pid 53356:tid 53405] [client 48.210.57.6:42746] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/geck.php"] [unique_id "aRKcDukdmt0kzjVcUN8_qAAAAFQ"]
[Tue Nov 11 10:14:38.449098 2025] [:error] [pid 53355:tid 53365] [client 48.210.57.6:32643] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/geck.php"] [unique_id "aRKcDoB5X5A3rMc4_nDVXQAAAAc"]
[Tue Nov 11 10:14:38.677560 2025] [:error] [pid 53449:tid 53462] [client 48.210.57.6:44161] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/geck.php"] [unique_id "aRKcDtpz08j5NoUSzp-8CAAAAUg"]
[Tue Nov 11 10:14:38.912358 2025] [:error] [pid 53414:tid 53423] [client 48.210.57.6:32685] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aRKcDgs6pHd_Z5oc1ecK6QAAAQc"]
[Tue Nov 11 10:14:39.140246 2025] [:error] [pid 53414:tid 53424] [client 48.210.57.6:44212] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aRKcDws6pHd_Z5oc1ecK6wAAAQg"]
[Tue Nov 11 10:14:39.367827 2025] [:error] [pid 53414:tid 53421] [client 48.210.57.6:42697] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aRKcDws6pHd_Z5oc1ecK7AAAAQU"]
[Tue Nov 11 10:14:39.597074 2025] [:error] [pid 53449:tid 53466] [client 48.210.57.6:35192] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aRKcD9pz08j5NoUSzp-8CgAAAUw"]
[Tue Nov 11 10:14:39.826300 2025] [:error] [pid 53414:tid 53426] [client 48.210.57.6:44194] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shout.php"] [unique_id "aRKcDws6pHd_Z5oc1ecK7QAAAQo"]
[Tue Nov 11 10:14:40.062072 2025] [:error] [pid 59670:tid 59679] [client 48.210.57.6:44174] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shout.php"] [unique_id "aRKcEKk2Cnts0y-hpfpyXgAAAIY"]
[Tue Nov 11 10:14:40.298852 2025] [:error] [pid 53356:tid 53390] [client 48.210.57.6:57209] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shout.php"] [unique_id "aRKcEOkdmt0kzjVcUN8_qgAAAEU"]
[Tue Nov 11 10:14:40.526168 2025] [:error] [pid 53414:tid 53434] [client 48.210.57.6:57518] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shout.php"] [unique_id "aRKcEAs6pHd_Z5oc1ecK8QAAARI"]
[Tue Nov 11 10:14:40.754276 2025] [:error] [pid 53355:tid 53360] [client 48.210.57.6:57155] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/size.php"] [unique_id "aRKcEIB5X5A3rMc4_nDVXwAAAAI"]
[Tue Nov 11 10:14:40.985864 2025] [:error] [pid 53449:tid 53456] [client 48.210.57.6:44208] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/size.php"] [unique_id "aRKcENpz08j5NoUSzp-8CwAAAUI"]
[Tue Nov 11 10:14:41.215035 2025] [:error] [pid 59670:tid 59683] [client 48.210.57.6:44182] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/size.php"] [unique_id "aRKcEak2Cnts0y-hpfpyXwAAAIo"]
[Tue Nov 11 10:14:41.451666 2025] [:error] [pid 59670:tid 59687] [client 48.210.57.6:32654] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/size.php"] [unique_id "aRKcEak2Cnts0y-hpfpyYQAAAI4"]
[Tue Nov 11 10:14:41.699450 2025] [:error] [pid 53449:tid 53461] [client 48.210.57.6:57480] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "aRKcEdpz08j5NoUSzp-8DAAAAUc"]
[Tue Nov 11 10:14:41.927268 2025] [:error] [pid 59670:tid 59675] [client 48.210.57.6:44204] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "aRKcEak2Cnts0y-hpfpyYwAAAII"]
[Tue Nov 11 10:14:42.157880 2025] [:error] [pid 53356:tid 53404] [client 48.210.57.6:57502] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "aRKcEukdmt0kzjVcUN8_qwAAAFM"]
[Tue Nov 11 10:14:42.386596 2025] [:error] [pid 59670:tid 59682] [client 48.210.57.6:57167] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "aRKcEqk2Cnts0y-hpfpyZgAAAIk"]
[Tue Nov 11 10:14:42.616453 2025] [:error] [pid 59670:tid 59692] [client 48.210.57.6:32667] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mn.php"] [unique_id "aRKcEqk2Cnts0y-hpfpyZwAAAJM"]
[Tue Nov 11 10:14:42.845685 2025] [:error] [pid 53356:tid 53396] [client 48.210.57.6:42721] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mn.php"] [unique_id "aRKcEukdmt0kzjVcUN8_rAAAAEs"]
[Tue Nov 11 10:14:43.078748 2025] [:error] [pid 53355:tid 53376] [client 48.210.57.6:44200] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mn.php"] [unique_id "aRKcE4B5X5A3rMc4_nDVYAAAABI"]
[Tue Nov 11 10:14:43.308157 2025] [:error] [pid 53355:tid 53381] [client 48.210.57.6:57205] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mn.php"] [unique_id "aRKcE4B5X5A3rMc4_nDVYQAAABc"]
[Tue Nov 11 10:14:43.550794 2025] [:error] [pid 53449:tid 53473] [client 48.210.57.6:32696] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mt.php"] [unique_id "aRKcE9pz08j5NoUSzp-8DgAAAVM"]
[Tue Nov 11 10:14:43.782258 2025] [:error] [pid 53449:tid 53468] [client 48.210.57.6:57530] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mt.php"] [unique_id "aRKcE9pz08j5NoUSzp-8DwAAAU4"]
[Tue Nov 11 10:14:44.022081 2025] [:error] [pid 59670:tid 59677] [client 48.210.57.6:44170] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mt.php"] [unique_id "aRKcFKk2Cnts0y-hpfpybAAAAIQ"]
[Tue Nov 11 10:14:44.249728 2025] [:error] [pid 53414:tid 53432] [client 48.210.57.6:44178] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mt.php"] [unique_id "aRKcFAs6pHd_Z5oc1ecK8wAAARA"]
[Tue Nov 11 10:14:44.491084 2025] [:error] [pid 53449:tid 53477] [client 48.210.57.6:57487] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "aRKcFNpz08j5NoUSzp-8FAAAAVc"]
[Tue Nov 11 10:14:44.722744 2025] [:error] [pid 59670:tid 59686] [client 48.210.57.6:32645] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "aRKcFKk2Cnts0y-hpfpybgAAAI0"]
[Tue Nov 11 10:14:44.951778 2025] [:error] [pid 53355:tid 53369] [client 48.210.57.6:42737] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "aRKcFIB5X5A3rMc4_nDVYgAAAAs"]
[Tue Nov 11 10:14:45.180253 2025] [:error] [pid 59670:tid 59673] [client 48.210.57.6:57184] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "aRKcFak2Cnts0y-hpfpycQAAAIA"]
[Tue Nov 11 10:14:45.410019 2025] [:error] [pid 59670:tid 59674] [client 48.210.57.6:32672] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aRKcFak2Cnts0y-hpfpycgAAAIE"]
[Tue Nov 11 10:14:45.638721 2025] [:error] [pid 53355:tid 53366] [client 48.210.57.6:44210] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aRKcFYB5X5A3rMc4_nDVZAAAAAg"]
[Tue Nov 11 10:14:45.865556 2025] [:error] [pid 53356:tid 53400] [client 48.210.57.6:57484] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aRKcFekdmt0kzjVcUN8_rQAAAE8"]
[Tue Nov 11 10:14:46.093875 2025] [:error] [pid 59670:tid 59685] [client 48.210.57.6:42729] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aRKcFqk2Cnts0y-hpfpydgAAAIw"]
[Tue Nov 11 10:14:46.324151 2025] [:error] [pid 53356:tid 53399] [client 48.210.57.6:57191] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ova.php"] [unique_id "aRKcFukdmt0kzjVcUN8_rgAAAE4"]
[Tue Nov 11 10:14:46.553688 2025] [:error] [pid 53356:tid 53403] [client 48.210.57.6:57521] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ova.php"] [unique_id "aRKcFukdmt0kzjVcUN8_rwAAAFI"]
[Tue Nov 11 10:14:46.787658 2025] [:error] [pid 53449:tid 53454] [client 48.210.57.6:32649] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ova.php"] [unique_id "aRKcFtpz08j5NoUSzp-8FwAAAUA"]
[Tue Nov 11 10:14:47.018716 2025] [:error] [pid 53356:tid 53408] [client 48.210.57.6:57495] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ova.php"] [unique_id "aRKcF-kdmt0kzjVcUN8_sQAAAFc"]
[Tue Nov 11 10:14:47.251246 2025] [:error] [pid 53449:tid 53457] [client 48.210.57.6:57164] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aRKcF9pz08j5NoUSzp-8GAAAAUM"]
[Tue Nov 11 10:14:47.487964 2025] [:error] [pid 59670:tid 59678] [client 48.210.57.6:32687] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aRKcF6k2Cnts0y-hpfpyeQAAAIU"]
[Tue Nov 11 10:14:47.749215 2025] [:error] [pid 53449:tid 53463] [client 48.210.57.6:42724] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aRKcF9pz08j5NoUSzp-8GwAAAUk"]
[Tue Nov 11 10:14:48.012958 2025] [:error] [pid 53449:tid 53464] [client 48.210.57.6:57162] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aRKcGNpz08j5NoUSzp-8HQAAAUo"]
[Tue Nov 11 10:14:48.244009 2025] [:error] [pid 59670:tid 59688] [client 48.210.57.6:57516] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aRKcGKk2Cnts0y-hpfpyewAAAI8"]
[Tue Nov 11 10:14:48.485022 2025] [:error] [pid 53355:tid 53380] [client 48.210.57.6:57483] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aRKcGIB5X5A3rMc4_nDVaQAAABY"]
[Tue Nov 11 10:14:48.714789 2025] [:error] [pid 53356:tid 53401] [client 48.210.57.6:42743] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aRKcGOkdmt0kzjVcUN8_swAAAFA"]
[Tue Nov 11 10:14:48.945610 2025] [:error] [pid 53356:tid 53386] [client 48.210.57.6:42689] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aRKcGOkdmt0kzjVcUN8_tAAAAEE"]
[Tue Nov 11 10:14:49.180108 2025] [:error] [pid 59670:tid 59683] [client 48.210.57.6:32641] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/123.php"] [unique_id "aRKcGak2Cnts0y-hpfpyfAAAAIo"]
[Tue Nov 11 10:14:49.420130 2025] [:error] [pid 59670:tid 59692] [client 48.210.57.6:57152] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/123.php"] [unique_id "aRKcGak2Cnts0y-hpfpyfQAAAJM"]
[Tue Nov 11 10:14:49.659074 2025] [:error] [pid 59670:tid 59681] [client 48.210.57.6:57474] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/123.php"] [unique_id "aRKcGak2Cnts0y-hpfpyfgAAAIg"]
[Tue Nov 11 10:14:49.897319 2025] [:error] [pid 59670:tid 59675] [client 48.210.57.6:32684] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/123.php"] [unique_id "aRKcGak2Cnts0y-hpfpyfwAAAII"]
[Tue Nov 11 10:14:50.135700 2025] [:error] [pid 53449:tid 53468] [client 48.210.57.6:32658] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aRKcGtpz08j5NoUSzp-8IAAAAU4"]
[Tue Nov 11 10:14:50.370298 2025] [:error] [pid 53449:tid 53477] [client 48.210.57.6:42730] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aRKcGtpz08j5NoUSzp-8IgAAAVc"]
[Tue Nov 11 10:14:50.603840 2025] [:error] [pid 59670:tid 59697] [client 48.210.57.6:57156] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aRKcGqk2Cnts0y-hpfpygAAAAJg"]
[Tue Nov 11 10:14:50.839322 2025] [:error] [pid 53414:tid 53437] [client 48.210.57.6:57512] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aRKcGgs6pHd_Z5oc1ecK9QAAARU"]
[Tue Nov 11 10:14:51.082962 2025] [:error] [pid 53355:tid 53363] [client 48.210.57.6:57472] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goat.php"] [unique_id "aRKcG4B5X5A3rMc4_nDVawAAAAU"]
[Tue Nov 11 10:14:51.334154 2025] [:error] [pid 59670:tid 59680] [client 48.210.57.6:44177] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goat.php"] [unique_id "aRKcG6k2Cnts0y-hpfpyhQAAAIc"]
[Tue Nov 11 10:14:51.578143 2025] [:error] [pid 53356:tid 53406] [client 48.210.57.6:44181] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goat.php"] [unique_id "aRKcG-kdmt0kzjVcUN8_tQAAAFU"]
[Tue Nov 11 10:14:51.808761 2025] [:error] [pid 53356:tid 53397] [client 48.210.57.6:32671] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goat.php"] [unique_id "aRKcG-kdmt0kzjVcUN8_tgAAAEw"]
[Tue Nov 11 10:14:52.039138 2025] [:error] [pid 53449:tid 53458] [client 48.210.57.6:42739] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aRKcHNpz08j5NoUSzp-8JQAAAUQ"]
[Tue Nov 11 10:14:52.278245 2025] [:error] [pid 59670:tid 59688] [client 48.210.57.6:44214] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aRKcHKk2Cnts0y-hpfpyhwAAAI8"]
[Tue Nov 11 10:14:52.511996 2025] [:error] [pid 53449:tid 53459] [client 48.210.57.6:57204] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aRKcHNpz08j5NoUSzp-8JwAAAUU"]
[Tue Nov 11 10:14:52.742576 2025] [:error] [pid 53414:tid 53423] [client 48.210.57.6:17669] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aRKcHAs6pHd_Z5oc1ecK9gAAAQc"]
[Tue Nov 11 10:14:53.001669 2025] [:error] [pid 59670:tid 59686] [client 48.210.57.6:32697] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "aRKcHak2Cnts0y-hpfpyiQAAAI0"]
[Tue Nov 11 10:14:53.236656 2025] [:error] [pid 59670:tid 59682] [client 48.210.57.6:57170] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "aRKcHak2Cnts0y-hpfpyigAAAIk"]
[Tue Nov 11 10:14:53.472855 2025] [:error] [pid 53414:tid 53421] [client 48.210.57.6:42705] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "aRKcHQs6pHd_Z5oc1ecK-AAAAQU"]
[Tue Nov 11 10:14:53.703034 2025] [:error] [pid 59670:tid 59674] [client 48.210.57.6:44187] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "aRKcHak2Cnts0y-hpfpyiwAAAIE"]
[Tue Nov 11 10:14:53.937888 2025] [:error] [pid 53414:tid 53431] [client 48.210.57.6:17726] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ar.php"] [unique_id "aRKcHQs6pHd_Z5oc1ecK-QAAAQ8"]
[Tue Nov 11 10:14:54.189997 2025] [:error] [pid 53356:tid 53402] [client 48.210.57.6:44216] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ar.php"] [unique_id "aRKcHukdmt0kzjVcUN8_ugAAAFE"]
[Tue Nov 11 10:14:54.431417 2025] [:error] [pid 53449:tid 53466] [client 48.210.57.6:42748] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ar.php"] [unique_id "aRKcHtpz08j5NoUSzp-8KgAAAUw"]
[Tue Nov 11 10:14:54.666107 2025] [:error] [pid 59670:tid 59689] [client 48.210.57.6:57529] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ar.php"] [unique_id "aRKcHqk2Cnts0y-hpfpyjwAAAJA"]
[Tue Nov 11 10:14:54.899656 2025] [:error] [pid 53449:tid 53470] [client 48.210.57.6:57195] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/qing.php"] [unique_id "aRKcHtpz08j5NoUSzp-8KwAAAVA"]
[Tue Nov 11 10:14:55.154858 2025] [:error] [pid 53356:tid 53396] [client 48.210.57.6:57534] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/qing.php"] [unique_id "aRKcH-kdmt0kzjVcUN8_uwAAAEs"]
[Tue Nov 11 10:14:55.388276 2025] [:error] [pid 53414:tid 53427] [client 48.210.57.6:44186] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/qing.php"] [unique_id "aRKcHws6pHd_Z5oc1ecK_AAAAQs"]
[Tue Nov 11 10:14:55.619321 2025] [:error] [pid 53414:tid 53438] [client 48.210.57.6:35183] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/qing.php"] [unique_id "aRKcHws6pHd_Z5oc1ecK_QAAARY"]
[Tue Nov 11 10:14:55.856163 2025] [:error] [pid 59670:tid 59680] [client 48.210.57.6:44209] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "aRKcH6k2Cnts0y-hpfpykgAAAIc"]
[Tue Nov 11 10:14:56.117972 2025] [:error] [pid 53449:tid 53471] [client 48.210.57.6:31924] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "aRKcINpz08j5NoUSzp-8LAAAAVE"]
[Tue Nov 11 10:14:56.350273 2025] [:error] [pid 53414:tid 53436] [client 48.210.57.6:57198] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "aRKcIAs6pHd_Z5oc1ecLAAAAARQ"]
[Tue Nov 11 10:14:56.583845 2025] [:error] [pid 53449:tid 53472] [client 48.210.57.6:57180] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "aRKcINpz08j5NoUSzp-8LgAAAVI"]
[Tue Nov 11 10:14:56.820807 2025] [:error] [pid 59670:tid 59683] [client 48.210.57.6:57203] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mms.php"] [unique_id "aRKcIKk2Cnts0y-hpfpylQAAAIo"]
[Tue Nov 11 10:14:57.048335 2025] [:error] [pid 59670:tid 59674] [client 48.210.57.6:42711] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mms.php"] [unique_id "aRKcIak2Cnts0y-hpfpylwAAAIE"]
[Tue Nov 11 10:14:57.279174 2025] [:error] [pid 53414:tid 53419] [client 48.210.57.6:57185] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mms.php"] [unique_id "aRKcIQs6pHd_Z5oc1ecLAgAAAQM"]
[Tue Nov 11 10:14:57.555575 2025] [:error] [pid 53414:tid 53430] [client 48.210.57.6:44166] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mms.php"] [unique_id "aRKcIQs6pHd_Z5oc1ecLBAAAAQ4"]
[Tue Nov 11 10:14:57.785917 2025] [:error] [pid 53356:tid 53403] [client 48.210.57.6:31872] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gmo.php"] [unique_id "aRKcIekdmt0kzjVcUN8_vQAAAFI"]
[Tue Nov 11 10:14:58.018741 2025] [:error] [pid 53414:tid 53416] [client 48.210.57.6:57482] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gmo.php"] [unique_id "aRKcIgs6pHd_Z5oc1ecLBwAAAQA"]
[Tue Nov 11 10:14:58.262135 2025] [:error] [pid 53414:tid 53435] [client 48.210.57.6:32683] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gmo.php"] [unique_id "aRKcIgs6pHd_Z5oc1ecLCAAAARM"]
[Tue Nov 11 10:14:58.498281 2025] [:error] [pid 53449:tid 53478] [client 48.210.57.6:32669] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gmo.php"] [unique_id "aRKcItpz08j5NoUSzp-8MgAAAVg"]
[Tue Nov 11 10:14:58.731278 2025] [:error] [pid 53356:tid 53398] [client 48.210.57.6:57188] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "aRKcIukdmt0kzjVcUN8_vwAAAE0"]
[Tue Nov 11 10:14:58.964543 2025] [:error] [pid 53356:tid 53386] [client 48.210.57.6:42741] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lite.php"] [unique_id "aRKcIukdmt0kzjVcUN8_wAAAAEE"]
[Tue Nov 11 10:14:59.268263 2025] [:error] [pid 59670:tid 59692] [client 48.210.57.6:42699] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lite.php"] [unique_id "aRKcI6k2Cnts0y-hpfpymgAAAJM"]
[Tue Nov 11 10:14:59.509625 2025] [:error] [pid 53414:tid 53425] [client 48.210.57.6:57208] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lite.php"] [unique_id "aRKcIws6pHd_Z5oc1ecLDQAAAQk"]
[Tue Nov 11 10:14:59.742125 2025] [:error] [pid 53449:tid 53476] [client 48.210.57.6:57160] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lite.php"] [unique_id "aRKcI9pz08j5NoUSzp-8NAAAAVY"]
[Tue Nov 11 10:15:00.064298 2025] [:error] [pid 59670:tid 59690] [client 48.210.57.6:42688] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "aRKcJKk2Cnts0y-hpfpypQAAAJE"]
[Tue Nov 11 10:15:00.369371 2025] [:error] [pid 59670:tid 59686] [client 48.210.57.6:35156] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "aRKcJKk2Cnts0y-hpfpysgAAAI0"]
[Tue Nov 11 10:15:00.603673 2025] [:error] [pid 53356:tid 53397] [client 48.210.57.6:32644] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "aRKcJOkdmt0kzjVcUN8_wwAAAEw"]
[Tue Nov 11 10:15:00.857163 2025] [:error] [pid 53355:tid 53366] [client 48.210.57.6:31917] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "aRKcJIB5X5A3rMc4_nDVbwAAAAg"]
[Tue Nov 11 10:15:01.149164 2025] [:error] [pid 59670:tid 59694] [client 48.210.57.6:31874] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "aRKcJak2Cnts0y-hpfpyzQAAAJU"]
[Tue Nov 11 10:15:01.411820 2025] [:error] [pid 59670:tid 59688] [client 48.210.57.6:31885] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "aRKcJak2Cnts0y-hpfpy0wAAAI8"]
[Tue Nov 11 10:15:01.663208 2025] [:error] [pid 53355:tid 53374] [client 48.210.57.6:57172] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "aRKcJYB5X5A3rMc4_nDVcQAAABA"]
[Tue Nov 11 10:15:01.898621 2025] [:error] [pid 53449:tid 53467] [client 48.210.57.6:44165] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "aRKcJdpz08j5NoUSzp-8XgAAAU0"]
[Tue Nov 11 10:15:02.157084 2025] [:error] [pid 59670:tid 59680] [client 48.210.57.6:44223] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aRKcJqk2Cnts0y-hpfpy4wAAAIc"]
[Tue Nov 11 10:15:02.461271 2025] [:error] [pid 53355:tid 53379] [client 48.210.57.6:42732] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aRKcJoB5X5A3rMc4_nDVcgAAABU"]
[Tue Nov 11 10:15:02.764718 2025] [:error] [pid 53355:tid 53364] [client 48.210.57.6:42706] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aRKcJoB5X5A3rMc4_nDVcwAAAAY"]
[Tue Nov 11 10:15:03.045673 2025] [:error] [pid 53355:tid 53367] [client 48.210.57.6:42700] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aRKcJ4B5X5A3rMc4_nDVdAAAAAk"]
[Tue Nov 11 10:15:03.302723 2025] [:error] [pid 53414:tid 53421] [client 48.210.57.6:31892] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aRKcJws6pHd_Z5oc1ecLKwAAAQU"]
[Tue Nov 11 10:15:03.547301 2025] [:error] [pid 53449:tid 53456] [client 48.210.57.6:32695] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aRKcJ9pz08j5NoUSzp-8hAAAAUI"]
[Tue Nov 11 10:15:03.841431 2025] [:error] [pid 53356:tid 53393] [client 48.210.57.6:44197] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aRKcJ-kdmt0kzjVcUN8_yQAAAEg"]
[Tue Nov 11 10:15:04.070621 2025] [:error] [pid 59670:tid 59691] [client 48.210.57.6:42696] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aRKcKKk2Cnts0y-hpfpy-gAAAJI"]
[Tue Nov 11 10:15:04.318882 2025] [:error] [pid 53414:tid 53423] [client 48.210.57.6:44162] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "aRKcKAs6pHd_Z5oc1ecLLwAAAQc"]
[Tue Nov 11 10:15:04.620268 2025] [:error] [pid 53355:tid 53377] [client 48.210.57.6:44180] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "aRKcKIB5X5A3rMc4_nDVdQAAABM"]
[Tue Nov 11 10:15:04.904206 2025] [:error] [pid 53449:tid 53463] [client 48.210.57.6:44202] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "aRKcKNpz08j5NoUSzp-8iAAAAUk"]
[Tue Nov 11 10:15:05.197981 2025] [:error] [pid 59670:tid 59681] [client 48.210.57.6:32647] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "aRKcKak2Cnts0y-hpfpy_gAAAIg"]
[Tue Nov 11 10:15:05.450681 2025] [:error] [pid 53356:tid 53396] [client 48.210.57.6:57215] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "aRKcKekdmt0kzjVcUN8_zAAAAEs"]
[Tue Nov 11 10:15:05.939055 2025] [:error] [pid 53414:tid 53434] [client 48.210.57.6:42747] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "aRKcKQs6pHd_Z5oc1ecLMwAAARI"]
[Tue Nov 11 10:15:06.256189 2025] [:error] [pid 53414:tid 53435] [client 48.210.57.6:57186] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "aRKcKgs6pHd_Z5oc1ecLNAAAARM"]
[Tue Nov 11 10:15:06.489882 2025] [:error] [pid 53414:tid 53429] [client 48.210.57.6:42734] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "aRKcKgs6pHd_Z5oc1ecLNQAAAQ0"]
[Tue Nov 11 10:15:06.747005 2025] [:error] [pid 53356:tid 53403] [client 48.210.57.6:57176] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "aRKcKukdmt0kzjVcUN8_0AAAAFI"]
[Tue Nov 11 10:15:07.062082 2025] [:error] [pid 53355:tid 53373] [client 48.210.57.6:57199] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "aRKcK4B5X5A3rMc4_nDVeAAAAA8"]
[Tue Nov 11 10:15:07.294987 2025] [:error] [pid 53355:tid 53382] [client 48.210.57.6:35143] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "aRKcK4B5X5A3rMc4_nDVeQAAABg"]
[Tue Nov 11 10:15:07.530596 2025] [:error] [pid 59670:tid 59697] [client 48.210.57.6:44175] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "aRKcK6k2Cnts0y-hpfpzAAAAAJg"]
[Tue Nov 11 10:15:07.775600 2025] [:error] [pid 53449:tid 53470] [client 48.210.57.6:17670] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ee.php"] [unique_id "aRKcK9pz08j5NoUSzp-8igAAAVA"]
[Tue Nov 11 10:15:08.045839 2025] [:error] [pid 59670:tid 59692] [client 48.210.57.6:32686] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ee.php"] [unique_id "aRKcLKk2Cnts0y-hpfpzAwAAAJM"]
[Tue Nov 11 10:15:08.291424 2025] [:error] [pid 53414:tid 53419] [client 48.210.57.6:42727] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ee.php"] [unique_id "aRKcLAs6pHd_Z5oc1ecLNwAAAQM"]
[Tue Nov 11 10:15:08.557056 2025] [:error] [pid 53414:tid 53440] [client 48.210.57.6:44203] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ee.php"] [unique_id "aRKcLAs6pHd_Z5oc1ecLOAAAARg"]
[Tue Nov 11 10:15:08.822235 2025] [:error] [pid 53449:tid 53471] [client 48.210.57.6:57510] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aRKcLNpz08j5NoUSzp-8iwAAAVE"]
[Tue Nov 11 10:15:09.069364 2025] [:error] [pid 53449:tid 53478] [client 48.210.57.6:44165] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aRKcLdpz08j5NoUSzp-8jAAAAVg"]
[Tue Nov 11 10:15:09.302488 2025] [:error] [pid 53449:tid 53473] [client 48.210.57.6:18448] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aRKcLdpz08j5NoUSzp-8jQAAAVM"]
[Tue Nov 11 10:15:09.565332 2025] [:error] [pid 53414:tid 53416] [client 48.210.57.6:57214] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aRKcLQs6pHd_Z5oc1ecLOQAAAQA"]
[Tue Nov 11 10:15:09.807481 2025] [:error] [pid 53355:tid 53360] [client 48.210.57.6:31889] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aRKcLYB5X5A3rMc4_nDVfQAAAAI"]
[Tue Nov 11 10:15:10.043991 2025] [:error] [pid 53356:tid 53393] [client 48.210.57.6:18476] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aRKcLukdmt0kzjVcUN8_1wAAAEg"]
[Tue Nov 11 10:15:10.277711 2025] [:error] [pid 53355:tid 53369] [client 48.210.57.6:57193] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aRKcLoB5X5A3rMc4_nDVfgAAAAs"]
[Tue Nov 11 10:15:10.516845 2025] [:error] [pid 59670:tid 59689] [client 48.210.57.6:32682] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aRKcLqk2Cnts0y-hpfpzBwAAAJA"]
[Tue Nov 11 10:15:10.750529 2025] [:error] [pid 53356:tid 53388] [client 48.210.57.6:42692] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/02.php"] [unique_id "aRKcLukdmt0kzjVcUN8_2QAAAEM"]
[Tue Nov 11 10:15:10.986001 2025] [:error] [pid 53449:tid 53455] [client 48.210.57.6:57508] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/02.php"] [unique_id "aRKcLtpz08j5NoUSzp-8jgAAAUE"]
[Tue Nov 11 10:15:11.222823 2025] [:error] [pid 53355:tid 53374] [client 48.210.57.6:57215] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/02.php"] [unique_id "aRKcL4B5X5A3rMc4_nDVgQAAABA"]
[Tue Nov 11 10:15:11.454649 2025] [:error] [pid 59670:tid 59697] [client 48.210.57.6:57179] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/02.php"] [unique_id "aRKcL6k2Cnts0y-hpfpzCQAAAJg"]
[Tue Nov 11 10:15:11.692752 2025] [:error] [pid 53449:tid 53456] [client 48.210.57.6:31920] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aRKcL9pz08j5NoUSzp-8jwAAAUI"]
[Tue Nov 11 10:15:11.923876 2025] [:error] [pid 53449:tid 53459] [client 48.210.57.6:57532] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aRKcL9pz08j5NoUSzp-8kgAAAUU"]
[Tue Nov 11 10:15:12.162247 2025] [:error] [pid 53355:tid 53375] [client 48.210.57.6:42740] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aRKcMIB5X5A3rMc4_nDVhAAAABE"]
[Tue Nov 11 10:15:12.392083 2025] [:error] [pid 53414:tid 53431] [client 48.210.57.6:32650] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aRKcMAs6pHd_Z5oc1ecLPAAAAQ8"]
[Tue Nov 11 10:15:12.624866 2025] [:error] [pid 59670:tid 59692] [client 48.210.57.6:32653] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aRKcMKk2Cnts0y-hpfpzCwAAAJM"]
[Tue Nov 11 10:15:12.853643 2025] [:error] [pid 53355:tid 53361] [client 48.210.57.6:57520] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aRKcMIB5X5A3rMc4_nDVhgAAAAM"]
[Tue Nov 11 10:15:13.083235 2025] [:error] [pid 53449:tid 53467] [client 48.210.57.6:42718] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aRKcMdpz08j5NoUSzp-8kwAAAU0"]
[Tue Nov 11 10:15:13.313283 2025] [:error] [pid 53355:tid 53377] [client 48.210.57.6:57163] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aRKcMYB5X5A3rMc4_nDVhwAAABM"]
[Tue Nov 11 10:15:13.541535 2025] [:error] [pid 53356:tid 53398] [client 48.210.57.6:42708] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/13k.php"] [unique_id "aRKcMekdmt0kzjVcUN8_3QAAAE0"]
[Tue Nov 11 10:15:13.769820 2025] [:error] [pid 53356:tid 53389] [client 48.210.57.6:44218] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/13k.php"] [unique_id "aRKcMekdmt0kzjVcUN8_3gAAAEQ"]
[Tue Nov 11 10:15:13.998729 2025] [:error] [pid 53414:tid 53433] [client 48.210.57.6:18462] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/13k.php"] [unique_id "aRKcMQs6pHd_Z5oc1ecLPQAAARE"]
[Tue Nov 11 10:15:14.259784 2025] [:error] [pid 53356:tid 53397] [client 48.210.57.6:57177] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/13k.php"] [unique_id "aRKcMukdmt0kzjVcUN8_4AAAAEw"]
[Tue Nov 11 10:15:14.502708 2025] [:error] [pid 53356:tid 53395] [client 48.210.57.6:44167] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "aRKcMukdmt0kzjVcUN8_4QAAAEo"]
[Tue Nov 11 10:15:14.750840 2025] [:error] [pid 59670:tid 59679] [client 48.210.57.6:57504] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "aRKcMqk2Cnts0y-hpfpzDQAAAIY"]
[Tue Nov 11 10:15:14.999836 2025] [:error] [pid 59670:tid 59688] [client 48.210.57.6:57171] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "aRKcMqk2Cnts0y-hpfpzDwAAAI8"]
[Tue Nov 11 10:15:15.229087 2025] [:error] [pid 59670:tid 59685] [client 48.210.57.6:32676] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "aRKcM6k2Cnts0y-hpfpzEQAAAIw"]
[Tue Nov 11 10:15:15.458263 2025] [:error] [pid 53414:tid 53420] [client 48.210.57.6:17668] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bypass.php"] [unique_id "aRKcMws6pHd_Z5oc1ecLPwAAAQQ"]
[Tue Nov 11 10:15:15.686828 2025] [:error] [pid 59670:tid 59687] [client 48.210.57.6:17666] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bypass.php"] [unique_id "aRKcM6k2Cnts0y-hpfpzEgAAAI4"]
[Tue Nov 11 10:15:15.915972 2025] [:error] [pid 59670:tid 59697] [client 48.210.57.6:18488] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bypass.php"] [unique_id "aRKcM6k2Cnts0y-hpfpzEwAAAJg"]
[Tue Nov 11 10:15:16.146187 2025] [:error] [pid 59670:tid 59683] [client 48.210.57.6:32677] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bypass.php"] [unique_id "aRKcNKk2Cnts0y-hpfpzFQAAAIo"]
[Tue Nov 11 10:15:16.373138 2025] [:error] [pid 53414:tid 53423] [client 48.210.57.6:57477] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aRKcNAs6pHd_Z5oc1ecLQQAAAQc"]
[Tue Nov 11 10:15:16.610374 2025] [:error] [pid 53449:tid 53463] [client 48.210.57.6:31927] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aRKcNNpz08j5NoUSzp-8mAAAAUk"]
[Tue Nov 11 10:15:16.840927 2025] [:error] [pid 53356:tid 53396] [client 48.210.57.6:42742] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aRKcNOkdmt0kzjVcUN8_5QAAAEs"]
[Tue Nov 11 10:15:17.088989 2025] [:error] [pid 59670:tid 59678] [client 48.210.57.6:57169] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aRKcNak2Cnts0y-hpfpzGAAAAIU"]
[Tue Nov 11 10:15:17.319166 2025] [:error] [pid 59670:tid 59692] [client 48.210.57.6:57486] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aRKcNak2Cnts0y-hpfpzGgAAAJM"]
[Tue Nov 11 10:15:17.547773 2025] [:error] [pid 59670:tid 59680] [client 48.210.57.6:42704] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aRKcNak2Cnts0y-hpfpzGwAAAIc"]
[Tue Nov 11 10:15:17.782543 2025] [:error] [pid 53356:tid 53392] [client 48.210.57.6:32675] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aRKcNekdmt0kzjVcUN8_5gAAAEc"]
[Tue Nov 11 10:15:18.018575 2025] [:error] [pid 53449:tid 53478] [client 48.210.57.6:31911] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aRKcNtpz08j5NoUSzp-8mwAAAVg"]
[Tue Nov 11 10:15:18.253857 2025] [:error] [pid 53356:tid 53403] [client 48.210.57.6:17708] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kk.php"] [unique_id "aRKcNukdmt0kzjVcUN8_6AAAAFI"]
[Tue Nov 11 10:15:18.490393 2025] [:error] [pid 53449:tid 53477] [client 48.210.57.6:32681] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kk.php"] [unique_id "aRKcNtpz08j5NoUSzp-8nQAAAVc"]
[Tue Nov 11 10:15:18.737251 2025] [:error] [pid 53355:tid 53381] [client 48.210.57.6:31897] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kk.php"] [unique_id "aRKcNoB5X5A3rMc4_nDVjAAAABc"]
[Tue Nov 11 10:15:18.982018 2025] [:error] [pid 53355:tid 53374] [client 48.210.57.6:42698] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kk.php"] [unique_id "aRKcNoB5X5A3rMc4_nDVjgAAABA"]
[Tue Nov 11 10:15:19.213945 2025] [:error] [pid 59670:tid 59675] [client 48.210.57.6:44164] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cf.php"] [unique_id "aRKcN6k2Cnts0y-hpfpzHAAAAII"]
[Tue Nov 11 10:15:19.453557 2025] [:error] [pid 53355:tid 53366] [client 48.210.57.6:57206] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cf.php"] [unique_id "aRKcN4B5X5A3rMc4_nDVkQAAAAg"]
[Tue Nov 11 10:15:19.683797 2025] [:error] [pid 59670:tid 59694] [client 48.210.57.6:35170] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cf.php"] [unique_id "aRKcN6k2Cnts0y-hpfpzHQAAAJU"]
[Tue Nov 11 10:15:19.917379 2025] [:error] [pid 59670:tid 59679] [client 48.210.57.6:18469] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cf.php"] [unique_id "aRKcN6k2Cnts0y-hpfpzHgAAAIY"]
[Tue Nov 11 10:15:20.156321 2025] [:error] [pid 53356:tid 53389] [client 48.210.57.6:57183] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/456.php"] [unique_id "aRKcOOkdmt0kzjVcUN8_6QAAAEQ"]
[Tue Nov 11 10:15:20.389281 2025] [:error] [pid 53449:tid 53459] [client 48.210.57.6:32679] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/456.php"] [unique_id "aRKcONpz08j5NoUSzp-8oQAAAUU"]
[Tue Nov 11 10:15:20.626713 2025] [:error] [pid 53449:tid 53468] [client 48.210.57.6:44179] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/456.php"] [unique_id "aRKcONpz08j5NoUSzp-8ogAAAU4"]
[Tue Nov 11 10:15:20.856359 2025] [:error] [pid 53449:tid 53457] [client 48.210.57.6:31906] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/456.php"] [unique_id "aRKcONpz08j5NoUSzp-8owAAAUM"]
[Tue Nov 11 10:15:21.103205 2025] [:error] [pid 53355:tid 53359] [client 48.210.57.6:18485] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aRKcOYB5X5A3rMc4_nDVlQAAAAE"]
[Tue Nov 11 10:15:21.332694 2025] [:error] [pid 53449:tid 53463] [client 48.210.57.6:32656] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aRKcOdpz08j5NoUSzp-8pAAAAUk"]
[Tue Nov 11 10:15:21.562269 2025] [:error] [pid 53414:tid 53436] [client 48.210.57.6:31878] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aRKcOQs6pHd_Z5oc1ecLRQAAARQ"]
[Tue Nov 11 10:15:21.799953 2025] [:error] [pid 53449:tid 53461] [client 48.210.57.6:31931] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aRKcOdpz08j5NoUSzp-8pQAAAUc"]
[Tue Nov 11 10:15:22.029976 2025] [:error] [pid 53449:tid 53478] [client 48.210.57.6:18445] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "aRKcOtpz08j5NoUSzp-8pwAAAVg"]
[Tue Nov 11 10:15:22.265177 2025] [:error] [pid 53355:tid 53360] [client 48.210.57.6:31888] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "aRKcOoB5X5A3rMc4_nDVmQAAAAI"]
[Tue Nov 11 10:15:22.495589 2025] [:error] [pid 53355:tid 53382] [client 48.210.57.6:57506] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "aRKcOoB5X5A3rMc4_nDVmgAAABg"]
[Tue Nov 11 10:15:22.733353 2025] [:error] [pid 53414:tid 53419] [client 48.210.57.6:32688] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "aRKcOgs6pHd_Z5oc1ecLRgAAAQM"]
[Tue Nov 11 10:15:22.972315 2025] [:error] [pid 53414:tid 53440] [client 48.210.57.6:32692] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aRKcOgs6pHd_Z5oc1ecLRwAAARg"]
[Tue Nov 11 10:15:23.202634 2025] [:error] [pid 53355:tid 53381] [client 48.210.57.6:42744] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aRKcO4B5X5A3rMc4_nDVmwAAABc"]
[Tue Nov 11 10:15:23.432132 2025] [:error] [pid 53355:tid 53374] [client 48.210.57.6:31876] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aRKcO4B5X5A3rMc4_nDVnQAAABA"]
[Tue Nov 11 10:15:23.660589 2025] [:error] [pid 53355:tid 53361] [client 48.210.57.6:44206] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aRKcO4B5X5A3rMc4_nDVngAAAAM"]
[Tue Nov 11 10:15:23.891005 2025] [:error] [pid 53414:tid 53425] [client 48.210.57.6:31877] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2x.php"] [unique_id "aRKcOws6pHd_Z5oc1ecLSAAAAQk"]
[Tue Nov 11 10:15:24.121697 2025] [:error] [pid 53355:tid 53367] [client 48.210.57.6:32673] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2x.php"] [unique_id "aRKcPIB5X5A3rMc4_nDVnwAAAAk"]
[Tue Nov 11 10:15:24.359302 2025] [:error] [pid 53449:tid 53472] [client 48.210.57.6:44217] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2x.php"] [unique_id "aRKcPNpz08j5NoUSzp-8rAAAAVI"]
[Tue Nov 11 10:15:24.589092 2025] [:error] [pid 53355:tid 53366] [client 48.210.57.6:18460] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2x.php"] [unique_id "aRKcPIB5X5A3rMc4_nDVoAAAAAg"]
[Tue Nov 11 10:15:24.819871 2025] [:error] [pid 53449:tid 53476] [client 48.210.57.6:57165] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aRKcPNpz08j5NoUSzp-8rgAAAVY"]
[Tue Nov 11 10:15:25.050850 2025] [:error] [pid 53355:tid 53369] [client 48.210.57.6:42722] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aRKcPYB5X5A3rMc4_nDVogAAAAs"]
[Tue Nov 11 10:15:25.285433 2025] [:error] [pid 59670:tid 59688] [client 48.210.57.6:31886] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aRKcPak2Cnts0y-hpfpzHwAAAI8"]
[Tue Nov 11 10:15:25.529758 2025] [:error] [pid 53355:tid 53377] [client 48.210.57.6:57493] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aRKcPYB5X5A3rMc4_nDVpAAAABM"]
[Tue Nov 11 10:15:25.757879 2025] [:error] [pid 53414:tid 53416] [client 48.210.57.6:42735] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aRKcPQs6pHd_Z5oc1ecLSgAAAQA"]
[Tue Nov 11 10:15:25.992273 2025] [:error] [pid 53414:tid 53422] [client 48.210.57.6:18442] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aRKcPQs6pHd_Z5oc1ecLTAAAAQY"]
[Tue Nov 11 10:15:26.224851 2025] [:error] [pid 53414:tid 53433] [client 48.210.57.6:35177] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aRKcPgs6pHd_Z5oc1ecLTQAAARE"]
[Tue Nov 11 10:15:26.457411 2025] [:error] [pid 53414:tid 53420] [client 48.210.57.6:32651] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aRKcPgs6pHd_Z5oc1ecLTgAAAQQ"]
[Tue Nov 11 10:15:26.686168 2025] [:error] [pid 59670:tid 59690] [client 48.210.57.6:18487] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pepe.php"] [unique_id "aRKcPqk2Cnts0y-hpfpzIAAAAJE"]
[Tue Nov 11 10:15:26.916932 2025] [:error] [pid 53414:tid 53437] [client 48.210.57.6:32670] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pepe.php"] [unique_id "aRKcPgs6pHd_Z5oc1ecLTwAAARU"]
[Tue Nov 11 10:15:27.145821 2025] [:error] [pid 59670:tid 59687] [client 48.210.57.6:18451] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pepe.php"] [unique_id "aRKcP6k2Cnts0y-hpfpzIgAAAI4"]
[Tue Nov 11 10:15:27.392920 2025] [:error] [pid 59670:tid 59691] [client 48.210.57.6:18486] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pepe.php"] [unique_id "aRKcP6k2Cnts0y-hpfpzJQAAAJI"]
[Tue Nov 11 10:15:27.622961 2025] [:error] [pid 53449:tid 53461] [client 48.210.57.6:46400] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "aRKcP9pz08j5NoUSzp-8sQAAAUc"]
[Tue Nov 11 10:15:27.853868 2025] [:error] [pid 53356:tid 53402] [client 48.210.57.6:42707] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "aRKcP-kdmt0kzjVcUN8_8QAAAFE"]
[Tue Nov 11 10:15:28.082540 2025] [:error] [pid 53356:tid 53390] [client 48.210.57.6:57523] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "aRKcQOkdmt0kzjVcUN8_8gAAAEU"]
[Tue Nov 11 10:15:28.312289 2025] [:error] [pid 53414:tid 53427] [client 48.210.57.6:18495] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "aRKcQAs6pHd_Z5oc1ecLUgAAAQs"]
[Tue Nov 11 10:15:28.547833 2025] [:error] [pid 53356:tid 53400] [client 48.210.57.6:18456] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "aRKcQOkdmt0kzjVcUN8_8wAAAE8"]
[Tue Nov 11 10:15:28.785599 2025] [:error] [pid 53356:tid 53406] [client 48.210.57.6:44184] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "aRKcQOkdmt0kzjVcUN8_9AAAAFU"]
[Tue Nov 11 10:15:29.014621 2025] [:error] [pid 59670:tid 59677] [client 48.210.57.6:42693] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "aRKcQak2Cnts0y-hpfpzJwAAAIQ"]
[Tue Nov 11 10:15:29.244297 2025] [:error] [pid 53449:tid 53478] [client 48.210.57.6:31881] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "aRKcQdpz08j5NoUSzp-8sgAAAVg"]
[Tue Nov 11 10:15:29.472944 2025] [:error] [pid 53414:tid 53434] [client 48.210.57.6:57519] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x.php"] [unique_id "aRKcQQs6pHd_Z5oc1ecLUwAAARI"]
[Tue Nov 11 10:15:29.706026 2025] [:error] [pid 53414:tid 53419] [client 48.210.57.6:42690] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x.php"] [unique_id "aRKcQQs6pHd_Z5oc1ecLVgAAAQM"]
[Tue Nov 11 10:15:29.940278 2025] [:error] [pid 53414:tid 53417] [client 48.210.57.6:32663] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x.php"] [unique_id "aRKcQQs6pHd_Z5oc1ecLWAAAAQE"]
[Tue Nov 11 10:15:30.170385 2025] [:error] [pid 53355:tid 53377] [client 48.210.57.6:18471] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x.php"] [unique_id "aRKcQoB5X5A3rMc4_nDVqwAAABM"]
[Tue Nov 11 10:15:30.402793 2025] [:error] [pid 53414:tid 53418] [client 48.210.57.6:17704] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aRKcQgs6pHd_Z5oc1ecLWQAAAQI"]
[Tue Nov 11 10:15:30.631847 2025] [:error] [pid 53414:tid 53432] [client 48.210.57.6:57492] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aRKcQgs6pHd_Z5oc1ecLWgAAARA"]
[Tue Nov 11 10:15:30.863290 2025] [:error] [pid 53414:tid 53416] [client 48.210.57.6:42749] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aRKcQgs6pHd_Z5oc1ecLXAAAAQA"]
[Tue Nov 11 10:15:31.096371 2025] [:error] [pid 59670:tid 59690] [client 48.210.57.6:42736] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aRKcQ6k2Cnts0y-hpfpzLgAAAJE"]
[Tue Nov 11 10:15:31.335349 2025] [:error] [pid 59670:tid 59676] [client 48.210.57.6:17695] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "aRKcQ6k2Cnts0y-hpfpzLwAAAIM"]
[Tue Nov 11 10:15:31.575949 2025] [:error] [pid 59670:tid 59685] [client 48.210.57.6:17701] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "aRKcQ6k2Cnts0y-hpfpzMQAAAIw"]
[Tue Nov 11 10:15:31.803913 2025] [:error] [pid 59670:tid 59687] [client 48.210.57.6:35157] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "aRKcQ6k2Cnts0y-hpfpzMgAAAI4"]
[Tue Nov 11 10:15:32.046909 2025] [:error] [pid 53414:tid 53421] [client 48.210.57.6:42720] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "aRKcRAs6pHd_Z5oc1ecLXQAAAQU"]
[Tue Nov 11 10:15:32.290794 2025] [:error] [pid 53449:tid 53466] [client 48.210.57.6:31786] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ll.php"] [unique_id "aRKcRNpz08j5NoUSzp-8swAAAUw"]
[Tue Nov 11 10:15:32.519007 2025] [:error] [pid 53414:tid 53431] [client 48.210.57.6:57193] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ll.php"] [unique_id "aRKcRAs6pHd_Z5oc1ecLXgAAAQ8"]
[Tue Nov 11 10:15:32.748411 2025] [:error] [pid 59670:tid 59691] [client 48.210.57.6:17691] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ll.php"] [unique_id "aRKcRKk2Cnts0y-hpfpzNQAAAJI"]
[Tue Nov 11 10:15:32.977486 2025] [:error] [pid 53414:tid 53422] [client 48.210.57.6:31926] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ll.php"] [unique_id "aRKcRAs6pHd_Z5oc1ecLXwAAAQY"]
[Tue Nov 11 10:15:33.228075 2025] [:error] [pid 53356:tid 53389] [client 48.210.57.6:17678] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aRKcRekdmt0kzjVcUN8_-gAAAEQ"]
[Tue Nov 11 10:15:33.463412 2025] [:error] [pid 59670:tid 59692] [client 48.210.57.6:18465] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aRKcRak2Cnts0y-hpfpzOAAAAJM"]
[Tue Nov 11 10:15:33.699036 2025] [:error] [pid 59670:tid 59693] [client 48.210.57.6:46407] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aRKcRak2Cnts0y-hpfpzOQAAAJQ"]
[Tue Nov 11 10:15:33.939457 2025] [:error] [pid 53414:tid 53433] [client 48.210.57.6:44189] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aRKcRQs6pHd_Z5oc1ecLYAAAARE"]
[Tue Nov 11 10:15:34.185693 2025] [:error] [pid 53356:tid 53405] [client 48.210.57.6:17715] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "aRKcRukdmt0kzjVcUN8__QAAAFQ"]
[Tue Nov 11 10:15:34.413571 2025] [:error] [pid 53356:tid 53393] [client 48.210.57.6:35173] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "aRKcRukdmt0kzjVcUN8__gAAAEg"]
[Tue Nov 11 10:15:34.644053 2025] [:error] [pid 53356:tid 53386] [client 48.210.57.6:31770] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "aRKcRukdmt0kzjVcUN9AAAAAAEE"]
[Tue Nov 11 10:15:34.875839 2025] [:error] [pid 53355:tid 53363] [client 48.210.57.6:44168] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "aRKcRoB5X5A3rMc4_nDVsQAAAAU"]
[Tue Nov 11 10:15:35.104121 2025] [:error] [pid 53355:tid 53374] [client 48.210.57.6:31875] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "aRKcR4B5X5A3rMc4_nDVswAAABA"]
[Tue Nov 11 10:15:35.335987 2025] [:error] [pid 53355:tid 53361] [client 48.210.57.6:44196] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "aRKcR4B5X5A3rMc4_nDVtQAAAAM"]
[Tue Nov 11 10:15:35.566963 2025] [:error] [pid 53355:tid 53366] [client 48.210.57.6:17673] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "aRKcR4B5X5A3rMc4_nDVtwAAAAg"]
[Tue Nov 11 10:15:35.804929 2025] [:error] [pid 59670:tid 59690] [client 48.210.57.6:46429] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "aRKcR6k2Cnts0y-hpfpzPgAAAJE"]
[Tue Nov 11 10:15:36.036005 2025] [:error] [pid 59670:tid 59685] [client 48.210.57.6:32652] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "aRKcSKk2Cnts0y-hpfpzPwAAAIw"]
[Tue Nov 11 10:15:36.264430 2025] [:error] [pid 53414:tid 53423] [client 48.210.57.6:17712] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "aRKcSAs6pHd_Z5oc1ecLYgAAAQc"]
[Tue Nov 11 10:15:36.494280 2025] [:error] [pid 53355:tid 53358] [client 48.210.57.6:35145] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "aRKcSIB5X5A3rMc4_nDVuAAAAAA"]
[Tue Nov 11 10:15:36.732653 2025] [:error] [pid 53356:tid 53406] [client 48.210.57.6:42750] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "aRKcSOkdmt0kzjVcUN9AAgAAAFU"]
[Tue Nov 11 10:15:36.960927 2025] [:error] [pid 53355:tid 53373] [client 48.210.57.6:44185] [client 48.210.57.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asus.php"] [unique_id "aRKcSIB5X5A3rMc4_nDVugAAAA8"]
[Tue Nov 11 10:15:37.198329 2025] [:error] [pid 53449:tid 53469] [client 48.210.57.6:44201] File does not exist: /usr/local/apache/htdocs/suspended-page/asus.php
[Tue Nov 11 10:15:37.315974 2025] [:error] [pid 53449:tid 53472] [client 48.210.57.6:44201] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Tue Nov 11 10:15:37.434257 2025] [:error] [pid 53449:tid 53468] [client 48.210.57.6:44201] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Tue Nov 11 10:15:37.553724 2025] [:error] [pid 53449:tid 53458] [client 48.210.57.6:44201] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mn.php
[Tue Nov 11 10:15:37.671868 2025] [:error] [pid 53449:tid 53476] [client 48.210.57.6:44201] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Tue Nov 11 10:15:37.789190 2025] [:error] [pid 53449:tid 53457] [client 48.210.57.6:44201] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Tue Nov 11 10:15:37.905843 2025] [:error] [pid 53449:tid 53456] [client 48.210.57.6:44201] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Tue Nov 11 10:15:38.023486 2025] [:error] [pid 53449:tid 53467] [client 48.210.57.6:44201] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue Nov 11 10:15:38.147450 2025] [:error] [pid 53449:tid 53474] [client 48.210.57.6:44201] File does not exist: /usr/local/apache/htdocs/suspended-page/bless5.php
[Tue Nov 11 10:15:38.265708 2025] [:error] [pid 53449:tid 53475] [client 48.210.57.6:44201] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Tue Nov 11 11:38:14.496147 2025] [:error] [pid 59670:tid 59692] [client 140.245.126.6:54403] [client 140.245.126.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "aRKvpqk2Cnts0y-hpfqiTgAAAJM"]
[Tue Nov 11 11:38:14.692949 2025] [:error] [pid 53414:tid 53437] [client 140.245.126.6:54452] [client 140.245.126.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "aRKvpgs6pHd_Z5oc1ecpVgAAARU"]
[Tue Nov 11 11:38:14.888500 2025] [:error] [pid 53356:tid 53390] [client 140.245.126.6:54490] [client 140.245.126.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/feed/"] [unique_id "aRKvpukdmt0kzjVcUN9c4QAAAEU"]
[Wed Nov 12 16:38:45.826755 2025] [:error] [pid 60097:tid 60175] [client 195.26.243.5:58400] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php
[Wed Nov 12 22:30:08.829020 2025] [:error] [pid 60095:tid 60099] [client 34.72.179.202:47590] [client 34.72.179.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aRSZ8Hlw2elroagFF1pZWQAAAEA"]
[Thu Nov 13 17:55:44.721893 2025] [:error] [pid 6086:tid 6109] [client 150.241.107.255:56776] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "aRWrIH9_6CRZzjZnAe0zXwAAARQ"]
[Thu Nov 13 17:55:45.277645 2025] [:error] [pid 44354:tid 44368] [client 150.241.107.255:57023] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "aRWrIXqKopQhy3G4s3l0jwAAAYk"]
[Thu Nov 13 17:55:45.821840 2025] [:error] [pid 62303:tid 62307] [client 150.241.107.255:57444] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRWrIb-hlFTtVrZw8jDoQgAAAIA"]
[Sat Nov 15 01:44:54.829172 2025] [:error] [pid 18513:tid 18521] [client 20.48.160.218:30666] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Sat Nov 15 01:44:55.039910 2025] [:error] [pid 18513:tid 18526] [client 20.48.160.218:30666] File does not exist: /usr/local/apache/htdocs/suspended-page/file17.php
[Sat Nov 15 01:44:55.254512 2025] [:error] [pid 18513:tid 18540] [client 20.48.160.218:30666] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Nov 15 01:44:55.475828 2025] [:error] [pid 18513:tid 18537] [client 20.48.160.218:30666] File does not exist: /usr/local/apache/htdocs/suspended-page/blue.php
[Sat Nov 15 01:44:55.767622 2025] [:error] [pid 18513:tid 18524] [client 20.48.160.218:30666] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Sat Nov 15 01:44:55.976505 2025] [:error] [pid 18513:tid 18520] [client 20.48.160.218:30666] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Sat Nov 15 01:44:56.198642 2025] [:error] [pid 18513:tid 18525] [client 20.48.160.218:30666] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sat Nov 15 01:44:56.408143 2025] [:error] [pid 18513:tid 18533] [client 20.48.160.218:30666] File does not exist: /usr/local/apache/htdocs/suspended-page/sh.php
[Sat Nov 15 01:44:56.762724 2025] [:error] [pid 18513:tid 18541] [client 20.48.160.218:30666] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sat Nov 15 01:44:56.972224 2025] [:error] [pid 18513:tid 18530] [client 20.48.160.218:30666] File does not exist: /usr/local/apache/htdocs/suspended-page/thai.php
[Sat Nov 15 01:44:57.333427 2025] [:error] [pid 18513:tid 18532] [client 20.48.160.218:30666] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/filei.php"] [unique_id "aRdqmfc94upQFzRWlUnQAgAAAE4"]
[Sat Nov 15 01:44:58.365456 2025] [:error] [pid 45908:tid 45954] [client 20.48.160.218:30571] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/filei.php"] [unique_id "aRdqmmWG19mWwZX7KatpHQAAABA"]
[Sat Nov 15 01:44:59.149255 2025] [:error] [pid 18513:tid 18522] [client 20.48.160.218:30566] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/filei.php"] [unique_id "aRdqm_c94upQFzRWlUnQCwAAAEQ"]
[Sat Nov 15 01:45:00.043984 2025] [:error] [pid 45909:tid 45965] [client 20.48.160.218:30577] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/filei.php"] [unique_id "aRdqnMZqItrYybG86kidYwAAAcA"]
[Sat Nov 15 01:45:01.494140 2025] [:error] [pid 45909:tid 45972] [client 20.48.160.218:30670] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/v2.php"] [unique_id "aRdqncZqItrYybG86kidZQAAAcc"]
[Sat Nov 15 01:45:02.708509 2025] [:error] [pid 45909:tid 45966] [client 20.48.160.218:30564] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/v2.php"] [unique_id "aRdqnsZqItrYybG86kidZwAAAcE"]
[Sat Nov 15 01:45:04.213539 2025] [:error] [pid 45909:tid 45969] [client 20.48.160.218:30533] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/v2.php"] [unique_id "aRdqoMZqItrYybG86kidawAAAcQ"]
[Sat Nov 15 01:45:06.671994 2025] [:error] [pid 45995:tid 46019] [client 20.48.160.218:30582] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/v2.php"] [unique_id "aRdqosfhZrb6EV4SvFvKEAAAAhM"]
[Sat Nov 15 01:45:07.760734 2025] [:error] [pid 18513:tid 18518] [client 20.48.160.218:30546] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aRdqo_c94upQFzRWlUnQMQAAAEA"]
[Sat Nov 15 01:45:08.747451 2025] [:error] [pid 45907:tid 45925] [client 20.48.160.218:30581] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aRdqpFAqmYxCpnT9gJGLWgAAAU4"]
[Sat Nov 15 01:45:09.407016 2025] [:error] [pid 45907:tid 45932] [client 20.48.160.218:30548] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aRdqpVAqmYxCpnT9gJGLWwAAAVU"]
[Sat Nov 15 01:45:11.237837 2025] [:error] [pid 45907:tid 45927] [client 20.48.160.218:30550] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aRdqp1AqmYxCpnT9gJGLXgAAAVA"]
[Sat Nov 15 01:45:12.393226 2025] [:error] [pid 45907:tid 45935] [client 20.48.160.218:30585] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aRdqqFAqmYxCpnT9gJGLZAAAAVg"]
[Sat Nov 15 01:45:14.720499 2025] [:error] [pid 18513:tid 18542] [client 20.48.160.218:30573] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aRdqqvc94upQFzRWlUnQTAAAAFg"]
[Sat Nov 15 01:45:17.179230 2025] [:error] [pid 45909:tid 45972] [client 20.48.160.218:30540] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aRdqrcZqItrYybG86kidjQAAAcc"]
[Sat Nov 15 01:45:18.376244 2025] [:error] [pid 45909:tid 45966] [client 20.48.160.218:30539] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aRdqrsZqItrYybG86kidjwAAAcE"]
[Sat Nov 15 01:45:19.656359 2025] [:error] [pid 45909:tid 45986] [client 20.48.160.218:30551] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/info.php"] [unique_id "aRdqr8ZqItrYybG86kidkwAAAdU"]
[Sat Nov 15 01:45:21.202456 2025] [:error] [pid 45907:tid 45920] [client 20.48.160.218:30567] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/info.php"] [unique_id "aRdqsVAqmYxCpnT9gJGLkQAAAUk"]
[Sat Nov 15 01:45:22.405517 2025] [:error] [pid 45995:tid 46005] [client 20.48.160.218:30568] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/info.php"] [unique_id "aRdqssfhZrb6EV4SvFvKNAAAAgU"]
[Sat Nov 15 01:45:23.196952 2025] [:error] [pid 18513:tid 18533] [client 20.48.160.218:30662] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/info.php"] [unique_id "aRdqs_c94upQFzRWlUnQcwAAAE8"]
[Sat Nov 15 01:45:24.859808 2025] [:error] [pid 18513:tid 18521] [client 20.48.160.218:30529] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ee.php"] [unique_id "aRdqtPc94upQFzRWlUnQdgAAAEM"]
[Sat Nov 15 01:45:25.904963 2025] [:error] [pid 45995:tid 46019] [client 20.48.160.218:30671] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ee.php"] [unique_id "aRdqtcfhZrb6EV4SvFvKPAAAAhM"]
[Sat Nov 15 01:45:27.039711 2025] [:error] [pid 45995:tid 46005] [client 20.48.160.218:30565] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ee.php"] [unique_id "aRdqt8fhZrb6EV4SvFvKQAAAAgU"]
[Sat Nov 15 01:45:28.938653 2025] [:error] [pid 45909:tid 45977] [client 20.48.160.218:30667] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ee.php"] [unique_id "aRdquMZqItrYybG86kidoAAAAcw"]
[Sat Nov 15 01:45:29.909815 2025] [:error] [pid 18513:tid 18525] [client 20.48.160.218:30607] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/rsnu.php"] [unique_id "aRdqufc94upQFzRWlUnQewAAAEc"]
[Sat Nov 15 01:45:30.991206 2025] [:error] [pid 45909:tid 45983] [client 20.48.160.218:30672] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/rsnu.php"] [unique_id "aRdqusZqItrYybG86kidpQAAAdI"]
[Sat Nov 15 01:45:32.989114 2025] [:error] [pid 45908:tid 45961] [client 20.48.160.218:30599] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/rsnu.php"] [unique_id "aRdqvGWG19mWwZX7KatpTgAAABc"]
[Sat Nov 15 01:45:34.123531 2025] [:error] [pid 45908:tid 45949] [client 20.48.160.218:30562] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/rsnu.php"] [unique_id "aRdqvmWG19mWwZX7KatpUwAAAAs"]
[Sat Nov 15 01:45:35.691057 2025] [:error] [pid 45907:tid 45917] [client 20.48.160.218:30563] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/x4.php"] [unique_id "aRdqv1AqmYxCpnT9gJGLnwAAAUY"]
[Sat Nov 15 01:45:36.451000 2025] [:error] [pid 18513:tid 18541] [client 20.48.160.218:30668] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/x4.php"] [unique_id "aRdqwPc94upQFzRWlUnQhQAAAFc"]
[Sat Nov 15 01:45:37.388895 2025] [:error] [pid 18513:tid 18539] [client 20.48.160.218:30682] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/x4.php"] [unique_id "aRdqwfc94upQFzRWlUnQiwAAAFU"]
[Sat Nov 15 01:45:38.430219 2025] [:error] [pid 45907:tid 45935] [client 20.48.160.218:30556] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/x4.php"] [unique_id "aRdqwlAqmYxCpnT9gJGLpAAAAVg"]
[Sat Nov 15 01:45:39.133757 2025] [:error] [pid 45909:tid 45983] [client 20.48.160.218:30669] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kk.php"] [unique_id "aRdqw8ZqItrYybG86kidrAAAAdI"]
[Sat Nov 15 01:45:40.126991 2025] [:error] [pid 45907:tid 45912] [client 20.48.160.218:30547] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kk.php"] [unique_id "aRdqxFAqmYxCpnT9gJGLqAAAAUE"]
[Sat Nov 15 01:45:41.472148 2025] [:error] [pid 18513:tid 18518] [client 20.48.160.218:30583] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kk.php"] [unique_id "aRdqxfc94upQFzRWlUnQnQAAAEA"]
[Sat Nov 15 01:45:43.431666 2025] [:error] [pid 45907:tid 45926] [client 20.48.160.218:30659] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kk.php"] [unique_id "aRdqx1AqmYxCpnT9gJGLqwAAAU8"]
[Sat Nov 15 01:45:44.745707 2025] [:error] [pid 18513:tid 18521] [client 20.48.160.218:30711] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless3.php"] [unique_id "aRdqyPc94upQFzRWlUnQpgAAAEM"]
[Sat Nov 15 01:45:45.457031 2025] [:error] [pid 45909:tid 45987] [client 20.48.160.218:30587] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless3.php"] [unique_id "aRdqycZqItrYybG86kidrgAAAdY"]
[Sat Nov 15 01:45:46.191799 2025] [:error] [pid 45908:tid 45961] [client 20.48.160.218:30657] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless3.php"] [unique_id "aRdqymWG19mWwZX7KatpYAAAABc"]
[Sat Nov 15 01:45:47.562629 2025] [:error] [pid 45908:tid 45962] [client 20.48.160.218:30675] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless3.php"] [unique_id "aRdqy2WG19mWwZX7KatpZQAAABg"]
[Sat Nov 15 01:45:49.531327 2025] [:error] [pid 45909:tid 45972] [client 20.48.160.218:30532] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/456.php"] [unique_id "aRdqzcZqItrYybG86kidswAAAcc"]
[Sat Nov 15 01:45:50.312454 2025] [:error] [pid 45909:tid 45981] [client 20.48.160.218:30702] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/456.php"] [unique_id "aRdqzsZqItrYybG86kidtQAAAdA"]
[Sat Nov 15 01:45:51.446805 2025] [:error] [pid 45907:tid 45928] [client 20.48.160.218:30678] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/456.php"] [unique_id "aRdqz1AqmYxCpnT9gJGL0wAAAVE"]
[Sat Nov 15 01:45:52.462117 2025] [:error] [pid 45995:tid 46008] [client 20.48.160.218:30601] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/456.php"] [unique_id "aRdq0MfhZrb6EV4SvFvKYAAAAgg"]
[Sat Nov 15 01:45:53.404464 2025] [:error] [pid 45909:tid 45988] [client 20.48.160.218:30658] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "aRdq0cZqItrYybG86kiduwAAAdc"]
[Sat Nov 15 01:45:54.329655 2025] [:error] [pid 45909:tid 45971] [client 20.48.160.218:30468] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "aRdq0sZqItrYybG86kidwAAAAcY"]
[Sat Nov 15 01:45:55.662092 2025] [:error] [pid 45908:tid 45952] [client 20.48.160.218:30615] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "aRdq02WG19mWwZX7KatpkQAAAA4"]
[Sat Nov 15 01:45:56.512874 2025] [:error] [pid 18513:tid 18533] [client 20.48.160.218:30541] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Sat Nov 15 01:45:56.753830 2025] [:error] [pid 18513:tid 18519] [client 20.48.160.218:30541] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sat Nov 15 01:45:56.979471 2025] [:error] [pid 18513:tid 18518] [client 20.48.160.218:30541] File does not exist: /usr/local/apache/htdocs/suspended-page/naxc.php
[Sat Nov 15 01:45:57.198956 2025] [:error] [pid 18513:tid 18526] [client 20.48.160.218:30541] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Sat Nov 15 01:45:57.409314 2025] [:error] [pid 18513:tid 18528] [client 20.48.160.218:30541] File does not exist: /usr/local/apache/htdocs/suspended-page/lc.php
[Sat Nov 15 01:45:57.638628 2025] [:error] [pid 18513:tid 18520] [client 20.48.160.218:30541] File does not exist: /usr/local/apache/htdocs/suspended-page/mo.php
[Sat Nov 15 01:45:58.045883 2025] [:error] [pid 18513:tid 18525] [client 20.48.160.218:30541] File does not exist: /usr/local/apache/htdocs/suspended-page/nij.php
[Sat Nov 15 01:45:58.266786 2025] [:error] [pid 18513:tid 18532] [client 20.48.160.218:30541] File does not exist: /usr/local/apache/htdocs/suspended-page/gfile.php
[Sat Nov 15 01:45:58.507125 2025] [:error] [pid 18513:tid 18523] [client 20.48.160.218:30541] File does not exist: /usr/local/apache/htdocs/suspended-page/xpas2.php
[Sat Nov 15 01:45:58.716314 2025] [:error] [pid 18513:tid 18538] [client 20.48.160.218:30541] [client 20.48.160.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "aRdq1vc94upQFzRWlUnQ0AAAAFQ"]
[Sat Nov 15 01:45:59.834615 2025] [:error] [pid 18513:tid 18527] [client 20.48.160.218:30589] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sat Nov 15 01:46:00.049851 2025] [:error] [pid 18513:tid 18531] [client 20.48.160.218:30589] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Sat Nov 15 01:46:00.257923 2025] [:error] [pid 18513:tid 18534] [client 20.48.160.218:30589] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alam.php"] [unique_id "aRdq2Pc94upQFzRWlUnQ1AAAAFA"]
[Sat Nov 15 01:46:01.574224 2025] [:error] [pid 45995:tid 46005] [client 20.48.160.218:30588] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alam.php"] [unique_id "aRdq2cfhZrb6EV4SvFvKbQAAAgU"]
[Sat Nov 15 01:46:03.150441 2025] [:error] [pid 18513:tid 18540] [client 20.48.160.218:30530] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alam.php"] [unique_id "aRdq2_c94upQFzRWlUnQ2wAAAFY"]
[Sat Nov 15 01:46:04.088037 2025] [:error] [pid 45995:tid 46000] [client 20.48.160.218:30552] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alam.php"] [unique_id "aRdq3MfhZrb6EV4SvFvKcwAAAgA"]
[Sat Nov 15 01:46:04.950618 2025] [:error] [pid 18513:tid 18526] [client 20.48.160.218:30676] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/700.php"] [unique_id "aRdq3Pc94upQFzRWlUnQ5AAAAEg"]
[Sat Nov 15 01:46:06.126785 2025] [:error] [pid 18513:tid 18532] [client 20.48.160.218:30717] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/700.php"] [unique_id "aRdq3vc94upQFzRWlUnQ5QAAAE4"]
[Sat Nov 15 01:46:07.101732 2025] [:error] [pid 45909:tid 45969] [client 20.48.160.218:30538] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/700.php"] [unique_id "aRdq38ZqItrYybG86kidzgAAAcQ"]
[Sat Nov 15 01:46:08.113113 2025] [:error] [pid 18513:tid 18533] [client 20.48.160.218:30544] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/700.php"] [unique_id "aRdq4Pc94upQFzRWlUnQ6QAAAE8"]
[Sat Nov 15 01:46:09.115871 2025] [:error] [pid 45909:tid 45985] [client 20.48.160.218:30706] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fifi.php"] [unique_id "aRdq4cZqItrYybG86kid0AAAAdQ"]
[Sat Nov 15 01:46:10.501463 2025] [:error] [pid 45908:tid 45950] [client 20.48.160.218:30656] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fifi.php"] [unique_id "aRdq4mWG19mWwZX7KatppQAAAAw"]
[Sat Nov 15 01:46:11.094374 2025] [:error] [pid 45907:tid 45923] [client 20.48.160.218:30684] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fifi.php"] [unique_id "aRdq41AqmYxCpnT9gJGL5QAAAUw"]
[Sat Nov 15 01:46:12.339161 2025] [:error] [pid 18513:tid 18534] [client 20.48.160.218:30603] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fifi.php"] [unique_id "aRdq5Pc94upQFzRWlUnQ8QAAAFA"]
[Sat Nov 15 01:46:13.810858 2025] [:error] [pid 45907:tid 45916] [client 20.48.160.218:30528] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-signup.php"] [unique_id "aRdq5VAqmYxCpnT9gJGL6AAAAUU"]
[Sat Nov 15 01:46:15.038824 2025] [:error] [pid 45995:tid 46022] [client 20.48.160.218:30674] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-signup.php"] [unique_id "aRdq58fhZrb6EV4SvFvKgwAAAhY"]
[Sat Nov 15 01:46:16.320124 2025] [:error] [pid 18513:tid 18529] [client 20.48.160.218:30663] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-signup.php"] [unique_id "aRdq6Pc94upQFzRWlUnQ-gAAAEs"]
[Sat Nov 15 01:46:17.561965 2025] [:error] [pid 45909:tid 45989] [client 20.48.160.218:30596] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-signup.php"] [unique_id "aRdq6cZqItrYybG86kid1QAAAdg"]
[Sat Nov 15 01:46:18.722094 2025] [:error] [pid 18513:tid 18524] [client 20.48.160.218:30660] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gold.php"] [unique_id "aRdq6vc94upQFzRWlUnQ_QAAAEY"]
[Sat Nov 15 01:46:20.207121 2025] [:error] [pid 45908:tid 45955] [client 20.48.160.218:30580] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gold.php"] [unique_id "aRdq7GWG19mWwZX7KatprQAAABE"]
[Sat Nov 15 01:46:22.740718 2025] [:error] [pid 45907:tid 45923] [client 20.48.160.218:30673] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gold.php"] [unique_id "aRdq7lAqmYxCpnT9gJGL7gAAAUw"]
[Sat Nov 15 01:46:23.550433 2025] [:error] [pid 45908:tid 45948] [client 20.48.160.218:30679] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gold.php"] [unique_id "aRdq72WG19mWwZX7KatpswAAAAo"]
[Sat Nov 15 01:46:24.978538 2025] [:error] [pid 45908:tid 45943] [client 20.48.160.218:30595] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/blurbs8.php"] [unique_id "aRdq8GWG19mWwZX7KatptQAAAAU"]
[Sat Nov 15 01:46:25.836995 2025] [:error] [pid 45907:tid 45927] [client 20.48.160.218:30614] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/blurbs8.php"] [unique_id "aRdq8VAqmYxCpnT9gJGL8QAAAVA"]
[Sat Nov 15 01:46:29.287074 2025] [:error] [pid 18513:tid 18526] [client 20.48.160.218:30606] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/blurbs8.php"] [unique_id "aRdq9fc94upQFzRWlUnRCQAAAEg"]
[Sat Nov 15 01:46:29.856381 2025] [:error] [pid 18513:tid 18528] [client 20.48.160.218:30624] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/blurbs8.php"] [unique_id "aRdq9fc94upQFzRWlUnRCgAAAEo"]
[Sat Nov 15 01:46:31.082625 2025] [:error] [pid 45909:tid 45966] [client 20.48.160.218:30611] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sid.php"] [unique_id "aRdq98ZqItrYybG86kid5gAAAcE"]
[Sat Nov 15 01:46:33.341305 2025] [:error] [pid 45907:tid 45932] [client 20.48.160.218:30537] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sid.php"] [unique_id "aRdq-VAqmYxCpnT9gJGMAwAAAVU"]
[Sat Nov 15 01:46:34.427453 2025] [:error] [pid 45909:tid 45970] [client 20.48.160.218:30561] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sid.php"] [unique_id "aRdq-sZqItrYybG86kid5wAAAcU"]
[Sat Nov 15 01:46:35.839982 2025] [:error] [pid 45908:tid 45956] [client 20.48.160.218:30471] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sid.php"] [unique_id "aRdq-2WG19mWwZX7KatpyQAAABI"]
[Sat Nov 15 01:46:39.298692 2025] [:error] [pid 45995:tid 46007] [client 20.48.160.218:30718] [client 20.48.160.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aRdq_8fhZrb6EV4SvFvKnwAAAgc"]
[Sat Nov 15 01:46:40.356744 2025] [:error] [pid 45907:tid 45921] [client 20.48.160.218:30621] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/unity.php"] [unique_id "aRdrAFAqmYxCpnT9gJGMBgAAAUo"]
[Sat Nov 15 01:46:40.995987 2025] [:error] [pid 18513:tid 18519] [client 20.48.160.218:30696] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/unity.php"] [unique_id "aRdrAPc94upQFzRWlUnRFgAAAEE"]
[Sat Nov 15 01:46:42.305831 2025] [:error] [pid 18513:tid 18520] [client 20.48.160.218:30634] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/unity.php"] [unique_id "aRdrAvc94upQFzRWlUnRGAAAAEI"]
[Sat Nov 15 01:46:43.280399 2025] [:error] [pid 18513:tid 18532] [client 20.48.160.218:30592] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/unity.php"] [unique_id "aRdrA_c94upQFzRWlUnRHAAAAE4"]
[Sat Nov 15 01:46:44.059674 2025] [:error] [pid 18513:tid 18534] [client 20.48.160.218:30693] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aRdrBPc94upQFzRWlUnRHQAAAFA"]
[Sat Nov 15 01:46:45.612401 2025] [:error] [pid 45995:tid 46016] [client 20.48.160.218:30709] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aRdrBcfhZrb6EV4SvFvKsgAAAhA"]
[Sat Nov 15 01:46:46.341358 2025] [:error] [pid 18513:tid 18542] [client 20.48.160.218:30554] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aRdrBvc94upQFzRWlUnRIAAAAFg"]
[Sat Nov 15 01:46:47.706959 2025] [:error] [pid 18513:tid 18538] [client 20.48.160.218:30542] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aRdrB_c94upQFzRWlUnRIQAAAFQ"]
[Sat Nov 15 01:46:49.970494 2025] [:error] [pid 18513:tid 18518] [client 20.48.160.218:30703] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cf.php"] [unique_id "aRdrCfc94upQFzRWlUnRJwAAAEA"]
[Sat Nov 15 01:46:52.228533 2025] [:error] [pid 45995:tid 46018] [client 20.48.160.218:30569] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cf.php"] [unique_id "aRdrDMfhZrb6EV4SvFvKxQAAAhI"]
[Sat Nov 15 01:46:53.640176 2025] [:error] [pid 45995:tid 46000] [client 20.48.160.218:30654] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cf.php"] [unique_id "aRdrDcfhZrb6EV4SvFvKygAAAgA"]
[Sat Nov 15 01:46:54.827389 2025] [:error] [pid 45908:tid 45962] [client 20.48.160.218:30635] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cf.php"] [unique_id "aRdrDmWG19mWwZX7Katp2wAAABg"]
[Sat Nov 15 01:46:56.904266 2025] [:error] [pid 45909:tid 45969] [client 20.48.160.218:30591] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/get.php"] [unique_id "aRdrEMZqItrYybG86kid-QAAAcQ"]
[Sat Nov 15 01:46:57.612347 2025] [:error] [pid 45907:tid 45918] [client 20.48.160.218:30677] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/get.php"] [unique_id "aRdrEVAqmYxCpnT9gJGMFwAAAUc"]
[Sat Nov 15 01:46:58.771275 2025] [:error] [pid 45908:tid 45951] [client 20.48.160.218:30535] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/get.php"] [unique_id "aRdrEmWG19mWwZX7Katp4AAAAA0"]
[Sat Nov 15 01:47:00.588024 2025] [:error] [pid 45907:tid 45914] [client 20.48.160.218:30579] File does not exist: /usr/local/apache/htdocs/suspended-page/get.php
[Sat Nov 15 01:47:00.797481 2025] [:error] [pid 45907:tid 45934] [client 20.48.160.218:30579] File does not exist: /usr/local/apache/htdocs/suspended-page/v3.php
[Sat Nov 15 01:47:01.327415 2025] [:error] [pid 45907:tid 45917] [client 20.48.160.218:30579] File does not exist: /usr/local/apache/htdocs/suspended-page/wteed.php
[Sat Nov 15 01:47:01.539592 2025] [:error] [pid 45907:tid 45915] [client 20.48.160.218:30579] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php
[Sat Nov 15 01:47:01.984614 2025] [:error] [pid 45907:tid 45923] [client 20.48.160.218:30579] File does not exist: /usr/local/apache/htdocs/suspended-page/ntgn.php
[Sat Nov 15 01:47:02.202496 2025] [:error] [pid 45907:tid 45918] [client 20.48.160.218:30579] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat Nov 15 01:47:02.574187 2025] [:error] [pid 45907:tid 45927] [client 20.48.160.218:30579] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sat Nov 15 01:47:02.793105 2025] [:error] [pid 45907:tid 45912] [client 20.48.160.218:30579] File does not exist: /usr/local/apache/htdocs/suspended-page/7h.php
[Sat Nov 15 01:47:03.063339 2025] [:error] [pid 45907:tid 45932] [client 20.48.160.218:30579] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Sat Nov 15 01:47:03.273443 2025] [:error] [pid 45907:tid 45933] [client 20.48.160.218:30579] File does not exist: /usr/local/apache/htdocs/suspended-page/co.php
[Sat Nov 15 01:47:03.479635 2025] [:error] [pid 45907:tid 45926] [client 20.48.160.218:30579] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mjq.php"] [unique_id "aRdrF1AqmYxCpnT9gJGMLQAAAU8"]
[Sat Nov 15 01:47:04.277289 2025] [:error] [pid 18513:tid 18538] [client 20.48.160.218:30704] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mjq.php"] [unique_id "aRdrGPc94upQFzRWlUnRRwAAAFQ"]
[Sat Nov 15 01:47:06.431013 2025] [:error] [pid 18513:tid 18519] [client 20.48.160.218:30623] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mjq.php"] [unique_id "aRdrGvc94upQFzRWlUnRUgAAAEE"]
[Sat Nov 15 01:47:07.278386 2025] [:error] [pid 45908:tid 45961] [client 20.48.160.218:30627] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mjq.php"] [unique_id "aRdrG2WG19mWwZX7Katp5QAAABc"]
[Sat Nov 15 01:47:08.283435 2025] [:error] [pid 45908:tid 45940] [client 20.48.160.218:30612] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/rdfe.php"] [unique_id "aRdrHGWG19mWwZX7Katp5wAAAAI"]
[Sat Nov 15 01:47:09.279097 2025] [:error] [pid 45908:tid 45960] [client 20.48.160.218:30710] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/rdfe.php"] [unique_id "aRdrHWWG19mWwZX7Katp7AAAABY"]
[Sat Nov 15 01:47:11.140286 2025] [:error] [pid 18513:tid 18529] [client 20.48.160.218:30653] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/rdfe.php"] [unique_id "aRdrH_c94upQFzRWlUnRYgAAAEs"]
[Sat Nov 15 01:47:11.947770 2025] [:error] [pid 18513:tid 18520] [client 20.48.160.218:30642] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/rdfe.php"] [unique_id "aRdrH_c94upQFzRWlUnRZAAAAEI"]
[Sat Nov 15 01:47:13.168965 2025] [:error] [pid 45909:tid 45968] [client 20.48.160.218:30576] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xojryvch.php"] [unique_id "aRdrIcZqItrYybG86kieCwAAAcM"]
[Sat Nov 15 01:47:14.019903 2025] [:error] [pid 45995:tid 46006] [client 20.48.160.218:30531] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xojryvch.php"] [unique_id "aRdrIsfhZrb6EV4SvFvK3wAAAgY"]
[Sat Nov 15 01:47:16.935114 2025] [:error] [pid 45908:tid 45952] [client 20.48.160.218:30701] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xojryvch.php"] [unique_id "aRdrJGWG19mWwZX7Katp9gAAAA4"]
[Sat Nov 15 01:47:17.668162 2025] [:error] [pid 18513:tid 18519] [client 20.48.160.218:30505] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xojryvch.php"] [unique_id "aRdrJfc94upQFzRWlUnRdQAAAEE"]
[Sat Nov 15 01:47:18.778309 2025] [:error] [pid 45995:tid 46021] [client 20.48.160.218:30694] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/reyna.php"] [unique_id "aRdrJsfhZrb6EV4SvFvK4wAAAhU"]
[Sat Nov 15 01:47:19.580172 2025] [:error] [pid 45995:tid 46014] [client 20.48.160.218:30712] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/reyna.php"] [unique_id "aRdrJ8fhZrb6EV4SvFvK5gAAAg4"]
[Sat Nov 15 01:47:20.575792 2025] [:error] [pid 45995:tid 46023] [client 20.48.160.218:30602] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/reyna.php"] [unique_id "aRdrKMfhZrb6EV4SvFvK6QAAAhc"]
[Sat Nov 15 01:47:21.794874 2025] [:error] [pid 18513:tid 18533] [client 20.48.160.218:30584] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/reyna.php"] [unique_id "aRdrKfc94upQFzRWlUnRfgAAAE8"]
[Sat Nov 15 01:47:24.027501 2025] [:error] [pid 18513:tid 18522] [client 20.48.160.218:30610] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/css/index.php"] [unique_id "aRdrLPc94upQFzRWlUnRggAAAEQ"]
[Sat Nov 15 01:47:25.528453 2025] [:error] [pid 18513:tid 18540] [client 20.48.160.218:30620] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/css/index.php"] [unique_id "aRdrLfc94upQFzRWlUnRigAAAFY"]
[Sat Nov 15 01:47:26.375685 2025] [:error] [pid 45908:tid 45941] [client 20.48.160.218:30417] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/css/index.php"] [unique_id "aRdrLmWG19mWwZX7KatqAAAAAAM"]
[Sat Nov 15 01:47:27.066708 2025] [:error] [pid 45908:tid 45952] [client 20.48.160.218:30578] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/css/index.php"] [unique_id "aRdrL2WG19mWwZX7KatqBgAAAA4"]
[Sat Nov 15 01:47:28.971252 2025] [:error] [pid 18513:tid 18536] [client 20.48.160.218:30691] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/unzip.php"] [unique_id "aRdrMPc94upQFzRWlUnRjwAAAFI"]
[Sat Nov 15 01:47:29.840833 2025] [:error] [pid 45907:tid 45912] [client 20.48.160.218:30697] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/unzip.php"] [unique_id "aRdrMVAqmYxCpnT9gJGMOAAAAUE"]
[Sat Nov 15 01:47:30.940442 2025] [:error] [pid 45908:tid 45942] [client 20.48.160.218:30714] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/unzip.php"] [unique_id "aRdrMmWG19mWwZX7KatqCAAAAAQ"]
[Sat Nov 15 01:47:31.808371 2025] [:error] [pid 45907:tid 45928] [client 20.48.160.218:30715] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/unzip.php"] [unique_id "aRdrM1AqmYxCpnT9gJGMOwAAAVE"]
[Sat Nov 15 01:47:32.361289 2025] [:error] [pid 45907:tid 45926] [client 20.48.160.218:30509] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cool.php"] [unique_id "aRdrNFAqmYxCpnT9gJGMPAAAAU8"]
[Sat Nov 15 01:47:33.711857 2025] [:error] [pid 18513:tid 18541] [client 20.48.160.218:30549] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cool.php"] [unique_id "aRdrNfc94upQFzRWlUnRmwAAAFc"]
[Sat Nov 15 01:47:35.222793 2025] [:error] [pid 18513:tid 18522] [client 20.48.160.218:30687] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cool.php"] [unique_id "aRdrN_c94upQFzRWlUnRnAAAAEQ"]
[Sat Nov 15 01:47:36.385721 2025] [:error] [pid 45907:tid 45915] [client 20.48.160.218:30570] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cool.php"] [unique_id "aRdrOFAqmYxCpnT9gJGMQwAAAUQ"]
[Sat Nov 15 01:47:37.180842 2025] [:error] [pid 18513:tid 18540] [client 20.48.160.218:30600] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/xin1.php"] [unique_id "aRdrOfc94upQFzRWlUnRoQAAAFY"]
[Sat Nov 15 01:47:38.004798 2025] [:error] [pid 45995:tid 46013] [client 20.48.160.218:30689] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/xin1.php"] [unique_id "aRdrOsfhZrb6EV4SvFvK_AAAAg0"]
[Sat Nov 15 01:47:39.228441 2025] [:error] [pid 45908:tid 45940] [client 20.48.160.218:30553] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/xin1.php"] [unique_id "aRdrO2WG19mWwZX7KatqEQAAAAI"]
[Sat Nov 15 01:47:40.257250 2025] [:error] [pid 45909:tid 45981] [client 20.48.160.218:30560] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/xin1.php"] [unique_id "aRdrPMZqItrYybG86kieGQAAAdA"]
[Sat Nov 15 01:47:41.151229 2025] [:error] [pid 45907:tid 45934] [client 20.48.160.218:30545] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aRdrPVAqmYxCpnT9gJGMSgAAAVc"]
[Sat Nov 15 01:47:42.337808 2025] [:error] [pid 45909:tid 45985] [client 20.48.160.218:30628] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aRdrPsZqItrYybG86kieHgAAAdQ"]
[Sat Nov 15 01:47:44.031992 2025] [:error] [pid 18513:tid 18524] [client 20.48.160.218:30572] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aRdrQPc94upQFzRWlUnRrwAAAEY"]
[Sat Nov 15 01:47:46.267830 2025] [:error] [pid 45995:tid 46006] [client 20.48.160.218:30557] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aRdrQsfhZrb6EV4SvFvLCAAAAgY"]
[Sat Nov 15 01:47:47.202296 2025] [:error] [pid 45908:tid 45939] [client 20.48.160.218:30590] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w3llstore.php"] [unique_id "aRdrQ2WG19mWwZX7KatqGwAAAAE"]
[Sat Nov 15 01:47:48.558232 2025] [:error] [pid 45909:tid 45975] [client 20.48.160.218:30649] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w3llstore.php"] [unique_id "aRdrRMZqItrYybG86kieKwAAAco"]
[Sat Nov 15 01:47:49.504323 2025] [:error] [pid 45907:tid 45914] [client 20.48.160.218:30681] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w3llstore.php"] [unique_id "aRdrRVAqmYxCpnT9gJGMUAAAAUM"]
[Sat Nov 15 01:47:51.008997 2025] [:error] [pid 45909:tid 45979] [client 20.48.160.218:30470] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w3llstore.php"] [unique_id "aRdrR8ZqItrYybG86kieLQAAAc4"]
[Sat Nov 15 01:47:52.123139 2025] [:error] [pid 45907:tid 45925] [client 20.48.160.218:30645] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aua.php"] [unique_id "aRdrSFAqmYxCpnT9gJGMVAAAAU4"]
[Sat Nov 15 01:47:53.277843 2025] [:error] [pid 18513:tid 18537] [client 20.48.160.218:30613] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aua.php"] [unique_id "aRdrSfc94upQFzRWlUnRuAAAAFM"]
[Sat Nov 15 01:47:54.454952 2025] [:error] [pid 45908:tid 45943] [client 20.48.160.218:30683] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aua.php"] [unique_id "aRdrSmWG19mWwZX7KatqKgAAAAU"]
[Sat Nov 15 01:47:55.930141 2025] [:error] [pid 45995:tid 46019] [client 20.48.160.218:30664] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aua.php"] [unique_id "aRdrS8fhZrb6EV4SvFvLFwAAAhM"]
[Sat Nov 15 01:47:57.203044 2025] [:error] [pid 45907:tid 45920] [client 20.48.160.218:30661] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/c4.php"] [unique_id "aRdrTVAqmYxCpnT9gJGMVwAAAUk"]
[Sat Nov 15 01:47:58.160138 2025] [:error] [pid 45995:tid 46016] [client 20.48.160.218:30698] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/c4.php"] [unique_id "aRdrTsfhZrb6EV4SvFvLHgAAAhA"]
[Sat Nov 15 01:47:59.427561 2025] [:error] [pid 18513:tid 18523] [client 20.48.160.218:30626] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/c4.php"] [unique_id "aRdrT_c94upQFzRWlUnRwwAAAEU"]
[Sat Nov 15 01:48:00.423623 2025] [:error] [pid 45995:tid 46002] [client 20.48.160.218:30640] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/c4.php"] [unique_id "aRdrUMfhZrb6EV4SvFvLIQAAAgI"]
[Sat Nov 15 01:48:01.910673 2025] [:error] [pid 45995:tid 46010] [client 20.48.160.218:30490] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bu5.php"] [unique_id "aRdrUcfhZrb6EV4SvFvLJgAAAgo"]
[Sat Nov 15 01:48:04.992036 2025] [:error] [pid 45907:tid 45913] [client 20.48.160.218:30496] File does not exist: /usr/local/apache/htdocs/suspended-page/bu5.php
[Sat Nov 15 01:48:05.203907 2025] [:error] [pid 45907:tid 45914] [client 20.48.160.218:30496] File does not exist: /usr/local/apache/htdocs/suspended-page/lhh2.php
[Sat Nov 15 01:48:05.422565 2025] [:error] [pid 45907:tid 45933] [client 20.48.160.218:30496] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sat Nov 15 01:48:05.633835 2025] [:error] [pid 45907:tid 45921] [client 20.48.160.218:30496] File does not exist: /usr/local/apache/htdocs/suspended-page/aw.php
[Sat Nov 15 01:48:06.468211 2025] [:error] [pid 45907:tid 45925] [client 20.48.160.218:30496] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sat Nov 15 01:48:06.677435 2025] [:error] [pid 45907:tid 45928] [client 20.48.160.218:30496] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sat Nov 15 01:48:06.987006 2025] [:error] [pid 45907:tid 45922] [client 20.48.160.218:30496] File does not exist: /usr/local/apache/htdocs/suspended-page/Okxob.php
[Sat Nov 15 01:48:08.439361 2025] [:error] [pid 45907:tid 45922] [client 20.48.160.218:30496] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sat Nov 15 01:48:08.653429 2025] [:error] [pid 45907:tid 45935] [client 20.48.160.218:30496] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sat Nov 15 01:48:08.871705 2025] [:error] [pid 45907:tid 45912] [client 20.48.160.218:30496] File does not exist: /usr/local/apache/htdocs/suspended-page/ffile.php
[Sat Nov 15 01:48:09.083619 2025] [:error] [pid 45907:tid 45929] [client 20.48.160.218:30496] File does not exist: /usr/local/apache/htdocs/suspended-page/nxac.php
[Sat Nov 15 01:48:09.290201 2025] [:error] [pid 45907:tid 45924] [client 20.48.160.218:30496] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/thh.php"] [unique_id "aRdrWVAqmYxCpnT9gJGMcgAAAU0"]
[Sat Nov 15 01:48:10.144527 2025] [:error] [pid 45995:tid 46005] [client 20.48.160.218:30559] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/thh.php"] [unique_id "aRdrWsfhZrb6EV4SvFvLLQAAAgU"]
[Sat Nov 15 01:48:11.405415 2025] [:error] [pid 45907:tid 45923] [client 20.48.160.218:30598] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/thh.php"] [unique_id "aRdrW1AqmYxCpnT9gJGMdgAAAUw"]
[Sat Nov 15 01:48:12.850623 2025] [:error] [pid 45908:tid 45962] [client 20.48.160.218:30629] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/thh.php"] [unique_id "aRdrXGWG19mWwZX7KatqQwAAABg"]
[Sat Nov 15 01:48:14.023798 2025] [:error] [pid 18513:tid 18539] [client 20.48.160.218:30644] [client 20.48.160.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/buy.php"] [unique_id "aRdrXvc94upQFzRWlUnR3wAAAFU"]
[Sat Nov 15 01:48:15.108857 2025] [:error] [pid 45995:tid 46023] [client 20.48.160.218:30555] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/baxa1.phP8"] [unique_id "aRdrX8fhZrb6EV4SvFvLMwAAAhc"]
[Sat Nov 15 01:48:16.221259 2025] [:error] [pid 18513:tid 18538] [client 20.48.160.218:30686] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/baxa1.phP8"] [unique_id "aRdrYPc94upQFzRWlUnR4wAAAFQ"]
[Sat Nov 15 01:48:17.519107 2025] [:error] [pid 45909:tid 45987] [client 20.48.160.218:30655] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/baxa1.phP8"] [unique_id "aRdrYcZqItrYybG86kieRQAAAdY"]
[Sat Nov 15 01:48:18.397740 2025] [:error] [pid 45909:tid 45971] [client 20.48.160.218:30617] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/baxa1.phP8"] [unique_id "aRdrYsZqItrYybG86kieSAAAAcY"]
[Sat Nov 15 01:48:19.910303 2025] [:error] [pid 45909:tid 45977] [client 20.48.160.218:30558] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "aRdrY8ZqItrYybG86kieSQAAAcw"]
[Sat Nov 15 01:48:20.699728 2025] [:error] [pid 45907:tid 45920] [client 20.48.160.218:30489] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "aRdrZFAqmYxCpnT9gJGMiAAAAUk"]
[Sat Nov 15 01:48:21.341879 2025] [:error] [pid 45909:tid 45980] [client 20.48.160.218:30643] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "aRdrZcZqItrYybG86kieTAAAAc8"]
[Sat Nov 15 01:48:22.429482 2025] [:error] [pid 45995:tid 46023] [client 20.48.160.218:30652] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "aRdrZsfhZrb6EV4SvFvLPAAAAhc"]
[Sat Nov 15 01:48:23.441059 2025] [:error] [pid 18513:tid 18519] [client 20.48.160.218:30404] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fb.php"] [unique_id "aRdrZ_c94upQFzRWlUnR7gAAAEE"]
[Sat Nov 15 01:48:25.012288 2025] [:error] [pid 45909:tid 45978] [client 20.48.160.218:30476] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fb.php"] [unique_id "aRdracZqItrYybG86kieUAAAAc0"]
[Sat Nov 15 01:48:26.233386 2025] [:error] [pid 45995:tid 46001] [client 20.48.160.218:30498] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fb.php"] [unique_id "aRdrasfhZrb6EV4SvFvLQgAAAgE"]
[Sat Nov 15 01:48:27.903282 2025] [:error] [pid 45909:tid 45968] [client 20.48.160.218:30593] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fb.php"] [unique_id "aRdra8ZqItrYybG86kieUwAAAcM"]
[Sat Nov 15 01:48:28.950287 2025] [:error] [pid 45995:tid 46010] [client 20.48.160.218:30586] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aRdrbMfhZrb6EV4SvFvLQwAAAgo"]
[Sat Nov 15 01:48:30.241256 2025] [:error] [pid 45908:tid 45951] [client 20.48.160.218:30472] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aRdrbmWG19mWwZX7KatqWQAAAA0"]
[Sat Nov 15 01:48:31.854439 2025] [:error] [pid 45995:tid 46020] [client 20.48.160.218:30609] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aRdrb8fhZrb6EV4SvFvLSAAAAhQ"]
[Sat Nov 15 01:48:33.300878 2025] [:error] [pid 45907:tid 45923] [client 20.48.160.218:30690] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aRdrcVAqmYxCpnT9gJGMlAAAAUw"]
[Sat Nov 15 01:48:36.206402 2025] [:error] [pid 18513:tid 18522] [client 20.48.160.218:30695] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/slo.php"] [unique_id "aRdrdPc94upQFzRWlUnSCAAAAEQ"]
[Sat Nov 15 01:48:38.677726 2025] [:error] [pid 45995:tid 46016] [client 20.48.160.218:30719] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/slo.php"] [unique_id "aRdrdsfhZrb6EV4SvFvLWgAAAhA"]
[Sat Nov 15 01:48:40.523430 2025] [:error] [pid 45907:tid 45924] [client 20.48.160.218:30482] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/slo.php"] [unique_id "aRdreFAqmYxCpnT9gJGMrQAAAU0"]
[Sat Nov 15 01:48:41.238050 2025] [:error] [pid 45907:tid 45929] [client 20.48.160.218:30637] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/slo.php"] [unique_id "aRdreVAqmYxCpnT9gJGMswAAAVI"]
[Sat Nov 15 01:48:44.546192 2025] [:error] [pid 45995:tid 46024] [client 20.48.160.218:30597] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "aRdrfMfhZrb6EV4SvFvLYQAAAhg"]
[Sat Nov 15 01:48:45.763043 2025] [:error] [pid 45909:tid 45986] [client 20.48.160.218:30716] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "aRdrfcZqItrYybG86kiefQAAAdU"]
[Sat Nov 15 01:48:46.823087 2025] [:error] [pid 45908:tid 45961] [client 20.48.160.218:30700] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "aRdrfmWG19mWwZX7KatqgQAAABc"]
[Sat Nov 15 01:48:48.813311 2025] [:error] [pid 18513:tid 18526] [client 20.48.160.218:30708] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "aRdrgPc94upQFzRWlUnSNQAAAEg"]
[Sat Nov 15 01:48:49.841892 2025] [:error] [pid 45909:tid 45967] [client 20.48.160.218:30477] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "aRdrgcZqItrYybG86kiehAAAAcI"]
[Sat Nov 15 01:48:51.080712 2025] [:error] [pid 45909:tid 45988] [client 20.48.160.218:30688] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "aRdrg8ZqItrYybG86kiehwAAAdc"]
[Sat Nov 15 01:48:52.080462 2025] [:error] [pid 45995:tid 46007] [client 20.48.160.218:30465] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "aRdrhMfhZrb6EV4SvFvLcgAAAgc"]
[Sat Nov 15 01:48:53.112077 2025] [:error] [pid 45908:tid 45955] [client 20.48.160.218:30574] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "aRdrhWWG19mWwZX7KatqjgAAABE"]
[Sat Nov 15 01:48:55.552690 2025] [:error] [pid 45995:tid 46007] [client 20.48.160.218:30416] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/pridmag/db.php"] [unique_id "aRdrh8fhZrb6EV4SvFvLeAAAAgc"]
[Sat Nov 15 01:48:58.567927 2025] [:error] [pid 18513:tid 18534] [client 20.48.160.218:30516] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/pridmag/db.php"] [unique_id "aRdrivc94upQFzRWlUnSQQAAAFA"]
[Sat Nov 15 01:49:00.689616 2025] [:error] [pid 18513:tid 18533] [client 20.48.160.218:30486] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/pridmag/db.php"] [unique_id "aRdrjPc94upQFzRWlUnSSgAAAE8"]
[Sat Nov 15 01:49:01.538398 2025] [:error] [pid 45908:tid 45944] [client 20.48.160.218:30469] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/pridmag/db.php"] [unique_id "aRdrjWWG19mWwZX7KatqmQAAAAY"]
[Sat Nov 15 01:49:02.461506 2025] [:error] [pid 45995:tid 46005] [client 20.48.160.218:30632] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bqcheck.php"] [unique_id "aRdrjsfhZrb6EV4SvFvLggAAAgU"]
[Sat Nov 15 01:49:09.334700 2025] [:error] [pid 18513:tid 18531] [client 20.48.160.218:30428] File does not exist: /usr/local/apache/htdocs/suspended-page/bqcheck.php
[Sat Nov 15 01:49:09.891309 2025] [:error] [pid 18513:tid 18518] [client 20.48.160.218:30428] File does not exist: /usr/local/apache/htdocs/suspended-page/13k.php
[Sat Nov 15 01:49:10.101391 2025] [:error] [pid 18513:tid 18537] [client 20.48.160.218:30428] File does not exist: /usr/local/apache/htdocs/suspended-page/ar.php
[Sat Nov 15 01:49:10.384301 2025] [:error] [pid 18513:tid 18533] [client 20.48.160.218:30428] File does not exist: /usr/local/apache/htdocs/suspended-page/bv3.php
[Sat Nov 15 01:49:10.595517 2025] [:error] [pid 18513:tid 18535] [client 20.48.160.218:30428] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat Nov 15 01:49:10.811452 2025] [:error] [pid 18513:tid 18525] [client 20.48.160.218:30428] File does not exist: /usr/local/apache/htdocs/suspended-page/racs3.php
[Sat Nov 15 01:49:11.028377 2025] [:error] [pid 18513:tid 18528] [client 20.48.160.218:30428] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sat Nov 15 01:49:11.256198 2025] [:error] [pid 18513:tid 18526] [client 20.48.160.218:30428] File does not exist: /usr/local/apache/htdocs/suspended-page/lufix.php
[Sat Nov 15 01:49:11.593531 2025] [:error] [pid 18513:tid 18520] [client 20.48.160.218:30428] File does not exist: /usr/local/apache/htdocs/suspended-page/bluejackets.php
[Sat Nov 15 01:49:11.804411 2025] [:error] [pid 18513:tid 18529] [client 20.48.160.218:30428] File does not exist: /usr/local/apache/htdocs/suspended-page/zt2.php
[Sat Nov 15 01:49:12.158393 2025] [:error] [pid 18513:tid 18531] [client 20.48.160.218:30428] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Nov 15 01:49:12.413715 2025] [:error] [pid 18513:tid 18518] [client 20.48.160.218:30428] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-mn.php"] [unique_id "aRdrmPc94upQFzRWlUnScwAAAEA"]
[Sat Nov 15 01:49:13.177030 2025] [:error] [pid 45909:tid 45989] [client 20.48.160.218:30685] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-mn.php"] [unique_id "aRdrmcZqItrYybG86kiepQAAAdg"]
[Sat Nov 15 01:49:14.294755 2025] [:error] [pid 45907:tid 45911] [client 20.48.160.218:30536] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-mn.php"] [unique_id "aRdrmlAqmYxCpnT9gJGM2QAAAUA"]
[Sat Nov 15 01:49:16.876697 2025] [:error] [pid 45907:tid 45921] [client 20.48.160.218:30631] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-mn.php"] [unique_id "aRdrnFAqmYxCpnT9gJGM3wAAAUo"]
[Sat Nov 15 01:49:21.134577 2025] [:error] [pid 18513:tid 18520] [client 20.48.160.218:30426] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/wpxadmin.php"] [unique_id "aRdrofc94upQFzRWlUnSfQAAAEI"]
[Sat Nov 15 01:49:21.998932 2025] [:error] [pid 45907:tid 45922] [client 20.48.160.218:30488] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/wpxadmin.php"] [unique_id "aRdroVAqmYxCpnT9gJGM7AAAAUs"]
[Sat Nov 15 01:49:22.919945 2025] [:error] [pid 45908:tid 45951] [client 20.48.160.218:30550] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/wpxadmin.php"] [unique_id "aRdromWG19mWwZX7KatqtAAAAA0"]
[Sat Nov 15 01:49:23.643827 2025] [:error] [pid 18513:tid 18524] [client 20.48.160.218:30594] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/wpxadmin.php"] [unique_id "aRdro_c94upQFzRWlUnSggAAAEY"]
[Sat Nov 15 01:49:24.855971 2025] [:error] [pid 45909:tid 45986] [client 20.48.160.218:30479] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aa8.php"] [unique_id "aRdrpMZqItrYybG86kiesQAAAdU"]
[Sat Nov 15 01:49:25.862513 2025] [:error] [pid 18513:tid 18538] [client 20.48.160.218:30650] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aa8.php"] [unique_id "aRdrpfc94upQFzRWlUnSjAAAAFQ"]
[Sat Nov 15 01:49:26.846785 2025] [:error] [pid 45909:tid 45989] [client 20.48.160.218:30705] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aa8.php"] [unique_id "aRdrpsZqItrYybG86kietgAAAdg"]
[Sat Nov 15 01:49:27.906004 2025] [:error] [pid 45908:tid 45959] [client 20.48.160.218:30680] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aa8.php"] [unique_id "aRdrp2WG19mWwZX7KatquQAAABU"]
[Sat Nov 15 01:49:28.867364 2025] [:error] [pid 45995:tid 46003] [client 20.48.160.218:30605] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xl.php"] [unique_id "aRdrqMfhZrb6EV4SvFvLrQAAAgM"]
[Sat Nov 15 01:49:30.634921 2025] [:error] [pid 45908:tid 45942] [client 20.48.160.218:30485] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xl.php"] [unique_id "aRdrqmWG19mWwZX7KatqvAAAAAQ"]
[Sat Nov 15 01:49:31.996072 2025] [:error] [pid 18513:tid 18522] [client 20.48.160.218:30577] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xl.php"] [unique_id "aRdrq_c94upQFzRWlUnSlQAAAEQ"]
[Sat Nov 15 01:49:33.129805 2025] [:error] [pid 18513:tid 18529] [client 20.48.160.218:30475] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xl.php"] [unique_id "aRdrrfc94upQFzRWlUnSmQAAAEs"]
[Sat Nov 15 01:49:35.865446 2025] [:error] [pid 45908:tid 45951] [client 20.48.160.218:30546] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "aRdrr2WG19mWwZX7KatqwgAAAA0"]
[Sat Nov 15 01:49:36.680259 2025] [:error] [pid 45995:tid 46013] [client 20.48.160.218:30692] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "aRdrsMfhZrb6EV4SvFvLtAAAAg0"]
[Sat Nov 15 01:49:38.470403 2025] [:error] [pid 45909:tid 45972] [client 20.48.160.218:30636] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "aRdrssZqItrYybG86kiezgAAAcc"]
[Sat Nov 15 01:49:39.572879 2025] [:error] [pid 45909:tid 45973] [client 20.48.160.218:30707] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "aRdrs8ZqItrYybG86kie0AAAAcg"]
[Sat Nov 15 01:49:52.271491 2025] [:error] [pid 45908:tid 45949] [client 20.48.160.218:30497] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sarang.php"] [unique_id "aRdrwGWG19mWwZX7KatqzwAAAAs"]
[Sat Nov 15 01:49:53.107987 2025] [:error] [pid 45908:tid 45944] [client 20.48.160.218:30534] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sarang.php"] [unique_id "aRdrwWWG19mWwZX7Katq0gAAAAY"]
[Sat Nov 15 01:49:54.377074 2025] [:error] [pid 45907:tid 45918] [client 20.48.160.218:30573] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sarang.php"] [unique_id "aRdrwlAqmYxCpnT9gJGNEAAAAUc"]
[Sat Nov 15 01:49:55.916248 2025] [:error] [pid 45995:tid 46019] [client 20.48.160.218:30575] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aRdrw8fhZrb6EV4SvFvLzwAAAhM"]
[Sat Nov 15 01:49:57.929520 2025] [:error] [pid 45908:tid 45954] [client 20.48.160.218:30604] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aRdrxWWG19mWwZX7Katq3AAAABA"]
[Sat Nov 15 01:49:58.619286 2025] [:error] [pid 45908:tid 45944] [client 20.48.160.218:30672] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aRdrxmWG19mWwZX7Katq3gAAAAY"]
[Sat Nov 15 01:50:01.064887 2025] [:error] [pid 45908:tid 45948] [client 20.48.160.218:30702] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aRdryWWG19mWwZX7Katq4gAAAAo"]
[Sat Nov 15 01:50:01.777261 2025] [:error] [pid 45909:tid 45982] [client 20.48.160.218:30585] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aRdrycZqItrYybG86kie8QAAAdE"]
[Sat Nov 15 01:50:03.051021 2025] [:error] [pid 45909:tid 45965] [client 20.48.160.218:30646] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aRdry8ZqItrYybG86kie9QAAAcA"]
[Sat Nov 15 01:50:04.107429 2025] [:error] [pid 45908:tid 45949] [client 20.48.160.218:30515] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aRdrzGWG19mWwZX7Katq5QAAAAs"]
[Sat Nov 15 01:50:06.055111 2025] [:error] [pid 45908:tid 45958] [client 20.48.160.218:30587] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aRdrzmWG19mWwZX7Katq6QAAABQ"]
[Sat Nov 15 01:50:07.661320 2025] [:error] [pid 45909:tid 45986] [client 20.48.160.218:30532] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xo.php"] [unique_id "aRdrz8ZqItrYybG86kie_QAAAdU"]
[Sat Nov 15 01:50:08.710058 2025] [:error] [pid 18513:tid 18522] [client 20.48.160.218:30511] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xo.php"] [unique_id "aRdr0Pc94upQFzRWlUnS6wAAAEQ"]
[Sat Nov 15 01:50:09.871311 2025] [:error] [pid 18513:tid 18526] [client 20.48.160.218:30564] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xo.php"] [unique_id "aRdr0fc94upQFzRWlUnS_AAAAEg"]
[Sat Nov 15 01:50:10.877384 2025] [:error] [pid 45995:tid 46009] [client 20.48.160.218:30548] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xo.php"] [unique_id "aRdr0sfhZrb6EV4SvFvL7AAAAgk"]
[Sat Nov 15 01:50:11.747757 2025] [:error] [pid 18513:tid 18523] [client 20.48.160.218:30551] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ggs.php"] [unique_id "aRdr0_c94upQFzRWlUnTGwAAAEU"]
[Sat Nov 15 01:50:13.583553 2025] [:error] [pid 45995:tid 46000] [client 20.48.160.218:30529] File does not exist: /usr/local/apache/htdocs/suspended-page/ggs.php
[Sat Nov 15 01:50:13.795972 2025] [:error] [pid 45995:tid 46001] [client 20.48.160.218:30529] File does not exist: /usr/local/apache/htdocs/suspended-page/wsr2.php
[Sat Nov 15 01:50:14.007051 2025] [:error] [pid 45995:tid 46019] [client 20.48.160.218:30529] File does not exist: /usr/local/apache/htdocs/suspended-page/class9.php
[Sat Nov 15 01:50:14.435183 2025] [:error] [pid 45995:tid 46007] [client 20.48.160.218:30529] File does not exist: /usr/local/apache/htdocs/suspended-page/tcp.php
[Sat Nov 15 01:50:14.693173 2025] [:error] [pid 45995:tid 46002] [client 20.48.160.218:30529] File does not exist: /usr/local/apache/htdocs/suspended-page/witmm.php
[Sat Nov 15 01:50:14.968915 2025] [:error] [pid 45995:tid 46010] [client 20.48.160.218:30529] [client 20.48.160.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aRdr1sfhZrb6EV4SvFvL9QAAAgo"]
[Sat Nov 15 01:50:17.162753 2025] [:error] [pid 45907:tid 45926] [client 20.48.160.218:30618] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Sat Nov 15 01:50:17.373958 2025] [:error] [pid 45907:tid 45913] [client 20.48.160.218:30618] File does not exist: /usr/local/apache/htdocs/suspended-page/nxx.php
[Sat Nov 15 01:50:17.586622 2025] [:error] [pid 45907:tid 45933] [client 20.48.160.218:30618] File does not exist: /usr/local/apache/htdocs/suspended-page/aaaa.php
[Sat Nov 15 01:50:17.811496 2025] [:error] [pid 45907:tid 45914] [client 20.48.160.218:30618] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Sat Nov 15 01:50:18.276666 2025] [:error] [pid 45907:tid 45924] [client 20.48.160.218:30618] File does not exist: /usr/local/apache/htdocs/suspended-page/ss.php
[Sat Nov 15 01:50:18.654265 2025] [:error] [pid 45907:tid 45925] [client 20.48.160.218:30618] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/zc.php"] [unique_id "aRdr2lAqmYxCpnT9gJGNJgAAAU4"]
[Sat Nov 15 01:50:20.226971 2025] [:error] [pid 18513:tid 18519] [client 20.48.160.218:30483] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/zc.php"] [unique_id "aRdr3Pc94upQFzRWlUnTKwAAAEE"]
[Sat Nov 15 01:50:21.801252 2025] [:error] [pid 18513:tid 18529] [client 20.48.160.218:30667] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/zc.php"] [unique_id "aRdr3fc94upQFzRWlUnTLwAAAEs"]
[Sat Nov 15 01:50:24.367727 2025] [:error] [pid 18513:tid 18531] [client 20.48.160.218:30547] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/zc.php"] [unique_id "aRdr4Pc94upQFzRWlUnTMQAAAE0"]
[Sat Nov 15 01:50:25.657220 2025] [:error] [pid 18513:tid 18518] [client 20.48.160.218:30518] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dex.php"] [unique_id "aRdr4fc94upQFzRWlUnTNQAAAEA"]
[Sat Nov 15 01:50:27.383960 2025] [:error] [pid 45907:tid 45919] [client 20.48.160.218:30568] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dex.php"] [unique_id "aRdr41AqmYxCpnT9gJGNMwAAAUg"]
[Sat Nov 15 01:50:32.065663 2025] [:error] [pid 45995:tid 46019] [client 20.48.160.218:30648] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dex.php"] [unique_id "aRdr6MfhZrb6EV4SvFvMBgAAAhM"]
[Sat Nov 15 01:50:35.475118 2025] [:error] [pid 45909:tid 45974] [client 20.48.160.218:30684] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dex.php"] [unique_id "aRdr68ZqItrYybG86kifKAAAAck"]
[Sat Nov 15 01:50:36.415789 2025] [:error] [pid 45995:tid 46000] [client 20.48.160.218:30675] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sad.php"] [unique_id "aRdr7MfhZrb6EV4SvFvMDwAAAgA"]
[Sat Nov 15 01:50:38.507441 2025] [:error] [pid 45908:tid 45956] [client 20.48.160.218:30565] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sad.php"] [unique_id "aRdr7mWG19mWwZX7KatrEwAAABI"]
[Sat Nov 15 01:50:39.452221 2025] [:error] [pid 45907:tid 45923] [client 20.48.160.218:30540] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sad.php"] [unique_id "aRdr71AqmYxCpnT9gJGNPgAAAUw"]
[Sat Nov 15 01:50:42.682078 2025] [:error] [pid 18513:tid 18530] [client 20.48.160.218:30544] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sad.php"] [unique_id "aRdr8vc94upQFzRWlUnTSgAAAEw"]
[Sat Nov 15 01:50:43.548384 2025] [:error] [pid 18513:tid 18536] [client 20.48.160.218:30523] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aRdr8_c94upQFzRWlUnTTwAAAFI"]
[Sat Nov 15 01:50:44.445400 2025] [:error] [pid 45909:tid 45979] [client 20.48.160.218:30662] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aRdr9MZqItrYybG86kifNwAAAc4"]
[Sat Nov 15 01:50:46.259543 2025] [:error] [pid 45909:tid 45980] [client 20.48.160.218:30571] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aRdr9sZqItrYybG86kifOwAAAc8"]
[Sat Nov 15 01:50:46.877031 2025] [:error] [pid 18513:tid 18530] [client 20.48.160.218:30682] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aRdr9vc94upQFzRWlUnTWAAAAEw"]
[Sat Nov 15 01:50:48.909399 2025] [:error] [pid 45995:tid 46023] [client 20.48.160.218:30656] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "aRdr-MfhZrb6EV4SvFvMEQAAAhc"]
[Sat Nov 15 01:50:49.819521 2025] [:error] [pid 45995:tid 46012] [client 20.48.160.218:30678] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "aRdr-cfhZrb6EV4SvFvMEgAAAgw"]
[Sat Nov 15 01:50:52.437012 2025] [:error] [pid 45995:tid 46001] [client 20.48.160.218:30589] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "aRdr_MfhZrb6EV4SvFvMGAAAAgE"]
[Sat Nov 15 01:50:54.219170 2025] [:error] [pid 18513:tid 18532] [client 20.48.160.218:30660] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "aRdr_vc94upQFzRWlUnTawAAAE4"]
[Sat Nov 15 01:50:55.725299 2025] [:error] [pid 45995:tid 46003] [client 20.48.160.218:30665] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cfile.php"] [unique_id "aRdr_8fhZrb6EV4SvFvMIAAAAgM"]
[Sat Nov 15 01:50:56.945494 2025] [:error] [pid 45907:tid 45932] [client 20.48.160.218:30567] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cfile.php"] [unique_id "aRdsAFAqmYxCpnT9gJGNWQAAAVU"]
[Sat Nov 15 01:50:57.960930 2025] [:error] [pid 45908:tid 45944] [client 20.48.160.218:30528] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cfile.php"] [unique_id "aRdsAWWG19mWwZX7KatrLQAAAAY"]
[Sat Nov 15 01:51:01.804299 2025] [:error] [pid 45908:tid 45955] [client 20.48.160.218:30537] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cfile.php"] [unique_id "aRdsBWWG19mWwZX7KatrNgAAABE"]
[Sat Nov 15 01:51:03.199380 2025] [:error] [pid 18513:tid 18521] [client 20.48.160.218:30533] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sder52u.php"] [unique_id "aRdsB_c94upQFzRWlUnTjAAAAEM"]
[Sat Nov 15 01:51:05.491437 2025] [:error] [pid 45907:tid 45918] [client 20.48.160.218:30583] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sder52u.php"] [unique_id "aRdsCVAqmYxCpnT9gJGNZwAAAUc"]
[Sat Nov 15 01:51:07.123587 2025] [:error] [pid 45907:tid 45920] [client 20.48.160.218:30674] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sder52u.php"] [unique_id "aRdsC1AqmYxCpnT9gJGNbgAAAUk"]
[Sat Nov 15 01:51:08.836739 2025] [:error] [pid 45908:tid 45950] [client 20.48.160.218:30601] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sder52u.php"] [unique_id "aRdsDGWG19mWwZX7KatrPQAAAAw"]
[Sat Nov 15 01:51:09.723723 2025] [:error] [pid 45907:tid 45916] [client 20.48.160.218:30466] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/asserter.php"] [unique_id "aRdsDVAqmYxCpnT9gJGNeQAAAUU"]
[Sat Nov 15 01:51:10.264231 2025] [:error] [pid 45907:tid 45917] [client 20.48.160.218:30541] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/asserter.php"] [unique_id "aRdsDlAqmYxCpnT9gJGNfQAAAUY"]
[Sat Nov 15 01:51:11.728817 2025] [:error] [pid 45995:tid 46021] [client 20.48.160.218:30641] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/asserter.php"] [unique_id "aRdsD8fhZrb6EV4SvFvMNAAAAhU"]
[Sat Nov 15 01:51:12.998461 2025] [:error] [pid 18513:tid 18518] [client 20.48.160.218:30663] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/asserter.php"] [unique_id "aRdsEPc94upQFzRWlUnTrgAAAEA"]
[Sat Nov 15 01:51:13.942769 2025] [:error] [pid 18513:tid 18524] [client 20.48.160.218:30647] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aRdsEfc94upQFzRWlUnTswAAAEY"]
[Sat Nov 15 01:51:15.013237 2025] [:error] [pid 45909:tid 45983] [client 20.48.160.218:30599] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aRdsE8ZqItrYybG86kifdgAAAdI"]
[Sat Nov 15 01:51:16.149507 2025] [:error] [pid 45908:tid 45951] [client 20.48.160.218:30445] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aRdsFGWG19mWwZX7KatrSAAAAA0"]
[Sat Nov 15 01:51:16.809412 2025] [:error] [pid 18513:tid 18521] [client 20.48.160.218:30535] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aRdsFPc94upQFzRWlUnTvwAAAEM"]
[Sat Nov 15 01:51:17.743455 2025] [:error] [pid 18513:tid 18519] [client 20.48.160.218:30638] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/pass.php"] [unique_id "aRdsFfc94upQFzRWlUnTwQAAAEE"]
[Sat Nov 15 01:51:20.224292 2025] [:error] [pid 45995:tid 46014] [client 20.48.160.218:30543] File does not exist: /usr/local/apache/htdocs/suspended-page/pass.php
[Sat Nov 15 01:51:20.441919 2025] [:error] [pid 45995:tid 46012] [client 20.48.160.218:30543] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Sat Nov 15 01:51:20.657687 2025] [:error] [pid 45995:tid 46018] [client 20.48.160.218:30543] File does not exist: /usr/local/apache/htdocs/suspended-page/ot.php
[Sat Nov 15 01:51:20.895638 2025] [:error] [pid 45995:tid 46004] [client 20.48.160.218:30543] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-rss4.php
[Sat Nov 15 01:51:21.107442 2025] [:error] [pid 45995:tid 46009] [client 20.48.160.218:30543] File does not exist: /usr/local/apache/htdocs/suspended-page/dev.php
[Sat Nov 15 01:51:21.396650 2025] [:error] [pid 45995:tid 46016] [client 20.48.160.218:30543] File does not exist: /usr/local/apache/htdocs/suspended-page/bin.php
[Sat Nov 15 01:51:21.608949 2025] [:error] [pid 45995:tid 46011] [client 20.48.160.218:30543] File does not exist: /usr/local/apache/htdocs/suspended-page/yee.php
[Sat Nov 15 01:51:21.821775 2025] [:error] [pid 45995:tid 46002] [client 20.48.160.218:30543] File does not exist: /usr/local/apache/htdocs/suspended-page/epinyins.php
[Sat Nov 15 01:51:22.031746 2025] [:error] [pid 45995:tid 46023] [client 20.48.160.218:30543] File does not exist: /usr/local/apache/htdocs/suspended-page/aa17.php
[Sat Nov 15 01:51:22.247341 2025] [:error] [pid 45995:tid 46017] [client 20.48.160.218:30543] File does not exist: /usr/local/apache/htdocs/suspended-page/winkel.php
[Sat Nov 15 01:51:22.457723 2025] [:error] [pid 45995:tid 46010] [client 20.48.160.218:30543] File does not exist: /usr/local/apache/htdocs/suspended-page/ef.php
[Sat Nov 15 01:51:22.679027 2025] [:error] [pid 45995:tid 46024] [client 20.48.160.218:30543] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gifclass4.php"] [unique_id "aRdsGsfhZrb6EV4SvFvMTQAAAhg"]
[Sat Nov 15 01:51:24.391476 2025] [:error] [pid 18513:tid 18518] [client 20.48.160.218:30635] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gifclass4.php"] [unique_id "aRdsHPc94upQFzRWlUnT3AAAAEA"]
[Sat Nov 15 01:51:26.835908 2025] [:error] [pid 45909:tid 45973] [client 20.48.160.218:30696] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gifclass4.php"] [unique_id "aRdsHsZqItrYybG86kifhgAAAcg"]
[Sat Nov 15 01:51:28.162522 2025] [:error] [pid 45909:tid 45981] [client 20.48.160.218:30561] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gifclass4.php"] [unique_id "aRdsIMZqItrYybG86kifigAAAdA"]
[Sat Nov 15 01:51:29.272374 2025] [:error] [pid 45909:tid 45978] [client 20.48.160.218:30602] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/667.php"] [unique_id "aRdsIcZqItrYybG86kifkAAAAc0"]
[Sat Nov 15 01:51:29.975657 2025] [:error] [pid 45909:tid 45974] [client 20.48.160.218:30539] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/667.php"] [unique_id "aRdsIcZqItrYybG86kiflAAAAck"]
[Sat Nov 15 01:51:32.864957 2025] [:error] [pid 18513:tid 18526] [client 20.48.160.218:30670] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/667.php"] [unique_id "aRdsJPc94upQFzRWlUnT7AAAAEg"]
[Sat Nov 15 01:51:34.132697 2025] [:error] [pid 45995:tid 46010] [client 20.48.160.218:30669] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/667.php"] [unique_id "aRdsJsfhZrb6EV4SvFvMYAAAAgo"]
[Sat Nov 15 01:51:35.088678 2025] [:error] [pid 45907:tid 45919] [client 20.48.160.218:30607] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aRdsJ1AqmYxCpnT9gJGNxAAAAUg"]
[Sat Nov 15 01:51:35.783270 2025] [:error] [pid 45908:tid 45946] [client 20.48.160.218:30552] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aRdsJ2WG19mWwZX7KatrWwAAAAg"]
[Sat Nov 15 01:51:39.357361 2025] [:error] [pid 45909:tid 45973] [client 20.48.160.218:30676] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aRdsK8ZqItrYybG86kifpQAAAcg"]
[Sat Nov 15 01:51:41.011904 2025] [:error] [pid 45908:tid 45948] [client 20.48.160.218:30694] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aRdsLWWG19mWwZX7KatraQAAAAo"]
[Sat Nov 15 01:51:42.310887 2025] [:error] [pid 18513:tid 18522] [client 20.48.160.218:30582] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-su.php"] [unique_id "aRdsLvc94upQFzRWlUnT_gAAAEQ"]
[Sat Nov 15 01:51:43.457489 2025] [:error] [pid 18513:tid 18526] [client 20.48.160.218:30492] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-su.php"] [unique_id "aRdsL_c94upQFzRWlUnUAAAAAEg"]
[Sat Nov 15 01:51:44.527828 2025] [:error] [pid 45907:tid 45933] [client 20.48.160.218:30538] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-su.php"] [unique_id "aRdsMFAqmYxCpnT9gJGNzwAAAVY"]
[Sat Nov 15 01:51:45.509242 2025] [:error] [pid 45908:tid 45948] [client 20.48.160.218:30622] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-su.php"] [unique_id "aRdsMWWG19mWwZX7KatrcwAAAAo"]
[Sat Nov 15 01:51:46.842769 2025] [:error] [pid 18513:tid 18531] [client 20.48.160.218:30563] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/t3x.php"] [unique_id "aRdsMvc94upQFzRWlUnUBQAAAE0"]
[Sat Nov 15 01:51:47.946578 2025] [:error] [pid 45909:tid 45968] [client 20.48.160.218:30671] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/t3x.php"] [unique_id "aRdsM8ZqItrYybG86kiftwAAAcM"]
[Sat Nov 15 01:51:49.103472 2025] [:error] [pid 45909:tid 45987] [client 20.48.160.218:30542] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/t3x.php"] [unique_id "aRdsNcZqItrYybG86kifvQAAAdY"]
[Sat Nov 15 01:51:49.806168 2025] [:error] [pid 18513:tid 18537] [client 20.48.160.218:30615] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/t3x.php"] [unique_id "aRdsNfc94upQFzRWlUnUDQAAAFM"]
[Sat Nov 15 01:51:50.822695 2025] [:error] [pid 45995:tid 46018] [client 20.48.160.218:30588] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aRdsNsfhZrb6EV4SvFvMfgAAAhI"]
[Sat Nov 15 01:51:51.404007 2025] [:error] [pid 45995:tid 46001] [client 20.48.160.218:30481] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aRdsN8fhZrb6EV4SvFvMgQAAAgE"]
[Sat Nov 15 01:51:52.113505 2025] [:error] [pid 45907:tid 45914] [client 20.48.160.218:30572] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aRdsOFAqmYxCpnT9gJGN2AAAAUM"]
[Sat Nov 15 01:51:53.234325 2025] [:error] [pid 18513:tid 18535] [client 20.48.160.218:30560] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aRdsOfc94upQFzRWlUnUEgAAAFE"]
[Sat Nov 15 01:51:54.416217 2025] [:error] [pid 18513:tid 18524] [client 20.48.160.218:30658] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/yasnu.php"] [unique_id "aRdsOvc94upQFzRWlUnUFQAAAEY"]
[Sat Nov 15 01:51:55.556705 2025] [:error] [pid 45908:tid 45945] [client 20.48.160.218:30715] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/yasnu.php"] [unique_id "aRdsO2WG19mWwZX7KatrfwAAAAc"]
[Sat Nov 15 01:51:56.528595 2025] [:error] [pid 18513:tid 18522] [client 20.48.160.218:30480] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/yasnu.php"] [unique_id "aRdsPPc94upQFzRWlUnUGAAAAEQ"]
[Sat Nov 15 01:51:57.724526 2025] [:error] [pid 45909:tid 45979] [client 20.48.160.218:30666] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/yasnu.php"] [unique_id "aRdsPcZqItrYybG86kifwwAAAc4"]
[Sat Nov 15 01:51:58.994619 2025] [:error] [pid 45907:tid 45916] [client 20.48.160.218:30704] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/trd.php"] [unique_id "aRdsPlAqmYxCpnT9gJGN4wAAAUU"]
[Sat Nov 15 01:52:00.087758 2025] [:error] [pid 45908:tid 45957] [client 20.48.160.218:30606] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/trd.php"] [unique_id "aRdsQGWG19mWwZX7KatrhgAAABM"]
[Sat Nov 15 01:52:01.087012 2025] [:error] [pid 45907:tid 45932] [client 20.48.160.218:30474] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/trd.php"] [unique_id "aRdsQVAqmYxCpnT9gJGN5gAAAVU"]
[Sat Nov 15 01:52:02.311791 2025] [:error] [pid 18513:tid 18526] [client 20.48.160.218:30673] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/trd.php"] [unique_id "aRdsQvc94upQFzRWlUnUHAAAAEg"]
[Sat Nov 15 01:52:03.249047 2025] [:error] [pid 18513:tid 18534] [client 20.48.160.218:30591] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/oiepfuav.php"] [unique_id "aRdsQ_c94upQFzRWlUnUHwAAAFA"]
[Sat Nov 15 01:52:04.881256 2025] [:error] [pid 18513:tid 18525] [client 20.48.160.218:30600] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/oiepfuav.php"] [unique_id "aRdsRPc94upQFzRWlUnUIgAAAEc"]
[Sat Nov 15 01:52:06.041071 2025] [:error] [pid 18513:tid 18527] [client 20.48.160.218:30677] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/oiepfuav.php"] [unique_id "aRdsRvc94upQFzRWlUnUJQAAAEk"]
[Sat Nov 15 01:52:07.034725 2025] [:error] [pid 45908:tid 45940] [client 20.48.160.218:30654] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/oiepfuav.php"] [unique_id "aRdsR2WG19mWwZX7KatriwAAAAI"]
[Sat Nov 15 01:52:08.333474 2025] [:error] [pid 45909:tid 45986] [client 20.48.160.218:30499] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/02.php"] [unique_id "aRdsSMZqItrYybG86kifzAAAAdU"]
[Sat Nov 15 01:52:08.899927 2025] [:error] [pid 45908:tid 45948] [client 20.48.160.218:30610] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/02.php"] [unique_id "aRdsSGWG19mWwZX7KatrjAAAAAo"]
[Sat Nov 15 01:52:09.959906 2025] [:error] [pid 18513:tid 18528] [client 20.48.160.218:30553] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/02.php"] [unique_id "aRdsSfc94upQFzRWlUnULwAAAEo"]
[Sat Nov 15 01:52:11.806905 2025] [:error] [pid 45995:tid 46008] [client 20.48.160.218:30710] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/02.php"] [unique_id "aRdsS8fhZrb6EV4SvFvMjgAAAgg"]
[Sat Nov 15 01:52:13.828792 2025] [:error] [pid 45907:tid 45921] [client 20.48.160.218:30664] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file2.php"] [unique_id "aRdsTVAqmYxCpnT9gJGN7gAAAUo"]
[Sat Nov 15 01:52:18.091967 2025] [:error] [pid 18513:tid 18540] [client 20.48.160.218:30620] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file2.php"] [unique_id "aRdsUvc94upQFzRWlUnURQAAAFY"]
[Sat Nov 15 01:52:19.291477 2025] [:error] [pid 45907:tid 45915] [client 20.48.160.218:30439] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file2.php"] [unique_id "aRdsU1AqmYxCpnT9gJGN8QAAAUQ"]
[Sat Nov 15 01:52:20.476544 2025] [:error] [pid 45908:tid 45952] [client 20.48.160.218:30642] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file2.php"] [unique_id "aRdsVGWG19mWwZX7KatrkAAAAA4"]
[Sat Nov 15 01:52:21.657273 2025] [:error] [pid 45907:tid 45923] [client 20.48.160.218:30608] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aRdsVVAqmYxCpnT9gJGN8wAAAUw"]
[Sat Nov 15 01:52:22.621312 2025] [:error] [pid 45908:tid 45958] [client 20.48.160.218:30592] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sat Nov 15 01:52:22.844028 2025] [:error] [pid 45908:tid 45938] [client 20.48.160.218:30592] File does not exist: /usr/local/apache/htdocs/suspended-page/upload.php
[Sat Nov 15 01:52:23.067041 2025] [:error] [pid 45908:tid 45951] [client 20.48.160.218:30592] File does not exist: /usr/local/apache/htdocs/suspended-page/btufulhs.php
[Sat Nov 15 01:52:23.278464 2025] [:error] [pid 45908:tid 45950] [client 20.48.160.218:30592] File does not exist: /usr/local/apache/htdocs/suspended-page/ant.php
[Sat Nov 15 01:52:23.492727 2025] [:error] [pid 45908:tid 45953] [client 20.48.160.218:30592] File does not exist: /usr/local/apache/htdocs/suspended-page/bb5.php
[Sat Nov 15 01:52:23.837569 2025] [:error] [pid 45908:tid 45954] [client 20.48.160.218:30592] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php
[Sat Nov 15 01:52:24.485605 2025] [:error] [pid 45908:tid 45947] [client 20.48.160.218:30592] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Sat Nov 15 01:52:24.702940 2025] [:error] [pid 45908:tid 45956] [client 20.48.160.218:30592] File does not exist: /usr/local/apache/htdocs/suspended-page/yzkvrell.php
[Sat Nov 15 01:52:24.914916 2025] [:error] [pid 45908:tid 45959] [client 20.48.160.218:30592] File does not exist: /usr/local/apache/htdocs/suspended-page/gmo.php
[Sat Nov 15 01:52:25.127889 2025] [:error] [pid 45908:tid 45944] [client 20.48.160.218:30592] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-749.php
[Sat Nov 15 01:52:25.711631 2025] [:error] [pid 45908:tid 45952] [client 20.48.160.218:30592] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ava.php"] [unique_id "aRdsWWWG19mWwZX7KatroQAAAA4"]
[Sat Nov 15 01:52:26.758051 2025] [:error] [pid 45907:tid 45920] [client 20.48.160.218:30657] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ava.php"] [unique_id "aRdsWlAqmYxCpnT9gJGN_QAAAUk"]
[Sat Nov 15 01:52:27.924237 2025] [:error] [pid 45909:tid 45969] [client 20.48.160.218:30558] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ava.php"] [unique_id "aRdsW8ZqItrYybG86kif1QAAAcQ"]
[Sat Nov 15 01:52:28.962450 2025] [:error] [pid 45907:tid 45927] [client 20.48.160.218:30701] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ava.php"] [unique_id "aRdsXFAqmYxCpnT9gJGN_gAAAVA"]
[Sat Nov 15 01:52:29.625276 2025] [:error] [pid 45995:tid 46022] [client 20.48.160.218:30581] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/nqsa.php"] [unique_id "aRdsXcfhZrb6EV4SvFvMoAAAAhY"]
[Sat Nov 15 01:52:30.548581 2025] [:error] [pid 45908:tid 45961] [client 20.48.160.218:30556] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/nqsa.php"] [unique_id "aRdsXmWG19mWwZX7KatrpgAAABc"]
[Sat Nov 15 01:52:31.494889 2025] [:error] [pid 18513:tid 18531] [client 20.48.160.218:30473] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/nqsa.php"] [unique_id "aRdsX_c94upQFzRWlUnUWwAAAE0"]
[Sat Nov 15 01:52:33.411957 2025] [:error] [pid 45909:tid 45974] [client 20.48.160.218:30402] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/nqsa.php"] [unique_id "aRdsYcZqItrYybG86kif2gAAAck"]
[Sat Nov 15 01:52:35.331132 2025] [:error] [pid 18513:tid 18528] [client 20.48.160.218:30505] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2020.php"] [unique_id "aRdsY_c94upQFzRWlUnUYgAAAEo"]
[Sat Nov 15 01:52:37.180250 2025] [:error] [pid 45908:tid 45948] [client 20.48.160.218:30531] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2020.php"] [unique_id "aRdsZWWG19mWwZX7KatrrAAAAAo"]
[Sat Nov 15 01:52:37.874307 2025] [:error] [pid 18513:tid 18522] [client 20.48.160.218:30593] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2020.php"] [unique_id "aRdsZfc94upQFzRWlUnUaQAAAEQ"]
[Sat Nov 15 01:52:38.769932 2025] [:error] [pid 45908:tid 45949] [client 20.48.160.218:30633] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2020.php"] [unique_id "aRdsZmWG19mWwZX7KatrrgAAAAs"]
[Sat Nov 15 01:52:39.634212 2025] [:error] [pid 45995:tid 46011] [client 20.48.160.218:30513] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/rak.php"] [unique_id "aRdsZ8fhZrb6EV4SvFvMqgAAAgs"]
[Sat Nov 15 01:52:41.442335 2025] [:error] [pid 18513:tid 18519] [client 20.48.160.218:30619] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/rak.php"] [unique_id "aRdsafc94upQFzRWlUnUbQAAAEE"]
[Sat Nov 15 01:52:42.633391 2025] [:error] [pid 18513:tid 18531] [client 20.48.160.218:30681] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/rak.php"] [unique_id "aRdsavc94upQFzRWlUnUcAAAAE0"]
[Sat Nov 15 01:52:44.826415 2025] [:error] [pid 18513:tid 18526] [client 20.48.160.218:30661] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/rak.php"] [unique_id "aRdsbPc94upQFzRWlUnUdQAAAEg"]
[Sat Nov 15 01:52:47.987909 2025] [:error] [pid 45907:tid 45934] [client 20.48.160.218:30569] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bypass.php"] [unique_id "aRdsb1AqmYxCpnT9gJGOCQAAAVc"]
[Sat Nov 15 01:52:49.058847 2025] [:error] [pid 45909:tid 45972] [client 20.48.160.218:30549] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bypass.php"] [unique_id "aRdsccZqItrYybG86kif6gAAAcc"]
[Sat Nov 15 01:52:50.907141 2025] [:error] [pid 18513:tid 18532] [client 20.48.160.218:30570] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bypass.php"] [unique_id "aRdscvc94upQFzRWlUnUfgAAAE4"]
[Sat Nov 15 01:52:51.833087 2025] [:error] [pid 18513:tid 18541] [client 20.48.160.218:30683] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bypass.php"] [unique_id "aRdsc_c94upQFzRWlUnUgQAAAFc"]
[Sat Nov 15 01:52:52.754783 2025] [:error] [pid 45908:tid 45939] [client 20.48.160.218:30689] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/zr.php"] [unique_id "aRdsdGWG19mWwZX7KatrugAAAAE"]
[Sat Nov 15 01:52:54.073245 2025] [:error] [pid 45908:tid 45945] [client 20.48.160.218:30580] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/zr.php"] [unique_id "aRdsdmWG19mWwZX7KatruwAAAAc"]
[Sat Nov 15 01:53:00.477010 2025] [:error] [pid 18513:tid 18521] [client 20.48.160.218:30597] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/zr.php"] [unique_id "aRdsfPc94upQFzRWlUnUiQAAAEM"]
[Sat Nov 15 01:53:03.948246 2025] [:error] [pid 18513:tid 18526] [client 20.48.160.218:30578] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/zr.php"] [unique_id "aRdsf_c94upQFzRWlUnUnQAAAEg"]
[Sat Nov 15 01:53:05.302966 2025] [:error] [pid 45908:tid 45946] [client 20.48.160.218:30471] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wander.php"] [unique_id "aRdsgWWG19mWwZX7Katr1wAAAAg"]
[Sat Nov 15 01:53:06.562489 2025] [:error] [pid 45995:tid 46015] [client 20.48.160.218:30579] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wander.php"] [unique_id "aRdsgsfhZrb6EV4SvFvMzAAAAg8"]
[Sat Nov 15 01:53:09.152106 2025] [:error] [pid 45908:tid 45961] [client 20.48.160.218:30690] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wander.php"] [unique_id "aRdshWWG19mWwZX7Katr4AAAABc"]
[Sat Nov 15 01:53:10.070394 2025] [:error] [pid 45908:tid 45938] [client 20.48.160.218:30554] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wander.php"] [unique_id "aRdshmWG19mWwZX7Katr4gAAAAA"]
[Sat Nov 15 01:53:11.260660 2025] [:error] [pid 45909:tid 45969] [client 20.48.160.218:30490] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "aRdsh8ZqItrYybG86kigAwAAAcQ"]
[Sat Nov 15 01:53:11.945767 2025] [:error] [pid 18513:tid 18528] [client 20.48.160.218:30611] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "aRdsh_c94upQFzRWlUnUtwAAAEo"]
[Sat Nov 15 01:53:13.117871 2025] [:error] [pid 18513:tid 18521] [client 20.48.160.218:30621] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "aRdsifc94upQFzRWlUnUvAAAAEM"]
[Sat Nov 15 01:53:13.829587 2025] [:error] [pid 18513:tid 18520] [client 20.48.160.218:30697] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "aRdsifc94upQFzRWlUnUvgAAAEI"]
[Sat Nov 15 01:53:16.630539 2025] [:error] [pid 45908:tid 45951] [client 20.48.160.218:30590] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/great.php"] [unique_id "aRdsjGWG19mWwZX7Katr5wAAAA0"]
[Sat Nov 15 01:53:17.492984 2025] [:error] [pid 45907:tid 45935] [client 20.48.160.218:30545] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/great.php"] [unique_id "aRdsjVAqmYxCpnT9gJGORQAAAVg"]
[Sat Nov 15 01:53:18.930742 2025] [:error] [pid 18513:tid 18535] [client 20.48.160.218:30530] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/great.php"] [unique_id "aRdsjvc94upQFzRWlUnUzAAAAFE"]
[Sat Nov 15 01:53:20.467212 2025] [:error] [pid 45907:tid 45932] [client 20.48.160.218:30709] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/great.php"] [unique_id "aRdskFAqmYxCpnT9gJGOTgAAAVU"]
[Sat Nov 15 01:53:23.030614 2025] [:error] [pid 45909:tid 45967] [client 20.48.160.218:30616] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fifii.php"] [unique_id "aRdsk8ZqItrYybG86kigCgAAAcI"]
[Sat Nov 15 01:53:23.842189 2025] [:error] [pid 45909:tid 45969] [client 20.48.160.218:30503] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fifii.php"] [unique_id "aRdsk8ZqItrYybG86kigCwAAAcQ"]
[Sat Nov 15 01:53:25.225954 2025] [:error] [pid 18513:tid 18522] [client 20.48.160.218:30693] File does not exist: /usr/local/apache/htdocs/suspended-page/fifii.php
[Sat Nov 15 01:53:25.443994 2025] [:error] [pid 18513:tid 18519] [client 20.48.160.218:30693] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Sat Nov 15 01:53:25.837467 2025] [:error] [pid 18513:tid 18526] [client 20.48.160.218:30693] File does not exist: /usr/local/apache/htdocs/suspended-page/efile.php
[Sat Nov 15 01:53:26.050118 2025] [:error] [pid 18513:tid 18539] [client 20.48.160.218:30693] File does not exist: /usr/local/apache/htdocs/suspended-page/past1.php
[Sat Nov 15 01:53:26.260561 2025] [:error] [pid 18513:tid 18536] [client 20.48.160.218:30693] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Sat Nov 15 01:53:26.606002 2025] [:error] [pid 18513:tid 18540] [client 20.48.160.218:30693] File does not exist: /usr/local/apache/htdocs/suspended-page/4563.php
[Sat Nov 15 01:53:26.817334 2025] [:error] [pid 18513:tid 18528] [client 20.48.160.218:30693] File does not exist: /usr/local/apache/htdocs/suspended-page/re.php
[Sat Nov 15 01:53:27.028786 2025] [:error] [pid 18513:tid 18532] [client 20.48.160.218:30693] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sat Nov 15 01:53:27.240108 2025] [:error] [pid 18513:tid 18531] [client 20.48.160.218:30693] File does not exist: /usr/local/apache/htdocs/suspended-page/35.php
[Sat Nov 15 01:53:27.451203 2025] [:error] [pid 18513:tid 18533] [client 20.48.160.218:30693] File does not exist: /usr/local/apache/htdocs/suspended-page/witm.php
[Sat Nov 15 01:53:27.795270 2025] [:error] [pid 18513:tid 18524] [client 20.48.160.218:30693] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sat Nov 15 01:53:28.464735 2025] [:error] [pid 18513:tid 18525] [client 20.48.160.218:30693] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless2.php"] [unique_id "aRdsmPc94upQFzRWlUnU5AAAAEc"]
[Sat Nov 15 01:53:30.485504 2025] [:error] [pid 45909:tid 45968] [client 20.48.160.218:30713] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless2.php"] [unique_id "aRdsmsZqItrYybG86kigEwAAAcM"]
[Sat Nov 15 01:53:31.953113 2025] [:error] [pid 18513:tid 18528] [client 20.48.160.218:30624] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless2.php"] [unique_id "aRdsm_c94upQFzRWlUnU6AAAAEo"]
[Sat Nov 15 01:53:33.727773 2025] [:error] [pid 18513:tid 18522] [client 20.48.160.218:30716] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless2.php"] [unique_id "aRdsnfc94upQFzRWlUnU7gAAAEQ"]
[Sat Nov 15 01:53:34.550610 2025] [:error] [pid 45995:tid 46016] [client 20.48.160.218:30586] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "aRdsnsfhZrb6EV4SvFvM6QAAAhA"]
[Sat Nov 15 01:53:35.793515 2025] [:error] [pid 45995:tid 46021] [client 20.48.160.218:30494] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "aRdsn8fhZrb6EV4SvFvM7QAAAhU"]
[Sat Nov 15 01:53:36.755121 2025] [:error] [pid 45908:tid 45955] [client 20.48.160.218:30712] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "aRdsoGWG19mWwZX7Katr9AAAABE"]
[Sat Nov 15 01:53:38.252374 2025] [:error] [pid 18513:tid 18526] [client 20.48.160.218:30617] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "aRdsovc94upQFzRWlUnU8wAAAEg"]
[Sat Nov 15 01:53:39.336339 2025] [:error] [pid 45908:tid 45957] [client 20.48.160.218:30550] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wsr2.php"] [unique_id "aRdso2WG19mWwZX7Katr-AAAABM"]
[Sat Nov 15 01:53:40.717597 2025] [:error] [pid 45907:tid 45919] [client 20.48.160.218:30703] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wsr2.php"] [unique_id "aRdspFAqmYxCpnT9gJGOXgAAAUg"]
[Sat Nov 15 01:53:42.375014 2025] [:error] [pid 45909:tid 45973] [client 20.48.160.218:30501] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wsr2.php"] [unique_id "aRdspsZqItrYybG86kigIwAAAcg"]
[Sat Nov 15 01:53:44.412307 2025] [:error] [pid 45995:tid 46019] [client 20.48.160.218:30596] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wsr2.php"] [unique_id "aRdsqMfhZrb6EV4SvFvM-AAAAhM"]
[Sat Nov 15 01:53:45.691152 2025] [:error] [pid 45909:tid 45986] [client 20.48.160.218:30649] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shlo.php"] [unique_id "aRdsqcZqItrYybG86kigJwAAAdU"]
[Sat Nov 15 01:53:46.875616 2025] [:error] [pid 45908:tid 45943] [client 20.48.160.218:30557] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shlo.php"] [unique_id "aRdsqmWG19mWwZX7Katr_wAAAAU"]
[Sat Nov 15 01:53:47.758670 2025] [:error] [pid 45909:tid 45988] [client 20.48.160.218:30465] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shlo.php"] [unique_id "aRdsq8ZqItrYybG86kigKgAAAdc"]
[Sat Nov 15 01:53:48.319875 2025] [:error] [pid 18513:tid 18522] [client 20.48.160.218:30623] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shlo.php"] [unique_id "aRdsrPc94upQFzRWlUnU-QAAAEQ"]
[Sat Nov 15 01:53:49.313697 2025] [:error] [pid 45908:tid 45947] [client 20.48.160.218:30650] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/CLA.php"] [unique_id "aRdsrWWG19mWwZX7KatsBgAAAAk"]
[Sat Nov 15 01:53:50.824726 2025] [:error] [pid 45908:tid 45942] [client 20.48.160.218:30559] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/CLA.php"] [unique_id "aRdsrmWG19mWwZX7KatsCgAAAAQ"]
[Sat Nov 15 01:53:51.642383 2025] [:error] [pid 18513:tid 18532] [client 20.48.160.218:30628] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/CLA.php"] [unique_id "aRdsr_c94upQFzRWlUnVBAAAAE4"]
[Sat Nov 15 01:53:52.502616 2025] [:error] [pid 18513:tid 18540] [client 20.48.160.218:30574] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/CLA.php"] [unique_id "aRdssPc94upQFzRWlUnVCAAAAFY"]
[Sat Nov 15 01:53:53.239826 2025] [:error] [pid 18513:tid 18539] [client 20.48.160.218:30691] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kill-9-1.php"] [unique_id "aRdssfc94upQFzRWlUnVCwAAAFU"]
[Sat Nov 15 01:53:54.738150 2025] [:error] [pid 45909:tid 45971] [client 20.48.160.218:30577] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kill-9-1.php"] [unique_id "aRdsssZqItrYybG86kigLgAAAcY"]
[Sat Nov 15 01:53:56.416994 2025] [:error] [pid 18513:tid 18541] [client 20.48.160.218:30584] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kill-9-1.php"] [unique_id "aRdstPc94upQFzRWlUnVEwAAAFc"]
[Sat Nov 15 01:53:57.980017 2025] [:error] [pid 45995:tid 46011] [client 20.48.160.218:30668] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kill-9-1.php"] [unique_id "aRdstcfhZrb6EV4SvFvNCAAAAgs"]
[Sat Nov 15 03:14:55.722197 2025] [autoindex:error] [pid 45908:tid 45949] [client 4.205.179.237:12278] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 03:14:55.932282 2025] [:error] [pid 45908:tid 45953] [client 4.205.179.237:12278] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Sat Nov 15 03:14:56.162368 2025] [:error] [pid 45908:tid 45957] [client 4.205.179.237:12278] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Nov 15 03:14:56.383219 2025] [:error] [pid 45908:tid 45951] [client 4.205.179.237:12278] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Nov 15 03:14:56.600535 2025] [:error] [pid 45908:tid 45941] [client 4.205.179.237:12278] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sat Nov 15 03:14:56.812262 2025] [:error] [pid 45908:tid 45945] [client 4.205.179.237:12278] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php
[Sat Nov 15 03:14:57.025725 2025] [:error] [pid 45908:tid 45949] [client 4.205.179.237:12278] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php
[Sat Nov 15 03:14:57.236791 2025] [:error] [pid 45908:tid 45960] [client 4.205.179.237:12278] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Nov 15 03:14:57.448253 2025] [:error] [pid 45908:tid 45959] [client 4.205.179.237:12278] File does not exist: /usr/local/apache/htdocs/suspended-page/god4m.php
[Sat Nov 15 03:14:57.659140 2025] [:error] [pid 45908:tid 45961] [client 4.205.179.237:12278] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat Nov 15 03:14:58.088937 2025] [:error] [pid 45908:tid 45962] [client 4.205.179.237:12278] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Sat Nov 15 03:14:58.297123 2025] [:error] [pid 45908:tid 45944] [client 4.205.179.237:12278] [client 4.205.179.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uploads/"] [unique_id "aRd_smWG19mWwZX7KauJ9QAAAAY"]
[Sat Nov 15 03:14:58.710981 2025] [:error] [pid 45907:tid 45913] [client 4.205.179.237:53845] [client 4.205.179.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uploads/"] [unique_id "aRd_slAqmYxCpnT9gJGspQAAAUI"]
[Sat Nov 15 03:14:59.127693 2025] [:error] [pid 45907:tid 45929] [client 4.205.179.237:12271] [client 4.205.179.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uploads/"] [unique_id "aRd_s1AqmYxCpnT9gJGsqwAAAVI"]
[Sat Nov 15 03:14:59.549278 2025] [:error] [pid 45907:tid 45911] [client 4.205.179.237:11997] [client 4.205.179.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uploads/"] [unique_id "aRd_s1AqmYxCpnT9gJGsrgAAAUA"]
[Sat Nov 15 18:40:34.798618 2025] [:error] [pid 27997:tid 28002] [client 141.98.10.107:63274] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-confiq.php
[Sat Nov 15 18:40:37.713126 2025] [:error] [pid 20654:tid 20674] [client 141.98.10.107:64231] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-confiq.php
[Tue Nov 18 13:54:12.870928 2025] [:error] [pid 44470:tid 44475] [client 141.98.11.16:64140] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Nov 19 02:18:51.332851 2025] [:error] [pid 3052:tid 3132] [client 134.209.230.234:61982] [client 134.209.230.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "aRy4i1NM6bOMTTuJnz2ZxAAAAMM"]
[Wed Nov 19 02:18:51.879247 2025] [:error] [pid 3052:tid 3137] [client 134.209.230.234:62333] [client 134.209.230.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "aRy4i1NM6bOMTTuJnz2Z1QAAAMg"]
[Wed Nov 19 02:18:52.427615 2025] [:error] [pid 43881:tid 43925] [client 134.209.230.234:64925] [client 134.209.230.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "aRy4jH_TrIND5buvEyfq-QAAAUw"]
[Wed Nov 19 02:18:52.937221 2025] [:error] [pid 43882:tid 43954] [client 134.209.230.234:65528] [client 134.209.230.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "aRy4jN5CQQLff3maRML67AAAAA4"]
[Wed Nov 19 02:18:53.480470 2025] [:error] [pid 43880:tid 43905] [client 134.209.230.234:49538] [client 134.209.230.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "aRy4je1q1HNbKyNr9SZ5mAAAAFQ"]
[Thu Nov 20 21:49:55.761402 2025] [:error] [pid 40508:tid 40528] [client 172.161.90.19:6347] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Thu Nov 20 21:49:56.006110 2025] [:error] [pid 40508:tid 40525] [client 172.161.90.19:6347] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Nov 20 21:49:56.981518 2025] [:error] [pid 40508:tid 40530] [client 172.161.90.19:6347] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Nov 20 21:49:57.224096 2025] [:error] [pid 40508:tid 40526] [client 172.161.90.19:6347] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Thu Nov 20 21:49:57.465159 2025] [:error] [pid 40508:tid 40519] [client 172.161.90.19:6347] File does not exist: /usr/local/apache/htdocs/suspended-page/mpvloi.php
[Thu Nov 20 21:49:57.702857 2025] [:error] [pid 40508:tid 40534] [client 172.161.90.19:6347] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/0.php"] [unique_id "aR8chaxXNVCMW_ksxPviVgAAApg"]
[Thu Nov 20 21:49:58.194104 2025] [:error] [pid 40508:tid 40513] [client 172.161.90.19:6977] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Thu Nov 20 21:49:58.436714 2025] [:error] [pid 40508:tid 40522] [client 172.161.90.19:6977] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Thu Nov 20 21:49:58.674485 2025] [:error] [pid 40508:tid 40510] [client 172.161.90.19:6977] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/cs.php"] [unique_id "aR8chqxXNVCMW_ksxPviWwAAAoA"]
[Thu Nov 20 21:49:59.153738 2025] [:error] [pid 40508:tid 40524] [client 172.161.90.19:6750] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wikindex.php"] [unique_id "aR8ch6xXNVCMW_ksxPviXAAAAo4"]
[Thu Nov 20 21:49:59.642887 2025] [:error] [pid 40415:tid 40440] [client 172.161.90.19:7001] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wikindex.php"] [unique_id "aR8ch6hjIyLSv09svwPSuwAAAdY"]
[Thu Nov 20 21:50:00.133781 2025] [:error] [pid 40415:tid 40419] [client 172.161.90.19:6763] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wikindex.php"] [unique_id "aR8ciKhjIyLSv09svwPSvAAAAcE"]
[Thu Nov 20 21:50:00.606318 2025] [:error] [pid 34405:tid 34413] [client 172.161.90.19:6728] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/images/m.php"] [unique_id "aR8ciDFpvu8oRK7ATftCpAAAAQY"]
[Thu Nov 20 21:50:01.091480 2025] [:error] [pid 40636:tid 40654] [client 172.161.90.19:6768] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/images/m.php"] [unique_id "aR8ciQK8BWUoW3xq0HAuhgAAA44"]
[Thu Nov 20 21:50:01.565380 2025] [:error] [pid 34405:tid 34422] [client 172.161.90.19:6761] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/images/m.php"] [unique_id "aR8ciTFpvu8oRK7ATftCpwAAAQ8"]
[Thu Nov 20 21:50:02.039747 2025] [:error] [pid 40415:tid 40422] [client 172.161.90.19:6368] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/images/m.php"] [unique_id "aR8ciqhjIyLSv09svwPSvgAAAcQ"]
[Thu Nov 20 21:50:02.549005 2025] [:error] [pid 40508:tid 40516] [client 172.161.90.19:6338] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/kses.php"] [unique_id "aR8ciqxXNVCMW_ksxPviXwAAAoY"]
[Thu Nov 20 21:50:03.023729 2025] [:error] [pid 55343:tid 55415] [client 172.161.90.19:6357] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/jagoan.php"] [unique_id "aR8ci1WlO3EnyVMV7w7TkAAAAJA"]
[Thu Nov 20 21:50:03.521868 2025] [:error] [pid 40445:tid 40485] [client 172.161.90.19:6337] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/jagoan.php"] [unique_id "aR8ci1H-MuFcoWRjXpabSwAAAko"]
[Thu Nov 20 21:50:03.994644 2025] [:error] [pid 40445:tid 40478] [client 172.161.90.19:6367] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/jagoan.php"] [unique_id "aR8ci1H-MuFcoWRjXpabTgAAAkM"]
[Thu Nov 20 21:50:04.479655 2025] [:error] [pid 40445:tid 40488] [client 172.161.90.19:6731] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/images/g3.php"] [unique_id "aR8cjFH-MuFcoWRjXpabUgAAAk0"]
[Thu Nov 20 21:50:04.953522 2025] [:error] [pid 40445:tid 40493] [client 172.161.90.19:6744] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/images/g3.php"] [unique_id "aR8cjFH-MuFcoWRjXpabVQAAAlI"]
[Thu Nov 20 21:50:05.437416 2025] [:error] [pid 40445:tid 40497] [client 172.161.90.19:6978] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/images/g3.php"] [unique_id "aR8cjVH-MuFcoWRjXpabWAAAAlY"]
[Thu Nov 20 21:50:05.913786 2025] [:error] [pid 40508:tid 40519] [client 172.161.90.19:6783] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/images/g3.php"] [unique_id "aR8cjaxXNVCMW_ksxPviYQAAAok"]
[Thu Nov 20 21:50:06.432982 2025] [:error] [pid 40636:tid 40648] [client 172.161.90.19:7002] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aR8cjgK8BWUoW3xq0HAuiQAAA4g"]
[Thu Nov 20 21:50:06.911873 2025] [:error] [pid 40445:tid 40485] [client 172.161.90.19:6986] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aR8cjlH-MuFcoWRjXpabWgAAAko"]
[Thu Nov 20 21:50:07.446846 2025] [:error] [pid 34405:tid 34416] [client 172.161.90.19:6734] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aR8cjzFpvu8oRK7ATftCqQAAAQk"]
[Thu Nov 20 21:50:07.937873 2025] [:error] [pid 40445:tid 40492] [client 172.161.90.19:6392] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aR8cj1H-MuFcoWRjXpabXAAAAlE"]
[Thu Nov 20 21:50:08.487185 2025] [:error] [pid 40508:tid 40511] [client 172.161.90.19:6726] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aR8ckKxXNVCMW_ksxPviYgAAAoE"]
[Thu Nov 20 21:50:08.964067 2025] [:error] [pid 40508:tid 40523] [client 172.161.90.19:6749] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aR8ckKxXNVCMW_ksxPviZAAAAo0"]
[Thu Nov 20 21:50:09.474464 2025] [:error] [pid 40508:tid 40517] [client 172.161.90.19:6999] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aR8ckaxXNVCMW_ksxPviZQAAAoc"]
[Thu Nov 20 21:50:09.959968 2025] [:error] [pid 55343:tid 55421] [client 172.161.90.19:7012] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aR8ckVWlO3EnyVMV7w7TkwAAAJY"]
[Thu Nov 20 21:50:10.490231 2025] [:error] [pid 40636:tid 40655] [client 172.161.90.19:6745] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/htaccess.php"] [unique_id "aR8ckgK8BWUoW3xq0HAuigAAA48"]
[Thu Nov 20 21:50:10.978628 2025] [:error] [pid 34405:tid 34427] [client 172.161.90.19:7035] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/htaccess.php"] [unique_id "aR8ckjFpvu8oRK7ATftCqwAAARQ"]
[Thu Nov 20 21:50:11.524253 2025] [:error] [pid 40636:tid 40641] [client 172.161.90.19:6780] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/htaccess.php"] [unique_id "aR8ckwK8BWUoW3xq0HAuiwAAA4E"]
[Thu Nov 20 21:50:12.001046 2025] [:error] [pid 34405:tid 34410] [client 172.161.90.19:6979] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/htaccess.php"] [unique_id "aR8ckzFpvu8oRK7ATftCrQAAAQM"]
[Thu Nov 20 21:50:12.544513 2025] [:error] [pid 55340:tid 55353] [client 172.161.90.19:7028] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/readme.php"] [unique_id "aR8clPOxD-NeMydTybDAewAAAAg"]
[Thu Nov 20 21:50:13.019515 2025] [:error] [pid 55340:tid 55355] [client 172.161.90.19:6781] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/readme.php"] [unique_id "aR8clfOxD-NeMydTybDAfAAAAAo"]
[Thu Nov 20 21:50:13.537756 2025] [:error] [pid 40445:tid 40485] [client 172.161.90.19:6998] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/readme.php"] [unique_id "aR8clVH-MuFcoWRjXpabZAAAAko"]
[Thu Nov 20 21:50:14.010317 2025] [:error] [pid 40508:tid 40532] [client 172.161.90.19:6364] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/readme.php"] [unique_id "aR8clqxXNVCMW_ksxPviZwAAApY"]
[Thu Nov 20 21:50:14.487011 2025] [:error] [pid 55342:tid 55388] [client 172.161.90.19:6373] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Cok.php"] [unique_id "aR8clrg6x32Tvk7fIG8E5gAAAFA"]
[Thu Nov 20 21:50:14.960100 2025] [:error] [pid 55340:tid 55361] [client 172.161.90.19:6355] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Cok.php"] [unique_id "aR8clvOxD-NeMydTybDAfwAAABA"]
[Thu Nov 20 21:50:15.435106 2025] [:error] [pid 55343:tid 55403] [client 172.161.90.19:6739] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Cok.php"] [unique_id "aR8cl1WlO3EnyVMV7w7TmQAAAIQ"]
[Thu Nov 20 21:50:15.907786 2025] [:error] [pid 55342:tid 55394] [client 172.161.90.19:6372] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Cok.php"] [unique_id "aR8cl7g6x32Tvk7fIG8E6AAAAFY"]
[Thu Nov 20 21:50:16.383986 2025] [:error] [pid 55342:tid 55375] [client 172.161.90.19:7011] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hob.php"] [unique_id "aR8cmLg6x32Tvk7fIG8E6QAAAEM"]
[Thu Nov 20 21:50:16.864766 2025] [:error] [pid 55342:tid 55396] [client 172.161.90.19:6769] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hob.php"] [unique_id "aR8cmLg6x32Tvk7fIG8E6wAAAFg"]
[Thu Nov 20 21:50:17.337273 2025] [:error] [pid 55340:tid 55364] [client 172.161.90.19:6390] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hob.php"] [unique_id "aR8cmfOxD-NeMydTybDAgwAAABM"]
[Thu Nov 20 21:50:17.812897 2025] [:error] [pid 40445:tid 40491] [client 172.161.90.19:6361] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hob.php"] [unique_id "aR8cmVH-MuFcoWRjXpabZwAAAlA"]
[Thu Nov 20 21:50:18.284259 2025] [:error] [pid 40445:tid 40498] [client 172.161.90.19:6778] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kal.php"] [unique_id "aR8cmlH-MuFcoWRjXpabaQAAAlc"]
[Thu Nov 20 21:50:18.758352 2025] [:error] [pid 55340:tid 55356] [client 172.161.90.19:6991] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kal.php"] [unique_id "aR8cmvOxD-NeMydTybDAhAAAAAs"]
[Thu Nov 20 21:50:19.233789 2025] [:error] [pid 40508:tid 40516] [client 172.161.90.19:7029] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kal.php"] [unique_id "aR8cm6xXNVCMW_ksxPviawAAAoY"]
[Thu Nov 20 21:50:19.706724 2025] [:error] [pid 55342:tid 55382] [client 172.161.90.19:6996] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kal.php"] [unique_id "aR8cm7g6x32Tvk7fIG8E7AAAAEo"]
[Thu Nov 20 21:50:20.181029 2025] [:error] [pid 40508:tid 40525] [client 172.161.90.19:6994] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fv.php"] [unique_id "aR8cnKxXNVCMW_ksxPvibAAAAo8"]
[Thu Nov 20 21:50:20.666696 2025] [:error] [pid 40537:tid 40542] [client 172.161.90.19:6765] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fv.php"] [unique_id "aR8cnKKlsL5kxTa3c1wCJgAAAsE"]
[Thu Nov 20 21:50:21.142113 2025] [:error] [pid 40508:tid 40531] [client 172.161.90.19:6993] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fv.php"] [unique_id "aR8cnaxXNVCMW_ksxPvibgAAApU"]
[Thu Nov 20 21:50:21.622696 2025] [:error] [pid 40445:tid 40486] [client 172.161.90.19:6775] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fv.php"] [unique_id "aR8cnVH-MuFcoWRjXpabcAAAAks"]
[Thu Nov 20 21:50:22.094583 2025] [:error] [pid 55340:tid 55357] [client 172.161.90.19:6723] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lx.php"] [unique_id "aR8cnvOxD-NeMydTybDAhwAAAAw"]
[Thu Nov 20 21:50:22.566798 2025] [:error] [pid 55340:tid 55363] [client 172.161.90.19:7026] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lx.php"] [unique_id "aR8cnvOxD-NeMydTybDAiQAAABI"]
[Thu Nov 20 21:50:23.040019 2025] [:error] [pid 55342:tid 55391] [client 172.161.90.19:6356] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lx.php"] [unique_id "aR8cn7g6x32Tvk7fIG8E8QAAAFM"]
[Thu Nov 20 21:50:23.511238 2025] [:error] [pid 40415:tid 40418] [client 172.161.90.19:7020] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lx.php"] [unique_id "aR8cn6hjIyLSv09svwPSzAAAAcA"]
[Thu Nov 20 21:50:23.982606 2025] [:error] [pid 55343:tid 55406] [client 172.161.90.19:6350] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w1w.php"] [unique_id "aR8cn1WlO3EnyVMV7w7TrgAAAIc"]
[Thu Nov 20 21:50:24.457284 2025] [:error] [pid 34405:tid 34425] [client 172.161.90.19:6976] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w1w.php"] [unique_id "aR8coDFpvu8oRK7ATftCtAAAARI"]
[Thu Nov 20 21:50:24.929779 2025] [:error] [pid 55340:tid 55355] [client 172.161.90.19:6365] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w1w.php"] [unique_id "aR8coPOxD-NeMydTybDAiwAAAAo"]
[Thu Nov 20 21:50:25.402040 2025] [:error] [pid 40636:tid 40640] [client 172.161.90.19:6375] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w1w.php"] [unique_id "aR8coQK8BWUoW3xq0HAukgAAA4A"]
[Thu Nov 20 21:50:25.876415 2025] [:error] [pid 40537:tid 40559] [client 172.161.90.19:7031] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Contrller.php"] [unique_id "aR8coaKlsL5kxTa3c1wCKgAAAtI"]
[Thu Nov 20 21:50:26.348211 2025] [:error] [pid 55342:tid 55377] [client 172.161.90.19:6748] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Contrller.php"] [unique_id "aR8corg6x32Tvk7fIG8E-AAAAEU"]
[Thu Nov 20 21:50:26.825913 2025] [:error] [pid 34405:tid 34416] [client 172.161.90.19:41001] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Contrller.php"] [unique_id "aR8cojFpvu8oRK7ATftCtQAAAQk"]
[Thu Nov 20 21:50:27.299778 2025] [:error] [pid 40636:tid 40664] [client 172.161.90.19:7009] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Contrller.php"] [unique_id "aR8cowK8BWUoW3xq0HAulQAAA5g"]
[Thu Nov 20 21:50:27.773960 2025] [:error] [pid 40537:tid 40545] [client 172.161.90.19:6759] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cafe.php"] [unique_id "aR8co6KlsL5kxTa3c1wCLAAAAsQ"]
[Thu Nov 20 21:50:28.246995 2025] [:error] [pid 40445:tid 40478] [client 172.161.90.19:6782] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cafe.php"] [unique_id "aR8cpFH-MuFcoWRjXpabfQAAAkM"]
[Thu Nov 20 21:50:28.731680 2025] [:error] [pid 34405:tid 34431] [client 172.161.90.19:6729] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cafe.php"] [unique_id "aR8cpDFpvu8oRK7ATftCuAAAARg"]
[Thu Nov 20 21:50:29.204827 2025] [:error] [pid 40508:tid 40526] [client 172.161.90.19:6353] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cafe.php"] [unique_id "aR8cpaxXNVCMW_ksxPvihgAAApA"]
[Thu Nov 20 21:50:29.680738 2025] [:error] [pid 40537:tid 40558] [client 172.161.90.19:6757] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ww2.php"] [unique_id "aR8cpaKlsL5kxTa3c1wCLQAAAtE"]
[Thu Nov 20 21:50:30.153020 2025] [:error] [pid 40636:tid 40659] [client 172.161.90.19:7016] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ww2.php"] [unique_id "aR8cpgK8BWUoW3xq0HAumgAAA5M"]
[Thu Nov 20 21:50:30.625868 2025] [:error] [pid 55343:tid 55406] [client 172.161.90.19:6348] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ww2.php"] [unique_id "aR8cplWlO3EnyVMV7w7TwQAAAIc"]
[Thu Nov 20 21:50:31.098282 2025] [:error] [pid 40508:tid 40513] [client 172.161.90.19:6737] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ww2.php"] [unique_id "aR8cp6xXNVCMW_ksxPvihwAAAoM"]
[Thu Nov 20 21:50:31.575268 2025] [:error] [pid 40508:tid 40510] [client 172.161.90.19:40971] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ww3.php"] [unique_id "aR8cp6xXNVCMW_ksxPviiAAAAoA"]
[Thu Nov 20 21:50:32.067908 2025] [:error] [pid 55340:tid 55359] [client 172.161.90.19:6346] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ww3.php"] [unique_id "aR8cqPOxD-NeMydTybDAjwAAAA4"]
[Thu Nov 20 21:50:32.540492 2025] [:error] [pid 55340:tid 55350] [client 172.161.90.19:6746] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ww3.php"] [unique_id "aR8cqPOxD-NeMydTybDAkAAAAAU"]
[Thu Nov 20 21:50:33.011958 2025] [:error] [pid 55430:tid 55450] [client 172.161.90.19:6697] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ww3.php"] [unique_id "aR8cqfPZXaIMEU4pE7sinQAAANE"]
[Thu Nov 20 21:50:33.488647 2025] [:error] [pid 40508:tid 40529] [client 172.161.90.19:7006] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ww4.php"] [unique_id "aR8cqaxXNVCMW_ksxPviiQAAApM"]
[Thu Nov 20 21:50:33.963476 2025] [:error] [pid 55340:tid 55348] [client 172.161.90.19:6380] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ww4.php"] [unique_id "aR8cqfOxD-NeMydTybDAkQAAAAM"]
[Thu Nov 20 21:50:34.436286 2025] [:error] [pid 40508:tid 40520] [client 172.161.90.19:6987] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ww4.php"] [unique_id "aR8cqqxXNVCMW_ksxPviigAAAoo"]
[Thu Nov 20 21:50:34.912901 2025] [:error] [pid 40445:tid 40481] [client 172.161.90.19:6683] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ww4.php"] [unique_id "aR8cqlH-MuFcoWRjXpabgAAAAkY"]
[Thu Nov 20 21:50:35.390677 2025] [:error] [pid 40508:tid 40525] [client 172.161.90.19:6668] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "aR8cq6xXNVCMW_ksxPvijAAAAo8"]
[Thu Nov 20 21:50:35.894494 2025] [:error] [pid 40508:tid 40527] [client 172.161.90.19:6741] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "aR8cq6xXNVCMW_ksxPvijQAAApE"]
[Thu Nov 20 21:50:36.369605 2025] [:error] [pid 40508:tid 40531] [client 172.161.90.19:7007] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "aR8crKxXNVCMW_ksxPvikAAAApU"]
[Thu Nov 20 21:50:36.845469 2025] [:error] [pid 34405:tid 34423] [client 172.161.90.19:6393] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "aR8crDFpvu8oRK7ATftCwAAAARA"]
[Thu Nov 20 21:50:37.323668 2025] [:error] [pid 55430:tid 55449] [client 172.161.90.19:7019] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "aR8crfPZXaIMEU4pE7siogAAANA"]
[Thu Nov 20 21:50:37.804856 2025] [:error] [pid 40636:tid 40645] [client 172.161.90.19:7015] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "aR8crQK8BWUoW3xq0HAunwAAA4U"]
[Thu Nov 20 21:50:38.278175 2025] [:error] [pid 40537:tid 40555] [client 172.161.90.19:6779] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "aR8crqKlsL5kxTa3c1wCNQAAAs4"]
[Thu Nov 20 21:50:38.753197 2025] [:error] [pid 34405:tid 34409] [client 172.161.90.19:6359] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "aR8crjFpvu8oRK7ATftCwgAAAQI"]
[Thu Nov 20 21:50:39.228362 2025] [:error] [pid 55430:tid 55453] [client 172.161.90.19:6753] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "aR8cr_PZXaIMEU4pE7sipAAAANQ"]
[Thu Nov 20 21:50:39.701934 2025] [:error] [pid 40445:tid 40476] [client 172.161.90.19:6657] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "aR8cr1H-MuFcoWRjXpabgwAAAkE"]
[Thu Nov 20 21:50:40.175818 2025] [:error] [pid 40508:tid 40517] [client 172.161.90.19:40982] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "aR8csKxXNVCMW_ksxPvilgAAAoc"]
[Thu Nov 20 21:50:40.654260 2025] [:error] [pid 40415:tid 40436] [client 172.161.90.19:7013] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "aR8csKhjIyLSv09svwPS9QAAAdI"]
[Thu Nov 20 21:50:41.131907 2025] [:error] [pid 40537:tid 40545] [client 172.161.90.19:6662] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/max.php"] [unique_id "aR8csaKlsL5kxTa3c1wCOwAAAsQ"]
[Thu Nov 20 21:50:41.614901 2025] [:error] [pid 40636:tid 40652] [client 172.161.90.19:6980] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/max.php"] [unique_id "aR8csQK8BWUoW3xq0HAuogAAA4w"]
[Thu Nov 20 21:50:42.091529 2025] [:error] [pid 40636:tid 40648] [client 172.161.90.19:6289] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/max.php"] [unique_id "aR8csgK8BWUoW3xq0HAuowAAA4g"]
[Thu Nov 20 21:50:42.567173 2025] [:error] [pid 55430:tid 55451] [client 172.161.90.19:6722] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/max.php"] [unique_id "aR8csvPZXaIMEU4pE7sipwAAANI"]
[Thu Nov 20 21:50:43.043702 2025] [:error] [pid 55430:tid 55456] [client 172.161.90.19:6985] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "aR8cs_PZXaIMEU4pE7siqAAAANc"]
[Thu Nov 20 21:50:43.517513 2025] [:error] [pid 40445:tid 40478] [client 172.161.90.19:6669] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "aR8cs1H-MuFcoWRjXpabhQAAAkM"]
[Thu Nov 20 21:50:43.990503 2025] [:error] [pid 55342:tid 55377] [client 172.161.90.19:40994] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "aR8cs7g6x32Tvk7fIG8FBAAAAEU"]
[Thu Nov 20 21:50:44.492164 2025] [:error] [pid 40508:tid 40531] [client 172.161.90.19:6742] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "aR8ctKxXNVCMW_ksxPvimQAAApU"]
[Thu Nov 20 21:50:44.967250 2025] [:error] [pid 40445:tid 40479] [client 172.161.90.19:6754] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/post.php"] [unique_id "aR8ctFH-MuFcoWRjXpabhgAAAkQ"]
[Thu Nov 20 21:50:45.440750 2025] [:error] [pid 34405:tid 34431] [client 172.161.90.19:6989] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/post.php"] [unique_id "aR8ctTFpvu8oRK7ATftCxwAAARg"]
[Thu Nov 20 21:50:45.918756 2025] [:error] [pid 34405:tid 34418] [client 172.161.90.19:6339] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/post.php"] [unique_id "aR8ctTFpvu8oRK7ATftCyAAAAQs"]
[Thu Nov 20 21:50:46.400032 2025] [:error] [pid 40508:tid 40523] [client 172.161.90.19:7030] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/post.php"] [unique_id "aR8ctqxXNVCMW_ksxPvinAAAAo0"]
[Thu Nov 20 21:50:46.874181 2025] [:error] [pid 55430:tid 55450] [client 172.161.90.19:7034] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aR8ctvPZXaIMEU4pE7siqwAAANE"]
[Thu Nov 20 21:50:47.351302 2025] [:error] [pid 55342:tid 55381] [client 172.161.90.19:6660] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aR8ct7g6x32Tvk7fIG8FBwAAAEk"]
[Thu Nov 20 21:50:47.830679 2025] [:error] [pid 40537:tid 40550] [client 172.161.90.19:7017] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aR8ct6KlsL5kxTa3c1wCPQAAAsk"]
[Thu Nov 20 21:50:48.315925 2025] [:error] [pid 55430:tid 55446] [client 172.161.90.19:6752] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aR8cuPPZXaIMEU4pE7sirgAAAM0"]
[Thu Nov 20 21:50:48.787476 2025] [:error] [pid 40537:tid 40547] [client 172.161.90.19:6370] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aR8cuKKlsL5kxTa3c1wCPwAAAsY"]
[Thu Nov 20 21:50:49.262366 2025] [:error] [pid 55430:tid 55438] [client 172.161.90.19:6376] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aR8cufPZXaIMEU4pE7sirwAAAMU"]
[Thu Nov 20 21:50:49.736064 2025] [:error] [pid 34405:tid 34426] [client 172.161.90.19:6397] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aR8cuTFpvu8oRK7ATftCywAAARM"]
[Thu Nov 20 21:50:50.218025 2025] [:error] [pid 55430:tid 55447] [client 172.161.90.19:7014] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aR8cuvPZXaIMEU4pE7sisAAAAM4"]
[Thu Nov 20 21:50:50.691364 2025] [:error] [pid 55430:tid 55444] [client 172.161.90.19:41002] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aR8cuvPZXaIMEU4pE7siswAAAMs"]
[Thu Nov 20 21:50:51.165016 2025] [:error] [pid 40508:tid 40529] [client 172.161.90.19:6747] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aR8cu6xXNVCMW_ksxPvioAAAApM"]
[Thu Nov 20 21:50:51.657256 2025] [:error] [pid 55342:tid 55378] [client 172.161.90.19:7022] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aR8cu7g6x32Tvk7fIG8FCgAAAEY"]
[Thu Nov 20 21:50:52.130849 2025] [:error] [pid 40508:tid 40528] [client 172.161.90.19:7033] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aR8cvKxXNVCMW_ksxPvipAAAApI"]
[Thu Nov 20 21:50:52.605162 2025] [:error] [pid 40445:tid 40477] [client 172.161.90.19:40969] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aR8cvFH-MuFcoWRjXpabkAAAAkI"]
[Thu Nov 20 21:50:53.087148 2025] [:error] [pid 40445:tid 40488] [client 172.161.90.19:6360] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aR8cvVH-MuFcoWRjXpabkQAAAk0"]
[Thu Nov 20 21:50:53.561597 2025] [:error] [pid 55343:tid 55417] [client 172.161.90.19:6340] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aR8cvVWlO3EnyVMV7w7T0AAAAJI"]
[Thu Nov 20 21:50:54.052864 2025] [:error] [pid 55430:tid 55451] [client 172.161.90.19:6676] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aR8cvvPZXaIMEU4pE7sitQAAANI"]
[Thu Nov 20 21:50:54.525634 2025] [:error] [pid 55430:tid 55442] [client 172.161.90.19:6399] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aR8cvvPZXaIMEU4pE7siuAAAAMk"]
[Thu Nov 20 21:50:55.005268 2025] [:error] [pid 55430:tid 55443] [client 172.161.90.19:6670] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aR8cv_PZXaIMEU4pE7siugAAAMo"]
[Thu Nov 20 21:50:55.482764 2025] [:error] [pid 55430:tid 55454] [client 172.161.90.19:6988] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aR8cv_PZXaIMEU4pE7sivAAAANU"]
[Thu Nov 20 21:50:55.956256 2025] [:error] [pid 55342:tid 55383] [client 172.161.90.19:6366] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aR8cv7g6x32Tvk7fIG8FDgAAAEs"]
[Thu Nov 20 21:50:56.465941 2025] [:error] [pid 40445:tid 40496] [client 172.161.90.19:6711] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/click.php"] [unique_id "aR8cwFH-MuFcoWRjXpabmQAAAlU"]
[Thu Nov 20 21:50:56.945794 2025] [:error] [pid 55343:tid 55411] [client 172.161.90.19:6735] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/click.php"] [unique_id "aR8cwFWlO3EnyVMV7w7T0QAAAIw"]
[Thu Nov 20 21:50:57.418312 2025] [:error] [pid 40636:tid 40656] [client 172.161.90.19:6762] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/click.php"] [unique_id "aR8cwQK8BWUoW3xq0HAuqQAAA5A"]
[Thu Nov 20 21:50:57.891444 2025] [:error] [pid 55430:tid 55449] [client 172.161.90.19:41001] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/click.php"] [unique_id "aR8cwfPZXaIMEU4pE7siwAAAANA"]
[Thu Nov 20 21:50:58.369234 2025] [:error] [pid 40537:tid 40541] [client 172.161.90.19:6349] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Nov 20 21:50:58.609309 2025] [:error] [pid 40537:tid 40561] [client 172.161.90.19:6349] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Thu Nov 20 21:50:58.851738 2025] [:error] [pid 40537:tid 40542] [client 172.161.90.19:6349] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Nov 20 21:50:59.095699 2025] [:error] [pid 40537:tid 40543] [client 172.161.90.19:6349] File does not exist: /usr/local/apache/htdocs/suspended-page/13k.php
[Thu Nov 20 21:50:59.337713 2025] [:error] [pid 40537:tid 40555] [client 172.161.90.19:6349] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Thu Nov 20 21:50:59.579346 2025] [:error] [pid 40537:tid 40550] [client 172.161.90.19:6349] File does not exist: /usr/local/apache/htdocs/suspended-page/yellow.php
[Thu Nov 20 21:50:59.822139 2025] [:error] [pid 40537:tid 40549] [client 172.161.90.19:6349] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Thu Nov 20 21:51:00.063499 2025] [:error] [pid 40537:tid 40556] [client 172.161.90.19:6349] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php
[Thu Nov 20 21:51:00.314814 2025] [:error] [pid 40537:tid 40564] [client 172.161.90.19:6349] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Thu Nov 20 21:51:00.555392 2025] [:error] [pid 40537:tid 40547] [client 172.161.90.19:6349] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aR8cxKKlsL5kxTa3c1wCUAAAAsY"]
[Thu Nov 20 21:51:01.056339 2025] [:error] [pid 40445:tid 40499] [client 172.161.90.19:6756] File does not exist: /usr/local/apache/htdocs/suspended-page/termps.php
[Thu Nov 20 21:51:01.297635 2025] [:error] [pid 40445:tid 40481] [client 172.161.90.19:6756] File does not exist: /usr/local/apache/htdocs/suspended-page/co.php
[Thu Nov 20 21:51:01.539309 2025] [:error] [pid 40445:tid 40494] [client 172.161.90.19:6756] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cong.php"] [unique_id "aR8cxVH-MuFcoWRjXpabpAAAAlM"]
[Thu Nov 20 21:51:02.028292 2025] [:error] [pid 40508:tid 40529] [client 172.161.90.19:6308] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cong.php"] [unique_id "aR8cxqxXNVCMW_ksxPviqQAAApM"]
[Thu Nov 20 21:51:02.542082 2025] [:error] [pid 55342:tid 55373] [client 172.161.90.19:6321] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cong.php"] [unique_id "aR8cxrg6x32Tvk7fIG8FGQAAAEE"]
[Thu Nov 20 21:51:03.026428 2025] [:error] [pid 34405:tid 34425] [client 172.161.90.19:6755] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cong.php"] [unique_id "aR8cxzFpvu8oRK7ATftCzgAAARI"]
[Thu Nov 20 21:51:03.504777 2025] [:error] [pid 55343:tid 55409] [client 172.161.90.19:6867] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "aR8cx1WlO3EnyVMV7w7T0gAAAIo"]
[Thu Nov 20 21:51:03.994436 2025] [:error] [pid 55430:tid 55433] [client 172.161.90.19:40995] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "aR8cx_PZXaIMEU4pE7siyQAAAMA"]
[Thu Nov 20 21:51:04.483130 2025] [:error] [pid 55342:tid 55394] [client 172.161.90.19:41003] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "aR8cyLg6x32Tvk7fIG8FJAAAAFY"]
[Thu Nov 20 21:51:04.960684 2025] [:error] [pid 40537:tid 40554] [client 172.161.90.19:6394] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "aR8cyKKlsL5kxTa3c1wCUQAAAs0"]
[Thu Nov 20 21:51:05.446348 2025] [:error] [pid 40537:tid 40559] [client 172.161.90.19:6740] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "aR8cyaKlsL5kxTa3c1wCUgAAAtI"]
[Thu Nov 20 21:51:05.952937 2025] [:error] [pid 40537:tid 40551] [client 172.161.90.19:41023] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "aR8cyaKlsL5kxTa3c1wCVAAAAso"]
[Thu Nov 20 21:51:06.435962 2025] [:error] [pid 55340:tid 55360] [client 172.161.90.19:6677] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "aR8cyvOxD-NeMydTybDAxwAAAA8"]
[Thu Nov 20 21:51:06.907492 2025] [:error] [pid 55342:tid 55372] [client 172.161.90.19:6983] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "aR8cyrg6x32Tvk7fIG8FMQAAAEA"]
[Thu Nov 20 21:51:07.385671 2025] [:error] [pid 55343:tid 55419] [client 172.161.90.19:6774] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "aR8cy1WlO3EnyVMV7w7T1QAAAJQ"]
[Thu Nov 20 21:51:07.884607 2025] [:error] [pid 55342:tid 55389] [client 172.161.90.19:7010] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "aR8cy7g6x32Tvk7fIG8FNAAAAFE"]
[Thu Nov 20 21:51:08.359755 2025] [:error] [pid 40537:tid 40545] [client 172.161.90.19:43989] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "aR8czKKlsL5kxTa3c1wCVQAAAsQ"]
[Thu Nov 20 21:51:08.831446 2025] [:error] [pid 55430:tid 55436] [client 172.161.90.19:6363] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "aR8czPPZXaIMEU4pE7si1QAAAMM"]
[Thu Nov 20 21:51:09.311092 2025] [:error] [pid 55430:tid 55449] [client 172.161.90.19:6341] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aR8czfPZXaIMEU4pE7si1gAAANA"]
[Thu Nov 20 21:51:09.784161 2025] [:error] [pid 40445:tid 40483] [client 172.161.90.19:6689] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aR8czVH-MuFcoWRjXpabrAAAAkg"]
[Thu Nov 20 21:51:10.258927 2025] [:error] [pid 34405:tid 34412] [client 172.161.90.19:6995] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aR8czjFpvu8oRK7ATftC0AAAAQU"]
[Thu Nov 20 21:51:10.734736 2025] [:error] [pid 55343:tid 55401] [client 172.161.90.19:6389] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aR8czlWlO3EnyVMV7w7T1wAAAII"]
[Thu Nov 20 21:51:11.207769 2025] [:error] [pid 40445:tid 40476] [client 172.161.90.19:6342] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/product.php"] [unique_id "aR8cz1H-MuFcoWRjXpabrQAAAkE"]
[Thu Nov 20 21:51:11.687213 2025] [:error] [pid 55343:tid 55418] [client 172.161.90.19:6695] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/product.php"] [unique_id "aR8cz1WlO3EnyVMV7w7T2AAAAJM"]
[Thu Nov 20 21:51:12.163784 2025] [:error] [pid 40445:tid 40498] [client 172.161.90.19:6713] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/product.php"] [unique_id "aR8c0FH-MuFcoWRjXpabrwAAAlc"]
[Thu Nov 20 21:51:12.638817 2025] [:error] [pid 40537:tid 40560] [client 172.161.90.19:6751] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/product.php"] [unique_id "aR8c0KKlsL5kxTa3c1wCVgAAAtM"]
[Thu Nov 20 21:51:13.121440 2025] [:error] [pid 40415:tid 40426] [client 172.161.90.19:6673] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/function.php"] [unique_id "aR8c0ahjIyLSv09svwPTOAAAAcg"]
[Thu Nov 20 21:51:13.605810 2025] [:error] [pid 40415:tid 40421] [client 172.161.90.19:6719] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/function.php"] [unique_id "aR8c0ahjIyLSv09svwPTOgAAAcM"]
[Thu Nov 20 21:51:14.082385 2025] [:error] [pid 40636:tid 40640] [client 172.161.90.19:6732] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/function.php"] [unique_id "aR8c0gK8BWUoW3xq0HAurQAAA4A"]
[Thu Nov 20 21:51:14.559211 2025] [:error] [pid 40415:tid 40423] [client 172.161.90.19:6738] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/function.php"] [unique_id "aR8c0qhjIyLSv09svwPTPAAAAcU"]
[Thu Nov 20 21:51:15.037506 2025] [:error] [pid 34405:tid 34418] [client 172.161.90.19:40999] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aR8c0zFpvu8oRK7ATftC0wAAAQs"]
[Thu Nov 20 21:51:15.541529 2025] [:error] [pid 34405:tid 34430] [client 172.161.90.19:6664] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aR8c0zFpvu8oRK7ATftC1AAAARc"]
[Thu Nov 20 21:51:16.052011 2025] [:error] [pid 40537:tid 40562] [client 172.161.90.19:6383] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aR8c1KKlsL5kxTa3c1wCWAAAAtU"]
[Thu Nov 20 21:51:16.563848 2025] [:error] [pid 40415:tid 40420] [client 172.161.90.19:43973] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aR8c1KhjIyLSv09svwPTQAAAAcI"]
[Thu Nov 20 21:51:17.050736 2025] [:error] [pid 40445:tid 40491] [client 172.161.90.19:7023] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "aR8c1VH-MuFcoWRjXpabsQAAAlA"]
[Thu Nov 20 21:51:17.543946 2025] [:error] [pid 40445:tid 40497] [client 172.161.90.19:6336] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "aR8c1VH-MuFcoWRjXpabsgAAAlY"]
[Thu Nov 20 21:51:18.042621 2025] [:error] [pid 40508:tid 40530] [client 172.161.90.19:6666] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "aR8c1qxXNVCMW_ksxPvivAAAApQ"]
[Thu Nov 20 21:51:18.526620 2025] [:error] [pid 34405:tid 34424] [client 172.161.90.19:7000] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "aR8c1jFpvu8oRK7ATftC1gAAARE"]
[Thu Nov 20 21:51:19.004362 2025] [:error] [pid 55430:tid 55444] [client 172.161.90.19:7025] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aR8c1_PZXaIMEU4pE7si3wAAAMs"]
[Thu Nov 20 21:51:19.492764 2025] [:error] [pid 55430:tid 55440] [client 172.161.90.19:6704] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aR8c1_PZXaIMEU4pE7si4QAAAMc"]
[Thu Nov 20 21:51:19.976940 2025] [:error] [pid 55430:tid 55447] [client 172.161.90.19:6682] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aR8c1_PZXaIMEU4pE7si4wAAAM4"]
[Thu Nov 20 21:51:20.452669 2025] [:error] [pid 40415:tid 40440] [client 172.161.90.19:40986] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aR8c2KhjIyLSv09svwPTSQAAAdY"]
[Thu Nov 20 21:51:20.931579 2025] [:error] [pid 34405:tid 34426] [client 172.161.90.19:6992] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/index.php"] [unique_id "aR8c2DFpvu8oRK7ATftC1wAAARM"]
[Thu Nov 20 21:51:21.410124 2025] [:error] [pid 55430:tid 55453] [client 172.161.90.19:6374] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/index.php"] [unique_id "aR8c2fPZXaIMEU4pE7si5QAAANQ"]
[Thu Nov 20 21:51:21.906434 2025] [:error] [pid 40508:tid 40534] [client 172.161.90.19:6692] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/index.php"] [unique_id "aR8c2axXNVCMW_ksxPvivwAAApg"]
[Thu Nov 20 21:51:22.380950 2025] [:error] [pid 55430:tid 55435] [client 172.161.90.19:6698] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/index.php"] [unique_id "aR8c2vPZXaIMEU4pE7si5gAAAMI"]
[Thu Nov 20 21:51:22.855463 2025] [:error] [pid 40415:tid 40420] [client 172.161.90.19:6387] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aR8c2qhjIyLSv09svwPTUwAAAcI"]
[Thu Nov 20 21:51:23.329494 2025] [:error] [pid 55340:tid 55365] [client 172.161.90.19:6384] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aR8c2_OxD-NeMydTybDA5gAAABQ"]
[Thu Nov 20 21:51:23.803410 2025] [:error] [pid 55430:tid 55454] [client 172.161.90.19:41022] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aR8c2_PZXaIMEU4pE7si6AAAANU"]
[Thu Nov 20 21:51:24.302266 2025] [:error] [pid 40537:tid 40564] [client 172.161.90.19:6671] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aR8c3KKlsL5kxTa3c1wCXAAAAtc"]
[Thu Nov 20 21:51:24.776784 2025] [:error] [pid 55340:tid 55363] [client 172.161.90.19:41010] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aR8c3POxD-NeMydTybDA6gAAABI"]
[Thu Nov 20 21:51:25.249511 2025] [:error] [pid 40636:tid 40659] [client 172.161.90.19:6990] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aR8c3QK8BWUoW3xq0HAuswAAA5M"]
[Thu Nov 20 21:51:25.729263 2025] [:error] [pid 34405:tid 34409] [client 172.161.90.19:40960] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aR8c3TFpvu8oRK7ATftC2gAAAQI"]
[Thu Nov 20 21:51:26.207739 2025] [:error] [pid 40445:tid 40477] [client 172.161.90.19:6362] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aR8c3lH-MuFcoWRjXpabtgAAAkI"]
[Thu Nov 20 21:51:26.683280 2025] [:error] [pid 40445:tid 40486] [client 172.161.90.19:7005] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aR8c3lH-MuFcoWRjXpabtwAAAks"]
[Thu Nov 20 21:51:27.156035 2025] [:error] [pid 40508:tid 40516] [client 172.161.90.19:6706] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aR8c36xXNVCMW_ksxPviwAAAAoY"]
[Thu Nov 20 21:51:27.631749 2025] [:error] [pid 55343:tid 55400] [client 172.161.90.19:6708] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aR8c31WlO3EnyVMV7w7T3QAAAIE"]
[Thu Nov 20 21:51:28.106084 2025] [:error] [pid 55340:tid 55368] [client 172.161.90.19:6665] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aR8c4POxD-NeMydTybDA7wAAABc"]
[Thu Nov 20 21:51:28.579452 2025] [:error] [pid 40636:tid 40647] [client 172.161.90.19:6766] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aR8c4AK8BWUoW3xq0HAutAAAA4c"]
[Thu Nov 20 21:51:29.065445 2025] [:error] [pid 40445:tid 40481] [client 172.161.90.19:6981] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aR8c4VH-MuFcoWRjXpabvAAAAkY"]
[Thu Nov 20 21:51:29.538853 2025] [:error] [pid 40415:tid 40440] [client 172.161.90.19:7021] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aR8c4ahjIyLSv09svwPTWwAAAdY"]
[Thu Nov 20 21:51:30.011664 2025] [:error] [pid 55342:tid 55377] [client 172.161.90.19:6377] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aR8c4rg6x32Tvk7fIG8FQwAAAEU"]
[Thu Nov 20 21:51:30.488304 2025] [:error] [pid 40415:tid 40426] [client 172.161.90.19:6733] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aR8c4qhjIyLSv09svwPTXwAAAcg"]
[Thu Nov 20 21:51:30.977739 2025] [:error] [pid 40445:tid 40484] [client 172.161.90.19:6770] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aR8c4lH-MuFcoWRjXpabvQAAAkk"]
[Thu Nov 20 21:51:31.452055 2025] [:error] [pid 40508:tid 40530] [client 172.161.90.19:6381] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aR8c46xXNVCMW_ksxPvixgAAApQ"]
[Thu Nov 20 21:51:31.932819 2025] [:error] [pid 40445:tid 40496] [client 172.161.90.19:6693] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aR8c41H-MuFcoWRjXpabvgAAAlU"]
[Thu Nov 20 21:51:32.405277 2025] [:error] [pid 34405:tid 34427] [client 172.161.90.19:6385] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "aR8c5DFpvu8oRK7ATftC5wAAARQ"]
[Thu Nov 20 21:51:32.879564 2025] [:error] [pid 40508:tid 40513] [client 172.161.90.19:41015] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "aR8c5KxXNVCMW_ksxPviyAAAAoM"]
[Thu Nov 20 21:51:33.353123 2025] [:error] [pid 40508:tid 40512] [client 172.161.90.19:6760] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "aR8c5axXNVCMW_ksxPviyQAAAoI"]
[Thu Nov 20 21:51:33.826527 2025] [:error] [pid 55430:tid 55452] [client 172.161.90.19:6727] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "aR8c5fPZXaIMEU4pE7si7QAAANM"]
[Thu Nov 20 21:51:34.303238 2025] [:error] [pid 40445:tid 40495] [client 172.161.90.19:6696] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "aR8c5lH-MuFcoWRjXpabvwAAAlQ"]
[Thu Nov 20 21:51:34.776212 2025] [:error] [pid 40415:tid 40422] [client 172.161.90.19:6295] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "aR8c5qhjIyLSv09svwPTaAAAAcQ"]
[Thu Nov 20 21:51:35.248821 2025] [:error] [pid 55430:tid 55449] [client 172.161.90.19:40979] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "aR8c5_PZXaIMEU4pE7si7gAAANA"]
[Thu Nov 20 21:51:35.721510 2025] [:error] [pid 55430:tid 55447] [client 172.161.90.19:6656] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "aR8c5_PZXaIMEU4pE7si7wAAAM4"]
[Thu Nov 20 21:51:36.195167 2025] [:error] [pid 40508:tid 40534] [client 172.161.90.19:6988] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aR8c6KxXNVCMW_ksxPviywAAApg"]
[Thu Nov 20 21:51:36.677363 2025] [:error] [pid 40508:tid 40510] [client 172.161.90.19:6386] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aR8c6KxXNVCMW_ksxPvizwAAAoA"]
[Thu Nov 20 21:51:37.152475 2025] [:error] [pid 40508:tid 40533] [client 172.161.90.19:6275] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aR8c6axXNVCMW_ksxPvi0AAAApc"]
[Thu Nov 20 21:51:37.631743 2025] [:error] [pid 34405:tid 34428] [client 172.161.90.19:6773] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aR8c6TFpvu8oRK7ATftC6QAAARU"]
[Thu Nov 20 21:51:38.112409 2025] [:error] [pid 40445:tid 40480] [client 172.161.90.19:41005] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "aR8c6lH-MuFcoWRjXpabwQAAAkU"]
[Thu Nov 20 21:51:38.586962 2025] [:error] [pid 55342:tid 55382] [client 172.161.90.19:6324] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "aR8c6rg6x32Tvk7fIG8FRQAAAEo"]
[Thu Nov 20 21:51:39.059834 2025] [:error] [pid 40415:tid 40438] [client 172.161.90.19:6729] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "aR8c66hjIyLSv09svwPTcgAAAdQ"]
[Thu Nov 20 21:51:39.537344 2025] [:error] [pid 40636:tid 40641] [client 172.161.90.19:6702] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "aR8c6wK8BWUoW3xq0HAuvAAAA4E"]
[Thu Nov 20 21:51:40.018121 2025] [:error] [pid 40445:tid 40489] [client 172.161.90.19:6694] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR8c7FH-MuFcoWRjXpabwwAAAk4"]
[Thu Nov 20 21:51:40.496841 2025] [:error] [pid 34405:tid 34412] [client 172.161.90.19:40966] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR8c7DFpvu8oRK7ATftC6wAAAQU"]
[Thu Nov 20 21:51:40.969151 2025] [:error] [pid 40415:tid 40442] [client 172.161.90.19:6703] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR8c7KhjIyLSv09svwPTdwAAAdg"]
[Thu Nov 20 21:51:41.443692 2025] [:error] [pid 55430:tid 55453] [client 172.161.90.19:41011] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR8c7fPZXaIMEU4pE7si8QAAANQ"]
[Thu Nov 20 21:51:41.915653 2025] [:error] [pid 55342:tid 55392] [client 172.161.90.19:40980] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aR8c7bg6x32Tvk7fIG8FRgAAAFQ"]
[Thu Nov 20 21:51:42.388034 2025] [:error] [pid 55343:tid 55422] [client 172.161.90.19:6658] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aR8c7lWlO3EnyVMV7w7T5QAAAJc"]
[Thu Nov 20 21:51:42.865300 2025] [:error] [pid 40415:tid 40431] [client 172.161.90.19:6672] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aR8c7qhjIyLSv09svwPTfQAAAc0"]
[Thu Nov 20 21:51:43.339900 2025] [:error] [pid 55342:tid 55387] [client 172.161.90.19:6358] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aR8c77g6x32Tvk7fIG8FRwAAAE8"]
[Thu Nov 20 21:51:43.813496 2025] [:error] [pid 40415:tid 40434] [client 172.161.90.19:40997] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/default.php"] [unique_id "aR8c76hjIyLSv09svwPTgAAAAdA"]
[Thu Nov 20 21:51:44.287799 2025] [:error] [pid 40508:tid 40513] [client 172.161.90.19:6344] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/default.php"] [unique_id "aR8c8KxXNVCMW_ksxPvi1QAAAoM"]
[Thu Nov 20 21:51:44.762904 2025] [:error] [pid 55342:tid 55390] [client 172.161.90.19:6396] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/default.php"] [unique_id "aR8c8Lg6x32Tvk7fIG8FSAAAAFI"]
[Thu Nov 20 21:51:45.235366 2025] [:error] [pid 40415:tid 40427] [client 172.161.90.19:6691] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/default.php"] [unique_id "aR8c8ahjIyLSv09svwPThQAAAck"]
[Thu Nov 20 21:51:45.707905 2025] [:error] [pid 40415:tid 40432] [client 172.161.90.19:6345] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aR8c8ahjIyLSv09svwPTiAAAAc4"]
[Thu Nov 20 21:51:46.181405 2025] [:error] [pid 55430:tid 55455] [client 172.161.90.19:43982] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aR8c8vPZXaIMEU4pE7si8wAAANY"]
[Thu Nov 20 21:51:46.660216 2025] [:error] [pid 55342:tid 55381] [client 172.161.90.19:6712] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aR8c8rg6x32Tvk7fIG8FSgAAAEk"]
[Thu Nov 20 21:51:47.135365 2025] [:error] [pid 40445:tid 40497] [client 172.161.90.19:6299] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aR8c81H-MuFcoWRjXpabzQAAAlY"]
[Thu Nov 20 21:51:47.609151 2025] [:error] [pid 40415:tid 40431] [client 172.161.90.19:6720] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aR8c86hjIyLSv09svwPTjAAAAc0"]
[Thu Nov 20 21:51:48.082252 2025] [:error] [pid 55342:tid 55373] [client 172.161.90.19:7004] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aR8c9Lg6x32Tvk7fIG8FTAAAAEE"]
[Thu Nov 20 21:51:48.555150 2025] [:error] [pid 55430:tid 55442] [client 172.161.90.19:40970] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aR8c9PPZXaIMEU4pE7si9AAAAMk"]
[Thu Nov 20 21:51:49.031099 2025] [:error] [pid 40508:tid 40514] [client 172.161.90.19:6686] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aR8c9axXNVCMW_ksxPvi2AAAAoQ"]
[Thu Nov 20 21:51:49.507181 2025] [:error] [pid 40537:tid 40542] [client 172.161.90.19:6352] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "aR8c9aKlsL5kxTa3c1wCZgAAAsE"]
[Thu Nov 20 21:51:49.980227 2025] [:error] [pid 40445:tid 40489] [client 172.161.90.19:41007] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "aR8c9VH-MuFcoWRjXpabzgAAAk4"]
[Thu Nov 20 21:51:50.453020 2025] [:error] [pid 40508:tid 40521] [client 172.161.90.19:6681] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "aR8c9qxXNVCMW_ksxPvi2QAAAos"]
[Thu Nov 20 21:51:50.926575 2025] [:error] [pid 55430:tid 55454] [client 172.161.90.19:6743] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "aR8c9vPZXaIMEU4pE7si9gAAANU"]
[Thu Nov 20 21:51:51.398738 2025] [:error] [pid 40445:tid 40492] [client 172.161.90.19:6710] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/buy.php"] [unique_id "aR8c91H-MuFcoWRjXpabzwAAAlE"]
[Thu Nov 20 21:51:51.873657 2025] [:error] [pid 55430:tid 55448] [client 172.161.90.19:6764] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/buy.php"] [unique_id "aR8c9_PZXaIMEU4pE7si9wAAAM8"]
[Thu Nov 20 21:51:52.347594 2025] [:error] [pid 55430:tid 55446] [client 172.161.90.19:6674] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/buy.php"] [unique_id "aR8c-PPZXaIMEU4pE7si-AAAAM0"]
[Thu Nov 20 21:51:52.822786 2025] [:error] [pid 55430:tid 55441] [client 172.161.90.19:6351] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/buy.php"] [unique_id "aR8c-PPZXaIMEU4pE7si-gAAAMg"]
[Thu Nov 20 21:51:53.296012 2025] [:error] [pid 55430:tid 55456] [client 172.161.90.19:6371] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aR8c-fPZXaIMEU4pE7si-wAAANc"]
[Thu Nov 20 21:51:53.771095 2025] [:error] [pid 40445:tid 40477] [client 172.161.90.19:43999] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aR8c-VH-MuFcoWRjXpab0QAAAkI"]
[Thu Nov 20 21:51:54.253881 2025] [:error] [pid 40445:tid 40475] [client 172.161.90.19:6663] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aR8c-lH-MuFcoWRjXpab0gAAAkA"]
[Thu Nov 20 21:51:54.725886 2025] [:error] [pid 55342:tid 55377] [client 172.161.90.19:6667] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aR8c-rg6x32Tvk7fIG8FUQAAAEU"]
[Thu Nov 20 21:51:55.199657 2025] [:error] [pid 55342:tid 55394] [client 172.161.90.19:6311] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aR8c-7g6x32Tvk7fIG8FUgAAAFY"]
[Thu Nov 20 21:51:55.672994 2025] [:error] [pid 40445:tid 40479] [client 172.161.90.19:40990] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aR8c-1H-MuFcoWRjXpab1gAAAkQ"]
[Thu Nov 20 21:51:56.150876 2025] [:error] [pid 40508:tid 40526] [client 172.161.90.19:6701] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aR8c_KxXNVCMW_ksxPvi3QAAApA"]
[Thu Nov 20 21:51:56.625020 2025] [:error] [pid 40537:tid 40556] [client 172.161.90.19:6320] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aR8c_KKlsL5kxTa3c1wCZwAAAs8"]
[Thu Nov 20 21:51:57.097466 2025] [:error] [pid 40537:tid 40564] [client 172.161.90.19:40976] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aR8c_aKlsL5kxTa3c1wCaQAAAtc"]
[Thu Nov 20 21:51:57.570763 2025] [:error] [pid 40508:tid 40529] [client 172.161.90.19:40977] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aR8c_axXNVCMW_ksxPvi4AAAApM"]
[Thu Nov 20 21:51:58.045121 2025] [:error] [pid 40636:tid 40645] [client 172.161.90.19:40981] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aR8c_gK8BWUoW3xq0HAuwgAAA4U"]
[Thu Nov 20 21:51:58.521415 2025] [:error] [pid 40445:tid 40481] [client 172.161.90.19:6278] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aR8c_lH-MuFcoWRjXpab2AAAAkY"]
[Thu Nov 20 21:51:59.003230 2025] [:error] [pid 40508:tid 40531] [client 172.161.90.19:6388] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aR8c_6xXNVCMW_ksxPvi4gAAApU"]
[Thu Nov 20 21:51:59.477431 2025] [:error] [pid 40508:tid 40511] [client 172.161.90.19:6354] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aR8c_6xXNVCMW_ksxPvi4wAAAoE"]
[Thu Nov 20 21:51:59.951198 2025] [:error] [pid 55342:tid 55390] [client 172.161.90.19:6398] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aR8c_7g6x32Tvk7fIG8FVwAAAFI"]
[Thu Nov 20 21:52:00.445523 2025] [:error] [pid 55340:tid 55368] [client 172.161.90.19:44029] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aR8dAPOxD-NeMydTybDA-wAAABc"]
[Thu Nov 20 21:52:00.919519 2025] [:error] [pid 55343:tid 55420] [client 172.161.90.19:40972] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aR8dAFWlO3EnyVMV7w7T7wAAAJU"]
[Thu Nov 20 21:52:01.405260 2025] [:error] [pid 40537:tid 40544] [client 172.161.90.19:6283] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Thu Nov 20 21:52:01.889805 2025] [:error] [pid 40537:tid 40554] [client 172.161.90.19:6283] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Thu Nov 20 21:52:03.411014 2025] [:error] [pid 40537:tid 40559] [client 172.161.90.19:6283] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Thu Nov 20 21:52:03.650781 2025] [:error] [pid 40537:tid 40551] [client 172.161.90.19:6283] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Thu Nov 20 21:52:04.133430 2025] [:error] [pid 40537:tid 40553] [client 172.161.90.19:6283] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php
[Thu Nov 20 21:52:05.215380 2025] [:error] [pid 40537:tid 40558] [client 172.161.90.19:6283] File does not exist: /usr/local/apache/htdocs/suspended-page/article.php
[Thu Nov 20 21:52:05.458088 2025] [:error] [pid 40537:tid 40560] [client 172.161.90.19:6283] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Nov 20 21:52:05.695896 2025] [:error] [pid 40537:tid 40563] [client 172.161.90.19:6283] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aR8dBaKlsL5kxTa3c1wCdwAAAtY"]
[Thu Nov 20 21:52:06.168970 2025] [:error] [pid 40415:tid 40419] [client 172.161.90.19:6687] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aR8dBqhjIyLSv09svwPTqgAAAcE"]
[Thu Nov 20 21:52:06.644880 2025] [:error] [pid 40508:tid 40520] [client 172.161.90.19:6379] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aR8dBqxXNVCMW_ksxPvi6AAAAoo"]
[Thu Nov 20 21:52:07.117835 2025] [:error] [pid 40636:tid 40643] [client 172.161.90.19:40963] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aR8dBwK8BWUoW3xq0HAuyQAAA4M"]
[Thu Nov 20 21:52:07.591033 2025] [:error] [pid 55430:tid 55453] [client 172.161.90.19:40983] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "aR8dB_PZXaIMEU4pE7sjAQAAANQ"]
[Thu Nov 20 21:52:08.064233 2025] [:error] [pid 40508:tid 40510] [client 172.161.90.19:6725] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "aR8dCKxXNVCMW_ksxPvi6QAAAoA"]
[Thu Nov 20 21:52:08.536675 2025] [:error] [pid 40508:tid 40517] [client 172.161.90.19:6318] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "aR8dCKxXNVCMW_ksxPvi6wAAAoc"]
[Thu Nov 20 21:52:09.010563 2025] [:error] [pid 55342:tid 55393] [client 172.161.90.19:6316] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "aR8dCbg6x32Tvk7fIG8FXAAAAFU"]
[Thu Nov 20 21:52:09.486473 2025] [:error] [pid 55342:tid 55388] [client 172.161.90.19:6313] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aR8dCbg6x32Tvk7fIG8FXQAAAFA"]
[Thu Nov 20 21:52:09.959750 2025] [:error] [pid 40415:tid 40430] [client 172.161.90.19:6276] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aR8dCahjIyLSv09svwPTrwAAAcw"]
[Thu Nov 20 21:52:10.440096 2025] [:error] [pid 55343:tid 55402] [client 172.161.90.19:41021] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aR8dClWlO3EnyVMV7w7T9AAAAIM"]
[Thu Nov 20 21:52:10.913212 2025] [:error] [pid 40636:tid 40647] [client 172.161.90.19:6772] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aR8dCgK8BWUoW3xq0HAuywAAA4c"]
[Thu Nov 20 21:52:11.390397 2025] [:error] [pid 40445:tid 40486] [client 172.161.90.19:43997] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/byp.php"] [unique_id "aR8dC1H-MuFcoWRjXpab3QAAAks"]
[Thu Nov 20 21:52:11.863484 2025] [:error] [pid 40636:tid 40660] [client 172.161.90.19:6330] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/byp.php"] [unique_id "aR8dCwK8BWUoW3xq0HAuzAAAA5Q"]
[Thu Nov 20 21:52:12.340084 2025] [:error] [pid 55342:tid 55386] [client 172.161.90.19:43984] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/byp.php"] [unique_id "aR8dDLg6x32Tvk7fIG8FYAAAAE4"]
[Thu Nov 20 21:52:12.812995 2025] [:error] [pid 40415:tid 40437] [client 172.161.90.19:41017] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/byp.php"] [unique_id "aR8dDKhjIyLSv09svwPTsQAAAdM"]
[Thu Nov 20 21:52:13.285720 2025] [:error] [pid 55342:tid 55380] [client 172.161.90.19:6716] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aR8dDbg6x32Tvk7fIG8FYgAAAEg"]
[Thu Nov 20 21:52:13.757938 2025] [:error] [pid 55340:tid 55362] [client 172.161.90.19:6892] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aR8dDfOxD-NeMydTybDBBwAAABE"]
[Thu Nov 20 21:52:14.233727 2025] [:error] [pid 40445:tid 40499] [client 172.161.90.19:6699] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aR8dDlH-MuFcoWRjXpab4QAAAlg"]
[Thu Nov 20 21:52:14.705611 2025] [:error] [pid 40636:tid 40644] [client 172.161.90.19:7039] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aR8dDgK8BWUoW3xq0HAuzQAAA4Q"]
[Thu Nov 20 21:52:15.187411 2025] [:error] [pid 34405:tid 34421] [client 172.161.90.19:6333] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "aR8dDzFpvu8oRK7ATftC-wAAAQ4"]
[Thu Nov 20 21:52:15.659907 2025] [:error] [pid 40508:tid 40511] [client 172.161.90.19:43987] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "aR8dD6xXNVCMW_ksxPvjAQAAAoE"]
[Thu Nov 20 21:52:16.131932 2025] [:error] [pid 40445:tid 40481] [client 172.161.90.19:44014] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "aR8dEFH-MuFcoWRjXpab4wAAAkY"]
[Thu Nov 20 21:52:16.604987 2025] [:error] [pid 55430:tid 55443] [client 172.161.90.19:41020] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "aR8dEPPZXaIMEU4pE7sjGQAAAMo"]
[Thu Nov 20 21:52:17.077754 2025] [:error] [pid 40415:tid 40425] [client 172.161.90.19:40967] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/index.php"] [unique_id "aR8dEahjIyLSv09svwPTtAAAAcc"]
[Thu Nov 20 21:52:17.556238 2025] [:error] [pid 40415:tid 40441] [client 172.161.90.19:40964] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/index.php"] [unique_id "aR8dEahjIyLSv09svwPTtQAAAdc"]
[Thu Nov 20 21:52:18.030852 2025] [:error] [pid 55343:tid 55412] [client 172.161.90.19:43986] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/index.php"] [unique_id "aR8dElWlO3EnyVMV7w7T9gAAAI0"]
[Thu Nov 20 21:52:18.503690 2025] [:error] [pid 34405:tid 34407] [client 172.161.90.19:6855] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/index.php"] [unique_id "aR8dEjFpvu8oRK7ATftDAgAAAQA"]
[Thu Nov 20 21:52:18.978053 2025] [:error] [pid 55430:tid 55450] [client 172.161.90.19:6465] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aR8dEvPZXaIMEU4pE7sjHgAAANE"]
[Thu Nov 20 21:52:19.458826 2025] [:error] [pid 55342:tid 55376] [client 172.161.90.19:41008] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aR8dE7g6x32Tvk7fIG8FcAAAAEQ"]
[Thu Nov 20 21:52:19.933034 2025] [:error] [pid 55343:tid 55410] [client 172.161.90.19:6343] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aR8dE1WlO3EnyVMV7w7T9wAAAIs"]
[Thu Nov 20 21:52:20.408808 2025] [:error] [pid 40415:tid 40424] [client 172.161.90.19:43972] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aR8dFKhjIyLSv09svwPTtwAAAcY"]
[Thu Nov 20 21:52:20.882335 2025] [:error] [pid 40508:tid 40510] [client 172.161.90.19:43971] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aR8dFKxXNVCMW_ksxPvjDAAAAoA"]
[Thu Nov 20 21:52:21.360289 2025] [:error] [pid 55342:tid 55377] [client 172.161.90.19:6510] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aR8dFbg6x32Tvk7fIG8FcwAAAEU"]
[Thu Nov 20 21:52:21.832565 2025] [:error] [pid 40445:tid 40491] [client 172.161.90.19:6274] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aR8dFVH-MuFcoWRjXpab5gAAAlA"]
[Thu Nov 20 21:52:22.310490 2025] [:error] [pid 55430:tid 55447] [client 172.161.90.19:7027] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aR8dFvPZXaIMEU4pE7sjIAAAAM4"]
[Thu Nov 20 21:52:22.783830 2025] [:error] [pid 40445:tid 40484] [client 172.161.90.19:6853] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/about.php"] [unique_id "aR8dFlH-MuFcoWRjXpab5wAAAkk"]
[Thu Nov 20 21:52:23.260214 2025] [:error] [pid 55343:tid 55408] [client 172.161.90.19:6771] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/about.php"] [unique_id "aR8dF1WlO3EnyVMV7w7T-QAAAIk"]
[Thu Nov 20 21:52:23.733983 2025] [:error] [pid 40415:tid 40434] [client 172.161.90.19:41016] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/about.php"] [unique_id "aR8dF6hjIyLSv09svwPTuQAAAdA"]
[Thu Nov 20 21:52:24.206221 2025] [:error] [pid 55430:tid 55457] [client 172.161.90.19:43983] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/about.php"] [unique_id "aR8dGPPZXaIMEU4pE7sjIQAAANg"]
[Thu Nov 20 21:52:24.679956 2025] [:error] [pid 55340:tid 55364] [client 172.161.90.19:6319] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gmo.php"] [unique_id "aR8dGPOxD-NeMydTybDBDAAAABM"]
[Thu Nov 20 21:52:25.155222 2025] [:error] [pid 55340:tid 55346] [client 172.161.90.19:6707] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gmo.php"] [unique_id "aR8dGfOxD-NeMydTybDBDQAAAAE"]
[Thu Nov 20 21:52:25.628448 2025] [:error] [pid 40508:tid 40530] [client 172.161.90.19:44018] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gmo.php"] [unique_id "aR8dGaxXNVCMW_ksxPvjFgAAApQ"]
[Thu Nov 20 21:52:26.102620 2025] [:error] [pid 55343:tid 55411] [client 172.161.90.19:6309] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gmo.php"] [unique_id "aR8dGlWlO3EnyVMV7w7T-gAAAIw"]
[Thu Nov 20 21:52:26.590235 2025] [:error] [pid 40415:tid 40432] [client 172.161.90.19:6304] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aR8dGqhjIyLSv09svwPTuwAAAc4"]
[Thu Nov 20 21:52:27.065953 2025] [:error] [pid 40636:tid 40658] [client 172.161.90.19:40991] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/css/index.php"] [unique_id "aR8dGwK8BWUoW3xq0HAu0gAAA5I"]
[Thu Nov 20 21:52:27.541985 2025] [:error] [pid 55342:tid 55382] [client 172.161.90.19:44013] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/css/index.php"] [unique_id "aR8dG7g6x32Tvk7fIG8FdgAAAEo"]
[Thu Nov 20 21:52:28.019203 2025] [:error] [pid 34405:tid 34428] [client 172.161.90.19:6294] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/css/index.php"] [unique_id "aR8dHDFpvu8oRK7ATftDBgAAARU"]
[Thu Nov 20 21:52:28.498036 2025] [:error] [pid 40636:tid 40663] [client 172.161.90.19:44000] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aR8dHAK8BWUoW3xq0HAu1AAAA5c"]
[Thu Nov 20 21:52:28.976725 2025] [:error] [pid 40415:tid 40435] [client 172.161.90.19:6315] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aR8dHKhjIyLSv09svwPTvwAAAdE"]
[Thu Nov 20 21:52:29.452004 2025] [:error] [pid 40636:tid 40664] [client 172.161.90.19:6310] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aR8dHQK8BWUoW3xq0HAu1gAAA5g"]
[Thu Nov 20 21:52:29.926446 2025] [:error] [pid 40636:tid 40661] [client 172.161.90.19:6273] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aR8dHQK8BWUoW3xq0HAu1wAAA5U"]
[Thu Nov 20 21:52:30.400423 2025] [:error] [pid 55342:tid 55378] [client 172.161.90.19:44001] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aR8dHrg6x32Tvk7fIG8FeQAAAEY"]
[Thu Nov 20 21:52:30.888118 2025] [:error] [pid 55430:tid 55448] [client 172.161.90.19:6307] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aR8dHvPZXaIMEU4pE7sjJQAAAM8"]
[Thu Nov 20 21:52:31.375847 2025] [:error] [pid 55430:tid 55454] [client 172.161.90.19:43968] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aR8dH_PZXaIMEU4pE7sjJgAAANU"]
[Thu Nov 20 21:52:31.849440 2025] [:error] [pid 40445:tid 40476] [client 172.161.90.19:6300] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aR8dH1H-MuFcoWRjXpab7gAAAkE"]
[Thu Nov 20 21:52:32.322675 2025] [:error] [pid 40636:tid 40660] [client 172.161.90.19:44012] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aR8dIAK8BWUoW3xq0HAu3QAAA5Q"]
[Thu Nov 20 21:52:32.796463 2025] [:error] [pid 55343:tid 55407] [client 172.161.90.19:6709] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aR8dIFWlO3EnyVMV7w7T_QAAAIg"]
[Thu Nov 20 21:52:33.270112 2025] [:error] [pid 40415:tid 40424] [client 172.161.90.19:40962] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aR8dIahjIyLSv09svwPTxQAAAcY"]
[Thu Nov 20 21:52:33.743538 2025] [:error] [pid 55430:tid 55450] [client 172.161.90.19:43975] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aR8dIfPZXaIMEU4pE7sjKAAAANE"]
[Thu Nov 20 21:52:34.217816 2025] [:error] [pid 55340:tid 55360] [client 172.161.90.19:6736] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aR8dIvOxD-NeMydTybDBEQAAAA8"]
[Thu Nov 20 21:52:34.691724 2025] [:error] [pid 40445:tid 40484] [client 172.161.90.19:6685] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aR8dIlH-MuFcoWRjXpab8gAAAkk"]
[Thu Nov 20 21:52:35.166372 2025] [:error] [pid 55430:tid 55441] [client 172.161.90.19:6895] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aR8dI_PZXaIMEU4pE7sjKQAAAMg"]
[Thu Nov 20 21:52:35.640079 2025] [:error] [pid 55343:tid 55416] [client 172.161.90.19:6679] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aR8dI1WlO3EnyVMV7w7UAQAAAJE"]
[Thu Nov 20 21:52:36.111713 2025] [:error] [pid 40636:tid 40653] [client 172.161.90.19:6282] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aR8dJAK8BWUoW3xq0HAu3gAAA40"]
[Thu Nov 20 21:52:36.584386 2025] [:error] [pid 55343:tid 55419] [client 172.161.90.19:43977] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aR8dJFWlO3EnyVMV7w7UBAAAAJQ"]
[Thu Nov 20 21:52:37.062945 2025] [:error] [pid 40537:tid 40553] [client 172.161.90.19:40978] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aR8dJaKlsL5kxTa3c1wCmQAAAsw"]
[Thu Nov 20 21:52:37.535197 2025] [:error] [pid 40537:tid 40565] [client 172.161.90.19:40984] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "aR8dJaKlsL5kxTa3c1wCmwAAAtg"]
[Thu Nov 20 21:52:38.008270 2025] [:error] [pid 55342:tid 55372] [client 172.161.90.19:6391] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "aR8dJrg6x32Tvk7fIG8FfAAAAEA"]
[Thu Nov 20 21:52:38.482450 2025] [:error] [pid 40537:tid 40543] [client 172.161.90.19:6327] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "aR8dJqKlsL5kxTa3c1wCnQAAAsI"]
[Thu Nov 20 21:52:38.954242 2025] [:error] [pid 40537:tid 40542] [client 172.161.90.19:6518] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aR8dJqKlsL5kxTa3c1wCngAAAsE"]
[Thu Nov 20 21:52:39.430904 2025] [:error] [pid 40445:tid 40489] [client 172.161.90.19:40993] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aR8dJ1H-MuFcoWRjXpab9wAAAk4"]
[Thu Nov 20 21:52:39.904976 2025] [:error] [pid 40537:tid 40561] [client 172.161.90.19:6312] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aR8dJ6KlsL5kxTa3c1wCnwAAAtQ"]
[Thu Nov 20 21:52:40.378656 2025] [:error] [pid 55430:tid 55451] [client 172.161.90.19:6293] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aR8dKPPZXaIMEU4pE7sjNQAAANI"]
[Thu Nov 20 21:52:40.852108 2025] [:error] [pid 40445:tid 40478] [client 172.161.90.19:40974] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aR8dKFH-MuFcoWRjXpab-QAAAkM"]
[Thu Nov 20 21:52:41.324891 2025] [:error] [pid 40537:tid 40550] [client 172.161.90.19:44003] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aR8dKaKlsL5kxTa3c1wCoAAAAsk"]
[Thu Nov 20 21:52:41.797448 2025] [:error] [pid 40415:tid 40436] [client 172.161.90.19:40965] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ww1.php"] [unique_id "aR8dKahjIyLSv09svwPT2gAAAdI"]
[Thu Nov 20 21:52:42.273252 2025] [:error] [pid 55340:tid 55359] [client 172.161.90.19:7018] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ww1.php"] [unique_id "aR8dKvOxD-NeMydTybDBEwAAAA4"]
[Thu Nov 20 21:52:42.746788 2025] [:error] [pid 40508:tid 40524] [client 172.161.90.19:40973] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ww1.php"] [unique_id "aR8dKqxXNVCMW_ksxPvjOgAAAo4"]
[Thu Nov 20 21:52:43.221996 2025] [:error] [pid 55430:tid 55450] [client 172.161.90.19:41013] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/qqq.php"] [unique_id "aR8dK_PZXaIMEU4pE7sjOwAAANE"]
[Thu Nov 20 21:52:43.698011 2025] [:error] [pid 40636:tid 40640] [client 172.161.90.19:43976] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/qqq.php"] [unique_id "aR8dKwK8BWUoW3xq0HAu4QAAA4A"]
[Thu Nov 20 21:52:44.170702 2025] [:error] [pid 40508:tid 40522] [client 172.161.90.19:40985] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/qqq.php"] [unique_id "aR8dLKxXNVCMW_ksxPvjPQAAAow"]
[Thu Nov 20 21:52:44.648341 2025] [:error] [pid 40537:tid 40557] [client 172.161.90.19:43996] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/qqq.php"] [unique_id "aR8dLKKlsL5kxTa3c1wCpAAAAtA"]
[Thu Nov 20 21:52:45.120060 2025] [:error] [pid 55342:tid 55390] [client 172.161.90.19:6717] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/about/function.php"] [unique_id "aR8dLbg6x32Tvk7fIG8FgwAAAFI"]
[Thu Nov 20 21:52:45.592737 2025] [:error] [pid 55430:tid 55438] [client 172.161.90.19:6306] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/about/function.php"] [unique_id "aR8dLfPZXaIMEU4pE7sjPgAAAMU"]
[Thu Nov 20 21:52:46.069187 2025] [:error] [pid 55340:tid 55349] [client 172.161.90.19:40988] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/about/function.php"] [unique_id "aR8dLvOxD-NeMydTybDBFgAAAAQ"]
[Thu Nov 20 21:52:46.543235 2025] [:error] [pid 55342:tid 55382] [client 172.161.90.19:44023] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/about/function.php"] [unique_id "aR8dLrg6x32Tvk7fIG8FhQAAAEo"]
[Thu Nov 20 21:52:47.020126 2025] [:error] [pid 40636:tid 40648] [client 172.161.90.19:6506] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aR8dLwK8BWUoW3xq0HAu5AAAA4g"]
[Thu Nov 20 21:52:47.500984 2025] [:error] [pid 40636:tid 40646] [client 172.161.90.19:6328] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin/function.php"] [unique_id "aR8dLwK8BWUoW3xq0HAu5gAAA4Y"]
[Thu Nov 20 21:52:47.993003 2025] [:error] [pid 55342:tid 55373] [client 172.161.90.19:40968] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin/function.php"] [unique_id "aR8dL7g6x32Tvk7fIG8FhgAAAEE"]
[Thu Nov 20 21:52:48.475695 2025] [:error] [pid 40445:tid 40494] [client 172.161.90.19:6277] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin/function.php"] [unique_id "aR8dMFH-MuFcoWRjXpab_wAAAlM"]
[Thu Nov 20 21:52:48.947884 2025] [:error] [pid 55343:tid 55403] [client 172.161.90.19:41006] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aR8dMFWlO3EnyVMV7w7UEAAAAIQ"]
[Thu Nov 20 21:52:49.420767 2025] [:error] [pid 40636:tid 40647] [client 172.161.90.19:6863] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aR8dMQK8BWUoW3xq0HAu6AAAA4c"]
[Thu Nov 20 21:52:49.897020 2025] [:error] [pid 40415:tid 40419] [client 172.161.90.19:6659] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aR8dMahjIyLSv09svwPT3QAAAcE"]
[Thu Nov 20 21:52:50.370824 2025] [:error] [pid 40415:tid 40437] [client 172.161.90.19:6700] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aR8dMqhjIyLSv09svwPT3gAAAdM"]
[Thu Nov 20 21:52:50.843378 2025] [:error] [pid 40508:tid 40523] [client 172.161.90.19:6705] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aR8dMqxXNVCMW_ksxPvjVQAAAo0"]
[Thu Nov 20 21:52:51.318484 2025] [:error] [pid 40445:tid 40481] [client 172.161.90.19:6369] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aR8dM1H-MuFcoWRjXpacEAAAAkY"]
[Thu Nov 20 21:52:51.792108 2025] [:error] [pid 55342:tid 55395] [client 172.161.90.19:6690] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aR8dM7g6x32Tvk7fIG8FhwAAAFc"]
[Thu Nov 20 21:52:52.266565 2025] [:error] [pid 40636:tid 40651] [client 172.161.90.19:41009] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aR8dNAK8BWUoW3xq0HAu6gAAA4s"]
[Thu Nov 20 21:52:52.741254 2025] [:error] [pid 40415:tid 40431] [client 172.161.90.19:6675] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aR8dNKhjIyLSv09svwPT8AAAAc0"]
[Thu Nov 20 21:52:53.215345 2025] [:error] [pid 40415:tid 40434] [client 172.161.90.19:6511] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aR8dNahjIyLSv09svwPT8gAAAdA"]
[Thu Nov 20 21:52:53.688681 2025] [:error] [pid 55340:tid 55369] [client 172.161.90.19:6872] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aR8dNfOxD-NeMydTybDBHQAAABg"]
[Thu Nov 20 21:52:54.167760 2025] [:error] [pid 40508:tid 40521] [client 172.161.90.19:6474] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aR8dNqxXNVCMW_ksxPvjZgAAAos"]
[Thu Nov 20 21:52:54.640502 2025] [:error] [pid 40508:tid 40520] [client 172.161.90.19:6854] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR8dNqxXNVCMW_ksxPvjaQAAAoo"]
[Thu Nov 20 21:52:55.113012 2025] [:error] [pid 34405:tid 34409] [client 172.161.90.19:6688] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR8dNzFpvu8oRK7ATftDFAAAAQI"]
[Thu Nov 20 21:52:55.586224 2025] [:error] [pid 55342:tid 55377] [client 172.161.90.19:6292] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR8dN7g6x32Tvk7fIG8FigAAAEU"]
[Thu Nov 20 21:52:56.060164 2025] [:error] [pid 40445:tid 40486] [client 172.161.90.19:40992] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR8dOFH-MuFcoWRjXpacHQAAAks"]
[Thu Nov 20 21:52:56.538514 2025] [:error] [pid 40508:tid 40513] [client 172.161.90.19:6317] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aR8dOKxXNVCMW_ksxPvjdQAAAoM"]
[Thu Nov 20 21:52:57.012293 2025] [:error] [pid 55342:tid 55388] [client 172.161.90.19:43979] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aR8dObg6x32Tvk7fIG8FjAAAAFA"]
[Thu Nov 20 21:52:57.492786 2025] [:error] [pid 40445:tid 40484] [client 172.161.90.19:6329] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aR8dOVH-MuFcoWRjXpacHwAAAkk"]
[Thu Nov 20 21:52:57.968335 2025] [:error] [pid 55340:tid 55363] [client 172.161.90.19:43981] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aR8dOfOxD-NeMydTybDBJwAAABI"]
[Thu Nov 20 21:52:58.453188 2025] [:error] [pid 55342:tid 55392] [client 172.161.90.19:43970] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aR8dOrg6x32Tvk7fIG8FkAAAAFQ"]
[Thu Nov 20 21:52:58.951098 2025] [:error] [pid 55340:tid 55349] [client 172.161.90.19:44019] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aR8dOvOxD-NeMydTybDBKQAAAAQ"]
[Thu Nov 20 21:52:59.438911 2025] [:error] [pid 34405:tid 34415] [client 172.161.90.19:6323] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aR8dOzFpvu8oRK7ATftDHQAAAQg"]
[Thu Nov 20 21:52:59.911593 2025] [:error] [pid 55430:tid 55435] [client 172.161.90.19:44008] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aR8dO_PZXaIMEU4pE7sjQgAAAMI"]
[Thu Nov 20 21:53:00.396333 2025] [:error] [pid 55342:tid 55390] [client 172.161.90.19:6331] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aR8dPLg6x32Tvk7fIG8FkQAAAFI"]
[Thu Nov 20 21:53:00.894216 2025] [:error] [pid 55342:tid 55375] [client 172.161.90.19:6758] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aR8dPLg6x32Tvk7fIG8FkgAAAEM"]
[Thu Nov 20 21:53:01.368511 2025] [:error] [pid 55343:tid 55408] [client 172.161.90.19:6477] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aR8dPVWlO3EnyVMV7w7UFAAAAIk"]
[Thu Nov 20 21:53:01.843595 2025] [:error] [pid 40508:tid 40511] [client 172.161.90.19:6513] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aR8dPaxXNVCMW_ksxPvjgQAAAoE"]
[Thu Nov 20 21:53:02.324692 2025] [:error] [pid 55343:tid 55423] [client 172.161.90.19:6297] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aR8dPlWlO3EnyVMV7w7UFwAAAJg"]
[Thu Nov 20 21:53:02.799992 2025] [:error] [pid 40537:tid 40556] [client 172.161.90.19:40981] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "aR8dPqKlsL5kxTa3c1wCvgAAAs8"]
[Thu Nov 20 21:53:03.276101 2025] [:error] [pid 40415:tid 40428] [client 172.161.90.19:43980] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "aR8dP6hjIyLSv09svwPT9AAAAco"]
[Thu Nov 20 21:53:03.755081 2025] [:error] [pid 40636:tid 40652] [client 172.161.90.19:6525] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "aR8dPwK8BWUoW3xq0HAu8gAAA4w"]
[Thu Nov 20 21:53:04.228032 2025] [:error] [pid 40508:tid 40526] [client 172.161.90.19:41018] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "aR8dQKxXNVCMW_ksxPvjhwAAApA"]
[Thu Nov 20 21:53:04.700282 2025] [:error] [pid 40508:tid 40529] [client 172.161.90.19:6864] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aR8dQKxXNVCMW_ksxPvjigAAApM"]
[Thu Nov 20 21:53:06.868624 2025] [:error] [pid 40508:tid 40521] [client 172.161.90.19:6777] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Nov 20 21:53:07.108239 2025] [:error] [pid 40508:tid 40529] [client 172.161.90.19:6777] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Nov 20 21:53:07.346157 2025] [:error] [pid 40508:tid 40530] [client 172.161.90.19:6777] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aR8dQ6xXNVCMW_ksxPvjnAAAApQ"]
[Thu Nov 20 21:53:07.821263 2025] [:error] [pid 40636:tid 40660] [client 172.161.90.19:6281] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aR8dQwK8BWUoW3xq0HAu9gAAA5Q"]
[Thu Nov 20 21:53:08.297826 2025] [:error] [pid 40445:tid 40476] [client 172.161.90.19:43991] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Nov 20 21:53:08.538462 2025] [:error] [pid 40445:tid 40475] [client 172.161.90.19:43991] File does not exist: /usr/local/apache/htdocs/suspended-page/bge.php
[Thu Nov 20 21:53:08.776646 2025] [:error] [pid 40445:tid 40490] [client 172.161.90.19:43991] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ifm.php"] [unique_id "aR8dRFH-MuFcoWRjXpacJwAAAk8"]
[Thu Nov 20 21:53:09.268505 2025] [:error] [pid 40537:tid 40555] [client 172.161.90.19:7008] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ifm.php"] [unique_id "aR8dRaKlsL5kxTa3c1wCwAAAAs4"]
[Thu Nov 20 21:53:09.743870 2025] [:error] [pid 55342:tid 55396] [client 172.161.90.19:6291] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ifm.php"] [unique_id "aR8dRbg6x32Tvk7fIG8FowAAAFg"]
[Thu Nov 20 21:53:10.217870 2025] [:error] [pid 40508:tid 40512] [client 172.161.90.19:43974] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ifm.php"] [unique_id "aR8dRqxXNVCMW_ksxPvjogAAAoI"]
[Thu Nov 20 21:53:10.694080 2025] [:error] [pid 40415:tid 40442] [client 172.161.90.19:6326] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ww5.php"] [unique_id "aR8dRqhjIyLSv09svwPT9wAAAdg"]
[Thu Nov 20 21:53:11.170175 2025] [:error] [pid 40537:tid 40551] [client 172.161.90.19:40961] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ww5.php"] [unique_id "aR8dR6KlsL5kxTa3c1wCwgAAAso"]
[Thu Nov 20 21:53:11.644054 2025] [:error] [pid 40415:tid 40420] [client 172.161.90.19:6888] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ww5.php"] [unique_id "aR8dR6hjIyLSv09svwPT-QAAAcI"]
[Thu Nov 20 21:53:12.122727 2025] [:error] [pid 55430:tid 55447] [client 172.161.90.19:6730] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ww5.php"] [unique_id "aR8dSPPZXaIMEU4pE7sjSgAAAM4"]
[Thu Nov 20 21:53:12.595112 2025] [:error] [pid 40636:tid 40654] [client 172.161.90.19:6901] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/thxt.php"] [unique_id "aR8dSAK8BWUoW3xq0HAu9wAAA44"]
[Thu Nov 20 21:53:13.069375 2025] [:error] [pid 40636:tid 40642] [client 172.161.90.19:6718] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/thxt.php"] [unique_id "aR8dSQK8BWUoW3xq0HAu-QAAA4I"]
[Thu Nov 20 21:53:13.542186 2025] [:error] [pid 40445:tid 40484] [client 172.161.90.19:6285] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/thxt.php"] [unique_id "aR8dSVH-MuFcoWRjXpacLAAAAkk"]
[Thu Nov 20 21:53:14.016893 2025] [:error] [pid 40445:tid 40489] [client 172.161.90.19:6302] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/thxt.php"] [unique_id "aR8dSlH-MuFcoWRjXpacLgAAAk4"]
[Thu Nov 20 21:53:14.491029 2025] [:error] [pid 40537:tid 40545] [client 172.161.90.19:7032] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kairolin.php"] [unique_id "aR8dSqKlsL5kxTa3c1wCxAAAAsQ"]
[Thu Nov 20 21:53:14.970753 2025] [:error] [pid 55342:tid 55376] [client 172.161.90.19:6875] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kairolin.php"] [unique_id "aR8dSrg6x32Tvk7fIG8FpgAAAEQ"]
[Thu Nov 20 21:53:15.444728 2025] [:error] [pid 40636:tid 40653] [client 172.161.90.19:44007] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kairolin.php"] [unique_id "aR8dSwK8BWUoW3xq0HAu-gAAA40"]
[Thu Nov 20 21:53:15.916991 2025] [:error] [pid 40636:tid 40650] [client 172.161.90.19:6861] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kairolin.php"] [unique_id "aR8dSwK8BWUoW3xq0HAu-wAAA4o"]
[Thu Nov 20 21:53:16.389362 2025] [:error] [pid 40415:tid 40418] [client 172.161.90.19:7037] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/siln.php"] [unique_id "aR8dTKhjIyLSv09svwPT-wAAAcA"]
[Thu Nov 20 21:53:16.862601 2025] [:error] [pid 55343:tid 55419] [client 172.161.90.19:44002] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/siln.php"] [unique_id "aR8dTFWlO3EnyVMV7w7UHAAAAJQ"]
[Thu Nov 20 21:53:17.334801 2025] [:error] [pid 34405:tid 34416] [client 172.161.90.19:6322] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/siln.php"] [unique_id "aR8dTTFpvu8oRK7ATftDIQAAAQk"]
[Thu Nov 20 21:53:17.816404 2025] [:error] [pid 40445:tid 40483] [client 172.161.90.19:44028] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/siln.php"] [unique_id "aR8dTVH-MuFcoWRjXpacMAAAAkg"]
[Fri Nov 21 00:44:34.995297 2025] [:error] [pid 13805:tid 13829] [client 34.26.122.161:34164] [client 34.26.122.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aR9FclurU5-GZdwKvr6iZQAAAVU"]
[Fri Nov 21 14:59:58.278325 2025] [:error] [pid 25554:tid 25579] [client 213.21.239.4:37774] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSAN7h-NtB-9AzFZrk4b2wAAARU"]
[Fri Nov 21 15:15:48.271136 2025] [:error] [pid 25554:tid 25569] [client 213.21.239.4:53468] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSARpB-NtB-9AzFZrk4lBAAAAQs"]
[Fri Nov 21 15:55:38.350252 2025] [:error] [pid 25430:tid 25471] [client 172.98.32.99:32917] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Nov 21 15:55:38.790275 2025] [:error] [pid 25430:tid 25468] [client 172.98.32.99:32917] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Nov 21 15:55:39.255903 2025] [:error] [pid 25430:tid 25483] [client 172.98.32.99:32917] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Fri Nov 21 15:55:39.710675 2025] [:error] [pid 25430:tid 25466] [client 172.98.32.99:32917] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Nov 21 15:55:40.140516 2025] [:error] [pid 25430:tid 25482] [client 172.98.32.99:32917] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Nov 21 15:55:40.628555 2025] [:error] [pid 25430:tid 25464] [client 172.98.32.99:32917] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Nov 21 15:55:41.062146 2025] [:error] [pid 25430:tid 25467] [client 172.98.32.99:32917] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Nov 21 15:55:41.502587 2025] [:error] [pid 25430:tid 25476] [client 172.98.32.99:32917] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Nov 21 15:55:42.405937 2025] [:error] [pid 25430:tid 25479] [client 172.98.32.99:32917] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Nov 21 15:55:43.269900 2025] [:error] [pid 25430:tid 25460] [client 172.98.32.99:32917] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Fri Nov 21 15:55:43.715405 2025] [:error] [pid 25430:tid 25483] [client 172.98.32.99:32917] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Fri Nov 21 15:55:44.150465 2025] [:error] [pid 25430:tid 25480] [client 172.98.32.99:32917] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Nov 21 15:55:44.611691 2025] [:error] [pid 25430:tid 25476] [client 172.98.32.99:32917] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Nov 21 15:55:45.087210 2025] [:error] [pid 25430:tid 25481] [client 172.98.32.99:32917] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Nov 21 15:55:45.579158 2025] [:error] [pid 25430:tid 25462] [client 172.98.32.99:32917] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Fri Nov 21 15:55:46.016950 2025] [:error] [pid 25430:tid 25468] [client 172.98.32.99:32917] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Fri Nov 21 15:55:46.484299 2025] [:error] [pid 25430:tid 25466] [client 172.98.32.99:32917] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri Nov 21 15:55:46.930329 2025] [:error] [pid 25430:tid 25471] [client 172.98.32.99:32917] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Nov 21 15:55:53.327488 2025] [:error] [pid 25430:tid 25460] [client 172.98.32.99:32917] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSAbCapnWJcWt_4foXk79AAAAEA"]
[Fri Nov 21 15:55:55.576374 2025] [:error] [pid 25431:tid 25491] [client 45.132.227.58:44215] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSAbC8klhXxmoIExII0qnAAAAIQ"]
[Fri Nov 21 15:55:57.800689 2025] [:error] [pid 25431:tid 25492] [client 172.98.32.77:45517] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Nov 21 15:55:59.116604 2025] [:error] [pid 25431:tid 25507] [client 172.98.32.77:45517] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSAbD8klhXxmoIExII0q0AAAAJQ"]
[Fri Nov 21 15:56:01.670633 2025] [:error] [pid 25521:tid 25525] [client 172.98.32.90:23611] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Nov 21 15:56:02.120879 2025] [:error] [pid 25521:tid 25543] [client 172.98.32.90:23611] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSAbEvhXnBMilDddn3XgYAAAANQ"]
[Fri Nov 21 15:56:03.451478 2025] [:error] [pid 25521:tid 25530] [client 172.98.32.99:34371] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Fri Nov 21 15:56:05.794327 2025] [:error] [pid 25521:tid 25542] [client 172.98.32.99:34371] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSAbFfhXnBMilDddn3XgiAAAANM"]
[Fri Nov 21 15:56:07.141124 2025] [:error] [pid 25430:tid 25469] [client 45.132.227.62:29331] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSAbF6pnWJcWt_4foXk8TgAAAEk"]
[Fri Nov 21 15:56:08.025320 2025] [:error] [pid 46939:tid 46957] [client 172.98.32.97:45303] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSAbGO0OmVoxD4VZ_ZlmUQAAAU8"]
[Fri Nov 21 15:56:08.894378 2025] [:error] [pid 25431:tid 25500] [client 136.144.42.69:21329] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSAbGMklhXxmoIExII0rLAAAAI0"]
[Fri Nov 21 15:56:10.880182 2025] [:error] [pid 25521:tid 25525] [client 45.132.227.60:55583] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSAbGvhXnBMilDddn3XgwQAAAMI"]
[Fri Nov 21 15:56:11.785565 2025] [:error] [pid 46939:tid 46965] [client 136.144.42.73:27005] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSAbG-0OmVoxD4VZ_ZlmbwAAAVc"]
[Fri Nov 21 15:56:13.190038 2025] [:error] [pid 25554:tid 25581] [client 172.98.32.83:55051] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSAbHR-NtB-9AzFZrk5L2gAAARc"]
[Fri Nov 21 15:56:14.207515 2025] [:error] [pid 25554:tid 25573] [client 172.98.32.97:26877] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Fri Nov 21 15:56:15.140412 2025] [:error] [pid 25554:tid 25569] [client 172.98.32.97:26877] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "aSAbHx-NtB-9AzFZrk5L7AAAAQs"]
[Fri Nov 21 15:56:18.259925 2025] [:error] [pid 46939:tid 46961] [client 45.132.227.55:30727] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSAbIu0OmVoxD4VZ_ZlmkAAAAVM"]
[Fri Nov 21 15:56:19.652102 2025] [:error] [pid 25430:tid 25474] [client 45.132.227.66:40039] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSAbI6pnWJcWt_4foXk8wQAAAE4"]
[Fri Nov 21 15:56:20.563076 2025] [:error] [pid 25431:tid 25503] [client 45.132.227.64:28369] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Fri Nov 21 15:56:20.995739 2025] [:error] [pid 25431:tid 25509] [client 45.132.227.64:28369] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSAbJMklhXxmoIExII0riQAAAJY"]
[Fri Nov 21 15:56:21.880045 2025] [:error] [pid 25554:tid 25568] [client 172.98.32.96:48393] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Fri Nov 21 15:56:23.317452 2025] [:error] [pid 25554:tid 25572] [client 172.98.32.96:48393] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Fri Nov 21 15:56:24.649323 2025] [:error] [pid 25554:tid 25577] [client 172.98.32.96:48393] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSAbKB-NtB-9AzFZrk5MTQAAARM"]
[Fri Nov 21 15:56:27.095705 2025] [:error] [pid 25554:tid 25562] [client 172.98.32.88:63489] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Fri Nov 21 15:56:27.543957 2025] [:error] [pid 25554:tid 25578] [client 172.98.32.88:63489] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSAbKx-NtB-9AzFZrk5MZAAAARQ"]
[Fri Nov 21 15:56:28.602803 2025] [:error] [pid 25429:tid 25453] [client 172.98.32.95:44591] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Fri Nov 21 15:56:29.502115 2025] [:error] [pid 25429:tid 25452] [client 172.98.32.95:44591] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSAbLT4rZbRSr7vu-NOgLAAAABM"]
[Fri Nov 21 15:56:30.869832 2025] [:error] [pid 25429:tid 25436] [client 172.98.32.90:60067] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSAbLj4rZbRSr7vu-NOgOgAAAAM"]
[Fri Nov 21 15:56:32.309435 2025] [:error] [pid 25554:tid 25568] [client 45.132.227.68:22537] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Fri Nov 21 15:56:32.788041 2025] [:error] [pid 25554:tid 25563] [client 45.132.227.68:22537] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Fri Nov 21 15:56:33.808222 2025] [:error] [pid 25554:tid 25573] [client 45.132.227.68:22537] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSAbMR-NtB-9AzFZrk5MjgAAAQ8"]
[Fri Nov 21 15:56:35.280291 2025] [:error] [pid 25521:tid 25536] [client 45.132.227.52:29423] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSAbM_hXnBMilDddn3XhZQAAAM0"]
[Fri Nov 21 15:56:36.680980 2025] [:error] [pid 25521:tid 25540] [client 45.132.227.57:50379] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSAbNPhXnBMilDddn3XhbQAAANE"]
[Fri Nov 21 15:56:37.568808 2025] [:error] [pid 25431:tid 25509] [client 172.98.32.86:23071] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSAbNcklhXxmoIExII0sEAAAAJY"]
[Fri Nov 21 15:56:38.449864 2025] [:error] [pid 25431:tid 25504] [client 45.132.227.67:60329] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSAbNsklhXxmoIExII0sFwAAAJE"]
[Fri Nov 21 15:56:40.195400 2025] [:error] [pid 25554:tid 25570] [client 172.98.32.89:55515] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Fri Nov 21 15:56:40.624853 2025] [:error] [pid 25554:tid 25573] [client 172.98.32.89:55515] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSAbOB-NtB-9AzFZrk5MvwAAAQ8"]
[Fri Nov 21 15:56:41.481082 2025] [:error] [pid 25429:tid 25446] [client 172.98.32.81:33115] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSAbOT4rZbRSr7vu-NOgZgAAAA0"]
[Fri Nov 21 15:56:42.335681 2025] [:error] [pid 25430:tid 25470] [client 45.132.227.67:31845] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSAbOqpnWJcWt_4foXk9hgAAAEo"]
[Fri Nov 21 15:56:44.071725 2025] [:error] [pid 25429:tid 25436] [client 45.132.227.55:32205] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Fri Nov 21 15:56:44.938389 2025] [:error] [pid 25429:tid 25451] [client 45.132.227.55:32205] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Fri Nov 21 15:56:46.665318 2025] [:error] [pid 25429:tid 25436] [client 45.132.227.55:32205] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSAbPj4rZbRSr7vu-NOgjAAAAAM"]
[Fri Nov 21 15:56:48.839661 2025] [:error] [pid 25429:tid 25439] [client 172.98.32.97:59821] [client 172.98.32.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.97, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSAbQD4rZbRSr7vu-NOgmgAAAAY"]
[Fri Nov 21 15:56:49.274731 2025] [:error] [pid 25429:tid 25457] [client 172.98.32.97:59821] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Fri Nov 21 15:56:51.545290 2025] [:error] [pid 25429:tid 25433] [client 172.98.32.97:59821] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Fri Nov 21 15:56:51.989912 2025] [:error] [pid 25429:tid 25443] [client 172.98.32.97:59821] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Fri Nov 21 15:56:54.767478 2025] [:error] [pid 25429:tid 25455] [client 172.98.32.97:59821] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSAbRj4rZbRSr7vu-NOg0gAAABY"]
[Fri Nov 21 15:56:56.190748 2025] [:error] [pid 46939:tid 46960] [client 172.98.32.88:30285] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Fri Nov 21 15:56:56.629969 2025] [:error] [pid 46939:tid 46943] [client 172.98.32.88:30285] [client 172.98.32.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.88, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSAbSO0OmVoxD4VZ_ZlnugAAAUE"]
[Fri Nov 21 15:56:57.528356 2025] [:error] [pid 46939:tid 46954] [client 172.98.32.88:30285] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSAbSe0OmVoxD4VZ_ZlnwgAAAUw"]
[Fri Nov 21 15:57:00.318831 2025] [:error] [pid 46939:tid 46959] [client 172.98.32.85:63987] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Nov 21 15:57:01.241007 2025] [:error] [pid 46939:tid 46958] [client 172.98.32.85:63987] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Fri Nov 21 15:57:02.152077 2025] [:error] [pid 46939:tid 46942] [client 172.98.32.85:63987] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSAbTu0OmVoxD4VZ_Zln6gAAAUA"]
[Fri Nov 21 15:57:03.075467 2025] [:error] [pid 25430:tid 25480] [client 136.144.42.75:47893] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Nov 21 15:57:04.466882 2025] [:error] [pid 25430:tid 25476] [client 136.144.42.75:47893] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Fri Nov 21 15:57:05.371877 2025] [:error] [pid 25430:tid 25472] [client 136.144.42.75:47893] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Fri Nov 21 15:57:06.315469 2025] [:error] [pid 25430:tid 25475] [client 136.144.42.75:47893] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Fri Nov 21 15:57:06.767781 2025] [:error] [pid 25430:tid 25483] [client 136.144.42.75:47893] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSAbUqpnWJcWt_4foXk-UQAAAFc"]
[Fri Nov 21 15:57:07.653663 2025] [:error] [pid 46939:tid 46957] [client 45.132.227.59:42709] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Fri Nov 21 15:57:08.092556 2025] [:error] [pid 46939:tid 46951] [client 45.132.227.59:42709] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Fri Nov 21 15:57:08.561904 2025] [:error] [pid 46939:tid 46964] [client 45.132.227.59:42709] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSAbVO0OmVoxD4VZ_ZloCQAAAVY"]
[Fri Nov 21 15:57:09.885588 2025] [:error] [pid 25430:tid 25480] [client 172.98.32.96:54017] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Fri Nov 21 15:57:10.781520 2025] [:error] [pid 25430:tid 25481] [client 172.98.32.96:54017] [client 172.98.32.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.96, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSAbVqpnWJcWt_4foXk-bQAAAFU"]
[Fri Nov 21 15:57:11.222456 2025] [:error] [pid 25430:tid 25484] [client 172.98.32.96:54017] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSAbV6pnWJcWt_4foXk-cgAAAFg"]
[Fri Nov 21 15:57:16.670534 2025] [:error] [pid 25430:tid 25464] [client 172.98.32.82:35259] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Fri Nov 21 15:57:19.341610 2025] [:error] [pid 25430:tid 25461] [client 172.98.32.82:35259] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Fri Nov 21 15:57:19.789219 2025] [:error] [pid 25430:tid 25462] [client 172.98.32.82:35259] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSAbX6pnWJcWt_4foXk-0QAAAEI"]
[Fri Nov 21 15:57:20.661648 2025] [:error] [pid 25429:tid 25453] [client 172.98.32.98:60799] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Fri Nov 21 15:57:22.017419 2025] [:error] [pid 25429:tid 25438] [client 172.98.32.98:60799] [client 172.98.32.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.98, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSAbYj4rZbRSr7vu-NOhoAAAAAU"]
[Fri Nov 21 15:57:22.501094 2025] [:error] [pid 25429:tid 25443] [client 172.98.32.98:60799] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Fri Nov 21 15:57:22.932500 2025] [:error] [pid 25429:tid 25456] [client 172.98.32.98:60799] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Fri Nov 21 15:57:23.364862 2025] [:error] [pid 25429:tid 25440] [client 172.98.32.98:60799] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Fri Nov 21 15:57:23.796632 2025] [:error] [pid 25429:tid 25435] [client 172.98.32.98:60799] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSAbYz4rZbRSr7vu-NOhuQAAAAI"]
[Fri Nov 21 15:57:24.784702 2025] [:error] [pid 25430:tid 25479] [client 172.98.32.89:40179] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Fri Nov 21 15:57:25.306530 2025] [:error] [pid 25430:tid 25463] [client 172.98.32.89:40179] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSAbZapnWJcWt_4foXk-7wAAAEM"]
[Fri Nov 21 15:57:26.668777 2025] [:error] [pid 46939:tid 46951] [client 136.144.42.77:25297] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Fri Nov 21 15:57:27.095264 2025] [:error] [pid 46939:tid 46949] [client 136.144.42.77:25297] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSAbZ-0OmVoxD4VZ_ZlowgAAAUc"]
[Fri Nov 21 15:57:28.825141 2025] [:error] [pid 46939:tid 46957] [client 45.132.227.66:49249] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Fri Nov 21 15:57:29.260931 2025] [:error] [pid 46939:tid 46961] [client 45.132.227.66:49249] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSAbae0OmVoxD4VZ_Zlo3gAAAVM"]
[Fri Nov 21 15:57:30.154600 2025] [:error] [pid 25430:tid 25473] [client 136.144.42.80:57999] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSAbaqpnWJcWt_4foXk_DAAAAE0"]
[Fri Nov 21 15:57:31.033700 2025] [:error] [pid 25431:tid 25503] [client 136.144.42.79:63679] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Fri Nov 21 15:57:31.540760 2025] [:error] [pid 25431:tid 25510] [client 136.144.42.79:63679] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Fri Nov 21 15:57:33.296557 2025] [:error] [pid 25431:tid 25490] [client 136.144.42.79:63679] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSAbbcklhXxmoIExII0uIwAAAIM"]
[Fri Nov 21 15:57:34.579689 2025] [:error] [pid 25430:tid 25482] [client 172.98.32.78:36617] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSAbbqpnWJcWt_4foXk_IgAAAFY"]
[Fri Nov 21 15:57:36.902249 2025] [:error] [pid 25554:tid 25559] [client 45.132.227.61:60143] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSAbcB-NtB-9AzFZrk5OZQAAAQE"]
[Fri Nov 21 15:57:37.824445 2025] [:error] [pid 25430:tid 25464] [client 45.132.227.59:57379] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Fri Nov 21 15:57:38.704760 2025] [:error] [pid 25430:tid 25473] [client 45.132.227.59:57379] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Fri Nov 21 15:57:39.133684 2025] [:error] [pid 25430:tid 25483] [client 45.132.227.59:57379] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSAbc6pnWJcWt_4foXk_PAAAAFc"]
[Fri Nov 21 15:57:40.004992 2025] [:error] [pid 25431:tid 25493] [client 172.98.32.79:51847] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Nov 21 15:57:40.948064 2025] [:error] [pid 25431:tid 25500] [client 172.98.32.79:51847] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSAbdMklhXxmoIExII0uYwAAAI0"]
[Fri Nov 21 15:57:43.301688 2025] [:error] [pid 25431:tid 25497] [client 172.98.32.96:49489] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSAbd8klhXxmoIExII0ufQAAAIo"]
[Fri Nov 21 15:57:44.631735 2025] [:error] [pid 25521:tid 25531] [client 136.144.42.79:37639] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Nov 21 15:57:46.650853 2025] [:error] [pid 25521:tid 25535] [client 136.144.42.79:37639] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Fri Nov 21 15:57:47.590337 2025] [:error] [pid 25521:tid 25541] [client 136.144.42.79:37639] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Fri Nov 21 15:57:48.023342 2025] [:error] [pid 25521:tid 25533] [client 136.144.42.79:37639] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSAbfPhXnBMilDddn3XjTgAAAMo"]
[Fri Nov 21 15:57:48.901724 2025] [:error] [pid 25554:tid 25558] [client 45.132.227.57:30465] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSAbfB-NtB-9AzFZrk5OqAAAAQA"]
[Fri Nov 21 15:57:49.756308 2025] [:error] [pid 25554:tid 25575] [client 172.98.32.100:39241] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSAbfR-NtB-9AzFZrk5OtgAAARE"]
[Fri Nov 21 15:57:50.637810 2025] [:error] [pid 25430:tid 25463] [client 172.98.32.82:45091] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSAbfqpnWJcWt_4foXk_jgAAAEM"]
[Fri Nov 21 15:57:52.558610 2025] [:error] [pid 46939:tid 46952] [client 172.98.32.93:31705] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Fri Nov 21 15:57:53.019436 2025] [:error] [pid 46939:tid 46951] [client 172.98.32.93:31705] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSAbge0OmVoxD4VZ_ZlpqgAAAUk"]
[Fri Nov 21 15:57:53.883370 2025] [:error] [pid 25430:tid 25472] [client 172.98.32.84:45243] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSAbgapnWJcWt_4foXk_qAAAAEw"]
[Fri Nov 21 15:57:54.855890 2025] [:error] [pid 25554:tid 25559] [client 172.98.32.98:26299] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Fri Nov 21 15:57:55.750775 2025] [:error] [pid 25554:tid 25562] [client 172.98.32.98:26299] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSAbgx-NtB-9AzFZrk5O_gAAAQQ"]
[Fri Nov 21 15:57:56.658487 2025] [:error] [pid 25554:tid 25558] [client 172.98.32.80:26697] [client 172.98.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSAbhB-NtB-9AzFZrk5PAwAAAQA"]
[Fri Nov 21 15:57:57.574470 2025] [:error] [pid 25521:tid 25541] [client 136.144.42.73:36275] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSAbhfhXnBMilDddn3XjggAAANI"]
[Fri Nov 21 15:57:58.462229 2025] [:error] [pid 25521:tid 25526] [client 45.132.227.56:42069] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSAbhvhXnBMilDddn3XjiAAAAMM"]
[Fri Nov 21 15:57:59.749780 2025] [:error] [pid 25521:tid 25537] [client 172.98.32.100:30035] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSAbh_hXnBMilDddn3XjlgAAAM4"]
[Fri Nov 21 15:58:01.519877 2025] [:error] [pid 25431:tid 25490] [client 172.98.32.90:24457] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSAbicklhXxmoIExII0vKQAAAIM"]
[Fri Nov 21 15:58:02.457605 2025] [:error] [pid 25554:tid 25576] [client 172.98.32.97:54929] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Fri Nov 21 15:58:03.772068 2025] [:error] [pid 25554:tid 25562] [client 172.98.32.97:54929] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Fri Nov 21 15:58:04.198918 2025] [:error] [pid 25554:tid 25577] [client 172.98.32.97:54929] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSAbjB-NtB-9AzFZrk5PPgAAARM"]
[Fri Nov 21 15:58:05.554806 2025] [:error] [pid 25431:tid 25503] [client 45.132.227.61:31827] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Fri Nov 21 15:58:05.997681 2025] [:error] [pid 25431:tid 25495] [client 45.132.227.61:31827] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Fri Nov 21 15:58:08.244596 2025] [:error] [pid 25431:tid 25494] [client 45.132.227.61:31827] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSAbkMklhXxmoIExII0vZgAAAIc"]
[Fri Nov 21 15:58:10.487901 2025] [:error] [pid 25430:tid 25463] [client 45.132.227.58:63197] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSAbkqpnWJcWt_4foXlAJwAAAEM"]
[Fri Nov 21 15:58:11.372499 2025] [:error] [pid 25554:tid 25576] [client 136.144.42.69:23205] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSAbkx-NtB-9AzFZrk5PVQAAARI"]
[Fri Nov 21 15:58:14.036404 2025] [:error] [pid 25430:tid 25463] [client 45.132.227.58:24823] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSAblqpnWJcWt_4foXlATAAAAEM"]
[Fri Nov 21 15:58:15.805871 2025] [:error] [pid 25554:tid 25577] [client 45.132.227.65:62085] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Fri Nov 21 15:58:16.253440 2025] [:error] [pid 25554:tid 25567] [client 45.132.227.65:62085] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Fri Nov 21 15:58:16.709846 2025] [:error] [pid 25554:tid 25571] [client 45.132.227.65:62085] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Fri Nov 21 15:58:17.142387 2025] [:error] [pid 25554:tid 25564] [client 45.132.227.65:62085] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Fri Nov 21 15:58:19.415679 2025] [:error] [pid 25554:tid 25579] [client 45.132.227.65:62085] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSAbmx-NtB-9AzFZrk5PdgAAARU"]
[Fri Nov 21 15:58:20.272408 2025] [:error] [pid 25431:tid 25494] [client 172.98.32.98:26363] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSAbnMklhXxmoIExII0vyQAAAIc"]
[Fri Nov 21 15:58:21.244659 2025] [:error] [pid 25554:tid 25571] [client 136.144.42.73:35117] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSAbnR-NtB-9AzFZrk5PfAAAAQ0"]
[Fri Nov 21 15:58:22.099112 2025] [:error] [pid 25554:tid 25558] [client 45.132.227.55:51151] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSAbnh-NtB-9AzFZrk5PgQAAAQA"]
[Fri Nov 21 15:58:23.002029 2025] [:error] [pid 25431:tid 25496] [client 45.132.227.52:49349] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSAbn8klhXxmoIExII0v4gAAAIk"]
[Fri Nov 21 15:58:23.899150 2025] [:error] [pid 25430:tid 25465] [client 45.132.227.67:24597] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSAbn6pnWJcWt_4foXlAfQAAAEU"]
[Fri Nov 21 15:58:25.342050 2025] [:error] [pid 25554:tid 25569] [client 172.98.32.97:46741] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSAboR-NtB-9AzFZrk5PmAAAAQs"]
[Fri Nov 21 15:58:26.211045 2025] [:error] [pid 25429:tid 25444] [client 45.132.227.57:43371] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSAboj4rZbRSr7vu-NOj_QAAAAs"]
[Fri Nov 21 15:58:28.678897 2025] [:error] [pid 46939:tid 46963] [client 172.98.32.93:62229] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSAbpO0OmVoxD4VZ_Zlq1AAAAVU"]
[Fri Nov 21 15:58:29.560328 2025] [:error] [pid 46939:tid 46953] [client 45.132.227.63:26849] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSAbpe0OmVoxD4VZ_Zlq4AAAAUs"]
[Fri Nov 21 15:58:31.281750 2025] [:error] [pid 25554:tid 25581] [client 136.144.42.80:40279] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSAbpx-NtB-9AzFZrk5P0gAAARc"]
[Fri Nov 21 15:58:32.621662 2025] [:error] [pid 25554:tid 25577] [client 172.98.32.81:55483] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSAbqB-NtB-9AzFZrk5P3AAAARM"]
[Fri Nov 21 15:58:33.474706 2025] [:error] [pid 25429:tid 25453] [client 172.98.32.88:48069] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Fri Nov 21 15:58:34.369179 2025] [:error] [pid 25429:tid 25447] [client 172.98.32.88:48069] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSAbqj4rZbRSr7vu-NOkaQAAAA4"]
[Fri Nov 21 15:58:36.156223 2025] [:error] [pid 25431:tid 25496] [client 172.98.32.84:28059] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSAbrMklhXxmoIExII0wJwAAAIk"]
[Fri Nov 21 15:58:38.006635 2025] [:error] [pid 25554:tid 25571] [client 45.132.227.64:63647] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Fri Nov 21 15:58:38.439605 2025] [:error] [pid 25554:tid 25568] [client 45.132.227.64:63647] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSAbrh-NtB-9AzFZrk5QAQAAAQo"]
[Fri Nov 21 15:58:39.830896 2025] [:error] [pid 25429:tid 25441] [client 172.98.32.83:50197] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Fri Nov 21 15:58:40.260373 2025] [:error] [pid 25429:tid 25435] [client 172.98.32.83:50197] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Fri Nov 21 15:58:40.697750 2025] [:error] [pid 25429:tid 25454] [client 172.98.32.83:50197] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Fri Nov 21 15:58:41.176655 2025] [:error] [pid 25429:tid 25455] [client 172.98.32.83:50197] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSAbsT4rZbRSr7vu-NOk1AAAABY"]
[Fri Nov 21 15:58:42.351519 2025] [:error] [pid 46939:tid 46957] [client 172.98.32.81:33949] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Fri Nov 21 15:58:42.784311 2025] [:error] [pid 46939:tid 46953] [client 172.98.32.81:33949] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSAbsu0OmVoxD4VZ_ZlrVAAAAUs"]
[Fri Nov 21 15:58:44.605366 2025] [:error] [pid 25521:tid 25531] [client 172.98.32.98:47663] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Nov 21 15:58:45.057267 2025] [:error] [pid 25521:tid 25537] [client 172.98.32.98:47663] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Nov 21 15:58:45.508489 2025] [:error] [pid 25521:tid 25523] [client 172.98.32.98:47663] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Fri Nov 21 15:58:47.845652 2025] [:error] [pid 25521:tid 25544] [client 172.98.32.98:47663] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri Nov 21 15:58:48.316074 2025] [:error] [pid 25521:tid 25534] [client 172.98.32.98:47663] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Fri Nov 21 15:58:49.193845 2025] [:error] [pid 25521:tid 25543] [client 172.98.32.98:47663] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Fri Nov 21 15:58:50.536562 2025] [:error] [pid 25521:tid 25533] [client 172.98.32.98:47663] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Fri Nov 21 15:58:50.972745 2025] [:error] [pid 25521:tid 25534] [client 172.98.32.98:47663] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSAbuvhXnBMilDddn3Xk1gAAAMs"]
[Fri Nov 21 15:58:51.828300 2025] [:error] [pid 25431:tid 25507] [client 172.98.32.83:22265] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSAbu8klhXxmoIExII0xCAAAAJQ"]
[Fri Nov 21 15:58:52.682743 2025] [:error] [pid 25521:tid 25531] [client 172.98.32.80:53377] [client 172.98.32.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.80, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSAbvPhXnBMilDddn3Xk2gAAAMg"]
[Fri Nov 21 15:58:52.686310 2025] [:error] [pid 25521:tid 25531] [client 172.98.32.80:53377] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 15:58:53.132511 2025] [:error] [pid 25521:tid 25527] [client 172.98.32.80:53377] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Fri Nov 21 15:58:53.585127 2025] [:error] [pid 25521:tid 25542] [client 172.98.32.80:53377] [client 172.98.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSAbvfhXnBMilDddn3Xk4AAAANM"]
[Fri Nov 21 15:58:55.021867 2025] [:error] [pid 25431:tid 25495] [client 136.144.42.73:21307] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri Nov 21 15:58:55.448466 2025] [:error] [pid 25431:tid 25510] [client 136.144.42.73:21307] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSAbv8klhXxmoIExII0xLQAAAJc"]
[Fri Nov 21 15:58:56.304059 2025] [:error] [pid 46939:tid 46966] [client 136.144.42.69:33895] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSAbwO0OmVoxD4VZ_ZlrqgAAAVg"]
[Fri Nov 21 15:58:58.932207 2025] [:error] [pid 25554:tid 25563] [client 45.132.227.55:60761] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSAbwh-NtB-9AzFZrk5QogAAAQU"]
[Fri Nov 21 15:58:59.799963 2025] [:error] [pid 25431:tid 25500] [client 172.98.32.93:57555] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aSAbw8klhXxmoIExII0xQAAAAI0"]
[Fri Nov 21 15:59:00.121160 2025] [:error] [pid 25521:tid 25531] [client 213.21.239.4:38100] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAbxPhXnBMilDddn3XlFAAAAMg"]
[Fri Nov 21 15:59:02.036297 2025] [:error] [pid 46939:tid 46949] [client 45.132.227.58:45935] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Fri Nov 21 15:59:02.984247 2025] [:error] [pid 46939:tid 46966] [client 45.132.227.58:45935] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSAbxu0OmVoxD4VZ_ZlsAAAAAVg"]
[Fri Nov 21 15:59:04.777005 2025] [:error] [pid 25431:tid 25506] [client 172.98.32.92:65119] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Fri Nov 21 15:59:05.656743 2025] [:error] [pid 25431:tid 25490] [client 172.98.32.92:65119] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSAbycklhXxmoIExII0xVAAAAIM"]
[Fri Nov 21 15:59:06.546876 2025] [:error] [pid 25430:tid 25461] [client 45.132.227.65:57839] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aSAbyqpnWJcWt_4foXlBgwAAAEE"]
[Fri Nov 21 15:59:07.870201 2025] [:error] [pid 25430:tid 25478] [client 45.132.227.60:25235] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Fri Nov 21 15:59:08.314167 2025] [:error] [pid 25430:tid 25477] [client 45.132.227.60:25235] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSAbzKpnWJcWt_4foXlBiwAAAFE"]
[Fri Nov 21 15:59:09.169365 2025] [:error] [pid 25431:tid 25490] [client 136.144.42.72:22979] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSAbzcklhXxmoIExII0xZAAAAIM"]
[Fri Nov 21 15:59:11.023580 2025] [:error] [pid 25431:tid 25511] [client 172.98.32.85:59325] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Fri Nov 21 15:59:11.462648 2025] [:error] [pid 25431:tid 25500] [client 172.98.32.85:59325] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Fri Nov 21 15:59:12.372416 2025] [:error] [pid 25431:tid 25501] [client 172.98.32.85:59325] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Fri Nov 21 15:59:13.230496 2025] [:error] [pid 25431:tid 25492] [client 172.98.32.85:59325] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aSAb0cklhXxmoIExII0xjQAAAIU"]
[Fri Nov 21 15:59:14.175440 2025] [:error] [pid 25429:tid 25447] [client 45.132.227.56:60209] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSAb0j4rZbRSr7vu-NOl9AAAAA4"]
[Fri Nov 21 15:59:16.422605 2025] [:error] [pid 25554:tid 25567] [client 45.132.227.62:53785] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Nov 21 15:59:16.845840 2025] [:error] [pid 25554:tid 25570] [client 45.132.227.62:53785] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSAb1B-NtB-9AzFZrk5RGAAAAQw"]
[Fri Nov 21 15:59:17.699142 2025] [:error] [pid 25521:tid 25524] [client 136.144.42.75:38513] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSAb1fhXnBMilDddn3XlhQAAAME"]
[Fri Nov 21 15:59:18.553017 2025] [:error] [pid 25430:tid 25472] [client 45.132.227.60:63871] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSAb1qpnWJcWt_4foXlB0wAAAEw"]
[Fri Nov 21 15:59:21.271711 2025] [:error] [pid 46939:tid 46962] [client 45.132.227.61:29129] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Fri Nov 21 15:59:21.695811 2025] [:error] [pid 46939:tid 46950] [client 45.132.227.61:29129] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSAb2e0OmVoxD4VZ_Zls0QAAAUg"]
[Fri Nov 21 15:59:23.009328 2025] [:error] [pid 25554:tid 25565] [client 172.98.32.96:42553] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSAb2x-NtB-9AzFZrk5RTQAAAQc"]
[Fri Nov 21 15:59:23.874878 2025] [:error] [pid 25554:tid 25568] [client 45.132.227.65:60989] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Nov 21 15:59:24.401679 2025] [:error] [pid 25554:tid 25569] [client 45.132.227.65:60989] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Fri Nov 21 15:59:25.272806 2025] [:error] [pid 25554:tid 25580] [client 45.132.227.65:60989] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Fri Nov 21 15:59:29.404998 2025] [:error] [pid 25554:tid 25579] [client 45.132.227.65:60989] [client 45.132.227.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.65, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/js/wp-login.php"] [unique_id "aSAb4R-NtB-9AzFZrk5RiQAAARU"]
[Fri Nov 21 15:59:30.297150 2025] [:error] [pid 25554:tid 25560] [client 45.132.227.65:60989] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Fri Nov 21 15:59:30.923695 2025] [:error] [pid 25554:tid 25563] [client 45.132.227.65:60989] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Fri Nov 21 15:59:31.362285 2025] [:error] [pid 25554:tid 25564] [client 45.132.227.65:60989] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Fri Nov 21 15:59:32.239672 2025] [:error] [pid 25554:tid 25560] [client 45.132.227.65:60989] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSAb5B-NtB-9AzFZrk5RpgAAAQI"]
[Fri Nov 21 15:59:33.141787 2025] [:error] [pid 46939:tid 46950] [client 136.144.42.72:41995] [client 136.144.42.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.42.72, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSAb5e0OmVoxD4VZ_ZltRQAAAUg"]
[Fri Nov 21 15:59:34.538264 2025] [:error] [pid 46939:tid 46953] [client 136.144.42.72:41995] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Fri Nov 21 15:59:35.017512 2025] [:error] [pid 46939:tid 46957] [client 136.144.42.72:41995] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Fri Nov 21 15:59:35.974856 2025] [:error] [pid 46939:tid 46947] [client 136.144.42.72:41995] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Fri Nov 21 15:59:36.872057 2025] [:error] [pid 46939:tid 46961] [client 136.144.42.72:41995] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Fri Nov 21 15:59:38.189045 2025] [:error] [pid 46939:tid 46944] [client 136.144.42.72:41995] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Fri Nov 21 15:59:41.467864 2025] [:error] [pid 46939:tid 46964] [client 136.144.42.72:41995] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri Nov 21 15:59:41.898216 2025] [:error] [pid 46939:tid 46963] [client 136.144.42.72:41995] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Fri Nov 21 15:59:44.225025 2025] [:error] [pid 46939:tid 46955] [client 136.144.42.72:41995] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Fri Nov 21 15:59:45.161752 2025] [:error] [pid 46939:tid 46944] [client 136.144.42.72:41995] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSAb8e0OmVoxD4VZ_ZltzgAAAUI"]
[Fri Nov 21 15:59:46.960703 2025] [:error] [pid 25431:tid 25496] [client 136.144.42.74:38657] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Fri Nov 21 15:59:47.405244 2025] [:error] [pid 25431:tid 25490] [client 136.144.42.74:38657] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSAb88klhXxmoIExII0yMwAAAIM"]
[Fri Nov 21 15:59:48.770667 2025] [:error] [pid 46939:tid 46944] [client 136.144.42.72:65443] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Fri Nov 21 15:59:49.247339 2025] [:error] [pid 46939:tid 46964] [client 136.144.42.72:65443] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSAb9e0OmVoxD4VZ_Zlt7gAAAVY"]
[Fri Nov 21 15:59:51.049451 2025] [:error] [pid 46939:tid 46960] [client 136.144.42.74:25547] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Fri Nov 21 15:59:51.914914 2025] [:error] [pid 46939:tid 46958] [client 136.144.42.74:25547] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Fri Nov 21 15:59:52.859424 2025] [:error] [pid 46939:tid 46965] [client 136.144.42.74:25547] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Fri Nov 21 15:59:53.289178 2025] [:error] [pid 46939:tid 46957] [client 136.144.42.74:25547] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Fri Nov 21 15:59:54.146858 2025] [:error] [pid 46939:tid 46946] [client 136.144.42.74:25547] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSAb-u0OmVoxD4VZ_ZluGwAAAUQ"]
[Fri Nov 21 15:59:55.022059 2025] [:error] [pid 25521:tid 25543] [client 45.132.227.53:49645] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Fri Nov 21 15:59:55.462199 2025] [:error] [pid 25521:tid 25535] [client 45.132.227.53:49645] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Fri Nov 21 15:59:55.895877 2025] [:error] [pid 25521:tid 25533] [client 45.132.227.53:49645] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSAb-_hXnBMilDddn3XmrAAAAMo"]
[Fri Nov 21 15:59:57.219627 2025] [:error] [pid 25431:tid 25503] [client 172.98.32.90:52873] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSAb_cklhXxmoIExII0ygQAAAJA"]
[Fri Nov 21 15:59:58.566238 2025] [:error] [pid 25554:tid 25581] [client 136.144.42.69:23745] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Fri Nov 21 16:00:00.047490 2025] [:error] [pid 25554:tid 25575] [client 136.144.42.69:23745] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Fri Nov 21 16:00:00.486248 2025] [:error] [pid 25554:tid 25565] [client 136.144.42.69:23745] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Fri Nov 21 16:00:00.988971 2025] [:error] [pid 25554:tid 25568] [client 136.144.42.69:23745] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSAcAB-NtB-9AzFZrk5SbQAAAQo"]
[Fri Nov 21 16:00:01.877148 2025] [:error] [pid 25554:tid 25560] [client 172.98.32.88:39527] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSAcAR-NtB-9AzFZrk5ScAAAAQI"]
[Fri Nov 21 16:00:05.159759 2025] [:error] [pid 25429:tid 25443] [client 172.98.32.93:30885] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Fri Nov 21 16:00:06.017838 2025] [:error] [pid 25429:tid 25441] [client 172.98.32.93:30885] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSAcBj4rZbRSr7vu-NOnIAAAAAg"]
[Fri Nov 21 16:00:07.316791 2025] [:error] [pid 46939:tid 46952] [client 172.98.32.89:38237] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "aSAcB-0OmVoxD4VZ_ZlupwAAAUo"]
[Fri Nov 21 16:00:08.664922 2025] [:error] [pid 25521:tid 25541] [client 172.98.32.94:35055] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri Nov 21 16:00:09.098036 2025] [:error] [pid 25521:tid 25535] [client 172.98.32.94:35055] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Fri Nov 21 16:00:09.537443 2025] [:error] [pid 25521:tid 25542] [client 172.98.32.94:35055] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSAcCfhXnBMilDddn3XnEgAAANM"]
[Fri Nov 21 16:00:10.854062 2025] [:error] [pid 25521:tid 25527] [client 45.132.227.57:46729] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Fri Nov 21 16:00:11.296466 2025] [:error] [pid 25521:tid 25540] [client 45.132.227.57:46729] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Fri Nov 21 16:00:12.216111 2025] [:error] [pid 25521:tid 25537] [client 45.132.227.57:46729] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Fri Nov 21 16:00:13.535727 2025] [:error] [pid 25521:tid 25534] [client 45.132.227.57:46729] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSAcDfhXnBMilDddn3XnNwAAAMs"]
[Fri Nov 21 16:00:14.398075 2025] [:error] [pid 25554:tid 25574] [client 172.98.32.76:63739] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Fri Nov 21 16:00:15.721818 2025] [:error] [pid 25554:tid 25563] [client 172.98.32.76:63739] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSAcDx-NtB-9AzFZrk5SpwAAAQU"]
[Fri Nov 21 16:00:17.038260 2025] [:error] [pid 25521:tid 25524] [client 45.132.227.52:29991] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Fri Nov 21 16:00:18.328447 2025] [:error] [pid 25521:tid 25542] [client 45.132.227.52:29991] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Fri Nov 21 16:00:18.764760 2025] [:error] [pid 25521:tid 25539] [client 45.132.227.52:29991] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Fri Nov 21 16:00:20.601079 2025] [:error] [pid 25521:tid 25540] [client 45.132.227.52:29991] [client 45.132.227.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.52, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSAcFPhXnBMilDddn3XnVAAAANE"]
[Fri Nov 21 16:00:22.874871 2025] [:error] [pid 25521:tid 25529] [client 45.132.227.52:29991] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSAcFvhXnBMilDddn3XnXAAAAMY"]
[Fri Nov 21 16:00:23.784753 2025] [:error] [pid 25554:tid 25563] [client 172.98.32.94:31011] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Fri Nov 21 16:00:24.213042 2025] [:error] [pid 25554:tid 25578] [client 172.98.32.94:31011] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSAcGB-NtB-9AzFZrk5SzQAAARQ"]
[Fri Nov 21 16:00:25.083375 2025] [:error] [pid 25429:tid 25445] [client 172.98.32.81:64345] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Fri Nov 21 16:00:26.010275 2025] [:error] [pid 25429:tid 25437] [client 172.98.32.81:64345] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Fri Nov 21 16:00:26.944241 2025] [:error] [pid 25429:tid 25442] [client 172.98.32.81:64345] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSAcGj4rZbRSr7vu-NOnvwAAAAk"]
[Fri Nov 21 16:00:28.304371 2025] [:error] [pid 25429:tid 25434] [client 45.132.227.64:43325] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Fri Nov 21 16:00:28.743643 2025] [:error] [pid 25429:tid 25455] [client 45.132.227.64:43325] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Fri Nov 21 16:00:29.604501 2025] [:error] [pid 25429:tid 25437] [client 45.132.227.64:43325] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSAcHT4rZbRSr7vu-NOnzwAAAAQ"]
[Fri Nov 21 16:00:30.904078 2025] [:error] [pid 25521:tid 25524] [client 45.132.227.67:26307] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSAcHvhXnBMilDddn3XndwAAAME"]
[Fri Nov 21 16:00:31.796036 2025] [:error] [pid 25431:tid 25493] [client 172.98.32.95:32381] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Fri Nov 21 16:00:32.226867 2025] [:error] [pid 25431:tid 25492] [client 172.98.32.95:32381] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Fri Nov 21 16:00:33.093205 2025] [:error] [pid 25431:tid 25499] [client 172.98.32.95:32381] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSAcIcklhXxmoIExII0zcgAAAIw"]
[Fri Nov 21 16:00:33.948853 2025] [:error] [pid 25429:tid 25442] [client 136.144.42.73:63289] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Fri Nov 21 16:00:34.827309 2025] [:error] [pid 25429:tid 25445] [client 136.144.42.73:63289] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Fri Nov 21 16:00:35.254005 2025] [:error] [pid 25429:tid 25452] [client 136.144.42.73:63289] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSAcIz4rZbRSr7vu-NOn9gAAABM"]
[Fri Nov 21 16:00:36.547103 2025] [:error] [pid 25431:tid 25496] [client 172.98.32.99:25601] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/db.php"] [unique_id "aSAcJMklhXxmoIExII0zgQAAAIk"]
[Fri Nov 21 16:00:37.434345 2025] [:error] [pid 25430:tid 25483] [client 136.144.42.70:41611] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSAcJapnWJcWt_4foXlDmwAAAFc"]
[Fri Nov 21 16:00:38.367745 2025] [:error] [pid 25429:tid 25451] [client 136.144.42.75:49399] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSAcJj4rZbRSr7vu-NOoCwAAABI"]
[Fri Nov 21 16:00:39.305635 2025] [:error] [pid 25521:tid 25523] [client 45.132.227.64:59933] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSAcJ_hXnBMilDddn3XnowAAAMA"]
[Fri Nov 21 16:00:40.161662 2025] [:error] [pid 25554:tid 25580] [client 172.98.32.91:40475] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSAcKB-NtB-9AzFZrk5TIAAAARY"]
[Fri Nov 21 16:00:41.014899 2025] [:error] [pid 25521:tid 25540] [client 172.98.32.93:27759] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSAcKfhXnBMilDddn3XnsgAAANE"]
[Fri Nov 21 16:00:42.784152 2025] [:error] [pid 25521:tid 25539] [client 172.98.32.76:39029] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSAcKvhXnBMilDddn3XnuAAAANA"]
[Fri Nov 21 16:00:43.679604 2025] [:error] [pid 25521:tid 25538] [client 172.98.32.95:45799] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSAcK_hXnBMilDddn3XnuQAAAM8"]
[Fri Nov 21 16:00:44.615074 2025] [:error] [pid 46939:tid 46945] [client 172.98.32.98:61521] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSAcLO0OmVoxD4VZ_ZlwtQAAAUM"]
[Fri Nov 21 16:00:45.982535 2025] [:error] [pid 25521:tid 25532] [client 172.98.32.81:39969] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSAcLfhXnBMilDddn3XnwAAAAMk"]
[Fri Nov 21 16:00:47.813919 2025] [:error] [pid 25554:tid 25561] [client 172.98.32.94:22999] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aSAcLx-NtB-9AzFZrk5TUgAAAQM"]
[Fri Nov 21 16:00:48.704263 2025] [:error] [pid 46939:tid 46961] [client 172.98.32.76:47811] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Fri Nov 21 16:00:50.512147 2025] [:error] [pid 46939:tid 46943] [client 172.98.32.76:47811] [client 172.98.32.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.76, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSAcMu0OmVoxD4VZ_Zlw9gAAAUE"]
[Fri Nov 21 16:00:53.227257 2025] [:error] [pid 46939:tid 46959] [client 172.98.32.76:47811] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSAcNe0OmVoxD4VZ_ZlxIAAAAVE"]
[Fri Nov 21 16:00:54.119031 2025] [:error] [pid 25430:tid 25466] [client 45.132.227.66:38491] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSAcNqpnWJcWt_4foXlEFgAAAEY"]
[Fri Nov 21 16:00:56.353187 2025] [:error] [pid 25431:tid 25496] [client 45.132.227.65:43209] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Fri Nov 21 16:00:56.869886 2025] [:error] [pid 25431:tid 25504] [client 45.132.227.65:43209] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Fri Nov 21 16:00:58.626626 2025] [:error] [pid 25431:tid 25494] [client 45.132.227.65:43209] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Fri Nov 21 16:00:59.059783 2025] [:error] [pid 25431:tid 25492] [client 45.132.227.65:43209] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Fri Nov 21 16:01:00.912756 2025] [:error] [pid 25431:tid 25502] [client 45.132.227.65:43209] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Fri Nov 21 16:01:01.387737 2025] [:error] [pid 25431:tid 25499] [client 45.132.227.65:43209] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Fri Nov 21 16:01:01.839602 2025] [:error] [pid 25431:tid 25508] [client 45.132.227.65:43209] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Fri Nov 21 16:01:02.333958 2025] [:error] [pid 25431:tid 25493] [client 45.132.227.65:43209] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Fri Nov 21 16:01:02.768037 2025] [:error] [pid 25431:tid 25502] [client 45.132.227.65:43209] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSAcPsklhXxmoIExII00KgAAAI8"]
[Fri Nov 21 16:01:03.647255 2025] [:error] [pid 25431:tid 25491] [client 45.132.227.56:60629] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSAcP8klhXxmoIExII00MwAAAIQ"]
[Fri Nov 21 16:01:04.520308 2025] [:error] [pid 25521:tid 25543] [client 172.98.32.94:43337] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSAcQPhXnBMilDddn3XoJAAAANQ"]
[Fri Nov 21 16:01:05.812173 2025] [:error] [pid 25431:tid 25489] [client 172.98.32.94:62473] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Fri Nov 21 16:01:06.246045 2025] [:error] [pid 25431:tid 25511] [client 172.98.32.94:62473] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Fri Nov 21 16:01:07.106691 2025] [:error] [pid 25431:tid 25504] [client 172.98.32.94:62473] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Fri Nov 21 16:01:07.985432 2025] [:error] [pid 25431:tid 25489] [client 172.98.32.94:62473] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSAcQ8klhXxmoIExII00VwAAAII"]
[Fri Nov 21 16:01:08.851929 2025] [:error] [pid 46939:tid 46958] [client 45.132.227.53:25803] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSAcRO0OmVoxD4VZ_ZlxgwAAAVA"]
[Fri Nov 21 16:01:09.713824 2025] [:error] [pid 25431:tid 25511] [client 136.144.42.79:24889] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSAcRcklhXxmoIExII00WwAAAJg"]
[Fri Nov 21 16:01:12.295628 2025] [:error] [pid 25430:tid 25461] [client 136.144.42.80:35893] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSAcSKpnWJcWt_4foXlExAAAAEE"]
[Fri Nov 21 16:01:13.577100 2025] [:error] [pid 25521:tid 25528] [client 172.98.32.86:51021] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSAcSfhXnBMilDddn3XoPwAAAMU"]
[Fri Nov 21 16:01:15.308236 2025] [:error] [pid 46939:tid 46944] [client 45.132.227.58:35065] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSAcS-0OmVoxD4VZ_ZlxqwAAAUI"]
[Fri Nov 21 16:01:20.932934 2025] [:error] [pid 25431:tid 25490] [client 45.132.227.60:55547] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSAcUMklhXxmoIExII002wAAAIM"]
[Fri Nov 21 16:01:21.797294 2025] [:error] [pid 46939:tid 46961] [client 136.144.42.72:20783] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Fri Nov 21 16:01:22.657888 2025] [:error] [pid 46939:tid 46947] [client 136.144.42.72:20783] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSAcUu0OmVoxD4VZ_Zlx2wAAAUU"]
[Fri Nov 21 16:01:24.393055 2025] [:error] [pid 25521:tid 25539] [client 172.98.32.87:64267] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Fri Nov 21 16:01:25.696291 2025] [:error] [pid 25521:tid 25526] [client 172.98.32.87:64267] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Fri Nov 21 16:01:26.125737 2025] [:error] [pid 25521:tid 25547] [client 172.98.32.87:64267] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSAcVvhXnBMilDddn3XoWQAAANg"]
[Fri Nov 21 16:01:27.902372 2025] [:error] [pid 25521:tid 25527] [client 45.132.227.66:56535] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSAcV_hXnBMilDddn3XoYAAAAMQ"]
[Fri Nov 21 16:01:30.536272 2025] [:error] [pid 25429:tid 25455] [client 172.98.32.85:35901] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSAcWj4rZbRSr7vu-NOpqwAAABY"]
[Fri Nov 21 16:01:33.755806 2025] [:error] [pid 25429:tid 25439] [client 172.98.32.99:50811] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSAcXT4rZbRSr7vu-NOpygAAAAY"]
[Fri Nov 21 16:01:35.091155 2025] [:error] [pid 25554:tid 25572] [client 45.132.227.55:61037] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Fri Nov 21 16:01:35.517681 2025] [:error] [pid 25554:tid 25571] [client 45.132.227.55:61037] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSAcXx-NtB-9AzFZrk5VKAAAAQ0"]
[Fri Nov 21 16:01:36.378189 2025] [:error] [pid 25429:tid 25451] [client 45.132.227.66:39581] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSAcYD4rZbRSr7vu-NOp3wAAABI"]
[Fri Nov 21 16:01:39.509663 2025] [:error] [pid 25554:tid 25558] [client 172.98.32.88:40667] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSAcYx-NtB-9AzFZrk5VXwAAAQA"]
[Fri Nov 21 16:01:40.418957 2025] [:error] [pid 25521:tid 25530] [client 136.144.42.75:62613] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Fri Nov 21 16:01:42.229912 2025] [:error] [pid 25521:tid 25544] [client 136.144.42.75:62613] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Fri Nov 21 16:01:42.661363 2025] [:error] [pid 25521:tid 25539] [client 136.144.42.75:62613] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSAcZvhXnBMilDddn3XoiQAAANA"]
[Fri Nov 21 16:01:44.528152 2025] [:error] [pid 25554:tid 25575] [client 45.132.227.61:56797] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Fri Nov 21 16:01:45.413846 2025] [:error] [pid 25554:tid 25568] [client 45.132.227.61:56797] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSAcaR-NtB-9AzFZrk5VpQAAAQo"]
[Fri Nov 21 16:01:46.279889 2025] [:error] [pid 25429:tid 25450] [client 45.132.227.58:52513] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSAcaj4rZbRSr7vu-NOqHwAAABE"]
[Fri Nov 21 16:01:48.152429 2025] [:error] [pid 25430:tid 25481] [client 172.98.32.96:20711] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSAcbKpnWJcWt_4foXlF3gAAAFU"]
[Fri Nov 21 16:01:50.312920 2025] [:error] [pid 25430:tid 25471] [client 136.144.42.70:23517] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aSAcbqpnWJcWt_4foXlF7QAAAEs"]
[Fri Nov 21 16:01:51.272416 2025] [:error] [pid 25521:tid 25546] [client 45.132.227.56:25133] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSAcb_hXnBMilDddn3XowwAAANc"]
[Fri Nov 21 16:01:52.576350 2025] [:error] [pid 25521:tid 25533] [client 136.144.42.72:58153] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_SpaceTn.php
[Fri Nov 21 16:01:54.813747 2025] [:error] [pid 25521:tid 25534] [client 136.144.42.72:58153] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aSAccvhXnBMilDddn3Xo4QAAAMs"]
[Fri Nov 21 16:01:56.677816 2025] [:error] [pid 46939:tid 46945] [client 45.132.227.58:39249] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aSAcdO0OmVoxD4VZ_ZlynQAAAUM"]
[Fri Nov 21 16:01:57.586045 2025] [:error] [pid 46939:tid 46943] [client 172.98.32.88:51455] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aSAcde0OmVoxD4VZ_ZlyoQAAAUE"]
[Fri Nov 21 16:01:58.875103 2025] [:error] [pid 25521:tid 25531] [client 172.98.32.89:35029] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Fri Nov 21 16:01:59.334445 2025] [:error] [pid 25521:tid 25536] [client 172.98.32.89:35029] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aSAcd_hXnBMilDddn3XpAwAAAM0"]
[Fri Nov 21 16:02:00.682721 2025] [:error] [pid 25429:tid 25436] [client 172.98.32.93:50299] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aSAceD4rZbRSr7vu-NOqPAAAAAM"]
[Fri Nov 21 16:02:03.817832 2025] [:error] [pid 25431:tid 25500] [client 45.132.227.61:47599] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aSAce8klhXxmoIExII01oAAAAI0"]
[Fri Nov 21 16:02:05.237472 2025] [:error] [pid 25521:tid 25546] [client 45.132.227.56:42467] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Fri Nov 21 16:02:05.666991 2025] [:error] [pid 25521:tid 25537] [client 45.132.227.56:42467] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aSAcffhXnBMilDddn3XpLgAAAM4"]
[Fri Nov 21 16:02:07.484424 2025] [:error] [pid 46939:tid 46948] [client 45.132.227.57:20887] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aSAcf-0OmVoxD4VZ_Zly3AAAAUY"]
[Fri Nov 21 16:02:08.822889 2025] [:error] [pid 25429:tid 25453] [client 172.98.32.82:47473] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/as.php"] [unique_id "aSAcgD4rZbRSr7vu-NOqWwAAABQ"]
[Fri Nov 21 16:02:10.136731 2025] [:error] [pid 46939:tid 46961] [client 172.98.32.84:32585] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aSAcgu0OmVoxD4VZ_Zly7QAAAVM"]
[Fri Nov 21 16:02:11.013406 2025] [:error] [pid 25521:tid 25531] [client 172.98.32.84:30705] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSAcg_hXnBMilDddn3XpVAAAAMg"]
[Fri Nov 21 16:02:11.956877 2025] [:error] [pid 25429:tid 25437] [client 45.132.227.54:37407] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aSAcgz4rZbRSr7vu-NOqaAAAAAQ"]
[Fri Nov 21 16:02:15.614364 2025] [:error] [pid 25554:tid 25563] [client 45.132.227.52:51639] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aSAchx-NtB-9AzFZrk5WNwAAAQU"]
[Fri Nov 21 16:02:18.972789 2025] [:error] [pid 25431:tid 25498] [client 172.98.32.82:54427] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSAcisklhXxmoIExII013gAAAIs"]
[Fri Nov 21 16:02:20.818175 2025] [:error] [pid 25430:tid 25484] [client 172.98.32.82:45001] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Fri Nov 21 16:02:21.256981 2025] [:error] [pid 25430:tid 25483] [client 172.98.32.82:45001] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aSAcjapnWJcWt_4foXlGYQAAAFc"]
[Fri Nov 21 16:02:23.469700 2025] [:error] [pid 25430:tid 25474] [client 136.144.42.77:27863] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aSAcj6pnWJcWt_4foXlGaQAAAE4"]
[Fri Nov 21 16:02:24.333831 2025] [:error] [pid 25554:tid 25565] [client 45.132.227.58:36049] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Fri Nov 21 16:02:26.959616 2025] [:error] [pid 25554:tid 25567] [client 45.132.227.58:36049] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aSAckh-NtB-9AzFZrk5WhAAAAQk"]
[Fri Nov 21 16:02:28.343826 2025] [:error] [pid 46939:tid 46951] [client 172.98.32.100:57847] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aSAclO0OmVoxD4VZ_ZlzbgAAAUk"]
[Fri Nov 21 16:02:29.649322 2025] [:error] [pid 46939:tid 46955] [client 45.132.227.66:25417] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aSAcle0OmVoxD4VZ_ZlzfgAAAU0"]
[Fri Nov 21 16:02:32.407242 2025] [:error] [pid 25554:tid 25569] [client 45.132.227.64:40017] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aSAcmB-NtB-9AzFZrk5WnwAAAQs"]
[Fri Nov 21 16:02:36.992855 2025] [:error] [pid 25431:tid 25508] [client 45.132.227.61:39289] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aSAcnMklhXxmoIExII02FQAAAJU"]
[Fri Nov 21 16:02:37.889837 2025] [:error] [pid 25429:tid 25436] [client 45.132.227.55:60963] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aSAcnT4rZbRSr7vu-NOq3AAAAAM"]
[Fri Nov 21 16:02:40.044684 2025] [:error] [pid 25430:tid 25481] [client 172.98.32.83:35379] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aSAcoKpnWJcWt_4foXlGqQAAAFU"]
[Fri Nov 21 16:02:40.978244 2025] [:error] [pid 25431:tid 25497] [client 172.98.32.83:53361] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSAcoMklhXxmoIExII02VwAAAIo"]
[Fri Nov 21 16:02:42.794582 2025] [:error] [pid 25430:tid 25481] [client 136.144.42.78:21899] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aSAcoqpnWJcWt_4foXlGugAAAFU"]
[Fri Nov 21 16:02:43.679233 2025] [:error] [pid 25521:tid 25543] [client 45.132.227.66:24553] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aSAco_hXnBMilDddn3Xp4wAAANQ"]
[Fri Nov 21 16:02:44.772395 2025] [:error] [pid 25521:tid 25536] [client 172.98.32.91:42723] [client 172.98.32.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.91, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSAcpPhXnBMilDddn3Xp5gAAAM0"]
[Fri Nov 21 16:02:44.776514 2025] [:error] [pid 25521:tid 25536] [client 172.98.32.91:42723] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Fri Nov 21 16:02:45.215458 2025] [:error] [pid 25521:tid 25530] [client 172.98.32.91:42723] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aSAcpfhXnBMilDddn3Xp6AAAAMc"]
[Fri Nov 21 16:02:47.011183 2025] [:error] [pid 25431:tid 25508] [client 136.144.42.73:30915] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Fri Nov 21 16:02:47.442798 2025] [:error] [pid 25431:tid 25496] [client 136.144.42.73:30915] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSAcp8klhXxmoIExII02ZQAAAIk"]
[Fri Nov 21 16:02:48.322932 2025] [:error] [pid 25429:tid 25452] [client 172.98.32.87:51945] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSAcqD4rZbRSr7vu-NOq8QAAABM"]
[Fri Nov 21 16:02:49.285679 2025] [:error] [pid 25429:tid 25447] [client 172.98.32.90:58917] File does not exist: /usr/local/apache/htdocs/suspended-page/page.php
[Fri Nov 21 16:02:52.375952 2025] [:error] [pid 25429:tid 25453] [client 172.98.32.90:58917] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aSAcrD4rZbRSr7vu-NOrBwAAABQ"]
[Fri Nov 21 16:02:53.301618 2025] [:error] [pid 25431:tid 25497] [client 172.98.32.92:41277] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aSAcrcklhXxmoIExII02hAAAAIo"]
[Fri Nov 21 16:02:55.126792 2025] [:error] [pid 25431:tid 25495] [client 45.132.227.60:38073] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aSAcr8klhXxmoIExII02jgAAAIg"]
[Fri Nov 21 16:02:55.976444 2025] [:error] [pid 46939:tid 46961] [client 172.98.32.95:60987] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aSAcr-0OmVoxD4VZ_Zl0WwAAAVM"]
[Fri Nov 21 16:02:56.891805 2025] [:error] [pid 46939:tid 46948] [client 172.98.32.87:62843] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Fri Nov 21 16:02:57.320717 2025] [:error] [pid 46939:tid 46946] [client 172.98.32.87:62843] [client 172.98.32.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.87, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSAcse0OmVoxD4VZ_Zl0aAAAAUQ"]
[Fri Nov 21 16:02:59.309917 2025] [:error] [pid 46939:tid 46965] [client 172.98.32.87:62843] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aSAcs-0OmVoxD4VZ_Zl0hgAAAVc"]
[Fri Nov 21 16:03:02.139060 2025] [:error] [pid 46939:tid 46949] [client 172.98.32.85:56985] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aSActu0OmVoxD4VZ_Zl0pAAAAUc"]
[Fri Nov 21 16:03:03.006813 2025] [:error] [pid 25554:tid 25561] [client 172.98.32.92:55175] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Fri Nov 21 16:03:03.471873 2025] [:error] [pid 25554:tid 25574] [client 172.98.32.92:55175] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aSActx-NtB-9AzFZrk5XXgAAARA"]
[Fri Nov 21 16:03:04.344298 2025] [:error] [pid 25554:tid 25581] [client 172.98.32.96:22075] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aSAcuB-NtB-9AzFZrk5XYAAAARc"]
[Fri Nov 21 16:03:05.211372 2025] [:error] [pid 25521:tid 25537] [client 45.132.227.56:48341] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Fri Nov 21 16:03:06.563654 2025] [:error] [pid 25521:tid 25528] [client 45.132.227.56:48341] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aSAcuvhXnBMilDddn3XqaAAAAMU"]
[Fri Nov 21 16:03:08.305957 2025] [:error] [pid 25554:tid 25579] [client 45.132.227.65:51535] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSAcvB-NtB-9AzFZrk5XegAAARU"]
[Fri Nov 21 16:03:09.169215 2025] [:error] [pid 25430:tid 25465] [client 172.98.32.89:53783] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Fri Nov 21 16:03:10.728290 2025] [:error] [pid 25430:tid 25472] [client 172.98.32.89:53783] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Fri Nov 21 16:03:11.607038 2025] [:error] [pid 25430:tid 25474] [client 172.98.32.89:53783] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aSAcv6pnWJcWt_4foXlHGwAAAE4"]
[Fri Nov 21 16:03:12.536721 2025] [:error] [pid 25430:tid 25465] [client 136.144.42.74:37293] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aSAcwKpnWJcWt_4foXlHHQAAAEU"]
[Fri Nov 21 16:03:13.949422 2025] [:error] [pid 25554:tid 25569] [client 45.132.227.67:35383] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/count.php"] [unique_id "aSAcwR-NtB-9AzFZrk5XhQAAAQs"]
[Fri Nov 21 16:03:14.836510 2025] [:error] [pid 25429:tid 25447] [client 172.98.32.93:38637] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-error_log.php
[Fri Nov 21 16:03:17.535297 2025] [:error] [pid 25429:tid 25444] [client 172.98.32.93:38637] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSAcxT4rZbRSr7vu-NOrUAAAAAs"]
[Fri Nov 21 16:03:19.415416 2025] [:error] [pid 25430:tid 25479] [client 45.132.227.60:33489] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.windfcau.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/images/stories/themes.php"] [unique_id "aSAcx6pnWJcWt_4foXlHKgAAAFM"]
[Fri Nov 21 16:03:19.862026 2025] [:error] [pid 25430:tid 25476] [client 45.132.227.60:33489] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aSAcx6pnWJcWt_4foXlHLAAAAFA"]
[Fri Nov 21 16:03:21.667135 2025] [:error] [pid 46939:tid 46947] [client 136.144.42.77:62749] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aSAcye0OmVoxD4VZ_Zl1LwAAAUU"]
[Fri Nov 21 16:03:22.526437 2025] [:error] [pid 25554:tid 25563] [client 172.98.32.86:37741] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aSAcyh-NtB-9AzFZrk5XsgAAAQU"]
[Fri Nov 21 16:03:24.352031 2025] [:error] [pid 25429:tid 25449] [client 45.132.227.67:20389] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Fri Nov 21 16:03:26.191447 2025] [:error] [pid 25429:tid 25457] [client 45.132.227.67:20389] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aSAczj4rZbRSr7vu-NOrZwAAABg"]
[Fri Nov 21 16:03:27.993448 2025] [:error] [pid 46939:tid 46961] [client 136.144.42.70:32445] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aSAcz-0OmVoxD4VZ_Zl1UgAAAVM"]
[Fri Nov 21 16:03:29.279685 2025] [:error] [pid 25429:tid 25450] [client 45.132.227.55:43311] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aSAc0T4rZbRSr7vu-NOrbgAAABE"]
[Fri Nov 21 16:03:30.228807 2025] [:error] [pid 25430:tid 25464] [client 172.98.32.80:60627] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Fri Nov 21 16:03:33.762142 2025] [:error] [pid 25430:tid 25464] [client 172.98.32.80:60627] [client 172.98.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aSAc1apnWJcWt_4foXlHZgAAAEQ"]
[Fri Nov 21 16:03:35.126326 2025] [:error] [pid 25554:tid 25560] [client 172.98.32.86:35209] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aSAc1x-NtB-9AzFZrk5X5QAAAQI"]
[Fri Nov 21 16:03:35.985190 2025] [:error] [pid 25431:tid 25494] [client 172.98.32.99:62193] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Fri Nov 21 16:03:36.422500 2025] [:error] [pid 25431:tid 25488] [client 172.98.32.99:62193] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aSAc2MklhXxmoIExII03IAAAAIE"]
[Fri Nov 21 16:03:37.442906 2025] [:error] [pid 25431:tid 25498] [client 136.144.42.69:64217] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSAc2cklhXxmoIExII03IQAAAIs"]
[Fri Nov 21 16:03:39.240186 2025] [:error] [pid 46939:tid 46954] [client 172.98.32.80:23203] [client 172.98.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aSAc2-0OmVoxD4VZ_Zl1hwAAAUw"]
[Fri Nov 21 16:03:41.509025 2025] [:error] [pid 25429:tid 25439] [client 136.144.42.77:60747] File does not exist: /usr/local/apache/htdocs/suspended-page/entrepreneuse.php
[Fri Nov 21 16:03:41.937034 2025] [:error] [pid 25429:tid 25433] [client 136.144.42.77:60747] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aSAc3T4rZbRSr7vu-NOrqwAAAAA"]
[Fri Nov 21 16:03:42.838435 2025] [:error] [pid 25554:tid 25565] [client 172.98.32.88:20837] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aSAc3h-NtB-9AzFZrk5YAAAAAQc"]
[Fri Nov 21 16:03:48.654965 2025] [:error] [pid 46939:tid 46964] [client 45.132.227.65:57063] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aSAc5O0OmVoxD4VZ_Zl1vgAAAVY"]
[Fri Nov 21 16:03:50.495695 2025] [:error] [pid 25429:tid 25443] [client 172.98.32.87:60127] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aSAc5j4rZbRSr7vu-NOrxgAAAAo"]
[Fri Nov 21 16:03:51.381808 2025] [:error] [pid 25521:tid 25537] [client 172.98.32.89:58317] File does not exist: /usr/local/apache/htdocs/suspended-page/testt.php
[Fri Nov 21 16:03:52.722785 2025] [:error] [pid 25521:tid 25544] [client 172.98.32.89:58317] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aSAc6PhXnBMilDddn3XrFgAAANU"]
[Fri Nov 21 16:03:53.575833 2025] [:error] [pid 25521:tid 25540] [client 136.144.42.70:48347] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aSAc6fhXnBMilDddn3XrGgAAANE"]
[Fri Nov 21 16:03:54.952997 2025] [:error] [pid 46939:tid 46961] [client 172.98.32.89:53243] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aSAc6u0OmVoxD4VZ_Zl15AAAAVM"]
[Fri Nov 21 16:03:55.873366 2025] [:error] [pid 25429:tid 25443] [client 136.144.42.75:34991] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Fri Nov 21 16:03:56.758833 2025] [:error] [pid 25429:tid 25456] [client 136.144.42.75:34991] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aSAc7D4rZbRSr7vu-NOr2AAAABc"]
[Fri Nov 21 16:03:57.643173 2025] [:error] [pid 25554:tid 25569] [client 172.98.32.96:58675] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php
[Fri Nov 21 16:03:58.536126 2025] [:error] [pid 25554:tid 25563] [client 172.98.32.96:58675] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSAc7h-NtB-9AzFZrk5YJAAAAQU"]
[Fri Nov 21 16:03:59.457961 2025] [:error] [pid 46939:tid 46955] [client 172.98.32.84:48351] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aSAc7-0OmVoxD4VZ_Zl1-AAAAU0"]
[Fri Nov 21 16:04:00.834893 2025] [:error] [pid 25554:tid 25566] [client 45.132.227.57:44951] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSAc8B-NtB-9AzFZrk5YJwAAAQg"]
[Fri Nov 21 16:04:02.001776 2025] [:error] [pid 25429:tid 25438] [client 172.98.32.86:43129] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aSAc8j4rZbRSr7vu-NOr6AAAAAU"]
[Fri Nov 21 16:04:03.852522 2025] [:error] [pid 46939:tid 46942] [client 136.144.42.73:35727] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSAc8-0OmVoxD4VZ_Zl2FQAAAUA"]
[Fri Nov 21 16:04:05.147855 2025] [:error] [pid 25430:tid 25475] [client 45.132.227.56:59407] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aSAc9apnWJcWt_4foXlHuAAAAE8"]
[Fri Nov 21 16:04:06.038054 2025] [:error] [pid 25430:tid 25474] [client 45.132.227.59:53101] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSAc9qpnWJcWt_4foXlHuQAAAE4"]
[Fri Nov 21 16:04:06.951075 2025] [:error] [pid 25429:tid 25438] [client 45.132.227.66:25113] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aSAc9j4rZbRSr7vu-NOr9wAAAAU"]
[Fri Nov 21 16:04:09.132108 2025] [:error] [pid 25430:tid 25482] [client 172.98.32.95:61201] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aSAc-apnWJcWt_4foXlHxQAAAFY"]
[Fri Nov 21 16:04:10.877310 2025] [:error] [pid 25431:tid 25500] [client 172.98.32.80:25807] [client 172.98.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aSAc-sklhXxmoIExII03iAAAAI0"]
[Fri Nov 21 16:04:12.284393 2025] [:error] [pid 25430:tid 25465] [client 172.98.32.87:65255] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aSAc_KpnWJcWt_4foXlHzQAAAEU"]
[Fri Nov 21 16:04:13.647866 2025] [:error] [pid 25554:tid 25561] [client 172.98.32.83:35039] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSAc_R-NtB-9AzFZrk5YXgAAAQM"]
[Fri Nov 21 16:04:15.399312 2025] [:error] [pid 25431:tid 25494] [client 45.132.227.53:50689] File does not exist: /usr/local/apache/htdocs/suspended-page/media-new.php
[Fri Nov 21 16:04:17.147119 2025] [:error] [pid 25431:tid 25506] [client 45.132.227.53:50689] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSAdAcklhXxmoIExII03qQAAAJM"]
[Fri Nov 21 16:04:18.000812 2025] [:error] [pid 25554:tid 25568] [client 172.98.32.82:57725] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aSAdAR-NtB-9AzFZrk5YdgAAAQo"]
[Fri Nov 21 16:04:19.391027 2025] [:error] [pid 25430:tid 25481] [client 45.132.227.54:49775] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Fri Nov 21 16:04:19.837839 2025] [:error] [pid 25430:tid 25462] [client 45.132.227.54:49775] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aSAdA6pnWJcWt_4foXlH4QAAAEI"]
[Fri Nov 21 16:04:22.519738 2025] [:error] [pid 25429:tid 25435] [client 172.98.32.81:38767] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aSAdBj4rZbRSr7vu-NOsPwAAAAI"]
[Fri Nov 21 16:04:23.866187 2025] [:error] [pid 46939:tid 46949] [client 45.132.227.63:34929] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfus.php
[Fri Nov 21 16:04:24.293939 2025] [:error] [pid 46939:tid 46946] [client 45.132.227.63:34929] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aSAdCO0OmVoxD4VZ_Zl2ZwAAAUQ"]
[Fri Nov 21 16:04:26.046348 2025] [:error] [pid 46939:tid 46953] [client 136.144.42.78:26691] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSAdCu0OmVoxD4VZ_Zl2bwAAAUs"]
[Fri Nov 21 16:04:26.990077 2025] [:error] [pid 25554:tid 25572] [client 172.98.32.99:64041] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Fri Nov 21 16:04:27.510023 2025] [:error] [pid 25554:tid 25573] [client 172.98.32.99:64041] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aSAdCx-NtB-9AzFZrk5YlQAAAQ8"]
[Fri Nov 21 16:04:28.824423 2025] [:error] [pid 25430:tid 25469] [client 172.98.32.77:32475] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aSAdDKpnWJcWt_4foXlH9wAAAEk"]
[Fri Nov 21 16:04:31.091419 2025] [:error] [pid 46939:tid 46944] [client 136.144.42.75:23177] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Fri Nov 21 16:04:31.516609 2025] [:error] [pid 46939:tid 46955] [client 136.144.42.75:23177] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSAdD-0OmVoxD4VZ_Zl2kQAAAU0"]
[Fri Nov 21 16:04:33.874752 2025] [:error] [pid 25431:tid 25501] [client 45.132.227.65:21549] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aSAdEcklhXxmoIExII035wAAAI4"]
[Fri Nov 21 16:04:34.823737 2025] [:error] [pid 46939:tid 46944] [client 172.98.32.85:21237] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mah.php
[Fri Nov 21 16:04:35.249302 2025] [:error] [pid 46939:tid 46963] [client 172.98.32.85:21237] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aSAdE-0OmVoxD4VZ_Zl2rQAAAVU"]
[Fri Nov 21 16:04:36.109432 2025] [:error] [pid 25554:tid 25566] [client 172.98.32.81:36689] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aSAdFB-NtB-9AzFZrk5YugAAAQg"]
[Fri Nov 21 16:04:36.984803 2025] [:error] [pid 25430:tid 25468] [client 172.98.32.92:49879] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-users.php
[Fri Nov 21 16:04:37.900992 2025] [:error] [pid 25430:tid 25476] [client 172.98.32.92:49879] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aSAdFapnWJcWt_4foXlIFAAAAFA"]
[Fri Nov 21 16:04:38.779857 2025] [:error] [pid 25430:tid 25466] [client 172.98.32.88:40043] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aSAdFqpnWJcWt_4foXlIGgAAAEY"]
[Fri Nov 21 16:04:42.385273 2025] [:error] [pid 25429:tid 25455] [client 136.144.42.70:37271] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aSAdGj4rZbRSr7vu-NOshAAAABY"]
[Fri Nov 21 16:04:43.255816 2025] [:error] [pid 25554:tid 25558] [client 172.98.32.96:28557] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aSAdGx-NtB-9AzFZrk5Y2gAAAQA"]
[Fri Nov 21 16:04:44.573381 2025] [:error] [pid 25429:tid 25438] [client 45.132.227.57:33381] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/log.php"] [unique_id "aSAdHD4rZbRSr7vu-NOsjgAAAAU"]
[Fri Nov 21 16:04:45.505640 2025] [:error] [pid 25431:tid 25508] [client 172.98.32.92:34919] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aSAdHcklhXxmoIExII04EAAAAJU"]
[Fri Nov 21 16:04:46.433597 2025] [:error] [pid 25554:tid 25576] [client 136.144.42.74:52093] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aSAdHh-NtB-9AzFZrk5Y9wAAARI"]
[Fri Nov 21 16:04:47.321819 2025] [:error] [pid 25431:tid 25503] [client 45.132.227.66:23049] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aSAdH8klhXxmoIExII04FgAAAJA"]
[Fri Nov 21 16:04:50.020333 2025] [:error] [pid 25430:tid 25483] [client 172.98.32.87:45309] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aSAdIqpnWJcWt_4foXlIPwAAAFc"]
[Fri Nov 21 16:04:51.009468 2025] [:error] [pid 25554:tid 25579] [client 45.132.227.56:23257] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aSAdIx-NtB-9AzFZrk5ZHwAAARU"]
[Fri Nov 21 16:04:52.359453 2025] [:error] [pid 25554:tid 25570] [client 172.98.32.100:29445] File does not exist: /usr/local/apache/htdocs/suspended-page/top.php
[Fri Nov 21 16:04:52.788284 2025] [:error] [pid 25554:tid 25560] [client 172.98.32.100:29445] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aSAdJB-NtB-9AzFZrk5ZLAAAAQI"]
[Fri Nov 21 16:04:53.682991 2025] [:error] [pid 46939:tid 46950] [client 136.144.42.77:32245] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aSAdJe0OmVoxD4VZ_Zl3IgAAAUg"]
[Fri Nov 21 16:04:55.443650 2025] [:error] [pid 46939:tid 46942] [client 172.98.32.92:36427] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aSAdJ-0OmVoxD4VZ_Zl3MQAAAUA"]
[Fri Nov 21 16:04:56.327528 2025] [:error] [pid 25429:tid 25435] [client 45.132.227.58:23369] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aSAdKD4rZbRSr7vu-NOstgAAAAI"]
[Fri Nov 21 16:05:00.413928 2025] [:error] [pid 46939:tid 46956] [client 172.98.32.90:35411] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aSAdLO0OmVoxD4VZ_Zl3UQAAAU4"]
[Fri Nov 21 16:05:01.275201 2025] [:error] [pid 25430:tid 25474] [client 172.98.32.87:22075] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aSAdLapnWJcWt_4foXlIWgAAAE4"]
[Fri Nov 21 16:05:03.099104 2025] [:error] [pid 25430:tid 25481] [client 172.98.32.89:22395] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSAdL6pnWJcWt_4foXlIYwAAAFU"]
[Fri Nov 21 16:05:05.177058 2025] [:error] [pid 25554:tid 25567] [client 172.98.32.92:60315] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSAdMR-NtB-9AzFZrk5ZdgAAAQk"]
[Fri Nov 21 16:05:06.480389 2025] [:error] [pid 25429:tid 25441] [client 172.98.32.78:23347] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/load.php"] [unique_id "aSAdMj4rZbRSr7vu-NOs1QAAAAg"]
[Fri Nov 21 16:05:07.455859 2025] [:error] [pid 25554:tid 25572] [client 45.132.227.55:33803] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aSAdMx-NtB-9AzFZrk5ZfQAAAQ4"]
[Fri Nov 21 16:05:08.381564 2025] [:error] [pid 25554:tid 25577] [client 136.144.42.75:20465] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aSAdNB-NtB-9AzFZrk5ZggAAARM"]
[Fri Nov 21 16:05:10.579137 2025] [:error] [pid 25521:tid 25537] [client 172.98.32.82:39209] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aSAdNvhXnBMilDddn3XsPAAAAM4"]
[Fri Nov 21 16:05:11.514301 2025] [:error] [pid 25554:tid 25578] [client 172.98.32.79:48783] File does not exist: /usr/local/apache/htdocs/suspended-page/setup-config.php
[Fri Nov 21 16:05:11.955786 2025] [:error] [pid 25554:tid 25572] [client 172.98.32.79:48783] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSAdNx-NtB-9AzFZrk5ZjAAAAQ4"]
[Fri Nov 21 16:05:13.839400 2025] [:error] [pid 46939:tid 46958] [client 136.144.42.79:45679] File does not exist: /usr/local/apache/htdocs/suspended-page/type.php
[Fri Nov 21 16:05:14.264866 2025] [:error] [pid 46939:tid 46947] [client 136.144.42.79:45679] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aSAdOu0OmVoxD4VZ_Zl3lAAAAUU"]
[Fri Nov 21 16:05:15.258334 2025] [:error] [pid 25431:tid 25493] [client 172.98.32.82:29949] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aSAdO8klhXxmoIExII04fgAAAIY"]
[Fri Nov 21 16:05:16.543768 2025] [:error] [pid 25521:tid 25529] [client 172.98.32.94:48825] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aSAdPPhXnBMilDddn3XsSAAAAMY"]
[Fri Nov 21 16:05:19.583984 2025] [:error] [pid 46939:tid 46957] [client 172.98.32.95:64129] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Fri Nov 21 16:05:21.354414 2025] [:error] [pid 46939:tid 46964] [client 172.98.32.95:64129] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aSAdQe0OmVoxD4VZ_Zl3ywAAAVY"]
[Fri Nov 21 16:05:22.781818 2025] [:error] [pid 25554:tid 25558] [client 45.132.227.67:50695] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aSAdQh-NtB-9AzFZrk5ZrAAAAQA"]
[Fri Nov 21 16:05:24.500615 2025] [:error] [pid 25521:tid 25544] [client 45.132.227.54:39453] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aSAdRPhXnBMilDddn3XsXgAAANU"]
[Fri Nov 21 16:05:25.830529 2025] [:error] [pid 25429:tid 25455] [client 45.132.227.67:38357] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aSAdRT4rZbRSr7vu-NOtBQAAABY"]
[Fri Nov 21 16:05:26.689149 2025] [:error] [pid 25429:tid 25444] [client 172.98.32.99:33649] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aSAdRj4rZbRSr7vu-NOtCgAAAAs"]
[Fri Nov 21 16:14:50.154699 2025] [:error] [pid 25429:tid 25450] [client 213.21.239.4:44092] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAfej4rZbRSr7vu-NOykwAAABE"]
[Sat Nov 22 01:27:28.375889 2025] [:error] [pid 9180:tid 9197] [client 172.200.72.235:9461] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.google.de/
[Sat Nov 22 01:27:28.646629 2025] [:error] [pid 9180:tid 9185] [client 172.200.72.235:9461] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.com/
[Sat Nov 22 01:27:28.894622 2025] [:error] [pid 9180:tid 9188] [client 172.200.72.235:9461] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.bing.com/
[Sat Nov 22 01:27:29.149320 2025] [:error] [pid 9180:tid 9191] [client 172.200.72.235:9461] File does not exist: /usr/local/apache/htdocs/suspended-page/.__info.php, referer: https://www.bing.com/
[Sat Nov 22 01:27:29.357920 2025] [:error] [pid 9180:tid 9201] [client 172.200.72.235:9461] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.de/
[Sat Nov 22 01:27:29.599930 2025] [:error] [pid 9180:tid 9205] [client 172.200.72.235:9461] [client 172.200.72.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.200.72.235, incrementing ddos counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aSChAbrk9msixUFV2i-V7AAAAFc"], referer: https://www.yahoo.com/
[Sat Nov 22 01:27:29.603467 2025] [:error] [pid 9180:tid 9205] [client 172.200.72.235:9461] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:27:30.223387 2025] [:error] [pid 9180:tid 9200] [client 172.200.72.235:9461] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php, referer: https://www.google.com/
[Sat Nov 22 01:27:30.443734 2025] [:error] [pid 9180:tid 9204] [client 172.200.72.235:9461] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.google.fr/
[Sat Nov 22 01:27:31.690118 2025] [:error] [pid 9180:tid 9194] [client 172.200.72.235:9461] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.google.com/
[Sat Nov 22 01:27:31.951239 2025] [:error] [pid 9180:tid 9196] [client 172.200.72.235:9461] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:27:32.165878 2025] [:error] [pid 9180:tid 9202] [client 172.200.72.235:9461] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php, referer: https://www.google.com/
[Sat Nov 22 01:27:32.499292 2025] [:error] [pid 9180:tid 9197] [client 172.200.72.235:9461] File does not exist: /usr/local/apache/htdocs/suspended-page/build.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:27:32.830794 2025] [:error] [pid 9180:tid 9189] [client 172.200.72.235:9461] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:27:33.042685 2025] [:error] [pid 9180:tid 9186] [client 172.200.72.235:9461] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:27:33.744851 2025] [:error] [pid 9180:tid 9185] [client 172.200.72.235:9461] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:27:34.059240 2025] [:error] [pid 9180:tid 9198] [client 172.200.72.235:9461] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:27:34.573638 2025] [:error] [pid 9180:tid 9192] [client 172.200.72.235:9461] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.com/
[Sat Nov 22 01:27:34.873865 2025] [:error] [pid 9180:tid 9188] [client 172.200.72.235:9461] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:27:35.145853 2025] [:error] [pid 9180:tid 9193] [client 172.200.72.235:9461] [client 172.200.72.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "aSChB7rk9msixUFV2i-WCgAAAEs"], referer: https://www.google.co.uk/
[Sat Nov 22 01:27:39.265126 2025] [:error] [pid 49641:tid 49843] [client 172.200.72.235:9436] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php, referer: https://www.google.com/
[Sat Nov 22 01:27:40.328040 2025] [:error] [pid 49641:tid 49831] [client 172.200.72.235:9436] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.com/
[Sat Nov 22 01:27:40.559770 2025] [:error] [pid 49641:tid 49840] [client 172.200.72.235:9436] File does not exist: /usr/local/apache/htdocs/suspended-page/mari.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:27:41.007066 2025] [:error] [pid 49641:tid 49842] [client 172.200.72.235:9436] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.bing.com/
[Sat Nov 22 01:27:41.218449 2025] [:error] [pid 49641:tid 49826] [client 172.200.72.235:9436] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:27:43.680667 2025] [:error] [pid 49641:tid 49835] [client 172.200.72.235:9436] [client 172.200.72.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSChD1nhuiDak938N_a5hQAAAAw"], referer: https://duckduckgo.com/
[Sat Nov 22 01:27:47.798351 2025] [:error] [pid 50057:tid 50075] [client 172.200.72.235:9410] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php, referer: https://www.bing.com/
[Sat Nov 22 01:27:48.584011 2025] [:error] [pid 50057:tid 50061] [client 172.200.72.235:9410] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:27:49.353133 2025] [:error] [pid 50057:tid 50079] [client 172.200.72.235:9410] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:27:49.572139 2025] [:error] [pid 50057:tid 50073] [client 172.200.72.235:9410] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:27:49.836584 2025] [:error] [pid 50057:tid 50070] [client 172.200.72.235:9410] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php, referer: https://www.bing.com/
[Sat Nov 22 01:27:50.101220 2025] [:error] [pid 50057:tid 50062] [client 172.200.72.235:9410] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php, referer: https://www.google.fr/
[Sat Nov 22 01:27:50.662108 2025] [:error] [pid 50057:tid 50063] [client 172.200.72.235:9410] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:27:53.863681 2025] [:error] [pid 50057:tid 50061] [client 172.200.72.235:9410] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php, referer: https://www.google.fr/
[Sat Nov 22 01:27:56.020737 2025] [:error] [pid 50057:tid 50078] [client 172.200.72.235:9410] [client 172.200.72.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSChHFb9j9fTBoI0sRVLIAAAARM"], referer: https://www.google.fr/
[Sat Nov 22 01:27:59.072448 2025] [:error] [pid 9180:tid 9185] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php, referer: https://www.google.de/
[Sat Nov 22 01:27:59.396698 2025] [:error] [pid 9180:tid 9205] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php, referer: https://www.google.com/
[Sat Nov 22 01:27:59.610398 2025] [:error] [pid 9180:tid 9195] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/god4m.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:27:59.869529 2025] [:error] [pid 9180:tid 9183] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:28:00.383217 2025] [:error] [pid 9180:tid 9189] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php, referer: https://www.google.fr/
[Sat Nov 22 01:28:00.617274 2025] [:error] [pid 9180:tid 9194] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/07.php, referer: https://www.google.fr/
[Sat Nov 22 01:28:00.821642 2025] [:error] [pid 9180:tid 9202] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:28:01.092447 2025] [:error] [pid 9180:tid 9186] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php, referer: https://www.bing.com/
[Sat Nov 22 01:28:01.303153 2025] [:error] [pid 9180:tid 9198] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sigunq.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:28:02.232379 2025] [:error] [pid 9180:tid 9204] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/wso112233.php, referer: https://www.bing.com/
[Sat Nov 22 01:28:02.755897 2025] [:error] [pid 9180:tid 9187] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php, referer: https://www.bing.com/
[Sat Nov 22 01:28:02.962020 2025] [:error] [pid 9180:tid 9201] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:28:03.454383 2025] [:error] [pid 9180:tid 9184] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:28:03.656926 2025] [:error] [pid 9180:tid 9203] [client 172.200.72.235:9523] [client 172.200.72.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.200.72.235, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSChI7rk9msixUFV2i-WTwAAAFU"], referer: https://www.yahoo.com/
[Sat Nov 22 01:28:03.660615 2025] [:error] [pid 9180:tid 9203] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:28:03.866502 2025] [:error] [pid 9180:tid 9191] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php, referer: https://www.bing.com/
[Sat Nov 22 01:28:04.119261 2025] [:error] [pid 9180:tid 9185] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php, referer: https://www.google.com/
[Sat Nov 22 01:28:04.341136 2025] [:error] [pid 9180:tid 9205] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/classsmtps.php, referer: https://www.google.com/
[Sat Nov 22 01:28:04.571985 2025] [:error] [pid 9180:tid 9195] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php, referer: https://www.google.com/
[Sat Nov 22 01:28:04.794858 2025] [:error] [pid 9180:tid 9183] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:28:05.580178 2025] [:error] [pid 9180:tid 9202] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php, referer: https://www.google.de/
[Sat Nov 22 01:28:05.784613 2025] [:error] [pid 9180:tid 9206] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-comments-post.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:28:06.010292 2025] [:error] [pid 9180:tid 9198] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php, referer: https://www.google.fr/
[Sat Nov 22 01:28:07.060636 2025] [:error] [pid 9180:tid 9188] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php, referer: https://www.google.com/
[Sat Nov 22 01:28:07.885727 2025] [:error] [pid 9180:tid 9200] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:28:08.102260 2025] [:error] [pid 9180:tid 9193] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php, referer: https://www.google.fr/
[Sat Nov 22 01:28:08.308063 2025] [:error] [pid 9180:tid 9204] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/post.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:28:08.541094 2025] [:error] [pid 9180:tid 9197] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:28:08.745545 2025] [:error] [pid 9180:tid 9201] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/geju.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:28:08.958334 2025] [:error] [pid 9180:tid 9203] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:28:09.163229 2025] [:error] [pid 9180:tid 9191] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/hoot.php, referer: https://www.google.fr/
[Sat Nov 22 01:28:09.369783 2025] [:error] [pid 9180:tid 9185] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php, referer: https://www.bing.com/
[Sat Nov 22 01:28:09.638369 2025] [:error] [pid 9180:tid 9195] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php, referer: https://www.google.de/
[Sat Nov 22 01:28:09.852770 2025] [:error] [pid 9180:tid 9196] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:28:10.055859 2025] [:error] [pid 9180:tid 9194] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:28:10.273231 2025] [:error] [pid 9180:tid 9198] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php, referer: https://www.bing.com/
[Sat Nov 22 01:28:10.486339 2025] [:error] [pid 9180:tid 9200] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/upfile.php, referer: https://www.google.fr/
[Sat Nov 22 01:28:10.698855 2025] [:error] [pid 9180:tid 9204] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:28:10.905450 2025] [:error] [pid 9180:tid 9187] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:28:11.110985 2025] [:error] [pid 9180:tid 9201] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php, referer: https://www.google.com/
[Sat Nov 22 01:28:11.317358 2025] [:error] [pid 9180:tid 9196] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php, referer: https://www.google.com/
[Sat Nov 22 01:28:11.900753 2025] [:error] [pid 9180:tid 9198] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:28:13.382666 2025] [:error] [pid 9180:tid 9198] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/ae.php, referer: https://www.google.com/
[Sat Nov 22 01:28:13.588610 2025] [:error] [pid 9180:tid 9182] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:28:13.795035 2025] [:error] [pid 9180:tid 9202] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php, referer: https://www.google.de/
[Sat Nov 22 01:28:14.001431 2025] [:error] [pid 9180:tid 9194] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:28:14.225436 2025] [:error] [pid 9180:tid 9188] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:28:14.433370 2025] [:error] [pid 9180:tid 9199] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:28:14.725431 2025] [:error] [pid 9180:tid 9193] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:28:14.936049 2025] [:error] [pid 9180:tid 9190] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:28:15.251826 2025] [:error] [pid 9180:tid 9204] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php, referer: https://www.google.com/
[Sat Nov 22 01:28:15.468209 2025] [:error] [pid 9180:tid 9197] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php, referer: https://www.google.fr/
[Sat Nov 22 01:28:16.171804 2025] [:error] [pid 9180:tid 9192] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-ajax.php, referer: https://www.google.fr/
[Sat Nov 22 01:28:16.411128 2025] [:error] [pid 9180:tid 9201] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:28:16.669631 2025] [:error] [pid 9180:tid 9196] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php, referer: https://www.google.com/
[Sat Nov 22 01:28:16.877845 2025] [:error] [pid 9180:tid 9202] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php, referer: https://www.google.com/
[Sat Nov 22 01:28:17.083642 2025] [:error] [pid 9180:tid 9194] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php, referer: https://www.google.com/
[Sat Nov 22 01:28:17.299823 2025] [:error] [pid 9180:tid 9188] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/berax.php, referer: https://www.google.de/
[Sat Nov 22 01:28:17.513162 2025] [:error] [pid 9180:tid 9200] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/checkbox.php, referer: https://www.google.fr/
[Sat Nov 22 01:28:18.176984 2025] [:error] [pid 9180:tid 9201] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php, referer: https://www.google.fr/
[Sat Nov 22 01:28:18.387398 2025] [:error] [pid 9180:tid 9182] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:28:18.591347 2025] [:error] [pid 9180:tid 9205] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/form.php, referer: https://www.google.de/
[Sat Nov 22 01:28:18.830913 2025] [:error] [pid 9180:tid 9203] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php, referer: https://www.bing.com/
[Sat Nov 22 01:28:19.058688 2025] [:error] [pid 9180:tid 9198] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.bing.com/
[Sat Nov 22 01:28:19.263879 2025] [:error] [pid 9180:tid 9202] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/kyami.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:28:19.471898 2025] [:error] [pid 9180:tid 9185] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php, referer: https://www.google.de/
[Sat Nov 22 01:28:22.267116 2025] [:error] [pid 9180:tid 9193] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.com/
[Sat Nov 22 01:28:22.473355 2025] [:error] [pid 9180:tid 9182] [client 172.200.72.235:9523] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:06:49.201934 2025] [:error] [pid 53478:tid 53520] [client 141.98.10.115:63376] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-confiq.php
[Sat Nov 22 05:06:51.401411 2025] [:error] [pid 53478:tid 53532] [client 141.98.10.115:64378] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-confiq.php
[Sat Nov 22 05:08:56.413305 2025] [:error] [pid 25856:tid 25878] [client 52.177.168.134:1367] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.google.co.uk/
[Sat Nov 22 05:08:56.661030 2025] [:error] [pid 25856:tid 25874] [client 52.177.168.134:1367] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:08:56.904579 2025] [:error] [pid 25856:tid 25864] [client 52.177.168.134:1367] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.bing.com/
[Sat Nov 22 05:08:58.929724 2025] [:error] [pid 25856:tid 25864] [client 52.177.168.134:1367] File does not exist: /usr/local/apache/htdocs/suspended-page/.__info.php, referer: https://www.google.de/
[Sat Nov 22 05:08:59.143163 2025] [:error] [pid 25856:tid 25878] [client 52.177.168.134:1367] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://duckduckgo.com/
[Sat Nov 22 05:08:59.362662 2025] [:error] [pid 25856:tid 25868] [client 52.177.168.134:1367] [client 52.177.168.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.177.168.134, incrementing ddos counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aSDU6xsTP0wy94zKUvGRggAAAQo"], referer: https://www.google.de/
[Sat Nov 22 05:08:59.368817 2025] [:error] [pid 25856:tid 25868] [client 52.177.168.134:1367] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://www.google.de/
[Sat Nov 22 05:09:00.388628 2025] [:error] [pid 25856:tid 25877] [client 52.177.168.134:1367] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php, referer: https://www.google.de/
[Sat Nov 22 05:09:00.686408 2025] [:error] [pid 25856:tid 25862] [client 52.177.168.134:1367] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.bing.com/
[Sat Nov 22 05:09:04.053096 2025] [:error] [pid 25856:tid 25870] [client 52.177.168.134:1367] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.google.de/
[Sat Nov 22 05:09:04.308125 2025] [:error] [pid 25856:tid 25876] [client 52.177.168.134:1367] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://duckduckgo.com/
[Sat Nov 22 05:09:04.570723 2025] [:error] [pid 25856:tid 25859] [client 52.177.168.134:1367] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php, referer: https://www.google.fr/
[Sat Nov 22 05:09:04.807759 2025] [:error] [pid 25856:tid 25868] [client 52.177.168.134:1367] File does not exist: /usr/local/apache/htdocs/suspended-page/build.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:09:05.020384 2025] [:error] [pid 25856:tid 25863] [client 52.177.168.134:1367] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.google.com/
[Sat Nov 22 05:09:05.233419 2025] [:error] [pid 25856:tid 25867] [client 52.177.168.134:1367] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.com/
[Sat Nov 22 05:09:06.029090 2025] [:error] [pid 25856:tid 25858] [client 52.177.168.134:1367] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.bing.com/
[Sat Nov 22 05:09:06.244020 2025] [:error] [pid 25856:tid 25874] [client 52.177.168.134:1367] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php, referer: https://www.google.de/
[Sat Nov 22 05:09:06.474618 2025] [:error] [pid 25856:tid 25860] [client 52.177.168.134:1367] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.co.uk/
[Sat Nov 22 05:09:07.487749 2025] [:error] [pid 25856:tid 25865] [client 52.177.168.134:1367] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.bing.com/
[Sat Nov 22 05:09:07.699322 2025] [:error] [pid 25856:tid 25870] [client 52.177.168.134:1367] [client 52.177.168.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "aSDU8xsTP0wy94zKUvGRpAAAAQw"], referer: https://www.bing.com/
[Sat Nov 22 05:09:13.078472 2025] [:error] [pid 53477:tid 53490] [client 52.177.168.134:4143] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php, referer: https://www.google.com/
[Sat Nov 22 05:09:14.109333 2025] [:error] [pid 53477:tid 53482] [client 52.177.168.134:4143] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:09:14.325191 2025] [:error] [pid 53477:tid 53492] [client 52.177.168.134:4143] File does not exist: /usr/local/apache/htdocs/suspended-page/mari.php, referer: https://duckduckgo.com/
[Sat Nov 22 05:09:14.545461 2025] [:error] [pid 53477:tid 53484] [client 52.177.168.134:4143] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.bing.com/
[Sat Nov 22 05:09:15.615989 2025] [:error] [pid 53477:tid 53497] [client 52.177.168.134:4143] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php, referer: https://www.google.com/
[Sat Nov 22 05:09:16.473352 2025] [:error] [pid 53477:tid 53494] [client 52.177.168.134:4143] [client 52.177.168.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSDU_H7Lu30Ku9O40aLIJQAAAA0"], referer: https://www.yahoo.com/
[Sat Nov 22 05:09:19.858663 2025] [:error] [pid 53477:tid 53483] [client 52.177.168.134:4342] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php, referer: https://www.google.fr/
[Sat Nov 22 05:09:20.614668 2025] [:error] [pid 53477:tid 53490] [client 52.177.168.134:4342] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.bing.com/
[Sat Nov 22 05:09:21.309710 2025] [:error] [pid 53477:tid 53505] [client 52.177.168.134:4342] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.bing.com/
[Sat Nov 22 05:09:21.526558 2025] [:error] [pid 53477:tid 53482] [client 52.177.168.134:4342] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php, referer: https://www.bing.com/
[Sat Nov 22 05:09:21.739198 2025] [:error] [pid 53477:tid 53499] [client 52.177.168.134:4342] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php, referer: https://www.google.fr/
[Sat Nov 22 05:09:21.953140 2025] [:error] [pid 53477:tid 53484] [client 52.177.168.134:4342] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:09:22.189201 2025] [:error] [pid 53477:tid 53491] [client 52.177.168.134:4342] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php, referer: https://www.google.fr/
[Sat Nov 22 05:09:23.313772 2025] [:error] [pid 53477:tid 53481] [client 52.177.168.134:4342] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php, referer: https://www.google.co.uk/
[Sat Nov 22 05:09:25.915898 2025] [:error] [pid 53477:tid 53489] [client 52.177.168.134:4342] [client 52.177.168.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSDVBX7Lu30Ku9O40aLITwAAAAg"], referer: https://www.yahoo.com/
[Sat Nov 22 05:09:31.485095 2025] [:error] [pid 53479:tid 53543] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php, referer: https://www.google.com/
[Sat Nov 22 05:09:31.709475 2025] [:error] [pid 53479:tid 53546] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:09:31.924056 2025] [:error] [pid 53479:tid 53539] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/god4m.php, referer: https://duckduckgo.com/
[Sat Nov 22 05:09:32.137385 2025] [:error] [pid 53479:tid 53549] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:09:32.563961 2025] [:error] [pid 53479:tid 53554] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php, referer: https://www.google.fr/
[Sat Nov 22 05:09:32.896768 2025] [:error] [pid 53479:tid 53542] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/07.php, referer: https://www.bing.com/
[Sat Nov 22 05:09:33.135268 2025] [:error] [pid 53479:tid 53558] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php, referer: https://www.google.com/
[Sat Nov 22 05:09:33.418755 2025] [:error] [pid 53479:tid 53550] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php, referer: https://www.google.de/
[Sat Nov 22 05:09:33.690808 2025] [:error] [pid 53479:tid 53540] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sigunq.php, referer: https://www.google.com/
[Sat Nov 22 05:09:33.941591 2025] [:error] [pid 53479:tid 53552] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/wso112233.php, referer: https://duckduckgo.com/
[Sat Nov 22 05:09:34.814214 2025] [:error] [pid 53479:tid 53539] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php, referer: https://www.google.co.uk/
[Sat Nov 22 05:09:35.039866 2025] [:error] [pid 53479:tid 53549] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php, referer: https://duckduckgo.com/
[Sat Nov 22 05:09:35.748237 2025] [:error] [pid 53479:tid 53553] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php, referer: https://www.google.fr/
[Sat Nov 22 05:09:36.010298 2025] [:error] [pid 53479:tid 53544] [client 52.177.168.134:4801] [client 52.177.168.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.177.168.134, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSDVEG6cicFF3Aas-oRgvQAAAIg"], referer: https://duckduckgo.com/
[Sat Nov 22 05:09:36.016199 2025] [:error] [pid 53479:tid 53544] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://duckduckgo.com/
[Sat Nov 22 05:09:36.249460 2025] [:error] [pid 53479:tid 53554] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php, referer: https://www.google.com/
[Sat Nov 22 05:09:36.462976 2025] [:error] [pid 53479:tid 53542] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php, referer: https://www.bing.com/
[Sat Nov 22 05:09:36.716015 2025] [:error] [pid 53479:tid 53555] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/classsmtps.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:09:36.946246 2025] [:error] [pid 53479:tid 53550] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:09:37.169102 2025] [:error] [pid 53479:tid 53537] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php, referer: https://www.bing.com/
[Sat Nov 22 05:09:37.388034 2025] [:error] [pid 53479:tid 53552] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:09:37.875185 2025] [:error] [pid 53479:tid 53546] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-comments-post.php, referer: https://duckduckgo.com/
[Sat Nov 22 05:09:38.089778 2025] [:error] [pid 53479:tid 53551] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php, referer: https://www.google.fr/
[Sat Nov 22 05:09:38.303461 2025] [:error] [pid 53479:tid 53545] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php, referer: https://www.google.co.uk/
[Sat Nov 22 05:09:38.518741 2025] [:error] [pid 53479:tid 53538] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php, referer: https://www.google.co.uk/
[Sat Nov 22 05:09:38.733173 2025] [:error] [pid 53479:tid 53541] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php, referer: https://www.google.com/
[Sat Nov 22 05:09:38.974982 2025] [:error] [pid 53479:tid 53539] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/post.php, referer: https://www.google.de/
[Sat Nov 22 05:09:39.684495 2025] [:error] [pid 53479:tid 53557] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php, referer: https://www.google.com/
[Sat Nov 22 05:09:39.904438 2025] [:error] [pid 53479:tid 53554] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/geju.php, referer: https://www.google.fr/
[Sat Nov 22 05:09:40.118622 2025] [:error] [pid 53479:tid 53542] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://www.bing.com/
[Sat Nov 22 05:09:40.344083 2025] [:error] [pid 53479:tid 53558] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/hoot.php, referer: https://www.google.com/
[Sat Nov 22 05:09:40.559727 2025] [:error] [pid 53479:tid 53555] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:09:41.262442 2025] [:error] [pid 53479:tid 53537] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php, referer: https://www.google.com/
[Sat Nov 22 05:09:41.477320 2025] [:error] [pid 53479:tid 53552] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:09:41.733231 2025] [:error] [pid 53479:tid 53546] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:09:41.962786 2025] [:error] [pid 53479:tid 53538] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php, referer: https://www.google.de/
[Sat Nov 22 05:09:42.241742 2025] [:error] [pid 53479:tid 53539] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/upfile.php, referer: https://www.google.de/
[Sat Nov 22 05:09:42.635826 2025] [:error] [pid 53479:tid 53559] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:09:42.849169 2025] [:error] [pid 53479:tid 53544] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php, referer: https://www.bing.com/
[Sat Nov 22 05:09:43.081251 2025] [:error] [pid 53479:tid 53557] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php, referer: https://www.bing.com/
[Sat Nov 22 05:09:43.296317 2025] [:error] [pid 53479:tid 53556] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php, referer: https://www.google.co.uk/
[Sat Nov 22 05:09:43.884050 2025] [:error] [pid 53479:tid 53549] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php, referer: https://www.google.de/
[Sat Nov 22 05:09:44.137034 2025] [:error] [pid 53479:tid 53552] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/ae.php, referer: https://www.google.co.uk/
[Sat Nov 22 05:09:44.723177 2025] [:error] [pid 53479:tid 53543] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:09:44.952494 2025] [:error] [pid 53479:tid 53538] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:09:45.166559 2025] [:error] [pid 53479:tid 53540] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php, referer: https://www.bing.com/
[Sat Nov 22 05:09:45.403655 2025] [:error] [pid 53479:tid 53553] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php, referer: https://www.google.co.uk/
[Sat Nov 22 05:09:45.617724 2025] [:error] [pid 53479:tid 53557] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php, referer: https://www.google.de/
[Sat Nov 22 05:09:45.838388 2025] [:error] [pid 53479:tid 53554] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php, referer: https://duckduckgo.com/
[Sat Nov 22 05:09:47.456838 2025] [:error] [pid 53479:tid 53554] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://www.google.com/
[Sat Nov 22 05:09:48.387699 2025] [:error] [pid 53479:tid 53557] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php, referer: https://duckduckgo.com/
[Sat Nov 22 05:09:48.602050 2025] [:error] [pid 53479:tid 53537] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php, referer: https://www.google.de/
[Sat Nov 22 05:09:48.828165 2025] [:error] [pid 53479:tid 53542] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-ajax.php, referer: https://www.google.fr/
[Sat Nov 22 05:09:49.064497 2025] [:error] [pid 53479:tid 53551] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php, referer: https://www.google.com/
[Sat Nov 22 05:09:49.297026 2025] [:error] [pid 53479:tid 53554] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php, referer: https://www.bing.com/
[Sat Nov 22 05:09:50.130429 2025] [:error] [pid 53479:tid 53540] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:09:50.345558 2025] [:error] [pid 53479:tid 53537] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php, referer: https://www.google.de/
[Sat Nov 22 05:09:50.559800 2025] [:error] [pid 53479:tid 53539] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/berax.php, referer: https://www.google.com/
[Sat Nov 22 05:09:50.772614 2025] [:error] [pid 53479:tid 53560] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/checkbox.php, referer: https://www.google.com/
[Sat Nov 22 05:09:50.998638 2025] [:error] [pid 53479:tid 53542] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php, referer: https://www.bing.com/
[Sat Nov 22 05:09:51.226346 2025] [:error] [pid 53479:tid 53551] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php, referer: https://www.google.fr/
[Sat Nov 22 05:09:51.859906 2025] [:error] [pid 53479:tid 53550] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/form.php, referer: https://www.bing.com/
[Sat Nov 22 05:09:52.073243 2025] [:error] [pid 53479:tid 53554] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php, referer: https://duckduckgo.com/
[Sat Nov 22 05:09:52.347718 2025] [:error] [pid 53479:tid 53544] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://duckduckgo.com/
[Sat Nov 22 05:09:52.949424 2025] [:error] [pid 53479:tid 53559] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/kyami.php, referer: https://www.bing.com/
[Sat Nov 22 05:09:53.164367 2025] [:error] [pid 53479:tid 53553] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php, referer: https://www.google.fr/
[Sat Nov 22 05:09:53.380753 2025] [:error] [pid 53479:tid 53557] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.fr/
[Sat Nov 22 05:09:55.332981 2025] [:error] [pid 53479:tid 53557] [client 52.177.168.134:4801] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php, referer: https://www.google.de/
[Sat Nov 22 06:56:50.549475 2025] [:error] [pid 25856:tid 25875] [client 212.116.231.26:46176] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sat Nov 22 06:56:50.960366 2025] [:error] [pid 25856:tid 25874] [client 212.116.231.26:46176] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Nov 22 06:56:51.372256 2025] [:error] [pid 25856:tid 25881] [client 212.116.231.26:46176] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sat Nov 22 06:56:51.779339 2025] [:error] [pid 25856:tid 25858] [client 212.116.231.26:46176] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "aSDuMxsTP0wy94zKUvHoCQAAAQA"]
[Sat Nov 22 06:56:52.612359 2025] [:error] [pid 9547:tid 9565] [client 212.116.231.26:47354] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "aSDuNNClOR5qk7DoMeGmGQAAAUw"]
[Sat Nov 22 06:56:53.422809 2025] [:error] [pid 25856:tid 25872] [client 212.116.231.26:47794] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "aSDuNRsTP0wy94zKUvHoFQAAAQ4"]
[Sat Nov 22 06:56:54.256687 2025] [:error] [pid 25856:tid 25866] [client 212.116.231.26:48198] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "aSDuNhsTP0wy94zKUvHoIgAAAQg"]
[Sat Nov 22 06:56:55.075421 2025] [:error] [pid 9547:tid 9561] [client 212.116.231.26:48552] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "aSDuN9ClOR5qk7DoMeGmSAAAAUg"]
[Sat Nov 22 06:56:55.909538 2025] [:error] [pid 25856:tid 25882] [client 212.116.231.26:48872] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuNxsTP0wy94zKUvHoKwAAARg"]
[Sat Nov 22 06:56:56.742348 2025] [:error] [pid 25856:tid 25859] [client 212.116.231.26:49092] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuOBsTP0wy94zKUvHoPAAAAQE"]
[Sat Nov 22 06:56:57.578750 2025] [:error] [pid 53566:tid 53572] [client 212.116.231.26:49282] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuOcbSHDBkRbwMbd5oKwAAAMQ"]
[Sat Nov 22 06:56:58.390257 2025] [:error] [pid 25856:tid 25866] [client 212.116.231.26:49420] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuOhsTP0wy94zKUvHoTQAAAQg"]
[Sat Nov 22 06:56:59.222208 2025] [:error] [pid 25856:tid 25873] [client 212.116.231.26:49570] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuOxsTP0wy94zKUvHoVAAAAQ8"]
[Sat Nov 22 20:12:45.192641 2025] [:error] [pid 44259:tid 44279] [client 31.171.130.57:26855] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Nov 22 20:12:46.109944 2025] [:error] [pid 44259:tid 44285] [client 31.171.130.57:26855] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Nov 22 20:12:46.527380 2025] [:error] [pid 44259:tid 44286] [client 31.171.130.57:26855] [client 31.171.130.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSGovnXe1xL-_YOdRmSgYwAAAZg"]
[Sat Nov 22 20:12:47.464753 2025] [:error] [pid 53566:tid 53578] [client 31.171.130.66:39975] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sat Nov 22 20:12:48.671804 2025] [:error] [pid 53566:tid 53581] [client 31.171.130.66:39975] [client 31.171.130.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSGowMbSHDBkRbwMbd5G_QAAAM0"]
[Sat Nov 22 20:12:50.338833 2025] [:error] [pid 53478:tid 53523] [client 31.171.130.63:33157] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sat Nov 22 20:12:51.208029 2025] [:error] [pid 53478:tid 53510] [client 31.171.130.63:33157] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Nov 22 20:12:51.657077 2025] [:error] [pid 53478:tid 53525] [client 31.171.130.63:33157] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Nov 22 20:12:52.837677 2025] [:error] [pid 53478:tid 53530] [client 31.171.130.63:33157] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sat Nov 22 20:12:53.847392 2025] [:error] [pid 53478:tid 53533] [client 31.171.130.63:33157] [client 31.171.130.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSGoxQhUYdXBbQswAdQR_QAAAFg"]
[Sat Nov 22 20:12:54.741516 2025] [:error] [pid 53566:tid 53589] [client 31.171.130.84:33409] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sat Nov 22 20:12:55.211650 2025] [:error] [pid 53566:tid 53587] [client 31.171.130.84:33409] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sat Nov 22 20:12:55.726364 2025] [:error] [pid 53566:tid 53579] [client 31.171.130.84:33409] [client 31.171.130.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSGox8bSHDBkRbwMbd5HCAAAAMs"]
[Sat Nov 22 20:12:57.262908 2025] [:error] [pid 53566:tid 53570] [client 31.171.130.67:37673] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aSGoycbSHDBkRbwMbd5HCwAAAMI"]
[Sat Nov 22 20:13:00.253267 2025] [:error] [pid 53479:tid 53542] [client 31.171.130.56:56335] [client 31.171.130.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSGozG6cicFF3Aas-oSv-gAAAIY"]
[Sat Nov 22 20:13:01.759624 2025] [:error] [pid 44259:tid 44278] [client 31.171.130.100:44475] [client 31.171.130.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSGozXXe1xL-_YOdRmSgjAAAAZA"]
[Sat Nov 22 20:13:03.149195 2025] [:error] [pid 53478:tid 53528] [client 31.171.130.105:33571] [client 31.171.130.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSGozwhUYdXBbQswAdQSCAAAAFM"]
[Sat Nov 22 20:13:05.022362 2025] [:error] [pid 53566:tid 53577] [client 31.171.130.100:22539] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Sat Nov 22 20:13:07.275682 2025] [:error] [pid 53566:tid 53573] [client 31.171.130.100:22539] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sat Nov 22 20:13:07.730215 2025] [:error] [pid 53566:tid 53568] [client 31.171.130.100:22539] [client 31.171.130.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSGo08bSHDBkRbwMbd5HHwAAAMA"]
[Sat Nov 22 20:13:09.665767 2025] [:error] [pid 25856:tid 25866] [client 31.171.130.79:24361] [client 31.171.130.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSGo1RsTP0wy94zKUvHX-wAAAQg"]
[Sat Nov 22 20:13:10.549513 2025] [:error] [pid 53566:tid 53587] [client 172.192.40.201:20447] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Nov 22 20:13:10.666865 2025] [:error] [pid 53566:tid 53579] [client 172.192.40.201:20447] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-729.php
[Sat Nov 22 20:13:10.785066 2025] [:error] [pid 53566:tid 53576] [client 172.192.40.201:20447] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Sat Nov 22 20:13:10.902752 2025] [:error] [pid 53566:tid 53589] [client 172.192.40.201:20447] File does not exist: /usr/local/apache/htdocs/suspended-page/2co_ipn_sub.php
[Sat Nov 22 20:13:11.029156 2025] [:error] [pid 53478:tid 53512] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Sat Nov 22 20:13:11.092983 2025] [:error] [pid 53566:tid 53575] [client 172.192.40.201:20447] File does not exist: /usr/local/apache/htdocs/suspended-page/muscovadite.php
[Sat Nov 22 20:13:11.210120 2025] [:error] [pid 53566:tid 53578] [client 172.192.40.201:20447] File does not exist: /usr/local/apache/htdocs/suspended-page/nonesoterically.php
[Sat Nov 22 20:13:11.328078 2025] [:error] [pid 53566:tid 53581] [client 172.192.40.201:20447] File does not exist: /usr/local/apache/htdocs/suspended-page/yuk.php
[Sat Nov 22 20:13:11.447635 2025] [:error] [pid 53566:tid 53570] [client 172.192.40.201:20447] File does not exist: /usr/local/apache/htdocs/suspended-page/Contrller.php
[Sat Nov 22 20:13:11.496322 2025] [:error] [pid 53478:tid 53524] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Sat Nov 22 20:13:11.573129 2025] [:error] [pid 53566:tid 53572] [client 172.192.40.201:20447] File does not exist: /usr/local/apache/htdocs/suspended-page/starry.php
[Sat Nov 22 20:13:11.690893 2025] [:error] [pid 53566:tid 53577] [client 172.192.40.201:20447] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Sat Nov 22 20:13:11.811720 2025] [:error] [pid 53566:tid 53590] [client 172.192.40.201:20447] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byp7.php"] [unique_id "aSGo18bSHDBkRbwMbd5HKwAAANY"]
[Sat Nov 22 20:13:12.445454 2025] [:error] [pid 53478:tid 53526] [client 172.192.40.201:20473] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byp7.php"] [unique_id "aSGo2AhUYdXBbQswAdQSEwAAAFE"]
[Sat Nov 22 20:13:12.631322 2025] [:error] [pid 53478:tid 53521] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sat Nov 22 20:13:12.838448 2025] [:error] [pid 53478:tid 53509] [client 172.192.40.201:20421] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byp7.php"] [unique_id "aSGo2AhUYdXBbQswAdQSFgAAAEA"]
[Sat Nov 22 20:13:13.119055 2025] [:error] [pid 53478:tid 53520] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sat Nov 22 20:13:13.141454 2025] [:error] [pid 53566:tid 53582] [client 172.192.40.201:20471] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byp7.php"] [unique_id "aSGo2cbSHDBkRbwMbd5HLAAAAM4"]
[Sat Nov 22 20:13:13.588972 2025] [:error] [pid 53478:tid 53510] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Sat Nov 22 20:13:13.603810 2025] [:error] [pid 9547:tid 9565] [client 172.192.40.201:20454] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aSGo2dClOR5qk7DoMeHZMgAAAUw"]
[Sat Nov 22 20:13:14.014889 2025] [:error] [pid 53478:tid 53513] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Sat Nov 22 20:13:14.533638 2025] [:error] [pid 53478:tid 53530] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/lufix.php
[Sat Nov 22 20:13:14.894873 2025] [:error] [pid 25856:tid 25877] [client 172.192.40.201:20358] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aSGo2hsTP0wy94zKUvHYCwAAARM"]
[Sat Nov 22 20:13:14.977710 2025] [:error] [pid 53478:tid 53519] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sat Nov 22 20:13:15.421314 2025] [:error] [pid 53478:tid 53522] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php
[Sat Nov 22 20:13:15.486962 2025] [:error] [pid 25856:tid 25878] [client 172.192.40.201:20367] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aSGo2xsTP0wy94zKUvHYDwAAARQ"]
[Sat Nov 22 20:13:15.891988 2025] [:error] [pid 53478:tid 53511] [client 172.192.40.201:20428] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aSGo2whUYdXBbQswAdQSJAAAAEI"]
[Sat Nov 22 20:13:15.911176 2025] [:error] [pid 53478:tid 53524] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sat Nov 22 20:13:16.324738 2025] [:error] [pid 53478:tid 53514] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/upfile.php
[Sat Nov 22 20:13:16.379858 2025] [:error] [pid 53566:tid 53571] [client 172.192.40.201:20366] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aSGo3MbSHDBkRbwMbd5HLwAAAMM"]
[Sat Nov 22 20:13:16.729878 2025] [:error] [pid 53478:tid 53520] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sat Nov 22 20:13:16.775974 2025] [:error] [pid 53566:tid 53588] [client 172.192.40.201:20368] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aSGo3MbSHDBkRbwMbd5HMAAAANQ"]
[Sat Nov 22 20:13:17.170217 2025] [:error] [pid 53478:tid 53530] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sat Nov 22 20:13:17.564584 2025] [:error] [pid 9547:tid 9564] [client 172.192.40.201:20456] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aSGo3dClOR5qk7DoMeHZQwAAAUs"]
[Sat Nov 22 20:13:17.607449 2025] [:error] [pid 53478:tid 53522] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php
[Sat Nov 22 20:13:17.987362 2025] [:error] [pid 53477:tid 53493] [client 172.192.40.201:20455] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aSGo3X7Lu30Ku9O40aLWVQAAAAw"]
[Sat Nov 22 20:13:18.034390 2025] [:error] [pid 53478:tid 53529] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php
[Sat Nov 22 20:13:18.346264 2025] [:error] [pid 9547:tid 9553] [client 172.192.40.201:20445] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/unwattled.php"] [unique_id "aSGo3tClOR5qk7DoMeHZRgAAAUA"]
[Sat Nov 22 20:13:18.433634 2025] [:error] [pid 53478:tid 53515] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sat Nov 22 20:13:18.892181 2025] [:error] [pid 53478:tid 53533] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Sat Nov 22 20:13:18.933330 2025] [:error] [pid 25856:tid 25879] [client 172.192.40.201:20360] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/unwattled.php"] [unique_id "aSGo3hsTP0wy94zKUvHYIwAAARU"]
[Sat Nov 22 20:13:19.329674 2025] [:error] [pid 53478:tid 53511] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Sat Nov 22 20:13:19.456464 2025] [:error] [pid 44259:tid 44285] [client 172.192.40.201:20353] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/unwattled.php"] [unique_id "aSGo33Xe1xL-_YOdRmSgsgAAAZc"]
[Sat Nov 22 20:13:19.763977 2025] [:error] [pid 53478:tid 53524] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/ae.php
[Sat Nov 22 20:13:19.788113 2025] [:error] [pid 44259:tid 44275] [client 172.192.40.201:20460] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/unwattled.php"] [unique_id "aSGo33Xe1xL-_YOdRmSgswAAAY0"]
[Sat Nov 22 20:13:20.226009 2025] [:error] [pid 53478:tid 53532] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sat Nov 22 20:13:20.228967 2025] [:error] [pid 25856:tid 25862] [client 172.192.40.201:20425] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ww1.php"] [unique_id "aSGo4BsTP0wy94zKUvHYJgAAAQQ"]
[Sat Nov 22 20:13:20.694373 2025] [:error] [pid 53478:tid 53521] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Sat Nov 22 20:13:21.106475 2025] [:error] [pid 53478:tid 53520] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Nov 22 20:13:21.597104 2025] [:error] [pid 53478:tid 53510] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sat Nov 22 20:13:21.701422 2025] [:error] [pid 44259:tid 44279] [client 172.192.40.201:20427] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ww1.php"] [unique_id "aSGo4XXe1xL-_YOdRmSgvAAAAZE"]
[Sat Nov 22 20:13:22.030480 2025] [:error] [pid 53478:tid 53525] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sat Nov 22 20:13:22.410180 2025] [:error] [pid 25856:tid 25865] [client 172.192.40.201:20387] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ww1.php"] [unique_id "aSGo4hsTP0wy94zKUvHYJwAAAQc"]
[Sat Nov 22 20:13:22.502664 2025] [:error] [pid 53478:tid 53529] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sat Nov 22 20:13:22.999441 2025] [:error] [pid 53478:tid 53533] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sat Nov 22 20:13:23.103013 2025] [:error] [pid 9547:tid 9568] [client 172.192.40.201:20429] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ww1.php"] [unique_id "aSGo49ClOR5qk7DoMeHZSwAAAU8"]
[Sat Nov 22 20:13:23.416090 2025] [:error] [pid 53478:tid 53518] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sat Nov 22 20:13:23.737033 2025] [:error] [pid 25856:tid 25872] [client 172.192.40.201:20404] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSGo4xsTP0wy94zKUvHYKQAAAQ4"]
[Sat Nov 22 20:13:24.327102 2025] [:error] [pid 53478:tid 53526] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sigunq.php
[Sat Nov 22 20:13:24.807084 2025] [:error] [pid 53478:tid 53532] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/wso112233.php
[Sat Nov 22 20:13:25.244092 2025] [:error] [pid 53478:tid 53512] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Sat Nov 22 20:13:25.722564 2025] [:error] [pid 53478:tid 53521] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php
[Sat Nov 22 20:13:25.895840 2025] [:error] [pid 53566:tid 53590] [client 172.192.40.201:20417] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSGo5cbSHDBkRbwMbd5HOwAAANY"]
[Sat Nov 22 20:13:26.187828 2025] [:error] [pid 53478:tid 53514] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php
[Sat Nov 22 20:13:26.616042 2025] [:error] [pid 53478:tid 53509] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sat Nov 22 20:13:27.093903 2025] [:error] [pid 53478:tid 53531] [client 31.171.130.89:64347] [client 31.171.130.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.89, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSGo5whUYdXBbQswAdQSTAAAAFY"]
[Sat Nov 22 20:13:27.097512 2025] [:error] [pid 53478:tid 53531] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 20:13:27.996792 2025] [:error] [pid 53478:tid 53530] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Sat Nov 22 20:13:28.225662 2025] [:error] [pid 53566:tid 53574] [client 172.192.40.201:20474] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSGo6MbSHDBkRbwMbd5HPQAAAMY"]
[Sat Nov 22 20:13:28.462351 2025] [:error] [pid 53478:tid 53525] [client 31.171.130.89:64347] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sat Nov 22 20:13:28.897998 2025] [:error] [pid 53478:tid 53519] [client 31.171.130.89:64347] [client 31.171.130.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aSGo6AhUYdXBbQswAdQSUwAAAEo"]
[Sat Nov 22 20:13:28.992720 2025] [:error] [pid 44259:tid 44284] [client 172.192.40.201:20352] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSGo6HXe1xL-_YOdRmSgzQAAAZY"]
[Sat Nov 22 20:13:30.381107 2025] [:error] [pid 9547:tid 9577] [client 172.192.40.201:20432] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xtt.php"] [unique_id "aSGo6tClOR5qk7DoMeHZUgAAAVg"]
[Sat Nov 22 20:13:30.653213 2025] [:error] [pid 53479:tid 53558] [client 31.171.130.87:20945] File does not exist: /usr/local/apache/htdocs/suspended-page/olux.php
[Sat Nov 22 20:13:31.189597 2025] [:error] [pid 53479:tid 53550] [client 31.171.130.87:20945] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Sat Nov 22 20:13:31.613381 2025] [:error] [pid 53479:tid 53540] [client 172.192.40.201:20439] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xtt.php"] [unique_id "aSGo626cicFF3Aas-oSwJQAAAIQ"]
[Sat Nov 22 20:13:33.425019 2025] [:error] [pid 53479:tid 53541] [client 31.171.130.87:20945] File does not exist: /usr/local/apache/htdocs/suspended-page/uploader.php
[Sat Nov 22 20:13:33.452975 2025] [:error] [pid 53477:tid 53487] [client 172.192.40.201:20422] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xtt.php"] [unique_id "aSGo7X7Lu30Ku9O40aLWagAAAAY"]
[Sat Nov 22 20:13:33.860117 2025] [:error] [pid 53479:tid 53536] [client 31.171.130.87:20945] File does not exist: /usr/local/apache/htdocs/suspended-page/1337.php
[Sat Nov 22 20:13:34.323280 2025] [:error] [pid 53479:tid 53539] [client 31.171.130.87:20945] File does not exist: /usr/local/apache/htdocs/suspended-page/user.php
[Sat Nov 22 20:13:34.625106 2025] [:error] [pid 9547:tid 9575] [client 172.192.40.201:20458] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xtt.php"] [unique_id "aSGo7tClOR5qk7DoMeHZVgAAAVY"]
[Sat Nov 22 20:13:34.821509 2025] [:error] [pid 53479:tid 53546] [client 31.171.130.87:20945] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Sat Nov 22 20:13:35.289077 2025] [:error] [pid 53479:tid 53557] [client 31.171.130.87:20945] File does not exist: /usr/local/apache/htdocs/suspended-page/wxo.php
[Sat Nov 22 20:13:35.365318 2025] [:error] [pid 44259:tid 44265] [client 172.192.40.201:20376] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "aSGo73Xe1xL-_YOdRmSg2wAAAYM"]
[Sat Nov 22 20:13:36.229783 2025] [:error] [pid 53479:tid 53553] [client 31.171.130.87:20945] File does not exist: /usr/local/apache/htdocs/suspended-page/amigo.php
[Sat Nov 22 20:13:36.662993 2025] [:error] [pid 53479:tid 53555] [client 172.192.40.201:20416] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "aSGo8G6cicFF3Aas-oSwMQAAAJM"]
[Sat Nov 22 20:13:36.685808 2025] [:error] [pid 53479:tid 53550] [client 31.171.130.87:20945] File does not exist: /usr/local/apache/htdocs/suspended-page/yoi.php
[Sat Nov 22 20:13:37.515200 2025] [:error] [pid 53479:tid 53542] [client 31.171.130.87:20945] [client 31.171.130.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aSGo8W6cicFF3Aas-oSwOgAAAIY"]
[Sat Nov 22 20:13:37.809625 2025] [:error] [pid 44259:tid 44275] [client 172.192.40.201:20357] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "aSGo8XXe1xL-_YOdRmSg3wAAAY0"]
[Sat Nov 22 20:13:38.497038 2025] [:error] [pid 53479:tid 53557] [client 172.192.40.201:20434] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "aSGo8m6cicFF3Aas-oSwQAAAAJU"]
[Sat Nov 22 20:13:38.997852 2025] [:error] [pid 53478:tid 53510] [client 172.192.40.201:20371] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/raw.php"] [unique_id "aSGo8ghUYdXBbQswAdQSXgAAAEE"]
[Sat Nov 22 20:13:39.527680 2025] [:error] [pid 44259:tid 44279] [client 172.192.40.201:20468] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/raw.php"] [unique_id "aSGo83Xe1xL-_YOdRmSg5gAAAZE"]
[Sat Nov 22 20:13:39.936056 2025] [:error] [pid 44259:tid 44280] [client 31.171.130.62:22149] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-contentt.php
[Sat Nov 22 20:13:40.427687 2025] [:error] [pid 44259:tid 44268] [client 31.171.130.62:22149] File does not exist: /usr/local/apache/htdocs/suspended-page/we1y8.php
[Sat Nov 22 20:13:41.019542 2025] [:error] [pid 53566:tid 53580] [client 172.192.40.201:20396] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/raw.php"] [unique_id "aSGo9cbSHDBkRbwMbd5HQwAAAMw"]
[Sat Nov 22 20:13:41.677027 2025] [:error] [pid 53566:tid 53587] [client 172.192.40.201:20409] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/raw.php"] [unique_id "aSGo9cbSHDBkRbwMbd5HRAAAANM"]
[Sat Nov 22 20:13:42.818602 2025] [:error] [pid 44259:tid 44266] [client 172.192.40.201:20462] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/diesinker.php"] [unique_id "aSGo9nXe1xL-_YOdRmSg9AAAAYQ"]
[Sat Nov 22 20:13:43.661059 2025] [:error] [pid 25856:tid 25876] [client 172.192.40.201:20394] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/diesinker.php"] [unique_id "aSGo9xsTP0wy94zKUvHYSQAAARI"]
[Sat Nov 22 20:13:43.709416 2025] [:error] [pid 44259:tid 44276] [client 31.171.130.62:22149] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sat Nov 22 20:13:44.181932 2025] [:error] [pid 44259:tid 44283] [client 31.171.130.62:22149] File does not exist: /usr/local/apache/htdocs/suspended-page/post-data.php
[Sat Nov 22 20:13:44.449981 2025] [:error] [pid 53478:tid 53524] [client 172.192.40.201:20477] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/diesinker.php"] [unique_id "aSGo-AhUYdXBbQswAdQSZgAAAE8"]
[Sat Nov 22 20:13:44.634333 2025] [:error] [pid 44259:tid 44265] [client 31.171.130.62:22149] File does not exist: /usr/local/apache/htdocs/suspended-page/w0.php
[Sat Nov 22 20:13:44.971777 2025] [:error] [pid 53478:tid 53516] [client 172.192.40.201:20369] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/diesinker.php"] [unique_id "aSGo-AhUYdXBbQswAdQSZwAAAEc"]
[Sat Nov 22 20:13:45.453842 2025] [:error] [pid 44259:tid 44273] [client 172.192.40.201:20452] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dinah.php"] [unique_id "aSGo-XXe1xL-_YOdRmShAgAAAYs"]
[Sat Nov 22 20:13:45.600042 2025] [:error] [pid 44259:tid 44268] [client 31.171.130.62:22149] File does not exist: /usr/local/apache/htdocs/suspended-page/old-index.php
[Sat Nov 22 20:13:45.783135 2025] [:error] [pid 53566:tid 53570] [client 172.192.40.201:20437] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dinah.php"] [unique_id "aSGo-cbSHDBkRbwMbd5HSAAAAMI"]
[Sat Nov 22 20:13:46.429495 2025] [:error] [pid 25856:tid 25866] [client 172.192.40.201:20453] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dinah.php"] [unique_id "aSGo-hsTP0wy94zKUvHYUAAAAQg"]
[Sat Nov 22 20:13:46.536600 2025] [:error] [pid 44259:tid 44266] [client 31.171.130.62:22149] File does not exist: /usr/local/apache/htdocs/suspended-page/wsanon.php
[Sat Nov 22 20:13:46.708954 2025] [:error] [pid 25856:tid 25873] [client 172.192.40.201:20463] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dinah.php"] [unique_id "aSGo-hsTP0wy94zKUvHYUQAAAQ8"]
[Sat Nov 22 20:13:47.145785 2025] [:error] [pid 25856:tid 25880] [client 172.192.40.201:20355] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/washland.php"] [unique_id "aSGo-xsTP0wy94zKUvHYUgAAARY"]
[Sat Nov 22 20:13:47.802487 2025] [:error] [pid 25856:tid 25870] [client 172.192.40.201:20321] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/washland.php"] [unique_id "aSGo-xsTP0wy94zKUvHYUwAAAQw"]
[Sat Nov 22 20:13:48.014656 2025] [:error] [pid 44259:tid 44282] [client 31.171.130.62:22149] File does not exist: /usr/local/apache/htdocs/suspended-page/indo.php
[Sat Nov 22 20:13:48.432337 2025] [:error] [pid 53477:tid 53497] [client 172.192.40.201:20403] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/washland.php"] [unique_id "aSGo_H7Lu30Ku9O40aLWfQAAABA"]
[Sat Nov 22 20:13:48.487767 2025] [:error] [pid 44259:tid 44267] [client 31.171.130.62:22149] File does not exist: /usr/local/apache/htdocs/suspended-page/beence.php
[Sat Nov 22 20:13:48.916906 2025] [:error] [pid 9547:tid 9574] [client 172.192.40.201:20465] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/washland.php"] [unique_id "aSGo_NClOR5qk7DoMeHZbwAAAVU"]
[Sat Nov 22 20:13:48.947870 2025] [:error] [pid 44259:tid 44268] [client 31.171.130.62:22149] File does not exist: /usr/local/apache/htdocs/suspended-page/indosec.php
[Sat Nov 22 20:13:49.357801 2025] [:error] [pid 44259:tid 44279] [client 31.171.130.62:22149] File does not exist: /usr/local/apache/htdocs/suspended-page/archives.php
[Sat Nov 22 20:13:49.568396 2025] [:error] [pid 53566:tid 53574] [client 172.192.40.201:20424] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/prototheria.php"] [unique_id "aSGo_cbSHDBkRbwMbd5HTgAAAMY"]
[Sat Nov 22 20:13:49.819438 2025] [:error] [pid 44259:tid 44284] [client 31.171.130.62:22149] File does not exist: /usr/local/apache/htdocs/suspended-page/po8sa.php
[Sat Nov 22 20:13:50.413698 2025] [:error] [pid 44259:tid 44284] [client 31.171.130.62:22149] File does not exist: /usr/local/apache/htdocs/suspended-page/thesmartestx.php
[Sat Nov 22 20:13:50.507479 2025] [:error] [pid 53566:tid 53592] [client 172.192.40.201:20443] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/prototheria.php"] [unique_id "aSGo_sbSHDBkRbwMbd5HTwAAANg"]
[Sat Nov 22 20:13:50.885805 2025] [:error] [pid 44259:tid 44274] [client 31.171.130.62:22149] File does not exist: /usr/local/apache/htdocs/suspended-page/zcanp.php
[Sat Nov 22 20:13:51.080672 2025] [:error] [pid 9547:tid 9564] [client 172.192.40.201:20399] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/prototheria.php"] [unique_id "aSGo_9ClOR5qk7DoMeHZdwAAAUs"]
[Sat Nov 22 20:13:51.873462 2025] [:error] [pid 53479:tid 53536] [client 172.192.40.201:20389] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/prototheria.php"] [unique_id "aSGo_26cicFF3Aas-oSwTQAAAIA"]
[Sat Nov 22 20:13:52.297618 2025] [:error] [pid 44259:tid 44262] [client 31.171.130.62:22149] File does not exist: /usr/local/apache/htdocs/suspended-page/pvt.php
[Sat Nov 22 20:13:52.756828 2025] [:error] [pid 44259:tid 44272] [client 31.171.130.62:22149] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Sat Nov 22 20:13:53.215182 2025] [:error] [pid 25856:tid 25858] [client 172.192.40.201:20466] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/microspore.php"] [unique_id "aSGpARsTP0wy94zKUvHYWwAAAQA"]
[Sat Nov 22 20:13:53.630559 2025] [:error] [pid 44259:tid 44283] [client 31.171.130.62:22149] File does not exist: /usr/local/apache/htdocs/suspended-page/crypted.php
[Sat Nov 22 20:13:53.838994 2025] [:error] [pid 53479:tid 53554] [client 172.192.40.201:20301] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/microspore.php"] [unique_id "aSGpAW6cicFF3Aas-oSwUwAAAJI"]
[Sat Nov 22 20:13:54.123788 2025] [:error] [pid 44259:tid 44281] [client 31.171.130.62:22149] File does not exist: /usr/local/apache/htdocs/suspended-page/h0110w4y.php
[Sat Nov 22 20:13:54.600872 2025] [:error] [pid 53477:tid 53496] [client 172.192.40.201:20431] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/microspore.php"] [unique_id "aSGpAn7Lu30Ku9O40aLWfwAAAA8"]
[Sat Nov 22 20:13:54.638292 2025] [:error] [pid 44259:tid 44273] [client 31.171.130.62:22149] File does not exist: /usr/local/apache/htdocs/suspended-page/vesiw.php
[Sat Nov 22 20:13:55.085839 2025] [:error] [pid 44259:tid 44284] [client 31.171.130.62:22149] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Sat Nov 22 20:13:55.336277 2025] [:error] [pid 53479:tid 53555] [client 172.192.40.201:20296] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/microspore.php"] [unique_id "aSGpA26cicFF3Aas-oSwVgAAAJM"]
[Sat Nov 22 20:13:55.514262 2025] [:error] [pid 44259:tid 44286] [client 31.171.130.62:22149] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-db.php
[Sat Nov 22 20:13:55.943087 2025] [:error] [pid 44259:tid 44270] [client 31.171.130.62:22149] [client 31.171.130.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aSGpA3Xe1xL-_YOdRmShLwAAAYg"]
[Sat Nov 22 20:13:56.055702 2025] [:error] [pid 53478:tid 53511] [client 172.192.40.201:20479] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sx.php"] [unique_id "aSGpBAhUYdXBbQswAdQSdAAAAEI"]
[Sat Nov 22 20:13:56.751865 2025] [:error] [pid 53566:tid 53580] [client 172.192.40.201:20316] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sx.php"] [unique_id "aSGpBMbSHDBkRbwMbd5HVQAAAMw"]
[Sat Nov 22 20:13:57.678811 2025] [:error] [pid 53477:tid 53505] [client 172.192.40.201:20373] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sx.php"] [unique_id "aSGpBX7Lu30Ku9O40aLWhAAAABg"]
[Sat Nov 22 20:13:58.601894 2025] [:error] [pid 53477:tid 53500] [client 172.192.40.201:20449] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sx.php"] [unique_id "aSGpBn7Lu30Ku9O40aLWhgAAABM"]
[Sat Nov 22 20:13:59.277258 2025] [:error] [pid 44259:tid 44268] [client 172.192.40.201:20420] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpc2.php"] [unique_id "aSGpB3Xe1xL-_YOdRmShOAAAAYY"]
[Sat Nov 22 20:14:00.099681 2025] [:error] [pid 25856:tid 25868] [client 172.192.40.201:20382] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpc2.php"] [unique_id "aSGpCBsTP0wy94zKUvHYYQAAAQo"]
[Sat Nov 22 20:14:00.144207 2025] [:error] [pid 44259:tid 44271] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/lx.php
[Sat Nov 22 20:14:00.582985 2025] [:error] [pid 53477:tid 53482] [client 172.192.40.201:20475] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpc2.php"] [unique_id "aSGpCH7Lu30Ku9O40aLWjQAAAAE"]
[Sat Nov 22 20:14:00.714753 2025] [:error] [pid 44259:tid 44274] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/tonant.php
[Sat Nov 22 20:14:01.298594 2025] [:error] [pid 44259:tid 44269] [client 172.192.40.201:20375] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpc2.php"] [unique_id "aSGpCXXe1xL-_YOdRmShPgAAAYc"]
[Sat Nov 22 20:14:01.774250 2025] [:error] [pid 53478:tid 53519] [client 172.192.40.201:20455] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2co_ipn.php"] [unique_id "aSGpCQhUYdXBbQswAdQSfAAAAEo"]
[Sat Nov 22 20:14:02.871422 2025] [:error] [pid 53478:tid 53525] [client 172.192.40.201:20378] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2co_ipn.php"] [unique_id "aSGpCghUYdXBbQswAdQSfQAAAFA"]
[Sat Nov 22 20:14:03.221945 2025] [:error] [pid 44259:tid 44264] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/f0x.php
[Sat Nov 22 20:14:03.308354 2025] [:error] [pid 53477:tid 53495] [client 172.192.40.201:20412] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2co_ipn.php"] [unique_id "aSGpC37Lu30Ku9O40aLWkwAAAA4"]
[Sat Nov 22 20:14:03.647618 2025] [:error] [pid 44259:tid 44272] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/config.bak.php
[Sat Nov 22 20:14:03.867357 2025] [:error] [pid 53478:tid 53529] [client 172.192.40.201:20324] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2co_ipn.php"] [unique_id "aSGpCwhUYdXBbQswAdQSfwAAAFQ"]
[Sat Nov 22 20:14:04.118968 2025] [:error] [pid 44259:tid 44281] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass403.php
[Sat Nov 22 20:14:04.552301 2025] [:error] [pid 44259:tid 44282] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Sat Nov 22 20:14:04.665113 2025] [:error] [pid 25856:tid 25864] [client 172.192.40.201:20414] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/speculative.php"] [unique_id "aSGpDBsTP0wy94zKUvHYZQAAAQY"]
[Sat Nov 22 20:14:05.003020 2025] [:error] [pid 44259:tid 44267] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/allahnaber.php
[Sat Nov 22 20:14:05.405727 2025] [:error] [pid 44259:tid 44268] [client 172.192.40.201:20442] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/speculative.php"] [unique_id "aSGpDXXe1xL-_YOdRmShSAAAAYY"]
[Sat Nov 22 20:14:05.431699 2025] [:error] [pid 44259:tid 44279] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/AK-74.php
[Sat Nov 22 20:14:05.887080 2025] [:error] [pid 44259:tid 44263] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa3.php
[Sat Nov 22 20:14:07.140620 2025] [:error] [pid 44259:tid 44262] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/alfaindex.php
[Sat Nov 22 20:14:07.185640 2025] [:error] [pid 53477:tid 53488] [client 172.192.40.201:20444] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/speculative.php"] [unique_id "aSGpD37Lu30Ku9O40aLWmgAAAAc"]
[Sat Nov 22 20:14:07.606174 2025] [:error] [pid 44259:tid 44272] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sat Nov 22 20:14:08.108203 2025] [:error] [pid 44259:tid 44277] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/c99.php
[Sat Nov 22 20:14:08.360187 2025] [:error] [pid 9547:tid 9558] [client 172.192.40.201:20292] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/speculative.php"] [unique_id "aSGpENClOR5qk7DoMeHZlQAAAUU"]
[Sat Nov 22 20:14:09.364853 2025] [:error] [pid 44259:tid 44280] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/cmd.php
[Sat Nov 22 20:14:09.375026 2025] [:error] [pid 25856:tid 25865] [client 172.192.40.201:20288] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hans.php"] [unique_id "aSGpERsTP0wy94zKUvHYagAAAQc"]
[Sat Nov 22 20:14:09.915656 2025] [:error] [pid 44259:tid 44276] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/cw.php
[Sat Nov 22 20:14:10.372723 2025] [:error] [pid 44259:tid 44275] [client 172.192.40.201:20418] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hans.php"] [unique_id "aSGpEnXe1xL-_YOdRmShXgAAAY0"]
[Sat Nov 22 20:14:11.438009 2025] [:error] [pid 44259:tid 44276] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/date.php
[Sat Nov 22 20:14:11.855094 2025] [:error] [pid 44259:tid 44278] [client 172.192.40.201:20467] File does not exist: /usr/local/apache/htdocs/suspended-page/hans.php
[Sat Nov 22 20:14:11.916564 2025] [:error] [pid 44259:tid 44277] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/haxor.php
[Sat Nov 22 20:14:11.972593 2025] [:error] [pid 44259:tid 44280] [client 172.192.40.201:20467] File does not exist: /usr/local/apache/htdocs/suspended-page/krypton.php
[Sat Nov 22 20:14:12.091607 2025] [:error] [pid 44259:tid 44282] [client 172.192.40.201:20467] File does not exist: /usr/local/apache/htdocs/suspended-page/acholuria.php
[Sat Nov 22 20:14:12.213663 2025] [:error] [pid 44259:tid 44285] [client 172.192.40.201:20467] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sat Nov 22 20:14:12.383477 2025] [:error] [pid 44259:tid 44279] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/icomsium.php
[Sat Nov 22 20:14:12.717489 2025] [:error] [pid 44259:tid 44271] [client 172.192.40.201:20467] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sat Nov 22 20:14:12.835136 2025] [:error] [pid 44259:tid 44272] [client 172.192.40.201:20467] File does not exist: /usr/local/apache/htdocs/suspended-page/ghreshttryu.php
[Sat Nov 22 20:14:12.838203 2025] [:error] [pid 44259:tid 44278] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/ico.php
[Sat Nov 22 20:14:12.956855 2025] [:error] [pid 44259:tid 44282] [client 172.192.40.201:20467] File does not exist: /usr/local/apache/htdocs/suspended-page/aporrhiegma.php
[Sat Nov 22 20:14:13.073872 2025] [:error] [pid 44259:tid 44267] [client 172.192.40.201:20467] File does not exist: /usr/local/apache/htdocs/suspended-page/byp8.php
[Sat Nov 22 20:14:13.192675 2025] [:error] [pid 44259:tid 44285] [client 172.192.40.201:20467] File does not exist: /usr/local/apache/htdocs/suspended-page/clss.php
[Sat Nov 22 20:14:13.294290 2025] [:error] [pid 44259:tid 44279] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/leaf.php
[Sat Nov 22 20:14:13.448279 2025] [:error] [pid 44259:tid 44269] [client 172.192.40.201:20467] File does not exist: /usr/local/apache/htdocs/suspended-page/lanbai.php
[Sat Nov 22 20:14:13.567362 2025] [:error] [pid 44259:tid 44274] [client 172.192.40.201:20467] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cord.php"] [unique_id "aSGpFXXe1xL-_YOdRmShfwAAAYw"]
[Sat Nov 22 20:14:13.703344 2025] [:error] [pid 44259:tid 44276] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Sat Nov 22 20:14:14.152818 2025] [:error] [pid 44259:tid 44278] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/mass.php
[Sat Nov 22 20:14:14.452376 2025] [:error] [pid 53566:tid 53581] [client 172.192.40.201:20478] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cord.php"] [unique_id "aSGpFsbSHDBkRbwMbd5HawAAAM0"]
[Sat Nov 22 20:14:14.615194 2025] [:error] [pid 44259:tid 44282] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Nov 22 20:14:15.138216 2025] [:error] [pid 44259:tid 44279] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/priv8.php
[Sat Nov 22 20:14:15.649831 2025] [:error] [pid 44259:tid 44264] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/pws.php
[Sat Nov 22 20:14:16.187461 2025] [:error] [pid 44259:tid 44269] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/r57.php
[Sat Nov 22 20:14:16.432634 2025] [:error] [pid 25856:tid 25869] [client 172.192.40.201:20356] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cord.php"] [unique_id "aSGpGBsTP0wy94zKUvHYdgAAAQs"]
[Sat Nov 22 20:14:16.642776 2025] [:error] [pid 44259:tid 44270] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sat Nov 22 20:14:16.726374 2025] [:error] [pid 53479:tid 53557] [client 172.192.40.201:20291] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cord.php"] [unique_id "aSGpGG6cicFF3Aas-oSweAAAAJU"]
[Sat Nov 22 20:14:17.085740 2025] [:error] [pid 53566:tid 53574] [client 172.192.40.201:20372] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xl6.php"] [unique_id "aSGpGcbSHDBkRbwMbd5HbwAAAMY"]
[Sat Nov 22 20:14:17.117982 2025] [:error] [pid 44259:tid 44268] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/snd.php
[Sat Nov 22 20:14:17.606777 2025] [:error] [pid 44259:tid 44265] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sat Nov 22 20:14:17.734313 2025] [:error] [pid 9547:tid 9558] [client 172.192.40.201:20299] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xl6.php"] [unique_id "aSGpGdClOR5qk7DoMeHZogAAAUU"]
[Sat Nov 22 20:14:18.092332 2025] [:error] [pid 44259:tid 44281] [client 31.171.130.86:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/new-index.php
[Sat Nov 22 20:14:18.209166 2025] [:error] [pid 53477:tid 53492] [client 172.192.40.201:20379] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xl6.php"] [unique_id "aSGpGn7Lu30Ku9O40aLWpwAAAAs"]
[Sat Nov 22 20:14:18.554705 2025] [:error] [pid 44259:tid 44283] [client 172.192.40.201:20459] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xl6.php"] [unique_id "aSGpGnXe1xL-_YOdRmShlAAAAZU"]
[Sat Nov 22 20:14:18.909625 2025] [:error] [pid 53566:tid 53588] [client 172.192.40.201:20383] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aSGpGsbSHDBkRbwMbd5HcAAAANQ"]
[Sat Nov 22 20:14:20.364171 2025] [:error] [pid 53478:tid 53513] [client 172.192.40.201:20363] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aSGpHAhUYdXBbQswAdQSkwAAAEQ"]
[Sat Nov 22 20:14:21.124079 2025] [:error] [pid 9547:tid 9555] [client 172.192.40.201:20441] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aSGpHdClOR5qk7DoMeHZqgAAAUI"]
[Sat Nov 22 20:14:21.685616 2025] [:error] [pid 53479:tid 53547] [client 172.192.40.201:20374] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aSGpHW6cicFF3Aas-oSwhQAAAIs"]
[Sat Nov 22 20:14:23.478952 2025] [:error] [pid 53478:tid 53529] [client 172.192.40.201:20307] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "aSGpHwhUYdXBbQswAdQSlQAAAFQ"]
[Sat Nov 22 20:14:24.577809 2025] [:error] [pid 9547:tid 9568] [client 172.192.40.201:20310] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "aSGpINClOR5qk7DoMeHZuAAAAU8"]
[Sat Nov 22 20:14:25.010901 2025] [:error] [pid 25856:tid 25866] [client 172.192.40.201:20476] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "aSGpIRsTP0wy94zKUvHYfAAAAQg"]
[Sat Nov 22 20:14:25.515817 2025] [:error] [pid 53477:tid 53485] [client 172.192.40.201:20415] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "aSGpIX7Lu30Ku9O40aLWsAAAAAQ"]
[Sat Nov 22 20:14:26.319397 2025] [:error] [pid 53477:tid 53491] [client 172.192.40.201:20337] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "aSGpIn7Lu30Ku9O40aLWsQAAAAo"]
[Sat Nov 22 20:14:27.024304 2025] [:error] [pid 44259:tid 44272] [client 172.192.40.201:20451] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "aSGpI3Xe1xL-_YOdRmShtQAAAYo"]
[Sat Nov 22 20:14:27.834297 2025] [:error] [pid 44259:tid 44282] [client 172.192.40.201:20390] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "aSGpI3Xe1xL-_YOdRmShuAAAAZQ"]
[Sat Nov 22 20:14:28.426125 2025] [:error] [pid 44259:tid 44285] [client 31.171.130.86:52697] [client 31.171.130.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aSGpJHXe1xL-_YOdRmShuQAAAZc"]
[Sat Nov 22 20:14:28.627775 2025] [:error] [pid 44259:tid 44275] [client 172.192.40.201:20433] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "aSGpJHXe1xL-_YOdRmShugAAAY0"]
[Sat Nov 22 20:14:29.794128 2025] [:error] [pid 9547:tid 9560] [client 31.171.130.105:27541] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-widget-archives.php
[Sat Nov 22 20:14:29.858865 2025] [:error] [pid 53477:tid 53487] [client 172.192.40.201:20361] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "aSGpJX7Lu30Ku9O40aLWuAAAAAY"]
[Sat Nov 22 20:14:30.909373 2025] [:error] [pid 25856:tid 25875] [client 172.192.40.201:20331] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "aSGpJhsTP0wy94zKUvHYgQAAARE"]
[Sat Nov 22 20:14:31.341087 2025] [:error] [pid 53479:tid 53549] [client 172.192.40.201:20470] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "aSGpJ26cicFF3Aas-oSwkQAAAI0"]
[Sat Nov 22 20:14:32.023134 2025] [:error] [pid 44259:tid 44276] [client 172.192.40.201:20413] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "aSGpKHXe1xL-_YOdRmShxAAAAY4"]
[Sat Nov 22 20:14:32.509725 2025] [:error] [pid 44259:tid 44278] [client 172.192.40.201:20440] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/boyfile.php"] [unique_id "aSGpKHXe1xL-_YOdRmShyQAAAZA"]
[Sat Nov 22 20:14:33.898913 2025] [:error] [pid 44259:tid 44273] [client 172.192.40.201:20381] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/boyfile.php"] [unique_id "aSGpKXXe1xL-_YOdRmSh0wAAAYs"]
[Sat Nov 22 20:14:33.968633 2025] [:error] [pid 9547:tid 9573] [client 31.171.130.105:27541] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet-shell.php
[Sat Nov 22 20:14:34.425104 2025] [:error] [pid 9547:tid 9559] [client 31.171.130.105:27541] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php
[Sat Nov 22 20:14:34.832260 2025] [:error] [pid 9547:tid 9563] [client 31.171.130.105:27541] File does not exist: /usr/local/apache/htdocs/suspended-page/xleetshell.php
[Sat Nov 22 20:14:35.097614 2025] [:error] [pid 53477:tid 53503] [client 172.192.40.201:20317] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/boyfile.php"] [unique_id "aSGpK37Lu30Ku9O40aLWugAAABY"]
[Sat Nov 22 20:14:35.710841 2025] [:error] [pid 9547:tid 9556] [client 172.192.40.201:20384] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/boyfile.php"] [unique_id "aSGpK9ClOR5qk7DoMeHZzwAAAUM"]
[Sat Nov 22 20:14:36.267854 2025] [:error] [pid 9547:tid 9565] [client 31.171.130.105:27541] File does not exist: /usr/local/apache/htdocs/suspended-page/xlt.php
[Sat Nov 22 20:14:36.486993 2025] [:error] [pid 53478:tid 53512] [client 172.192.40.201:20328] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atex1.php"] [unique_id "aSGpLAhUYdXBbQswAdQSngAAAEM"]
[Sat Nov 22 20:14:37.868877 2025] [:error] [pid 44259:tid 44267] [client 172.192.40.201:20461] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atex1.php"] [unique_id "aSGpLXXe1xL-_YOdRmSh5wAAAYU"]
[Sat Nov 22 20:14:38.866038 2025] [:error] [pid 53477:tid 53483] [client 172.192.40.201:20411] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atex1.php"] [unique_id "aSGpLn7Lu30Ku9O40aLWvgAAAAI"]
[Sat Nov 22 20:14:39.134480 2025] [:error] [pid 9547:tid 9576] [client 31.171.130.105:27541] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-apxupx.php
[Sat Nov 22 20:14:39.191893 2025] [:error] [pid 53566:tid 53581] [client 172.192.40.201:20336] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atex1.php"] [unique_id "aSGpL8bSHDBkRbwMbd5HhwAAAM0"]
[Sat Nov 22 20:14:39.542950 2025] [:error] [pid 9547:tid 9567] [client 31.171.130.105:27541] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Sat Nov 22 20:14:39.853775 2025] [:error] [pid 44259:tid 44273] [client 172.192.40.201:20395] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/attaining.php"] [unique_id "aSGpL3Xe1xL-_YOdRmSh8AAAAYs"]
[Sat Nov 22 20:14:39.988116 2025] [:error] [pid 9547:tid 9561] [client 31.171.130.105:27541] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sat Nov 22 20:14:40.515708 2025] [:error] [pid 9547:tid 9555] [client 31.171.130.105:27541] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Sat Nov 22 20:14:41.004480 2025] [:error] [pid 9547:tid 9563] [client 31.171.130.105:27541] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Sat Nov 22 20:14:41.599538 2025] [:error] [pid 53479:tid 53536] [client 172.192.40.201:20364] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/attaining.php"] [unique_id "aSGpMW6cicFF3Aas-oSwnQAAAIA"]
[Sat Nov 22 20:14:41.943124 2025] [:error] [pid 9547:tid 9572] [client 31.171.130.105:27541] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-pano.php
[Sat Nov 22 20:14:42.624701 2025] [:error] [pid 9547:tid 9566] [client 172.192.40.201:20329] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/attaining.php"] [unique_id "aSGpMtClOR5qk7DoMeHZ4wAAAU0"]
[Sat Nov 22 20:14:42.811925 2025] [:error] [pid 9547:tid 9565] [client 31.171.130.105:27541] [client 31.171.130.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSGpMtClOR5qk7DoMeHZ5AAAAUw"]
[Sat Nov 22 20:14:43.764206 2025] [:error] [pid 53479:tid 53553] [client 31.171.130.105:32471] [client 31.171.130.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.171.130.105, incrementing ddos counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aSGpM26cicFF3Aas-oSwnwAAAJE"]
[Sat Nov 22 20:14:43.767431 2025] [:error] [pid 53479:tid 53553] [client 31.171.130.105:32471] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Nov 22 20:14:44.192841 2025] [:error] [pid 53479:tid 53549] [client 31.171.130.105:32471] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Sat Nov 22 20:14:44.761713 2025] [:error] [pid 53477:tid 53503] [client 172.192.40.201:20293] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/attaining.php"] [unique_id "aSGpNH7Lu30Ku9O40aLWxwAAABY"]
[Sat Nov 22 20:14:45.139864 2025] [:error] [pid 53479:tid 53544] [client 31.171.130.105:32471] [client 31.171.130.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSGpNW6cicFF3Aas-oSwowAAAIg"]
[Sat Nov 22 20:14:47.108874 2025] [:error] [pid 53477:tid 53495] [client 31.171.130.70:64361] File does not exist: /usr/local/apache/htdocs/suspended-page/WSOEnigma.php
[Sat Nov 22 20:14:47.553876 2025] [:error] [pid 44259:tid 44269] [client 172.192.40.201:20359] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bunnies.php"] [unique_id "aSGpN3Xe1xL-_YOdRmSh_gAAAYc"]
[Sat Nov 22 20:14:49.497342 2025] [:error] [pid 53477:tid 53500] [client 31.171.130.70:64361] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat Nov 22 20:14:50.168674 2025] [:error] [pid 25856:tid 25868] [client 172.192.40.201:20294] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bunnies.php"] [unique_id "aSGpOhsTP0wy94zKUvHYpQAAAQo"]
[Sat Nov 22 20:14:50.415027 2025] [:error] [pid 53477:tid 53489] [client 31.171.130.70:64361] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Sat Nov 22 20:14:50.845459 2025] [:error] [pid 53477:tid 53487] [client 31.171.130.70:64361] [client 31.171.130.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSGpOn7Lu30Ku9O40aLW1wAAAAY"]
[Sat Nov 22 20:14:51.299166 2025] [:error] [pid 44259:tid 44271] [client 172.192.40.201:20303] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bunnies.php"] [unique_id "aSGpO3Xe1xL-_YOdRmSiDAAAAYk"]
[Sat Nov 22 20:14:52.755228 2025] [:error] [pid 44259:tid 44263] [client 31.171.130.90:45779] File does not exist: /usr/local/apache/htdocs/suspended-page/gebase.php
[Sat Nov 22 20:14:53.203448 2025] [:error] [pid 44259:tid 44273] [client 31.171.130.90:45779] File does not exist: /usr/local/apache/htdocs/suspended-page/defaults.php
[Sat Nov 22 20:14:53.648370 2025] [:error] [pid 53477:tid 53504] [client 172.192.40.201:20302] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bunnies.php"] [unique_id "aSGpPX7Lu30Ku9O40aLW2QAAABc"]
[Sat Nov 22 20:14:53.671336 2025] [:error] [pid 44259:tid 44264] [client 31.171.130.90:45779] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Sat Nov 22 20:14:55.086533 2025] [:error] [pid 53478:tid 53524] [client 172.192.40.201:20309] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/frenchwomen.php"] [unique_id "aSGpPwhUYdXBbQswAdQStgAAAE8"]
[Sat Nov 22 20:14:55.645714 2025] [:error] [pid 53478:tid 53520] [client 172.192.40.201:20446] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/frenchwomen.php"] [unique_id "aSGpPwhUYdXBbQswAdQSuAAAAEs"]
[Sat Nov 22 20:14:56.009533 2025] [:error] [pid 53477:tid 53486] [client 172.192.40.201:20323] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/frenchwomen.php"] [unique_id "aSGpQH7Lu30Ku9O40aLW3AAAAAU"]
[Sat Nov 22 20:14:56.258594 2025] [:error] [pid 44259:tid 44283] [client 31.171.130.90:45779] File does not exist: /usr/local/apache/htdocs/suspended-page/contact.php
[Sat Nov 22 20:14:56.422648 2025] [:error] [pid 9547:tid 9556] [client 172.192.40.201:20290] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/frenchwomen.php"] [unique_id "aSGpQNClOR5qk7DoMeHZ_QAAAUM"]
[Sat Nov 22 20:14:56.826732 2025] [:error] [pid 44259:tid 44277] [client 31.171.130.90:45779] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Nov 22 20:14:57.316703 2025] [:error] [pid 44259:tid 44274] [client 31.171.130.90:45779] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat Nov 22 20:14:57.814089 2025] [:error] [pid 44259:tid 44264] [client 31.171.130.90:45779] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-add.php
[Sat Nov 22 20:14:57.845104 2025] [:error] [pid 53479:tid 53544] [client 172.192.40.201:20334] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/glucosidase.php"] [unique_id "aSGpQW6cicFF3Aas-oSwswAAAIg"]
[Sat Nov 22 20:14:59.136592 2025] [:error] [pid 53478:tid 53509] [client 172.192.40.201:20370] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/glucosidase.php"] [unique_id "aSGpQwhUYdXBbQswAdQSvQAAAEA"]
[Sat Nov 22 20:14:59.749246 2025] [:error] [pid 44259:tid 44267] [client 31.171.130.90:45779] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Sat Nov 22 20:15:00.108731 2025] [:error] [pid 53566:tid 53573] [client 172.192.40.201:20327] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/glucosidase.php"] [unique_id "aSGpRMbSHDBkRbwMbd5HkQAAAMU"]
[Sat Nov 22 20:15:01.043396 2025] [:error] [pid 44259:tid 44284] [client 31.171.130.90:45779] [client 31.171.130.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSGpRXXe1xL-_YOdRmSiLQAAAZY"]
[Sat Nov 22 20:15:01.194795 2025] [:error] [pid 9547:tid 9555] [client 172.192.40.201:20426] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/glucosidase.php"] [unique_id "aSGpRdClOR5qk7DoMeHaBwAAAUI"]
[Sat Nov 22 20:15:02.264027 2025] [:error] [pid 53479:tid 53541] [client 172.192.40.201:20457] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/modernize.php"] [unique_id "aSGpRm6cicFF3Aas-oSwuwAAAIU"]
[Sat Nov 22 20:15:02.657783 2025] [:error] [pid 53478:tid 53511] [client 172.192.40.201:20313] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/modernize.php"] [unique_id "aSGpRghUYdXBbQswAdQSwgAAAEI"]
[Sat Nov 22 20:15:03.202913 2025] [:error] [pid 53566:tid 53577] [client 172.192.40.201:20365] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/modernize.php"] [unique_id "aSGpR8bSHDBkRbwMbd5HmAAAAMk"]
[Sat Nov 22 20:15:03.530708 2025] [:error] [pid 53478:tid 53523] [client 172.192.40.201:20348] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/modernize.php"] [unique_id "aSGpRwhUYdXBbQswAdQSyQAAAE4"]
[Sat Nov 22 20:15:03.567427 2025] [:error] [pid 25856:tid 25879] [client 31.171.130.77:53225] [client 31.171.130.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSGpRxsTP0wy94zKUvHYrgAAARU"]
[Sat Nov 22 20:15:03.875178 2025] [:error] [pid 9547:tid 9572] [client 172.192.40.201:20472] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/twohandedness.php"] [unique_id "aSGpR9ClOR5qk7DoMeHaCQAAAVM"]
[Sat Nov 22 20:15:04.119829 2025] [:error] [pid 53566:tid 53582] [client 172.192.40.201:20388] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/twohandedness.php"] [unique_id "aSGpSMbSHDBkRbwMbd5HmQAAAM4"]
[Sat Nov 22 20:15:04.626023 2025] [:error] [pid 53479:tid 53545] [client 172.192.40.201:20362] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/twohandedness.php"] [unique_id "aSGpSG6cicFF3Aas-oSwxAAAAIk"]
[Sat Nov 22 20:15:04.676732 2025] [:error] [pid 25856:tid 25863] [client 31.171.130.102:32875] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSGpSBsTP0wy94zKUvHYrwAAAQU"]
[Sat Nov 22 20:15:05.250945 2025] [:error] [pid 9547:tid 9574] [client 172.192.40.201:20391] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/twohandedness.php"] [unique_id "aSGpSdClOR5qk7DoMeHaDQAAAVU"]
[Sat Nov 22 20:15:05.914246 2025] [:error] [pid 53566:tid 53592] [client 172.192.40.201:20235] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/undigitated.php"] [unique_id "aSGpScbSHDBkRbwMbd5HnwAAANg"]
[Sat Nov 22 20:15:07.356491 2025] [:error] [pid 53478:tid 53516] [client 172.192.40.201:20298] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/undigitated.php"] [unique_id "aSGpSwhUYdXBbQswAdQS0AAAAEc"]
[Sat Nov 22 20:15:07.441625 2025] [:error] [pid 53479:tid 53538] [client 31.171.130.54:22953] [client 31.171.130.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSGpS26cicFF3Aas-oSwxwAAAII"]
[Sat Nov 22 20:15:08.350148 2025] [:error] [pid 53479:tid 53539] [client 31.171.130.100:53073] File does not exist: /usr/local/apache/htdocs/suspended-page/text.php
[Sat Nov 22 20:15:08.533501 2025] [:error] [pid 53566:tid 53570] [client 172.192.40.201:20435] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/undigitated.php"] [unique_id "aSGpTMbSHDBkRbwMbd5HpQAAAMI"]
[Sat Nov 22 20:15:08.828776 2025] [:error] [pid 53479:tid 53554] [client 31.171.130.100:53073] File does not exist: /usr/local/apache/htdocs/suspended-page/xc.php
[Sat Nov 22 20:15:09.362719 2025] [:error] [pid 44259:tid 44264] [client 172.192.40.201:20400] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/undigitated.php"] [unique_id "aSGpTXXe1xL-_YOdRmSiNgAAAYI"]
[Sat Nov 22 20:15:09.752860 2025] [:error] [pid 44259:tid 44265] [client 172.192.40.201:20305] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/unsafer.php"] [unique_id "aSGpTXXe1xL-_YOdRmSiNwAAAYM"]
[Sat Nov 22 20:15:10.483451 2025] [:error] [pid 53478:tid 53520] [client 172.192.40.201:20259] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/unsafer.php"] [unique_id "aSGpTghUYdXBbQswAdQS1QAAAEs"]
[Sat Nov 22 20:15:10.853314 2025] [:error] [pid 53479:tid 53541] [client 31.171.130.100:53073] [client 31.171.130.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.100, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSGpTm6cicFF3Aas-oSwzgAAAIU"]
[Sat Nov 22 20:15:11.027634 2025] [:error] [pid 44259:tid 44282] [client 172.192.40.201:20339] [client 172.192.40.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/unsafer.php"] [unique_id "aSGpT3Xe1xL-_YOdRmSiPQAAAZQ"]
[Sat Nov 22 20:15:13.697691 2025] [:error] [pid 53479:tid 53548] [client 31.171.130.100:53073] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Sat Nov 22 20:15:14.883402 2025] [:error] [pid 53478:tid 53516] [client 172.192.40.201:20308] File does not exist: /usr/local/apache/htdocs/suspended-page/unsafer.php
[Sat Nov 22 20:15:15.033248 2025] [:error] [pid 53479:tid 53558] [client 31.171.130.100:53073] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sat Nov 22 20:15:16.613018 2025] [:error] [pid 53478:tid 53532] [client 172.192.40.201:20308] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Sat Nov 22 20:15:16.742497 2025] [:error] [pid 53478:tid 53510] [client 172.192.40.201:20308] File does not exist: /usr/local/apache/htdocs/suspended-page/unbalanceable.php
[Sat Nov 22 20:15:16.867605 2025] [:error] [pid 53478:tid 53523] [client 172.192.40.201:20308] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-advaced.php
[Sat Nov 22 20:15:18.004870 2025] [:error] [pid 53479:tid 53549] [client 31.171.130.100:53073] [client 31.171.130.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSGpVm6cicFF3Aas-oSw5QAAAI0"]
[Sat Nov 22 20:15:18.334325 2025] [:error] [pid 53478:tid 53523] [client 172.192.40.201:20308] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-securitiy.php
[Sat Nov 22 20:15:18.492014 2025] [:error] [pid 53478:tid 53518] [client 172.192.40.201:20308] File does not exist: /usr/local/apache/htdocs/suspended-page/poliomyelopathy.php
[Sat Nov 22 20:15:18.995200 2025] [:error] [pid 25856:tid 25871] [client 31.171.130.67:35375] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sat Nov 22 20:15:21.202418 2025] [:error] [pid 25856:tid 25866] [client 31.171.130.67:35375] [client 31.171.130.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.67, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSGpWRsTP0wy94zKUvHYywAAAQg"]
[Sat Nov 22 20:15:21.705092 2025] [:error] [pid 25856:tid 25862] [client 31.171.130.67:35375] File does not exist: /usr/local/apache/htdocs/suspended-page/baxa1.php
[Sat Nov 22 20:15:22.630873 2025] [:error] [pid 25856:tid 25882] [client 31.171.130.67:35375] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Sat Nov 22 20:15:23.122114 2025] [:error] [pid 25856:tid 25877] [client 31.171.130.67:35375] File does not exist: /usr/local/apache/htdocs/suspended-page/geju.php
[Sat Nov 22 20:15:24.579500 2025] [:error] [pid 25856:tid 25861] [client 31.171.130.67:35375] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sat Nov 22 20:15:25.029032 2025] [:error] [pid 25856:tid 25864] [client 31.171.130.67:35375] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Sat Nov 22 20:15:25.511874 2025] [:error] [pid 25856:tid 25859] [client 31.171.130.67:35375] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aSGpXRsTP0wy94zKUvHY3wAAAQE"]
[Sat Nov 22 20:15:26.462762 2025] [:error] [pid 44259:tid 44264] [client 31.171.130.64:26603] [client 31.171.130.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSGpXnXe1xL-_YOdRmSibAAAAYI"]
[Sat Nov 22 20:15:27.364142 2025] [:error] [pid 53477:tid 53493] [client 31.171.130.68:30197] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen-667.php
[Sat Nov 22 20:15:28.449410 2025] [:error] [pid 53477:tid 53498] [client 31.171.130.68:30197] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Sat Nov 22 20:15:28.905869 2025] [:error] [pid 53477:tid 53485] [client 31.171.130.68:30197] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sat Nov 22 20:15:29.356563 2025] [:error] [pid 53477:tid 53487] [client 31.171.130.68:30197] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sat Nov 22 20:15:30.282207 2025] [:error] [pid 53477:tid 53504] [client 31.171.130.68:30197] File does not exist: /usr/local/apache/htdocs/suspended-page/yanz.php
[Sat Nov 22 20:15:32.247693 2025] [:error] [pid 53477:tid 53503] [client 31.171.130.68:30197] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/zmFM.php
[Sat Nov 22 20:15:36.734783 2025] [:error] [pid 53477:tid 53502] [client 31.171.130.68:30197] File does not exist: /usr/local/apache/htdocs/suspended-page/tiny.php
[Sat Nov 22 20:15:37.187931 2025] [:error] [pid 53477:tid 53497] [client 31.171.130.68:30197] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat Nov 22 20:15:37.715670 2025] [:error] [pid 53477:tid 53503] [client 31.171.130.68:30197] File does not exist: /usr/local/apache/htdocs/suspended-page/first.php
[Sat Nov 22 20:15:38.639224 2025] [:error] [pid 53477:tid 53484] [client 31.171.130.68:30197] [client 31.171.130.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSGpan7Lu30Ku9O40aLXTwAAAAM"]
[Sat Nov 22 20:15:43.298337 2025] [:error] [pid 9547:tid 9559] [client 31.171.130.65:63837] [client 31.171.130.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aSGpb9ClOR5qk7DoMeHaUAAAAUY"]
[Sat Nov 22 20:15:44.168567 2025] [:error] [pid 53478:tid 53525] [client 31.171.130.102:42423] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Sat Nov 22 20:15:44.623722 2025] [:error] [pid 53478:tid 53509] [client 31.171.130.102:42423] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSGpcAhUYdXBbQswAdQTCQAAAEA"]
[Sat Nov 22 20:15:46.487517 2025] [:error] [pid 44259:tid 44276] [client 31.171.130.71:30917] File does not exist: /usr/local/apache/htdocs/suspended-page/cron.php
[Sat Nov 22 20:15:47.378770 2025] [:error] [pid 44259:tid 44270] [client 31.171.130.71:30917] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sat Nov 22 20:15:47.932740 2025] [:error] [pid 44259:tid 44282] [client 31.171.130.71:30917] [client 31.171.130.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aSGpc3Xe1xL-_YOdRmSingAAAZQ"]
[Sat Nov 22 20:15:48.856315 2025] [:error] [pid 25856:tid 25874] [client 31.171.130.90:28045] [client 31.171.130.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSGpdBsTP0wy94zKUvHZFgAAARA"]
[Sat Nov 22 20:15:49.773821 2025] [:error] [pid 53477:tid 53505] [client 31.171.130.76:55255] [client 31.171.130.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.76, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aSGpdX7Lu30Ku9O40aLXYgAAABg"]
[Sat Nov 22 20:15:50.242746 2025] [:error] [pid 53477:tid 53494] [client 31.171.130.76:55255] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Sat Nov 22 20:15:51.141938 2025] [:error] [pid 53477:tid 53501] [client 31.171.130.76:55255] [client 31.171.130.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aSGpd37Lu30Ku9O40aLXaAAAABQ"]
[Sat Nov 22 20:15:51.996599 2025] [:error] [pid 25856:tid 25863] [client 31.171.130.105:41503] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Nov 22 20:15:52.917801 2025] [:error] [pid 25856:tid 25880] [client 31.171.130.105:41503] File does not exist: /usr/local/apache/htdocs/suspended-page/back.php
[Sat Nov 22 20:15:55.418880 2025] [:error] [pid 25856:tid 25876] [client 31.171.130.105:41503] [client 31.171.130.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aSGpexsTP0wy94zKUvHZLwAAARI"]
[Sat Nov 22 20:15:56.342869 2025] [:error] [pid 44259:tid 44278] [client 31.171.130.60:32463] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sat Nov 22 20:15:57.384949 2025] [:error] [pid 44259:tid 44277] [client 31.171.130.60:32463] [client 31.171.130.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aSGpfXXe1xL-_YOdRmSiuQAAAY8"]
[Sat Nov 22 20:16:00.416143 2025] [:error] [pid 53478:tid 53515] [client 31.171.130.78:57785] File does not exist: /usr/local/apache/htdocs/suspended-page/phpfm3.php
[Sat Nov 22 20:16:03.502982 2025] [:error] [pid 53478:tid 53533] [client 31.171.130.78:57785] [client 31.171.130.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSGpgwhUYdXBbQswAdQTIgAAAFg"]
[Sat Nov 22 20:16:06.066300 2025] [:error] [pid 44259:tid 44283] [client 31.171.130.54:54479] File does not exist: /usr/local/apache/htdocs/suspended-page/post.php
[Sat Nov 22 20:16:06.513890 2025] [:error] [pid 44259:tid 44265] [client 31.171.130.54:54479] [client 31.171.130.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.54, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aSGphnXe1xL-_YOdRmSi0wAAAYM"]
[Sat Nov 22 20:16:09.215342 2025] [:error] [pid 44259:tid 44277] [client 31.171.130.54:54479] [client 31.171.130.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aSGpiXXe1xL-_YOdRmSi5gAAAY8"]
[Sat Nov 22 20:16:10.029641 2025] [:error] [pid 44259:tid 44262] [client 31.171.130.70:27127] [client 31.171.130.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSGpinXe1xL-_YOdRmSi6QAAAYA"]
[Sat Nov 22 20:16:13.407178 2025] [:error] [pid 44259:tid 44278] [client 31.171.130.88:55513] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Sat Nov 22 20:16:15.407566 2025] [:error] [pid 44259:tid 44265] [client 31.171.130.88:55513] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Sat Nov 22 20:16:16.313739 2025] [:error] [pid 44259:tid 44275] [client 31.171.130.88:55513] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sat Nov 22 20:16:16.808719 2025] [:error] [pid 44259:tid 44278] [client 31.171.130.88:55513] File does not exist: /usr/local/apache/htdocs/suspended-page/zip.php
[Sat Nov 22 20:16:17.765854 2025] [:error] [pid 44259:tid 44281] [client 31.171.130.88:55513] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSGpkXXe1xL-_YOdRmSjGQAAAZM"]
[Sat Nov 22 20:16:20.222939 2025] [:error] [pid 53479:tid 53537] [client 31.171.130.85:21425] [client 31.171.130.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSGplG6cicFF3Aas-oSxUAAAAIE"]
[Sat Nov 22 20:16:22.175455 2025] [:error] [pid 53566:tid 53582] [client 31.171.130.64:61869] [client 31.171.130.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aSGplsbSHDBkRbwMbd5H-wAAAM4"]
[Sat Nov 22 20:16:24.597304 2025] [:error] [pid 44259:tid 44283] [client 31.171.130.55:33545] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aSGpmHXe1xL-_YOdRmSjMwAAAZU"]
[Sat Nov 22 20:16:28.832364 2025] [:error] [pid 44259:tid 44275] [client 31.171.130.92:54033] [client 31.171.130.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSGpnHXe1xL-_YOdRmSjQAAAAY0"]
[Sat Nov 22 20:16:32.523958 2025] [:error] [pid 53566:tid 53582] [client 31.171.130.74:54651] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Sat Nov 22 20:16:32.975746 2025] [:error] [pid 53566:tid 53587] [client 31.171.130.74:54651] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aSGpoMbSHDBkRbwMbd5ICgAAANM"]
[Sat Nov 22 20:16:35.217990 2025] [:error] [pid 53478:tid 53526] [client 31.171.130.53:26707] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sat Nov 22 20:16:36.199257 2025] [:error] [pid 53478:tid 53528] [client 31.171.130.53:26707] File does not exist: /usr/local/apache/htdocs/suspended-page/rcc.php
[Sat Nov 22 20:16:36.634389 2025] [:error] [pid 53478:tid 53525] [client 31.171.130.53:26707] [client 31.171.130.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSGppAhUYdXBbQswAdQTTAAAAFA"]
[Sat Nov 22 20:16:37.562826 2025] [:error] [pid 53478:tid 53510] [client 31.171.130.90:53471] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sat Nov 22 20:16:38.087621 2025] [:error] [pid 53478:tid 53514] [client 31.171.130.90:53471] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Sat Nov 22 20:16:38.605792 2025] [:error] [pid 53478:tid 53531] [client 31.171.130.90:53471] [client 31.171.130.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSGppghUYdXBbQswAdQTUwAAAFY"]
[Sat Nov 22 20:16:40.596375 2025] [:error] [pid 53478:tid 53515] [client 31.171.130.56:22065] File does not exist: /usr/local/apache/htdocs/suspended-page/history.php
[Sat Nov 22 20:16:41.058000 2025] [:error] [pid 53478:tid 53521] [client 31.171.130.56:22065] [client 31.171.130.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aSGpqQhUYdXBbQswAdQTVgAAAEw"]
[Sat Nov 22 20:16:44.511367 2025] [:error] [pid 53479:tid 53539] [client 31.171.130.63:39245] [client 31.171.130.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSGprG6cicFF3Aas-oSxdQAAAIM"]
[Sat Nov 22 20:16:45.426249 2025] [:error] [pid 9547:tid 9557] [client 31.171.130.88:31207] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aSGprdClOR5qk7DoMeHayQAAAUQ"]
[Sat Nov 22 20:16:46.834426 2025] [:error] [pid 9547:tid 9571] [client 31.171.130.53:57229] [client 31.171.130.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSGprtClOR5qk7DoMeHazQAAAVI"]
[Sat Nov 22 20:16:47.768779 2025] [:error] [pid 44259:tid 44283] [client 31.171.130.69:43697] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Nov 22 20:16:48.740439 2025] [:error] [pid 44259:tid 44269] [client 31.171.130.69:43697] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Sat Nov 22 20:16:49.170437 2025] [:error] [pid 44259:tid 44271] [client 31.171.130.69:43697] [client 31.171.130.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.69, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aSGpsXXe1xL-_YOdRmSjZwAAAYk"]
[Sat Nov 22 20:16:50.097683 2025] [:error] [pid 44259:tid 44277] [client 31.171.130.69:43697] [client 31.171.130.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aSGpsnXe1xL-_YOdRmSjbQAAAY8"]
[Sat Nov 22 20:16:52.053682 2025] [:error] [pid 44259:tid 44273] [client 31.171.130.102:27331] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSGptHXe1xL-_YOdRmSjeQAAAYs"]
[Sat Nov 22 20:16:53.013318 2025] [:error] [pid 53477:tid 53498] [client 31.171.130.74:30129] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sat Nov 22 20:16:53.439121 2025] [:error] [pid 53477:tid 53495] [client 31.171.130.74:30129] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sat Nov 22 20:16:55.989794 2025] [:error] [pid 53477:tid 53492] [client 31.171.130.74:30129] File does not exist: /usr/local/apache/htdocs/suspended-page/login.php
[Sat Nov 22 20:16:58.040665 2025] [:error] [pid 53477:tid 53488] [client 31.171.130.74:30129] [client 31.171.130.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.74, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aSGpun7Lu30Ku9O40aLYDQAAAAc"]
[Sat Nov 22 20:16:58.532124 2025] [:error] [pid 53477:tid 53501] [client 31.171.130.74:30129] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSGpun7Lu30Ku9O40aLYDwAAABQ"]
[Sat Nov 22 20:16:59.477318 2025] [:error] [pid 9547:tid 9563] [client 31.171.130.78:24289] [client 31.171.130.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aSGpu9ClOR5qk7DoMeHa5AAAAUo"]
[Sat Nov 22 20:17:01.856964 2025] [:error] [pid 53477:tid 53485] [client 31.171.130.74:46765] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSGpvX7Lu30Ku9O40aLYKgAAAAQ"]
[Sat Nov 22 20:17:06.836740 2025] [:error] [pid 53478:tid 53524] [client 31.171.130.68:30835] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Sat Nov 22 20:17:07.259850 2025] [:error] [pid 53478:tid 53509] [client 31.171.130.68:30835] [client 31.171.130.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aSGpwwhUYdXBbQswAdQTmgAAAEA"]
[Sat Nov 22 20:17:08.739434 2025] [:error] [pid 53566:tid 53573] [client 31.171.130.91:58023] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-config-sample.php
[Sat Nov 22 20:17:11.255443 2025] [:error] [pid 53566:tid 53583] [client 31.171.130.91:58023] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sat Nov 22 20:17:14.340781 2025] [:error] [pid 53566:tid 53572] [client 31.171.130.91:58023] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Sat Nov 22 20:17:14.795317 2025] [:error] [pid 53566:tid 53589] [client 31.171.130.91:58023] [client 31.171.130.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSGpysbSHDBkRbwMbd5IOQAAANU"]
[Sat Nov 22 20:17:16.224352 2025] [:error] [pid 53479:tid 53546] [client 31.171.130.77:45689] File does not exist: /usr/local/apache/htdocs/suspended-page/sim.php
[Sat Nov 22 20:17:17.192425 2025] [:error] [pid 53479:tid 53536] [client 31.171.130.77:45689] [client 31.171.130.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSGpzW6cicFF3Aas-oSxqQAAAIA"]
[Sat Nov 22 20:17:18.603469 2025] [:error] [pid 44259:tid 44279] [client 31.171.130.85:39223] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sat Nov 22 20:17:19.968269 2025] [:error] [pid 44259:tid 44284] [client 31.171.130.85:39223] [client 31.171.130.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSGpz3Xe1xL-_YOdRmSjyQAAAZY"]
[Sat Nov 22 20:17:21.508051 2025] [:error] [pid 53479:tid 53559] [client 31.171.130.76:62471] [client 31.171.130.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSGp0W6cicFF3Aas-oSxtgAAAJc"]
[Sat Nov 22 20:17:22.914942 2025] [:error] [pid 53477:tid 53486] [client 31.171.130.73:48799] [client 31.171.130.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSGp0n7Lu30Ku9O40aLYRQAAAAU"]
[Sat Nov 22 20:17:24.234876 2025] [:error] [pid 25856:tid 25882] [client 31.171.130.68:56215] [client 31.171.130.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSGp1BsTP0wy94zKUvHZuwAAARg"]
[Sat Nov 22 20:17:25.607140 2025] [:error] [pid 25856:tid 25858] [client 31.171.130.88:36711] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSGp1RsTP0wy94zKUvHZvwAAAQA"]
[Sat Nov 22 20:17:27.383015 2025] [:error] [pid 53478:tid 53512] [client 31.171.130.65:61835] [client 31.171.130.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSGp1whUYdXBbQswAdQTxQAAAEM"]
[Sat Nov 22 20:17:29.328416 2025] [:error] [pid 25856:tid 25873] [client 31.171.130.90:55891] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sat Nov 22 20:17:30.167951 2025] [:error] [pid 25856:tid 25859] [client 31.171.130.90:55891] [client 31.171.130.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSGp2hsTP0wy94zKUvHZ0AAAAQE"]
[Sat Nov 22 20:17:32.590309 2025] [:error] [pid 53478:tid 53531] [client 31.171.130.102:32809] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-post.php
[Sat Nov 22 20:17:33.046459 2025] [:error] [pid 53478:tid 53518] [client 31.171.130.102:32809] File does not exist: /usr/local/apache/htdocs/suspended-page/conf_upload.php
[Sat Nov 22 20:17:33.510240 2025] [:error] [pid 53478:tid 53514] [client 31.171.130.102:32809] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSGp3QhUYdXBbQswAdQTzwAAAEU"]
[Sat Nov 22 20:17:36.241486 2025] [:error] [pid 53477:tid 53503] [client 31.171.130.56:63047] [client 31.171.130.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSGp4H7Lu30Ku9O40aLYUAAAABY"]
[Sat Nov 22 20:17:37.199865 2025] [:error] [pid 53477:tid 53486] [client 31.171.130.63:35741] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Sat Nov 22 20:17:38.718174 2025] [:error] [pid 53477:tid 53505] [client 31.171.130.63:35741] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Sat Nov 22 20:17:39.669347 2025] [:error] [pid 53477:tid 53481] [client 31.171.130.63:35741] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Nov 22 20:17:40.116183 2025] [:error] [pid 53477:tid 53504] [client 31.171.130.63:35741] [client 31.171.130.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aSGp5H7Lu30Ku9O40aLYYAAAABc"]
[Sat Nov 22 20:17:41.569054 2025] [:error] [pid 53566:tid 53588] [client 31.171.130.86:24753] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat Nov 22 20:17:42.934811 2025] [:error] [pid 53566:tid 53581] [client 31.171.130.86:24753] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Sat Nov 22 20:17:48.860888 2025] [:error] [pid 44259:tid 44278] [client 31.171.130.55:48703] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Sat Nov 22 20:17:50.141169 2025] [:error] [pid 44259:tid 44276] [client 31.171.130.55:48703] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Sat Nov 22 20:17:50.600561 2025] [:error] [pid 44259:tid 44279] [client 31.171.130.55:48703] File does not exist: /usr/local/apache/htdocs/suspended-page/tinyfilemanager.php
[Sat Nov 22 20:17:52.831962 2025] [:error] [pid 44259:tid 44283] [client 31.171.130.55:48703] File does not exist: /usr/local/apache/htdocs/suspended-page/woh.php
[Sat Nov 22 20:17:53.321613 2025] [:error] [pid 44259:tid 44284] [client 31.171.130.55:48703] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aSGp8XXe1xL-_YOdRmSkSAAAAZY"]
[Sat Nov 22 20:17:54.274399 2025] [:error] [pid 44259:tid 44264] [client 31.171.130.94:32949] [client 31.171.130.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSGp8nXe1xL-_YOdRmSkTwAAAYI"]
[Sat Nov 22 20:17:55.169918 2025] [:error] [pid 25856:tid 25866] [client 31.171.130.88:38995] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Nov 22 20:17:55.626944 2025] [:error] [pid 25856:tid 25871] [client 31.171.130.88:38995] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sat Nov 22 20:17:56.169093 2025] [:error] [pid 25856:tid 25872] [client 31.171.130.88:38995] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat Nov 22 20:17:56.621405 2025] [:error] [pid 25856:tid 25859] [client 31.171.130.88:38995] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aSGp9BsTP0wy94zKUvHZ_gAAAQE"]
[Sat Nov 22 20:17:57.585874 2025] [:error] [pid 53479:tid 53559] [client 31.171.130.62:21259] [client 31.171.130.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSGp9W6cicFF3Aas-oSyLQAAAJc"]
[Sat Nov 22 20:17:58.505774 2025] [:error] [pid 44259:tid 44280] [client 31.171.130.54:22735] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sat Nov 22 20:17:58.978608 2025] [:error] [pid 44259:tid 44278] [client 31.171.130.54:22735] [client 31.171.130.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aSGp9nXe1xL-_YOdRmSkWgAAAZA"]
[Sat Nov 22 20:18:00.930715 2025] [:error] [pid 9547:tid 9577] [client 31.171.130.53:56197] File does not exist: /usr/local/apache/htdocs/suspended-page/readme.php
[Sat Nov 22 20:18:01.617565 2025] [:error] [pid 9547:tid 9555] [client 31.171.130.53:56197] File does not exist: /usr/local/apache/htdocs/suspended-page/sck.php
[Sat Nov 22 20:18:03.198157 2025] [:error] [pid 9547:tid 9559] [client 31.171.130.53:56197] File does not exist: /usr/local/apache/htdocs/suspended-page/fm.php
[Sat Nov 22 20:18:04.317103 2025] [:error] [pid 9547:tid 9554] [client 31.171.130.53:56197] File does not exist: /usr/local/apache/htdocs/suspended-page/packed.php
[Sat Nov 22 20:18:04.809375 2025] [:error] [pid 9547:tid 9562] [client 31.171.130.53:56197] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Nov 22 20:18:05.305635 2025] [:error] [pid 9547:tid 9567] [client 31.171.130.53:56197] [client 31.171.130.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSGp_dClOR5qk7DoMeHbsgAAAU4"]
[Sat Nov 22 20:18:08.753478 2025] [:error] [pid 25856:tid 25880] [client 31.171.130.61:36853] [client 31.171.130.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.61, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSGqABsTP0wy94zKUvHaDwAAARY"]
[Sat Nov 22 20:18:10.005823 2025] [:error] [pid 25856:tid 25877] [client 31.171.130.61:36853] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Sat Nov 22 20:18:10.565785 2025] [:error] [pid 25856:tid 25863] [client 31.171.130.61:36853] [client 31.171.130.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSGqAhsTP0wy94zKUvHaEwAAAQU"]
[Sat Nov 22 20:18:11.560680 2025] [:error] [pid 53479:tid 53537] [client 31.171.130.55:45639] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSGqA26cicFF3Aas-oSyOQAAAIE"]
[Sat Nov 22 20:18:12.982873 2025] [:error] [pid 25856:tid 25870] [client 31.171.130.65:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Nov 22 20:18:14.027254 2025] [:error] [pid 25856:tid 25869] [client 31.171.130.65:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/load.php
[Sat Nov 22 20:18:14.508249 2025] [:error] [pid 25856:tid 25873] [client 31.171.130.65:35433] [client 31.171.130.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aSGqBhsTP0wy94zKUvHaGgAAAQ8"]
[Sat Nov 22 20:18:15.446172 2025] [:error] [pid 53477:tid 53490] [client 31.171.130.53:49635] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Sat Nov 22 20:18:15.904950 2025] [:error] [pid 53477:tid 53494] [client 31.171.130.53:49635] [client 31.171.130.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSGqB37Lu30Ku9O40aLYogAAAA0"]
[Sat Nov 22 20:18:17.435668 2025] [:error] [pid 25856:tid 25858] [client 31.171.130.66:23997] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sat Nov 22 20:18:17.895786 2025] [:error] [pid 25856:tid 25876] [client 31.171.130.66:23997] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sat Nov 22 20:18:18.361769 2025] [:error] [pid 25856:tid 25880] [client 31.171.130.66:23997] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/cloud.php
[Sat Nov 22 20:18:21.316388 2025] [:error] [pid 25856:tid 25864] [client 31.171.130.66:23997] File does not exist: /usr/local/apache/htdocs/suspended-page/product.php
[Sat Nov 22 20:18:21.770493 2025] [:error] [pid 25856:tid 25862] [client 31.171.130.66:23997] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/class_api.php
[Sat Nov 22 20:18:23.412735 2025] [:error] [pid 25856:tid 25866] [client 31.171.130.66:23997] [client 31.171.130.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSGqDxsTP0wy94zKUvHaKwAAAQg"]
[Sat Nov 22 20:18:24.961628 2025] [:error] [pid 53477:tid 53488] [client 31.171.130.88:34419] File does not exist: /usr/local/apache/htdocs/suspended-page/base.php
[Sat Nov 22 20:18:26.692500 2025] [:error] [pid 53477:tid 53481] [client 31.171.130.88:34419] File does not exist: /usr/local/apache/htdocs/suspended-page/zero.php
[Sat Nov 22 20:18:27.106106 2025] [:error] [pid 53477:tid 53496] [client 31.171.130.88:34419] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aSGqE37Lu30Ku9O40aLYywAAAA8"]
[Sat Nov 22 20:18:28.502093 2025] [:error] [pid 53479:tid 53544] [client 31.171.130.86:42867] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sat Nov 22 20:18:28.976731 2025] [:error] [pid 53479:tid 53558] [client 31.171.130.86:42867] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sat Nov 22 20:18:29.413004 2025] [:error] [pid 53479:tid 53545] [client 31.171.130.86:42867] [client 31.171.130.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.86, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSGqFW6cicFF3Aas-oSyZgAAAIk"]
[Sat Nov 22 20:18:29.416806 2025] [:error] [pid 53479:tid 53545] [client 31.171.130.86:42867] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Sat Nov 22 20:18:30.934084 2025] [:error] [pid 53479:tid 53543] [client 31.171.130.86:42867] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-set.php
[Sat Nov 22 20:18:31.381809 2025] [:error] [pid 53479:tid 53555] [client 31.171.130.86:42867] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Nov 22 20:18:32.984322 2025] [:error] [pid 53479:tid 53558] [client 31.171.130.86:42867] [client 31.171.130.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aSGqGG6cicFF3Aas-oSyeQAAAJY"]
[Sat Nov 22 20:18:34.034995 2025] [:error] [pid 44259:tid 44270] [client 31.171.130.59:56207] [client 31.171.130.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.59, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aSGqGnXe1xL-_YOdRmSkwAAAAYg"]
[Sat Nov 22 20:18:34.501401 2025] [:error] [pid 44259:tid 44282] [client 31.171.130.59:56207] [client 31.171.130.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aSGqGnXe1xL-_YOdRmSkwQAAAZQ"]
[Sat Nov 22 20:18:39.293287 2025] [:error] [pid 53478:tid 53511] [client 31.171.130.70:37399] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Sat Nov 22 20:18:41.401931 2025] [:error] [pid 53478:tid 53532] [client 31.171.130.70:37399] [client 31.171.130.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSGqIQhUYdXBbQswAdQUTwAAAFc"]
[Sat Nov 22 20:18:43.417151 2025] [:error] [pid 25856:tid 25875] [client 31.171.130.53:20763] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sat Nov 22 20:18:44.308557 2025] [:error] [pid 25856:tid 25861] [client 31.171.130.53:20763] [client 31.171.130.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSGqJBsTP0wy94zKUvHaTgAAAQM"]
[Sat Nov 22 20:18:45.680671 2025] [:error] [pid 53478:tid 53530] [client 31.171.130.89:55587] [client 31.171.130.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.89, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aSGqJQhUYdXBbQswAdQUVgAAAFU"]
[Sat Nov 22 20:18:47.345517 2025] [:error] [pid 53478:tid 53533] [client 31.171.130.89:55587] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Sat Nov 22 20:18:47.791011 2025] [:error] [pid 53478:tid 53522] [client 31.171.130.89:55587] File does not exist: /usr/local/apache/htdocs/suspended-page/bulk.php
[Sat Nov 22 20:18:48.208117 2025] [:error] [pid 53478:tid 53529] [client 31.171.130.89:55587] File does not exist: /usr/local/apache/htdocs/suspended-page/kk.php
[Sat Nov 22 20:18:49.118720 2025] [:error] [pid 53478:tid 53518] [client 31.171.130.89:55587] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-logout.php
[Sat Nov 22 20:18:49.700446 2025] [:error] [pid 53478:tid 53520] [client 31.171.130.89:55587] [client 31.171.130.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aSGqKQhUYdXBbQswAdQUZAAAAEs"]
[Sat Nov 22 20:18:52.001514 2025] [:error] [pid 53477:tid 53482] [client 31.171.130.61:49179] [client 31.171.130.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/packed.php"] [unique_id "aSGqLH7Lu30Ku9O40aLZCAAAAAE"]
[Sat Nov 22 20:18:52.951491 2025] [:error] [pid 53566:tid 53577] [client 31.171.130.74:31141] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Nov 22 20:18:53.399150 2025] [:error] [pid 53566:tid 53584] [client 31.171.130.74:31141] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Sat Nov 22 20:18:55.822951 2025] [:error] [pid 53566:tid 53576] [client 31.171.130.74:31141] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Sat Nov 22 20:18:56.386227 2025] [:error] [pid 53566:tid 53590] [client 31.171.130.74:31141] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-simple.php
[Sat Nov 22 20:18:58.450716 2025] [:error] [pid 53566:tid 53568] [client 31.171.130.74:31141] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSGqMsbSHDBkRbwMbd5JHAAAAMA"]
[Sat Nov 22 20:18:59.939084 2025] [:error] [pid 53477:tid 53500] [client 31.171.130.69:54477] [client 31.171.130.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSGqM37Lu30Ku9O40aLZGwAAABM"]
[Sat Nov 22 20:19:03.944195 2025] [:error] [pid 9547:tid 9568] [client 31.171.130.100:32303] [client 31.171.130.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aSGqN9ClOR5qk7DoMeHcZAAAAU8"]
[Sat Nov 22 20:19:05.380688 2025] [:error] [pid 25856:tid 25875] [client 31.171.130.60:64849] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sat Nov 22 20:19:07.195948 2025] [:error] [pid 25856:tid 25871] [client 31.171.130.60:64849] [client 31.171.130.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.60, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aSGqOxsTP0wy94zKUvHadgAAAQ0"]
[Sat Nov 22 20:19:08.641130 2025] [:error] [pid 25856:tid 25871] [client 31.171.130.60:64849] [client 31.171.130.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSGqPBsTP0wy94zKUvHafQAAAQ0"]
[Sat Nov 22 20:19:11.087530 2025] [:error] [pid 53478:tid 53533] [client 31.171.130.87:30749] File does not exist: /usr/local/apache/htdocs/suspended-page/header.php
[Sat Nov 22 20:19:11.620820 2025] [:error] [pid 53478:tid 53511] [client 31.171.130.87:30749] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Sat Nov 22 20:19:13.139769 2025] [:error] [pid 53478:tid 53527] [client 31.171.130.87:30749] [client 31.171.130.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSGqQQhUYdXBbQswAdQUlQAAAFI"]
[Sat Nov 22 20:19:14.065869 2025] [:error] [pid 44259:tid 44282] [client 31.171.130.54:62763] [client 31.171.130.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aSGqQnXe1xL-_YOdRmSlFgAAAZQ"]
[Sat Nov 22 20:19:15.137245 2025] [:error] [pid 53477:tid 53483] [client 31.171.130.90:32895] File does not exist: /usr/local/apache/htdocs/suspended-page/bk.php
[Sat Nov 22 20:19:17.118962 2025] [:error] [pid 53477:tid 53504] [client 31.171.130.90:32895] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/moon.php
[Sat Nov 22 20:19:18.526938 2025] [:error] [pid 53477:tid 53498] [client 31.171.130.90:32895] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/dropdown.php
[Sat Nov 22 20:19:18.983792 2025] [:error] [pid 53477:tid 53491] [client 31.171.130.90:32895] [client 31.171.130.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSGqRn7Lu30Ku9O40aLZaAAAAAo"]
[Sat Nov 22 20:19:19.958753 2025] [:error] [pid 9547:tid 9568] [client 31.171.130.81:43955] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Nov 22 20:19:20.512779 2025] [:error] [pid 9547:tid 9560] [client 31.171.130.81:43955] File does not exist: /usr/local/apache/htdocs/suspended-page/sym.php
[Sat Nov 22 20:19:22.174839 2025] [:error] [pid 9547:tid 9573] [client 31.171.130.81:43955] [client 31.171.130.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/votes.php"] [unique_id "aSGqStClOR5qk7DoMeHckwAAAVQ"]
[Sat Nov 22 20:19:25.115614 2025] [:error] [pid 53477:tid 53502] [client 31.171.130.80:26349] File does not exist: /usr/local/apache/htdocs/suspended-page/sk.php
[Sat Nov 22 20:19:26.000334 2025] [:error] [pid 53477:tid 53501] [client 31.171.130.80:26349] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/blurbs.php
[Sat Nov 22 20:19:27.584443 2025] [:error] [pid 53477:tid 53489] [client 31.171.130.80:26349] [client 31.171.130.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/file.php"] [unique_id "aSGqT37Lu30Ku9O40aLZmgAAAAg"]
[Sat Nov 22 20:19:31.415950 2025] [:error] [pid 9547:tid 9577] [client 31.171.130.94:38913] [client 31.171.130.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aSGqU9ClOR5qk7DoMeHcqAAAAVg"]
[Sat Nov 22 20:19:33.724425 2025] [:error] [pid 53477:tid 53490] [client 31.171.130.77:29669] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Sat Nov 22 20:19:35.103384 2025] [:error] [pid 53477:tid 53497] [client 31.171.130.77:29669] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Sat Nov 22 20:19:35.537958 2025] [:error] [pid 53477:tid 53498] [client 31.171.130.77:29669] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Sat Nov 22 20:19:36.037454 2025] [:error] [pid 53477:tid 53487] [client 31.171.130.77:29669] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Sat Nov 22 20:19:36.531063 2025] [:error] [pid 53477:tid 53499] [client 31.171.130.77:29669] [client 31.171.130.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aSGqWH7Lu30Ku9O40aLZxgAAABI"]
[Sat Nov 22 20:19:37.413921 2025] [:error] [pid 9547:tid 9574] [client 31.171.130.84:51319] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/doc.php
[Sat Nov 22 20:19:37.991114 2025] [:error] [pid 9547:tid 9563] [client 31.171.130.84:51319] File does not exist: /usr/local/apache/htdocs/suspended-page/fm1.php
[Sat Nov 22 20:19:39.423075 2025] [:error] [pid 9547:tid 9554] [client 31.171.130.84:51319] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-settings.php
[Sat Nov 22 20:19:39.902076 2025] [:error] [pid 9547:tid 9553] [client 31.171.130.84:51319] [client 31.171.130.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSGqW9ClOR5qk7DoMeHcxwAAAUA"]
[Sat Nov 22 20:19:41.863245 2025] [:error] [pid 53479:tid 53559] [client 31.171.130.78:52015] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Sat Nov 22 20:19:42.326440 2025] [:error] [pid 53479:tid 53548] [client 31.171.130.78:52015] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Sat Nov 22 20:19:44.630661 2025] [:error] [pid 53479:tid 53550] [client 31.171.130.78:52015] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Sat Nov 22 20:19:46.307132 2025] [:error] [pid 53479:tid 53549] [client 31.171.130.78:52015] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi01.php
[Sat Nov 22 20:19:47.674477 2025] [:error] [pid 53479:tid 53540] [client 31.171.130.78:52015] [client 31.171.130.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/item.php"] [unique_id "aSGqY26cicFF3Aas-oSzEgAAAIQ"]
[Sat Nov 22 20:19:53.476286 2025] [:error] [pid 53566:tid 53584] [client 31.171.130.72:45159] [client 31.171.130.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.72, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aSGqacbSHDBkRbwMbd5JvAAAANA"]
[Sat Nov 22 20:19:53.928386 2025] [:error] [pid 53566:tid 53580] [client 31.171.130.72:45159] [client 31.171.130.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.72, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSGqacbSHDBkRbwMbd5JvwAAAMw"]
[Sat Nov 22 20:19:54.411576 2025] [:error] [pid 53566:tid 53585] [client 31.171.130.72:45159] [client 31.171.130.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/mani.php"] [unique_id "aSGqasbSHDBkRbwMbd5JwwAAANE"]
[Sat Nov 22 20:19:55.309738 2025] [:error] [pid 9547:tid 9572] [client 31.171.130.78:23705] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sat Nov 22 20:19:59.086223 2025] [:error] [pid 9547:tid 9570] [client 31.171.130.78:23705] [client 31.171.130.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSGqb9ClOR5qk7DoMeHdEwAAAVE"]
[Sat Nov 22 20:19:59.962244 2025] [:error] [pid 53478:tid 53510] [client 31.171.130.102:54095] File does not exist: /usr/local/apache/htdocs/suspended-page/images.php
[Sat Nov 22 20:20:01.124997 2025] [:error] [pid 53478:tid 53510] [client 31.171.130.102:54095] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aespa.php
[Sat Nov 22 20:20:01.771273 2025] [:error] [pid 53478:tid 53521] [client 31.171.130.102:54095] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSGqcQhUYdXBbQswAdQU9gAAAEw"]
[Sat Nov 22 20:20:10.631132 2025] [:error] [pid 25856:tid 25879] [client 31.171.130.55:61825] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mariju.php
[Sat Nov 22 20:20:13.045987 2025] [:error] [pid 25856:tid 25861] [client 31.171.130.55:61825] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/themes.php
[Sat Nov 22 20:20:13.948050 2025] [:error] [pid 25856:tid 25863] [client 31.171.130.55:61825] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSGqfRsTP0wy94zKUvHa-wAAAQU"]
[Sat Nov 22 20:20:14.855959 2025] [:error] [pid 53479:tid 53555] [client 31.171.130.56:36455] [client 31.171.130.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aSGqfm6cicFF3Aas-oSzQAAAAJM"]
[Sat Nov 22 20:20:16.302504 2025] [:error] [pid 53566:tid 53578] [client 31.171.130.67:55529] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sat Nov 22 20:20:17.712394 2025] [:error] [pid 53566:tid 53576] [client 31.171.130.67:55529] [client 31.171.130.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.67, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "aSGqgcbSHDBkRbwMbd5J9QAAAMg"]
[Sat Nov 22 20:20:20.107814 2025] [:error] [pid 53566:tid 53588] [client 31.171.130.67:55529] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aSGqhMbSHDBkRbwMbd5J_QAAANQ"]
[Sat Nov 22 20:20:21.044453 2025] [:error] [pid 25856:tid 25865] [client 31.171.130.97:31165] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sat Nov 22 20:20:21.525667 2025] [:error] [pid 25856:tid 25863] [client 31.171.130.97:31165] [client 31.171.130.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aSGqhRsTP0wy94zKUvHbCgAAAQU"]
[Sat Nov 22 20:20:22.460131 2025] [:error] [pid 53479:tid 53537] [client 31.171.130.80:26183] [client 31.171.130.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSGqhm6cicFF3Aas-oSzWgAAAIE"]
[Sat Nov 22 20:20:24.111192 2025] [:error] [pid 53566:tid 53573] [client 31.171.130.86:34261] [client 31.171.130.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSGqiMbSHDBkRbwMbd5KBAAAAMU"]
[Sat Nov 22 20:20:30.022775 2025] [:error] [pid 53477:tid 53492] [client 31.171.130.68:39733] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/parx.php
[Sat Nov 22 20:20:31.033817 2025] [:error] [pid 53477:tid 53486] [client 31.171.130.68:39733] [client 31.171.130.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aSGqj37Lu30Ku9O40aLaTAAAAAU"]
[Sat Nov 22 20:20:33.601279 2025] [:error] [pid 53478:tid 53512] [client 31.171.130.102:57143] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Sat Nov 22 20:20:34.109277 2025] [:error] [pid 53478:tid 53509] [client 31.171.130.102:57143] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Sat Nov 22 20:20:36.033287 2025] [:error] [pid 53478:tid 53532] [client 31.171.130.102:57143] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Sat Nov 22 20:20:38.022271 2025] [:error] [pid 53478:tid 53518] [client 31.171.130.102:57143] File does not exist: /usr/local/apache/htdocs/suspended-page/cloud.php
[Sat Nov 22 20:20:38.533850 2025] [:error] [pid 53478:tid 53520] [client 31.171.130.102:57143] File does not exist: /usr/local/apache/htdocs/suspended-page/upload.php
[Sat Nov 22 20:20:38.935909 2025] [:error] [pid 53478:tid 53516] [client 31.171.130.102:57143] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sat Nov 22 20:20:40.489962 2025] [:error] [pid 53478:tid 53528] [client 31.171.130.102:57143] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sat Nov 22 20:20:43.409881 2025] [:error] [pid 53478:tid 53533] [client 31.171.130.102:57143] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/radio.php"] [unique_id "aSGqmwhUYdXBbQswAdQVXQAAAFg"]
[Sat Nov 22 20:20:46.310956 2025] [:error] [pid 9547:tid 9557] [client 31.171.130.78:45503] File does not exist: /usr/local/apache/htdocs/suspended-page/payout.php
[Sat Nov 22 20:20:47.435343 2025] [:error] [pid 9547:tid 9573] [client 31.171.130.78:45503] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sat Nov 22 20:20:47.932595 2025] [:error] [pid 9547:tid 9556] [client 31.171.130.78:45503] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sat Nov 22 20:20:48.433689 2025] [:error] [pid 9547:tid 9575] [client 31.171.130.78:45503] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_info.php
[Sat Nov 22 20:20:49.359681 2025] [:error] [pid 9547:tid 9574] [client 31.171.130.78:45503] File does not exist: /usr/local/apache/htdocs/suspended-page/xml.php
[Sat Nov 22 20:20:49.938394 2025] [:error] [pid 9547:tid 9564] [client 31.171.130.78:45503] File does not exist: /usr/local/apache/htdocs/suspended-page/by.php
[Sat Nov 22 20:20:50.845657 2025] [:error] [pid 9547:tid 9571] [client 31.171.130.78:45503] [client 31.171.130.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aSGqotClOR5qk7DoMeHdmAAAAVI"]
[Sat Nov 22 20:20:55.826540 2025] [:error] [pid 44259:tid 44276] [client 31.171.130.54:29375] [client 31.171.130.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSGqp3Xe1xL-_YOdRmSmfgAAAY4"]
[Sat Nov 22 20:20:58.432847 2025] [:error] [pid 9547:tid 9561] [client 31.171.130.75:46981] [client 31.171.130.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/index.php"] [unique_id "aSGqqtClOR5qk7DoMeHdqgAAAUg"]
[Sat Nov 22 20:20:59.478876 2025] [:error] [pid 25856:tid 25865] [client 31.171.130.89:49947] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sat Nov 22 20:21:00.125964 2025] [:error] [pid 25856:tid 25873] [client 31.171.130.89:49947] File does not exist: /usr/local/apache/htdocs/suspended-page/fox.php
[Sat Nov 22 20:21:00.525768 2025] [:error] [pid 25856:tid 25869] [client 31.171.130.89:49947] File does not exist: /usr/local/apache/htdocs/suspended-page/google.php
[Sat Nov 22 20:21:01.659217 2025] [:error] [pid 25856:tid 25881] [client 31.171.130.89:49947] File does not exist: /usr/local/apache/htdocs/suspended-page/ovatools.php
[Sat Nov 22 20:21:02.209103 2025] [:error] [pid 25856:tid 25876] [client 31.171.130.89:49947] File does not exist: /usr/local/apache/htdocs/suspended-page/sidwso.php
[Sat Nov 22 20:21:02.968018 2025] [:error] [pid 25856:tid 25866] [client 31.171.130.89:49947] File does not exist: /usr/local/apache/htdocs/suspended-page/worksec.php
[Sat Nov 22 20:21:03.516695 2025] [:error] [pid 25856:tid 25871] [client 31.171.130.89:49947] [client 31.171.130.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "aSGqrxsTP0wy94zKUvHbTgAAAQ0"]
[Sat Nov 22 20:21:04.685631 2025] [:error] [pid 53477:tid 53489] [client 31.171.130.88:55619] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSGqsH7Lu30Ku9O40aLajwAAAAg"]
[Sat Nov 22 20:21:08.531677 2025] [:error] [pid 9547:tid 9563] [client 31.171.130.102:53649] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aSGqtNClOR5qk7DoMeHdvgAAAUo"]
[Sat Nov 22 20:21:10.025607 2025] [:error] [pid 53477:tid 53481] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Sat Nov 22 20:21:10.512524 2025] [:error] [pid 53477:tid 53490] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Sat Nov 22 20:21:11.019503 2025] [:error] [pid 53477:tid 53494] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/style2.php
[Sat Nov 22 20:21:11.528497 2025] [:error] [pid 53477:tid 53489] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-scripts.php
[Sat Nov 22 20:21:12.001568 2025] [:error] [pid 53477:tid 53501] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Nov 22 20:21:12.513760 2025] [:error] [pid 53477:tid 53498] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/cjfuns.php
[Sat Nov 22 20:21:13.004278 2025] [:error] [pid 53477:tid 53483] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/comfunctions.php
[Sat Nov 22 20:21:14.101369 2025] [:error] [pid 53477:tid 53488] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Sat Nov 22 20:21:15.078674 2025] [:error] [pid 53477:tid 53490] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/epinyins.php
[Sat Nov 22 20:21:15.511563 2025] [:error] [pid 53477:tid 53502] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sat Nov 22 20:21:15.990420 2025] [:error] [pid 53477:tid 53497] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/hinfofuns.php
[Sat Nov 22 20:21:16.428899 2025] [:error] [pid 53477:tid 53495] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/qfunctions.php
[Sat Nov 22 20:21:16.891644 2025] [:error] [pid 53477:tid 53499] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/qinfofuns.php
[Sat Nov 22 20:21:17.335945 2025] [:error] [pid 53477:tid 53483] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/thoms.php
[Sat Nov 22 20:21:17.745372 2025] [:error] [pid 53477:tid 53484] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php
[Sat Nov 22 20:21:18.219021 2025] [:error] [pid 53477:tid 53490] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-ajax.php
[Sat Nov 22 20:21:18.750245 2025] [:error] [pid 53477:tid 53490] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Sat Nov 22 20:21:19.233789 2025] [:error] [pid 53477:tid 53501] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sat Nov 22 20:21:19.703762 2025] [:error] [pid 53477:tid 53489] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/my-sites.php
[Sat Nov 22 20:21:20.137901 2025] [:error] [pid 53477:tid 53494] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/media.php
[Sat Nov 22 20:21:20.609761 2025] [:error] [pid 53477:tid 53505] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/nav-menus.php
[Sat Nov 22 20:21:21.036484 2025] [:error] [pid 53477:tid 53499] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Sat Nov 22 20:21:21.504349 2025] [:error] [pid 53477:tid 53498] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/options-head.php
[Sat Nov 22 20:21:21.931263 2025] [:error] [pid 53477:tid 53504] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/revision.php
[Sat Nov 22 20:21:22.416890 2025] [:error] [pid 53477:tid 53493] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/widgets.php
[Sat Nov 22 20:21:23.331329 2025] [:error] [pid 53477:tid 53502] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Sat Nov 22 20:21:24.661796 2025] [:error] [pid 53477:tid 53502] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sat Nov 22 20:21:25.109431 2025] [:error] [pid 53477:tid 53488] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Sat Nov 22 20:21:25.559003 2025] [:error] [pid 53477:tid 53497] [client 31.171.130.99:61609] File does not exist: /usr/local/apache/htdocs/suspended-page/moded.php
[Sat Nov 22 20:21:26.004089 2025] [:error] [pid 53477:tid 53487] [client 31.171.130.99:61609] [client 31.171.130.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSGqxn7Lu30Ku9O40aLa5QAAAAY"]
[Sat Nov 22 20:21:27.929203 2025] [:error] [pid 44259:tid 44274] [client 31.171.130.68:25421] File does not exist: /usr/local/apache/htdocs/suspended-page/upgrade.php
[Sat Nov 22 20:21:28.387259 2025] [:error] [pid 44259:tid 44279] [client 31.171.130.68:25421] File does not exist: /usr/local/apache/htdocs/suspended-page/gh.php
[Sat Nov 22 20:21:28.945961 2025] [:error] [pid 44259:tid 44280] [client 31.171.130.68:25421] File does not exist: /usr/local/apache/htdocs/suspended-page/version.php
[Sat Nov 22 20:21:29.404676 2025] [:error] [pid 44259:tid 44269] [client 31.171.130.68:25421] File does not exist: /usr/local/apache/htdocs/suspended-page/head.php
[Sat Nov 22 20:21:29.915023 2025] [:error] [pid 44259:tid 44263] [client 31.171.130.68:25421] File does not exist: /usr/local/apache/htdocs/suspended-page/index1.php
[Sat Nov 22 20:21:30.432144 2025] [:error] [pid 44259:tid 44274] [client 31.171.130.68:25421] File does not exist: /usr/local/apache/htdocs/suspended-page/theme-insqbzk.php
[Sat Nov 22 20:21:30.945687 2025] [:error] [pid 44259:tid 44264] [client 31.171.130.68:25421] File does not exist: /usr/local/apache/htdocs/suspended-page/good.php
[Sat Nov 22 20:21:31.434156 2025] [:error] [pid 44259:tid 44281] [client 31.171.130.68:25421] File does not exist: /usr/local/apache/htdocs/suspended-page/main.php
[Sat Nov 22 20:21:32.410388 2025] [:error] [pid 44259:tid 44286] [client 31.171.130.68:25421] File does not exist: /usr/local/apache/htdocs/suspended-page/wsoyanz.php
[Sat Nov 22 20:21:32.820178 2025] [:error] [pid 44259:tid 44284] [client 31.171.130.68:25421] [client 31.171.130.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/css.php"] [unique_id "aSGqzHXe1xL-_YOdRmSnXgAAAZY"]
[Sat Nov 22 20:21:35.115830 2025] [:error] [pid 25856:tid 25882] [client 31.171.130.86:64947] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa-rex.php
[Sat Nov 22 20:21:40.124988 2025] [:error] [pid 25856:tid 25881] [client 31.171.130.86:64947] [client 31.171.130.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aSGq1BsTP0wy94zKUvHbpQAAARc"]
[Sat Nov 22 20:21:41.060864 2025] [:error] [pid 9547:tid 9557] [client 31.171.130.58:33641] [client 31.171.130.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aSGq1dClOR5qk7DoMeHeEwAAAUQ"]
[Sat Nov 22 20:21:43.825946 2025] [:error] [pid 53566:tid 53585] [client 31.171.130.61:22409] [client 31.171.130.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aSGq18bSHDBkRbwMbd5KrgAAANE"]
[Sat Nov 22 20:21:46.106005 2025] [:error] [pid 9547:tid 9556] [client 31.171.130.84:23547] [client 31.171.130.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aSGq2tClOR5qk7DoMeHeGAAAAUM"]
[Sat Nov 22 20:21:48.361830 2025] [:error] [pid 53477:tid 53494] [client 31.171.130.67:50559] File does not exist: /usr/local/apache/htdocs/suspended-page/cache-compat.php
[Sat Nov 22 20:21:48.837299 2025] [:error] [pid 53477:tid 53485] [client 31.171.130.67:50559] File does not exist: /usr/local/apache/htdocs/suspended-page/ajax-actions.php
[Sat Nov 22 20:21:49.741565 2025] [:error] [pid 53477:tid 53502] [client 31.171.130.67:50559] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-consar.php
[Sat Nov 22 20:21:53.630479 2025] [:error] [pid 53477:tid 53484] [client 31.171.130.67:50559] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aSGq4X7Lu30Ku9O40aLbNgAAAAM"]
[Sat Nov 22 20:21:54.539627 2025] [:error] [pid 53479:tid 53554] [client 31.171.130.63:43103] [client 31.171.130.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aSGq4m6cicFF3Aas-oS0AgAAAJI"]
[Sat Nov 22 20:21:55.886022 2025] [:error] [pid 53566:tid 53570] [client 31.171.130.102:26081] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/options.php"] [unique_id "aSGq48bSHDBkRbwMbd5KtgAAAMI"]
[Sat Nov 22 20:21:56.948465 2025] [:error] [pid 53478:tid 53515] [client 31.171.130.89:58135] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php
[Sat Nov 22 20:21:57.812720 2025] [:error] [pid 53478:tid 53521] [client 31.171.130.89:58135] [client 31.171.130.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aSGq5QhUYdXBbQswAdQV-QAAAEw"]
[Sat Nov 22 20:21:58.802233 2025] [:error] [pid 53478:tid 53529] [client 31.171.130.99:24269] [client 31.171.130.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aSGq5ghUYdXBbQswAdQV_AAAAFQ"]
[Sat Nov 22 20:22:00.931992 2025] [:error] [pid 53477:tid 53504] [client 31.171.130.102:58923] [client 31.171.130.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.102, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/images/wp-login.php"] [unique_id "aSGq6H7Lu30Ku9O40aLbQAAAABc"]
[Sat Nov 22 20:22:01.422100 2025] [:error] [pid 53477:tid 53488] [client 31.171.130.102:58923] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sat Nov 22 20:22:02.992629 2025] [:error] [pid 53477:tid 53484] [client 31.171.130.102:58923] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aSGq6n7Lu30Ku9O40aLbRAAAAAM"]
[Sat Nov 22 20:22:03.953852 2025] [:error] [pid 53478:tid 53514] [client 31.171.130.88:48165] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads-config.php
[Sat Nov 22 20:22:07.186622 2025] [:error] [pid 53478:tid 53529] [client 31.171.130.88:48165] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aSGq7whUYdXBbQswAdQWBwAAAFQ"]
[Sat Nov 22 20:22:08.122129 2025] [:error] [pid 44259:tid 44263] [client 31.171.130.77:38289] [client 31.171.130.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aSGq8HXe1xL-_YOdRmSoAAAAAYE"]
[Sat Nov 22 20:22:09.091125 2025] [:error] [pid 53478:tid 53531] [client 31.171.130.73:35845] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/autoload_classmap.php
[Sat Nov 22 20:22:10.210312 2025] [:error] [pid 53478:tid 53527] [client 31.171.130.73:35845] [client 31.171.130.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.73, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aSGq8ghUYdXBbQswAdQWDQAAAFI"]
[Sat Nov 22 20:22:10.684470 2025] [:error] [pid 53478:tid 53513] [client 31.171.130.73:35845] File does not exist: /usr/local/apache/htdocs/suspended-page/upload.php
[Sat Nov 22 20:22:11.131813 2025] [:error] [pid 53478:tid 53523] [client 31.171.130.73:35845] [client 31.171.130.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aSGq8whUYdXBbQswAdQWDwAAAE4"]
[Sat Nov 22 20:22:12.223411 2025] [:error] [pid 53479:tid 53538] [client 31.171.130.60:56409] File does not exist: /usr/local/apache/htdocs/suspended-page/indeex.php
[Sat Nov 22 20:22:12.641087 2025] [:error] [pid 53479:tid 53547] [client 31.171.130.60:56409] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sat Nov 22 20:22:13.995222 2025] [:error] [pid 53479:tid 53537] [client 31.171.130.60:56409] [client 31.171.130.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aSGq9W6cicFF3Aas-oS0IQAAAIE"]
[Sat Nov 22 20:22:16.531089 2025] [:error] [pid 44259:tid 44265] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/bs.php
[Sat Nov 22 20:22:18.238920 2025] [:error] [pid 44259:tid 44276] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/credits.php
[Sat Nov 22 20:22:18.694138 2025] [:error] [pid 44259:tid 44268] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-comments.php
[Sat Nov 22 20:22:20.542411 2025] [:error] [pid 44259:tid 44283] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/checkbox.php
[Sat Nov 22 20:22:20.994895 2025] [:error] [pid 44259:tid 44284] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/export.php
[Sat Nov 22 20:22:21.459899 2025] [:error] [pid 44259:tid 44269] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/input.php
[Sat Nov 22 20:22:21.925469 2025] [:error] [pid 44259:tid 44286] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/load-scripts.php
[Sat Nov 22 20:22:22.422228 2025] [:error] [pid 44259:tid 44280] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/load-styles.php
[Sat Nov 22 20:22:22.875110 2025] [:error] [pid 44259:tid 44267] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/options-discussion.php
[Sat Nov 22 20:22:24.416345 2025] [:error] [pid 44259:tid 44267] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/options-general.php
[Sat Nov 22 20:22:24.899359 2025] [:error] [pid 44259:tid 44266] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/options-permalink.php
[Sat Nov 22 20:22:25.322042 2025] [:error] [pid 44259:tid 44280] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/options-privacy.php
[Sat Nov 22 20:22:25.808591 2025] [:error] [pid 44259:tid 44283] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Sat Nov 22 20:22:26.296298 2025] [:error] [pid 44259:tid 44281] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Sat Nov 22 20:22:26.745431 2025] [:error] [pid 44259:tid 44269] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/post-new.php
[Sat Nov 22 20:22:28.243282 2025] [:error] [pid 44259:tid 44269] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/privacy.php
[Sat Nov 22 20:22:28.791492 2025] [:error] [pid 44259:tid 44281] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php
[Sat Nov 22 20:22:29.774966 2025] [:error] [pid 44259:tid 44280] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/site-health.php
[Sat Nov 22 20:22:30.288243 2025] [:error] [pid 44259:tid 44265] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/tools.php
[Sat Nov 22 20:22:30.726470 2025] [:error] [pid 44259:tid 44269] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Sat Nov 22 20:22:31.629099 2025] [:error] [pid 44259:tid 44266] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/user-edit.php
[Sat Nov 22 20:22:32.043493 2025] [:error] [pid 44259:tid 44286] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/user-new.php
[Sat Nov 22 20:22:32.914648 2025] [:error] [pid 44259:tid 44264] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Sat Nov 22 20:22:33.320344 2025] [:error] [pid 44259:tid 44284] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/bar.php
[Sat Nov 22 20:22:33.780761 2025] [:error] [pid 44259:tid 44265] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Sat Nov 22 20:22:34.207225 2025] [:error] [pid 44259:tid 44285] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Sat Nov 22 20:22:34.700109 2025] [:error] [pid 44259:tid 44281] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Sat Nov 22 20:22:35.134626 2025] [:error] [pid 44259:tid 44270] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Sat Nov 22 20:22:35.590645 2025] [:error] [pid 44259:tid 44265] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/km.php
[Sat Nov 22 20:22:36.478152 2025] [:error] [pid 44259:tid 44281] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/LA.php
[Sat Nov 22 20:22:36.934201 2025] [:error] [pid 44259:tid 44269] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sat Nov 22 20:22:37.438167 2025] [:error] [pid 44259:tid 44280] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ldd.php
[Sat Nov 22 20:22:37.911022 2025] [:error] [pid 44259:tid 44284] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/sgd.php
[Sat Nov 22 20:22:38.395736 2025] [:error] [pid 44259:tid 44267] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/wzy.php
[Sat Nov 22 20:22:39.817851 2025] [:error] [pid 44259:tid 44284] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Nov 22 20:22:40.806006 2025] [:error] [pid 44259:tid 44268] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sat Nov 22 20:22:43.099960 2025] [:error] [pid 44259:tid 44280] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sat Nov 22 20:22:43.531669 2025] [:error] [pid 44259:tid 44265] [client 31.171.130.86:20969] [client 31.171.130.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.86, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSGrE3Xe1xL-_YOdRmSo8AAAAYM"]
[Sat Nov 22 20:22:44.011472 2025] [:error] [pid 44259:tid 44262] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/Njima.php
[Sat Nov 22 20:22:45.833615 2025] [:error] [pid 44259:tid 44276] [client 31.171.130.86:20969] [client 31.171.130.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.86, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aSGrFXXe1xL-_YOdRmSpCQAAAY4"]
[Sat Nov 22 20:22:46.713434 2025] [:error] [pid 44259:tid 44275] [client 31.171.130.86:20969] File does not exist: /usr/local/apache/htdocs/suspended-page/FroggBaba.php
[Sat Nov 22 20:22:47.214322 2025] [:error] [pid 44259:tid 44262] [client 31.171.130.86:20969] [client 31.171.130.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aSGrF3Xe1xL-_YOdRmSpEwAAAYA"]
[Sat Nov 22 20:22:48.152820 2025] [:error] [pid 53477:tid 53481] [client 31.171.130.90:36241] [client 31.171.130.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aSGrGH7Lu30Ku9O40aLbfAAAAAA"]
[Sat Nov 22 20:22:50.252301 2025] [:error] [pid 53478:tid 53512] [client 31.171.130.105:48777] [client 31.171.130.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSGrGghUYdXBbQswAdQWXQAAAEM"]
[Sat Nov 22 20:22:51.161863 2025] [:error] [pid 53478:tid 53527] [client 31.171.130.56:58151] File does not exist: /usr/local/apache/htdocs/suspended-page/sts.php
[Sat Nov 22 20:22:53.835393 2025] [:error] [pid 53478:tid 53514] [client 31.171.130.56:58151] File does not exist: /usr/local/apache/htdocs/suspended-page/st.php
[Sat Nov 22 20:22:54.244750 2025] [:error] [pid 53478:tid 53522] [client 31.171.130.56:58151] File does not exist: /usr/local/apache/htdocs/suspended-page/GA13.php
[Sat Nov 22 20:22:56.027081 2025] [:error] [pid 53478:tid 53530] [client 31.171.130.56:58151] [client 31.171.130.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.56, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aSGrIAhUYdXBbQswAdQWbwAAAFU"]
[Sat Nov 22 20:22:56.524067 2025] [:error] [pid 53478:tid 53512] [client 31.171.130.56:58151] [client 31.171.130.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSGrIAhUYdXBbQswAdQWcAAAAEM"]
[Sat Nov 22 20:22:57.994435 2025] [:error] [pid 53477:tid 53483] [client 31.171.130.61:52729] File does not exist: /usr/local/apache/htdocs/suspended-page/crop.php
[Sat Nov 22 20:22:59.116492 2025] [:error] [pid 53477:tid 53493] [client 31.171.130.61:52729] [client 31.171.130.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.61, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSGrI37Lu30Ku9O40aLbigAAAAw"]
[Sat Nov 22 20:23:00.097108 2025] [:error] [pid 53477:tid 53482] [client 31.171.130.61:52729] File does not exist: /usr/local/apache/htdocs/suspended-page/gali.php
[Sat Nov 22 20:23:01.605110 2025] [:error] [pid 53477:tid 53496] [client 31.171.130.61:52729] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Sat Nov 22 20:23:02.044066 2025] [:error] [pid 53477:tid 53492] [client 31.171.130.61:52729] File does not exist: /usr/local/apache/htdocs/suspended-page/dirs.php
[Sat Nov 22 20:23:02.536832 2025] [:error] [pid 53477:tid 53499] [client 31.171.130.61:52729] File does not exist: /usr/local/apache/htdocs/suspended-page/abouts.php
[Sat Nov 22 20:23:03.024818 2025] [:error] [pid 53477:tid 53505] [client 31.171.130.61:52729] File does not exist: /usr/local/apache/htdocs/suspended-page/malls.php
[Sat Nov 22 20:23:03.519892 2025] [:error] [pid 53477:tid 53485] [client 31.171.130.61:52729] File does not exist: /usr/local/apache/htdocs/suspended-page/liefs.php
[Sat Nov 22 20:23:04.046161 2025] [:error] [pid 53477:tid 53495] [client 31.171.130.61:52729] File does not exist: /usr/local/apache/htdocs/suspended-page/uc.php
[Sat Nov 22 20:23:04.542903 2025] [:error] [pid 53477:tid 53494] [client 31.171.130.61:52729] File does not exist: /usr/local/apache/htdocs/suspended-page/locks.php
[Sat Nov 22 20:23:05.062742 2025] [:error] [pid 53477:tid 53487] [client 31.171.130.61:52729] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-dsdd.php
[Sat Nov 22 20:23:07.118620 2025] [:error] [pid 53477:tid 53483] [client 31.171.130.61:52729] [client 31.171.130.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/editor/fxp.php"] [unique_id "aSGrK37Lu30Ku9O40aLbnAAAAAI"]
[Sat Nov 22 20:23:08.164595 2025] [:error] [pid 53477:tid 53490] [client 31.171.130.91:59505] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Sat Nov 22 20:23:09.410229 2025] [:error] [pid 53477:tid 53491] [client 31.171.130.91:59505] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads.php
[Sat Nov 22 20:23:10.777667 2025] [:error] [pid 53477:tid 53484] [client 31.171.130.91:59505] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Sat Nov 22 20:23:11.279377 2025] [:error] [pid 53477:tid 53492] [client 31.171.130.91:59505] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Sat Nov 22 20:23:11.773996 2025] [:error] [pid 53477:tid 53497] [client 31.171.130.91:59505] File does not exist: /usr/local/apache/htdocs/suspended-page/stindex.php
[Sat Nov 22 20:23:12.263527 2025] [:error] [pid 53477:tid 53499] [client 31.171.130.91:59505] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Sat Nov 22 20:23:13.209061 2025] [:error] [pid 53477:tid 53502] [client 31.171.130.91:59505] File does not exist: /usr/local/apache/htdocs/suspended-page/exit.php
[Sat Nov 22 20:23:13.688576 2025] [:error] [pid 53477:tid 53487] [client 31.171.130.91:59505] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sat Nov 22 20:23:14.194944 2025] [:error] [pid 53477:tid 53481] [client 31.171.130.91:59505] File does not exist: /usr/local/apache/htdocs/suspended-page/max.php
[Sat Nov 22 20:23:15.314470 2025] [:error] [pid 53477:tid 53483] [client 31.171.130.91:59505] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Sat Nov 22 20:23:15.801614 2025] [:error] [pid 53477:tid 53493] [client 31.171.130.91:59505] [client 31.171.130.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSGrM37Lu30Ku9O40aLbsQAAAAw"]
[Sat Nov 22 20:23:16.753797 2025] [:error] [pid 53479:tid 53559] [client 31.171.130.80:43411] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat Nov 22 20:23:18.165985 2025] [:error] [pid 53479:tid 53546] [client 31.171.130.80:43411] File does not exist: /usr/local/apache/htdocs/suspended-page/shellv3.php
[Sat Nov 22 20:23:18.637460 2025] [:error] [pid 53479:tid 53540] [client 31.171.130.80:43411] File does not exist: /usr/local/apache/htdocs/suspended-page/sh.php
[Sat Nov 22 20:23:20.033464 2025] [:error] [pid 53479:tid 53559] [client 31.171.130.80:43411] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sat Nov 22 20:23:20.448417 2025] [:error] [pid 53479:tid 53537] [client 31.171.130.80:43411] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Sat Nov 22 20:23:21.411730 2025] [:error] [pid 53479:tid 53538] [client 31.171.130.80:43411] File does not exist: /usr/local/apache/htdocs/suspended-page/delete3.php
[Sat Nov 22 20:23:22.334159 2025] [:error] [pid 53479:tid 53551] [client 31.171.130.80:43411] File does not exist: /usr/local/apache/htdocs/suspended-page/mm.php
[Sat Nov 22 20:23:23.210880 2025] [:error] [pid 53479:tid 53548] [client 31.171.130.80:43411] [client 31.171.130.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.80, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSGrO26cicFF3Aas-oS0zQAAAIw"]
[Sat Nov 22 20:23:24.116462 2025] [:error] [pid 53479:tid 53549] [client 31.171.130.80:43411] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Sat Nov 22 20:23:25.492140 2025] [:error] [pid 53479:tid 53553] [client 31.171.130.80:43411] File does not exist: /usr/local/apache/htdocs/suspended-page/mailer.php
[Sat Nov 22 20:23:25.937296 2025] [:error] [pid 53479:tid 53540] [client 31.171.130.80:43411] File does not exist: /usr/local/apache/htdocs/suspended-page/www.php
[Sat Nov 22 20:23:27.820316 2025] [:error] [pid 53479:tid 53550] [client 31.171.130.80:43411] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sat Nov 22 20:23:29.141483 2025] [:error] [pid 53479:tid 53552] [client 31.171.130.80:43411] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sat Nov 22 20:23:29.595252 2025] [:error] [pid 53479:tid 53555] [client 31.171.130.80:43411] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Sat Nov 22 20:23:31.506013 2025] [autoindex:error] [pid 53479:tid 53550] [client 31.171.130.80:43411] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 23:23:20.427713 2025] [:error] [pid 53566:tid 53571] [client 48.210.12.181:30700] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php
[Sat Nov 22 23:23:20.546444 2025] [:error] [pid 53566:tid 53570] [client 48.210.12.181:30700] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sat Nov 22 23:23:20.684105 2025] [:error] [pid 53566:tid 53578] [client 48.210.12.181:30700] File does not exist: /usr/local/apache/htdocs/suspended-page/golden.php
[Sat Nov 22 23:23:20.822958 2025] [:error] [pid 53566:tid 53592] [client 48.210.12.181:30700] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Sat Nov 22 23:23:20.940859 2025] [:error] [pid 53566:tid 53589] [client 48.210.12.181:30700] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Nov 22 23:23:21.063575 2025] [:error] [pid 53566:tid 53574] [client 48.210.12.181:30700] [client 48.210.12.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aSHVacbSHDBkRbwMbd59GAAAAMY"]
[Sat Nov 22 23:23:21.365257 2025] [:error] [pid 9547:tid 9574] [client 48.210.12.181:30602] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sat Nov 22 23:23:21.481874 2025] [:error] [pid 9547:tid 9563] [client 48.210.12.181:30602] File does not exist: /usr/local/apache/htdocs/suspended-page/ffile.php
[Sat Nov 22 23:23:21.602161 2025] [:error] [pid 9547:tid 9573] [client 48.210.12.181:30602] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sat Nov 22 23:23:21.726921 2025] [:error] [pid 9547:tid 9561] [client 48.210.12.181:30602] File does not exist: /usr/local/apache/htdocs/suspended-page/re.php
[Sat Nov 22 23:23:21.843985 2025] [:error] [pid 9547:tid 9575] [client 48.210.12.181:30602] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Sat Nov 22 23:23:21.957331 2025] [:error] [pid 9547:tid 9567] [client 48.210.12.181:30602] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aSHVadClOR5qk7DoMeEdNwAAAU4"]
[Sat Nov 22 23:23:22.350131 2025] [:error] [pid 44259:tid 44262] [client 48.210.12.181:30666] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aSHVanXe1xL-_YOdRmT5aAAAAYA"]
[Sat Nov 22 23:23:22.754946 2025] [:error] [pid 44259:tid 44280] [client 48.210.12.181:30607] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aSHVanXe1xL-_YOdRmT5agAAAZI"]
[Sat Nov 22 23:23:23.107282 2025] [:error] [pid 44259:tid 44266] [client 48.210.12.181:30689] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aSHVa3Xe1xL-_YOdRmT5awAAAYQ"]
[Sat Nov 22 23:23:23.402621 2025] [:error] [pid 9547:tid 9557] [client 48.210.12.181:30717] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file7.php"] [unique_id "aSHVa9ClOR5qk7DoMeEdOgAAAUQ"]
[Sat Nov 22 23:23:23.662054 2025] [:error] [pid 44259:tid 44278] [client 48.210.12.181:30659] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file7.php"] [unique_id "aSHVa3Xe1xL-_YOdRmT5bAAAAZA"]
[Sat Nov 22 23:23:23.944585 2025] [:error] [pid 44259:tid 44276] [client 48.210.12.181:30709] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file7.php"] [unique_id "aSHVa3Xe1xL-_YOdRmT5bQAAAY4"]
[Sat Nov 22 23:23:24.211402 2025] [:error] [pid 44259:tid 44284] [client 48.210.12.181:30711] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file7.php"] [unique_id "aSHVbHXe1xL-_YOdRmT5bgAAAZY"]
[Sat Nov 22 23:23:24.485689 2025] [:error] [pid 9547:tid 9565] [client 48.210.12.181:30692] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gmo.php"] [unique_id "aSHVbNClOR5qk7DoMeEdPQAAAUw"]
[Sat Nov 22 23:23:25.013449 2025] [:error] [pid 53478:tid 53518] [client 48.210.12.181:30698] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gmo.php"] [unique_id "aSHVbQhUYdXBbQswAdRDvgAAAEk"]
[Sat Nov 22 23:23:25.475658 2025] [:error] [pid 53566:tid 53569] [client 48.210.12.181:30609] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gmo.php"] [unique_id "aSHVbcbSHDBkRbwMbd59HAAAAME"]
[Sat Nov 22 23:23:25.916147 2025] [:error] [pid 53479:tid 53537] [client 48.210.12.181:30719] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gmo.php"] [unique_id "aSHVbW6cicFF3Aas-oTrrAAAAIE"]
[Sat Nov 22 23:23:26.283696 2025] [:error] [pid 44259:tid 44282] [client 48.210.12.181:30686] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless2.php"] [unique_id "aSHVbnXe1xL-_YOdRmT5cgAAAZQ"]
[Sat Nov 22 23:23:26.694342 2025] [:error] [pid 25856:tid 25874] [client 48.210.12.181:30691] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless2.php"] [unique_id "aSHVbhsTP0wy94zKUvEPmwAAARA"]
[Sat Nov 22 23:23:27.148772 2025] [:error] [pid 25856:tid 25869] [client 48.210.12.181:30661] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless2.php"] [unique_id "aSHVbxsTP0wy94zKUvEPnAAAAQs"]
[Sat Nov 22 23:23:27.415288 2025] [:error] [pid 53566:tid 53585] [client 48.210.12.181:30678] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless2.php"] [unique_id "aSHVb8bSHDBkRbwMbd59HQAAANE"]
[Sat Nov 22 23:23:27.708376 2025] [:error] [pid 44259:tid 44279] [client 48.210.12.181:30594] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aSHVb3Xe1xL-_YOdRmT5dQAAAZE"]
[Sat Nov 22 23:23:28.117519 2025] [:error] [pid 53479:tid 53541] [client 48.210.12.181:30699] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aSHVcG6cicFF3Aas-oTrtgAAAIU"]
[Sat Nov 22 23:23:28.399227 2025] [:error] [pid 44259:tid 44285] [client 48.210.12.181:30628] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aSHVcHXe1xL-_YOdRmT5dwAAAZc"]
[Sat Nov 22 23:23:28.648180 2025] [:error] [pid 44259:tid 44271] [client 48.210.12.181:30671] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aSHVcHXe1xL-_YOdRmT5egAAAYk"]
[Sat Nov 22 23:23:29.025597 2025] [:error] [pid 9547:tid 9561] [client 48.210.12.181:30603] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aSHVcdClOR5qk7DoMeEdQgAAAUg"]
[Sat Nov 22 23:23:29.266694 2025] [:error] [pid 44259:tid 44273] [client 48.210.12.181:30673] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aSHVcXXe1xL-_YOdRmT5fgAAAYs"]
[Sat Nov 22 23:23:29.547950 2025] [:error] [pid 44259:tid 44276] [client 48.210.12.181:30693] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aSHVcXXe1xL-_YOdRmT5gAAAAY4"]
[Sat Nov 22 23:23:29.855895 2025] [:error] [pid 44259:tid 44281] [client 48.210.12.181:30690] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aSHVcXXe1xL-_YOdRmT5gQAAAZM"]
[Sat Nov 22 23:23:30.194833 2025] [:error] [pid 44259:tid 44275] [client 48.210.12.181:30530] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsa.php"] [unique_id "aSHVcnXe1xL-_YOdRmT5hAAAAY0"]
[Sat Nov 22 23:23:30.489265 2025] [:error] [pid 53478:tid 53513] [client 48.210.12.181:30598] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsa.php"] [unique_id "aSHVcghUYdXBbQswAdRDvwAAAEQ"]
[Sat Nov 22 23:23:30.858021 2025] [:error] [pid 9547:tid 9571] [client 48.210.12.181:30608] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsa.php"] [unique_id "aSHVctClOR5qk7DoMeEdRAAAAVI"]
[Sat Nov 22 23:23:31.158524 2025] [:error] [pid 9547:tid 9555] [client 48.210.12.181:30646] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsa.php"] [unique_id "aSHVc9ClOR5qk7DoMeEdRQAAAUI"]
[Sat Nov 22 23:23:31.586960 2025] [:error] [pid 9547:tid 9557] [client 48.210.12.181:30595] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "aSHVc9ClOR5qk7DoMeEdRgAAAUQ"]
[Sat Nov 22 23:23:32.142858 2025] [:error] [pid 9547:tid 9568] [client 48.210.12.181:30593] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "aSHVdNClOR5qk7DoMeEdRwAAAU8"]
[Sat Nov 22 23:23:32.604343 2025] [:error] [pid 9547:tid 9562] [client 48.210.12.181:30716] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "aSHVdNClOR5qk7DoMeEdSQAAAUk"]
[Sat Nov 22 23:23:32.975272 2025] [:error] [pid 53478:tid 53522] [client 48.210.12.181:30682] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "aSHVdAhUYdXBbQswAdRDwQAAAE0"]
[Sat Nov 22 23:23:33.314769 2025] [:error] [pid 53478:tid 53509] [client 48.210.12.181:30611] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "aSHVdQhUYdXBbQswAdRDwgAAAEA"]
[Sat Nov 22 23:23:33.610684 2025] [:error] [pid 44259:tid 44263] [client 48.210.12.181:30615] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "aSHVdXXe1xL-_YOdRmT5kAAAAYE"]
[Sat Nov 22 23:23:33.892134 2025] [:error] [pid 53477:tid 53485] [client 48.210.12.181:30619] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "aSHVdX7Lu30Ku9O40aILWAAAAAQ"]
[Sat Nov 22 23:23:34.204746 2025] [:error] [pid 53477:tid 53500] [client 48.210.12.181:30605] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "aSHVdn7Lu30Ku9O40aILWQAAABM"]
[Sat Nov 22 23:23:34.572198 2025] [:error] [pid 53477:tid 53484] [client 48.210.12.181:30539] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "aSHVdn7Lu30Ku9O40aILWwAAAAM"]
[Sat Nov 22 23:23:35.042482 2025] [:error] [pid 53477:tid 53505] [client 48.210.12.181:30643] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "aSHVd37Lu30Ku9O40aILXQAAABg"]
[Sat Nov 22 23:23:35.462084 2025] [:error] [pid 25856:tid 25859] [client 48.210.12.181:30544] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "aSHVdxsTP0wy94zKUvEPogAAAQE"]
[Sat Nov 22 23:23:35.855893 2025] [:error] [pid 44259:tid 44275] [client 48.210.12.181:30556] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "aSHVd3Xe1xL-_YOdRmT5lwAAAY0"]
[Sat Nov 22 23:23:36.258146 2025] [:error] [pid 53566:tid 53573] [client 48.210.12.181:30684] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dejavu.php"] [unique_id "aSHVeMbSHDBkRbwMbd59HgAAAMU"]
[Sat Nov 22 23:23:36.586126 2025] [:error] [pid 44259:tid 44267] [client 48.210.12.181:30640] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dejavu.php"] [unique_id "aSHVeHXe1xL-_YOdRmT5mQAAAYU"]
[Sat Nov 22 23:23:36.909803 2025] [:error] [pid 9547:tid 9572] [client 48.210.12.181:30616] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dejavu.php"] [unique_id "aSHVeNClOR5qk7DoMeEdSgAAAVM"]
[Sat Nov 22 23:23:37.265329 2025] [:error] [pid 25856:tid 25861] [client 48.210.12.181:30601] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dejavu.php"] [unique_id "aSHVeRsTP0wy94zKUvEPtAAAAQM"]
[Sat Nov 22 23:23:37.645095 2025] [:error] [pid 53479:tid 53551] [client 48.210.12.181:30599] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aSHVeW6cicFF3Aas-oTrxAAAAI8"]
[Sat Nov 22 23:23:37.965424 2025] [:error] [pid 44259:tid 44277] [client 48.210.12.181:30697] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aSHVeXXe1xL-_YOdRmT5mwAAAY8"]
[Sat Nov 22 23:23:38.300679 2025] [:error] [pid 9547:tid 9559] [client 48.210.12.181:30604] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aSHVetClOR5qk7DoMeEdTQAAAUY"]
[Sat Nov 22 23:23:38.621004 2025] [:error] [pid 53566:tid 53582] [client 48.210.12.181:30617] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aSHVesbSHDBkRbwMbd59IQAAAM4"]
[Sat Nov 22 23:23:38.926900 2025] [:error] [pid 53477:tid 53494] [client 48.210.12.181:30706] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "aSHVen7Lu30Ku9O40aILbwAAAA0"]
[Sat Nov 22 23:23:39.256018 2025] [:error] [pid 44259:tid 44266] [client 48.210.12.181:30714] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "aSHVe3Xe1xL-_YOdRmT5oQAAAYQ"]
[Sat Nov 22 23:23:39.498306 2025] [:error] [pid 53479:tid 53540] [client 48.210.12.181:30705] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "aSHVe26cicFF3Aas-oTrxwAAAIQ"]
[Sat Nov 22 23:23:40.073910 2025] [:error] [pid 53479:tid 53539] [client 48.210.12.181:30644] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "aSHVfG6cicFF3Aas-oTryQAAAIM"]
[Sat Nov 22 23:23:40.954633 2025] [:error] [pid 25856:tid 25882] [client 48.210.12.181:30626] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "aSHVfBsTP0wy94zKUvEPuwAAARg"]
[Sat Nov 22 23:23:41.433619 2025] [:error] [pid 44259:tid 44275] [client 48.210.12.181:30660] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "aSHVfXXe1xL-_YOdRmT5pwAAAY0"]
[Sat Nov 22 23:23:41.918446 2025] [:error] [pid 9547:tid 9573] [client 48.210.12.181:30668] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "aSHVfdClOR5qk7DoMeEdYgAAAVQ"]
[Sat Nov 22 23:23:42.209606 2025] [:error] [pid 53479:tid 53547] [client 48.210.12.181:30680] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "aSHVfm6cicFF3Aas-oTrzgAAAIs"]
[Sat Nov 22 23:23:42.588359 2025] [:error] [pid 9547:tid 9562] [client 48.210.12.181:30549] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/past.php"] [unique_id "aSHVftClOR5qk7DoMeEdawAAAUk"]
[Sat Nov 22 23:23:42.911371 2025] [:error] [pid 9547:tid 9564] [client 48.210.12.181:30657] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/past.php"] [unique_id "aSHVftClOR5qk7DoMeEdbgAAAUs"]
[Sat Nov 22 23:23:43.185318 2025] [:error] [pid 53566:tid 53583] [client 48.210.12.181:30704] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/past.php"] [unique_id "aSHVf8bSHDBkRbwMbd59KQAAAM8"]
[Sat Nov 22 23:23:43.474582 2025] [:error] [pid 25856:tid 25872] [client 48.210.12.181:30657] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/past.php"] [unique_id "aSHVfxsTP0wy94zKUvEPvAAAAQ4"]
[Sat Nov 22 23:23:43.754849 2025] [:error] [pid 44259:tid 44278] [client 48.210.12.181:30633] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aSHVf3Xe1xL-_YOdRmT5sgAAAZA"]
[Sat Nov 22 23:23:44.088210 2025] [:error] [pid 53479:tid 53557] [client 48.210.12.181:30618] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aSHVgG6cicFF3Aas-oTr0QAAAJU"]
[Sat Nov 22 23:23:44.345989 2025] [:error] [pid 9547:tid 9557] [client 48.210.12.181:30531] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aSHVgNClOR5qk7DoMeEdewAAAUQ"]
[Sat Nov 22 23:23:44.837080 2025] [:error] [pid 9547:tid 9577] [client 48.210.12.181:30718] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aSHVgNClOR5qk7DoMeEdfAAAAVg"]
[Sat Nov 22 23:23:45.138691 2025] [:error] [pid 53479:tid 53550] [client 48.210.12.181:30685] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aSHVgW6cicFF3Aas-oTr0gAAAI4"]
[Sat Nov 22 23:23:45.461111 2025] [:error] [pid 53479:tid 53558] [client 48.210.12.181:30596] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aSHVgW6cicFF3Aas-oTr1AAAAJY"]
[Sat Nov 22 23:23:45.760623 2025] [:error] [pid 44259:tid 44282] [client 48.210.12.181:30614] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aSHVgXXe1xL-_YOdRmT5uAAAAZQ"]
[Sat Nov 22 23:23:46.069113 2025] [:error] [pid 53479:tid 53540] [client 48.210.12.181:30677] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aSHVgm6cicFF3Aas-oTr1QAAAIQ"]
[Sat Nov 22 23:23:46.337839 2025] [:error] [pid 53566:tid 53568] [client 48.210.12.181:30645] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aSHVgsbSHDBkRbwMbd59NAAAAMA"]
[Sat Nov 22 23:23:46.709850 2025] [:error] [pid 53566:tid 53570] [client 48.210.12.181:30567] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aSHVgsbSHDBkRbwMbd59NgAAAMI"]
[Sat Nov 22 23:23:46.945429 2025] [:error] [pid 44259:tid 44286] [client 48.210.12.181:30701] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aSHVgnXe1xL-_YOdRmT5vAAAAZg"]
[Sat Nov 22 23:23:47.244430 2025] [:error] [pid 25856:tid 25875] [client 48.210.12.181:30702] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aSHVgxsTP0wy94zKUvEPvgAAARE"]
[Sat Nov 22 23:23:47.499402 2025] [:error] [pid 44259:tid 44266] [client 48.210.12.181:30679] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "aSHVg3Xe1xL-_YOdRmT5vwAAAYQ"]
[Sat Nov 22 23:23:47.830403 2025] [:error] [pid 44259:tid 44264] [client 48.210.12.181:30647] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "aSHVg3Xe1xL-_YOdRmT5wwAAAYI"]
[Sat Nov 22 23:23:48.147425 2025] [:error] [pid 9547:tid 9565] [client 48.210.12.181:30667] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "aSHVhNClOR5qk7DoMeEdfgAAAUw"]
[Sat Nov 22 23:23:48.478103 2025] [:error] [pid 44259:tid 44276] [client 48.210.12.181:30625] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "aSHVhHXe1xL-_YOdRmT5xAAAAY4"]
[Sat Nov 22 23:23:48.847672 2025] [:error] [pid 53566:tid 53587] [client 48.210.12.181:30660] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aSHVhMbSHDBkRbwMbd59OwAAANM"]
[Sat Nov 22 23:23:49.253394 2025] [:error] [pid 9547:tid 9564] [client 48.210.12.181:30715] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aSHVhdClOR5qk7DoMeEdfwAAAUs"]
[Sat Nov 22 23:23:49.636054 2025] [:error] [pid 53478:tid 53526] [client 48.210.12.181:30622] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aSHVhQhUYdXBbQswAdRD5gAAAFE"]
[Sat Nov 22 23:23:50.070257 2025] [:error] [pid 25856:tid 25880] [client 48.210.12.181:30636] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aSHVhhsTP0wy94zKUvEPwQAAARY"]
[Sat Nov 22 23:23:50.402353 2025] [:error] [pid 53566:tid 53586] [client 48.210.12.181:30592] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/build.php"] [unique_id "aSHVhsbSHDBkRbwMbd59QgAAANI"]
[Sat Nov 22 23:23:50.849194 2025] [:error] [pid 44259:tid 44286] [client 48.210.12.181:30600] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/build.php"] [unique_id "aSHVhnXe1xL-_YOdRmT5xwAAAZg"]
[Sat Nov 22 23:23:51.143939 2025] [:error] [pid 53566:tid 53571] [client 48.210.12.181:30551] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/build.php"] [unique_id "aSHVh8bSHDBkRbwMbd59RgAAAMM"]
[Sat Nov 22 23:23:51.596256 2025] [:error] [pid 9547:tid 9574] [client 48.210.12.181:30712] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/build.php"] [unique_id "aSHVh9ClOR5qk7DoMeEdgQAAAVU"]
[Sat Nov 22 23:23:51.954198 2025] [:error] [pid 53478:tid 53514] [client 48.210.12.181:30538] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ot.php"] [unique_id "aSHVhwhUYdXBbQswAdRD7wAAAEU"]
[Sat Nov 22 23:23:52.395619 2025] [:error] [pid 44259:tid 44283] [client 48.210.12.181:30655] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ot.php"] [unique_id "aSHViHXe1xL-_YOdRmT5yQAAAZU"]
[Sat Nov 22 23:23:52.782466 2025] [:error] [pid 25856:tid 25862] [client 48.210.12.181:30564] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ot.php"] [unique_id "aSHViBsTP0wy94zKUvEPxwAAAQQ"]
[Sat Nov 22 23:23:53.104829 2025] [:error] [pid 9547:tid 9554] [client 48.210.12.181:30662] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ot.php"] [unique_id "aSHVidClOR5qk7DoMeEdhQAAAUE"]
[Sat Nov 22 23:23:53.557044 2025] [:error] [pid 53566:tid 53584] [client 48.210.12.181:30575] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lc.php"] [unique_id "aSHVicbSHDBkRbwMbd59SwAAANA"]
[Sat Nov 22 23:23:53.977260 2025] [:error] [pid 53478:tid 53513] [client 48.210.12.181:30688] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lc.php"] [unique_id "aSHViQhUYdXBbQswAdRD8AAAAEQ"]
[Sat Nov 22 23:23:54.309156 2025] [:error] [pid 25856:tid 25863] [client 48.210.12.181:30612] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lc.php"] [unique_id "aSHVihsTP0wy94zKUvEPygAAAQU"]
[Sat Nov 22 23:23:54.640494 2025] [:error] [pid 53566:tid 53573] [client 48.210.12.181:30631] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lc.php"] [unique_id "aSHVisbSHDBkRbwMbd59TwAAAMU"]
[Sat Nov 22 23:23:55.102049 2025] [:error] [pid 53479:tid 53556] [client 48.210.12.181:30554] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cool.php"] [unique_id "aSHVi26cicFF3Aas-oTr6QAAAJQ"]
[Sat Nov 22 23:23:55.386798 2025] [:error] [pid 25856:tid 25860] [client 48.210.12.181:30674] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cool.php"] [unique_id "aSHVixsTP0wy94zKUvEPzgAAAQI"]
[Sat Nov 22 23:23:55.701610 2025] [:error] [pid 53479:tid 53559] [client 48.210.12.181:30558] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cool.php"] [unique_id "aSHVi26cicFF3Aas-oTr6wAAAJc"]
[Sat Nov 22 23:23:55.990170 2025] [:error] [pid 53478:tid 53512] [client 48.210.12.181:30568] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cool.php"] [unique_id "aSHViwhUYdXBbQswAdRD8QAAAEM"]
[Sat Nov 22 23:23:56.288622 2025] [:error] [pid 44259:tid 44274] [client 48.210.12.181:30648] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aSHVjHXe1xL-_YOdRmT54wAAAYw"]
[Sat Nov 22 23:23:56.538875 2025] [:error] [pid 25856:tid 25865] [client 48.210.12.181:30547] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aSHVjBsTP0wy94zKUvEP0AAAAQc"]
[Sat Nov 22 23:23:56.847324 2025] [:error] [pid 53477:tid 53494] [client 48.210.12.181:30537] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aSHVjH7Lu30Ku9O40aILsQAAAA0"]
[Sat Nov 22 23:23:57.082200 2025] [:error] [pid 44259:tid 44284] [client 48.210.12.181:30669] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aSHVjXXe1xL-_YOdRmT55QAAAZY"]
[Sat Nov 22 23:23:57.336247 2025] [:error] [pid 53477:tid 53484] [client 48.210.12.181:30597] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aSHVjX7Lu30Ku9O40aILswAAAAM"]
[Sat Nov 22 23:23:57.601971 2025] [:error] [pid 53478:tid 53522] [client 48.210.12.181:30624] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aSHVjQhUYdXBbQswAdRD8gAAAE0"]
[Sat Nov 22 23:23:57.833021 2025] [:error] [pid 53478:tid 53520] [client 48.210.12.181:30535] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aSHVjQhUYdXBbQswAdRD8wAAAEs"]
[Sat Nov 22 23:23:58.204030 2025] [:error] [pid 44259:tid 44267] [client 48.210.12.181:30543] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aSHVjnXe1xL-_YOdRmT55wAAAYU"]
[Sat Nov 22 23:23:58.442335 2025] [:error] [pid 53566:tid 53576] [client 48.210.12.181:30529] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gfile.php"] [unique_id "aSHVjsbSHDBkRbwMbd59WQAAAMg"]
[Sat Nov 22 23:23:58.687999 2025] [:error] [pid 53478:tid 53518] [client 48.210.12.181:30663] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gfile.php"] [unique_id "aSHVjghUYdXBbQswAdRD9AAAAEk"]
[Sat Nov 22 23:23:58.935191 2025] [:error] [pid 53478:tid 53509] [client 48.210.12.181:30566] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gfile.php"] [unique_id "aSHVjghUYdXBbQswAdRD9QAAAEA"]
[Sat Nov 22 23:23:59.236079 2025] [:error] [pid 53478:tid 53529] [client 48.210.12.181:30498] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gfile.php"] [unique_id "aSHVjwhUYdXBbQswAdRD9gAAAFQ"]
[Sat Nov 22 23:23:59.495943 2025] [:error] [pid 44259:tid 44271] [client 48.210.12.181:30623] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "aSHVj3Xe1xL-_YOdRmT56QAAAYk"]
[Sat Nov 22 23:23:59.747566 2025] [:error] [pid 53566:tid 53587] [client 48.210.12.181:30634] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "aSHVj8bSHDBkRbwMbd59WgAAANM"]
[Sat Nov 22 23:24:00.002739 2025] [:error] [pid 44259:tid 44278] [client 48.210.12.181:30672] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "aSHVkHXe1xL-_YOdRmT57QAAAZA"]
[Sat Nov 22 23:24:00.324621 2025] [:error] [pid 44259:tid 44270] [client 48.210.12.181:30562] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "aSHVkHXe1xL-_YOdRmT57wAAAYg"]
[Sat Nov 22 23:24:00.570686 2025] [:error] [pid 44259:tid 44273] [client 48.210.12.181:30654] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "aSHVkHXe1xL-_YOdRmT58AAAAYs"]
[Sat Nov 22 23:24:00.849416 2025] [:error] [pid 9547:tid 9577] [client 48.210.12.181:30652] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "aSHVkNClOR5qk7DoMeEdoAAAAVg"]
[Sat Nov 22 23:24:01.123677 2025] [:error] [pid 44259:tid 44262] [client 48.210.12.181:30469] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "aSHVkXXe1xL-_YOdRmT58QAAAYA"]
[Sat Nov 22 23:24:01.445446 2025] [:error] [pid 53478:tid 53511] [client 48.210.12.181:30681] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "aSHVkQhUYdXBbQswAdRD-QAAAEI"]
[Sat Nov 22 23:24:01.688934 2025] [:error] [pid 53479:tid 53550] [client 48.210.12.181:30664] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/num.php"] [unique_id "aSHVkW6cicFF3Aas-oTr9QAAAI4"]
[Sat Nov 22 23:24:01.975596 2025] [:error] [pid 53477:tid 53498] [client 48.210.12.181:30676] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/num.php"] [unique_id "aSHVkX7Lu30Ku9O40aILugAAABE"]
[Sat Nov 22 23:24:02.247802 2025] [:error] [pid 53477:tid 53486] [client 48.210.12.181:30632] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/num.php"] [unique_id "aSHVkn7Lu30Ku9O40aILuwAAAAU"]
[Sat Nov 22 23:24:02.551683 2025] [:error] [pid 53566:tid 53579] [client 48.210.12.181:30532] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/num.php"] [unique_id "aSHVksbSHDBkRbwMbd59WwAAAMs"]
[Sat Nov 22 23:24:02.778749 2025] [:error] [pid 53566:tid 53580] [client 48.210.12.181:30586] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/astab.php"] [unique_id "aSHVksbSHDBkRbwMbd59XgAAAMw"]
[Sat Nov 22 23:24:03.097804 2025] [:error] [pid 53477:tid 53481] [client 48.210.12.181:30467] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/astab.php"] [unique_id "aSHVk37Lu30Ku9O40aILvAAAAAA"]
[Sat Nov 22 23:24:03.385416 2025] [:error] [pid 53566:tid 53588] [client 48.210.12.181:30630] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/astab.php"] [unique_id "aSHVk8bSHDBkRbwMbd59XwAAANQ"]
[Sat Nov 22 23:24:03.643044 2025] [:error] [pid 53566:tid 53589] [client 48.210.12.181:30635] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/astab.php"] [unique_id "aSHVk8bSHDBkRbwMbd59YAAAANU"]
[Sat Nov 22 23:24:03.899403 2025] [:error] [pid 53566:tid 53577] [client 48.210.12.181:30495] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xl.php"] [unique_id "aSHVk8bSHDBkRbwMbd59YgAAAMk"]
[Sat Nov 22 23:24:04.144541 2025] [:error] [pid 44259:tid 44284] [client 48.210.12.181:30710] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xl.php"] [unique_id "aSHVlHXe1xL-_YOdRmT58wAAAZY"]
[Sat Nov 22 23:24:04.450283 2025] [:error] [pid 44259:tid 44282] [client 48.210.12.181:30576] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xl.php"] [unique_id "aSHVlHXe1xL-_YOdRmT59QAAAZQ"]
[Sat Nov 22 23:24:04.713177 2025] [:error] [pid 53566:tid 53590] [client 48.210.12.181:30536] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xl.php"] [unique_id "aSHVlMbSHDBkRbwMbd59ZAAAANY"]
[Sat Nov 22 23:24:05.079199 2025] [:error] [pid 9547:tid 9557] [client 48.210.12.181:30550] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file17.php"] [unique_id "aSHVldClOR5qk7DoMeEdqgAAAUQ"]
[Sat Nov 22 23:24:05.354386 2025] [:error] [pid 53479:tid 53556] [client 48.210.12.181:30546] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file17.php"] [unique_id "aSHVlW6cicFF3Aas-oTr-gAAAJQ"]
[Sat Nov 22 23:24:05.638613 2025] [:error] [pid 53566:tid 53569] [client 48.210.12.181:30488] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file17.php"] [unique_id "aSHVlcbSHDBkRbwMbd59ZwAAAME"]
[Sat Nov 22 23:24:05.932812 2025] [:error] [pid 53566:tid 53575] [client 48.210.12.181:30563] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file17.php"] [unique_id "aSHVlcbSHDBkRbwMbd59aQAAAMc"]
[Sat Nov 22 23:24:06.222202 2025] [:error] [pid 53566:tid 53576] [client 48.210.12.181:30510] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pepe.php"] [unique_id "aSHVlsbSHDBkRbwMbd59agAAAMg"]
[Sat Nov 22 23:24:06.519688 2025] [:error] [pid 44259:tid 44286] [client 48.210.12.181:30656] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pepe.php"] [unique_id "aSHVlnXe1xL-_YOdRmT5-AAAAZg"]
[Sat Nov 22 23:24:07.111158 2025] [:error] [pid 53478:tid 53519] [client 48.210.12.181:30528] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pepe.php"] [unique_id "aSHVlwhUYdXBbQswAdREAAAAAEo"]
[Sat Nov 22 23:24:07.522587 2025] [:error] [pid 44259:tid 44283] [client 48.210.12.181:30579] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pepe.php"] [unique_id "aSHVl3Xe1xL-_YOdRmT5-gAAAZU"]
[Sat Nov 22 23:24:07.832049 2025] [:error] [pid 53478:tid 53523] [client 48.210.12.181:30570] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aSHVlwhUYdXBbQswAdREAQAAAE4"]
[Sat Nov 22 23:24:08.159622 2025] [:error] [pid 53478:tid 53522] [client 48.210.12.181:30423] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aSHVmAhUYdXBbQswAdREAwAAAE0"]
[Sat Nov 22 23:24:08.435506 2025] [:error] [pid 53479:tid 53555] [client 48.210.12.181:30483] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aSHVmG6cicFF3Aas-oTsAAAAAJM"]
[Sat Nov 22 23:24:08.945277 2025] [:error] [pid 53478:tid 53529] [client 48.210.12.181:30533] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aSHVmAhUYdXBbQswAdREBQAAAFQ"]
[Sat Nov 22 23:24:09.257718 2025] [:error] [pid 9547:tid 9558] [client 48.210.12.181:30571] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aSHVmdClOR5qk7DoMeEdtAAAAUU"]
[Sat Nov 22 23:24:09.619750 2025] [:error] [pid 44259:tid 44262] [client 48.210.12.181:30574] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aSHVmXXe1xL-_YOdRmT5_AAAAYA"]
[Sat Nov 22 23:24:10.115446 2025] [:error] [pid 44259:tid 44277] [client 48.210.12.181:30651] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aSHVmnXe1xL-_YOdRmT5_gAAAY8"]
[Sat Nov 22 23:24:10.473454 2025] [:error] [pid 53479:tid 53545] [client 48.210.12.181:30670] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aSHVmm6cicFF3Aas-oTsBwAAAIk"]
[Sat Nov 22 23:24:10.805916 2025] [:error] [pid 53479:tid 53537] [client 48.210.12.181:30675] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "aSHVmm6cicFF3Aas-oTsCQAAAIE"]
[Sat Nov 22 23:24:11.110771 2025] [:error] [pid 53479:tid 53539] [client 48.210.12.181:30620] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "aSHVm26cicFF3Aas-oTsDQAAAIM"]
[Sat Nov 22 23:24:11.444056 2025] [:error] [pid 9547:tid 9559] [client 48.210.12.181:30464] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "aSHVm9ClOR5qk7DoMeEdugAAAUY"]
[Sat Nov 22 23:24:11.791841 2025] [:error] [pid 53477:tid 53485] [client 48.210.12.181:30670] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "aSHVm37Lu30Ku9O40aILvgAAAAQ"]
[Sat Nov 22 23:24:12.135591 2025] [:error] [pid 44259:tid 44280] [client 48.210.12.181:30639] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/faq.php"] [unique_id "aSHVnHXe1xL-_YOdRmT6AQAAAZI"]
[Sat Nov 22 23:24:12.573807 2025] [:error] [pid 53566:tid 53584] [client 48.210.12.181:30708] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/faq.php"] [unique_id "aSHVnMbSHDBkRbwMbd59bgAAANA"]
[Sat Nov 22 23:24:12.864006 2025] [:error] [pid 53478:tid 53530] [client 48.210.12.181:30658] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/faq.php"] [unique_id "aSHVnAhUYdXBbQswAdRECQAAAFU"]
[Sat Nov 22 23:24:13.118896 2025] [:error] [pid 53479:tid 53536] [client 48.210.12.181:30555] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/faq.php"] [unique_id "aSHVnW6cicFF3Aas-oTsFQAAAIA"]
[Sat Nov 22 23:24:13.396810 2025] [:error] [pid 53479:tid 53550] [client 48.210.12.181:30491] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aSHVnW6cicFF3Aas-oTsFwAAAI4"]
[Sat Nov 22 23:24:13.694355 2025] [:error] [pid 53478:tid 53516] [client 48.210.12.181:30585] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aSHVnQhUYdXBbQswAdRECgAAAEc"]
[Sat Nov 22 23:24:13.981487 2025] [:error] [pid 53477:tid 53494] [client 48.210.12.181:30588] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aSHVnX7Lu30Ku9O40aILwQAAAA0"]
[Sat Nov 22 23:24:14.288257 2025] [:error] [pid 53566:tid 53581] [client 48.210.12.181:30565] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aSHVnsbSHDBkRbwMbd59bwAAAM0"]
[Sat Nov 22 23:24:14.623367 2025] [:error] [pid 53478:tid 53515] [client 48.210.12.181:30528] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CLA.php"] [unique_id "aSHVnghUYdXBbQswAdRECwAAAEY"]
[Sat Nov 22 23:24:14.927052 2025] [:error] [pid 44259:tid 44272] [client 48.210.12.181:30589] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CLA.php"] [unique_id "aSHVnnXe1xL-_YOdRmT6BQAAAYo"]
[Sat Nov 22 23:24:15.222304 2025] [:error] [pid 25856:tid 25872] [client 48.210.12.181:30572] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CLA.php"] [unique_id "aSHVnxsTP0wy94zKUvEP3QAAAQ4"]
[Sat Nov 22 23:24:15.538683 2025] [:error] [pid 44259:tid 44281] [client 48.210.12.181:30696] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CLA.php"] [unique_id "aSHVn3Xe1xL-_YOdRmT6BgAAAZM"]
[Sat Nov 22 23:24:15.842279 2025] [:error] [pid 53478:tid 53533] [client 48.210.12.181:30707] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aSHVnwhUYdXBbQswAdREDQAAAFg"]
[Sat Nov 22 23:24:16.180170 2025] [:error] [pid 44259:tid 44266] [client 48.210.12.181:30578] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aSHVoHXe1xL-_YOdRmT6BwAAAYQ"]
[Sat Nov 22 23:24:16.516060 2025] [:error] [pid 44259:tid 44278] [client 48.210.12.181:30505] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aSHVoHXe1xL-_YOdRmT6CQAAAZA"]
[Sat Nov 22 23:24:16.766228 2025] [:error] [pid 44259:tid 44283] [client 48.210.12.181:30513] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aSHVoHXe1xL-_YOdRmT6CgAAAZU"]
[Sat Nov 22 23:24:17.071425 2025] [:error] [pid 44259:tid 44270] [client 48.210.12.181:30560] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mn.php"] [unique_id "aSHVoXXe1xL-_YOdRmT6CwAAAYg"]
[Sat Nov 22 23:24:17.390598 2025] [:error] [pid 25856:tid 25875] [client 48.210.12.181:30703] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mn.php"] [unique_id "aSHVoRsTP0wy94zKUvEP4gAAARE"]
[Sat Nov 22 23:24:17.658506 2025] [:error] [pid 25856:tid 25880] [client 48.210.12.181:30591] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mn.php"] [unique_id "aSHVoRsTP0wy94zKUvEP4wAAARY"]
[Sat Nov 22 23:24:17.939201 2025] [:error] [pid 44259:tid 44262] [client 48.210.12.181:30665] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mn.php"] [unique_id "aSHVoXXe1xL-_YOdRmT6DAAAAYA"]
[Sat Nov 22 23:24:18.278928 2025] [:error] [pid 25856:tid 25869] [client 48.210.12.181:30514] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aSHVohsTP0wy94zKUvEP5gAAAQs"]
[Sat Nov 22 23:24:18.543266 2025] [:error] [pid 25856:tid 25877] [client 48.210.12.181:30447] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aSHVohsTP0wy94zKUvEP6AAAARM"]
[Sat Nov 22 23:24:18.913621 2025] [:error] [pid 9547:tid 9558] [client 48.210.12.181:30610] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aSHVotClOR5qk7DoMeEdzAAAAUU"]
[Sat Nov 22 23:24:19.359897 2025] [:error] [pid 44259:tid 44277] [client 48.210.12.181:30541] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aSHVo3Xe1xL-_YOdRmT6DQAAAY8"]
[Sat Nov 22 23:24:19.625869 2025] [:error] [pid 53478:tid 53514] [client 48.210.12.181:30492] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-logiin.php"] [unique_id "aSHVowhUYdXBbQswAdREEQAAAEU"]
[Sat Nov 22 23:24:20.099527 2025] [:error] [pid 53477:tid 53483] [client 48.210.12.181:30629] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-logiin.php"] [unique_id "aSHVpH7Lu30Ku9O40aILygAAAAI"]
[Sat Nov 22 23:24:20.551337 2025] [:error] [pid 53477:tid 53490] [client 48.210.12.181:30695] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-logiin.php"] [unique_id "aSHVpH7Lu30Ku9O40aILywAAAAk"]
[Sat Nov 22 23:24:20.855975 2025] [:error] [pid 44259:tid 44285] [client 48.210.12.181:30713] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-logiin.php"] [unique_id "aSHVpHXe1xL-_YOdRmT6EQAAAZc"]
[Sun Nov 23 05:15:43.350089 2025] [:error] [pid 38739:tid 38782] [client 52.176.49.109:6723] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.bing.com/
[Sun Nov 23 05:15:43.542316 2025] [:error] [pid 38739:tid 38785] [client 52.176.49.109:6723] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.de/
[Sun Nov 23 05:15:43.748382 2025] [:error] [pid 38739:tid 38780] [client 52.176.49.109:6723] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.de/
[Sun Nov 23 05:15:43.939229 2025] [:error] [pid 38739:tid 38790] [client 52.176.49.109:6723] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.de/
[Sun Nov 23 05:15:44.143242 2025] [:error] [pid 38739:tid 38777] [client 52.176.49.109:6723] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.fr/
[Sun Nov 23 05:15:44.333765 2025] [:error] [pid 38739:tid 38773] [client 52.176.49.109:6723] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.bing.com/
[Sun Nov 23 05:15:45.139753 2025] [:error] [pid 38739:tid 38781] [client 52.176.49.109:6723] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.co.uk/
[Sun Nov 23 05:15:45.329869 2025] [:error] [pid 38739:tid 38784] [client 52.176.49.109:6723] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php, referer: https://duckduckgo.com/
[Sun Nov 23 05:15:45.519940 2025] [:error] [pid 38739:tid 38770] [client 52.176.49.109:6723] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://duckduckgo.com/
[Sun Nov 23 05:15:45.725042 2025] [:error] [pid 38739:tid 38792] [client 52.176.49.109:6723] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.bing.com/
[Sun Nov 23 05:15:46.404268 2025] [:error] [pid 38739:tid 38789] [client 52.176.49.109:6723] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php, referer: https://www.yahoo.com/
[Sun Nov 23 05:15:46.598402 2025] [:error] [pid 38739:tid 38788] [client 52.176.49.109:6723] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://www.google.fr/
[Sun Nov 23 05:15:47.114928 2025] [:error] [pid 38739:tid 38771] [client 52.176.49.109:6723] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://duckduckgo.com/
[Sun Nov 23 05:15:47.499093 2025] [:error] [pid 38739:tid 38772] [client 52.176.49.109:6723] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php, referer: https://www.google.co.uk/
[Sun Nov 23 05:15:48.267781 2025] [:error] [pid 38739:tid 38776] [client 52.176.49.109:6723] [client 52.176.49.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSIoBAdvEgJm2n2cDmr7JgAAAEc"], referer: https://www.google.com/
[Sun Nov 23 05:15:48.987865 2025] [:error] [pid 38738:tid 38746] [client 52.176.49.109:3337] [client 52.176.49.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aSIoBAytc6TL9XavPmPG2AAAAAQ"], referer: https://www.google.de/
[Sun Nov 23 05:15:50.777896 2025] [:error] [pid 38739:tid 38783] [client 52.176.49.109:6727] File does not exist: /usr/local/apache/htdocs/suspended-page/wso112233.php, referer: https://www.google.co.uk/
[Sun Nov 23 05:15:51.545065 2025] [:error] [pid 38739:tid 38780] [client 52.176.49.109:6727] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wso112233.php, referer: https://www.google.fr/
[Sun Nov 23 05:15:52.761757 2025] [:error] [pid 38739:tid 38778] [client 52.176.49.109:6727] [client 52.176.49.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aSIoCAdvEgJm2n2cDmr7MQAAAEk"], referer: https://www.bing.com/
[Sun Nov 23 05:15:54.292997 2025] [:error] [pid 44652:tid 44720] [client 52.176.49.109:6983] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php, referer: https://www.yahoo.com/
[Sun Nov 23 05:15:54.711265 2025] [:error] [pid 44652:tid 44729] [client 52.176.49.109:6983] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/shell20211028.php, referer: https://www.google.de/
[Sun Nov 23 05:15:56.152811 2025] [:error] [pid 44652:tid 44717] [client 52.176.49.109:6983] [client 52.176.49.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aSIoDNiQFwsyXQDhwyDB3gAAAQs"], referer: https://www.yahoo.com/
[Sun Nov 23 05:15:57.719086 2025] [:error] [pid 38824:tid 38846] [client 52.176.49.109:4282] File does not exist: /usr/local/apache/htdocs/suspended-page/bala.php, referer: https://www.bing.com/
[Sun Nov 23 05:15:58.134886 2025] [:error] [pid 38824:tid 38827] [client 52.176.49.109:4282] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/bala.php, referer: https://www.bing.com/
[Sun Nov 23 05:15:59.447419 2025] [:error] [pid 38824:tid 38845] [client 52.176.49.109:4282] [client 52.176.49.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/bala.php"] [unique_id "aSIoD08WZjXLvbHTHPfBdQAAANI"], referer: https://duckduckgo.com/
[Sun Nov 23 05:16:00.811677 2025] [:error] [pid 44652:tid 44717] [client 52.176.49.109:3343] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php, referer: https://www.google.fr/
[Sun Nov 23 05:16:01.802974 2025] [:error] [pid 44652:tid 44724] [client 52.176.49.109:3343] [client 52.176.49.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aSIoEdiQFwsyXQDhwyDB7gAAARI"], referer: https://www.yahoo.com/
[Sun Nov 23 05:16:04.314717 2025] [:error] [pid 44652:tid 44709] [client 52.176.49.109:3906] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php, referer: https://www.bing.com/
[Sun Nov 23 05:16:05.320581 2025] [:error] [pid 44652:tid 44712] [client 52.176.49.109:3906] [client 52.176.49.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aSIoFdiQFwsyXQDhwyDB_AAAAQY"], referer: https://www.google.co.uk/
[Sun Nov 23 05:16:06.990472 2025] [:error] [pid 38824:tid 38827] [client 52.176.49.109:4500] File does not exist: /usr/local/apache/htdocs/suspended-page/wsoyanz.php, referer: https://www.yahoo.com/
[Sun Nov 23 05:16:07.240146 2025] [:error] [pid 38824:tid 38828] [client 52.176.49.109:4500] File does not exist: /usr/local/apache/htdocs/suspended-page/yanz.php, referer: https://duckduckgo.com/
[Sun Nov 23 05:16:08.371187 2025] [:error] [pid 38824:tid 38833] [client 52.176.49.109:4500] File does not exist: /usr/local/apache/htdocs/suspended-page/cache-compat.php, referer: https://www.yahoo.com/
[Sun Nov 23 05:16:08.574141 2025] [:error] [pid 38824:tid 38848] [client 52.176.49.109:4500] File does not exist: /usr/local/apache/htdocs/suspended-page/ajax-actions.php, referer: https://www.google.co.uk/
[Sun Nov 23 05:16:09.180457 2025] [:error] [pid 38824:tid 38851] [client 52.176.49.109:4500] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-consar.php, referer: https://www.yahoo.com/
[Sun Nov 23 05:16:09.371068 2025] [:error] [pid 38824:tid 38840] [client 52.176.49.109:4500] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php, referer: https://www.bing.com/
[Sun Nov 23 05:16:09.561291 2025] [:error] [pid 38824:tid 38827] [client 52.176.49.109:4500] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-post.php, referer: https://duckduckgo.com/
[Sun Nov 23 05:16:10.183880 2025] [:error] [pid 38824:tid 38835] [client 52.176.49.109:4500] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.google.co.uk/
[Sun Nov 23 05:16:12.507814 2025] [:error] [pid 38824:tid 38830] [client 52.176.49.109:4500] [client 52.176.49.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.176.49.109, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSIoHE8WZjXLvbHTHPfBpAAAAMM"], referer: https://www.google.de/
[Sun Nov 23 06:20:01.339339 2025] [:error] [pid 38738:tid 38747] [client 167.71.203.246:51045] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sun Nov 23 08:17:08.809359 2025] [:error] [pid 38740:tid 38798] [client 167.71.203.246:51003] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sun Nov 23 16:09:28.760695 2025] [:error] [pid 38738:tid 38765] [client 176.65.132.18:56896] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSLBOAytc6TL9XavPmO88AAAABc"]
[Sun Nov 23 16:42:43.277259 2025] [:error] [pid 38740:tid 38810] [client 140.99.1.27:30157] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Nov 23 16:42:43.442122 2025] [:error] [pid 38740:tid 38818] [client 140.99.1.27:30157] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Nov 23 16:42:43.663316 2025] [:error] [pid 38740:tid 38817] [client 140.99.1.27:30157] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sun Nov 23 16:42:43.810645 2025] [:error] [pid 38740:tid 38817] [client 140.99.1.27:30157] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Nov 23 16:42:43.993024 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.27:30157] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Nov 23 16:42:44.196633 2025] [:error] [pid 38740:tid 38816] [client 140.99.1.27:30157] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Nov 23 16:42:44.369035 2025] [:error] [pid 38740:tid 38806] [client 140.99.1.27:30157] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Nov 23 16:42:44.564194 2025] [:error] [pid 38740:tid 38818] [client 140.99.1.27:30157] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Nov 23 16:42:44.868688 2025] [:error] [pid 38740:tid 38816] [client 140.99.1.27:30157] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Nov 23 16:42:45.265773 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.27:30157] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Nov 23 16:42:45.388355 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.27:30157] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sun Nov 23 16:42:45.499678 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.27:30157] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Nov 23 16:42:45.610470 2025] [:error] [pid 38740:tid 38808] [client 140.99.1.27:30157] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Nov 23 16:42:45.723398 2025] [:error] [pid 38740:tid 38811] [client 140.99.1.27:30157] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Nov 23 16:42:45.922350 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.27:30157] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sun Nov 23 16:42:46.176858 2025] [:error] [pid 38740:tid 38802] [client 140.99.1.27:30157] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Nov 23 16:42:46.580568 2025] [:error] [pid 38740:tid 38802] [client 140.99.1.27:30157] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sun Nov 23 16:42:46.789937 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.27:30157] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Nov 23 16:42:49.638736 2025] [:error] [pid 38740:tid 38802] [client 140.99.1.27:30157] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSLJCQ13QPZSi6O8umWVjwAAAIY"]
[Sun Nov 23 16:42:50.430825 2025] [:error] [pid 16066:tid 16074] [client 140.99.1.52:63841] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSLJCvq-c47Q5mW5E9Fo0gAAAYU"]
[Sun Nov 23 16:42:51.296176 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.32:29991] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Nov 23 16:42:51.731706 2025] [:error] [pid 38740:tid 38815] [client 140.99.1.32:29991] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSLJCw13QPZSi6O8umWV0AAAAJM"]
[Sun Nov 23 16:42:52.293921 2025] [:error] [pid 38824:tid 38835] [client 140.99.1.31:57489] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Nov 23 16:42:52.404851 2025] [:error] [pid 38824:tid 38841] [client 140.99.1.31:57489] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSLJDE8WZjXLvbHTHPezYwAAAM4"]
[Sun Nov 23 16:42:52.984491 2025] [:error] [pid 38824:tid 38851] [client 140.99.1.17:45575] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun Nov 23 16:42:53.669947 2025] [:error] [pid 38824:tid 38834] [client 140.99.1.17:45575] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSLJDU8WZjXLvbHTHPeznAAAAMc"]
[Sun Nov 23 16:42:55.196134 2025] [:error] [pid 38738:tid 38765] [client 140.99.1.48:52275] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSLJDwytc6TL9XavPmP7BwAAABc"]
[Sun Nov 23 16:42:55.499995 2025] [:error] [pid 44652:tid 44719] [client 140.99.1.39:64905] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSLJD9iQFwsyXQDhwyCtYQAAAQ0"]
[Sun Nov 23 16:42:55.713600 2025] [:error] [pid 38740:tid 38800] [client 140.99.1.67:21201] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSLJDw13QPZSi6O8umWWGAAAAIQ"]
[Sun Nov 23 16:42:55.912689 2025] [:error] [pid 38740:tid 38806] [client 140.99.1.48:21453] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSLJDw13QPZSi6O8umWWHQAAAIo"]
[Sun Nov 23 16:42:56.739949 2025] [:error] [pid 38824:tid 38830] [client 140.99.1.78:60409] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSLJEE8WZjXLvbHTHPezzwAAAMM"]
[Sun Nov 23 16:42:57.130984 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.43:27601] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSLJEQ13QPZSi6O8umWWPAAAAIc"]
[Sun Nov 23 16:42:57.837672 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.65:28341] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sun Nov 23 16:42:58.401713 2025] [:error] [pid 38740:tid 38811] [client 140.99.1.65:28341] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "aSLJEg13QPZSi6O8umWWYAAAAI8"]
[Sun Nov 23 16:42:59.209136 2025] [:error] [pid 14602:tid 14642] [client 140.99.1.11:42859] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSLJEx-I77jdD81pU-mXsAAAAVU"]
[Sun Nov 23 16:42:59.682840 2025] [:error] [pid 44652:tid 44709] [client 140.99.1.67:54601] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSLJE9iQFwsyXQDhwyCthwAAAQM"]
[Sun Nov 23 16:42:59.949035 2025] [:error] [pid 38740:tid 38814] [client 140.99.1.72:60401] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sun Nov 23 16:43:00.137959 2025] [:error] [pid 38740:tid 38817] [client 140.99.1.72:60401] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSLJFA13QPZSi6O8umWWhAAAAJU"]
[Sun Nov 23 16:43:00.419394 2025] [:error] [pid 14602:tid 14621] [client 140.99.1.26:44587] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sun Nov 23 16:43:00.972939 2025] [:error] [pid 14602:tid 14623] [client 140.99.1.26:44587] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Nov 23 16:43:01.568153 2025] [:error] [pid 14602:tid 14645] [client 140.99.1.26:44587] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSLJFR-I77jdD81pU-mX5gAAAVg"]
[Sun Nov 23 16:43:01.816674 2025] [:error] [pid 38740:tid 38802] [client 140.99.1.46:37693] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sun Nov 23 16:43:01.984383 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.46:37693] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSLJFQ13QPZSi6O8umWWpwAAAIc"]
[Sun Nov 23 16:43:02.256168 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.33:61717] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Nov 23 16:43:02.487307 2025] [:error] [pid 38740:tid 38809] [client 140.99.1.33:61717] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSLJFg13QPZSi6O8umWWuQAAAI0"]
[Sun Nov 23 16:43:02.714409 2025] [:error] [pid 44652:tid 44725] [client 140.99.1.27:53045] [client 140.99.1.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/images/DJP9.php"] [unique_id "aSLJFtiQFwsyXQDhwyCtoAAAARM"]
[Sun Nov 23 16:43:03.040825 2025] [:error] [pid 44652:tid 44730] [client 140.99.1.2:30015] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSLJF9iQFwsyXQDhwyCtowAAARg"]
[Sun Nov 23 16:43:03.800222 2025] [:error] [pid 14602:tid 14641] [client 140.99.1.28:51623] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sun Nov 23 16:43:03.934226 2025] [:error] [pid 14602:tid 14642] [client 140.99.1.28:51623] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Nov 23 16:43:04.265089 2025] [:error] [pid 14602:tid 14639] [client 140.99.1.28:51623] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSLJGB-I77jdD81pU-mYFQAAAVI"]
[Sun Nov 23 16:43:05.148786 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.47:26373] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSLJGQ13QPZSi6O8umWXDAAAAIc"]
[Sun Nov 23 16:43:05.657301 2025] [:error] [pid 38738:tid 38753] [client 140.99.1.43:44017] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSLJGQytc6TL9XavPmP8LgAAAAs"]
[Sun Nov 23 16:43:05.969917 2025] [:error] [pid 14602:tid 14637] [client 140.99.1.69:24263] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSLJGR-I77jdD81pU-mYLQAAAVA"]
[Sun Nov 23 16:43:10.683905 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.43:45273] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSLJHg13QPZSi6O8umWXpgAAAIA"]
[Sun Nov 23 16:43:11.556152 2025] [:error] [pid 38740:tid 38813] [client 140.99.1.30:24535] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sun Nov 23 16:43:11.655139 2025] [:error] [pid 38740:tid 38819] [client 140.99.1.30:24535] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSLJHw13QPZSi6O8umWXxQAAAJc"]
[Sun Nov 23 16:43:12.584934 2025] [:error] [pid 38739:tid 38774] [client 140.99.1.69:38751] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSLJIAdvEgJm2n2cDmop-AAAAEU"]
[Sun Nov 23 16:43:12.789899 2025] [:error] [pid 38738:tid 38745] [client 140.99.1.14:56719] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSLJIAytc6TL9XavPmP8nwAAAAM"]
[Sun Nov 23 16:43:19.111114 2025] [:error] [pid 44652:tid 44721] [client 140.99.1.13:37519] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Nov 23 16:43:23.873283 2025] [:error] [pid 44652:tid 44726] [client 140.99.1.13:37519] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sun Nov 23 16:43:24.371951 2025] [:error] [pid 44652:tid 44726] [client 140.99.1.13:37519] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSLJLNiQFwsyXQDhwyCu1QAAARQ"]
[Sun Nov 23 16:43:25.069393 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.43:39571] [client 140.99.1.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.43, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSLJLQdvEgJm2n2cDmoq7QAAAE8"]
[Sun Nov 23 16:43:25.197649 2025] [:error] [pid 38739:tid 38792] [client 140.99.1.43:39571] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sun Nov 23 16:43:26.184228 2025] [:error] [pid 38739:tid 38790] [client 140.99.1.43:39571] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sun Nov 23 16:43:26.283873 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.43:39571] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Nov 23 16:43:27.295171 2025] [:error] [pid 38739:tid 38782] [client 140.99.1.43:39571] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSLJLwdvEgJm2n2cDmorGAAAAE0"]
[Sun Nov 23 16:43:28.220909 2025] [:error] [pid 38738:tid 38753] [client 140.99.1.31:45319] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sun Nov 23 16:43:28.333232 2025] [:error] [pid 38738:tid 38765] [client 140.99.1.31:45319] [client 140.99.1.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.31, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSLJMAytc6TL9XavPmP-IwAAABc"]
[Sun Nov 23 16:43:28.647378 2025] [:error] [pid 38738:tid 38766] [client 140.99.1.31:45319] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSLJMAytc6TL9XavPmP-KwAAABg"]
[Sun Nov 23 16:43:29.495255 2025] [:error] [pid 38739:tid 38782] [client 140.99.1.48:29711] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Nov 23 16:43:30.449233 2025] [:error] [pid 38739:tid 38786] [client 140.99.1.48:29711] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Sun Nov 23 16:43:30.839690 2025] [:error] [pid 38739:tid 38775] [client 140.99.1.48:29711] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSLJMgdvEgJm2n2cDmorZgAAAEY"]
[Sun Nov 23 16:43:31.060826 2025] [:error] [pid 44652:tid 44729] [client 140.99.1.9:22719] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Nov 23 16:43:31.453184 2025] [:error] [pid 44652:tid 44709] [client 140.99.1.9:22719] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sun Nov 23 16:43:31.840695 2025] [:error] [pid 44652:tid 44720] [client 140.99.1.9:22719] [client 140.99.1.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Marvins.php"] [unique_id "aSLJM9iQFwsyXQDhwyCvgAAAAQ4"]
[Sun Nov 23 16:43:32.079109 2025] [:error] [pid 38738:tid 38753] [client 140.99.1.74:35585] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sun Nov 23 16:43:32.335408 2025] [:error] [pid 38738:tid 38766] [client 140.99.1.74:35585] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sun Nov 23 16:43:38.053488 2025] [:error] [pid 38738:tid 38766] [client 140.99.1.74:35585] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSLJOgytc6TL9XavPmP_BgAAABg"]
[Sun Nov 23 16:43:38.270404 2025] [:error] [pid 38740:tid 38810] [client 140.99.1.5:28317] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sun Nov 23 16:43:38.790256 2025] [:error] [pid 38740:tid 38807] [client 140.99.1.5:28317] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sun Nov 23 16:43:38.938979 2025] [:error] [pid 38740:tid 38800] [client 140.99.1.5:28317] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSLJOg13QPZSi6O8umWZ8QAAAIQ"]
[Sun Nov 23 16:43:39.289111 2025] [:error] [pid 38740:tid 38800] [client 140.99.1.53:34027] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sun Nov 23 16:43:39.593937 2025] [:error] [pid 38740:tid 38809] [client 140.99.1.53:34027] [client 140.99.1.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.53, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSLJOw13QPZSi6O8umWaHgAAAI0"]
[Sun Nov 23 16:43:39.812011 2025] [:error] [pid 38740:tid 38802] [client 140.99.1.53:34027] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSLJOw13QPZSi6O8umWaIwAAAIY"]
[Sun Nov 23 16:43:41.586007 2025] [:error] [pid 16066:tid 16070] [client 140.99.1.44:52011] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sun Nov 23 16:43:42.517011 2025] [:error] [pid 16066:tid 16078] [client 140.99.1.44:52011] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sun Nov 23 16:43:42.608241 2025] [:error] [pid 16066:tid 16084] [client 140.99.1.44:52011] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSLJPvq-c47Q5mW5E9FtOQAAAY8"]
[Sun Nov 23 16:43:42.959573 2025] [:error] [pid 16066:tid 16083] [client 140.99.1.10:36281] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sun Nov 23 16:43:50.488039 2025] [:error] [pid 16066:tid 16083] [client 140.99.1.10:36281] [client 140.99.1.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.10, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSLJRvq-c47Q5mW5E9FttQAAAY4"]
[Sun Nov 23 16:43:50.655751 2025] [:error] [pid 16066:tid 16079] [client 140.99.1.10:36281] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sun Nov 23 16:43:50.823077 2025] [:error] [pid 16066:tid 16093] [client 140.99.1.10:36281] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Sun Nov 23 16:43:50.928949 2025] [:error] [pid 16066:tid 16082] [client 140.99.1.10:36281] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sun Nov 23 16:43:51.134999 2025] [:error] [pid 16066:tid 16090] [client 140.99.1.10:36281] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSLJR_q-c47Q5mW5E9FtuwAAAZU"]
[Sun Nov 23 16:43:52.399507 2025] [:error] [pid 38739:tid 38789] [client 140.99.1.28:28437] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sun Nov 23 16:43:52.538878 2025] [:error] [pid 38739:tid 38776] [client 140.99.1.28:28437] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSLJSAdvEgJm2n2cDmouGAAAAEc"]
[Sun Nov 23 16:43:52.862366 2025] [:error] [pid 38824:tid 38839] [client 140.99.1.6:39315] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sun Nov 23 16:43:52.981480 2025] [:error] [pid 38824:tid 38834] [client 140.99.1.6:39315] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSLJSE8WZjXLvbHTHPe4mwAAAMc"]
[Sun Nov 23 16:43:53.652508 2025] [:error] [pid 44652:tid 44730] [client 140.99.1.37:49483] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Sun Nov 23 16:43:53.787893 2025] [:error] [pid 44652:tid 44717] [client 140.99.1.37:49483] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSLJSdiQFwsyXQDhwyCxEQAAAQs"]
[Sun Nov 23 16:43:54.156293 2025] [:error] [pid 38739:tid 38781] [client 140.99.1.15:42865] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSLJSgdvEgJm2n2cDmouRAAAAEw"]
[Sun Nov 23 16:43:54.351445 2025] [:error] [pid 38740:tid 38816] [client 140.99.1.73:52937] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sun Nov 23 16:43:54.485645 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.73:52937] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Sun Nov 23 16:43:55.159642 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.73:52937] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSLJSw13QPZSi6O8umWbuQAAAIM"]
[Sun Nov 23 16:43:55.600326 2025] [:error] [pid 38824:tid 38828] [client 140.99.1.8:32327] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSLJS08WZjXLvbHTHPe4zQAAAME"]
[Sun Nov 23 16:43:56.791021 2025] [:error] [pid 14602:tid 14628] [client 140.99.1.68:36099] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSLJTB-I77jdD81pU-mc6QAAAUc"]
[Sun Nov 23 16:43:57.098066 2025] [:error] [pid 38824:tid 38827] [client 140.99.1.72:47973] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Sun Nov 23 16:43:57.445035 2025] [:error] [pid 38824:tid 38834] [client 140.99.1.72:47973] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sun Nov 23 16:43:57.565002 2025] [:error] [pid 38824:tid 38832] [client 140.99.1.72:47973] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSLJTU8WZjXLvbHTHPe49gAAAMU"]
[Sun Nov 23 16:43:57.815746 2025] [:error] [pid 16066:tid 16077] [client 140.99.1.26:65443] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sun Nov 23 16:43:58.090896 2025] [:error] [pid 16066:tid 16091] [client 140.99.1.26:65443] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSLJTvq-c47Q5mW5E9FuGQAAAZY"]
[Sun Nov 23 16:43:58.837328 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.46:37073] [client 140.99.1.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/wp-conflg.php"] [unique_id "aSLJTg13QPZSi6O8umWcLwAAAIc"]
[Sun Nov 23 16:43:59.526354 2025] [:error] [pid 16066:tid 16077] [client 140.99.1.6:25965] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSLJT_q-c47Q5mW5E9FuNwAAAYg"]
[Sun Nov 23 16:43:59.872450 2025] [:error] [pid 14602:tid 14630] [client 140.99.1.2:41263] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Nov 23 16:44:01.063129 2025] [:error] [pid 14602:tid 14641] [client 140.99.1.2:41263] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sun Nov 23 16:44:01.726329 2025] [:error] [pid 14602:tid 14639] [client 140.99.1.2:41263] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sun Nov 23 16:44:01.845190 2025] [:error] [pid 14602:tid 14645] [client 140.99.1.2:41263] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSLJUR-I77jdD81pU-mdZwAAAVg"]
[Sun Nov 23 16:44:02.056702 2025] [:error] [pid 44652:tid 44715] [client 140.99.1.5:56699] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSLJUtiQFwsyXQDhwyCx_gAAAQk"]
[Sun Nov 23 16:44:02.302796 2025] [:error] [pid 38738:tid 38760] [client 140.99.1.10:42231] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSLJUgytc6TL9XavPmMA0wAAABI"]
[Sun Nov 23 16:44:02.529394 2025] [:error] [pid 38824:tid 38830] [client 140.99.1.28:56451] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSLJUk8WZjXLvbHTHPe5cwAAAMM"]
[Sun Nov 23 16:44:02.814514 2025] [:error] [pid 38824:tid 38844] [client 140.99.1.72:53959] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Sun Nov 23 16:44:02.920977 2025] [:error] [pid 38824:tid 38848] [client 140.99.1.72:53959] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSLJUk8WZjXLvbHTHPe5egAAANU"]
[Sun Nov 23 16:44:03.148871 2025] [:error] [pid 44652:tid 44710] [client 140.99.1.16:47769] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSLJU9iQFwsyXQDhwyCyJgAAAQQ"]
[Sun Nov 23 16:44:03.516266 2025] [:error] [pid 14602:tid 14631] [client 140.99.1.15:26639] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sun Nov 23 16:44:03.754205 2025] [:error] [pid 14602:tid 14640] [client 140.99.1.15:26639] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSLJUx-I77jdD81pU-mdmAAAAVM"]
[Sun Nov 23 16:44:03.969030 2025] [:error] [pid 38824:tid 38832] [client 140.99.1.38:62205] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSLJU08WZjXLvbHTHPe5mAAAAMU"]
[Sun Nov 23 16:44:04.162325 2025] [:error] [pid 38740:tid 38809] [client 140.99.1.38:37487] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSLJVA13QPZSi6O8umWcxAAAAI0"]
[Sun Nov 23 16:44:04.400377 2025] [:error] [pid 38740:tid 38811] [client 140.99.1.6:48465] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSLJVA13QPZSi6O8umWcygAAAI8"]
[Sun Nov 23 16:44:05.512456 2025] [:error] [pid 16066:tid 16070] [client 140.99.1.8:54629] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSLJVfq-c47Q5mW5E9FupAAAAYE"]
[Sun Nov 23 16:44:06.213206 2025] [:error] [pid 38824:tid 38835] [client 140.99.1.27:59773] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSLJVk8WZjXLvbHTHPe5uwAAAMg"]
[Sun Nov 23 16:44:06.449256 2025] [:error] [pid 16066:tid 16076] [client 140.99.1.52:25403] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sun Nov 23 16:44:07.311761 2025] [:error] [pid 16066:tid 16072] [client 140.99.1.52:25403] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Sun Nov 23 16:44:07.777044 2025] [:error] [pid 16066:tid 16078] [client 140.99.1.52:25403] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSLJV_q-c47Q5mW5E9Fu3gAAAYk"]
[Sun Nov 23 16:44:08.202285 2025] [:error] [pid 44652:tid 44719] [client 140.99.1.77:57225] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Sun Nov 23 16:44:08.314304 2025] [:error] [pid 44652:tid 44728] [client 140.99.1.77:57225] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Sun Nov 23 16:44:09.369090 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.77:57225] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSLJWdiQFwsyXQDhwyCytwAAAQc"]
[Sun Nov 23 16:44:09.945917 2025] [:error] [pid 16066:tid 16079] [client 140.99.1.13:54691] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSLJWfq-c47Q5mW5E9FvKwAAAYo"]
[Sun Nov 23 16:44:10.263018 2025] [:error] [pid 38824:tid 38828] [client 140.99.1.6:26083] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSLJWk8WZjXLvbHTHPe6FAAAAME"]
[Sun Nov 23 16:44:19.035402 2025] [:error] [pid 16066:tid 16081] [client 140.99.1.26:43441] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSLJY_q-c47Q5mW5E9FwAQAAAYw"]
[Sun Nov 23 16:44:19.629000 2025] [:error] [pid 38740:tid 38809] [client 140.99.1.73:27761] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sun Nov 23 16:44:19.820955 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.73:27761] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Sun Nov 23 16:44:19.942010 2025] [:error] [pid 38740:tid 38810] [client 140.99.1.73:27761] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Sun Nov 23 16:44:20.073146 2025] [:error] [pid 38740:tid 38814] [client 140.99.1.73:27761] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Sun Nov 23 16:44:20.845940 2025] [:error] [pid 38740:tid 38819] [client 140.99.1.73:27761] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSLJZA13QPZSi6O8umWeagAAAJc"]
[Sun Nov 23 16:44:21.291003 2025] [:error] [pid 38738:tid 38748] [client 140.99.1.30:25317] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSLJZQytc6TL9XavPmMCbAAAAAY"]
[Sun Nov 23 16:44:21.555086 2025] [:error] [pid 38740:tid 38807] [client 140.99.1.8:61609] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSLJZQ13QPZSi6O8umWegAAAAIs"]
[Sun Nov 23 16:44:21.865719 2025] [:error] [pid 16066:tid 16073] [client 140.99.1.17:50185] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSLJZfq-c47Q5mW5E9FwNQAAAYQ"]
[Sun Nov 23 16:44:22.096635 2025] [:error] [pid 16066:tid 16078] [client 140.99.1.52:47975] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSLJZvq-c47Q5mW5E9FwPgAAAYk"]
[Sun Nov 23 16:44:22.293683 2025] [:error] [pid 16066:tid 16075] [client 140.99.1.53:52055] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSLJZvq-c47Q5mW5E9FwRAAAAYY"]
[Sun Nov 23 16:44:22.764447 2025] [:error] [pid 14602:tid 14627] [client 140.99.1.69:53943] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSLJZh-I77jdD81pU-mf1wAAAUY"]
[Sun Nov 23 16:44:23.003986 2025] [:error] [pid 38738:tid 38746] [client 140.99.1.17:31869] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSLJZwytc6TL9XavPmMCgwAAAAQ"]
[Sun Nov 23 16:44:23.213643 2025] [:error] [pid 38824:tid 38844] [client 140.99.1.11:37263] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSLJZ08WZjXLvbHTHPe7NwAAANE"]
[Sun Nov 23 16:44:28.531567 2025] [:error] [pid 16066:tid 16078] [client 140.99.1.26:41977] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSLJbPq-c47Q5mW5E9Fw1wAAAYk"]
[Sun Nov 23 16:44:29.600130 2025] [:error] [pid 38739:tid 38793] [client 140.99.1.47:61003] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSLJbQdvEgJm2n2cDmoxJwAAAFg"]
[Sun Nov 23 16:44:30.071793 2025] [:error] [pid 38740:tid 38802] [client 140.99.1.71:46165] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSLJbg13QPZSi6O8umWfLwAAAIY"]
[Sun Nov 23 16:44:30.291253 2025] [:error] [pid 14602:tid 14622] [client 140.99.1.11:27903] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sun Nov 23 16:44:30.739715 2025] [:error] [pid 14602:tid 14642] [client 140.99.1.11:27903] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSLJbh-I77jdD81pU-mgXgAAAVU"]
[Sun Nov 23 16:44:31.261317 2025] [:error] [pid 38824:tid 38828] [client 140.99.1.48:51319] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSLJb08WZjXLvbHTHPe72wAAAME"]
[Sun Nov 23 16:44:32.610904 2025] [:error] [pid 44652:tid 44717] [client 140.99.1.76:61741] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sun Nov 23 16:44:32.769802 2025] [:error] [pid 44652:tid 44711] [client 140.99.1.76:61741] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSLJcNiQFwsyXQDhwyC0eQAAAQU"]
[Sun Nov 23 16:44:33.062849 2025] [:error] [pid 16066:tid 16086] [client 140.99.1.73:20657] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sun Nov 23 16:44:33.168138 2025] [:error] [pid 16066:tid 16087] [client 140.99.1.73:20657] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Sun Nov 23 16:44:33.288680 2025] [:error] [pid 16066:tid 16091] [client 140.99.1.73:20657] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Sun Nov 23 16:44:33.456596 2025] [:error] [pid 16066:tid 16081] [client 140.99.1.73:20657] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSLJcfq-c47Q5mW5E9FxPQAAAYw"]
[Sun Nov 23 16:44:33.787467 2025] [:error] [pid 38824:tid 38838] [client 140.99.1.69:33023] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sun Nov 23 16:44:33.913739 2025] [:error] [pid 38824:tid 38830] [client 140.99.1.69:33023] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSLJcU8WZjXLvbHTHPe8BwAAAMM"]
[Sun Nov 23 16:44:34.435236 2025] [:error] [pid 38824:tid 38831] [client 140.99.1.42:54911] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Nov 23 16:44:34.582314 2025] [:error] [pid 38824:tid 38846] [client 140.99.1.42:54911] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Nov 23 16:44:34.805826 2025] [:error] [pid 38824:tid 38845] [client 140.99.1.42:54911] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Sun Nov 23 16:44:35.355974 2025] [:error] [pid 38824:tid 38842] [client 140.99.1.42:54911] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sun Nov 23 16:44:35.467266 2025] [:error] [pid 38824:tid 38840] [client 140.99.1.42:54911] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Sun Nov 23 16:44:36.103994 2025] [:error] [pid 38824:tid 38840] [client 140.99.1.42:54911] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Sun Nov 23 16:44:36.658466 2025] [:error] [pid 38824:tid 38831] [client 140.99.1.42:54911] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sun Nov 23 16:44:36.847334 2025] [:error] [pid 38824:tid 38840] [client 140.99.1.42:54911] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSLJdE8WZjXLvbHTHPe8NAAAAM0"]
[Sun Nov 23 16:44:37.064668 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.78:35659] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSLJdU8WZjXLvbHTHPe8NgAAANc"]
[Sun Nov 23 16:44:37.284779 2025] [:error] [pid 38740:tid 38800] [client 140.99.1.67:22017] [client 140.99.1.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.67, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSLJdQ13QPZSi6O8umWgBAAAAIQ"]
[Sun Nov 23 16:44:37.304651 2025] [:error] [pid 38740:tid 38800] [client 140.99.1.67:22017] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 23 16:44:37.400357 2025] [:error] [pid 38740:tid 38802] [client 140.99.1.67:22017] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sun Nov 23 16:44:37.508041 2025] [:error] [pid 38740:tid 38801] [client 140.99.1.67:22017] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSLJdQ13QPZSi6O8umWgEgAAAIU"]
[Sun Nov 23 16:44:37.986872 2025] [:error] [pid 38740:tid 38811] [client 140.99.1.37:28707] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun Nov 23 16:44:38.094005 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.37:28707] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSLJdg13QPZSi6O8umWgKgAAAIE"]
[Sun Nov 23 16:44:38.373013 2025] [:error] [pid 38740:tid 38818] [client 140.99.1.62:59745] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSLJdg13QPZSi6O8umWgMAAAAJY"]
[Sun Nov 23 16:44:39.400468 2025] [:error] [pid 14602:tid 14628] [client 140.99.1.74:21353] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSLJdx-I77jdD81pU-mgxQAAAUc"]
[Sun Nov 23 16:44:39.629592 2025] [:error] [pid 38739:tid 38777] [client 140.99.1.70:42397] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aSLJdwdvEgJm2n2cDmoyFQAAAEg"]
[Sun Nov 23 16:44:40.205007 2025] [:error] [pid 14602:tid 14645] [client 140.99.1.78:29419] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sun Nov 23 16:44:40.513013 2025] [:error] [pid 14602:tid 14625] [client 140.99.1.78:29419] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSLJeB-I77jdD81pU-mg3AAAAUQ"]
[Sun Nov 23 16:44:41.231876 2025] [:error] [pid 38740:tid 38816] [client 140.99.1.2:58605] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Sun Nov 23 16:44:49.963813 2025] [:error] [pid 38740:tid 38811] [client 140.99.1.2:58605] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSLJgQ13QPZSi6O8umWhXQAAAI8"]
[Sun Nov 23 16:44:51.057029 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.27:41985] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aSLJgwytc6TL9XavPmME_QAAAAI"]
[Sun Nov 23 16:44:51.494351 2025] [:error] [pid 16066:tid 16086] [client 140.99.1.15:57791] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Sun Nov 23 16:44:51.674188 2025] [:error] [pid 16066:tid 16082] [client 140.99.1.15:57791] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSLJg_q-c47Q5mW5E9FyugAAAY0"]
[Sun Nov 23 16:44:51.959173 2025] [:error] [pid 38739:tid 38778] [client 140.99.1.47:26643] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSLJgwdvEgJm2n2cDmoy5gAAAEk"]
[Sun Nov 23 16:44:52.243258 2025] [:error] [pid 38738:tid 38758] [client 140.99.1.39:58751] [client 140.99.1.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aSLJhAytc6TL9XavPmMFFwAAABA"]
[Sun Nov 23 16:44:53.856756 2025] [:error] [pid 38740:tid 38800] [client 140.99.1.52:51325] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Sun Nov 23 16:44:53.974465 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.52:51325] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Sun Nov 23 16:44:54.305645 2025] [:error] [pid 38740:tid 38817] [client 140.99.1.52:51325] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sun Nov 23 16:44:54.594000 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.52:51325] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aSLJhg13QPZSi6O8umWh7gAAAIM"]
[Sun Nov 23 16:44:54.962411 2025] [:error] [pid 38740:tid 38818] [client 140.99.1.39:45335] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSLJhg13QPZSi6O8umWh-QAAAJY"]
[Sun Nov 23 16:44:55.742950 2025] [:error] [pid 38740:tid 38816] [client 140.99.1.6:60421] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Nov 23 16:44:55.922818 2025] [:error] [pid 38740:tid 38813] [client 140.99.1.6:60421] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSLJhw13QPZSi6O8umWiHgAAAJE"]
[Sun Nov 23 16:44:56.210149 2025] [:error] [pid 14602:tid 14630] [client 140.99.1.5:37381] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSLJiB-I77jdD81pU-mh-AAAAUk"]
[Sun Nov 23 16:44:56.503478 2025] [:error] [pid 44652:tid 44730] [client 140.99.1.32:30271] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSLJiNiQFwsyXQDhwyC3IgAAARg"]
[Sun Nov 23 16:44:57.327645 2025] [:error] [pid 38824:tid 38844] [client 140.99.1.65:63095] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Sun Nov 23 16:44:57.464874 2025] [:error] [pid 38824:tid 38833] [client 140.99.1.65:63095] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSLJiU8WZjXLvbHTHPe9WAAAAMY"]
[Sun Nov 23 16:44:58.014966 2025] [:error] [pid 44652:tid 44719] [client 140.99.1.50:31075] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSLJitiQFwsyXQDhwyC3NAAAAQ0"]
[Sun Nov 23 16:44:58.251652 2025] [:error] [pid 38739:tid 38781] [client 140.99.1.78:52331] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sun Nov 23 16:44:58.390727 2025] [:error] [pid 38739:tid 38780] [client 140.99.1.78:52331] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Sun Nov 23 16:44:58.642414 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.78:52331] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sun Nov 23 16:44:59.246809 2025] [:error] [pid 38739:tid 38787] [client 140.99.1.78:52331] [client 140.99.1.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.78, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/js/wp-login.php"] [unique_id "aSLJiwdvEgJm2n2cDmozQwAAAFI"]
[Sun Nov 23 16:44:59.483138 2025] [:error] [pid 38739:tid 38781] [client 140.99.1.78:52331] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Sun Nov 23 16:44:59.588993 2025] [:error] [pid 38739:tid 38786] [client 140.99.1.78:52331] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Sun Nov 23 16:44:59.683519 2025] [:error] [pid 38739:tid 38774] [client 140.99.1.78:52331] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Sun Nov 23 16:44:59.939908 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.78:52331] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSLJiwdvEgJm2n2cDmozVQAAAE8"]
[Sun Nov 23 16:45:00.164807 2025] [:error] [pid 16066:tid 16085] [client 140.99.1.48:54487] [client 140.99.1.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.48, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSLJjPq-c47Q5mW5E9FzvgAAAZA"]
[Sun Nov 23 16:45:00.718795 2025] [:error] [pid 16066:tid 16071] [client 140.99.1.48:54487] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Nov 23 16:45:00.974817 2025] [:error] [pid 16066:tid 16081] [client 140.99.1.48:54487] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Sun Nov 23 16:45:01.274836 2025] [:error] [pid 16066:tid 16085] [client 140.99.1.48:54487] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Sun Nov 23 16:45:01.718506 2025] [:error] [pid 16066:tid 16071] [client 140.99.1.5:61157] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Mon Nov 24 00:24:51.975303 2025] [:error] [pid 1453:tid 1495] [client 176.65.132.18:35316] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSM1UxUBCt7LU0bO_GA7KAAAAIo"]
[Mon Nov 24 03:50:01.673836 2025] [:error] [pid 56964:tid 56973] [client 172.200.109.98:36808] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.yahoo.com/
[Mon Nov 24 03:50:01.890916 2025] [:error] [pid 56964:tid 56969] [client 172.200.109.98:36808] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.co.uk/
[Mon Nov 24 03:50:03.430496 2025] [:error] [pid 56964:tid 56969] [client 172.200.109.98:36808] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.de/
[Mon Nov 24 03:50:03.642923 2025] [:error] [pid 56964:tid 56966] [client 172.200.109.98:36808] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.fr/
[Mon Nov 24 03:50:03.912992 2025] [:error] [pid 56964:tid 56971] [client 172.200.109.98:36808] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.de/
[Mon Nov 24 03:50:04.126445 2025] [:error] [pid 56964:tid 56983] [client 172.200.109.98:36808] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.google.com/
[Mon Nov 24 03:50:04.689872 2025] [:error] [pid 56964:tid 56987] [client 172.200.109.98:36808] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.co.uk/
[Mon Nov 24 03:50:04.926778 2025] [:error] [pid 56964:tid 56972] [client 172.200.109.98:36808] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php, referer: https://www.google.co.uk/
[Mon Nov 24 03:50:05.141066 2025] [:error] [pid 56964:tid 56973] [client 172.200.109.98:36808] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.com/
[Mon Nov 24 03:50:05.359527 2025] [:error] [pid 56964:tid 56968] [client 172.200.109.98:36808] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.fr/
[Mon Nov 24 03:50:05.591716 2025] [:error] [pid 56964:tid 56974] [client 172.200.109.98:36808] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php, referer: https://duckduckgo.com/
[Mon Nov 24 03:50:05.804832 2025] [:error] [pid 56964:tid 56986] [client 172.200.109.98:36808] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://www.google.com/
[Mon Nov 24 03:50:06.017715 2025] [:error] [pid 56964:tid 56989] [client 172.200.109.98:36808] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.fr/
[Mon Nov 24 03:50:22.278259 2025] [autoindex:error] [pid 56964:tid 56966] [client 172.200.109.98:36808] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Nov 24 13:40:13.574484 2025] [:error] [pid 48688:tid 48700] [client 216.26.249.237:19149] [client 216.26.249.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/HEAD"] [unique_id "aSPvvRm2q1FkzLam7A13NgAAAkg"]
[Mon Nov 24 13:40:16.531844 2025] [:error] [pid 48688:tid 48702] [client 209.50.161.44:58157] [client 209.50.161.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aSPvwBm2q1FkzLam7A13OAAAAko"]
[Mon Nov 24 13:40:17.794683 2025] [:error] [pid 49900:tid 49912] [client 65.111.0.229:50387] [client 65.111.0.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.svn/wc.db"] [unique_id "aSPvwTCyPLrvg06aorneXgAAAAo"]
[Tue Nov 25 05:54:53.943646 2025] [:error] [pid 14168:tid 14188] [client 147.185.41.135:40132] [client 147.185.41.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSTULfR-ZDU0QEgAIIt5JgAAANE"]
[Tue Nov 25 09:32:27.489920 2025] [:error] [pid 1103:tid 1132] [client 65.111.30.56:11025] [client 65.111.30.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/HEAD"] [unique_id "aSUHK40LETdqOlq63sRNDgAAAVc"]
[Tue Nov 25 09:32:29.381263 2025] [:error] [pid 14076:tid 14087] [client 209.50.163.227:10417] [client 209.50.163.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aSUHLXsB4Gz6Qw-pvBtGbQAAAAY"]
[Tue Nov 25 09:32:30.506610 2025] [:error] [pid 14688:tid 14707] [client 104.207.43.231:58005] [client 104.207.43.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.svn/wc.db"] [unique_id "aSUHLm9vYrBoEsiDniwl6AAAARE"]
[Tue Nov 25 18:53:15.180024 2025] [:error] [pid 28740:tid 28798] [client 138.199.60.187:54940] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aSWKm1ppQCoYxWW6V0VyxQAAAkc"]
[Tue Nov 25 18:53:15.478047 2025] [:error] [pid 14078:tid 14149] [client 138.199.60.187:55122] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aSWKm9VXYbb0ii_rVoI4AQAAAIw"]
[Tue Nov 25 18:53:15.700456 2025] [:error] [pid 2987:tid 2999] [client 138.199.60.187:55370] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aSWKm8-djEt-pTzPxnyUOQAAAUo"]
[Tue Nov 25 18:53:15.967692 2025] [:error] [pid 28740:tid 28813] [client 138.199.60.187:55618] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aSWKm1ppQCoYxWW6V0Vy7QAAAlY"]
[Tue Nov 25 18:53:16.248819 2025] [:error] [pid 14077:tid 14130] [client 138.199.60.187:55836] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aSWKnBG9n7UHEkwDTyh-cwAAAFQ"]
[Tue Nov 25 18:53:16.476612 2025] [:error] [pid 28740:tid 28812] [client 138.199.60.187:56040] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKnFppQCoYxWW6V0VzCgAAAlU"]
[Tue Nov 25 18:53:16.724056 2025] [:error] [pid 28609:tid 28618] [client 138.199.60.187:56300] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKnCGGdT-nZJVs3x25GgAAAYA"]
[Tue Nov 25 18:53:17.005399 2025] [:error] [pid 14077:tid 14127] [client 138.199.60.187:56544] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKnRG9n7UHEkwDTyh-hQAAAFE"]
[Tue Nov 25 18:53:17.275962 2025] [:error] [pid 28836:tid 28962] [client 138.199.60.187:56866] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKnZwNRsoxcLQGkTe31QAAAsc"]
[Tue Nov 25 18:53:17.524673 2025] [:error] [pid 28740:tid 28809] [client 138.199.60.187:57040] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKnVppQCoYxWW6V0VzLQAAAlI"]
[Tue Nov 25 21:08:22.246971 2025] [:error] [pid 14078:tid 14138] [client 54.173.250.15:44374] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSWqRtVXYbb0ii_rVoJqFgAAAIE"]
[Tue Nov 25 23:20:03.857599 2025] [:error] [pid 43981:tid 43987] [client 52.156.23.50:52857] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://duckduckgo.com/
[Tue Nov 25 23:20:04.068366 2025] [:error] [pid 43981:tid 43983] [client 52.156.23.50:52857] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.de/
[Tue Nov 25 23:20:04.362699 2025] [:error] [pid 43981:tid 44005] [client 52.156.23.50:52857] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://duckduckgo.com/
[Tue Nov 25 23:20:04.573206 2025] [:error] [pid 43981:tid 44003] [client 52.156.23.50:52857] File does not exist: /usr/local/apache/htdocs/suspended-page/.__info.php, referer: https://www.google.fr/
[Tue Nov 25 23:20:05.085161 2025] [:error] [pid 43981:tid 43988] [client 52.156.23.50:52857] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://duckduckgo.com/
[Tue Nov 25 23:20:05.440669 2025] [:error] [pid 43981:tid 43994] [client 52.156.23.50:52857] [client 52.156.23.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.156.23.50, incrementing ddos counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aSXJJQgZn97m_qh_RaGDUgAAAws"], referer: https://www.bing.com/
[Tue Nov 25 23:20:05.444963 2025] [:error] [pid 43981:tid 43994] [client 52.156.23.50:52857] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://www.bing.com/
[Tue Nov 25 23:20:05.867047 2025] [:error] [pid 43981:tid 43997] [client 52.156.23.50:52857] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php, referer: https://www.yahoo.com/
[Tue Nov 25 23:20:06.147953 2025] [:error] [pid 43981:tid 43984] [client 52.156.23.50:52857] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.bing.com/
[Tue Nov 25 23:20:06.874286 2025] [:error] [pid 43981:tid 44000] [client 52.156.23.50:52857] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.yahoo.com/
[Tue Nov 25 23:20:07.519928 2025] [:error] [pid 43981:tid 43992] [client 52.156.23.50:52857] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://duckduckgo.com/
[Tue Nov 25 23:20:07.729857 2025] [:error] [pid 43981:tid 43990] [client 52.156.23.50:52857] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php, referer: https://www.bing.com/
[Tue Nov 25 23:20:07.952155 2025] [:error] [pid 43981:tid 43996] [client 52.156.23.50:52857] File does not exist: /usr/local/apache/htdocs/suspended-page/build.php, referer: https://www.google.fr/
[Tue Nov 25 23:20:08.201774 2025] [:error] [pid 43981:tid 43989] [client 52.156.23.50:52857] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.google.de/
[Tue Nov 25 23:20:08.427538 2025] [:error] [pid 43981:tid 43987] [client 52.156.23.50:52857] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.co.uk/
[Tue Nov 25 23:20:08.640582 2025] [:error] [pid 43981:tid 43983] [client 52.156.23.50:52857] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.yahoo.com/
[Tue Nov 25 23:20:08.849829 2025] [:error] [pid 43981:tid 43986] [client 52.156.23.50:52857] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php, referer: https://duckduckgo.com/
[Tue Nov 25 23:20:09.069477 2025] [:error] [pid 43981:tid 44002] [client 52.156.23.50:52857] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://duckduckgo.com/
[Tue Nov 25 23:20:09.279671 2025] [:error] [pid 43981:tid 44005] [client 52.156.23.50:52857] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.google.fr/
[Tue Nov 25 23:20:09.639657 2025] [:error] [pid 43981:tid 43995] [client 52.156.23.50:52857] [client 52.156.23.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "aSXJKQgZn97m_qh_RaGDYgAAAww"], referer: https://www.google.com/
[Tue Nov 25 23:20:11.471023 2025] [:error] [pid 43981:tid 44006] [client 52.156.23.50:52815] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php, referer: https://www.google.de/
[Tue Nov 25 23:20:12.494017 2025] [:error] [pid 43981:tid 43993] [client 52.156.23.50:52815] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.co.uk/
[Tue Nov 25 23:20:12.729073 2025] [:error] [pid 43981:tid 44000] [client 52.156.23.50:52815] File does not exist: /usr/local/apache/htdocs/suspended-page/mari.php, referer: https://www.google.de/
[Tue Nov 25 23:20:12.941270 2025] [:error] [pid 43981:tid 43991] [client 52.156.23.50:52815] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://duckduckgo.com/
[Tue Nov 25 23:20:13.154156 2025] [:error] [pid 43981:tid 44004] [client 52.156.23.50:52815] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php, referer: https://www.bing.com/
[Tue Nov 25 23:20:14.542423 2025] [:error] [pid 43981:tid 43987] [client 52.156.23.50:52815] [client 52.156.23.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSXJLggZn97m_qh_RaGDcQAAAwQ"], referer: https://www.google.com/
[Tue Nov 25 23:20:15.930885 2025] [:error] [pid 14168:tid 14181] [client 52.156.23.50:52804] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php, referer: https://www.bing.com/
[Tue Nov 25 23:20:16.564231 2025] [:error] [pid 14168:tid 14190] [client 52.156.23.50:52804] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.co.uk/
[Tue Nov 25 23:20:17.602416 2025] [:error] [pid 14168:tid 14179] [client 52.156.23.50:52804] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.google.de/
[Tue Nov 25 23:20:17.811802 2025] [:error] [pid 14168:tid 14182] [client 52.156.23.50:52804] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php, referer: https://www.yahoo.com/
[Tue Nov 25 23:20:18.871858 2025] [:error] [pid 14168:tid 14174] [client 52.156.23.50:52804] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php, referer: https://www.google.co.uk/
[Tue Nov 25 23:20:19.081407 2025] [:error] [pid 14168:tid 14175] [client 52.156.23.50:52804] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php, referer: https://www.yahoo.com/
[Tue Nov 25 23:20:19.553406 2025] [:error] [pid 14168:tid 14192] [client 52.156.23.50:52804] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php, referer: https://www.google.co.uk/
[Tue Nov 25 23:20:21.607568 2025] [:error] [pid 14168:tid 14183] [client 52.156.23.50:52804] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php, referer: https://www.google.com/
[Tue Nov 25 23:20:23.272367 2025] [:error] [pid 14168:tid 14181] [client 52.156.23.50:52804] [client 52.156.23.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSXJN_R-ZDU0QEgAIIunygAAAMo"], referer: https://www.yahoo.com/
[Tue Nov 25 23:20:26.130066 2025] [:error] [pid 14077:tid 14124] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php, referer: https://www.yahoo.com/
[Tue Nov 25 23:20:26.351827 2025] [:error] [pid 14077:tid 14127] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php, referer: https://www.google.de/
[Tue Nov 25 23:20:26.562972 2025] [:error] [pid 14077:tid 14113] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/god4m.php, referer: https://www.yahoo.com/
[Tue Nov 25 23:20:26.773914 2025] [:error] [pid 14077:tid 14116] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php, referer: https://www.google.com/
[Tue Nov 25 23:20:30.236811 2025] [:error] [pid 14077:tid 14128] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php, referer: https://www.yahoo.com/
[Tue Nov 25 23:20:30.446260 2025] [:error] [pid 14077:tid 14121] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/07.php, referer: https://www.google.co.uk/
[Tue Nov 25 23:20:30.661476 2025] [:error] [pid 14077:tid 14133] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php, referer: https://www.bing.com/
[Tue Nov 25 23:20:30.873780 2025] [:error] [pid 14077:tid 14132] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php, referer: https://www.google.com/
[Tue Nov 25 23:20:31.092884 2025] [:error] [pid 14077:tid 14117] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sigunq.php, referer: https://www.google.co.uk/
[Tue Nov 25 23:20:31.310733 2025] [:error] [pid 14077:tid 14129] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/wso112233.php, referer: https://www.bing.com/
[Tue Nov 25 23:20:31.523841 2025] [:error] [pid 14077:tid 14125] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php, referer: https://www.google.com/
[Tue Nov 25 23:20:31.752304 2025] [:error] [pid 14077:tid 14111] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php, referer: https://www.google.co.uk/
[Tue Nov 25 23:20:31.964935 2025] [:error] [pid 14077:tid 14124] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php, referer: https://www.google.de/
[Tue Nov 25 23:20:32.214860 2025] [:error] [pid 14077:tid 14130] [client 52.156.23.50:59213] [client 52.156.23.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.156.23.50, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSXJQBG9n7UHEkwDTyjqbQAAAFQ"], referer: https://www.google.fr/
[Tue Nov 25 23:20:32.218417 2025] [:error] [pid 14077:tid 14130] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.fr/
[Tue Nov 25 23:20:32.428430 2025] [:error] [pid 14077:tid 14113] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php, referer: https://www.google.co.uk/
[Tue Nov 25 23:20:32.658351 2025] [:error] [pid 14077:tid 14116] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php, referer: https://www.yahoo.com/
[Tue Nov 25 23:20:32.946104 2025] [:error] [pid 14077:tid 14126] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/classsmtps.php, referer: https://www.google.de/
[Tue Nov 25 23:20:33.163835 2025] [:error] [pid 14077:tid 14134] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php, referer: https://duckduckgo.com/
[Tue Nov 25 23:20:33.447012 2025] [:error] [pid 14077:tid 14122] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php, referer: https://duckduckgo.com/
[Tue Nov 25 23:20:33.670772 2025] [:error] [pid 14077:tid 14123] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php, referer: https://www.bing.com/
[Tue Nov 25 23:20:33.884464 2025] [:error] [pid 14077:tid 14131] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-comments-post.php, referer: https://www.bing.com/
[Tue Nov 25 23:20:34.117517 2025] [:error] [pid 14077:tid 14114] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php, referer: https://www.yahoo.com/
[Tue Nov 25 23:20:34.341799 2025] [:error] [pid 14077:tid 14110] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php, referer: https://www.google.co.uk/
[Tue Nov 25 23:20:34.606625 2025] [:error] [pid 14077:tid 14115] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php, referer: https://www.google.de/
[Tue Nov 25 23:20:34.816386 2025] [:error] [pid 14077:tid 14112] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php, referer: https://www.yahoo.com/
[Tue Nov 25 23:20:35.026022 2025] [:error] [pid 14077:tid 14120] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/post.php, referer: https://www.yahoo.com/
[Tue Nov 25 23:20:36.064429 2025] [:error] [pid 14077:tid 14119] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php, referer: https://www.google.co.uk/
[Tue Nov 25 23:20:36.275267 2025] [:error] [pid 14077:tid 14133] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/geju.php, referer: https://www.google.de/
[Tue Nov 25 23:20:36.493783 2025] [:error] [pid 14077:tid 14132] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://www.bing.com/
[Tue Nov 25 23:20:36.743434 2025] [:error] [pid 14077:tid 14129] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/hoot.php, referer: https://www.google.fr/
[Tue Nov 25 23:20:37.809980 2025] [:error] [pid 14077:tid 14124] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php, referer: https://www.bing.com/
[Tue Nov 25 23:20:38.021715 2025] [:error] [pid 14077:tid 14130] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php, referer: https://www.yahoo.com/
[Tue Nov 25 23:20:38.233465 2025] [:error] [pid 14077:tid 14127] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php, referer: https://www.google.fr/
[Tue Nov 25 23:20:38.981509 2025] [:error] [pid 14077:tid 14126] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php, referer: https://www.google.de/
[Tue Nov 25 23:20:39.192819 2025] [:error] [pid 14077:tid 14134] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php, referer: https://www.google.fr/
[Tue Nov 25 23:20:39.469346 2025] [:error] [pid 14077:tid 14122] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/upfile.php, referer: https://www.google.fr/
[Tue Nov 25 23:20:39.776697 2025] [:error] [pid 14077:tid 14123] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php, referer: https://www.bing.com/
[Tue Nov 25 23:20:39.992667 2025] [:error] [pid 14077:tid 14131] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php, referer: https://www.google.de/
[Tue Nov 25 23:20:40.204769 2025] [:error] [pid 14077:tid 14114] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php, referer: https://www.google.fr/
[Tue Nov 25 23:20:40.429220 2025] [:error] [pid 14077:tid 14110] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php, referer: https://www.google.fr/
[Tue Nov 25 23:20:40.637114 2025] [:error] [pid 14077:tid 14115] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php, referer: https://duckduckgo.com/
[Tue Nov 25 23:20:41.617946 2025] [:error] [pid 14077:tid 14121] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/ae.php, referer: https://www.google.co.uk/
[Tue Nov 25 23:20:41.827985 2025] [:error] [pid 14077:tid 14119] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php, referer: https://www.yahoo.com/
[Tue Nov 25 23:20:42.051926 2025] [:error] [pid 14077:tid 14132] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php, referer: https://www.google.fr/
[Tue Nov 25 23:20:42.851869 2025] [:error] [pid 14077:tid 14129] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php, referer: https://www.yahoo.com/
[Tue Nov 25 23:20:43.656000 2025] [:error] [pid 14077:tid 14128] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php, referer: https://www.bing.com/
[Tue Nov 25 23:20:43.881759 2025] [:error] [pid 14077:tid 14125] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php, referer: https://www.bing.com/
[Tue Nov 25 23:20:44.098612 2025] [:error] [pid 14077:tid 14111] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php, referer: https://duckduckgo.com/
[Tue Nov 25 23:20:44.309970 2025] [:error] [pid 14077:tid 14130] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://www.google.com/
[Tue Nov 25 23:20:45.008084 2025] [:error] [pid 14077:tid 14122] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php, referer: https://www.google.de/
[Tue Nov 25 23:20:45.254903 2025] [:error] [pid 14077:tid 14123] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php, referer: https://www.google.de/
[Tue Nov 25 23:20:45.858992 2025] [:error] [pid 14077:tid 14131] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-ajax.php, referer: https://www.yahoo.com/
[Tue Nov 25 23:20:46.075672 2025] [:error] [pid 14077:tid 14114] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php, referer: https://www.yahoo.com/
[Tue Nov 25 23:20:46.365602 2025] [:error] [pid 14077:tid 14110] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php, referer: https://www.bing.com/
[Tue Nov 25 23:20:46.574863 2025] [:error] [pid 14077:tid 14115] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php, referer: https://www.bing.com/
[Tue Nov 25 23:20:46.784438 2025] [:error] [pid 14077:tid 14112] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php, referer: https://www.google.com/
[Tue Nov 25 23:20:47.447539 2025] [:error] [pid 14077:tid 14132] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/berax.php, referer: https://www.google.com/
[Tue Nov 25 23:20:47.663483 2025] [:error] [pid 14077:tid 14113] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/checkbox.php, referer: https://www.bing.com/
[Tue Nov 25 23:20:48.603301 2025] [:error] [pid 14077:tid 14117] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php, referer: https://www.bing.com/
[Tue Nov 25 23:20:48.812843 2025] [:error] [pid 14077:tid 14128] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php, referer: https://www.bing.com/
[Tue Nov 25 23:20:49.039172 2025] [:error] [pid 14077:tid 14125] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/form.php, referer: https://www.bing.com/
[Tue Nov 25 23:20:49.588602 2025] [:error] [pid 14077:tid 14124] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php, referer: https://www.google.fr/
[Tue Nov 25 23:20:49.844189 2025] [:error] [pid 14077:tid 14134] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.google.de/
[Tue Nov 25 23:20:50.054124 2025] [:error] [pid 14077:tid 14126] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/kyami.php, referer: https://www.google.com/
[Tue Nov 25 23:20:50.740767 2025] [:error] [pid 14077:tid 14131] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php, referer: https://duckduckgo.com/
[Tue Nov 25 23:20:50.950180 2025] [:error] [pid 14077:tid 14114] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.com/
[Tue Nov 25 23:20:52.801376 2025] [:error] [pid 14077:tid 14120] [client 52.156.23.50:59213] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php, referer: https://www.bing.com/
[Wed Nov 26 05:45:49.738908 2025] [:error] [pid 716:tid 737] [client 54.173.250.15:57778] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSYjjfk-DzbcuL5gvNyQzgAAAhE"]
[Wed Nov 26 07:14:53.334236 2025] [:error] [pid 3011:tid 3052] [client 104.207.40.125:23067] [client 104.207.40.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/HEAD"] [unique_id "aSY4bUb0BA3GljiGlI7eWQAAAEo"]
[Wed Nov 26 07:14:59.377522 2025] [:error] [pid 38796:tid 38804] [client 216.26.224.206:43305] [client 216.26.224.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aSY4cwGcUUzaXxvjCXPW2wAAAUU"]
[Wed Nov 26 07:15:00.656677 2025] [:error] [pid 38796:tid 38800] [client 65.111.10.128:41085] [client 65.111.10.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.svn/wc.db"] [unique_id "aSY4dAGcUUzaXxvjCXPW3gAAAUE"]
[Wed Nov 26 11:48:57.234049 2025] [:error] [pid 45836:tid 45868] [client 20.122.103.17:5821] [client 20.122.103.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.122.103.17, incrementing ddos counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aSZ4qZfrnOGqL-seZAwmLQAAANY"], referer: https://www.google.de/
[Wed Nov 26 11:48:57.240126 2025] [:error] [pid 45836:tid 45868] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://www.google.de/
[Wed Nov 26 11:48:57.453465 2025] [:error] [pid 45836:tid 45846] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/index1.php, referer: https://www.bing.com/
[Wed Nov 26 11:48:57.946276 2025] [:error] [pid 45836:tid 45856] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php, referer: https://www.google.de/
[Wed Nov 26 11:48:58.189502 2025] [:error] [pid 45836:tid 45869] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/1index.php, referer: https://www.google.de/
[Wed Nov 26 11:48:58.629393 2025] [:error] [pid 45836:tid 45865] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.yahoo.com/
[Wed Nov 26 11:48:58.914617 2025] [:error] [pid 45836:tid 45853] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php, referer: https://duckduckgo.com/
[Wed Nov 26 11:48:59.445361 2025] [:error] [pid 45836:tid 45866] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:49:01.177647 2025] [:error] [pid 45836:tid 45847] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.com/
[Wed Nov 26 11:49:01.408991 2025] [:error] [pid 45836:tid 45854] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php, referer: https://duckduckgo.com/
[Wed Nov 26 11:49:01.863253 2025] [:error] [pid 45836:tid 45855] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php, referer: https://www.google.de/
[Wed Nov 26 11:49:02.845858 2025] [:error] [pid 45836:tid 45849] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php, referer: https://www.google.fr/
[Wed Nov 26 11:49:03.076435 2025] [:error] [pid 45836:tid 45849] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/index4.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:49:03.700817 2025] [:error] [pid 45836:tid 45862] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php, referer: https://www.google.fr/
[Wed Nov 26 11:49:05.067515 2025] [:error] [pid 45836:tid 45864] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php, referer: https://www.bing.com/
[Wed Nov 26 11:49:05.330987 2025] [:error] [pid 45836:tid 45859] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/index3.php, referer: https://www.google.fr/
[Wed Nov 26 11:49:05.543532 2025] [:error] [pid 45836:tid 45856] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php, referer: https://www.google.fr/
[Wed Nov 26 11:49:05.757243 2025] [:error] [pid 45836:tid 45852] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php, referer: https://www.bing.com/
[Wed Nov 26 11:49:05.971713 2025] [:error] [pid 45836:tid 45869] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.bing.com/
[Wed Nov 26 11:49:07.198733 2025] [:error] [pid 45836:tid 45870] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php, referer: https://www.yahoo.com/
[Wed Nov 26 11:49:07.413730 2025] [:error] [pid 45836:tid 45866] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/al.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:49:07.749747 2025] [:error] [pid 45836:tid 45847] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php, referer: https://www.google.de/
[Wed Nov 26 11:49:08.605626 2025] [:error] [pid 45836:tid 45861] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php, referer: https://www.google.de/
[Wed Nov 26 11:49:08.818850 2025] [:error] [pid 45836:tid 45854] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php, referer: https://duckduckgo.com/
[Wed Nov 26 11:49:09.319778 2025] [:error] [pid 45836:tid 45849] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:49:09.534798 2025] [:error] [pid 45836:tid 45850] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:49:10.681289 2025] [:error] [pid 45836:tid 45846] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/backup.php, referer: https://www.google.fr/
[Wed Nov 26 11:49:10.943005 2025] [:error] [pid 45836:tid 45864] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/browse.php, referer: https://duckduckgo.com/
[Wed Nov 26 11:49:11.466865 2025] [:error] [pid 45836:tid 45859] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:49:11.724876 2025] [:error] [pid 45836:tid 45856] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:49:12.037755 2025] [:error] [pid 45836:tid 45852] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php, referer: https://www.google.de/
[Wed Nov 26 11:49:13.044309 2025] [:error] [pid 45836:tid 45865] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.fr/
[Wed Nov 26 11:49:13.257336 2025] [:error] [pid 45836:tid 45866] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/classsmtps.php, referer: https://www.yahoo.com/
[Wed Nov 26 11:49:13.480264 2025] [:error] [pid 45836:tid 45847] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.fr/
[Wed Nov 26 11:49:13.698817 2025] [:error] [pid 45836:tid 45861] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php, referer: https://www.yahoo.com/
[Wed Nov 26 11:49:13.922211 2025] [:error] [pid 45836:tid 45854] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:49:14.808450 2025] [:error] [pid 45836:tid 45863] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:49:15.138100 2025] [:error] [pid 45836:tid 45855] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php, referer: https://www.bing.com/
[Wed Nov 26 11:49:15.381895 2025] [:error] [pid 45836:tid 45849] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/e.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:49:15.593805 2025] [:error] [pid 45836:tid 45850] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.de/
[Wed Nov 26 11:49:15.817918 2025] [:error] [pid 45836:tid 45862] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php, referer: https://duckduckgo.com/
[Wed Nov 26 11:49:16.033379 2025] [:error] [pid 45836:tid 45851] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/fi2.php, referer: https://www.bing.com/
[Wed Nov 26 11:49:16.595185 2025] [:error] [pid 45836:tid 45857] [client 20.122.103.17:5821] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php, referer: https://www.google.de/
[Wed Nov 26 11:49:17.870418 2025] [:error] [pid 45836:tid 45848] [client 20.122.103.17:5821] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "aSZ4vZfrnOGqL-seZAwmZwAAAMI"], referer: https://www.bing.com/
[Wed Nov 26 11:49:19.874416 2025] [:error] [pid 35540:tid 35562] [client 20.122.103.17:6047] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php, referer: https://www.google.fr/
[Wed Nov 26 11:49:20.086425 2025] [:error] [pid 35540:tid 35567] [client 20.122.103.17:6047] File does not exist: /usr/local/apache/htdocs/suspended-page/gebase.php, referer: https://www.yahoo.com/
[Wed Nov 26 11:49:20.318878 2025] [:error] [pid 35540:tid 35555] [client 20.122.103.17:6047] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:49:20.789157 2025] [:error] [pid 35540:tid 35554] [client 20.122.103.17:6047] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php, referer: https://www.google.de/
[Wed Nov 26 11:49:21.027887 2025] [:error] [pid 35540:tid 35563] [client 20.122.103.17:6047] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://duckduckgo.com/
[Wed Nov 26 11:49:21.237681 2025] [:error] [pid 35540:tid 35557] [client 20.122.103.17:6047] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:49:21.448739 2025] [:error] [pid 35540:tid 35569] [client 20.122.103.17:6047] File does not exist: /usr/local/apache/htdocs/suspended-page/load.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:49:22.277289 2025] [:error] [pid 35540:tid 35552] [client 20.122.103.17:6047] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php, referer: https://www.google.fr/
[Wed Nov 26 11:49:22.544138 2025] [:error] [pid 35540:tid 35559] [client 20.122.103.17:6047] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php, referer: https://www.bing.com/
[Wed Nov 26 11:49:22.753765 2025] [:error] [pid 35540:tid 35550] [client 20.122.103.17:6047] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.google.de/
[Wed Nov 26 11:49:23.834785 2025] [:error] [pid 35540:tid 35558] [client 20.122.103.17:6047] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.de/
[Wed Nov 26 11:49:25.350198 2025] [:error] [pid 35540:tid 35570] [client 20.122.103.17:6047] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:49:25.988952 2025] [:error] [pid 35540:tid 35547] [client 20.122.103.17:6047] File does not exist: /usr/local/apache/htdocs/suspended-page/past.php, referer: https://www.bing.com/
[Wed Nov 26 11:49:26.196900 2025] [:error] [pid 35540:tid 35562] [client 20.122.103.17:6047] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php, referer: https://duckduckgo.com/
[Wed Nov 26 11:49:26.405045 2025] [:error] [pid 35540:tid 35567] [client 20.122.103.17:6047] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php, referer: https://www.google.fr/
[Wed Nov 26 11:49:30.798061 2025] [:error] [pid 35540:tid 35558] [client 20.122.103.17:6047] [client 20.122.103.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.122.103.17, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSZ4ysGrIq2A6SZSnkJZMAAAAIw"], referer: https://www.google.de/
[Wed Nov 26 11:49:35.455224 2025] [:error] [pid 35540:tid 35566] [client 20.122.103.17:6047] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSZ4z8GrIq2A6SZSnkJZPgAAAJQ"], referer: https://www.google.de/
[Wed Nov 26 11:49:42.102106 2025] [:error] [pid 34743:tid 34777] [client 20.122.103.17:3350] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php, referer: https://duckduckgo.com/
[Wed Nov 26 11:49:43.176736 2025] [:error] [pid 34743:tid 34789] [client 20.122.103.17:3350] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/404.php"] [unique_id "aSZ41wvyX7Q5oU7_mByHoAAAAU0"], referer: https://duckduckgo.com/
[Wed Nov 26 11:49:45.342135 2025] [:error] [pid 34743:tid 34784] [client 20.122.103.17:6550] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSZ42QvyX7Q5oU7_mByHpQAAAUg"], referer: https://www.google.de/
[Wed Nov 26 11:49:47.714461 2025] [:error] [pid 10383:tid 10403] [client 20.122.103.17:3087] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSZ4260RJ-zjhOVjD8-rXwAAAdE"], referer: https://www.yahoo.com/
[Wed Nov 26 11:49:49.758259 2025] [:error] [pid 45901:tid 45926] [client 20.122.103.17:4712] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSZ43SunQ1SpfPRNrtyOigAAARc"], referer: https://www.google.co.uk/
[Wed Nov 26 11:49:51.882216 2025] [:error] [pid 34830:tid 34838] [client 20.122.103.17:4534] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/shortcode/index.php"] [unique_id "aSZ430ukvkWgWN6jCR2TQgAAAAY"], referer: https://www.bing.com/
[Wed Nov 26 11:49:53.867654 2025] [:error] [pid 10383:tid 10389] [client 20.122.103.17:7089] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aSZ44a0RJ-zjhOVjD8-ragAAAcM"], referer: https://www.google.de/
[Wed Nov 26 11:49:55.423812 2025] [:error] [pid 34743:tid 34785] [client 20.122.103.17:6285] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSZ44wvyX7Q5oU7_mByHqwAAAUk"], referer: https://www.google.fr/
[Wed Nov 26 11:49:56.654651 2025] [:error] [pid 45901:tid 45904] [client 20.122.103.17:3073] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aSZ45CunQ1SpfPRNrtyOtQAAAQE"], referer: https://www.yahoo.com/
[Wed Nov 26 11:49:57.821326 2025] [:error] [pid 35540:tid 35550] [client 20.122.103.17:4428] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSZ45cGrIq2A6SZSnkJZWQAAAIQ"], referer: https://www.google.co.uk/
[Wed Nov 26 11:49:59.717604 2025] [:error] [pid 34744:tid 34807] [client 20.122.103.17:3126] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSZ450tgOvVbhyALkTTkEAAAAYQ"], referer: https://www.google.de/
[Wed Nov 26 11:50:03.993270 2025] [:error] [pid 34743:tid 34795] [client 20.122.103.17:2516] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSZ46wvyX7Q5oU7_mByHuAAAAVM"], referer: https://www.yahoo.com/
[Wed Nov 26 11:50:06.306040 2025] [:error] [pid 34743:tid 34793] [client 20.122.103.17:7044] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aSZ47gvyX7Q5oU7_mByHugAAAVE"], referer: https://www.google.de/
[Wed Nov 26 11:50:08.430348 2025] [:error] [pid 35540:tid 35565] [client 20.122.103.17:2525] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSZ48MGrIq2A6SZSnkJZZAAAAJM"], referer: https://duckduckgo.com/
[Wed Nov 26 11:50:10.826141 2025] [:error] [pid 35540:tid 35547] [client 20.122.103.17:4470] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jcrop/jcrop.php"] [unique_id "aSZ48sGrIq2A6SZSnkJZZgAAAIE"], referer: https://www.google.fr/
[Wed Nov 26 11:50:13.978115 2025] [:error] [pid 35540:tid 35559] [client 20.122.103.17:4181] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSZ49cGrIq2A6SZSnkJZbQAAAI0"], referer: https://www.google.co.uk/
[Wed Nov 26 11:50:18.687644 2025] [:error] [pid 10383:tid 10398] [client 20.122.103.17:2540] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aSZ4-q0RJ-zjhOVjD8-rhQAAAcw"], referer: https://www.bing.com/
[Wed Nov 26 11:50:20.913244 2025] [:error] [pid 45901:tid 45911] [client 20.122.103.17:2074] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSZ4_CunQ1SpfPRNrtyOvwAAAQg"], referer: https://www.google.com/
[Wed Nov 26 11:50:29.794630 2025] [:error] [pid 34743:tid 34796] [client 20.122.103.17:4452] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSZ5BQvyX7Q5oU7_mByHwgAAAVQ"], referer: https://www.google.de/
[Wed Nov 26 11:50:31.736570 2025] [:error] [pid 45901:tid 45918] [client 20.122.103.17:2107] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aSZ5ByunQ1SpfPRNrtyOxQAAAQ8"], referer: https://www.google.co.uk/
[Wed Nov 26 11:50:33.973795 2025] [:error] [pid 34742:tid 34769] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php, referer: https://www.google.com/
[Wed Nov 26 11:50:34.240678 2025] [:error] [pid 34742:tid 34770] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php, referer: https://www.google.com/
[Wed Nov 26 11:50:40.483069 2025] [:error] [pid 34742:tid 34766] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://duckduckgo.com/
[Wed Nov 26 11:50:41.150414 2025] [:error] [pid 34742:tid 34758] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php, referer: https://duckduckgo.com/
[Wed Nov 26 11:50:41.509379 2025] [:error] [pid 34742:tid 34761] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/gel4y.php, referer: https://www.yahoo.com/
[Wed Nov 26 11:50:41.939643 2025] [:error] [pid 34742:tid 34768] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/gelay.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:50:42.578577 2025] [:error] [pid 34742:tid 34756] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/fix.php, referer: https://www.google.com/
[Wed Nov 26 11:50:43.557474 2025] [:error] [pid 34742:tid 34751] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php, referer: https://www.google.fr/
[Wed Nov 26 11:50:43.776342 2025] [:error] [pid 34742:tid 34748] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/fox.php, referer: https://www.yahoo.com/
[Wed Nov 26 11:50:43.987392 2025] [:error] [pid 34742:tid 34762] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php, referer: https://www.google.de/
[Wed Nov 26 11:50:44.458920 2025] [:error] [pid 34742:tid 34763] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:50:44.671180 2025] [:error] [pid 34742:tid 34772] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:50:44.905953 2025] [:error] [pid 34742:tid 34770] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://duckduckgo.com/
[Wed Nov 26 11:50:45.461859 2025] [:error] [pid 34742:tid 34767] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php, referer: https://www.bing.com/
[Wed Nov 26 11:50:45.672049 2025] [:error] [pid 34742:tid 34749] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/index.bak.php, referer: https://duckduckgo.com/
[Wed Nov 26 11:50:46.245170 2025] [:error] [pid 34742:tid 34753] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php, referer: https://duckduckgo.com/
[Wed Nov 26 11:50:46.453681 2025] [:error] [pid 34742:tid 34766] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php, referer: https://www.google.com/
[Wed Nov 26 11:50:46.685577 2025] [:error] [pid 34742:tid 34755] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:50:47.159037 2025] [:error] [pid 34742:tid 34758] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php, referer: https://www.google.de/
[Wed Nov 26 11:50:47.388244 2025] [:error] [pid 34742:tid 34761] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php, referer: https://www.google.de/
[Wed Nov 26 11:50:47.612429 2025] [:error] [pid 34742:tid 34765] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php, referer: https://www.google.fr/
[Wed Nov 26 11:50:47.840753 2025] [:error] [pid 34742:tid 34768] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/mm.php, referer: https://www.google.com/
[Wed Nov 26 11:50:48.313969 2025] [:error] [pid 34742:tid 34756] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php, referer: https://www.google.com/
[Wed Nov 26 11:50:48.898329 2025] [:error] [pid 34742:tid 34760] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php, referer: https://www.bing.com/
[Wed Nov 26 11:50:49.788301 2025] [:error] [pid 34742:tid 34751] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php, referer: https://www.bing.com/
[Wed Nov 26 11:50:50.092338 2025] [:error] [pid 34742:tid 34748] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/options-general.php, referer: https://www.google.fr/
[Wed Nov 26 11:50:50.347083 2025] [:error] [pid 34742:tid 34762] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php, referer: https://duckduckgo.com/
[Wed Nov 26 11:50:50.586623 2025] [:error] [pid 34742:tid 34769] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php, referer: https://www.bing.com/
[Wed Nov 26 11:50:50.816721 2025] [:error] [pid 34742:tid 34763] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php, referer: https://www.bing.com/
[Wed Nov 26 11:50:51.058188 2025] [:error] [pid 34742:tid 34772] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php, referer: https://www.google.de/
[Wed Nov 26 11:50:51.266809 2025] [:error] [pid 34742:tid 34770] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php, referer: https://www.yahoo.com/
[Wed Nov 26 11:50:51.478750 2025] [:error] [pid 34742:tid 34767] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php, referer: https://duckduckgo.com/
[Wed Nov 26 11:50:51.714050 2025] [:error] [pid 34742:tid 34749] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/sts.php, referer: https://www.bing.com/
[Wed Nov 26 11:50:51.950030 2025] [:error] [pid 34742:tid 34771] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:50:53.262705 2025] [:error] [pid 34742:tid 34766] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php, referer: https://www.yahoo.com/
[Wed Nov 26 11:50:53.499963 2025] [:error] [pid 34742:tid 34755] [client 20.122.103.17:5158] File does not exist: /usr/local/apache/htdocs/suspended-page/thoms.php, referer: https://www.bing.com/
[Wed Nov 26 11:50:53.707393 2025] [:error] [pid 34742:tid 34757] [client 20.122.103.17:5158] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSZ5HZSuLNwpQF_jzAcs2QAAAEk"], referer: https://www.google.de/
[Wed Nov 26 11:50:55.066970 2025] [:error] [pid 10383:tid 10396] [client 20.122.103.17:4888] File does not exist: /usr/local/apache/htdocs/suspended-page/ty.php, referer: https://www.google.fr/
[Wed Nov 26 11:50:55.912430 2025] [:error] [pid 10383:tid 10403] [client 20.122.103.17:4888] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/user/.env"] [unique_id "aSZ5H60RJ-zjhOVjD8-rsQAAAdE"], referer: https://www.yahoo.com/
[Wed Nov 26 11:50:57.782396 2025] [:error] [pid 35540:tid 35566] [client 20.122.103.17:6817] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php, referer: https://www.bing.com/
[Wed Nov 26 11:50:58.552614 2025] [:error] [pid 35540:tid 35549] [client 20.122.103.17:6817] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php, referer: https://www.bing.com/
[Wed Nov 26 11:50:58.774949 2025] [:error] [pid 35540:tid 35560] [client 20.122.103.17:6817] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aa.php, referer: https://www.google.de/
[Wed Nov 26 11:51:10.182275 2025] [:error] [pid 35540:tid 35555] [client 20.122.103.17:1995] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activat.php, referer: https://www.yahoo.com/
[Wed Nov 26 11:51:27.223053 2025] [:error] [pid 35540:tid 35557] [client 20.122.103.17:1237] [client 20.122.103.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.122.103.17, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aSZ5P8GrIq2A6SZSnkJZqAAAAIs"], referer: https://www.google.de/
[Wed Nov 26 11:51:35.911753 2025] [:error] [pid 35540:tid 35562] [client 20.122.103.17:1237] [client 20.122.103.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.122.103.17, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSZ5R8GrIq2A6SZSnkJZ3gAAAJA"], referer: https://www.google.co.uk/
[Wed Nov 26 11:51:36.341379 2025] [:error] [pid 35540:tid 35566] [client 20.122.103.17:1237] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:51:36.549500 2025] [:error] [pid 35540:tid 35558] [client 20.122.103.17:1237] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php, referer: https://www.bing.com/
[Wed Nov 26 11:51:36.797217 2025] [:error] [pid 35540:tid 35554] [client 20.122.103.17:1237] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-comments.php, referer: https://duckduckgo.com/
[Wed Nov 26 11:51:37.005528 2025] [:error] [pid 35540:tid 35549] [client 20.122.103.17:1237] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-config-sample.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:51:42.621774 2025] [:error] [pid 35540:tid 35548] [client 20.122.103.17:1237] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-error.php, referer: https://www.google.com/
[Wed Nov 26 11:51:42.857870 2025] [:error] [pid 35540:tid 35550] [client 20.122.103.17:1237] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php, referer: https://www.yahoo.com/
[Wed Nov 26 11:51:46.857937 2025] [:error] [pid 35540:tid 35557] [client 20.122.103.17:1237] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSZ5UsGrIq2A6SZSnkJZ_wAAAIs"], referer: https://www.google.com/
[Wed Nov 26 11:52:23.805698 2025] [:error] [pid 34743:tid 34798] [client 20.122.103.17:7568] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSZ5dwvyX7Q5oU7_mByH_AAAAVY"], referer: https://www.bing.com/
[Wed Nov 26 11:52:38.491084 2025] [:error] [pid 35540:tid 35546] [client 20.122.103.17:6933] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSZ5hsGrIq2A6SZSnkJaQgAAAIA"], referer: https://duckduckgo.com/
[Wed Nov 26 11:52:50.778870 2025] [:error] [pid 35540:tid 35561] [client 20.122.103.17:6969] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aSZ5ksGrIq2A6SZSnkJaTAAAAI8"], referer: https://www.google.fr/
[Wed Nov 26 11:53:00.514147 2025] [:error] [pid 35540:tid 35557] [client 20.122.103.17:5254] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSZ5nMGrIq2A6SZSnkJaYQAAAIs"], referer: https://www.google.de/
[Wed Nov 26 11:53:12.988574 2025] [:error] [pid 10383:tid 10402] [client 20.122.103.17:6943] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aSZ5qK0RJ-zjhOVjD8-sXwAAAdA"], referer: https://www.bing.com/
[Wed Nov 26 11:53:16.860125 2025] [:error] [pid 35540:tid 35570] [client 20.122.103.17:5298] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSZ5rMGrIq2A6SZSnkJaawAAAJg"], referer: https://duckduckgo.com/
[Wed Nov 26 11:53:32.017716 2025] [:error] [pid 45836:tid 45855] [client 20.122.103.17:2398] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/html-api/about.php"] [unique_id "aSZ5vJfrnOGqL-seZAwnUQAAAMk"], referer: https://www.google.co.uk/
[Wed Nov 26 11:53:38.087758 2025] [:error] [pid 10383:tid 10402] [client 20.122.103.17:2477] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSZ5wq0RJ-zjhOVjD8-shAAAAdA"], referer: https://www.google.fr/
[Wed Nov 26 11:53:46.473255 2025] [:error] [pid 34830:tid 34832] [client 20.122.103.17:7614] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSZ5ykukvkWgWN6jCR2TygAAAAA"], referer: https://www.google.com/
[Wed Nov 26 11:53:53.917384 2025] [:error] [pid 34743:tid 34778] [client 20.122.103.17:6965] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSZ50QvyX7Q5oU7_mByISQAAAUI"], referer: https://www.google.co.uk/
[Wed Nov 26 11:53:59.851976 2025] [:error] [pid 10383:tid 10406] [client 20.122.103.17:5274] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aSZ5160RJ-zjhOVjD8-sogAAAdQ"], referer: https://www.yahoo.com/
[Wed Nov 26 11:54:01.224158 2025] [:error] [pid 45901:tid 45904] [client 20.122.103.17:2471] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSZ52SunQ1SpfPRNrtyPaAAAAQE"], referer: https://www.google.de/
[Wed Nov 26 11:54:02.551166 2025] [:error] [pid 34744:tid 34803] [client 20.122.103.17:5260] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aSZ52ktgOvVbhyALkTTkwgAAAYA"], referer: https://www.google.fr/
[Wed Nov 26 11:54:05.302205 2025] [:error] [pid 34830:tid 34855] [client 20.122.103.17:5292] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSZ53UukvkWgWN6jCR2T0gAAABc"], referer: https://duckduckgo.com/
[Wed Nov 26 11:54:06.587778 2025] [:error] [pid 34830:tid 34840] [client 20.122.103.17:2474] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSZ53kukvkWgWN6jCR2T1QAAAAg"], referer: https://www.bing.com/
[Wed Nov 26 11:54:08.428998 2025] [:error] [pid 34744:tid 34815] [client 20.122.103.17:3198] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSZ54EtgOvVbhyALkTTkxQAAAYw"], referer: https://www.google.fr/
[Wed Nov 26 11:54:09.769274 2025] [:error] [pid 35540:tid 35562] [client 20.122.103.17:6956] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/include.php"] [unique_id "aSZ54cGrIq2A6SZSnkJaqwAAAJA"], referer: https://www.google.com/
[Wed Nov 26 11:54:11.819450 2025] [:error] [pid 45901:tid 45923] [client 20.122.103.17:1940] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSZ54yunQ1SpfPRNrtyPbgAAARQ"], referer: https://www.bing.com/
[Wed Nov 26 11:54:13.927703 2025] [:error] [pid 35540:tid 35566] [client 20.122.103.17:1455] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSZ55cGrIq2A6SZSnkJatAAAAJQ"], referer: https://www.yahoo.com/
[Wed Nov 26 11:54:15.442657 2025] [:error] [pid 10383:tid 10400] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php, referer: https://www.bing.com/
[Wed Nov 26 11:54:15.712650 2025] [:error] [pid 10383:tid 10395] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-logs.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:54:15.928065 2025] [:error] [pid 10383:tid 10402] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setting.php, referer: https://www.google.de/
[Wed Nov 26 11:54:16.149663 2025] [:error] [pid 10383:tid 10406] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php, referer: https://www.google.com/
[Wed Nov 26 11:54:16.371530 2025] [:error] [pid 10383:tid 10399] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signin.php, referer: https://www.yahoo.com/
[Wed Nov 26 11:54:16.614701 2025] [:error] [pid 10383:tid 10401] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-wso.php, referer: https://www.google.com/
[Wed Nov 26 11:54:17.182226 2025] [:error] [pid 10383:tid 10403] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://www.bing.com/
[Wed Nov 26 11:54:17.392916 2025] [:error] [pid 10383:tid 10388] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php, referer: https://www.google.de/
[Wed Nov 26 11:54:17.599197 2025] [:error] [pid 10383:tid 10404] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php, referer: https://www.google.fr/
[Wed Nov 26 11:54:17.808226 2025] [:error] [pid 10383:tid 10409] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/yanz.php, referer: https://www.google.de/
[Wed Nov 26 11:54:18.092288 2025] [:error] [pid 10383:tid 10407] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php, referer: https://www.google.fr/
[Wed Nov 26 11:54:19.788286 2025] [:error] [pid 10383:tid 10394] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/aaaa.php, referer: https://www.yahoo.com/
[Wed Nov 26 11:54:20.038735 2025] [:error] [pid 10383:tid 10410] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://duckduckgo.com/
[Wed Nov 26 11:54:20.488754 2025] [:error] [pid 10383:tid 10402] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/bv3.php, referer: https://www.google.de/
[Wed Nov 26 11:54:20.705717 2025] [:error] [pid 10383:tid 10406] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/cfile.php, referer: https://www.google.com/
[Wed Nov 26 11:54:20.925944 2025] [:error] [pid 10383:tid 10399] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php, referer: https://www.yahoo.com/
[Wed Nov 26 11:54:21.133031 2025] [:error] [pid 10383:tid 10401] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/class9.php, referer: https://www.google.fr/
[Wed Nov 26 11:54:21.393326 2025] [:error] [pid 10383:tid 10403] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/dex.php, referer: https://www.google.com/
[Wed Nov 26 11:54:21.600224 2025] [:error] [pid 10383:tid 10404] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/ffile.php, referer: https://www.bing.com/
[Wed Nov 26 11:54:21.815625 2025] [:error] [pid 10383:tid 10397] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/file17.php, referer: https://www.google.fr/
[Wed Nov 26 11:54:22.039812 2025] [:error] [pid 10383:tid 10408] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php, referer: https://www.yahoo.com/
[Wed Nov 26 11:54:22.283495 2025] [:error] [pid 10383:tid 10407] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:54:22.534942 2025] [:error] [pid 10383:tid 10396] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/file7.php, referer: https://www.google.com/
[Wed Nov 26 11:54:22.781504 2025] [:error] [pid 10383:tid 10405] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/file8.php, referer: https://www.google.co.uk/
[Wed Nov 26 11:54:23.011748 2025] [:error] [pid 10383:tid 10387] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/gfile.php, referer: https://www.yahoo.com/
[Wed Nov 26 11:54:24.690404 2025] [:error] [pid 10383:tid 10410] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/great.php, referer: https://duckduckgo.com/
[Wed Nov 26 11:54:28.153004 2025] [:error] [pid 10383:tid 10405] [client 20.122.103.17:1942] File does not exist: /usr/local/apache/htdocs/suspended-page/view.php, referer: https://www.google.de/
[Wed Nov 26 11:54:33.787740 2025] [:error] [pid 10383:tid 10395] [client 20.122.103.17:1942] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSZ5-a0RJ-zjhOVjD8-tFQAAAck"], referer: https://www.google.de/
[Wed Nov 26 11:54:42.025367 2025] [:error] [pid 35540:tid 35557] [client 20.122.103.17:1945] [client 20.122.103.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSZ6AsGrIq2A6SZSnkJbKwAAAIs"], referer: https://duckduckgo.com/
[Wed Nov 26 11:54:47.218313 2025] [:error] [pid 34742:tid 34769] [client 20.122.103.17:2429] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mn.php, referer: https://www.yahoo.com/
[Wed Nov 26 11:54:47.543029 2025] [:error] [pid 34742:tid 34767] [client 20.122.103.17:2429] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-update.php, referer: https://www.bing.com/
[Wed Nov 26 14:22:29.743487 2025] [:error] [pid 34744:tid 34819] [client 207.154.216.0:52597] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "aSacpUtgOvVbhyALkTQMpQAAAZA"]
[Wed Nov 26 14:22:30.704437 2025] [:error] [pid 34742:tid 34762] [client 207.154.216.0:59546] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "aSacppSuLNwpQF_jzAdJMQAAAE4"]
[Wed Nov 26 14:22:31.814882 2025] [:error] [pid 45836:tid 45846] [client 207.154.216.0:63265] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "aSacp5frnOGqL-seZAxHiQAAAMA"]
[Wed Nov 26 14:22:32.611010 2025] [:error] [pid 34743:tid 34786] [client 207.154.216.0:65364] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "aSacqAvyX7Q5oU7_mByiagAAAUo"]
[Wed Nov 26 14:22:33.437045 2025] [:error] [pid 34742:tid 34762] [client 207.154.216.0:49800] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "aSacqZSuLNwpQF_jzAdJXgAAAE4"]
[Wed Nov 26 17:40:47.088906 2025] [:error] [pid 45684:tid 45719] [client 65.111.14.49:32261] [client 65.111.14.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/HEAD"] [unique_id "aSbLH_g5LMxwI4-PD1cdPwAAAAQ"]
[Wed Nov 26 17:40:53.171886 2025] [:error] [pid 6471:tid 6475] [client 45.3.44.135:49965] [client 45.3.44.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aSbLJeh3Z9TZLlRuTiNzMgAAAIE"]
[Wed Nov 26 17:40:54.575876 2025] [:error] [pid 20733:tid 20746] [client 104.207.45.47:43049] [client 104.207.45.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.svn/wc.db"] [unique_id "aSbLJgV9EP2HuRvnH8dBGQAAAMs"]
[Thu Nov 27 03:02:37.313959 2025] [:error] [pid 8184:tid 8261] [client 213.21.239.4:48732] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants/.git/%0Aconfig"] [unique_id "aSdOzb-M2IHkRYVrcbOowgAAAFc"]
[Thu Nov 27 03:02:37.316689 2025] [:error] [pid 8184:tid 8239] [client 213.21.239.4:48758] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants/;/.git/config"] [unique_id "aSdOzb-M2IHkRYVrcbOowwAAAEM"]
[Thu Nov 27 03:02:37.317884 2025] [:error] [pid 54723:tid 54747] [client 213.21.239.4:48752] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/developer/.git/config"] [unique_id "aSdOzQ2CEg7QoyDosdIUCQAAABE"]
[Thu Nov 27 03:02:37.318879 2025] [:error] [pid 54723:tid 54736] [client 213.21.239.4:48774] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/backup/.git/config"] [unique_id "aSdOzQ2CEg7QoyDosdIUCgAAAAY"]
[Thu Nov 27 03:02:37.322663 2025] [:error] [pid 54723:tid 54751] [client 213.21.239.4:48772] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dev/.git/config"] [unique_id "aSdOzQ2CEg7QoyDosdIUCwAAABU"]
[Thu Nov 27 03:02:37.324218 2025] [:error] [pid 25180:tid 25201] [client 213.21.239.4:48780] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants/.git/config;.."] [unique_id "aSdOzb-owhtiwMHXYlzrTQAAAZM"]
[Thu Nov 27 03:02:37.325169 2025] [:error] [pid 54723:tid 54735] [client 213.21.239.4:48660] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants/.git/config"] [unique_id "aSdOzQ2CEg7QoyDosdIUDAAAAAU"]
[Thu Nov 27 03:02:37.325783 2025] [:error] [pid 25262:tid 25339] [client 213.21.239.4:48730] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css../.git/config"] [unique_id "aSdOzU3p81VU3bYILBVaGgAAAhI"]
[Thu Nov 27 03:02:37.328192 2025] [:error] [pid 54723:tid 54749] [client 213.21.239.4:48700] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau.windfarmcoolants.com.au../config"] [unique_id "aSdOzQ2CEg7QoyDosdIUDQAAABM"]
[Thu Nov 27 03:02:37.328235 2025] [:error] [pid 54723:tid 54732] [client 213.21.239.4:48630] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/application/.git/config"] [unique_id "aSdOzQ2CEg7QoyDosdIUDgAAAAI"]
[Thu Nov 27 03:02:37.332177 2025] [:error] [pid 54723:tid 54733] [client 213.21.239.4:48646] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/.git/config"] [unique_id "aSdOzQ2CEg7QoyDosdIUDwAAAAM"]
[Thu Nov 27 03:02:37.332776 2025] [:error] [pid 54723:tid 54753] [client 213.21.239.4:48800] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets../.git/config"] [unique_id "aSdOzQ2CEg7QoyDosdIUEAAAABc"]
[Thu Nov 27 03:02:37.333156 2025] [:error] [pid 24814:tid 25098] [client 213.21.239.4:48778] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants/static../.git/config"] [unique_id "aSdOzQPn1NMGCdo6Rsi5cgAAAVc"]
[Thu Nov 27 03:02:37.334824 2025] [:error] [pid 8184:tid 8253] [client 213.21.239.4:48792] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/database/.git/config"] [unique_id "aSdOzb-M2IHkRYVrcbOoxAAAAE8"]
[Thu Nov 27 03:02:37.335028 2025] [:error] [pid 8184:tid 8247] [client 213.21.239.4:48798] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/common/.git/config"] [unique_id "aSdOzb-M2IHkRYVrcbOoxQAAAEo"]
[Thu Nov 27 03:02:37.339938 2025] [:error] [pid 24814:tid 25094] [client 213.21.239.4:48816] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants../config"] [unique_id "aSdOzQPn1NMGCdo6Rsi5cwAAAVM"]
[Thu Nov 27 03:02:37.341886 2025] [:error] [pid 24814:tid 25099] [client 213.21.239.4:48652] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/api/.git/config"] [unique_id "aSdOzQPn1NMGCdo6Rsi5dAAAAVg"]
[Thu Nov 27 03:02:37.342216 2025] [:error] [pid 25262:tid 25328] [client 213.21.239.4:48820] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants/config"] [unique_id "aSdOzU3p81VU3bYILBVaGwAAAgc"]
[Thu Nov 27 03:02:37.344521 2025] [:error] [pid 25262:tid 25323] [client 213.21.239.4:48740] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants/..;/.git/config"] [unique_id "aSdOzU3p81VU3bYILBVaHAAAAgI"]
[Thu Nov 27 03:02:37.344918 2025] [:error] [pid 25262:tid 25326] [client 213.21.239.4:48674] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app/.git/config"] [unique_id "aSdOzU3p81VU3bYILBVaHQAAAgU"]
[Thu Nov 27 03:02:37.345503 2025] [:error] [pid 25262:tid 25322] [client 213.21.239.4:48716] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants../.git/config"] [unique_id "aSdOzU3p81VU3bYILBVaHgAAAgE"]
[Thu Nov 27 03:02:37.348409 2025] [:error] [pid 8184:tid 8250] [client 213.21.239.4:48788] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/content../.git/config"] [unique_id "aSdOzb-M2IHkRYVrcbOoxgAAAEw"]
[Thu Nov 27 03:02:37.349120 2025] [:error] [pid 25262:tid 25344] [client 213.21.239.4:48738] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants/.git/config;"] [unique_id "aSdOzU3p81VU3bYILBVaHwAAAhc"]
[Thu Nov 27 03:02:39.363817 2025] [:error] [pid 25262:tid 25338] [client 213.21.239.4:49294] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants../config"] [unique_id "aSdOz03p81VU3bYILBVaJwAAAhE"]
[Thu Nov 27 03:02:39.363817 2025] [:error] [pid 25262:tid 25332] [client 213.21.239.4:49286] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau.windfarmcoolants.com.au../config"] [unique_id "aSdOz03p81VU3bYILBVaKQAAAgs"]
[Thu Nov 27 03:02:39.363828 2025] [:error] [pid 25262:tid 25333] [client 213.21.239.4:49308] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants/config"] [unique_id "aSdOz03p81VU3bYILBVaKAAAAgw"]
[Thu Nov 27 03:02:39.476665 2025] [:error] [pid 24814:tid 25097] [client 213.21.239.4:49538] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/;/.git/config"] [unique_id "aSdOzwPn1NMGCdo6Rsi5fQAAAVY"]
[Thu Nov 27 03:02:39.483851 2025] [:error] [pid 24826:tid 25115] [client 213.21.239.4:49582] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/img../.git/config"] [unique_id "aSdOz1EvPXLVl-nh-yL2swAAAQA"]
[Thu Nov 27 03:02:39.499202 2025] [:error] [pid 8184:tid 8237] [client 213.21.239.4:49782] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSdOz7-M2IHkRYVrcbOo2gAAAEE"]
[Thu Nov 27 03:02:39.505730 2025] [:error] [pid 8184:tid 8250] [client 213.21.239.4:49454] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau.windfarmcoolants.com.au/.git/config;.."] [unique_id "aSdOz7-M2IHkRYVrcbOo3AAAAEw"]
[Thu Nov 27 03:02:39.505918 2025] [:error] [pid 24826:tid 25128] [client 213.21.239.4:49612] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau.windfarmcoolants.com.au/.git;/config"] [unique_id "aSdOz1EvPXLVl-nh-yL2twAAAQ0"]
[Thu Nov 27 03:02:39.516166 2025] [:error] [pid 54723:tid 54733] [client 213.21.239.4:49722] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau.windfarmcoolants.com.au/static../.git/config"] [unique_id "aSdOzw2CEg7QoyDosdIUIAAAAAM"]
[Thu Nov 27 03:02:39.517639 2025] [:error] [pid 24826:tid 25138] [client 213.21.239.4:49442] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau.windfarmcoolants.com.au/.git/config;"] [unique_id "aSdOz1EvPXLVl-nh-yL2uAAAARY"]
[Thu Nov 27 03:02:39.518301 2025] [:error] [pid 8184:tid 8258] [client 213.21.239.4:49932] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git;/config"] [unique_id "aSdOz7-M2IHkRYVrcbOo3gAAAFQ"]
[Thu Nov 27 03:02:39.519061 2025] [:error] [pid 8184:tid 8252] [client 213.21.239.4:49800] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau.windfarmcoolants.com.au/..;/.git/config"] [unique_id "aSdOz7-M2IHkRYVrcbOo3wAAAE4"]
[Thu Nov 27 03:02:39.524753 2025] [:error] [pid 8184:tid 8257] [client 213.21.239.4:49562] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/images../.git/config"] [unique_id "aSdOz7-M2IHkRYVrcbOo4QAAAFM"]
[Thu Nov 27 03:02:39.529564 2025] [:error] [pid 54723:tid 54738] [client 213.21.239.4:49922] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau.windfarmcoolants.com.au../.git/config"] [unique_id "aSdOzw2CEg7QoyDosdIUJAAAAAg"]
[Thu Nov 27 03:02:39.536750 2025] [:error] [pid 25180:tid 25193] [client 213.21.239.4:49666] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js../.git/config"] [unique_id "aSdOz7-owhtiwMHXYlzrYQAAAYs"]
[Thu Nov 27 03:02:39.537091 2025] [:error] [pid 8184:tid 8254] [client 213.21.239.4:49556] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau.windfarmcoolants.com.au/.git/config"] [unique_id "aSdOz7-M2IHkRYVrcbOo4gAAAFA"]
[Thu Nov 27 03:02:39.537626 2025] [:error] [pid 8184:tid 8242] [client 213.21.239.4:49554] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/git/.git/config"] [unique_id "aSdOz7-M2IHkRYVrcbOo4wAAAEY"]
[Thu Nov 27 03:02:39.537859 2025] [:error] [pid 54723:tid 54739] [client 213.21.239.4:49704] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau.windfarmcoolants.com.au/.git/%0Aconfig"] [unique_id "aSdOzw2CEg7QoyDosdIUJgAAAAk"]
[Thu Nov 27 03:02:39.540151 2025] [:error] [pid 25180:tid 25188] [client 213.21.239.4:49770] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib../.git/config"] [unique_id "aSdOz7-owhtiwMHXYlzrYgAAAYY"]
[Thu Nov 27 03:02:39.540626 2025] [:error] [pid 54723:tid 54744] [client 213.21.239.4:49888] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config;"] [unique_id "aSdOzw2CEg7QoyDosdIUJwAAAA4"]
[Thu Nov 27 03:02:39.548377 2025] [:error] [pid 25262:tid 25328] [client 213.21.239.4:49658] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau.windfarmcoolants.com.au/;/.git/config"] [unique_id "aSdOz03p81VU3bYILBVaMAAAAgc"]
[Thu Nov 27 03:02:39.548849 2025] [:error] [pid 8184:tid 8262] [client 213.21.239.4:49942] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git;/config;"] [unique_id "aSdOz7-M2IHkRYVrcbOo5AAAAFg"]
[Thu Nov 27 03:02:39.555684 2025] [:error] [pid 54723:tid 54746] [client 213.21.239.4:49854] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSdOzw2CEg7QoyDosdIUKAAAABA"]
[Thu Nov 27 03:02:39.556403 2025] [:error] [pid 54723:tid 54742] [client 213.21.239.4:49918] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config;.."] [unique_id "aSdOzw2CEg7QoyDosdIUKQAAAAw"]
[Thu Nov 27 03:02:39.557624 2025] [:error] [pid 25180:tid 25205] [client 213.21.239.4:49948] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/..;/.git/config"] [unique_id "aSdOz7-owhtiwMHXYlzrZwAAAZc"]
[Thu Nov 27 03:02:41.533385 2025] [:error] [pid 25180:tid 25200] [client 213.21.239.4:40516] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau.windfarmcoolants.com.au/.git;/config"] [unique_id "aSdO0b-owhtiwMHXYlzrcwAAAZI"]
[Thu Nov 27 03:02:41.538606 2025] [:error] [pid 25262:tid 25322] [client 213.21.239.4:40518] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git;/config"] [unique_id "aSdO0U3p81VU3bYILBVaNAAAAgE"]
[Thu Nov 27 03:02:41.569650 2025] [:error] [pid 24826:tid 25132] [client 213.21.239.4:40532] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git;/config;"] [unique_id "aSdO0VEvPXLVl-nh-yL2xQAAARA"]
[Thu Nov 27 03:02:42.463414 2025] [:error] [pid 54723:tid 54753] [client 213.21.239.4:40566] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/qa/.git/config"] [unique_id "aSdO0g2CEg7QoyDosdIULgAAABc"]
[Thu Nov 27 03:02:42.469734 2025] [:error] [pid 25262:tid 25326] [client 213.21.239.4:40620] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new/.git/config"] [unique_id "aSdO0k3p81VU3bYILBVaNwAAAgU"]
[Thu Nov 27 03:02:42.483752 2025] [:error] [pid 25262:tid 25340] [client 213.21.239.4:40652] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/message-api/.git/config"] [unique_id "aSdO0k3p81VU3bYILBVaOQAAAhM"]
[Thu Nov 27 03:02:42.484273 2025] [:error] [pid 54723:tid 54738] [client 213.21.239.4:40612] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/.git/config"] [unique_id "aSdO0g2CEg7QoyDosdIUNgAAAAg"]
[Thu Nov 27 03:02:42.485851 2025] [:error] [pid 25262:tid 25336] [client 213.21.239.4:40674] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/m/.git/config"] [unique_id "aSdO0k3p81VU3bYILBVaPAAAAg8"]
[Thu Nov 27 03:02:42.495777 2025] [:error] [pid 25262:tid 25337] [client 213.21.239.4:40848] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/.git/config;.."] [unique_id "aSdO0k3p81VU3bYILBVaPwAAAhA"]
[Thu Nov 27 03:02:42.505701 2025] [:error] [pid 54723:tid 54740] [client 213.21.239.4:40914] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/..;/.git/config"] [unique_id "aSdO0g2CEg7QoyDosdIUOgAAAAo"]
[Thu Nov 27 03:02:42.513568 2025] [:error] [pid 24814:tid 25080] [client 213.21.239.4:41014] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au../.git/config"] [unique_id "aSdO0gPn1NMGCdo6Rsi5iwAAAUU"]
[Thu Nov 27 03:02:42.515486 2025] [:error] [pid 24826:tid 25122] [client 213.21.239.4:40632] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/live/.git/config"] [unique_id "aSdO0lEvPXLVl-nh-yL2yQAAAQc"]
[Thu Nov 27 03:02:42.517879 2025] [:error] [pid 25262:tid 25321] [client 213.21.239.4:40862] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/.git;/config"] [unique_id "aSdO0k3p81VU3bYILBVaRAAAAgA"]
[Thu Nov 27 03:02:42.520726 2025] [:error] [pid 24826:tid 25120] [client 213.21.239.4:40696] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/prod/.git/config"] [unique_id "aSdO0lEvPXLVl-nh-yL2ygAAAQU"]
[Thu Nov 27 03:02:42.530049 2025] [:error] [pid 54723:tid 54741] [client 213.21.239.4:40978] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/.git/%0Aconfig"] [unique_id "aSdO0g2CEg7QoyDosdIUPQAAAAs"]
[Thu Nov 27 03:02:42.530278 2025] [:error] [pid 54723:tid 54730] [client 213.21.239.4:40864] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/;/.git/config"] [unique_id "aSdO0g2CEg7QoyDosdIUPgAAAAE"]
[Thu Nov 27 03:02:42.533616 2025] [:error] [pid 24814:tid 25093] [client 213.21.239.4:40928] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/static../.git/config"] [unique_id "aSdO0gPn1NMGCdo6Rsi5kgAAAVI"]
[Thu Nov 27 03:02:42.533718 2025] [:error] [pid 24814:tid 25088] [client 213.21.239.4:41044] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau/config"] [unique_id "aSdO0gPn1NMGCdo6Rsi5kwAAAU0"]
[Thu Nov 27 03:02:42.535801 2025] [:error] [pid 24814:tid 25090] [client 213.21.239.4:40832] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/.git/config;"] [unique_id "aSdO0gPn1NMGCdo6Rsi5lAAAAU8"]
[Thu Nov 27 03:02:42.546957 2025] [:error] [pid 25262:tid 25331] [client 213.21.239.4:41068] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/.git/config"] [unique_id "aSdO0k3p81VU3bYILBVaSgAAAgo"]
[Thu Nov 27 03:02:42.547674 2025] [:error] [pid 24826:tid 25128] [client 213.21.239.4:40902] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au../config"] [unique_id "aSdO0lEvPXLVl-nh-yL2zQAAAQ0"]
[Thu Nov 27 03:02:42.552078 2025] [:error] [pid 25262:tid 25339] [client 213.21.239.4:40998] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau../config"] [unique_id "aSdO0k3p81VU3bYILBVaTQAAAhI"]
[Thu Nov 27 03:02:42.552103 2025] [:error] [pid 25262:tid 25338] [client 213.21.239.4:40974] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/config"] [unique_id "aSdO0k3p81VU3bYILBVaTAAAAhE"]
[Thu Nov 27 03:02:42.553000 2025] [:error] [pid 24814:tid 25094] [client 213.21.239.4:41064] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau../.git/config"] [unique_id "aSdO0gPn1NMGCdo6Rsi5lgAAAVM"]
[Thu Nov 27 03:02:42.553898 2025] [:error] [pid 24814:tid 25098] [client 213.21.239.4:41056] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau/.git/%0Aconfig"] [unique_id "aSdO0gPn1NMGCdo6Rsi5lwAAAVc"]
[Thu Nov 27 03:02:44.466305 2025] [:error] [pid 25180:tid 25205] [client 213.21.239.4:41188] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau/.git/config"] [unique_id "aSdO1L-owhtiwMHXYlzrdgAAAZc"]
[Thu Nov 27 03:02:44.479977 2025] [:error] [pid 24826:tid 25137] [client 213.21.239.4:41324] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau/..;/.git/config"] [unique_id "aSdO1FEvPXLVl-nh-yL20gAAARU"]
[Thu Nov 27 03:02:44.488082 2025] [:error] [pid 24826:tid 25133] [client 213.21.239.4:41244] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau/.git/config;"] [unique_id "aSdO1FEvPXLVl-nh-yL20wAAARE"]
[Thu Nov 27 03:02:44.548032 2025] [:error] [pid 8184:tid 8240] [client 213.21.239.4:41428] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau/config"] [unique_id "aSdO1L-M2IHkRYVrcbOo7wAAAEQ"]
[Thu Nov 27 03:02:44.559894 2025] [:error] [pid 25180:tid 25187] [client 213.21.239.4:41414] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/.git;/config"] [unique_id "aSdO1L-owhtiwMHXYlzrewAAAYU"]
[Thu Nov 27 03:02:44.562756 2025] [:error] [pid 54723:tid 54739] [client 213.21.239.4:41464] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au../config"] [unique_id "aSdO1A2CEg7QoyDosdIUSgAAAAk"]
[Thu Nov 27 03:02:44.566910 2025] [:error] [pid 25262:tid 25324] [client 213.21.239.4:41466] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/config"] [unique_id "aSdO1E3p81VU3bYILBVaUAAAAgM"]
[Thu Nov 27 03:02:44.567894 2025] [:error] [pid 25262:tid 25337] [client 213.21.239.4:41468] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau../config"] [unique_id "aSdO1E3p81VU3bYILBVaUQAAAhA"]
[Thu Nov 27 03:02:45.459202 2025] [:error] [pid 8184:tid 8243] [client 213.21.239.4:41572] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/staging/.git/config"] [unique_id "aSdO1b-M2IHkRYVrcbOo8QAAAEc"]
[Thu Nov 27 03:02:45.465721 2025] [:error] [pid 54723:tid 54738] [client 213.21.239.4:41686] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau/.git/config;.."] [unique_id "aSdO1Q2CEg7QoyDosdIUTwAAAAg"]
[Thu Nov 27 03:02:45.469124 2025] [:error] [pid 54723:tid 54748] [client 213.21.239.4:41494] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau/static../.git/config"] [unique_id "aSdO1Q2CEg7QoyDosdIUUQAAABI"]
[Thu Nov 27 03:02:45.470252 2025] [:error] [pid 8184:tid 8241] [client 213.21.239.4:41488] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau/;/.git/config"] [unique_id "aSdO1b-M2IHkRYVrcbOo9QAAAEU"]
[Thu Nov 27 03:02:45.472196 2025] [:error] [pid 54723:tid 54737] [client 213.21.239.4:41594] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/static../.git/config"] [unique_id "aSdO1Q2CEg7QoyDosdIUUgAAAAc"]
[Thu Nov 27 03:02:45.474171 2025] [:error] [pid 54723:tid 54740] [client 213.21.239.4:41634] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uat/.git/config"] [unique_id "aSdO1Q2CEg7QoyDosdIUUwAAAAo"]
[Thu Nov 27 03:02:45.481521 2025] [:error] [pid 54723:tid 54730] [client 213.21.239.4:41724] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aSdO1Q2CEg7QoyDosdIUVgAAAAE"]
[Thu Nov 27 03:02:45.483121 2025] [:error] [pid 54723:tid 54745] [client 213.21.239.4:41758] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/web/.git/config"] [unique_id "aSdO1Q2CEg7QoyDosdIUVwAAAA8"]
[Thu Nov 27 03:02:45.485334 2025] [:error] [pid 54723:tid 54741] [client 213.21.239.4:41666] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau/.git;/config"] [unique_id "aSdO1Q2CEg7QoyDosdIUWgAAAAs"]
[Thu Nov 27 03:02:45.490712 2025] [:error] [pid 24826:tid 25118] [client 213.21.239.4:41774] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aSdO1VEvPXLVl-nh-yL22gAAAQM"]
[Thu Nov 27 03:02:45.496716 2025] [:error] [pid 24826:tid 25136] [client 213.21.239.4:41738] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/.git/config"] [unique_id "aSdO1VEvPXLVl-nh-yL22wAAARQ"]
[Thu Nov 27 03:02:47.519313 2025] [:error] [pid 25262:tid 25327] [client 213.21.239.4:41834] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/windfcau/.git;/config"] [unique_id "aSdO103p81VU3bYILBVaVgAAAgY"]
[Thu Nov 27 09:45:46.647634 2025] [:error] [pid 19013:tid 19039] [client 46.105.92.110:35016] [client 46.105.92.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSetSoaBrX8b6-N6_86pDQAAABY"]
[Thu Nov 27 09:45:46.806117 2025] [:error] [pid 19119:tid 19184] [client 46.105.92.110:35028] [client 46.105.92.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSetShsL_RTusriYkweeAgAAAMo"]
2026/03/10 18:09:09 [error] 14451#14451: *5178 "/usr/local/apache/htdocs/suspended-page/wp-admin/css/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-admin/css/ HTTP/1.1", host: "www.windfcau.windfarmcoolants.com.au", referrer: "binance.com"
2026/03/10 18:09:21 [error] 14458#14458: *5328 "/usr/local/apache/htdocs/suspended-page/.well-known/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: windfcau.windfarmcoolants.com.au, request: "GET /.well-known/ HTTP/1.1", host: "www.windfcau.windfarmcoolants.com.au", referrer: "binance.com"
2026/03/10 18:09:28 [error] 14454#14454: *5405 "/usr/local/apache/htdocs/suspended-page/sites/default/files/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: windfcau.windfarmcoolants.com.au, request: "GET /sites/default/files/ HTTP/1.1", host: "www.windfcau.windfarmcoolants.com.au", referrer: "binance.com"
2026/03/10 18:09:37 [error] 14448#14448: *5502 "/usr/local/apache/htdocs/suspended-page/admin/controller/extension/extension/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: windfcau.windfarmcoolants.com.au, request: "GET /admin/controller/extension/extension/ HTTP/1.1", host: "www.windfcau.windfarmcoolants.com.au", referrer: "binance.com"
2026/03/10 18:09:50 [error] 14455#14455: *5647 "/usr/local/apache/htdocs/suspended-page/uploads/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: windfcau.windfarmcoolants.com.au, request: "GET /uploads/ HTTP/1.1", host: "www.windfcau.windfarmcoolants.com.au", referrer: "binance.com"
2026/03/10 18:10:04 [error] 14456#14456: *5784 "/usr/local/apache/htdocs/suspended-page/images/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: windfcau.windfarmcoolants.com.au, request: "GET /images/ HTTP/1.1", host: "www.windfcau.windfarmcoolants.com.au", referrer: "binance.com"
2026/03/10 18:10:11 [error] 14456#14456: *5919 "/usr/local/apache/htdocs/suspended-page/files/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: windfcau.windfarmcoolants.com.au, request: "GET /files/ HTTP/1.1", host: "www.windfcau.windfarmcoolants.com.au", referrer: "binance.com"
2026/03/10 19:51:11 [error] 14458#14458: *81461 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 44.251.252.90, server: windfcau.windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:04 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-content/uploads/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-content/uploads/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:04 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:04 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/css/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/css/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:05 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/ID3/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/ID3/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:05 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/IXR/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/IXR/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:06 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/Requests/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/Requests/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:06 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/SimplePie/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/SimplePie/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:06 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/Text/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/Text/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:07 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-content/mu-plugins-old/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-content/mu-plugins-old/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:07 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-content/themes/classic/inc/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-content/themes/classic/inc/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:08 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-content/plugins/ninja-forms/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-content/plugins/ninja-forms/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:08 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-content/mu-plugins/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-content/mu-plugins/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:08 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/Text/Diff/Renderer/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:09 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/blocks/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/blocks/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:09 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/certificates/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/certificates/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:09 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/customize/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/customize/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:10 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/fonts/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/fonts/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:10 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/images/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/images/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:10 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/.well-known/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /.well-known/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:12 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/ALFA_DATA/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /ALFA_DATA/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:13 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/.well-knownold/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /.well-knownold/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:13 [error] 3468#3468: *462505 directory index of "/usr/local/apache/autossl_tmp/.well-known/acme-challenge/" is forbidden, client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /.well-known/acme-challenge/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:14 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/cgi-bin/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /cgi-bin/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:14 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/index/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /index/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:14 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/id/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /id/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:15 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/www/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /www/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:15 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/web/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /web/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:16 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/uploads/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /uploads/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:16 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/upload/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /upload/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:16 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/admin/uploads/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /admin/uploads/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:17 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/Admin/uploads/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /Admin/uploads/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:17 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/admin/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /admin/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:17 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/images/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /images/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:18 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/assets/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /assets/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:18 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/vendor/phpunit/phpunit/src/Util/PHP/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:19 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/upload/image/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /upload/image/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:19 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/assets/images/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /assets/images/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:19 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/Public/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /Public/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:20 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/vendor/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /vendor/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:21 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/local/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /local/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:22 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/modules/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /modules/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:22 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/Site/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /Site/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:23 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/system/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /system/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:24 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/template/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /template/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:24 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/shop/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /shop/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:25 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/files/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /files/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:25 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/admin/editor/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /admin/editor/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:25 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/include/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /include/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:26 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/Assets/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /Assets/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:26 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/images/stories/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /images/stories/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:27 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/plugins/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /plugins/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:27 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/php/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /php/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:27 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-admin/css/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-admin/css/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:28 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-content/themes/twentytwenty/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-content/themes/twentytwenty/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:28 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-content/cache/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-content/cache/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:28 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-admin/maint/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-admin/maint/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:29 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-content/plugins/akismet/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-content/plugins/akismet/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:29 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/assets/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/assets/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:29 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/block-patterns/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/block-patterns/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:30 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/block-supports/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/block-supports/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:30 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/html-api/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/html-api/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:31 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/js/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/js/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:31 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/php-compat/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/php-compat/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:32 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/PHPMailer/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/PHPMailer/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:32 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/pomo/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/pomo/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:32 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/random_compat/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/random_compat/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:33 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/rest-api/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/rest-api/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:33 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/sitemaps/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/sitemaps/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:33 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/sodium_compat/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/sodium_compat/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:34 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/style-engine/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/style-engine/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:34 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/theme-compat/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/theme-compat/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:34 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-includes/widgets/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-includes/widgets/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:35 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-admin/css/colors/ectoplasm/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:35 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-admin/css/colors/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-admin/css/colors/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:35 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/admin/images/slider/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /admin/images/slider/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:36 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/admin/fckeditor/editor/filemanager/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:36 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/sites/default/files/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /sites/default/files/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:36 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/admin/controller/extension/extension/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /admin/controller/extension/extension/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:37 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/modules/mod_simplefileuploadv1.3/elements/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:37 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/components/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /components/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:37 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/admin/uploads/images/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /admin/uploads/images/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:38 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-content/plugins/classic-editor/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-content/plugins/classic-editor/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:38 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-content/fonts/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-content/fonts/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:39 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-content/plugins/contact-form-7/admin/js/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-content/plugins/contact-form-7/admin/js/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:39 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-content/plugins/contact-form-7/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-content/plugins/contact-form-7/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:40 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wordpress/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wordpress/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:40 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-admin/images/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-admin/images/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:40 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-content/plugins/wordpress-seo/js/dist/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-content/plugins/wordpress-seo/js/dist/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:40 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-content/plugins/wordpress-seo/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-content/plugins/wordpress-seo/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:41 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/js/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /js/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:41 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-content/plugins/woocommerce/assets/js/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-content/plugins/woocommerce/assets/js/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:42 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-content/plugins/woocommerce/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-content/plugins/woocommerce/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:42 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-admin/meta/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-admin/meta/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:42 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-admin/network/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-admin/network/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:43 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-admin/user/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-admin/user/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:44 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-content/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-content/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:44 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-content/plugins/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-content/plugins/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:44 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-content/themes/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-content/themes/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:45 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-admin/includes/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-admin/includes/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:45 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-admin/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-admin/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 04:44:45 [error] 3468#3468: *462505 "/usr/local/apache/htdocs/suspended-page/wp-content/upgrade/index.html" is not found (2: No such file or directory), client: 89.117.104.51, server: windfcau.windfarmcoolants.com.au, request: "GET /wp-content/upgrade/ HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 06:47:10 [error] 3466#3466: *541225 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 74.7.228.37, server: windfcau.windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 14:46:47 [error] 53939#53939: *825998 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 74.7.175.129, server: windfcau.windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.windfcau.windfarmcoolants.com.au"
2026/03/11 21:39:00 [error] 53945#53945: *1126093 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 44.243.53.101, server: windfcau.windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/11 22:35:51 [error] 53945#53945: *1166310 openat() "/usr/local/apache/htdocs/suspended-page/favicon.ico" failed (2: No such file or directory), client: 162.142.125.122, server: windfcau.windfarmcoolants.com.au, request: "GET /favicon.ico HTTP/1.1", host: "windfcau.windfarmcoolants.com.au"
2026/03/12 05:44:53 [error] 58923#58923: *1429938 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 104.222.46.148, server: windfcau.windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "windfcau.windfarmcoolants.com.au", referrer: "https://windfcau.windfarmcoolants.com.au/"
2026/03/12 05:45:04 [error] 58922#58922: *1430037 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 172.121.223.32, server: windfcau.windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.windfcau.windfarmcoolants.com.au", referrer: "https://www.windfcau.windfarmcoolants.com.au/"
[Thu Mar 12 08:20:25.338478 2026] [:error] [pid 51540:tid 51550] [client 34.48.116.172:38542] [client 34.48.116.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "abIGyWOFFjotMIN2UD1X9gAAAMg"]
[Thu Mar 12 22:30:54.518603 2026] [:error] [pid 20467:tid 20472] [client 35.237.6.187:51712] [client 35.237.6.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "abLOHnJ3UvosyIqy8ayx_wAAAoI"]
[Fri Mar 13 01:37:35.112974 2026] [:error] [pid 47893:tid 47994] [client 4.205.39.42:11250] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Mar 13 01:37:35.323675 2026] [:error] [pid 47893:tid 47998] [client 4.205.39.42:11250] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Mar 13 01:37:35.742742 2026] [:error] [pid 47893:tid 47979] [client 4.205.39.42:11250] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Fri Mar 13 01:37:35.951891 2026] [:error] [pid 47893:tid 47996] [client 4.205.39.42:11250] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Mar 13 01:37:36.461911 2026] [:error] [pid 47893:tid 47981] [client 4.205.39.42:11250] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Fri Mar 13 01:37:36.672013 2026] [:error] [pid 47893:tid 47984] [client 4.205.39.42:11250] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri Mar 13 01:37:36.883191 2026] [:error] [pid 47893:tid 47987] [client 4.205.39.42:11250] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Fri Mar 13 01:37:37.338216 2026] [:error] [pid 47893:tid 47976] [client 4.205.39.42:11250] [client 4.205.39.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abL54QYSdu6aqxO_YucjHQAAAIE"]
[Fri Mar 13 01:37:46.449972 2026] [:error] [pid 48029:tid 48044] [client 4.205.39.42:56503] [client 4.205.39.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abL56m7cFKMmtdGhPH_G8QAAAA0"]
[Fri Mar 13 01:37:49.249581 2026] [:error] [pid 48029:tid 48055] [client 4.205.39.42:56460] [client 4.205.39.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abL57W7cFKMmtdGhPH_G9gAAABg"]
[Fri Mar 13 01:37:50.343297 2026] [:error] [pid 48029:tid 48045] [client 4.205.39.42:56484] [client 4.205.39.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abL57m7cFKMmtdGhPH_G-AAAAA4"]
[Fri Mar 13 01:45:29.864331 2026] [:error] [pid 56003:tid 56025] [client 157.230.169.220:62052] [client 157.230.169.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.169.220, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "abL7uRQtM0oeMdFWe6Vv1AAAANQ"]
[Fri Mar 13 01:45:29.868277 2026] [:error] [pid 56003:tid 56025] [client 157.230.169.220:62052] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 13 08:29:54.195464 2026] [:error] [pid 44755:tid 44769] [client 195.178.110.159:45110] [client 195.178.110.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "abNagvONf1H0XrBFE4OiPgAAAQw"]
[Fri Mar 13 09:08:29.874277 2026] [:error] [pid 55077:tid 55083] [client 195.178.110.159:46370] [client 195.178.110.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "abNjjd9Ul5ym4M-PlQI-ogAAAUQ"]
[Fri Mar 13 09:22:32.590629 2026] [:error] [pid 61928:tid 61990] [client 194.180.48.253:43800] [client 194.180.48.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "abNm2Aod66AHekJJZipLbQAAAE0"]
[Fri Mar 13 23:53:01.971748 2026] [:error] [pid 60496:tid 60526] [client 20.151.4.179:10297] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/hp2.php"] [unique_id "abQy3Qb67oGiJ3jaL8wrhwAAA1Y"]
[Fri Mar 13 23:53:02.803356 2026] [:error] [pid 60436:tid 60476] [client 20.151.4.179:10264] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/hp2.php"] [unique_id "abQy3oI3PEddCArY1Aa2NwAAAwc"]
[Fri Mar 13 23:53:03.644194 2026] [:error] [pid 55077:tid 55102] [client 20.151.4.179:11207] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/hp2.php"] [unique_id "abQy399Ul5ym4M-PlQIE2wAAAVc"]
[Fri Mar 13 23:53:04.478675 2026] [:error] [pid 60497:tid 60548] [client 20.151.4.179:11138] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/hp2.php"] [unique_id "abQy4BjNYgapWlkb4ljYgwAAA5E"]
[Sat Mar 14 01:13:35.546596 2026] [:error] [pid 47878:tid 47961] [client 20.151.4.179:56252] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sat Mar 14 01:13:35.755941 2026] [:error] [pid 47878:tid 47946] [client 20.151.4.179:56252] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat Mar 14 01:13:35.968161 2026] [:error] [pid 47878:tid 47939] [client 20.151.4.179:56252] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Mar 14 01:13:36.178102 2026] [:error] [pid 47878:tid 47947] [client 20.151.4.179:56252] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Mar 14 01:13:36.387292 2026] [:error] [pid 47878:tid 47953] [client 20.151.4.179:56252] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Mar 14 01:13:36.597546 2026] [:error] [pid 47878:tid 47941] [client 20.151.4.179:56252] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Sat Mar 14 01:13:36.806947 2026] [:error] [pid 47878:tid 47958] [client 20.151.4.179:56252] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sat Mar 14 01:13:37.018883 2026] [:error] [pid 47878:tid 47944] [client 20.151.4.179:56252] File does not exist: /usr/local/apache/htdocs/suspended-page/nux.php
[Sat Mar 14 01:13:37.228677 2026] [:error] [pid 47878:tid 47945] [client 20.151.4.179:56252] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Sat Mar 14 01:13:37.437991 2026] [:error] [pid 47878:tid 47951] [client 20.151.4.179:56252] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Sat Mar 14 01:13:37.644140 2026] [:error] [pid 47878:tid 47959] [client 20.151.4.179:56252] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chati.php"] [unique_id "abRFwX8jymmmpr1jcBeoaAAAAFQ"]
[Sat Mar 14 01:13:38.482345 2026] [:error] [pid 47891:tid 47973] [client 20.151.4.179:56203] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chati.php"] [unique_id "abRFwvchNnuMqi7I_WHybAAAAIc"]
[Sat Mar 14 01:13:39.306866 2026] [:error] [pid 47891:tid 47974] [client 20.151.4.179:56239] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chati.php"] [unique_id "abRFw_chNnuMqi7I_WHybgAAAIg"]
[Sat Mar 14 01:13:40.131893 2026] [:error] [pid 48070:tid 48095] [client 20.151.4.179:55306] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chati.php"] [unique_id "abRFxEIvrhMS5BVHxNkUSgAAABc"]
[Sat Mar 14 09:31:26.793797 2026] [:error] [pid 4018:tid 4036] [client 185.137.164.16:56533] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/HEAD"] [unique_id "abS6bgEk1fxdMMkDDaL_6QAAAMs"]
[Sat Mar 14 09:31:27.478897 2026] [:error] [pid 3913:tid 3968] [client 185.137.164.19:25121] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/HEAD"] [unique_id "abS6bx9qvQd4GQHUp69FuwAAAEs"]
[Sat Mar 14 10:07:18.666613 2026] [:error] [pid 3912:tid 3932] [client 98.71.74.154:37236] File does not exist: /usr/local/apache/htdocs/suspended-page/nz.php
[Sat Mar 14 10:07:18.921275 2026] [:error] [pid 3912:tid 3935] [client 98.71.74.154:37236] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-scxy.php
[Sun Mar 15 08:25:09.489364 2026] [:error] [pid 50986:tid 50990] [client 20.219.138.187:2638] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Mar 15 08:25:09.640119 2026] [:error] [pid 50986:tid 51004] [client 20.219.138.187:2638] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Mar 15 08:25:09.940849 2026] [:error] [pid 50986:tid 51011] [client 20.219.138.187:2638] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sun Mar 15 08:25:10.092791 2026] [:error] [pid 50986:tid 50993] [client 20.219.138.187:2638] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 15 08:25:10.393959 2026] [:error] [pid 50986:tid 51010] [client 20.219.138.187:2638] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sun Mar 15 08:25:10.575187 2026] [:error] [pid 50986:tid 51013] [client 20.219.138.187:2638] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Mar 15 08:25:10.726694 2026] [:error] [pid 50986:tid 50994] [client 20.219.138.187:2638] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sun Mar 15 08:25:11.025058 2026] [:error] [pid 50986:tid 51000] [client 20.219.138.187:2638] [client 20.219.138.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abX8ZyknK4c779bcQqGnrgAAAUs"]
[Sun Mar 15 08:25:11.629525 2026] [:error] [pid 50986:tid 51002] [client 20.219.138.187:2093] [client 20.219.138.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abX8ZyknK4c779bcQqGnsAAAAU0"]
[Sun Mar 15 08:25:12.228682 2026] [:error] [pid 38540:tid 38590] [client 20.219.138.187:2076] [client 20.219.138.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abX8aF8bnHsJ1dE90bIEkgAAAEQ"]
[Sun Mar 15 08:25:12.825852 2026] [:error] [pid 50986:tid 50992] [client 20.219.138.187:2097] [client 20.219.138.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abX8aCknK4c779bcQqGntQAAAUQ"]
[Sun Mar 15 21:38:51.757410 2026] [:error] [pid 50986:tid 50997] [client 3.142.250.61:54766] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Mar 15 21:38:51.966691 2026] [:error] [pid 50986:tid 51005] [client 3.142.250.61:54766] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Mar 15 21:38:52.367603 2026] [:error] [pid 50986:tid 51000] [client 3.142.250.61:54766] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sun Mar 15 21:38:52.567376 2026] [:error] [pid 50986:tid 50994] [client 3.142.250.61:54766] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 15 21:38:53.201675 2026] [:error] [pid 50986:tid 51004] [client 3.142.250.61:54766] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sun Mar 15 21:38:53.409658 2026] [:error] [pid 50986:tid 50991] [client 3.142.250.61:54766] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Mar 15 21:38:53.610230 2026] [:error] [pid 50986:tid 51001] [client 3.142.250.61:54766] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sun Mar 15 21:38:54.133347 2026] [:error] [pid 50986:tid 51003] [client 3.142.250.61:54766] [client 3.142.250.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aba2biknK4c779bcQqHtogAAAU4"]
[Sun Mar 15 21:38:56.016762 2026] [:error] [pid 50986:tid 50990] [client 3.142.250.61:58523] [client 3.142.250.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aba2cCknK4c779bcQqHtpgAAAUI"]
[Sun Mar 15 21:38:57.514683 2026] [:error] [pid 38645:tid 38655] [client 3.142.250.61:59480] [client 3.142.250.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aba2cRFPHtsDUuVrWDbRDgAAAMg"]
[Sun Mar 15 21:38:59.010276 2026] [:error] [pid 9995:tid 10001] [client 3.142.250.61:60811] [client 3.142.250.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aba2cwa8xkcaSmgTbwiS2gAAAQM"]
[Mon Mar 16 00:25:18.753680 2026] [:error] [pid 60947:tid 61017] [client 104.28.246.112:63480] [client 104.28.246.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "abbdbv8DVbvyAQDJWh1D1QAAAM8"]
[Mon Mar 16 04:04:47.097578 2026] [:error] [pid 62429:tid 62517] [client 3.142.250.61:63795] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Mon Mar 16 04:04:47.299345 2026] [:error] [pid 62429:tid 62513] [client 3.142.250.61:63795] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Mon Mar 16 04:04:47.499254 2026] [:error] [pid 62429:tid 62516] [client 3.142.250.61:63795] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Mon Mar 16 04:04:47.703025 2026] [:error] [pid 62429:tid 62501] [client 3.142.250.61:63795] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Mar 16 04:04:47.903296 2026] [:error] [pid 62429:tid 62514] [client 3.142.250.61:63795] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon Mar 16 04:04:48.250929 2026] [:error] [pid 62429:tid 62508] [client 3.142.250.61:63795] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Mon Mar 16 04:04:48.762941 2026] [:error] [pid 62429:tid 62502] [client 3.142.250.61:63795] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Mon Mar 16 04:04:48.966071 2026] [:error] [pid 62429:tid 62515] [client 3.142.250.61:63795] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Mon Mar 16 04:04:49.165703 2026] [:error] [pid 62429:tid 62512] [client 3.142.250.61:63795] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Mon Mar 16 04:04:49.499093 2026] [:error] [pid 62429:tid 62498] [client 3.142.250.61:63795] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Mon Mar 16 04:04:49.695519 2026] [:error] [pid 62429:tid 62509] [client 3.142.250.61:63795] [client 3.142.250.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "abcQ4VewIPukhLCowEGW-QAAAI0"]
[Mon Mar 16 04:04:52.134174 2026] [:error] [pid 62429:tid 62518] [client 3.142.250.61:51473] [client 3.142.250.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "abcQ5FewIPukhLCowEGXAgAAAJY"]
[Mon Mar 16 04:04:53.336888 2026] [:error] [pid 62529:tid 62558] [client 3.142.250.61:53810] [client 3.142.250.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "abcQ5T84-luOVYZKK0M24gAAANU"]
[Mon Mar 16 04:04:54.862002 2026] [:error] [pid 62429:tid 62519] [client 3.142.250.61:55047] [client 3.142.250.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "abcQ5lewIPukhLCowEGXDgAAAJc"]
[Mon Mar 16 04:21:27.158250 2026] [:error] [pid 62428:tid 62485] [client 96.44.136.159:35742] [client 96.44.136.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||windfcau.windfarmcoolants.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "abcUx6rHSRXFZx1-aIG9TgAAAFA"], referer: https://www.google.com
[Mon Mar 16 09:27:12.699244 2026] [:error] [pid 62429:tid 62505] [client 3.142.250.61:64742] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Mon Mar 16 09:27:13.100331 2026] [:error] [pid 62429:tid 62503] [client 3.142.250.61:64742] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Mon Mar 16 09:27:13.303822 2026] [:error] [pid 62429:tid 62511] [client 3.142.250.61:64742] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Mon Mar 16 09:27:13.508484 2026] [:error] [pid 62429:tid 62520] [client 3.142.250.61:64742] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php
[Mon Mar 16 09:27:13.711666 2026] [:error] [pid 62429:tid 62501] [client 3.142.250.61:64742] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Mon Mar 16 09:27:14.020169 2026] [:error] [pid 62429:tid 62496] [client 3.142.250.61:64742] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko-new.php
[Mon Mar 16 09:27:14.220079 2026] [:error] [pid 62429:tid 62518] [client 3.142.250.61:64742] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php.php
[Mon Mar 16 09:27:14.420112 2026] [:error] [pid 62429:tid 62509] [client 3.142.250.61:64742] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Mon Mar 16 09:27:14.619898 2026] [:error] [pid 62429:tid 62508] [client 3.142.250.61:64742] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Mon Mar 16 09:27:14.820737 2026] [:error] [pid 62429:tid 62519] [client 3.142.250.61:64742] File does not exist: /usr/local/apache/htdocs/suspended-page/wi.php
[Mon Mar 16 09:27:15.017573 2026] [:error] [pid 62429:tid 62507] [client 3.142.250.61:64742] [client 3.142.250.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/function.php"] [unique_id "abdcc1ewIPukhLCowEEUEwAAAIs"]
[Mon Mar 16 09:27:16.406666 2026] [:error] [pid 12822:tid 12838] [client 3.142.250.61:51418] [client 3.142.250.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/function.php"] [unique_id "abdcdIG9Ft4WPo7r7sR0OQAAAcM"]
[Mon Mar 16 09:27:17.646576 2026] [:error] [pid 62529:tid 62550] [client 3.142.250.61:52559] [client 3.142.250.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/function.php"] [unique_id "abdcdT84-luOVYZKK0O3rwAAAM0"]
[Mon Mar 16 09:27:19.080787 2026] [:error] [pid 52152:tid 52156] [client 3.142.250.61:53682] [client 3.142.250.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/function.php"] [unique_id "abdcd8A6rS_GLRd0NKWXYAAAAQE"]
[Mon Mar 16 11:44:15.799526 2026] [:error] [pid 62025:tid 62065] [client 20.92.73.241:3138] [client 20.92.73.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.92.73.241, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "abd8j-imBfLmKh7zLXMaSgAAAEY"]
[Mon Mar 16 11:44:15.804479 2026] [:error] [pid 62025:tid 62065] [client 20.92.73.241:3138] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Mar 16 12:35:52.808462 2026] [:error] [pid 9354:tid 9385] [client 20.89.241.129:3520] [client 20.89.241.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.89.241.129, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "abeIqHBF0M4d8CifbJ5CXgAAAdY"]
[Mon Mar 16 12:35:52.811840 2026] [:error] [pid 9354:tid 9385] [client 20.89.241.129:3520] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Mar 18 00:33:02.373546 2026] [:error] [pid 40715:tid 40943] [client 20.151.110.211:26027] [client 20.151.110.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wk/index.php"] [unique_id "abmCPmcms0rUPgdkLiH3hgAAAAU"]
[Wed Mar 18 00:33:06.337528 2026] [:error] [pid 40715:tid 40942] [client 20.151.110.211:26043] [client 20.151.110.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wk/index.php"] [unique_id "abmCQmcms0rUPgdkLiH3kAAAAAQ"]
[Wed Mar 18 00:33:07.553182 2026] [:error] [pid 40715:tid 40959] [client 20.151.110.211:26014] [client 20.151.110.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wk/index.php"] [unique_id "abmCQ2cms0rUPgdkLiH3kwAAABU"]
[Wed Mar 18 00:33:09.903627 2026] [:error] [pid 40715:tid 40954] [client 20.151.110.211:26049] [client 20.151.110.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wk/index.php"] [unique_id "abmCRWcms0rUPgdkLiH3mQAAABA"]
[Wed Mar 18 04:13:46.433086 2026] [:error] [pid 13716:tid 13726] [client 192.227.231.190:34624] [client 192.227.231.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||windfcau.windfarmcoolants.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "abm1-mWKzQVHkZkUHaS3MQAAAUg"], referer: https://www.bing.com/search?q=login
[Wed Mar 18 10:39:43.694751 2026] [:error] [pid 42970:tid 42979] [client 52.140.125.218:10613] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Mar 18 10:39:43.846684 2026] [:error] [pid 42970:tid 42977] [client 52.140.125.218:10613] File does not exist: /usr/local/apache/htdocs/suspended-page/lite.php
[Wed Mar 18 10:39:44.002049 2026] [:error] [pid 42970:tid 42994] [client 52.140.125.218:10613] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Mar 18 10:39:44.159496 2026] [:error] [pid 42970:tid 42992] [client 52.140.125.218:10613] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Mar 18 10:39:44.312402 2026] [:error] [pid 42970:tid 42993] [client 52.140.125.218:10613] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Wed Mar 18 10:39:44.793604 2026] [:error] [pid 42970:tid 42975] [client 52.140.125.218:10613] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed Mar 18 10:39:44.947082 2026] [:error] [pid 42970:tid 42973] [client 52.140.125.218:10613] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Wed Mar 18 10:39:45.103178 2026] [:error] [pid 42970:tid 42989] [client 52.140.125.218:10613] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed Mar 18 10:39:45.255875 2026] [:error] [pid 42970:tid 42979] [client 52.140.125.218:10613] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Mar 18 10:39:45.403339 2026] [:error] [pid 42970:tid 42981] [client 52.140.125.218:10613] [client 52.140.125.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "aboQcY5YFUj4vBJI0KTNiAAAAMk"]
[Wed Mar 18 10:39:45.997964 2026] [:error] [pid 43009:tid 43027] [client 52.140.125.218:10569] [client 52.140.125.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "aboQcX8aUp4Sm6m3nmOpxAAAARA"]
[Wed Mar 18 10:39:46.615538 2026] [:error] [pid 43009:tid 43015] [client 52.140.125.218:26147] [client 52.140.125.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "aboQcn8aUp4Sm6m3nmOpyQAAAQQ"]
[Wed Mar 18 10:39:47.232195 2026] [:error] [pid 42970:tid 42972] [client 52.140.125.218:24782] [client 52.140.125.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "aboQc45YFUj4vBJI0KTNjAAAAMA"]
[Wed Mar 18 20:05:37.711828 2026] [:error] [pid 20667:tid 20678] [client 20.220.57.95:20227] [client 20.220.57.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wk/index.php"] [unique_id "abqVEZgyfQyvBhzza_19NQAAAYk"]
[Wed Mar 18 20:05:45.245334 2026] [:error] [pid 42870:tid 42892] [client 20.220.57.95:20228] [client 20.220.57.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wk/index.php"] [unique_id "abqVGZ6axlAooiuYyUwp4QAAAAc"]
[Wed Mar 18 20:05:49.118417 2026] [:error] [pid 43009:tid 43030] [client 20.220.57.95:19887] [client 20.220.57.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wk/index.php"] [unique_id "abqVHX8aUp4Sm6m3nmMx1QAAARM"]
[Wed Mar 18 20:05:50.989301 2026] [:error] [pid 43009:tid 43033] [client 20.220.57.95:19853] [client 20.220.57.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wk/index.php"] [unique_id "abqVHn8aUp4Sm6m3nmMx2gAAARY"]
[Wed Mar 18 23:47:34.286794 2026] [:error] [pid 31232:tid 31243] [client 172.71.148.88:10168] [client 172.71.148.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/logs/HEAD"] [unique_id "abrJFmX6HV7dqh3BQD1JCgAAAEg"]
[Wed Mar 18 23:47:34.292582 2026] [:error] [pid 31232:tid 31248] [client 172.71.148.88:10174] [client 172.71.148.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/HEAD"] [unique_id "abrJFmX6HV7dqh3BQD1JCwAAAE0"]
[Wed Mar 18 23:47:34.292771 2026] [:error] [pid 31232:tid 31255] [client 172.71.148.89:11443] [client 172.71.148.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/refs/heads/master"] [unique_id "abrJFmX6HV7dqh3BQD1JDAAAAFQ"]
[Wed Mar 18 23:47:34.316907 2026] [:error] [pid 43009:tid 43029] [client 172.71.148.88:10181] [client 172.71.148.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/refs/heads/main"] [unique_id "abrJFn8aUp4Sm6m3nmNOhgAAARI"]
[Wed Mar 18 23:47:34.334934 2026] [:error] [pid 43009:tid 43025] [client 172.71.148.91:10287] [client 172.71.148.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/index"] [unique_id "abrJFn8aUp4Sm6m3nmNOhwAAAQ4"]
[Wed Mar 18 23:47:34.369074 2026] [:error] [pid 20667:tid 20693] [client 172.71.148.91:10282] [client 172.71.148.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "abrJFpgyfQyvBhzza_2loAAAAZg"]
[Wed Mar 18 23:47:35.331574 2026] [:error] [pid 31232:tid 31250] [client 172.71.148.90:9345] [client 172.71.148.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "abrJF2X6HV7dqh3BQD1JEgAAAE8"]
[Wed Mar 18 23:47:35.351638 2026] [:error] [pid 31232:tid 31258] [client 172.71.148.89:11449] [client 172.71.148.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "abrJF2X6HV7dqh3BQD1JEwAAAFc"]
[Wed Mar 18 23:47:35.368891 2026] [:error] [pid 31232:tid 31251] [client 172.71.148.90:9354] [client 172.71.148.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.development"] [unique_id "abrJF2X6HV7dqh3BQD1JFQAAAFA"]
[Wed Mar 18 23:47:35.368917 2026] [:error] [pid 31232:tid 31236] [client 172.71.148.90:9349] [client 172.71.148.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "abrJF2X6HV7dqh3BQD1JFAAAAEE"]
[Wed Mar 18 23:47:35.402390 2026] [:error] [pid 31232:tid 31257] [client 172.71.148.90:9356] [client 172.71.148.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.dev"] [unique_id "abrJF2X6HV7dqh3BQD1JFgAAAFY"]
[Wed Mar 18 23:47:35.421278 2026] [:error] [pid 31232:tid 31252] [client 172.71.148.91:10294] [client 172.71.148.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.test"] [unique_id "abrJF2X6HV7dqh3BQD1JFwAAAFE"]
[Wed Mar 18 23:47:36.367711 2026] [:error] [pid 31232:tid 31256] [client 172.71.148.91:10302] [client 172.71.148.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.staging"] [unique_id "abrJGGX6HV7dqh3BQD1JHAAAAFU"]
[Wed Mar 18 23:47:36.394698 2026] [:error] [pid 31232:tid 31239] [client 172.71.148.89:11451] [client 172.71.148.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.backup"] [unique_id "abrJGGX6HV7dqh3BQD1JHQAAAEQ"]
[Wed Mar 18 23:47:36.435478 2026] [:error] [pid 53755:tid 53772] [client 172.71.148.89:11454] [client 172.71.148.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.old"] [unique_id "abrJGKqw5ZSRshmIhWmf8gAAAU8"]
[Wed Mar 18 23:47:36.447621 2026] [:error] [pid 31232:tid 31240] [client 172.71.148.91:10308] [client 172.71.148.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.bak"] [unique_id "abrJGGX6HV7dqh3BQD1JHgAAAEU"]
[Wed Mar 18 23:47:36.474865 2026] [:error] [pid 53755:tid 53766] [client 172.71.148.88:10182] [client 172.71.148.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.save"] [unique_id "abrJGKqw5ZSRshmIhWmf9AAAAUk"]
[Wed Mar 18 23:47:36.494477 2026] [:error] [pid 53755:tid 53776] [client 172.71.148.91:10312] [client 172.71.148.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.tmp"] [unique_id "abrJGKqw5ZSRshmIhWmf9QAAAVM"]
[Wed Mar 18 23:47:37.449550 2026] [:error] [pid 53755:tid 53763] [client 172.71.148.89:11461] [client 172.71.148.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.example"] [unique_id "abrJGaqw5ZSRshmIhWmf-gAAAUY"]
[Wed Mar 18 23:47:37.461623 2026] [:error] [pid 53755:tid 53767] [client 172.71.148.89:11462] [client 172.71.148.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.production.local"] [unique_id "abrJGaqw5ZSRshmIhWmf-wAAAUo"]
[Wed Mar 18 23:47:37.481286 2026] [:error] [pid 53755:tid 53760] [client 172.71.148.88:10188] [client 172.71.148.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.development.local"] [unique_id "abrJGaqw5ZSRshmIhWmf_AAAAUM"]
[Wed Mar 18 23:47:37.514991 2026] [:error] [pid 53755:tid 53780] [client 172.71.148.90:9358] [client 172.71.148.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/app/.env"] [unique_id "abrJGaqw5ZSRshmIhWmf_gAAAVc"]
[Wed Mar 18 23:47:37.537453 2026] [:error] [pid 53755:tid 53765] [client 172.71.148.89:11468] [client 172.71.148.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/config/.env"] [unique_id "abrJGaqw5ZSRshmIhWmgAAAAAUg"]
[Wed Mar 18 23:47:37.579893 2026] [:error] [pid 53755:tid 53768] [client 172.71.148.88:10190] [client 172.71.148.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/backend/.env"] [unique_id "abrJGaqw5ZSRshmIhWmgAQAAAUs"]
[Wed Mar 18 23:47:38.498937 2026] [:error] [pid 42871:tid 42937] [client 172.71.148.88:10194] [client 172.71.148.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/api/.env"] [unique_id "abrJGmPUS0lM1M9nUaKh0QAAAJc"]
[Wed Mar 18 23:47:38.507600 2026] [:error] [pid 31232:tid 31237] [client 172.71.148.91:12272] [client 172.71.148.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin/.env"] [unique_id "abrJGmX6HV7dqh3BQD1JIgAAAEI"]
[Wed Mar 18 23:47:38.542083 2026] [:error] [pid 31232:tid 31246] [client 172.71.148.91:12276] [client 172.71.148.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/core/.env"] [unique_id "abrJGmX6HV7dqh3BQD1JIwAAAEs"]
[Wed Mar 18 23:47:38.569719 2026] [:error] [pid 42870:tid 42893] [client 172.71.148.91:12277] [client 172.71.148.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/public/.env"] [unique_id "abrJGp6axlAooiuYyUxb5AAAAAg"]
[Wed Mar 18 23:47:38.627164 2026] [:error] [pid 53755:tid 53758] [client 172.71.148.91:12281] [client 172.71.148.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/private/.env"] [unique_id "abrJGqqw5ZSRshmIhWmgAwAAAUE"]
[Wed Mar 18 23:47:38.954641 2026] [:error] [pid 53755:tid 53762] [client 172.71.148.88:10201] [client 172.71.148.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env1"] [unique_id "abrJGqqw5ZSRshmIhWmgCAAAAUU"]
[Wed Mar 18 23:47:39.579983 2026] [:error] [pid 53755:tid 53778] [client 172.71.148.89:11476] [client 172.71.148.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.php"] [unique_id "abrJG6qw5ZSRshmIhWmgDgAAAVU"]
[Wed Mar 18 23:47:39.593854 2026] [:error] [pid 53755:tid 53772] [client 172.71.148.90:13674] [client 172.71.148.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/config/.env.local"] [unique_id "abrJG6qw5ZSRshmIhWmgDwAAAU8"]
[Wed Mar 18 23:47:39.614641 2026] [:error] [pid 53755:tid 53776] [client 172.71.148.90:13676] [client 172.71.148.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env_backup"] [unique_id "abrJG6qw5ZSRshmIhWmgEAAAAVM"]
[Wed Mar 18 23:47:39.615017 2026] [:error] [pid 53755:tid 53766] [client 172.71.148.88:10204] [client 172.71.148.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.json"] [unique_id "abrJG6qw5ZSRshmIhWmgEQAAAUk"]
[Wed Mar 18 23:47:39.717726 2026] [:error] [pid 53755:tid 53777] [client 172.71.148.88:10207] [client 172.71.148.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env~"] [unique_id "abrJG6qw5ZSRshmIhWmgEgAAAVQ"]
[Wed Mar 18 23:47:40.033419 2026] [:error] [pid 42871:tid 42920] [client 172.71.148.88:10215] [client 172.71.148.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env2"] [unique_id "abrJHGPUS0lM1M9nUaKh0gAAAIY"]
[Wed Mar 18 23:47:40.636136 2026] [:error] [pid 53755:tid 53781] [client 172.71.148.89:10306] [client 172.71.148.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.dist"] [unique_id "abrJHKqw5ZSRshmIhWmgGgAAAVg"]
[Wed Mar 18 23:47:40.646516 2026] [:error] [pid 42870:tid 42886] [client 172.71.148.88:9919] [client 172.71.148.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.envrc"] [unique_id "abrJHJ6axlAooiuYyUxb5QAAAAE"]
[Wed Mar 18 23:47:40.659135 2026] [:error] [pid 42870:tid 42885] [client 172.71.148.90:13678] [client 172.71.148.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.orig"] [unique_id "abrJHJ6axlAooiuYyUxb5gAAAAA"]
[Wed Mar 18 23:47:40.800408 2026] [:error] [pid 42870:tid 42891] [client 172.71.148.90:13683] [client 172.71.148.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.prod"] [unique_id "abrJHJ6axlAooiuYyUxb5wAAAAY"]
[Wed Mar 18 23:47:41.694643 2026] [:error] [pid 31232:tid 31235] [client 172.71.148.90:13691] [client 172.71.148.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.container"] [unique_id "abrJHWX6HV7dqh3BQD1JJAAAAEA"]
[Wed Mar 18 23:47:41.709827 2026] [:error] [pid 53755:tid 53780] [client 172.71.148.88:9923] [client 172.71.148.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.docker"] [unique_id "abrJHaqw5ZSRshmIhWmgHAAAAVc"]
[Wed Mar 18 23:47:41.721757 2026] [:error] [pid 31232:tid 31248] [client 172.71.148.89:10308] [client 172.71.148.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/docker/.env"] [unique_id "abrJHWX6HV7dqh3BQD1JJQAAAE0"]
[Wed Mar 18 23:47:42.759718 2026] [:error] [pid 20667:tid 20688] [client 172.71.148.88:9930] [client 172.71.148.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/srv/.env"] [unique_id "abrJHpgyfQyvBhzza_2logAAAZM"]
[Wed Mar 18 23:47:42.761647 2026] [:error] [pid 42870:tid 42902] [client 172.71.148.89:10311] [client 172.71.148.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/server/.env"] [unique_id "abrJHp6axlAooiuYyUxb7AAAABE"]
[Wed Mar 18 23:47:42.778119 2026] [:error] [pid 42870:tid 42887] [client 172.71.148.88:9926] [client 172.71.148.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/docker/.env.local"] [unique_id "abrJHp6axlAooiuYyUxb7QAAAAI"]
[Wed Mar 18 23:47:42.976335 2026] [:error] [pid 42872:tid 42947] [client 172.71.148.89:10315] [client 172.71.148.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/web/.env"] [unique_id "abrJHjchM8PQMaMEWJnUDgAAAcY"]
[Wed Mar 18 23:47:43.020287 2026] [:error] [pid 31232:tid 31243] [client 172.71.148.90:13694] [client 172.71.148.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/site/.env"] [unique_id "abrJH2X6HV7dqh3BQD1JJwAAAEg"]
[Wed Mar 18 23:47:43.827996 2026] [:error] [pid 42871:tid 42929] [client 172.71.148.89:10318] [client 172.71.148.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/var/www/.env"] [unique_id "abrJH2PUS0lM1M9nUaKh2AAAAI8"]
[Wed Mar 18 23:47:43.837035 2026] [:error] [pid 20667:tid 20682] [client 172.71.148.90:13699] [client 172.71.148.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/www/.env"] [unique_id "abrJH5gyfQyvBhzza_2lpQAAAY0"]
[Wed Mar 18 23:47:44.032745 2026] [:error] [pid 31232:tid 31255] [client 172.71.148.88:9933] [client 172.71.148.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/var/www/html/.env"] [unique_id "abrJIGX6HV7dqh3BQD1JKAAAAFQ"]
[Wed Mar 18 23:47:44.113156 2026] [:error] [pid 20667:tid 20673] [client 172.71.148.89:10321] [client 172.71.148.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/home/.env"] [unique_id "abrJIJgyfQyvBhzza_2lpgAAAYQ"]
[Wed Mar 18 23:47:44.870037 2026] [:error] [pid 42871:tid 42921] [client 172.71.148.89:10328] [client 172.71.148.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/root/.env"] [unique_id "abrJIGPUS0lM1M9nUaKh2wAAAIc"]
[Wed Mar 18 23:47:44.909759 2026] [:error] [pid 42871:tid 42928] [client 172.71.148.90:13704] [client 172.71.148.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env_config"] [unique_id "abrJIGPUS0lM1M9nUaKh3AAAAI4"]
[Wed Mar 18 23:47:45.079651 2026] [:error] [pid 42870:tid 42893] [client 172.71.148.88:9936] [client 172.71.148.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env_secret"] [unique_id "abrJIZ6axlAooiuYyUxb8AAAAAg"]
[Wed Mar 18 23:48:04.924840 2026] [:error] [pid 31232:tid 31237] [client 172.69.186.209:12776] [client 172.69.186.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "abrJNGX6HV7dqh3BQD1JSAAAAEI"]
[Wed Mar 18 23:48:05.201702 2026] [:error] [pid 20667:tid 20691] [client 172.69.186.162:10720] [client 172.69.186.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "abrJNZgyfQyvBhzza_2lrgAAAZY"]
[Wed Mar 18 23:48:05.473555 2026] [:error] [pid 53755:tid 53775] [client 172.69.186.212:12773] [client 172.69.186.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "abrJNaqw5ZSRshmIhWmgQwAAAVI"]
[Wed Mar 18 23:48:05.748609 2026] [:error] [pid 42870:tid 42901] [client 172.69.186.152:12969] [client 172.69.186.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.development"] [unique_id "abrJNZ6axlAooiuYyUxcBwAAABA"]
[Wed Mar 18 23:48:06.020955 2026] [:error] [pid 31232:tid 31239] [client 172.69.186.152:12970] [client 172.69.186.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.dev"] [unique_id "abrJNmX6HV7dqh3BQD1JSgAAAEQ"]
[Wed Mar 18 23:48:19.279591 2026] [:error] [pid 53755:tid 53760] [client 172.69.186.162:12277] [client 172.69.186.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.staging"] [unique_id "abrJQ6qw5ZSRshmIhWmgRwAAAUM"]
[Wed Mar 18 23:48:19.541664 2026] [:error] [pid 53755:tid 53773] [client 172.69.186.166:13567] [client 172.69.186.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.backup"] [unique_id "abrJQ6qw5ZSRshmIhWmgSAAAAVA"]
[Wed Mar 18 23:48:19.796346 2026] [:error] [pid 53755:tid 53775] [client 172.69.186.108:10791] [client 172.69.186.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.bak"] [unique_id "abrJQ6qw5ZSRshmIhWmgSQAAAVI"]
[Wed Mar 18 23:48:20.067930 2026] [:error] [pid 53755:tid 53772] [client 172.69.186.162:12285] [client 172.69.186.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.old"] [unique_id "abrJRKqw5ZSRshmIhWmgSwAAAU8"]
[Wed Mar 18 23:48:20.324101 2026] [:error] [pid 43009:tid 43014] [client 172.69.186.180:14191] [client 172.69.186.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.save"] [unique_id "abrJRH8aUp4Sm6m3nmNOmAAAAQM"]
[Wed Mar 18 23:48:21.321413 2026] [:error] [pid 20667:tid 20691] [client 172.69.186.211:12633] [client 172.69.186.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.example"] [unique_id "abrJRZgyfQyvBhzza_2luQAAAZY"]
[Wed Mar 18 23:48:21.588943 2026] [:error] [pid 42870:tid 42895] [client 172.69.186.167:10611] [client 172.69.186.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.production.local"] [unique_id "abrJRZ6axlAooiuYyUxcFgAAAAo"]
[Wed Mar 18 23:48:21.860287 2026] [:error] [pid 42870:tid 42905] [client 172.69.186.152:12282] [client 172.69.186.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.development.local"] [unique_id "abrJRZ6axlAooiuYyUxcFwAAABQ"]
[Wed Mar 18 23:48:22.128176 2026] [:error] [pid 53755:tid 53762] [client 172.69.186.188:11647] [client 172.69.186.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/config/.env"] [unique_id "abrJRqqw5ZSRshmIhWmgUAAAAUU"]
[Wed Mar 18 23:48:22.402094 2026] [:error] [pid 53755:tid 53765] [client 172.69.186.213:11422] [client 172.69.186.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/app/.env"] [unique_id "abrJRqqw5ZSRshmIhWmgUQAAAUg"]
[Wed Mar 18 23:48:22.677991 2026] [:error] [pid 42872:tid 42963] [client 172.69.186.163:10908] [client 172.69.186.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/backend/.env"] [unique_id "abrJRjchM8PQMaMEWJnUMQAAAdU"]
[Wed Mar 18 23:48:22.949307 2026] [:error] [pid 43009:tid 43033] [client 172.69.186.211:12215] [client 172.69.186.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/api/.env"] [unique_id "abrJRn8aUp4Sm6m3nmNOmgAAARY"]
[Wed Mar 18 23:48:23.227289 2026] [:error] [pid 31232:tid 31242] [client 172.69.186.211:12221] [client 172.69.186.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin/.env"] [unique_id "abrJR2X6HV7dqh3BQD1JVgAAAEc"]
[Wed Mar 18 23:48:23.505751 2026] [:error] [pid 31232:tid 31253] [client 172.69.186.211:12227] [client 172.69.186.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/core/.env"] [unique_id "abrJR2X6HV7dqh3BQD1JWQAAAFI"]
[Wed Mar 18 23:48:23.659979 2026] [:error] [pid 31232:tid 31248] [client 172.69.186.163:9837] [client 172.69.186.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/public/.env"] [unique_id "abrJR2X6HV7dqh3BQD1JWwAAAE0"]
[Wed Mar 18 23:48:23.784117 2026] [:error] [pid 42870:tid 42901] [client 172.69.186.213:11424] [client 172.69.186.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/private/.env"] [unique_id "abrJR56axlAooiuYyUxcGgAAABA"]
[Wed Mar 18 23:48:23.931023 2026] [:error] [pid 43009:tid 43028] [client 172.69.186.211:12232] [client 172.69.186.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/config/.env.local"] [unique_id "abrJR38aUp4Sm6m3nmNOnAAAARE"]
[Wed Mar 18 23:48:24.051507 2026] [:error] [pid 43009:tid 43025] [client 172.69.186.189:13108] [client 172.69.186.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.php"] [unique_id "abrJSH8aUp4Sm6m3nmNOnQAAAQ4"]
[Wed Mar 18 23:48:24.136582 2026] [:error] [pid 42870:tid 42887] [client 172.69.186.181:11792] [client 172.69.186.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.json"] [unique_id "abrJSJ6axlAooiuYyUxcHQAAAAI"]
[Wed Mar 18 23:48:24.209279 2026] [:error] [pid 31232:tid 31258] [client 172.69.186.163:9838] [client 172.69.186.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env_backup"] [unique_id "abrJSGX6HV7dqh3BQD1JXQAAAFc"]
[Wed Mar 18 23:48:24.318955 2026] [:error] [pid 42871:tid 42919] [client 172.69.186.169:11149] [client 172.69.186.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env~"] [unique_id "abrJSGPUS0lM1M9nUaKh_QAAAIU"]
[Wed Mar 18 23:48:24.396190 2026] [:error] [pid 31232:tid 31238] [client 172.69.186.213:11432] [client 172.69.186.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env1"] [unique_id "abrJSGX6HV7dqh3BQD1JXgAAAEM"]
[Wed Mar 18 23:48:24.403266 2026] [:error] [pid 31232:tid 31241] [client 172.69.186.167:10636] [client 172.69.186.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env2"] [unique_id "abrJSGX6HV7dqh3BQD1JXwAAAEY"]
[Wed Mar 18 23:48:24.592003 2026] [:error] [pid 31232:tid 31235] [client 172.69.186.153:12338] [client 172.69.186.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.envrc"] [unique_id "abrJSGX6HV7dqh3BQD1JYAAAAEA"]
[Wed Mar 18 23:48:24.660902 2026] [:error] [pid 43009:tid 43020] [client 172.69.186.181:10352] [client 172.69.186.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.production.bak"] [unique_id "abrJSH8aUp4Sm6m3nmNOnwAAAQk"]
[Wed Mar 18 23:48:24.670608 2026] [:error] [pid 31232:tid 31257] [client 172.69.186.212:13712] [client 172.69.186.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.orig"] [unique_id "abrJSGX6HV7dqh3BQD1JYQAAAFY"]
[Wed Mar 18 23:48:24.860297 2026] [:error] [pid 31232:tid 31237] [client 172.69.186.168:11841] [client 172.69.186.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.prod"] [unique_id "abrJSGX6HV7dqh3BQD1JYwAAAEI"]
[Wed Mar 18 23:48:24.916342 2026] [:error] [pid 42870:tid 42894] [client 172.69.186.212:13715] [client 172.69.186.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.dev.local"] [unique_id "abrJSJ6axlAooiuYyUxcIAAAAAk"]
[Wed Mar 18 23:48:24.943963 2026] [:error] [pid 42870:tid 42895] [client 172.69.186.183:10295] [client 172.69.186.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.docker"] [unique_id "abrJSJ6axlAooiuYyUxcIQAAAAo"]
[Wed Mar 18 23:48:25.127827 2026] [:error] [pid 20667:tid 20673] [client 172.69.186.169:11154] [client 172.69.186.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.container"] [unique_id "abrJSZgyfQyvBhzza_2luwAAAYQ"]
[Wed Mar 18 23:48:25.209496 2026] [:error] [pid 53755:tid 53760] [client 172.69.186.180:12642] [client 172.69.186.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/docker/.env"] [unique_id "abrJSaqw5ZSRshmIhWmgUwAAAUM"]
[Wed Mar 18 23:48:25.400918 2026] [:error] [pid 53755:tid 53775] [client 172.69.186.182:10318] [client 172.69.186.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/docker/.env.local"] [unique_id "abrJSaqw5ZSRshmIhWmgVQAAAVI"]
[Wed Mar 18 23:48:25.475869 2026] [:error] [pid 42970:tid 42987] [client 172.69.186.189:13115] [client 172.69.186.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/server/.env"] [unique_id "abrJSY5YFUj4vBJI0KRNJQAAAM8"]
[Wed Mar 18 23:48:25.499759 2026] [:error] [pid 53755:tid 53772] [client 172.69.186.211:12238] [client 172.69.186.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/srv/.env"] [unique_id "abrJSaqw5ZSRshmIhWmgVgAAAU8"]
[Wed Mar 18 23:48:25.665043 2026] [:error] [pid 42970:tid 42989] [client 172.69.186.181:10356] [client 172.69.186.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/web/.env"] [unique_id "abrJSY5YFUj4vBJI0KRNJwAAANE"]
[Wed Mar 18 23:48:25.705085 2026] [:error] [pid 53755:tid 53769] [client 172.69.186.212:13719] [client 172.69.186.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.test"] [unique_id "abrJSaqw5ZSRshmIhWmgWAAAAUw"]
[Wed Mar 18 23:48:25.739225 2026] [:error] [pid 42970:tid 42972] [client 172.69.186.180:12643] [client 172.69.186.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/site/.env"] [unique_id "abrJSY5YFUj4vBJI0KRNKAAAAMA"]
[Wed Mar 18 23:48:25.769711 2026] [:error] [pid 42970:tid 42988] [client 172.69.186.189:13122] [client 172.69.186.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/www/.env"] [unique_id "abrJSY5YFUj4vBJI0KRNKQAAANA"]
[Wed Mar 18 23:48:25.940781 2026] [:error] [pid 53755:tid 53766] [client 172.69.186.163:9845] [client 172.69.186.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/var/www/.env"] [unique_id "abrJSaqw5ZSRshmIhWmgWgAAAUk"]
[Wed Mar 18 23:48:25.966933 2026] [:error] [pid 53755:tid 53777] [client 172.69.186.180:12646] [client 172.69.186.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/var/www/html/.env"] [unique_id "abrJSaqw5ZSRshmIhWmgWwAAAVQ"]
[Wed Mar 18 23:48:26.007710 2026] [:error] [pid 31232:tid 31250] [client 172.69.186.167:10644] [client 172.69.186.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/home/.env"] [unique_id "abrJSmX6HV7dqh3BQD1JaAAAAE8"]
[Wed Mar 18 23:48:26.042763 2026] [:error] [pid 31232:tid 31258] [client 172.69.186.57:10725] [client 172.69.186.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/root/.env"] [unique_id "abrJSmX6HV7dqh3BQD1JaQAAAFc"]
[Wed Mar 18 23:48:26.211822 2026] [:error] [pid 31232:tid 31238] [client 172.69.186.211:12240] [client 172.69.186.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env_config"] [unique_id "abrJSmX6HV7dqh3BQD1JagAAAEM"]
[Wed Mar 18 23:48:26.229861 2026] [:error] [pid 53755:tid 53774] [client 172.69.186.180:12653] [client 172.69.186.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env_secret"] [unique_id "abrJSqqw5ZSRshmIhWmgXQAAAVE"]
[Wed Mar 18 23:48:26.271905 2026] [:error] [pid 42870:tid 42890] [client 172.69.186.188:11655] [client 172.69.186.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env_settings"] [unique_id "abrJSp6axlAooiuYyUxcIwAAAAU"]
[Wed Mar 18 23:48:26.312773 2026] [:error] [pid 42870:tid 42907] [client 172.69.186.56:10948] [client 172.69.186.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.local.backup"] [unique_id "abrJSp6axlAooiuYyUxcJAAAABY"]
[Wed Mar 18 23:48:40.249835 2026] [:error] [pid 43009:tid 43033] [client 172.69.186.192:12252] [client 172.69.186.192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.tmp"] [unique_id "abrJWH8aUp4Sm6m3nmNOpQAAARY"]
[Thu Mar 19 20:31:54.250441 2026] [:error] [pid 1285:tid 1299] [client 217.216.37.51:58957] [client 217.216.37.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "abvsulE95r3zR75X1HotHQAAAgw"]
[Thu Mar 19 22:18:59.101361 2026] [:error] [pid 1397:tid 1405] [client 34.139.95.246:63689] [client 34.139.95.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.139.95.246, incrementing ddos counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "abwF03ptc6vBjy-kgOMllQAAAsY"]
[Thu Mar 19 22:18:59.104854 2026] [:error] [pid 1397:tid 1405] [client 34.139.95.246:63689] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 19 22:18:59.588584 2026] [:error] [pid 1397:tid 1401] [client 34.139.95.246:63689] [client 34.139.95.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "abwF03ptc6vBjy-kgOMloAAAAsI"]
[Thu Mar 19 22:19:00.049715 2026] [:error] [pid 11110:tid 11139] [client 34.139.95.246:49536] [client 34.139.95.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "abwF1ASNPqGfikw7k8LONgAAABg"]
[Thu Mar 19 22:19:00.545008 2026] [:error] [pid 11015:tid 11049] [client 34.139.95.246:54154] [client 34.139.95.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "abwF1PPcMwFQZAVfzLSSDAAAAIM"]
[Thu Mar 19 22:19:01.001036 2026] [:error] [pid 1247:tid 1263] [client 34.139.95.246:65036] [client 34.139.95.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "abwF1A5tmeOr-yI4XNEGqAAAAc4"]
[Thu Mar 19 23:16:42.751190 2026] [:error] [pid 1285:tid 1309] [client 20.151.141.24:48260] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Mar 19 23:16:42.989248 2026] [:error] [pid 1285:tid 1292] [client 20.151.141.24:48260] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Mar 19 23:16:43.408490 2026] [:error] [pid 1285:tid 1298] [client 20.151.141.24:48260] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Thu Mar 19 23:16:43.620604 2026] [:error] [pid 1285:tid 1297] [client 20.151.141.24:48260] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Mar 19 23:16:44.051492 2026] [:error] [pid 1285:tid 1300] [client 20.151.141.24:48260] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Thu Mar 19 23:16:44.265645 2026] [:error] [pid 1285:tid 1301] [client 20.151.141.24:48260] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Mar 19 23:16:44.477633 2026] [:error] [pid 1285:tid 1306] [client 20.151.141.24:48260] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Thu Mar 19 23:16:44.895290 2026] [:error] [pid 1285:tid 1288] [client 20.151.141.24:48260] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abwTXFE95r3zR75X1Hps-wAAAgE"]
[Thu Mar 19 23:16:50.166727 2026] [:error] [pid 1285:tid 1302] [client 20.151.141.24:48135] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abwTYlE95r3zR75X1HptCAAAAg8"]
[Thu Mar 19 23:16:54.382199 2026] [:error] [pid 1247:tid 1260] [client 20.151.141.24:48315] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abwTZg5tmeOr-yI4XNEgZQAAAcs"]
[Thu Mar 19 23:16:56.513378 2026] [:error] [pid 48106:tid 48130] [client 20.151.141.24:48134] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abwTaMVZaUGvkz29lZElQwAAANA"]
[Fri Mar 20 00:37:20.527245 2026] [:error] [pid 46264:tid 46305] [client 20.151.141.24:48134] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Mar 20 00:37:20.735325 2026] [:error] [pid 46264:tid 46285] [client 20.151.141.24:48134] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Mar 20 00:37:21.027137 2026] [:error] [pid 46264:tid 46304] [client 20.151.141.24:48134] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Mar 20 00:37:21.237509 2026] [:error] [pid 46264:tid 46293] [client 20.151.141.24:48134] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Mar 20 00:37:21.450496 2026] [:error] [pid 46264:tid 46306] [client 20.151.141.24:48134] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Mar 20 00:37:21.658343 2026] [:error] [pid 46264:tid 46296] [client 20.151.141.24:48134] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Mar 20 00:37:22.134903 2026] [:error] [pid 46264:tid 46283] [client 20.151.141.24:48134] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri Mar 20 00:37:22.453920 2026] [:error] [pid 46264:tid 46304] [client 20.151.141.24:48134] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Fri Mar 20 00:37:22.724470 2026] [:error] [pid 46264:tid 46302] [client 20.151.141.24:48134] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Fri Mar 20 00:37:22.934324 2026] [:error] [pid 46264:tid 46307] [client 20.151.141.24:48134] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Mar 20 00:37:23.218060 2026] [:error] [pid 46264:tid 46289] [client 20.151.141.24:48134] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "abwmQ4p3TruHFmWOt5G8NwAAAAY"]
[Fri Mar 20 00:37:24.482836 2026] [:error] [pid 46264:tid 46284] [client 20.151.141.24:48958] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "abwmRIp3TruHFmWOt5G8OQAAAAE"]
[Fri Mar 20 00:37:27.037510 2026] [:error] [pid 46125:tid 46210] [client 20.151.141.24:48931] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "abwmR2gN4lI6NHeckY5SIAAAAIE"]
[Fri Mar 20 00:37:29.027525 2026] [:error] [pid 46264:tid 46294] [client 20.151.141.24:48920] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "abwmSYp3TruHFmWOt5G8QQAAAAs"]
[Fri Mar 20 01:59:58.390675 2026] [:error] [pid 46125:tid 46241] [client 20.151.141.24:48907] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Mar 20 01:59:58.965217 2026] [:error] [pid 46125:tid 46234] [client 20.151.141.24:48907] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Mar 20 01:59:59.183917 2026] [:error] [pid 46125:tid 46255] [client 20.151.141.24:48907] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Fri Mar 20 01:59:59.440599 2026] [:error] [pid 46125:tid 46225] [client 20.151.141.24:48907] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php
[Fri Mar 20 01:59:59.715894 2026] [:error] [pid 46125:tid 46217] [client 20.151.141.24:48907] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Fri Mar 20 02:00:00.001838 2026] [:error] [pid 46125:tid 46223] [client 20.151.141.24:48907] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko-new.php
[Fri Mar 20 02:00:00.214549 2026] [:error] [pid 46125:tid 46225] [client 20.151.141.24:48907] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php.php
[Fri Mar 20 02:00:00.446952 2026] [:error] [pid 46125:tid 46233] [client 20.151.141.24:48907] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Fri Mar 20 02:00:00.658210 2026] [:error] [pid 46125:tid 46219] [client 20.151.141.24:48907] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Fri Mar 20 02:00:00.950474 2026] [:error] [pid 46125:tid 46237] [client 20.151.141.24:48907] File does not exist: /usr/local/apache/htdocs/suspended-page/wi.php
[Fri Mar 20 02:00:01.157758 2026] [:error] [pid 46125:tid 46239] [client 20.151.141.24:48907] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/function.php"] [unique_id "abw5oWgN4lI6NHeckY5mSAAAAI8"]
[Fri Mar 20 02:00:02.336361 2026] [:error] [pid 46124:tid 46188] [client 20.151.141.24:48909] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/function.php"] [unique_id "abw5okzMrlLOY6zyCjKH6wAAAEg"]
[Fri Mar 20 02:00:04.592548 2026] [:error] [pid 11258:tid 11274] [client 20.151.141.24:48933] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/function.php"] [unique_id "abw5pJPHb95f6xzHJOcpRQAAAM4"]
[Fri Mar 20 02:00:08.495640 2026] [:error] [pid 11258:tid 11261] [client 20.151.141.24:48939] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/function.php"] [unique_id "abw5qJPHb95f6xzHJOcpXwAAAME"]
[Fri Mar 20 03:27:15.741642 2026] [:error] [pid 11258:tid 11278] [client 20.151.141.24:48364] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cah.php"] [unique_id "abxOE5PHb95f6xzHJOdVawAAANI"]
[Fri Mar 20 03:27:18.323950 2026] [:error] [pid 11258:tid 11269] [client 20.151.141.24:48866] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cah.php"] [unique_id "abxOFpPHb95f6xzHJOdVdQAAAMk"]
[Fri Mar 20 03:27:20.679915 2026] [:error] [pid 46264:tid 46288] [client 20.151.141.24:48383] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cah.php"] [unique_id "abxOGIp3TruHFmWOt5EwhQAAAAU"]
[Fri Mar 20 03:27:23.136925 2026] [:error] [pid 46126:tid 46244] [client 20.151.141.24:48355] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cah.php"] [unique_id "abxOG6Q44YePbsZz3j7xVQAAARE"]
[Fri Mar 20 04:38:22.048726 2026] [:error] [pid 58126:tid 58192] [client 64.89.163.113:50476] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "abxevqKAmdXQSS0Y5KBESQAAAFQ"]
[Fri Mar 20 04:38:23.168867 2026] [:error] [pid 58125:tid 58162] [client 64.89.163.113:57901] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "abxev_KqkvJQoqsQGeVTJAAAABI"]
[Fri Mar 20 04:38:23.905647 2026] [:error] [pid 58126:tid 58182] [client 64.89.163.113:51073] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "abxev6KAmdXQSS0Y5KBEogAAAEo"]
[Fri Mar 20 04:38:24.970484 2026] [:error] [pid 58126:tid 58196] [client 64.89.163.113:62213] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "abxewKKAmdXQSS0Y5KBEtQAAAFg"]
[Fri Mar 20 04:38:26.054764 2026] [:error] [pid 58126:tid 58188] [client 64.89.163.113:57225] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "abxewqKAmdXQSS0Y5KBE2gAAAFA"]
[Fri Mar 20 04:51:54.696503 2026] [:error] [pid 58125:tid 58161] [client 20.151.141.24:48944] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "abxh6vKqkvJQoqsQGeVXwgAAABE"]
[Fri Mar 20 04:51:56.840920 2026] [:error] [pid 58126:tid 58192] [client 20.151.141.24:48918] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "abxh7KKAmdXQSS0Y5KBK3QAAAFQ"]
[Fri Mar 20 04:51:59.312024 2026] [:error] [pid 58230:tid 58244] [client 20.151.141.24:48872] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "abxh7_eBObYxbmHTzfquNAAAAMs"]
[Fri Mar 20 04:52:00.874597 2026] [:error] [pid 58126:tid 58187] [client 20.151.141.24:48936] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "abxh8KKAmdXQSS0Y5KBK6wAAAE8"]
[Fri Mar 20 06:17:35.315159 2026] [:error] [pid 55301:tid 55367] [client 20.151.141.24:63907] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Fri Mar 20 06:17:35.534502 2026] [:error] [pid 55301:tid 55392] [client 20.151.141.24:63907] File does not exist: /usr/local/apache/htdocs/suspended-page/gebase.php
[Fri Mar 20 06:17:35.747854 2026] [:error] [pid 55301:tid 55363] [client 20.151.141.24:63907] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Fri Mar 20 06:17:36.052009 2026] [:error] [pid 55301:tid 55385] [client 20.151.141.24:63907] File does not exist: /usr/local/apache/htdocs/suspended-page/baxa1.php
[Fri Mar 20 06:17:36.331765 2026] [:error] [pid 55301:tid 55399] [client 20.151.141.24:63907] File does not exist: /usr/local/apache/htdocs/suspended-page/settings.php
[Fri Mar 20 06:17:37.232115 2026] [:error] [pid 55301:tid 55374] [client 20.151.141.24:63907] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Fri Mar 20 06:17:37.446722 2026] [:error] [pid 55301:tid 55397] [client 20.151.141.24:63907] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Mar 20 06:17:37.657721 2026] [:error] [pid 55301:tid 55367] [client 20.151.141.24:63907] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cd.php"] [unique_id "abx2AcKP1x4sgmjd3xRNDgAAAoU"]
[Fri Mar 20 06:17:39.128519 2026] [:error] [pid 55299:tid 55307] [client 20.151.141.24:48447] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cd.php"] [unique_id "abx2A_oGhbNgkNIkZwlrzgAAAgI"]
[Fri Mar 20 06:17:41.705895 2026] [:error] [pid 43163:tid 43171] [client 20.151.141.24:48404] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cd.php"] [unique_id "abx2BZ_n4JP_ko9XUswNyAAAAQQ"]
[Fri Mar 20 06:17:44.410706 2026] [:error] [pid 55299:tid 55320] [client 20.151.141.24:63916] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cd.php"] [unique_id "abx2CPoGhbNgkNIkZwlr1wAAAg8"]
[Fri Mar 20 10:23:37.771721 2026] [:error] [pid 51714:tid 51738] [client 40.74.65.33:2687] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Mar 20 10:23:37.897701 2026] [:error] [pid 51714:tid 51733] [client 40.74.65.33:2687] File does not exist: /usr/local/apache/htdocs/suspended-page/lite.php
[Fri Mar 20 10:23:38.022861 2026] [:error] [pid 51714:tid 51718] [client 40.74.65.33:2687] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Mar 20 10:23:38.147650 2026] [:error] [pid 51714:tid 51730] [client 40.74.65.33:2687] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Mar 20 10:23:38.272145 2026] [:error] [pid 51714:tid 51737] [client 40.74.65.33:2687] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Mar 20 10:23:38.649767 2026] [:error] [pid 51714:tid 51727] [client 40.74.65.33:2687] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Mar 20 10:23:38.775227 2026] [:error] [pid 51714:tid 51738] [client 40.74.65.33:2687] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Fri Mar 20 10:23:38.900644 2026] [:error] [pid 51714:tid 51718] [client 40.74.65.33:2687] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Mar 20 10:23:39.027627 2026] [:error] [pid 51714:tid 51730] [client 40.74.65.33:2687] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Mar 20 10:23:39.149697 2026] [:error] [pid 51714:tid 51736] [client 40.74.65.33:2687] [client 40.74.65.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "abyvqzWI82pxvQ0gkssnVAAAAJQ"]
[Fri Mar 20 10:23:39.690528 2026] [:error] [pid 49080:tid 49100] [client 40.74.65.33:2664] [client 40.74.65.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "abyvq4k5CHi4V0A3ttjuyAAAAE4"]
[Fri Mar 20 10:23:40.199197 2026] [:error] [pid 49082:tid 49155] [client 40.74.65.33:2641] [client 40.74.65.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "abyvrKpllYJI1LUIdL9GfwAAAU0"]
[Fri Mar 20 10:23:40.753608 2026] [:error] [pid 49170:tid 49184] [client 40.74.65.33:2649] [client 40.74.65.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "abyvrM-c8ctLVDCqUJW47QAAAAo"]
[Fri Mar 20 12:51:17.689756 2026] [:error] [pid 27302:tid 27313] [client 52.187.249.150:17271] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Fri Mar 20 12:51:18.016909 2026] [:error] [pid 27302:tid 27304] [client 52.187.249.150:17271] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Fri Mar 20 12:51:18.039163 2026] [:error] [pid 27302:tid 27325] [client 52.187.249.150:17271] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Fri Mar 20 12:51:18.059611 2026] [:error] [pid 27302:tid 27311] [client 52.187.249.150:17271] File does not exist: /usr/local/apache/htdocs/suspended-page/xmr.php
[Fri Mar 20 12:51:18.080401 2026] [:error] [pid 27302:tid 27305] [client 52.187.249.150:17271] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Mar 20 12:51:18.100489 2026] [:error] [pid 27302:tid 27309] [client 52.187.249.150:17271] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Mar 20 12:51:18.120762 2026] [:error] [pid 27302:tid 27318] [client 52.187.249.150:17271] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Mar 20 12:51:18.142633 2026] [:error] [pid 27302:tid 27328] [client 52.187.249.150:17271] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri Mar 20 12:51:18.164633 2026] [:error] [pid 27302:tid 27327] [client 52.187.249.150:17271] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Fri Mar 20 12:51:18.184502 2026] [:error] [pid 27302:tid 27324] [client 52.187.249.150:17271] File does not exist: /usr/local/apache/htdocs/suspended-page/detail.php
[Fri Mar 20 12:51:18.220282 2026] [:error] [pid 27302:tid 27322] [client 52.187.249.150:17271] File does not exist: /usr/local/apache/htdocs/suspended-page/demo.php
[Fri Mar 20 12:51:18.236423 2026] [:error] [pid 27302:tid 27321] [client 52.187.249.150:17271] [client 52.187.249.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ds.php"] [unique_id "abzSRrDKiUve17xv6yHiFgAAANE"]
[Fri Mar 20 12:51:18.303503 2026] [:error] [pid 27302:tid 27323] [client 52.187.249.150:17275] [client 52.187.249.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ds.php"] [unique_id "abzSRrDKiUve17xv6yHiFwAAANM"]
[Fri Mar 20 12:51:18.368292 2026] [:error] [pid 49082:tid 49166] [client 52.187.249.150:10608] [client 52.187.249.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ds.php"] [unique_id "abzSRqpllYJI1LUIdL9sQAAAAVg"]
[Fri Mar 20 12:51:18.442196 2026] [:error] [pid 49082:tid 49165] [client 52.187.249.150:20352] [client 52.187.249.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ds.php"] [unique_id "abzSRqpllYJI1LUIdL9sQQAAAVc"]
[Fri Mar 20 13:07:57.892777 2026] [:error] [pid 49081:tid 49115] [client 20.196.218.22:5816] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Mar 20 13:07:58.053114 2026] [:error] [pid 49081:tid 49124] [client 20.196.218.22:5816] File does not exist: /usr/local/apache/htdocs/suspended-page/lite.php
[Fri Mar 20 13:07:58.217372 2026] [:error] [pid 49081:tid 49123] [client 20.196.218.22:5816] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Mar 20 13:07:58.373173 2026] [:error] [pid 49081:tid 49116] [client 20.196.218.22:5816] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Mar 20 13:07:58.526165 2026] [:error] [pid 49081:tid 49128] [client 20.196.218.22:5816] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Mar 20 13:07:58.956867 2026] [:error] [pid 49081:tid 49138] [client 20.196.218.22:5816] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Mar 20 13:07:59.096683 2026] [:error] [pid 49081:tid 49119] [client 20.196.218.22:5816] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Fri Mar 20 13:07:59.237529 2026] [:error] [pid 49081:tid 49122] [client 20.196.218.22:5816] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Mar 20 13:07:59.378001 2026] [:error] [pid 49081:tid 49117] [client 20.196.218.22:5816] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Mar 20 13:07:59.533252 2026] [:error] [pid 49081:tid 49115] [client 20.196.218.22:5816] [client 20.196.218.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "abzWLxo1LBAUhfhYPR2IvAAAAQA"]
[Fri Mar 20 13:08:00.232256 2026] [:error] [pid 49081:tid 49134] [client 20.196.218.22:2195] [client 20.196.218.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "abzWMBo1LBAUhfhYPR2IvgAAARM"]
[Fri Mar 20 13:08:00.863804 2026] [:error] [pid 51714:tid 51728] [client 20.196.218.22:5799] [client 20.196.218.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "abzWMDWI82pxvQ0gksuMXQAAAIw"]
[Fri Mar 20 13:08:01.436780 2026] [:error] [pid 49081:tid 49123] [client 20.196.218.22:5794] [client 20.196.218.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "abzWMRo1LBAUhfhYPR2IvwAAAQg"]
[Fri Mar 20 13:21:03.518249 2026] [:error] [pid 49082:tid 49148] [client 4.193.168.228:14333] File does not exist: /usr/local/apache/htdocs/suspended-page/xmr.php
[Fri Mar 20 13:21:03.621125 2026] [:error] [pid 49082:tid 49155] [client 4.193.168.228:14333] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Fri Mar 20 13:21:03.716639 2026] [:error] [pid 49082:tid 49143] [client 4.193.168.228:14333] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Fri Mar 20 13:21:03.811161 2026] [:error] [pid 49082:tid 49157] [client 4.193.168.228:14333] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Fri Mar 20 13:21:03.906111 2026] [:error] [pid 49082:tid 49152] [client 4.193.168.228:14333] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Fri Mar 20 13:21:03.999663 2026] [:error] [pid 49082:tid 49153] [client 4.193.168.228:14333] File does not exist: /usr/local/apache/htdocs/suspended-page/sts.php
[Fri Mar 20 13:21:04.105432 2026] [:error] [pid 49082:tid 49158] [client 4.193.168.228:14333] [client 4.193.168.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/root.php"] [unique_id "abzZQKpllYJI1LUIdL9yOgAAAVA"]
[Fri Mar 20 13:21:04.488333 2026] [:error] [pid 49081:tid 49138] [client 4.193.168.228:6809] [client 4.193.168.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/root.php"] [unique_id "abzZQBo1LBAUhfhYPR2SkgAAARc"]
[Fri Mar 20 13:21:04.847369 2026] [:error] [pid 51714:tid 51722] [client 4.193.168.228:14277] [client 4.193.168.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/root.php"] [unique_id "abzZQDWI82pxvQ0gksuPlQAAAIY"]
[Fri Mar 20 13:21:05.211708 2026] [:error] [pid 51714:tid 51737] [client 4.193.168.228:7131] [client 4.193.168.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/root.php"] [unique_id "abzZQTWI82pxvQ0gksuPlwAAAJU"]
[Sat Mar 21 17:17:29.388151 2026] [:error] [pid 49170:tid 49194] [client 104.28.163.82:40392] [client 104.28.163.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "ab5iKb1KUC-QISS0eWqgKQAAARY"]
[Sun Mar 22 10:39:28.838617 2026] [:error] [pid 51468:tid 51493] [client 52.138.39.105:13746] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "ab9WYE2TppSvA8W5CBQVJAAAANE"]
[Sun Mar 22 10:39:29.670904 2026] [:error] [pid 51468:tid 51480] [client 52.138.39.105:13713] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "ab9WYU2TppSvA8W5CBQVKwAAAMQ"]
[Sun Mar 22 10:39:30.504923 2026] [:error] [pid 40039:tid 40064] [client 52.138.39.105:13726] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "ab9WYh3aDgUJfBYishmy_gAAARc"]
[Sun Mar 22 10:39:31.340112 2026] [:error] [pid 40039:tid 40051] [client 52.138.39.105:13519] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "ab9WYx3aDgUJfBYishmzAwAAAQo"]
[Mon Mar 23 23:08:57.909300 2026] [:error] [pid 52341:tid 52364] [client 40.85.222.197:40842] File does not exist: /usr/local/apache/htdocs/suspended-page/gfile.php
[Mon Mar 23 23:08:58.118534 2026] [:error] [pid 52341:tid 52355] [client 40.85.222.197:40842] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Mon Mar 23 23:08:58.328775 2026] [:error] [pid 52341:tid 52356] [client 40.85.222.197:40842] File does not exist: /usr/local/apache/htdocs/suspended-page/sty.php
[Mon Mar 23 23:08:58.539489 2026] [:error] [pid 52341:tid 52348] [client 40.85.222.197:40842] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxx.php
[Mon Mar 23 23:08:58.750092 2026] [:error] [pid 52341:tid 52343] [client 40.85.222.197:40842] File does not exist: /usr/local/apache/htdocs/suspended-page/h.php
[Mon Mar 23 23:08:58.962132 2026] [:error] [pid 52341:tid 52357] [client 40.85.222.197:40842] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Mon Mar 23 23:08:59.171976 2026] [:error] [pid 52341:tid 52360] [client 40.85.222.197:40842] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Mon Mar 23 23:08:59.382152 2026] [:error] [pid 52341:tid 52358] [client 40.85.222.197:40842] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Mon Mar 23 23:08:59.591758 2026] [:error] [pid 52341:tid 52367] [client 40.85.222.197:40842] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Mon Mar 23 23:08:59.805114 2026] [:error] [pid 52341:tid 52362] [client 40.85.222.197:40842] File does not exist: /usr/local/apache/htdocs/suspended-page/tt.php
[Mon Mar 23 23:09:00.011818 2026] [:error] [pid 52341:tid 52359] [client 40.85.222.197:40842] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acFXjKPKTBDR2u47Gb0UWwAAAVA"]
[Mon Mar 23 23:09:00.430371 2026] [:error] [pid 38178:tid 38251] [client 40.85.222.197:40938] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acFXjA0axWfXsVvR9udWtQAAAIk"]
[Mon Mar 23 23:09:00.842927 2026] [:error] [pid 52341:tid 52346] [client 40.85.222.197:40870] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acFXjKPKTBDR2u47Gb0UXAAAAUM"]
[Mon Mar 23 23:09:01.254807 2026] [:error] [pid 38177:tid 38230] [client 40.85.222.197:40950] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acFXjXsYW-_HCI66MukE8gAAAE8"]
[Mon Mar 23 23:09:01.666024 2026] [:error] [pid 38178:tid 38249] [client 40.85.222.197:40898] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/path.php"] [unique_id "acFXjQ0axWfXsVvR9udWuAAAAIc"]
[Mon Mar 23 23:09:02.079350 2026] [:error] [pid 38276:tid 38298] [client 40.85.222.197:40953] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/path.php"] [unique_id "acFXjpoKGiI-a7oME3ISQQAAANM"]
[Mon Mar 23 23:09:02.494865 2026] [:error] [pid 52341:tid 52364] [client 40.85.222.197:40957] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/path.php"] [unique_id "acFXjqPKTBDR2u47Gb0UXgAAAVU"]
[Mon Mar 23 23:09:02.905991 2026] [:error] [pid 38306:tid 38316] [client 40.85.222.197:40944] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/path.php"] [unique_id "acFXjjkL8qwu-hHc6BjKhQAAAQg"]
[Mon Mar 23 23:09:03.317449 2026] [:error] [pid 38306:tid 38330] [client 40.85.222.197:40943] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wdf.php"] [unique_id "acFXjzkL8qwu-hHc6BjKiQAAARY"]
[Mon Mar 23 23:09:03.731437 2026] [:error] [pid 52341:tid 52365] [client 40.85.222.197:40832] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av6m.php"] [unique_id "acFXj6PKTBDR2u47Gb0UYwAAAVY"]
[Mon Mar 23 23:09:04.161804 2026] [:error] [pid 52341:tid 52354] [client 40.85.222.197:40877] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av6m.php"] [unique_id "acFXkKPKTBDR2u47Gb0UZQAAAUs"]
[Mon Mar 23 23:09:04.574655 2026] [:error] [pid 52341:tid 52349] [client 40.85.222.197:40840] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/autogooey.php"] [unique_id "acFXkKPKTBDR2u47Gb0UZwAAAUY"]
[Mon Mar 23 23:09:04.985549 2026] [:error] [pid 38176:tid 38200] [client 40.85.222.197:40855] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/autogooey.php"] [unique_id "acFXkEtG4qlh1gvNjuJdLwAAAA0"]
[Mon Mar 23 23:09:05.395996 2026] [:error] [pid 38177:tid 38227] [client 40.85.222.197:40849] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/autogooey.php"] [unique_id "acFXkXsYW-_HCI66MukE8wAAAEw"]
[Mon Mar 23 23:09:05.815438 2026] [:error] [pid 38178:tid 38266] [client 40.85.222.197:40839] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/autogooey.php"] [unique_id "acFXkQ0axWfXsVvR9udWvQAAAJg"]
[Mon Mar 23 23:09:06.231946 2026] [:error] [pid 38306:tid 38316] [client 40.85.222.197:40807] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsvvs.php"] [unique_id "acFXkjkL8qwu-hHc6BjKkQAAAQg"]
[Mon Mar 23 23:09:06.652057 2026] [:error] [pid 38306:tid 38325] [client 40.85.222.197:40934] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acFXkjkL8qwu-hHc6BjKlQAAARE"]
[Mon Mar 23 23:09:07.065786 2026] [:error] [pid 38276:tid 38279] [client 40.85.222.197:40949] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acFXk5oKGiI-a7oME3ISQgAAAMA"]
[Mon Mar 23 23:09:07.498645 2026] [:error] [pid 52341:tid 52352] [client 40.85.222.197:40774] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acFXk6PKTBDR2u47Gb0UbgAAAUk"]
[Mon Mar 23 23:09:07.909548 2026] [:error] [pid 38176:tid 38190] [client 40.85.222.197:40910] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acFXk0tG4qlh1gvNjuJdMwAAAAM"]
[Mon Mar 23 23:09:08.335681 2026] [:error] [pid 38176:tid 38209] [client 40.85.222.197:40860] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFXlEtG4qlh1gvNjuJdNAAAABY"]
[Mon Mar 23 23:09:08.746687 2026] [:error] [pid 38176:tid 38202] [client 40.85.222.197:40791] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFXlEtG4qlh1gvNjuJdNQAAAA8"]
[Mon Mar 23 23:09:09.157947 2026] [:error] [pid 38306:tid 38317] [client 40.85.222.197:40846] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFXlTkL8qwu-hHc6BjKmgAAAQk"]
[Mon Mar 23 23:09:09.569839 2026] [:error] [pid 38306:tid 38329] [client 40.85.222.197:40769] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFXlTkL8qwu-hHc6BjKnQAAARU"]
[Mon Mar 23 23:09:09.986305 2026] [:error] [pid 38306:tid 38308] [client 40.85.222.197:40776] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFXlTkL8qwu-hHc6BjKogAAAQA"]
[Tue Mar 24 00:17:13.430200 2026] [:error] [pid 52341:tid 52343] [client 20.215.56.86:22888] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Tue Mar 24 00:17:13.716942 2026] [:error] [pid 52341:tid 52361] [client 20.215.56.86:22888] File does not exist: /usr/local/apache/htdocs/suspended-page/xocx.php
[Tue Mar 24 00:17:15.402020 2026] [:error] [pid 52341:tid 52361] [client 20.215.56.86:22888] File does not exist: /usr/local/apache/htdocs/suspended-page/zample.php
[Tue Mar 24 00:17:15.686464 2026] [:error] [pid 52341:tid 52363] [client 20.215.56.86:22888] File does not exist: /usr/local/apache/htdocs/suspended-page/read.php
[Tue Mar 24 00:17:15.972181 2026] [:error] [pid 52341:tid 52364] [client 20.215.56.86:22888] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kd4xalrg7m.php
[Tue Mar 24 00:17:16.244172 2026] [:error] [pid 52341:tid 52351] [client 20.215.56.86:22888] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Tue Mar 24 00:17:17.453155 2026] [:error] [pid 52341:tid 52351] [client 20.215.56.86:22888] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Tue Mar 24 00:17:17.740013 2026] [:error] [pid 52341:tid 52350] [client 20.215.56.86:22888] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Tue Mar 24 00:17:18.018685 2026] [:error] [pid 52341:tid 52347] [client 20.215.56.86:22888] File does not exist: /usr/local/apache/htdocs/suspended-page/1998.php
[Tue Mar 24 00:17:18.307152 2026] [:error] [pid 52341:tid 52346] [client 20.215.56.86:22888] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mter.php
[Tue Mar 24 00:17:18.591463 2026] [:error] [pid 52341:tid 52349] [client 20.215.56.86:22888] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acFnjqPKTBDR2u47Gb1FYwAAAUY"]
[Tue Mar 24 00:17:19.195702 2026] [:error] [pid 38176:tid 38205] [client 20.215.56.86:14048] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acFnj0tG4qlh1gvNjuJ05QAAABI"]
[Tue Mar 24 00:17:19.804526 2026] [:error] [pid 38176:tid 38197] [client 20.215.56.86:14021] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acFnj0tG4qlh1gvNjuJ06QAAAAo"]
[Tue Mar 24 00:17:20.408589 2026] [:error] [pid 38306:tid 38316] [client 20.215.56.86:22899] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acFnkDkL8qwu-hHc6BjrdAAAAQg"]
[Tue Mar 24 00:17:21.033090 2026] [:error] [pid 38177:tid 38238] [client 20.215.56.86:23912] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "acFnkXsYW-_HCI66MukS1AAAAFc"]
[Tue Mar 24 00:17:21.693341 2026] [:error] [pid 38306:tid 38311] [client 20.215.56.86:22876] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "acFnkTkL8qwu-hHc6BjrdwAAAQM"]
[Tue Mar 24 00:17:22.317752 2026] [:error] [pid 38176:tid 38193] [client 20.215.56.86:22881] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "acFnkktG4qlh1gvNjuJ08AAAAAY"]
[Tue Mar 24 00:17:22.844014 2026] [:error] [pid 38176:tid 38208] [client 20.215.56.86:14071] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "acFnkktG4qlh1gvNjuJ08gAAABU"]
[Tue Mar 24 00:17:23.425339 2026] [:error] [pid 52341:tid 52362] [client 20.215.56.86:30170] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "acFnk6PKTBDR2u47Gb1FbQAAAVM"]
[Tue Mar 24 00:17:24.088704 2026] [:error] [pid 38306:tid 38332] [client 20.215.56.86:23878] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "acFnlDkL8qwu-hHc6BjrfgAAARg"]
[Tue Mar 24 00:17:24.706039 2026] [:error] [pid 52341:tid 52359] [client 20.215.56.86:22911] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "acFnlKPKTBDR2u47Gb1FdgAAAVA"]
[Tue Mar 24 00:17:25.297916 2026] [:error] [pid 38176:tid 38205] [client 20.215.56.86:23874] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "acFnlUtG4qlh1gvNjuJ09AAAABI"]
[Tue Mar 24 00:17:25.891872 2026] [:error] [pid 52341:tid 52350] [client 20.215.56.86:23887] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "acFnlaPKTBDR2u47Gb1FfwAAAUc"]
[Tue Mar 24 00:17:26.476014 2026] [:error] [pid 38306:tid 38320] [client 20.215.56.86:30194] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "acFnljkL8qwu-hHc6BjrgAAAAQw"]
[Tue Mar 24 00:17:27.066825 2026] [:error] [pid 38306:tid 38316] [client 20.215.56.86:30181] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "acFnlzkL8qwu-hHc6BjrggAAAQg"]
[Tue Mar 24 00:17:27.669600 2026] [:error] [pid 38306:tid 38310] [client 20.215.56.86:23928] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "acFnlzkL8qwu-hHc6BjrhgAAAQI"]
[Tue Mar 24 00:17:28.259513 2026] [:error] [pid 38177:tid 38234] [client 20.215.56.86:23901] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acFnmHsYW-_HCI66MukS1gAAAFM"]
[Tue Mar 24 00:17:28.844684 2026] [:error] [pid 38176:tid 38200] [client 20.215.56.86:30181] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acFnmEtG4qlh1gvNjuJ1AgAAAA0"]
[Tue Mar 24 00:17:29.469718 2026] [:error] [pid 38176:tid 38188] [client 20.215.56.86:14028] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acFnmUtG4qlh1gvNjuJ1BgAAAAE"]
[Tue Mar 24 00:17:30.068319 2026] [:error] [pid 52341:tid 52343] [client 20.215.56.86:22861] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acFnmqPKTBDR2u47Gb1FhgAAAUA"]
[Tue Mar 24 00:17:30.658456 2026] [:error] [pid 52341:tid 52359] [client 20.215.56.86:30154] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/settings.php"] [unique_id "acFnmqPKTBDR2u47Gb1FiwAAAVA"]
[Tue Mar 24 00:17:31.271285 2026] [:error] [pid 38176:tid 38209] [client 20.215.56.86:22855] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/settings.php"] [unique_id "acFnm0tG4qlh1gvNjuJ1CQAAABY"]
[Tue Mar 24 00:17:31.858759 2026] [:error] [pid 38176:tid 38190] [client 20.215.56.86:30186] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/settings.php"] [unique_id "acFnm0tG4qlh1gvNjuJ1DAAAAAM"]
[Tue Mar 24 00:17:32.444169 2026] [:error] [pid 52341:tid 52351] [client 20.215.56.86:23895] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/settings.php"] [unique_id "acFnnKPKTBDR2u47Gb1FlgAAAUg"]
[Tue Mar 24 00:17:33.042070 2026] [:error] [pid 38178:tid 38260] [client 20.215.56.86:14060] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "acFnnQ0axWfXsVvR9udnNgAAAJI"]
[Tue Mar 24 00:17:33.633761 2026] [:error] [pid 38177:tid 38222] [client 20.215.56.86:30152] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "acFnnXsYW-_HCI66MukS2gAAAEc"]
[Tue Mar 24 00:17:34.208716 2026] [:error] [pid 38178:tid 38263] [client 20.215.56.86:30171] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "acFnng0axWfXsVvR9udnOwAAAJU"]
[Tue Mar 24 00:17:34.807017 2026] [:error] [pid 38276:tid 38301] [client 20.215.56.86:23925] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "acFnnpoKGiI-a7oME3Im2gAAANY"]
[Tue Mar 24 00:17:35.397633 2026] [:error] [pid 52341:tid 52363] [client 20.215.56.86:23902] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/eee.php"] [unique_id "acFnn6PKTBDR2u47Gb1FoQAAAVQ"]
[Tue Mar 24 00:17:35.978144 2026] [:error] [pid 52341:tid 52364] [client 20.215.56.86:14047] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/eee.php"] [unique_id "acFnn6PKTBDR2u47Gb1FpgAAAVU"]
[Tue Mar 24 00:17:36.577312 2026] [:error] [pid 38178:tid 38248] [client 20.215.56.86:30185] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/eee.php"] [unique_id "acFnoA0axWfXsVvR9udnQAAAAIY"]
[Tue Mar 24 00:17:37.162828 2026] [:error] [pid 38276:tid 38280] [client 20.215.56.86:14022] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/eee.php"] [unique_id "acFnoZoKGiI-a7oME3Im3AAAAME"]
[Tue Mar 24 00:17:37.717579 2026] [:error] [pid 38177:tid 38217] [client 20.215.56.86:23931] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "acFnoXsYW-_HCI66MukS3wAAAEI"]
[Tue Mar 24 00:17:38.293340 2026] [:error] [pid 38176:tid 38195] [client 20.215.56.86:30180] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "acFnoktG4qlh1gvNjuJ1EQAAAAg"]
[Tue Mar 24 00:17:38.869120 2026] [:error] [pid 38276:tid 38279] [client 20.215.56.86:22874] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "acFnopoKGiI-a7oME3Im3wAAAMA"]
[Tue Mar 24 00:17:39.420470 2026] [:error] [pid 52341:tid 52355] [client 20.215.56.86:23915] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "acFno6PKTBDR2u47Gb1FsgAAAUw"]
[Tue Mar 24 00:17:39.962115 2026] [:error] [pid 52341:tid 52362] [client 20.215.56.86:22856] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "acFno6PKTBDR2u47Gb1FtgAAAVM"]
[Tue Mar 24 00:17:40.543035 2026] [:error] [pid 38177:tid 38232] [client 20.215.56.86:14027] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "acFnpHsYW-_HCI66MukS4QAAAFE"]
[Tue Mar 24 00:17:41.116782 2026] [:error] [pid 38276:tid 38281] [client 20.215.56.86:14038] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "acFnpZoKGiI-a7oME3Im5AAAAMI"]
[Tue Mar 24 00:17:41.685274 2026] [:error] [pid 38178:tid 38261] [client 20.215.56.86:30144] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "acFnpQ0axWfXsVvR9udnSgAAAJM"]
[Tue Mar 24 00:17:42.267059 2026] [:error] [pid 38178:tid 38242] [client 20.215.56.86:61088] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/swallowable.php"] [unique_id "acFnpg0axWfXsVvR9udnTQAAAIA"]
[Tue Mar 24 00:17:42.838320 2026] [:error] [pid 38176:tid 38190] [client 20.215.56.86:14061] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/swallowable.php"] [unique_id "acFnpktG4qlh1gvNjuJ1GQAAAAM"]
[Tue Mar 24 00:17:43.393710 2026] [:error] [pid 38176:tid 38192] [client 20.215.56.86:9871] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/swallowable.php"] [unique_id "acFnp0tG4qlh1gvNjuJ1GwAAAAU"]
[Tue Mar 24 00:17:43.921446 2026] [:error] [pid 38176:tid 38187] [client 20.215.56.86:23886] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/swallowable.php"] [unique_id "acFnp0tG4qlh1gvNjuJ1HgAAAAA"]
[Tue Mar 24 00:17:44.468660 2026] [:error] [pid 52341:tid 52363] [client 20.215.56.86:22848] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "acFnqKPKTBDR2u47Gb1FxwAAAVQ"]
[Tue Mar 24 00:17:44.989516 2026] [:error] [pid 52341:tid 52348] [client 20.215.56.86:30149] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "acFnqKPKTBDR2u47Gb1FygAAAUU"]
[Tue Mar 24 00:17:45.505177 2026] [:error] [pid 52341:tid 52355] [client 20.215.56.86:14054] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "acFnqaPKTBDR2u47Gb1F0QAAAUw"]
[Tue Mar 24 00:17:46.045519 2026] [:error] [pid 52341:tid 52361] [client 20.215.56.86:23900] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "acFnqqPKTBDR2u47Gb1F1AAAAVI"]
[Tue Mar 24 00:17:46.560986 2026] [:error] [pid 52341:tid 52352] [client 20.215.56.86:23873] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "acFnqqPKTBDR2u47Gb1F1wAAAUk"]
[Tue Mar 24 00:17:47.082553 2026] [:error] [pid 52341:tid 52362] [client 20.215.56.86:30167] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "acFnq6PKTBDR2u47Gb1F3gAAAVM"]
[Tue Mar 24 00:17:47.617316 2026] [:error] [pid 38176:tid 38197] [client 20.215.56.86:23875] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "acFnq0tG4qlh1gvNjuJ1IwAAAAo"]
[Tue Mar 24 00:17:48.148265 2026] [:error] [pid 38276:tid 38297] [client 20.215.56.86:23885] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "acFnrJoKGiI-a7oME3Im7QAAANI"]
[Tue Mar 24 00:17:48.665560 2026] [:error] [pid 38178:tid 38265] [client 20.215.56.86:22898] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sty.php"] [unique_id "acFnrA0axWfXsVvR9udnUgAAAJc"]
[Tue Mar 24 00:17:49.181250 2026] [:error] [pid 52341:tid 52361] [client 20.215.56.86:14023] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sty.php"] [unique_id "acFnraPKTBDR2u47Gb1F6wAAAVI"]
[Tue Mar 24 00:17:49.715616 2026] [:error] [pid 52341:tid 52358] [client 20.215.56.86:23894] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sty.php"] [unique_id "acFnraPKTBDR2u47Gb1F8AAAAU8"]
[Tue Mar 24 00:17:50.253530 2026] [:error] [pid 38178:tid 38264] [client 20.215.56.86:30179] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sty.php"] [unique_id "acFnrg0axWfXsVvR9udnUwAAAJY"]
[Tue Mar 24 00:17:50.792455 2026] [:error] [pid 38176:tid 38190] [client 20.215.56.86:23918] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "acFnrktG4qlh1gvNjuJ1JwAAAAM"]
[Tue Mar 24 00:17:51.311363 2026] [:error] [pid 38306:tid 38313] [client 20.215.56.86:14026] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "acFnrzkL8qwu-hHc6BjrmwAAAQU"]
[Tue Mar 24 00:17:51.848380 2026] [:error] [pid 38177:tid 38217] [client 20.215.56.86:23881] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "acFnr3sYW-_HCI66MukS7wAAAEI"]
[Tue Mar 24 00:17:52.407001 2026] [:error] [pid 38176:tid 38208] [client 20.215.56.86:23923] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "acFnsEtG4qlh1gvNjuJ1KgAAABU"]
[Tue Mar 24 00:17:52.976352 2026] [:error] [pid 38178:tid 38249] [client 20.215.56.86:61064] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acFnsA0axWfXsVvR9udnWgAAAIc"]
[Tue Mar 24 00:17:53.504177 2026] [:error] [pid 38178:tid 38258] [client 20.215.56.86:30192] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acFnsQ0axWfXsVvR9udnWwAAAJA"]
[Tue Mar 24 00:17:54.033667 2026] [:error] [pid 38176:tid 38201] [client 20.215.56.86:61077] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acFnsktG4qlh1gvNjuJ1NQAAAA4"]
[Tue Mar 24 00:17:54.565168 2026] [:error] [pid 38178:tid 38256] [client 20.215.56.86:14025] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acFnsg0axWfXsVvR9udnXAAAAI4"]
[Tue Mar 24 00:17:55.090932 2026] [:error] [pid 52341:tid 52363] [client 20.215.56.86:14033] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acFns6PKTBDR2u47Gb1F_gAAAVQ"]
[Tue Mar 24 00:17:55.609456 2026] [:error] [pid 38176:tid 38211] [client 20.215.56.86:22878] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acFns0tG4qlh1gvNjuJ1OQAAABg"]
[Tue Mar 24 00:17:56.175771 2026] [:error] [pid 52341:tid 52361] [client 20.215.56.86:14058] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acFntKPKTBDR2u47Gb1GAAAAAVI"]
[Tue Mar 24 00:17:56.695828 2026] [:error] [pid 52341:tid 52352] [client 20.215.56.86:30155] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acFntKPKTBDR2u47Gb1GAwAAAUk"]
[Tue Mar 24 00:17:57.238570 2026] [:error] [pid 38176:tid 38200] [client 20.215.56.86:14050] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFntUtG4qlh1gvNjuJ1OwAAAA0"]
[Tue Mar 24 00:17:57.770072 2026] [:error] [pid 52341:tid 52367] [client 20.215.56.86:22903] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFntaPKTBDR2u47Gb1GBAAAAVg"]
[Tue Mar 24 00:17:58.290013 2026] [:error] [pid 38306:tid 38311] [client 20.215.56.86:30196] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFntjkL8qwu-hHc6BjroAAAAQM"]
[Tue Mar 24 00:17:58.814341 2026] [:error] [pid 52341:tid 52363] [client 20.215.56.86:30158] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFntqPKTBDR2u47Gb1GCQAAAVQ"]
[Tue Mar 24 00:17:59.349149 2026] [:error] [pid 38276:tid 38298] [client 20.215.56.86:9861] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acFnt5oKGiI-a7oME3Im-AAAANM"]
[Tue Mar 24 00:17:59.959891 2026] [:error] [pid 52341:tid 52352] [client 20.215.56.86:22886] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acFnt6PKTBDR2u47Gb1GDQAAAUk"]
[Tue Mar 24 00:18:00.476490 2026] [:error] [pid 52341:tid 52367] [client 20.215.56.86:22872] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acFnuKPKTBDR2u47Gb1GEAAAAVg"]
[Tue Mar 24 00:18:01.040823 2026] [:error] [pid 38176:tid 38196] [client 20.215.56.86:14037] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acFnuUtG4qlh1gvNjuJ1PwAAAAk"]
[Tue Mar 24 00:18:01.580521 2026] [:error] [pid 52341:tid 52364] [client 20.215.56.86:61086] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acFnuaPKTBDR2u47Gb1GEgAAAVU"]
[Tue Mar 24 00:18:02.102092 2026] [:error] [pid 52341:tid 52344] [client 20.215.56.86:14032] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acFnuqPKTBDR2u47Gb1GFAAAAUE"]
[Tue Mar 24 00:18:02.629007 2026] [:error] [pid 52341:tid 52360] [client 20.215.56.86:30148] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acFnuqPKTBDR2u47Gb1GFwAAAVE"]
[Tue Mar 24 00:18:03.154661 2026] [:error] [pid 38276:tid 38295] [client 20.215.56.86:30157] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acFnu5oKGiI-a7oME3Im_QAAANA"]
[Tue Mar 24 00:18:03.672144 2026] [:error] [pid 38276:tid 38291] [client 20.215.56.86:23906] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "acFnu5oKGiI-a7oME3Im_gAAAMw"]
[Tue Mar 24 00:18:04.254091 2026] [:error] [pid 38177:tid 38217] [client 20.215.56.86:61099] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "acFnvHsYW-_HCI66MukTFgAAAEI"]
[Tue Mar 24 00:18:04.810075 2026] [:error] [pid 38177:tid 38232] [client 20.215.56.86:22882] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "acFnvHsYW-_HCI66MukTGQAAAFE"]
[Tue Mar 24 00:18:05.332362 2026] [:error] [pid 38177:tid 38219] [client 20.215.56.86:22904] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "acFnvXsYW-_HCI66MukTGwAAAEQ"]
[Tue Mar 24 00:18:05.937357 2026] [:error] [pid 38276:tid 38299] [client 20.215.56.86:14055] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "acFnvZoKGiI-a7oME3InAwAAANQ"]
[Tue Mar 24 00:18:06.553958 2026] [:error] [pid 38178:tid 38253] [client 20.215.56.86:30188] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "acFnvg0axWfXsVvR9udnZgAAAIs"]
[Tue Mar 24 00:18:07.077680 2026] [:error] [pid 38178:tid 38261] [client 20.215.56.86:23891] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "acFnvw0axWfXsVvR9udnaAAAAJM"]
[Tue Mar 24 00:18:07.678924 2026] [:error] [pid 38177:tid 38222] [client 20.215.56.86:30150] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "acFnv3sYW-_HCI66MukTIAAAAEc"]
[Tue Mar 24 00:18:08.204773 2026] [:error] [pid 38177:tid 38233] [client 20.215.56.86:22893] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "acFnwHsYW-_HCI66MukTIQAAAFI"]
[Tue Mar 24 00:18:08.725896 2026] [:error] [pid 38177:tid 38217] [client 20.215.56.86:14018] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "acFnwHsYW-_HCI66MukTIwAAAEI"]
[Tue Mar 24 00:18:09.252378 2026] [:error] [pid 38276:tid 38294] [client 20.215.56.86:22865] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "acFnwZoKGiI-a7oME3InCAAAAM8"]
[Tue Mar 24 00:18:09.795330 2026] [:error] [pid 38176:tid 38191] [client 20.215.56.86:14036] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "acFnwUtG4qlh1gvNjuJ1TAAAAAQ"]
[Tue Mar 24 00:18:10.350712 2026] [:error] [pid 38178:tid 38266] [client 20.215.56.86:23903] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "acFnwg0axWfXsVvR9udnbAAAAJg"]
[Tue Mar 24 00:18:10.887665 2026] [:error] [pid 38178:tid 38254] [client 20.215.56.86:23930] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "acFnwg0axWfXsVvR9udnbQAAAIw"]
[Tue Mar 24 00:18:11.418067 2026] [:error] [pid 38176:tid 38187] [client 20.215.56.86:30165] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "acFnw0tG4qlh1gvNjuJ1TgAAAAA"]
[Tue Mar 24 00:18:11.931887 2026] [:error] [pid 52341:tid 52363] [client 20.215.56.86:65419] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "acFnw6PKTBDR2u47Gb1GHQAAAVQ"]
[Tue Mar 24 00:18:12.447408 2026] [:error] [pid 52341:tid 52349] [client 20.215.56.86:61116] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "acFnxKPKTBDR2u47Gb1GIQAAAUY"]
[Tue Mar 24 00:18:12.991586 2026] [:error] [pid 52341:tid 52366] [client 20.215.56.86:23883] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "acFnxKPKTBDR2u47Gb1GIwAAAVc"]
[Tue Mar 24 00:18:13.527661 2026] [:error] [pid 38178:tid 38265] [client 20.215.56.86:22910] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "acFnxQ0axWfXsVvR9udncAAAAJc"]
[Tue Mar 24 00:18:14.047271 2026] [:error] [pid 38178:tid 38262] [client 20.215.56.86:23910] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "acFnxg0axWfXsVvR9udncQAAAJQ"]
[Tue Mar 24 00:18:14.564211 2026] [:error] [pid 38178:tid 38253] [client 20.215.56.86:23934] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "acFnxg0axWfXsVvR9udndAAAAIs"]
[Tue Mar 24 00:18:15.091638 2026] [:error] [pid 38276:tid 38287] [client 20.215.56.86:14072] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "acFnx5oKGiI-a7oME3InFAAAAMg"]
[Tue Mar 24 00:18:15.622951 2026] [:error] [pid 38276:tid 38281] [client 20.215.56.86:23927] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "acFnx5oKGiI-a7oME3InFQAAAMI"]
[Tue Mar 24 00:18:16.170124 2026] [:error] [pid 52341:tid 52343] [client 20.215.56.86:30173] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "acFnyKPKTBDR2u47Gb1GLwAAAUA"]
[Tue Mar 24 00:18:16.733980 2026] [:error] [pid 52341:tid 52367] [client 20.215.56.86:22906] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "acFnyKPKTBDR2u47Gb1GNAAAAVg"]
[Tue Mar 24 00:18:17.263684 2026] [:error] [pid 52341:tid 52364] [client 20.215.56.86:23933] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "acFnyaPKTBDR2u47Gb1GNgAAAVU"]
[Tue Mar 24 00:18:17.817612 2026] [:error] [pid 52341:tid 52356] [client 20.215.56.86:23914] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "acFnyaPKTBDR2u47Gb1GOAAAAU0"]
[Tue Mar 24 00:18:18.360669 2026] [:error] [pid 52341:tid 52343] [client 20.215.56.86:61087] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Tue Mar 24 00:18:18.630650 2026] [:error] [pid 52341:tid 52367] [client 20.215.56.86:61087] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Mar 24 00:18:18.889524 2026] [:error] [pid 52341:tid 52344] [client 20.215.56.86:61087] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Tue Mar 24 00:18:19.426489 2026] [:error] [pid 52341:tid 52345] [client 20.215.56.86:61087] File does not exist: /usr/local/apache/htdocs/suspended-page/file59.php
[Tue Mar 24 00:18:19.691397 2026] [:error] [pid 52341:tid 52353] [client 20.215.56.86:61087] File does not exist: /usr/local/apache/htdocs/suspended-page/bless5.php
[Tue Mar 24 00:18:19.951190 2026] [:error] [pid 52341:tid 52355] [client 20.215.56.86:61087] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Tue Mar 24 00:18:20.233672 2026] [:error] [pid 52341:tid 52348] [client 20.215.56.86:61087] File does not exist: /usr/local/apache/htdocs/suspended-page/xqq.php
[Tue Mar 24 00:18:20.504924 2026] [:error] [pid 52341:tid 52357] [client 20.215.56.86:61087] File does not exist: /usr/local/apache/htdocs/suspended-page/plss3.php
[Tue Mar 24 00:18:20.764769 2026] [:error] [pid 52341:tid 52354] [client 20.215.56.86:61087] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Tue Mar 24 00:18:21.025456 2026] [:error] [pid 52341:tid 52344] [client 20.215.56.86:61087] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Tue Mar 24 00:18:21.282017 2026] [:error] [pid 52341:tid 52356] [client 20.215.56.86:61087] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "acFnzaPKTBDR2u47Gb1GUQAAAU0"]
[Tue Mar 24 00:18:21.806850 2026] [:error] [pid 38176:tid 38209] [client 20.215.56.86:9913] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "acFnzUtG4qlh1gvNjuJ1WQAAABY"]
[Tue Mar 24 00:18:22.367550 2026] [:error] [pid 52341:tid 52350] [client 20.215.56.86:30176] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "acFnzqPKTBDR2u47Gb1GUwAAAUc"]
[Tue Mar 24 00:18:22.904713 2026] [:error] [pid 52341:tid 52358] [client 20.215.56.86:22868] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "acFnzqPKTBDR2u47Gb1GVwAAAU8"]
[Tue Mar 24 00:18:23.451754 2026] [:error] [pid 38178:tid 38251] [client 20.215.56.86:9857] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "acFnzw0axWfXsVvR9udnewAAAIk"]
[Tue Mar 24 00:18:24.008014 2026] [:error] [pid 38306:tid 38312] [client 20.215.56.86:61085] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "acFn0DkL8qwu-hHc6BjrqgAAAQQ"]
[Tue Mar 24 00:18:24.534294 2026] [:error] [pid 38276:tid 38286] [client 20.215.56.86:61097] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "acFn0JoKGiI-a7oME3InGQAAAMc"]
[Tue Mar 24 00:18:25.081702 2026] [:error] [pid 38276:tid 38296] [client 20.215.56.86:14056] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "acFn0ZoKGiI-a7oME3InGgAAANE"]
[Tue Mar 24 00:18:25.646310 2026] [:error] [pid 52341:tid 52360] [client 20.215.56.86:14070] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "acFn0aPKTBDR2u47Gb1GYQAAAVE"]
[Tue Mar 24 00:18:26.189889 2026] [:error] [pid 38177:tid 38215] [client 20.215.56.86:23907] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "acFn0nsYW-_HCI66MukTLgAAAEA"]
[Tue Mar 24 00:18:26.723576 2026] [:error] [pid 38276:tid 38299] [client 20.215.56.86:22883] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "acFn0poKGiI-a7oME3InGwAAANQ"]
[Tue Mar 24 00:18:27.245905 2026] [:error] [pid 52341:tid 52344] [client 20.215.56.86:23893] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "acFn06PKTBDR2u47Gb1GZgAAAUE"]
[Tue Mar 24 00:18:27.840984 2026] [:error] [pid 52341:tid 52360] [client 20.215.56.86:14024] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "acFn06PKTBDR2u47Gb1GaAAAAVE"]
[Tue Mar 24 00:18:28.397135 2026] [:error] [pid 52341:tid 52358] [client 20.215.56.86:14074] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "acFn1KPKTBDR2u47Gb1GagAAAU8"]
[Tue Mar 24 00:18:28.921817 2026] [:error] [pid 52341:tid 52365] [client 20.215.56.86:65466] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "acFn1KPKTBDR2u47Gb1GbgAAAVY"]
[Tue Mar 24 00:18:29.591377 2026] [:error] [pid 38276:tid 38282] [client 20.215.56.86:22864] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "acFn1ZoKGiI-a7oME3InHgAAAMM"]
[Tue Mar 24 00:18:30.132802 2026] [:error] [pid 38178:tid 38261] [client 20.215.56.86:14044] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "acFn1g0axWfXsVvR9udngAAAAJM"]
[Tue Mar 24 00:18:30.721655 2026] [:error] [pid 38177:tid 38227] [client 20.215.56.86:65467] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "acFn1nsYW-_HCI66MukTMAAAAEw"]
[Tue Mar 24 00:18:31.240808 2026] [:error] [pid 38176:tid 38197] [client 20.215.56.86:61063] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "acFn10tG4qlh1gvNjuJ1ZQAAAAo"]
[Tue Mar 24 00:18:31.767496 2026] [:error] [pid 38178:tid 38242] [client 20.215.56.86:9903] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "acFn1w0axWfXsVvR9udnhQAAAIA"]
[Tue Mar 24 00:18:32.281587 2026] [:error] [pid 52341:tid 52357] [client 20.215.56.86:22885] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acFn2KPKTBDR2u47Gb1GcQAAAU4"]
[Tue Mar 24 00:18:32.807360 2026] [:error] [pid 52341:tid 52347] [client 20.215.56.86:61062] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acFn2KPKTBDR2u47Gb1GcgAAAUQ"]
[Tue Mar 24 00:18:33.326178 2026] [:error] [pid 38306:tid 38317] [client 20.215.56.86:22880] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acFn2TkL8qwu-hHc6BjruQAAAQk"]
[Tue Mar 24 00:18:33.860974 2026] [:error] [pid 52341:tid 52360] [client 20.215.56.86:22890] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acFn2aPKTBDR2u47Gb1GdQAAAVE"]
[Tue Mar 24 00:18:34.508337 2026] [:error] [pid 38177:tid 38217] [client 20.215.56.86:23892] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "acFn2nsYW-_HCI66MukTOQAAAEI"]
[Tue Mar 24 00:18:35.056362 2026] [:error] [pid 38306:tid 38320] [client 20.215.56.86:30146] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "acFn2zkL8qwu-hHc6BjrvQAAAQw"]
[Tue Mar 24 00:18:35.646842 2026] [:error] [pid 38276:tid 38296] [client 20.215.56.86:23905] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "acFn25oKGiI-a7oME3InJgAAANE"]
[Tue Mar 24 00:18:36.195787 2026] [:error] [pid 38178:tid 38243] [client 20.215.56.86:23872] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "acFn3A0axWfXsVvR9udnhgAAAIE"]
[Tue Mar 24 00:18:36.847810 2026] [:error] [pid 38306:tid 38324] [client 20.215.56.86:22900] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acFn3DkL8qwu-hHc6BjrxgAAARA"]
[Tue Mar 24 00:18:37.423287 2026] [:error] [pid 38306:tid 38331] [client 20.215.56.86:30182] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acFn3TkL8qwu-hHc6BjrxwAAARc"]
[Tue Mar 24 00:18:38.136585 2026] [:error] [pid 38176:tid 38203] [client 20.215.56.86:30198] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acFn3ktG4qlh1gvNjuJ1aQAAABA"]
[Tue Mar 24 00:18:38.681898 2026] [:error] [pid 38276:tid 38280] [client 20.215.56.86:14030] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acFn3poKGiI-a7oME3InKQAAAME"]
[Tue Mar 24 00:18:39.207176 2026] [:error] [pid 38276:tid 38282] [client 20.215.56.86:22850] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acFn35oKGiI-a7oME3InKwAAAMM"]
[Tue Mar 24 00:18:39.779289 2026] [:error] [pid 52341:tid 52353] [client 20.215.56.86:23882] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acFn36PKTBDR2u47Gb1GewAAAUo"]
[Tue Mar 24 00:18:40.296829 2026] [:error] [pid 38177:tid 38226] [client 20.215.56.86:65463] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acFn4HsYW-_HCI66MukTPgAAAEs"]
[Tue Mar 24 00:18:40.896710 2026] [:error] [pid 52341:tid 52352] [client 20.215.56.86:23880] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acFn4KPKTBDR2u47Gb1GfgAAAUk"]
[Tue Mar 24 00:18:41.458560 2026] [:error] [pid 38176:tid 38189] [client 20.215.56.86:61104] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFn4UtG4qlh1gvNjuJ1bgAAAAI"]
[Tue Mar 24 00:18:42.034957 2026] [:error] [pid 52341:tid 52364] [client 20.215.56.86:30205] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFn4qPKTBDR2u47Gb1GgQAAAVU"]
[Tue Mar 24 00:18:42.569434 2026] [:error] [pid 38176:tid 38197] [client 20.215.56.86:22862] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFn4ktG4qlh1gvNjuJ1cgAAAAo"]
[Tue Mar 24 00:18:43.104744 2026] [:error] [pid 38176:tid 38206] [client 20.215.56.86:9905] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFn40tG4qlh1gvNjuJ1cwAAABM"]
[Tue Mar 24 00:18:43.669162 2026] [:error] [pid 38176:tid 38209] [client 20.215.56.86:23908] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "acFn40tG4qlh1gvNjuJ1dAAAABY"]
[Tue Mar 24 00:18:44.234224 2026] [:error] [pid 38176:tid 38203] [client 20.215.56.86:30151] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "acFn5EtG4qlh1gvNjuJ1dgAAABA"]
[Tue Mar 24 00:18:44.873391 2026] [:error] [pid 38306:tid 38313] [client 20.215.56.86:23913] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "acFn5DkL8qwu-hHc6Bjr0wAAAQU"]
[Tue Mar 24 00:18:45.483611 2026] [:error] [pid 38306:tid 38325] [client 20.215.56.86:65410] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "acFn5TkL8qwu-hHc6Bjr1wAAARE"]
[Tue Mar 24 00:18:46.047880 2026] [:error] [pid 52341:tid 52352] [client 20.215.56.86:9856] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "acFn5qPKTBDR2u47Gb1GigAAAUk"]
[Tue Mar 24 00:18:46.660950 2026] [:error] [pid 38176:tid 38204] [client 20.215.56.86:65354] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "acFn5ktG4qlh1gvNjuJ1ewAAABE"]
[Tue Mar 24 00:18:47.188374 2026] [:error] [pid 52341:tid 52358] [client 20.215.56.86:61091] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "acFn56PKTBDR2u47Gb1GjgAAAU8"]
[Tue Mar 24 00:18:47.792765 2026] [:error] [pid 38177:tid 38239] [client 20.215.56.86:22849] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "acFn53sYW-_HCI66MukTRQAAAFg"]
[Tue Mar 24 00:18:48.333258 2026] [:error] [pid 38276:tid 38294] [client 20.215.56.86:30202] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "acFn6JoKGiI-a7oME3InNAAAAM8"]
[Tue Mar 24 00:18:48.923790 2026] [:error] [pid 52341:tid 52349] [client 20.215.56.86:22896] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "acFn6KPKTBDR2u47Gb1GkQAAAUY"]
[Tue Mar 24 00:18:49.436581 2026] [:error] [pid 38178:tid 38245] [client 20.215.56.86:65427] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "acFn6Q0axWfXsVvR9udniQAAAIM"]
[Tue Mar 24 00:18:50.034444 2026] [:error] [pid 52341:tid 52353] [client 20.215.56.86:23897] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "acFn6qPKTBDR2u47Gb1GlwAAAUo"]
[Tue Mar 24 00:18:50.550948 2026] [:error] [pid 38306:tid 38328] [client 20.215.56.86:23917] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "acFn6jkL8qwu-hHc6Bjr4gAAARQ"]
[Tue Mar 24 00:18:51.090389 2026] [:error] [pid 38306:tid 38308] [client 20.215.56.86:22869] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "acFn6zkL8qwu-hHc6Bjr5AAAAQA"]
[Tue Mar 24 00:18:51.634897 2026] [:error] [pid 38306:tid 38321] [client 20.215.56.86:64796] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "acFn6zkL8qwu-hHc6Bjr5gAAAQ0"]
[Tue Mar 24 00:18:52.199560 2026] [:error] [pid 38306:tid 38324] [client 20.215.56.86:23929] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "acFn7DkL8qwu-hHc6Bjr7QAAARA"]
[Tue Mar 24 00:18:52.728633 2026] [:error] [pid 38306:tid 38316] [client 20.215.56.86:14045] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "acFn7DkL8qwu-hHc6Bjr8QAAAQg"]
[Tue Mar 24 00:18:53.263313 2026] [:error] [pid 38178:tid 38246] [client 20.215.56.86:23888] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "acFn7Q0axWfXsVvR9udnigAAAIQ"]
[Tue Mar 24 00:18:53.810521 2026] [:error] [pid 38178:tid 38265] [client 20.215.56.86:30177] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "acFn7Q0axWfXsVvR9udniwAAAJc"]
[Tue Mar 24 00:18:54.325192 2026] [:error] [pid 52341:tid 52359] [client 20.215.56.86:22884] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "acFn7qPKTBDR2u47Gb1GoQAAAVA"]
[Tue Mar 24 00:18:54.838456 2026] [:error] [pid 52341:tid 52353] [client 20.215.56.86:65371] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "acFn7qPKTBDR2u47Gb1GpAAAAUo"]
[Tue Mar 24 00:18:55.374572 2026] [:error] [pid 38176:tid 38188] [client 20.215.56.86:23922] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "acFn70tG4qlh1gvNjuJ1ggAAAAE"]
[Tue Mar 24 00:18:55.926685 2026] [:error] [pid 38276:tid 38287] [client 20.215.56.86:30184] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "acFn75oKGiI-a7oME3InOgAAAMg"]
[Tue Mar 24 00:18:56.459376 2026] [:error] [pid 38276:tid 38302] [client 20.215.56.86:65360] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "acFn8JoKGiI-a7oME3InPQAAANc"]
[Tue Mar 24 00:18:57.001490 2026] [:error] [pid 38306:tid 38329] [client 20.215.56.86:9869] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ff1.php"] [unique_id "acFn8DkL8qwu-hHc6Bjr9gAAARU"]
[Tue Mar 24 00:18:57.527882 2026] [:error] [pid 38176:tid 38201] [client 20.215.56.86:30193] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ff1.php"] [unique_id "acFn8UtG4qlh1gvNjuJ1hgAAAA4"]
[Tue Mar 24 00:18:58.093915 2026] [:error] [pid 38276:tid 38293] [client 20.215.56.86:65417] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ff1.php"] [unique_id "acFn8poKGiI-a7oME3InPwAAAM4"]
[Tue Mar 24 00:18:58.608372 2026] [:error] [pid 38276:tid 38286] [client 20.215.56.86:9875] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ff1.php"] [unique_id "acFn8poKGiI-a7oME3InQgAAAMc"]
[Tue Mar 24 00:18:59.244801 2026] [:error] [pid 38176:tid 38197] [client 20.215.56.86:30147] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "acFn80tG4qlh1gvNjuJ1iAAAAAo"]
[Tue Mar 24 00:18:59.782187 2026] [:error] [pid 38306:tid 38311] [client 20.215.56.86:30199] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "acFn8zkL8qwu-hHc6Bjr-wAAAQM"]
[Tue Mar 24 00:19:00.378083 2026] [:error] [pid 38176:tid 38208] [client 20.215.56.86:9883] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "acFn9EtG4qlh1gvNjuJ1jAAAABU"]
[Tue Mar 24 00:19:00.905021 2026] [:error] [pid 38306:tid 38324] [client 20.215.56.86:22866] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "acFn9DkL8qwu-hHc6Bjr_wAAARA"]
[Tue Mar 24 00:19:01.474857 2026] [:error] [pid 38276:tid 38298] [client 20.215.56.86:14075] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "acFn9ZoKGiI-a7oME3InRQAAANM"]
[Tue Mar 24 00:19:02.001653 2026] [:error] [pid 52341:tid 52344] [client 20.215.56.86:61115] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "acFn9qPKTBDR2u47Gb1GpgAAAUE"]
[Tue Mar 24 00:19:02.557748 2026] [:error] [pid 38178:tid 38263] [client 20.215.56.86:30145] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "acFn9g0axWfXsVvR9udnkAAAAJU"]
[Tue Mar 24 00:19:03.087998 2026] [:error] [pid 52341:tid 52353] [client 20.215.56.86:22907] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "acFn96PKTBDR2u47Gb1GqQAAAUo"]
[Tue Mar 24 00:19:03.622801 2026] [:error] [pid 38178:tid 38258] [client 20.215.56.86:9860] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "acFn9w0axWfXsVvR9udnkgAAAJA"]
[Tue Mar 24 00:19:04.188722 2026] [:error] [pid 38306:tid 38330] [client 20.215.56.86:9895] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "acFn-DkL8qwu-hHc6BjsCQAAARY"]
[Tue Mar 24 00:19:04.717768 2026] [:error] [pid 38306:tid 38329] [client 20.215.56.86:61094] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "acFn-DkL8qwu-hHc6BjsDgAAARU"]
[Tue Mar 24 00:19:05.304351 2026] [:error] [pid 38306:tid 38313] [client 20.215.56.86:30168] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "acFn-TkL8qwu-hHc6BjsEgAAAQU"]
[Tue Mar 24 00:19:05.848005 2026] [:error] [pid 52341:tid 52358] [client 20.215.56.86:65418] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "acFn-aPKTBDR2u47Gb1GrgAAAU8"]
[Tue Mar 24 00:19:06.407800 2026] [:error] [pid 52341:tid 52357] [client 20.215.56.86:14063] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "acFn-qPKTBDR2u47Gb1GsQAAAU4"]
[Tue Mar 24 00:19:06.921401 2026] [:error] [pid 38176:tid 38192] [client 20.215.56.86:65356] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "acFn-ktG4qlh1gvNjuJ1jwAAAAU"]
[Tue Mar 24 00:19:07.469736 2026] [:error] [pid 38177:tid 38226] [client 20.215.56.86:9866] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "acFn-3sYW-_HCI66MukTSgAAAEs"]
[Tue Mar 24 00:19:07.983432 2026] [:error] [pid 38276:tid 38293] [client 20.215.56.86:22887] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "acFn-5oKGiI-a7oME3InTAAAAM4"]
[Tue Mar 24 00:19:08.530972 2026] [:error] [pid 38306:tid 38312] [client 20.215.56.86:9880] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "acFn_DkL8qwu-hHc6BjsFQAAAQQ"]
[Tue Mar 24 00:19:09.076610 2026] [:error] [pid 38276:tid 38291] [client 20.215.56.86:9887] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "acFn_ZoKGiI-a7oME3InTgAAAMw"]
[Tue Mar 24 00:19:09.714033 2026] [:error] [pid 38176:tid 38196] [client 20.215.56.86:22871] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "acFn_UtG4qlh1gvNjuJ1kAAAAAk"]
[Tue Mar 24 00:19:10.248551 2026] [:error] [pid 38276:tid 38300] [client 20.215.56.86:23884] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "acFn_poKGiI-a7oME3InUwAAANU"]
[Tue Mar 24 00:19:10.805137 2026] [:error] [pid 38177:tid 38218] [client 20.215.56.86:22894] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "acFn_nsYW-_HCI66MukTTAAAAEM"]
[Tue Mar 24 00:19:11.345881 2026] [:error] [pid 38276:tid 38302] [client 20.215.56.86:30162] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "acFn_5oKGiI-a7oME3InVwAAANc"]
[Tue Mar 24 00:19:11.903462 2026] [:error] [pid 38306:tid 38325] [client 20.215.56.86:14076] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "acFn_zkL8qwu-hHc6BjsGQAAARE"]
[Tue Mar 24 00:19:12.443850 2026] [:error] [pid 38276:tid 38294] [client 20.215.56.86:9890] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "acFoAJoKGiI-a7oME3InWQAAAM8"]
[Tue Mar 24 00:19:12.976125 2026] [:error] [pid 52341:tid 52349] [client 20.215.56.86:9909] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "acFoAKPKTBDR2u47Gb1GvwAAAUY"]
[Tue Mar 24 00:19:13.535506 2026] [:error] [pid 38177:tid 38230] [client 20.215.56.86:30195] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "acFoAXsYW-_HCI66MukTUAAAAE8"]
[Tue Mar 24 00:19:14.052467 2026] [:error] [pid 38176:tid 38201] [client 20.215.56.86:61080] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "acFoAktG4qlh1gvNjuJ1lgAAAA4"]
[Tue Mar 24 00:19:14.589963 2026] [:error] [pid 38178:tid 38260] [client 20.215.56.86:61112] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "acFoAg0axWfXsVvR9udnmwAAAJI"]
[Tue Mar 24 00:19:15.106389 2026] [:error] [pid 52341:tid 52347] [client 20.215.56.86:61066] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "acFoA6PKTBDR2u47Gb1GxAAAAUQ"]
[Tue Mar 24 00:19:15.618451 2026] [:error] [pid 38178:tid 38258] [client 20.215.56.86:65457] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "acFoAw0axWfXsVvR9udnnAAAAJA"]
[Tue Mar 24 00:19:16.144786 2026] [:error] [pid 38306:tid 38327] [client 20.215.56.86:65353] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "acFoBDkL8qwu-hHc6BjsIAAAARM"]
[Tue Mar 24 00:19:16.662701 2026] [:error] [pid 38306:tid 38331] [client 20.215.56.86:30191] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "acFoBDkL8qwu-hHc6BjsJAAAARc"]
[Tue Mar 24 00:19:17.178399 2026] [:error] [pid 38276:tid 38279] [client 20.215.56.86:22905] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "acFoBZoKGiI-a7oME3InXgAAAMA"]
[Tue Mar 24 00:19:17.751592 2026] [:error] [pid 52341:tid 52363] [client 20.215.56.86:23876] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "acFoBaPKTBDR2u47Gb1GxwAAAVQ"]
[Tue Mar 24 00:19:18.283651 2026] [:error] [pid 38177:tid 38236] [client 20.215.56.86:65424] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "acFoBnsYW-_HCI66MukTVgAAAFU"]
[Tue Mar 24 00:19:18.857935 2026] [:error] [pid 38178:tid 38256] [client 20.215.56.86:9885] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "acFoBg0axWfXsVvR9udnoAAAAI4"]
[Tue Mar 24 00:19:19.382579 2026] [:error] [pid 52341:tid 52362] [client 20.215.56.86:14052] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "acFoB6PKTBDR2u47Gb1GzQAAAVM"]
[Tue Mar 24 00:19:20.023343 2026] [:error] [pid 52341:tid 52343] [client 20.215.56.86:14064] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "acFoCKPKTBDR2u47Gb1GzwAAAUA"]
[Tue Mar 24 00:19:20.815000 2026] [:error] [pid 38177:tid 38226] [client 20.215.56.86:22855] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "acFoCHsYW-_HCI66MukTWQAAAEs"]
[Tue Mar 24 00:19:21.609449 2026] [:error] [pid 52341:tid 52349] [client 20.215.56.86:9910] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Tue Mar 24 00:19:21.868226 2026] [:error] [pid 52341:tid 52365] [client 20.215.56.86:9910] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Tue Mar 24 00:19:22.385209 2026] [:error] [pid 52341:tid 52344] [client 20.215.56.86:9910] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Tue Mar 24 00:19:22.646284 2026] [:error] [pid 52341:tid 52364] [client 20.215.56.86:9910] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Tue Mar 24 00:19:23.165685 2026] [:error] [pid 52341:tid 52359] [client 20.215.56.86:9910] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Tue Mar 24 00:19:23.429042 2026] [:error] [pid 52341:tid 52357] [client 20.215.56.86:9910] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Tue Mar 24 00:19:25.146352 2026] [:error] [pid 52341:tid 52357] [client 20.215.56.86:9910] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Tue Mar 24 00:19:25.454848 2026] [:error] [pid 52341:tid 52367] [client 20.215.56.86:9910] File does not exist: /usr/local/apache/htdocs/suspended-page/fi.php
[Tue Mar 24 00:19:27.068630 2026] [:error] [pid 52341:tid 52367] [client 20.215.56.86:9910] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "acFoD6PKTBDR2u47Gb1G8wAAAVg"]
[Tue Mar 24 00:19:27.665741 2026] [:error] [pid 52341:tid 52360] [client 20.215.56.86:14067] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "acFoD6PKTBDR2u47Gb1G9QAAAVE"]
[Tue Mar 24 00:19:28.248297 2026] [:error] [pid 38178:tid 38244] [client 20.215.56.86:30187] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "acFoEA0axWfXsVvR9udnqwAAAII"]
[Tue Mar 24 00:19:28.811899 2026] [:error] [pid 38276:tid 38284] [client 20.215.56.86:22849] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "acFoEJoKGiI-a7oME3InawAAAMU"]
[Tue Mar 24 00:19:29.357768 2026] [:error] [pid 38276:tid 38279] [client 20.215.56.86:65435] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "acFoEZoKGiI-a7oME3InbAAAAMA"]
[Tue Mar 24 00:19:29.889421 2026] [:error] [pid 38177:tid 38228] [client 20.215.56.86:9916] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "acFoEXsYW-_HCI66MukTYQAAAE0"]
[Tue Mar 24 00:19:30.423330 2026] [:error] [pid 38306:tid 38317] [client 20.215.56.86:61109] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "acFoEjkL8qwu-hHc6BjsMQAAAQk"]
[Tue Mar 24 00:19:30.981315 2026] [:error] [pid 38176:tid 38192] [client 20.215.56.86:65365] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "acFoEktG4qlh1gvNjuJ1ngAAAAU"]
[Tue Mar 24 00:19:31.520440 2026] [:error] [pid 38306:tid 38313] [client 20.215.56.86:23904] [client 20.215.56.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "acFoEzkL8qwu-hHc6BjsNAAAAQU"]
[Tue Mar 24 00:19:32.250020 2026] [:error] [pid 38306:tid 38315] [client 20.215.56.86:22854] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "acFoFDkL8qwu-hHc6BjsOAAAAQc"]
[Tue Mar 24 00:19:32.767308 2026] [:error] [pid 38306:tid 38319] [client 20.215.56.86:23920] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "acFoFDkL8qwu-hHc6BjsOQAAAQs"]
[Tue Mar 24 00:19:33.343373 2026] [:error] [pid 52341:tid 52344] [client 20.215.56.86:65438] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "acFoFaPKTBDR2u47Gb1G_gAAAUE"]
[Tue Mar 24 00:19:33.936843 2026] [:error] [pid 52341:tid 52355] [client 20.215.56.86:22853] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "acFoFaPKTBDR2u47Gb1HBAAAAUw"]
[Tue Mar 24 00:19:34.456422 2026] [:error] [pid 38176:tid 38187] [client 20.215.56.86:65349] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "acFoFktG4qlh1gvNjuJ1oAAAAAA"]
[Tue Mar 24 00:19:35.002626 2026] [:error] [pid 38276:tid 38294] [client 20.215.56.86:22895] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "acFoF5oKGiI-a7oME3InbwAAAM8"]
[Tue Mar 24 00:19:35.569479 2026] [:error] [pid 38276:tid 38289] [client 20.215.56.86:9914] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "acFoF5oKGiI-a7oME3IncQAAAMo"]
[Tue Mar 24 00:19:36.101043 2026] [:error] [pid 38176:tid 38197] [client 20.215.56.86:64819] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "acFoGEtG4qlh1gvNjuJ1pAAAAAo"]
[Tue Mar 24 00:19:36.674521 2026] [:error] [pid 38176:tid 38202] [client 20.215.56.86:14035] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "acFoGEtG4qlh1gvNjuJ1qAAAAA8"]
[Tue Mar 24 00:19:37.203464 2026] [:error] [pid 38176:tid 38192] [client 20.215.56.86:61110] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "acFoGUtG4qlh1gvNjuJ1qgAAAAU"]
[Tue Mar 24 00:19:37.773952 2026] [:error] [pid 38306:tid 38330] [client 20.215.56.86:14042] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "acFoGTkL8qwu-hHc6BjsQgAAARY"]
[Tue Mar 24 00:19:38.290188 2026] [:error] [pid 38176:tid 38189] [client 20.215.56.86:61117] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "acFoGktG4qlh1gvNjuJ1rQAAAAI"]
[Tue Mar 24 00:19:38.817514 2026] [:error] [pid 52341:tid 52347] [client 20.215.56.86:22877] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/prv8.php"] [unique_id "acFoGqPKTBDR2u47Gb1HCgAAAUQ"]
[Tue Mar 24 00:19:39.366476 2026] [:error] [pid 52341:tid 52346] [client 20.215.56.86:30183] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/prv8.php"] [unique_id "acFoG6PKTBDR2u47Gb1HDAAAAUM"]
[Tue Mar 24 00:19:40.109751 2026] [:error] [pid 52341:tid 52358] [client 20.215.56.86:22892] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/prv8.php"] [unique_id "acFoHKPKTBDR2u47Gb1HEwAAAU8"]
[Tue Mar 24 00:19:40.835015 2026] [:error] [pid 52341:tid 52361] [client 20.215.56.86:61075] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/prv8.php"] [unique_id "acFoHKPKTBDR2u47Gb1HFQAAAVI"]
[Tue Mar 24 00:19:41.363322 2026] [:error] [pid 38306:tid 38315] [client 20.215.56.86:22851] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "acFoHTkL8qwu-hHc6BjsTgAAAQc"]
[Tue Mar 24 00:19:41.897605 2026] [:error] [pid 38176:tid 38197] [client 20.215.56.86:9902] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "acFoHUtG4qlh1gvNjuJ1sgAAAAo"]
[Tue Mar 24 00:19:42.511244 2026] [:error] [pid 38306:tid 38331] [client 20.215.56.86:64787] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "acFoHjkL8qwu-hHc6BjsUgAAARc"]
[Tue Mar 24 00:19:43.024879 2026] [:error] [pid 52341:tid 52352] [client 20.215.56.86:14034] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "acFoH6PKTBDR2u47Gb1HGQAAAUk"]
[Tue Mar 24 00:19:43.609723 2026] [:error] [pid 52341:tid 52348] [client 20.215.56.86:65444] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "acFoH6PKTBDR2u47Gb1HHAAAAUU"]
[Tue Mar 24 00:19:44.428457 2026] [:error] [pid 38276:tid 38298] [client 20.215.56.86:9858] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "acFoIJoKGiI-a7oME3IneAAAANM"]
[Tue Mar 24 00:19:45.157756 2026] [:error] [pid 52341:tid 52354] [client 20.215.56.86:9911] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "acFoIaPKTBDR2u47Gb1HIwAAAUs"]
[Tue Mar 24 00:19:46.379960 2026] [:error] [pid 38306:tid 38328] [client 20.215.56.86:30203] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "acFoIjkL8qwu-hHc6BjsWQAAARQ"]
[Tue Mar 24 00:19:46.906046 2026] [:error] [pid 38306:tid 38323] [client 20.215.56.86:65346] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "acFoIjkL8qwu-hHc6BjsWgAAAQ8"]
[Tue Mar 24 00:19:47.491726 2026] [:error] [pid 52341:tid 52351] [client 20.215.56.86:30204] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "acFoI6PKTBDR2u47Gb1HKAAAAUg"]
[Tue Mar 24 00:19:48.032993 2026] [:error] [pid 38178:tid 38242] [client 20.215.56.86:14051] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "acFoJA0axWfXsVvR9udntgAAAIA"]
[Tue Mar 24 00:19:48.637159 2026] [:error] [pid 38176:tid 38210] [client 20.215.56.86:14078] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "acFoJEtG4qlh1gvNjuJ1vwAAABc"]
[Tue Mar 24 00:19:49.187085 2026] [:error] [pid 38306:tid 38308] [client 20.215.56.86:65385] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "acFoJTkL8qwu-hHc6BjsYgAAAQA"]
[Tue Mar 24 00:19:49.715832 2026] [:error] [pid 38176:tid 38198] [client 20.215.56.86:14069] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "acFoJUtG4qlh1gvNjuJ1ygAAAAs"]
[Tue Mar 24 00:19:50.259200 2026] [:error] [pid 38178:tid 38246] [client 20.215.56.86:23879] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "acFoJg0axWfXsVvR9udnwAAAAIQ"]
[Tue Mar 24 00:19:50.891600 2026] [:error] [pid 38176:tid 38196] [client 20.215.56.86:9904] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "acFoJktG4qlh1gvNjuJ10wAAAAk"]
[Tue Mar 24 00:19:51.420683 2026] [:error] [pid 52341:tid 52354] [client 20.215.56.86:14017] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "acFoJ6PKTBDR2u47Gb1HLQAAAUs"]
[Tue Mar 24 00:19:51.941416 2026] [:error] [pid 38306:tid 38330] [client 20.215.56.86:61096] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "acFoJzkL8qwu-hHc6BjsbwAAARY"]
[Tue Mar 24 00:19:52.454050 2026] [:error] [pid 52341:tid 52344] [client 20.215.56.86:30156] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "acFoKKPKTBDR2u47Gb1HMQAAAUE"]
[Tue Mar 24 00:19:53.014318 2026] [:error] [pid 38176:tid 38193] [client 20.215.56.86:23916] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "acFoKUtG4qlh1gvNjuJ13wAAAAY"]
[Tue Mar 24 00:19:53.551613 2026] [:error] [pid 38306:tid 38321] [client 20.215.56.86:22859] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acFoKTkL8qwu-hHc6BjseAAAAQ0"]
[Tue Mar 24 00:19:54.201845 2026] [:error] [pid 38306:tid 38312] [client 20.215.56.86:22852] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acFoKjkL8qwu-hHc6BjsfQAAAQQ"]
[Tue Mar 24 00:19:54.837038 2026] [:error] [pid 38178:tid 38256] [client 20.215.56.86:65443] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acFoKg0axWfXsVvR9udnzAAAAI4"]
[Tue Mar 24 00:19:55.455064 2026] [:error] [pid 52341:tid 52357] [client 20.215.56.86:61119] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acFoK6PKTBDR2u47Gb1HNwAAAU4"]
[Tue Mar 24 00:19:56.022194 2026] [:error] [pid 38276:tid 38292] [client 20.215.56.86:61092] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "acFoLJoKGiI-a7oME3InowAAAM0"]
[Tue Mar 24 00:19:56.546219 2026] [:error] [pid 38176:tid 38203] [client 20.215.56.86:61090] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "acFoLEtG4qlh1gvNjuJ16gAAABA"]
[Tue Mar 24 00:19:57.116444 2026] [:error] [pid 38176:tid 38191] [client 20.215.56.86:65470] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "acFoLUtG4qlh1gvNjuJ17AAAAAQ"]
[Tue Mar 24 00:19:57.661543 2026] [:error] [pid 38276:tid 38283] [client 20.215.56.86:64257] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "acFoLZoKGiI-a7oME3InpAAAAMQ"]
[Tue Mar 24 00:19:58.208015 2026] [:error] [pid 38306:tid 38317] [client 20.215.56.86:65448] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "acFoLjkL8qwu-hHc6BjsgwAAAQk"]
[Tue Mar 24 00:19:58.759286 2026] [:error] [pid 38176:tid 38194] [client 20.215.56.86:61102] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "acFoLktG4qlh1gvNjuJ17wAAAAc"]
[Tue Mar 24 00:19:59.305339 2026] [:error] [pid 52341:tid 52353] [client 20.215.56.86:65455] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "acFoL6PKTBDR2u47Gb1HUgAAAUo"]
[Tue Mar 24 00:19:59.876767 2026] [:error] [pid 52341:tid 52361] [client 20.215.56.86:9892] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "acFoL6PKTBDR2u47Gb1HVAAAAVI"]
[Tue Mar 24 00:20:00.609862 2026] [:error] [pid 52341:tid 52352] [client 20.215.56.86:30172] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "acFoMKPKTBDR2u47Gb1HWQAAAUk"]
[Tue Mar 24 00:20:01.210302 2026] [:error] [pid 38306:tid 38332] [client 20.215.56.86:65355] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "acFoMTkL8qwu-hHc6BjsiAAAARg"]
[Tue Mar 24 00:20:01.871556 2026] [:error] [pid 38177:tid 38217] [client 20.215.56.86:23877] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "acFoMXsYW-_HCI66MukTjgAAAEI"]
[Tue Mar 24 00:20:02.533856 2026] [:error] [pid 38306:tid 38330] [client 20.215.56.86:14043] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "acFoMjkL8qwu-hHc6BjsiQAAARY"]
[Tue Mar 24 00:20:03.093253 2026] [:error] [pid 38176:tid 38200] [client 20.215.56.86:61108] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "acFoM0tG4qlh1gvNjuJ18gAAAA0"]
[Tue Mar 24 00:20:03.667569 2026] [:error] [pid 38176:tid 38208] [client 20.215.56.86:22867] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "acFoM0tG4qlh1gvNjuJ19AAAABU"]
[Tue Mar 24 00:20:04.321861 2026] [:error] [pid 38176:tid 38196] [client 20.215.56.86:64797] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "acFoNEtG4qlh1gvNjuJ19gAAAAk"]
[Tue Mar 24 00:20:05.007173 2026] [:error] [pid 52341:tid 52358] [client 20.215.56.86:23896] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "acFoNaPKTBDR2u47Gb1HYwAAAU8"]
[Tue Mar 24 00:20:05.954334 2026] [:error] [pid 38306:tid 38309] [client 20.215.56.86:65387] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "acFoNTkL8qwu-hHc6BjsjwAAAQE"]
[Tue Mar 24 00:20:06.986093 2026] [:error] [pid 52341:tid 52363] [client 20.215.56.86:61056] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "acFoNqPKTBDR2u47Gb1HZgAAAVQ"]
[Tue Mar 24 00:20:07.714064 2026] [:error] [pid 52341:tid 52359] [client 20.215.56.86:22879] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "acFoN6PKTBDR2u47Gb1HbQAAAVA"]
[Tue Mar 24 00:20:08.426819 2026] [:error] [pid 38276:tid 38287] [client 20.215.56.86:65394] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "acFoOJoKGiI-a7oME3InrgAAAMg"]
[Tue Mar 24 00:20:09.134066 2026] [:error] [pid 38306:tid 38324] [client 20.215.56.86:30162] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "acFoOTkL8qwu-hHc6BjslAAAARA"]
[Tue Mar 24 00:20:09.749048 2026] [:error] [pid 38276:tid 38285] [client 20.215.56.86:30159] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "acFoOZoKGiI-a7oME3InrwAAAMY"]
[Tue Mar 24 00:20:10.355705 2026] [:error] [pid 38176:tid 38209] [client 20.215.56.86:65413] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "acFoOktG4qlh1gvNjuJ2AAAAABY"]
[Tue Mar 24 00:20:10.896044 2026] [:error] [pid 38178:tid 38255] [client 20.215.56.86:64290] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "acFoOg0axWfXsVvR9udn2wAAAI0"]
[Tue Mar 24 00:20:11.677133 2026] [:error] [pid 38176:tid 38189] [client 20.215.56.86:14040] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "acFoO0tG4qlh1gvNjuJ2BQAAAAI"]
[Tue Mar 24 00:20:12.297399 2026] [:error] [pid 38276:tid 38291] [client 20.215.56.86:30166] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "acFoPJoKGiI-a7oME3InsgAAAMw"]
[Tue Mar 24 00:20:13.046524 2026] [:error] [pid 38276:tid 38286] [client 20.215.56.86:9876] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "acFoPZoKGiI-a7oME3IntQAAAMc"]
[Tue Mar 24 00:20:13.608091 2026] [:error] [pid 38178:tid 38242] [client 20.215.56.86:61065] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "acFoPQ0axWfXsVvR9udn4gAAAIA"]
[Tue Mar 24 00:20:14.234541 2026] [:error] [pid 38176:tid 38211] [client 20.215.56.86:9859] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acFoPktG4qlh1gvNjuJ2DgAAABg"]
[Tue Mar 24 00:20:14.848607 2026] [:error] [pid 38178:tid 38266] [client 20.215.56.86:30201] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acFoPg0axWfXsVvR9udn4wAAAJg"]
[Tue Mar 24 00:20:15.422181 2026] [:error] [pid 38176:tid 38208] [client 20.215.56.86:23898] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acFoP0tG4qlh1gvNjuJ2FgAAABU"]
[Tue Mar 24 00:20:16.051031 2026] [:error] [pid 38177:tid 38218] [client 20.215.56.86:23932] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acFoQHsYW-_HCI66MukToQAAAEM"]
[Tue Mar 24 00:20:16.696997 2026] [:error] [pid 38178:tid 38249] [client 20.215.56.86:61093] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "acFoQA0axWfXsVvR9udn5gAAAIc"]
[Tue Mar 24 00:20:17.280069 2026] [:error] [pid 38176:tid 38204] [client 20.215.56.86:9917] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "acFoQUtG4qlh1gvNjuJ2GgAAABE"]
[Tue Mar 24 00:20:17.805999 2026] [:error] [pid 38176:tid 38188] [client 20.215.56.86:9873] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "acFoQUtG4qlh1gvNjuJ2HQAAAAE"]
[Tue Mar 24 00:20:18.325352 2026] [:error] [pid 38176:tid 38206] [client 20.215.56.86:65420] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "acFoQktG4qlh1gvNjuJ2IQAAABM"]
[Tue Mar 24 00:20:18.860083 2026] [:error] [pid 38176:tid 38200] [client 20.215.56.86:30197] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sdm.php"] [unique_id "acFoQktG4qlh1gvNjuJ2IgAAAA0"]
[Tue Mar 24 00:20:19.385120 2026] [:error] [pid 38306:tid 38318] [client 20.215.56.86:64761] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sdm.php"] [unique_id "acFoQzkL8qwu-hHc6BjssQAAAQo"]
[Tue Mar 24 00:20:19.927888 2026] [:error] [pid 38306:tid 38332] [client 20.215.56.86:23926] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sdm.php"] [unique_id "acFoQzkL8qwu-hHc6BjstAAAARg"]
[Tue Mar 24 00:20:20.463722 2026] [:error] [pid 38178:tid 38250] [client 20.215.56.86:65422] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sdm.php"] [unique_id "acFoRA0axWfXsVvR9udn6QAAAIg"]
[Tue Mar 24 00:20:21.072996 2026] [:error] [pid 38276:tid 38287] [client 20.215.56.86:65433] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file52.php"] [unique_id "acFoRZoKGiI-a7oME3InvQAAAMg"]
[Tue Mar 24 00:20:21.636312 2026] [:error] [pid 38177:tid 38221] [client 20.215.56.86:65442] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file52.php"] [unique_id "acFoRXsYW-_HCI66MukTrQAAAEY"]
[Tue Mar 24 00:20:22.236997 2026] [:error] [pid 38176:tid 38211] [client 20.215.56.86:23921] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file52.php"] [unique_id "acFoRktG4qlh1gvNjuJ2JAAAABg"]
[Tue Mar 24 00:20:22.755498 2026] [:error] [pid 52341:tid 52362] [client 20.215.56.86:9866] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file52.php"] [unique_id "acFoRqPKTBDR2u47Gb1HeAAAAVM"]
[Tue Mar 24 00:20:23.394108 2026] [:error] [pid 52341:tid 52343] [client 20.215.56.86:61083] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "acFoR6PKTBDR2u47Gb1HeQAAAUA"]
[Tue Mar 24 00:20:23.986667 2026] [:error] [pid 52341:tid 52348] [client 20.215.56.86:14073] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "acFoR6PKTBDR2u47Gb1HfAAAAUU"]
[Tue Mar 24 00:20:24.625960 2026] [:error] [pid 38176:tid 38204] [client 20.215.56.86:14062] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "acFoSEtG4qlh1gvNjuJ2KQAAABE"]
[Tue Mar 24 00:20:25.172022 2026] [:error] [pid 52341:tid 52354] [client 20.215.56.86:65432] File does not exist: /usr/local/apache/htdocs/suspended-page/file48.php
[Tue Mar 24 00:20:25.462637 2026] [:error] [pid 52341:tid 52345] [client 20.215.56.86:65432] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Tue Mar 24 00:20:25.721813 2026] [:error] [pid 52341:tid 52359] [client 20.215.56.86:65432] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Tue Mar 24 00:20:26.347189 2026] [:error] [pid 52341:tid 52358] [client 20.215.56.86:65432] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Tue Mar 24 00:20:26.609689 2026] [:error] [pid 52341:tid 52352] [client 20.215.56.86:65432] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Tue Mar 24 00:20:26.905160 2026] [:error] [pid 52341:tid 52354] [client 20.215.56.86:65432] File does not exist: /usr/local/apache/htdocs/suspended-page/hla.php
[Tue Mar 24 00:20:27.206975 2026] [:error] [pid 52341:tid 52367] [client 20.215.56.86:65432] File does not exist: /usr/local/apache/htdocs/suspended-page/gel4y.php
[Tue Mar 24 00:20:27.512679 2026] [:error] [pid 52341:tid 52363] [client 20.215.56.86:65432] File does not exist: /usr/local/apache/htdocs/suspended-page/ew.php
[Tue Mar 24 00:20:27.772028 2026] [:error] [pid 52341:tid 52349] [client 20.215.56.86:65432] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Tue Mar 24 00:20:28.034920 2026] [:error] [pid 52341:tid 52357] [client 20.215.56.86:65432] File does not exist: /usr/local/apache/htdocs/suspended-page/goat1.php
[Tue Mar 24 00:20:28.467281 2026] [:error] [pid 52341:tid 52348] [client 20.215.56.86:65432] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "acFoTKPKTBDR2u47Gb1HmAAAAUU"]
[Tue Mar 24 00:20:29.013575 2026] [:error] [pid 38276:tid 38294] [client 20.215.56.86:9868] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "acFoTZoKGiI-a7oME3InyQAAAM8"]
[Tue Mar 24 00:20:29.638289 2026] [:error] [pid 38177:tid 38222] [client 20.215.56.86:22860] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "acFoTXsYW-_HCI66MukTtAAAAEc"]
[Tue Mar 24 00:20:30.210756 2026] [:error] [pid 38178:tid 38251] [client 20.215.56.86:64752] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "acFoTg0axWfXsVvR9udn8wAAAIk"]
[Tue Mar 24 00:20:30.733482 2026] [:error] [pid 52341:tid 52365] [client 20.215.56.86:14050] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "acFoTqPKTBDR2u47Gb1HpQAAAVY"]
[Tue Mar 24 00:20:31.248793 2026] [:error] [pid 52341:tid 52355] [client 20.215.56.86:14077] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "acFoT6PKTBDR2u47Gb1HqAAAAUw"]
[Tue Mar 24 00:20:32.050309 2026] [:error] [pid 52341:tid 52356] [client 20.215.56.86:65412] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "acFoUKPKTBDR2u47Gb1HrQAAAU0"]
[Tue Mar 24 00:20:32.630638 2026] [:error] [pid 52341:tid 52355] [client 20.215.56.86:61078] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "acFoUKPKTBDR2u47Gb1HsQAAAUw"]
[Tue Mar 24 00:20:33.169293 2026] [:error] [pid 52341:tid 52361] [client 20.215.56.86:61111] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2clas.php"] [unique_id "acFoUaPKTBDR2u47Gb1HtAAAAVI"]
[Tue Mar 24 00:20:33.788766 2026] [:error] [pid 38178:tid 38250] [client 20.215.56.86:22909] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2clas.php"] [unique_id "acFoUQ0axWfXsVvR9udn9QAAAIg"]
[Tue Mar 24 00:20:34.412695 2026] [:error] [pid 38176:tid 38207] [client 20.215.56.86:64297] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2clas.php"] [unique_id "acFoUktG4qlh1gvNjuJ2MgAAABQ"]
[Tue Mar 24 00:20:34.960152 2026] [:error] [pid 38177:tid 38235] [client 20.215.56.86:64707] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2clas.php"] [unique_id "acFoUnsYW-_HCI66MukTtwAAAFQ"]
[Tue Mar 24 00:20:35.487686 2026] [:error] [pid 38176:tid 38202] [client 20.215.56.86:61113] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "acFoU0tG4qlh1gvNjuJ2MwAAAA8"]
[Tue Mar 24 00:20:36.127243 2026] [:error] [pid 38176:tid 38192] [client 20.215.56.86:64804] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "acFoVEtG4qlh1gvNjuJ2NgAAAAU"]
[Tue Mar 24 00:20:36.753774 2026] [:error] [pid 52341:tid 52343] [client 20.215.56.86:30206] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "acFoVKPKTBDR2u47Gb1HuwAAAUA"]
[Tue Mar 24 00:20:37.327024 2026] [:error] [pid 38306:tid 38324] [client 20.215.56.86:65426] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "acFoVTkL8qwu-hHc6Bjs2AAAARA"]
[Tue Mar 24 00:20:37.990999 2026] [:error] [pid 38177:tid 38231] [client 20.215.56.86:9867] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/classgoto24.php"] [unique_id "acFoVXsYW-_HCI66MukTuwAAAFA"]
[Tue Mar 24 00:20:38.619723 2026] [:error] [pid 38177:tid 38217] [client 20.215.56.86:65449] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/classgoto24.php"] [unique_id "acFoVnsYW-_HCI66MukTvgAAAEI"]
[Tue Mar 24 00:20:39.240036 2026] [:error] [pid 38306:tid 38329] [client 20.215.56.86:30169] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/classgoto24.php"] [unique_id "acFoVzkL8qwu-hHc6Bjs2wAAARU"]
[Tue Mar 24 00:20:39.885602 2026] [:error] [pid 38306:tid 38331] [client 20.215.56.86:61074] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/classgoto24.php"] [unique_id "acFoVzkL8qwu-hHc6Bjs3wAAARc"]
[Tue Mar 24 00:20:40.462993 2026] [:error] [pid 38177:tid 38236] [client 20.215.56.86:9877] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fffff.php"] [unique_id "acFoWHsYW-_HCI66MukTwQAAAFU"]
[Tue Mar 24 00:20:41.015352 2026] [:error] [pid 38177:tid 38223] [client 20.215.56.86:64784] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fffff.php"] [unique_id "acFoWXsYW-_HCI66MukTwgAAAEg"]
[Tue Mar 24 00:20:41.578311 2026] [:error] [pid 38176:tid 38198] [client 20.215.56.86:64781] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fffff.php"] [unique_id "acFoWUtG4qlh1gvNjuJ2OwAAAAs"]
[Tue Mar 24 00:20:42.128317 2026] [:error] [pid 38178:tid 38265] [client 20.215.56.86:65399] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fffff.php"] [unique_id "acFoWg0axWfXsVvR9udoBAAAAJc"]
[Tue Mar 24 00:20:42.686670 2026] [:error] [pid 38306:tid 38309] [client 20.215.56.86:61095] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/thh.php"] [unique_id "acFoWjkL8qwu-hHc6Bjs6gAAAQE"]
[Tue Mar 24 00:20:43.329456 2026] [:error] [pid 38306:tid 38325] [client 20.215.56.86:9896] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/thh.php"] [unique_id "acFoWzkL8qwu-hHc6Bjs7AAAARE"]
[Tue Mar 24 00:20:43.885684 2026] [:error] [pid 38306:tid 38327] [client 20.215.56.86:23935] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/thh.php"] [unique_id "acFoWzkL8qwu-hHc6Bjs7wAAARM"]
[Tue Mar 24 00:20:44.398320 2026] [:error] [pid 52341:tid 52350] [client 20.215.56.86:61100] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/thh.php"] [unique_id "acFoXKPKTBDR2u47Gb1HxAAAAUc"]
[Tue Mar 24 00:20:45.045656 2026] [:error] [pid 38276:tid 38295] [client 20.215.56.86:64726] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "acFoXZoKGiI-a7oME3InzwAAANA"]
[Tue Mar 24 00:20:45.625490 2026] [:error] [pid 38276:tid 38287] [client 20.215.56.86:65352] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "acFoXZoKGiI-a7oME3In0gAAAMg"]
[Tue Mar 24 00:20:46.230328 2026] [:error] [pid 52341:tid 52348] [client 20.215.56.86:9879] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "acFoXqPKTBDR2u47Gb1HyAAAAUU"]
[Tue Mar 24 00:20:46.753246 2026] [:error] [pid 52341:tid 52343] [client 20.215.56.86:65431] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "acFoXqPKTBDR2u47Gb1HygAAAUA"]
[Tue Mar 24 00:20:47.274964 2026] [:error] [pid 38276:tid 38283] [client 20.215.56.86:30200] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "acFoX5oKGiI-a7oME3In2QAAAMQ"]
[Tue Mar 24 00:20:47.789837 2026] [:error] [pid 52341:tid 52365] [client 20.215.56.86:61057] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "acFoX6PKTBDR2u47Gb1HzAAAAVY"]
[Tue Mar 24 00:20:48.305048 2026] [:error] [pid 38276:tid 38286] [client 20.215.56.86:65460] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "acFoYJoKGiI-a7oME3In3QAAAMc"]
[Tue Mar 24 00:20:48.920751 2026] [:error] [pid 38306:tid 38321] [client 20.215.56.86:65351] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "acFoYDkL8qwu-hHc6Bjs8AAAAQ0"]
[Tue Mar 24 00:20:49.472967 2026] [:error] [pid 38306:tid 38324] [client 20.215.56.86:30164] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "acFoYTkL8qwu-hHc6Bjs8wAAARA"]
[Tue Mar 24 00:20:50.007141 2026] [:error] [pid 38306:tid 38313] [client 20.215.56.86:64745] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "acFoYjkL8qwu-hHc6Bjs9QAAAQU"]
[Tue Mar 24 00:20:50.619600 2026] [:error] [pid 38176:tid 38194] [client 20.215.56.86:65425] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "acFoYktG4qlh1gvNjuJ2RwAAAAc"]
[Tue Mar 24 00:20:51.175013 2026] [:error] [pid 38176:tid 38208] [client 20.215.56.86:61073] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "acFoY0tG4qlh1gvNjuJ2SwAAABU"]
[Tue Mar 24 00:20:51.716368 2026] [:error] [pid 52341:tid 52354] [client 20.215.56.86:30153] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/build.php"] [unique_id "acFoY6PKTBDR2u47Gb1HzwAAAUs"]
[Tue Mar 24 00:20:52.314385 2026] [:error] [pid 52341:tid 52350] [client 20.215.56.86:64798] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/build.php"] [unique_id "acFoZKPKTBDR2u47Gb1H0gAAAUc"]
[Tue Mar 24 00:20:52.944197 2026] [:error] [pid 52341:tid 52356] [client 20.215.56.86:65454] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/build.php"] [unique_id "acFoZKPKTBDR2u47Gb1H1QAAAU0"]
[Tue Mar 24 00:20:53.508076 2026] [:error] [pid 52341:tid 52345] [client 20.215.56.86:65369] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/build.php"] [unique_id "acFoZaPKTBDR2u47Gb1H2gAAAUI"]
[Tue Mar 24 00:20:54.052709 2026] [:error] [pid 52341:tid 52347] [client 20.215.56.86:64710] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file1.php"] [unique_id "acFoZqPKTBDR2u47Gb1H3gAAAUQ"]
[Tue Mar 24 00:20:54.629274 2026] [:error] [pid 52341:tid 52356] [client 20.215.56.86:64731] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file1.php"] [unique_id "acFoZqPKTBDR2u47Gb1H4wAAAU0"]
[Tue Mar 24 00:20:55.236830 2026] [:error] [pid 52341:tid 52365] [client 20.215.56.86:64775] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file1.php"] [unique_id "acFoZ6PKTBDR2u47Gb1H5wAAAVY"]
[Tue Mar 24 00:20:55.819907 2026] [:error] [pid 38177:tid 38238] [client 20.215.56.86:14029] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file1.php"] [unique_id "acFoZ3sYW-_HCI66MukTygAAAFc"]
[Tue Mar 24 00:20:56.361847 2026] [:error] [pid 38176:tid 38192] [client 20.215.56.86:61072] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/520.php"] [unique_id "acFoaEtG4qlh1gvNjuJ2TwAAAAU"]
[Tue Mar 24 00:20:56.958656 2026] [:error] [pid 52341:tid 52360] [client 20.215.56.86:14016] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/520.php"] [unique_id "acFoaKPKTBDR2u47Gb1H8AAAAVE"]
[Tue Mar 24 00:20:57.499190 2026] [:error] [pid 52341:tid 52357] [client 20.215.56.86:9888] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/520.php"] [unique_id "acFoaaPKTBDR2u47Gb1H9wAAAU4"]
[Tue Mar 24 00:20:58.086583 2026] [:error] [pid 38306:tid 38329] [client 20.215.56.86:61098] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/520.php"] [unique_id "acFoajkL8qwu-hHc6Bjs9wAAARU"]
[Tue Mar 24 00:20:58.757867 2026] [:error] [pid 38178:tid 38262] [client 20.215.56.86:9919] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "acFoag0axWfXsVvR9udoCQAAAJQ"]
[Tue Mar 24 00:20:59.347841 2026] [:error] [pid 38306:tid 38321] [client 20.215.56.86:65441] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "acFoazkL8qwu-hHc6Bjs_AAAAQ0"]
[Tue Mar 24 00:20:59.895354 2026] [:error] [pid 38276:tid 38292] [client 20.215.56.86:64719] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "acFoa5oKGiI-a7oME3In9QAAAM0"]
[Tue Mar 24 00:21:00.555980 2026] [:error] [pid 52341:tid 52359] [client 20.215.56.86:9863] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "acFobKPKTBDR2u47Gb1IDAAAAVA"]
[Tue Mar 24 00:21:01.073607 2026] [:error] [pid 52341:tid 52343] [client 20.215.56.86:64805] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ffile.php"] [unique_id "acFobaPKTBDR2u47Gb1IDwAAAUA"]
[Tue Mar 24 00:21:01.602562 2026] [:error] [pid 38176:tid 38205] [client 20.215.56.86:64725] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ffile.php"] [unique_id "acFobUtG4qlh1gvNjuJ2VQAAABI"]
[Tue Mar 24 00:21:05.580652 2026] [:error] [pid 56236:tid 56296] [client 20.215.56.86:23909] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ffile.php"] [unique_id "acFocXapFgYp0uZ8twANbwAAAEM"]
[Tue Mar 24 00:21:07.384664 2026] [:error] [pid 56238:tid 56349] [client 20.215.56.86:65366] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ffile.php"] [unique_id "acFoc1SqceFAZRgPDq56bAAAAME"]
[Tue Mar 24 00:21:08.231504 2026] [:error] [pid 56236:tid 56301] [client 20.215.56.86:9898] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "acFodHapFgYp0uZ8twANhQAAAEg"]
[Tue Mar 24 00:21:08.832170 2026] [:error] [pid 56435:tid 56502] [client 20.215.56.86:65351] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "acFodMrwr-l5A-s9ryBFCQAAAQM"]
[Tue Mar 24 00:21:09.463372 2026] [:error] [pid 56435:tid 56508] [client 20.215.56.86:30189] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "acFodcrwr-l5A-s9ryBFCwAAAQg"]
[Tue Mar 24 00:21:10.042870 2026] [:error] [pid 56435:tid 56511] [client 20.215.56.86:61084] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "acFodsrwr-l5A-s9ryBFDgAAAQs"]
[Tue Mar 24 00:21:10.647599 2026] [:error] [pid 56236:tid 56299] [client 20.215.56.86:61061] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/efile.php"] [unique_id "acFodnapFgYp0uZ8twANiQAAAEY"]
[Tue Mar 24 00:21:11.176911 2026] [:error] [pid 56435:tid 56518] [client 20.215.56.86:22889] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/efile.php"] [unique_id "acFod8rwr-l5A-s9ryBFEgAAARE"]
[Tue Mar 24 00:21:11.735960 2026] [:error] [pid 56238:tid 56360] [client 20.215.56.86:65381] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/efile.php"] [unique_id "acFod1SqceFAZRgPDq56dAAAAMw"]
[Tue Mar 24 00:21:12.316663 2026] [:error] [pid 56238:tid 56363] [client 20.215.56.86:64712] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/efile.php"] [unique_id "acFoeFSqceFAZRgPDq56dgAAAM8"]
[Tue Mar 24 00:21:12.856217 2026] [:error] [pid 56238:tid 56366] [client 20.215.56.86:65402] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/afile.php"] [unique_id "acFoeFSqceFAZRgPDq56eAAAANI"]
[Tue Mar 24 00:21:13.393451 2026] [:error] [pid 56435:tid 56511] [client 20.215.56.86:22858] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/afile.php"] [unique_id "acFoecrwr-l5A-s9ryBFGwAAAQs"]
[Tue Mar 24 00:21:13.930041 2026] [:error] [pid 56237:tid 56321] [client 20.215.56.86:64730] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/afile.php"] [unique_id "acFoeQymO0MnzQb90MMKCAAAAIA"]
[Tue Mar 24 00:21:14.478781 2026] [:error] [pid 56435:tid 56517] [client 20.215.56.86:64830] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/afile.php"] [unique_id "acFoesrwr-l5A-s9ryBFHgAAARA"]
[Tue Mar 24 00:21:15.068958 2026] [:error] [pid 56435:tid 56501] [client 20.215.56.86:9894] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lites.php"] [unique_id "acFoe8rwr-l5A-s9ryBFJAAAAQI"]
[Tue Mar 24 00:21:15.633822 2026] [:error] [pid 56238:tid 56349] [client 20.215.56.86:65447] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lites.php"] [unique_id "acFoe1SqceFAZRgPDq56ewAAAME"]
[Tue Mar 24 00:21:16.198634 2026] [:error] [pid 56435:tid 56518] [client 20.215.56.86:65350] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lites.php"] [unique_id "acFofMrwr-l5A-s9ryBFLQAAARE"]
[Tue Mar 24 00:21:16.731326 2026] [:error] [pid 56435:tid 56499] [client 20.215.56.86:65357] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lites.php"] [unique_id "acFofMrwr-l5A-s9ryBFMwAAAQA"]
[Tue Mar 24 00:21:17.267949 2026] [:error] [pid 56237:tid 56340] [client 20.215.56.86:64739] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "acFofQymO0MnzQb90MMKEwAAAJM"]
[Tue Mar 24 00:21:17.815686 2026] [:error] [pid 56237:tid 56344] [client 20.215.56.86:14065] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "acFofQymO0MnzQb90MMKFwAAAJc"]
[Tue Mar 24 00:21:18.352709 2026] [:error] [pid 56435:tid 56503] [client 20.215.56.86:22901] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "acFofsrwr-l5A-s9ryBFNQAAAQQ"]
[Tue Mar 24 00:21:18.875900 2026] [:error] [pid 56236:tid 56312] [client 20.215.56.86:65461] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "acFofnapFgYp0uZ8twANnQAAAFM"]
[Tue Mar 24 00:21:19.497156 2026] [:error] [pid 56236:tid 56317] [client 20.215.56.86:22870] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless3.php"] [unique_id "acFof3apFgYp0uZ8twANoQAAAFg"]
[Tue Mar 24 00:21:20.017222 2026] [:error] [pid 56238:tid 56357] [client 20.215.56.86:64737] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless3.php"] [unique_id "acFogFSqceFAZRgPDq56fwAAAMk"]
[Tue Mar 24 00:21:20.581989 2026] [:error] [pid 56435:tid 56499] [client 20.215.56.86:64724] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless3.php"] [unique_id "acFogMrwr-l5A-s9ryBFQQAAAQA"]
[Tue Mar 24 00:21:21.155666 2026] [:error] [pid 56435:tid 56525] [client 20.215.56.86:9900] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless3.php"] [unique_id "acFogcrwr-l5A-s9ryBFSAAAARg"]
[Tue Mar 24 00:21:21.668912 2026] [:error] [pid 56435:tid 56516] [client 20.215.56.86:65408] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/enclas.php"] [unique_id "acFogcrwr-l5A-s9ryBFTwAAAQ8"]
[Tue Mar 24 00:21:22.201403 2026] [:error] [pid 56236:tid 56313] [client 20.215.56.86:64265] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/enclas.php"] [unique_id "acFognapFgYp0uZ8twANqQAAAFQ"]
[Tue Mar 24 00:21:22.715927 2026] [:error] [pid 56236:tid 56316] [client 20.215.56.86:64785] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/enclas.php"] [unique_id "acFognapFgYp0uZ8twANrgAAAFc"]
[Tue Mar 24 00:21:23.238921 2026] [:error] [pid 56238:tid 56363] [client 20.215.56.86:9881] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/enclas.php"] [unique_id "acFog1SqceFAZRgPDq56gwAAAM8"]
[Tue Mar 24 00:21:23.768519 2026] [:error] [pid 56236:tid 56308] [client 20.215.56.86:61076] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/he.php"] [unique_id "acFog3apFgYp0uZ8twANsQAAAE8"]
[Tue Mar 24 00:21:24.285537 2026] [:error] [pid 56236:tid 56300] [client 20.215.56.86:65393] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/he.php"] [unique_id "acFohHapFgYp0uZ8twANtgAAAEc"]
[Tue Mar 24 00:21:24.949806 2026] [:error] [pid 56238:tid 56351] [client 20.215.56.86:61081] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/he.php"] [unique_id "acFohFSqceFAZRgPDq56jwAAAMM"]
[Tue Mar 24 00:21:25.513119 2026] [:error] [pid 56237:tid 56321] [client 20.215.56.86:9906] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/he.php"] [unique_id "acFohQymO0MnzQb90MMKJAAAAIA"]
[Tue Mar 24 00:21:26.175417 2026] [:error] [pid 56238:tid 56366] [client 20.215.56.86:64714] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aves.php"] [unique_id "acFohlSqceFAZRgPDq56mQAAANI"]
[Tue Mar 24 00:21:26.763744 2026] [:error] [pid 56435:tid 56515] [client 20.215.56.86:61118] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aves.php"] [unique_id "acFohsrwr-l5A-s9ryBFcAAAAQ4"]
[Tue Mar 24 00:21:27.310310 2026] [:error] [pid 56238:tid 56350] [client 20.215.56.86:64273] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aves.php"] [unique_id "acFoh1SqceFAZRgPDq56nQAAAMI"]
[Tue Mar 24 00:21:27.883941 2026] [:error] [pid 56435:tid 56514] [client 20.215.56.86:61107] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aves.php"] [unique_id "acFoh8rwr-l5A-s9ryBFfgAAAQ0"]
[Tue Mar 24 00:21:28.522405 2026] [:error] [pid 56435:tid 56520] [client 20.215.56.86:64282] File does not exist: /usr/local/apache/htdocs/suspended-page/vanta.php
[Tue Mar 24 00:21:28.781699 2026] [:error] [pid 56435:tid 56508] [client 20.215.56.86:64282] File does not exist: /usr/local/apache/htdocs/suspended-page/cabs.php
[Tue Mar 24 00:21:29.040481 2026] [:error] [pid 56435:tid 56524] [client 20.215.56.86:64282] File does not exist: /usr/local/apache/htdocs/suspended-page/filesss.php
[Tue Mar 24 00:21:29.351787 2026] [:error] [pid 56435:tid 56519] [client 20.215.56.86:64282] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aaa.php
[Tue Mar 24 00:21:29.629693 2026] [:error] [pid 56435:tid 56501] [client 20.215.56.86:64282] File does not exist: /usr/local/apache/htdocs/suspended-page/031.php
[Tue Mar 24 00:21:29.887347 2026] [:error] [pid 56435:tid 56499] [client 20.215.56.86:64282] File does not exist: /usr/local/apache/htdocs/suspended-page/about3.php
[Tue Mar 24 00:21:30.145920 2026] [:error] [pid 56435:tid 56524] [client 20.215.56.86:64282] File does not exist: /usr/local/apache/htdocs/suspended-page/file88.php
[Tue Mar 24 00:21:30.404402 2026] [:error] [pid 56435:tid 56519] [client 20.215.56.86:64282] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Tue Mar 24 00:21:30.663397 2026] [:error] [pid 56435:tid 56501] [client 20.215.56.86:64282] File does not exist: /usr/local/apache/htdocs/suspended-page/x1da.php
[Tue Mar 24 00:21:30.922998 2026] [:error] [pid 56435:tid 56513] [client 20.215.56.86:64282] File does not exist: /usr/local/apache/htdocs/suspended-page/des.php
[Tue Mar 24 00:21:31.181866 2026] [:error] [pid 56435:tid 56502] [client 20.215.56.86:64282] File does not exist: /usr/local/apache/htdocs/suspended-page/kaza.php
[Tue Mar 24 00:21:31.438250 2026] [:error] [pid 56435:tid 56516] [client 20.215.56.86:64282] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file51.php"] [unique_id "acFoi8rwr-l5A-s9ryBFrQAAAQ8"]
[Tue Mar 24 00:21:32.019498 2026] [:error] [pid 56237:tid 56341] [client 20.215.56.86:30190] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file51.php"] [unique_id "acFojAymO0MnzQb90MMKLgAAAJQ"]
[Tue Mar 24 00:21:32.645697 2026] [:error] [pid 56435:tid 56521] [client 20.215.56.86:9908] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file51.php"] [unique_id "acFojMrwr-l5A-s9ryBFuAAAARQ"]
[Tue Mar 24 00:21:33.191668 2026] [:error] [pid 56237:tid 56325] [client 20.215.56.86:23899] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file51.php"] [unique_id "acFojQymO0MnzQb90MMKNAAAAIQ"]
[Tue Mar 24 00:21:33.782565 2026] [:error] [pid 56435:tid 56501] [client 20.215.56.86:64751] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/blurbs15.php"] [unique_id "acFojcrwr-l5A-s9ryBFvwAAAQI"]
[Tue Mar 24 00:21:34.480505 2026] [:error] [pid 56237:tid 56337] [client 20.215.56.86:61059] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/blurbs15.php"] [unique_id "acFojgymO0MnzQb90MMKOgAAAJA"]
[Tue Mar 24 00:21:35.106359 2026] [:error] [pid 56236:tid 56310] [client 20.215.56.86:22863] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/blurbs15.php"] [unique_id "acFoj3apFgYp0uZ8twANygAAAFE"]
[Tue Mar 24 00:21:35.726743 2026] [:error] [pid 56236:tid 56305] [client 20.215.56.86:64277] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/blurbs15.php"] [unique_id "acFoj3apFgYp0uZ8twANzQAAAEw"]
[Tue Mar 24 00:21:36.274776 2026] [:error] [pid 56238:tid 56356] [client 20.215.56.86:64809] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "acFokFSqceFAZRgPDq56sAAAAMg"]
[Tue Mar 24 00:21:36.902724 2026] [:error] [pid 56237:tid 56331] [client 20.215.56.86:14019] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "acFokAymO0MnzQb90MMKRQAAAIo"]
[Tue Mar 24 00:21:37.430100 2026] [:error] [pid 56236:tid 56306] [client 20.215.56.86:22911] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "acFokXapFgYp0uZ8twAN0gAAAE0"]
[Tue Mar 24 00:21:38.006603 2026] [:error] [pid 56237:tid 56336] [client 20.215.56.86:30154] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "acFokgymO0MnzQb90MMKTQAAAI8"]
[Tue Mar 24 00:21:38.528890 2026] [:error] [pid 56237:tid 56323] [client 20.215.56.86:9865] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/security.php"] [unique_id "acFokgymO0MnzQb90MMKTgAAAII"]
[Tue Mar 24 00:21:39.090349 2026] [:error] [pid 56236:tid 56294] [client 20.215.56.86:64779] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/security.php"] [unique_id "acFok3apFgYp0uZ8twAN1QAAAEE"]
[Tue Mar 24 00:21:39.611885 2026] [:error] [pid 56236:tid 56296] [client 20.215.56.86:30186] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/security.php"] [unique_id "acFok3apFgYp0uZ8twAN1gAAAEM"]
[Tue Mar 24 00:21:40.192300 2026] [:error] [pid 56237:tid 56342] [client 20.215.56.86:64782] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/security.php"] [unique_id "acFolAymO0MnzQb90MMKVwAAAJU"]
[Tue Mar 24 00:21:40.778763 2026] [:error] [pid 56435:tid 56525] [client 20.215.56.86:9899] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ar.php"] [unique_id "acFolMrwr-l5A-s9ryBF9QAAARg"]
[Tue Mar 24 00:21:41.329032 2026] [:error] [pid 56435:tid 56508] [client 20.215.56.86:30161] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ar.php"] [unique_id "acFolcrwr-l5A-s9ryBF-gAAAQg"]
[Tue Mar 24 00:21:41.870377 2026] [:error] [pid 56435:tid 56515] [client 20.215.56.86:64263] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ar.php"] [unique_id "acFolcrwr-l5A-s9ryBF_wAAAQ4"]
[Tue Mar 24 00:21:42.517131 2026] [:error] [pid 56236:tid 56298] [client 20.215.56.86:64296] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ar.php"] [unique_id "acFolnapFgYp0uZ8twAN3gAAAEU"]
[Tue Mar 24 00:21:43.071811 2026] [:error] [pid 56236:tid 56307] [client 20.215.56.86:65388] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "acFol3apFgYp0uZ8twAN4AAAAE4"]
[Tue Mar 24 00:21:43.596174 2026] [:error] [pid 56435:tid 56518] [client 20.215.56.86:64259] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "acFol8rwr-l5A-s9ryBGEQAAARE"]
[Tue Mar 24 00:21:44.115749 2026] [:error] [pid 56435:tid 56504] [client 20.215.56.86:61058] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "acFomMrwr-l5A-s9ryBGGAAAAQU"]
[Tue Mar 24 00:21:44.626665 2026] [:error] [pid 56238:tid 56352] [client 20.215.56.86:64200] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "acFomFSqceFAZRgPDq56uAAAAMQ"]
[Tue Mar 24 00:21:45.147901 2026] [:error] [pid 56237:tid 56329] [client 20.215.56.86:23889] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xoot.php"] [unique_id "acFomQymO0MnzQb90MMKXQAAAIg"]
[Tue Mar 24 00:21:45.671996 2026] [:error] [pid 56435:tid 56510] [client 20.215.56.86:64732] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xoot.php"] [unique_id "acFomcrwr-l5A-s9ryBGJgAAAQo"]
[Tue Mar 24 00:21:46.230080 2026] [:error] [pid 56236:tid 56313] [client 20.215.56.86:65468] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xoot.php"] [unique_id "acFomnapFgYp0uZ8twAN5QAAAFQ"]
[Tue Mar 24 00:21:46.766518 2026] [:error] [pid 56435:tid 56502] [client 20.215.56.86:65456] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xoot.php"] [unique_id "acFomsrwr-l5A-s9ryBGMAAAAQM"]
[Tue Mar 24 00:21:47.288381 2026] [:error] [pid 56238:tid 56354] [client 20.215.56.86:14071] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "acFom1SqceFAZRgPDq56vQAAAMY"]
[Tue Mar 24 00:21:47.855619 2026] [:error] [pid 56238:tid 56361] [client 20.215.56.86:65345] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "acFom1SqceFAZRgPDq56wAAAAM0"]
[Tue Mar 24 00:21:48.419500 2026] [:error] [pid 56236:tid 56304] [client 20.215.56.86:22902] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "acFonHapFgYp0uZ8twAN8gAAAEs"]
[Tue Mar 24 00:21:48.934876 2026] [:error] [pid 56238:tid 56363] [client 20.215.56.86:9882] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "acFonFSqceFAZRgPDq56xQAAAM8"]
[Tue Mar 24 00:21:49.473702 2026] [:error] [pid 56237:tid 56344] [client 20.215.56.86:9918] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acFonQymO0MnzQb90MMKaAAAAJc"]
[Tue Mar 24 00:21:50.040966 2026] [:error] [pid 56435:tid 56524] [client 20.215.56.86:22888] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acFonsrwr-l5A-s9ryBGRAAAARc"]
[Tue Mar 24 00:21:50.607105 2026] [:error] [pid 56435:tid 56521] [client 20.215.56.86:65430] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acFonsrwr-l5A-s9ryBGRwAAARQ"]
[Tue Mar 24 00:21:51.127128 2026] [:error] [pid 56435:tid 56516] [client 20.215.56.86:64706] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acFon8rwr-l5A-s9ryBGSwAAAQ8"]
[Wed Mar 25 00:54:16.893464 2026] [:error] [pid 20371:tid 20378] [client 34.145.164.214:50605] [client 34.145.164.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.145.164.214, incrementing ddos counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "acLBuOb25OL4yTv2fF9tPgAAAQU"]
[Wed Mar 25 00:54:16.897185 2026] [:error] [pid 20371:tid 20378] [client 34.145.164.214:50605] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 25 00:54:17.374853 2026] [:error] [pid 20371:tid 20395] [client 34.145.164.214:50605] [client 34.145.164.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "acLBueb25OL4yTv2fF9tQwAAARY"]
[Wed Mar 25 00:54:17.949480 2026] [:error] [pid 57703:tid 58033] [client 34.145.164.214:55101] [client 34.145.164.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "acLBufIVQxDtjkklWGZSUgAAAE4"]
[Wed Mar 25 00:54:18.553137 2026] [:error] [pid 20371:tid 20377] [client 34.145.164.214:65054] [client 34.145.164.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "acLBuub25OL4yTv2fF9tTQAAAQQ"]
[Wed Mar 25 00:54:19.227013 2026] [:error] [pid 20371:tid 20395] [client 34.145.164.214:64403] [client 34.145.164.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "acLBu-b25OL4yTv2fF9tVQAAARY"]
[Wed Mar 25 00:54:19.870220 2026] [:error] [pid 58154:tid 58157] [client 34.145.164.214:54320] [client 34.145.164.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "acLBuw0pGUh6bwD3ouKGcwAAAMA"]
[Wed Mar 25 00:54:20.530954 2026] [:error] [pid 57702:tid 57915] [client 34.145.164.214:50220] [client 34.145.164.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "acLBvKS8TU_xcQFvlnb7ywAAAAw"]
[Wed Mar 25 00:54:21.083443 2026] [:error] [pid 57711:tid 58073] [client 34.145.164.214:53315] [client 34.145.164.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "acLBvaLdPFdeRRktTdNSxwAAAJM"]
[Wed Mar 25 00:54:21.906712 2026] [:error] [pid 57702:tid 57911] [client 34.145.164.214:55845] [client 34.145.164.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "acLBvaS8TU_xcQFvlnb70AAAAAg"]
[Wed Mar 25 16:01:34.377407 2026] [:error] [pid 25969:tid 26042] [client 20.63.97.61:62928] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Mar 25 16:01:34.651762 2026] [:error] [pid 25969:tid 26037] [client 20.63.97.61:62928] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Mar 25 16:01:35.174601 2026] [:error] [pid 25969:tid 26031] [client 20.63.97.61:62928] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Wed Mar 25 16:01:35.435739 2026] [:error] [pid 25969:tid 26050] [client 20.63.97.61:62928] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Mar 25 16:01:35.958149 2026] [:error] [pid 25969:tid 26045] [client 20.63.97.61:62928] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Wed Mar 25 16:01:36.219642 2026] [:error] [pid 25969:tid 26049] [client 20.63.97.61:62928] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Wed Mar 25 16:01:36.483440 2026] [:error] [pid 25969:tid 26032] [client 20.63.97.61:62928] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Wed Mar 25 16:01:37.001889 2026] [:error] [pid 25969:tid 26038] [client 20.63.97.61:62928] [client 20.63.97.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "acOWYRd3aEUmOfdKja_yyAAAA8w"]
[Wed Mar 25 16:01:38.112810 2026] [:error] [pid 756:tid 864] [client 20.63.97.61:62938] [client 20.63.97.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "acOWYjOaW6oylMIDBCQRUwAAAIw"]
[Wed Mar 25 16:01:39.173914 2026] [:error] [pid 892:tid 902] [client 20.63.97.61:63566] [client 20.63.97.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "acOWYyT_G8WMU3T3yxq2DAAAAMU"]
[Wed Mar 25 16:01:40.211192 2026] [:error] [pid 25967:tid 25982] [client 20.63.97.61:63611] [client 20.63.97.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "acOWZPg8Qtq7ZM4mSFkAtgAAA0o"]
[Thu Mar 26 08:56:51.262498 2026] [:error] [pid 31717:tid 31742] [client 20.251.41.44:17160] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Mar 26 08:56:51.571389 2026] [:error] [pid 31717:tid 31731] [client 20.251.41.44:17160] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Thu Mar 26 08:56:51.876337 2026] [:error] [pid 31717:tid 31746] [client 20.251.41.44:17160] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Thu Mar 26 08:56:52.176786 2026] [:error] [pid 31717:tid 31737] [client 20.251.41.44:17160] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Thu Mar 26 08:56:52.438292 2026] [:error] [pid 31717:tid 31725] [client 20.251.41.44:17160] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Thu Mar 26 08:56:52.702336 2026] [:error] [pid 31717:tid 31731] [client 20.251.41.44:17160] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Thu Mar 26 08:56:52.966143 2026] [:error] [pid 31717:tid 31733] [client 20.251.41.44:17160] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Thu Mar 26 08:56:53.232018 2026] [:error] [pid 31717:tid 31722] [client 20.251.41.44:17160] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Thu Mar 26 08:56:53.495889 2026] [:error] [pid 31717:tid 31746] [client 20.251.41.44:17160] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Thu Mar 26 08:56:53.759835 2026] [:error] [pid 31717:tid 31735] [client 20.251.41.44:17160] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Thu Mar 26 08:56:54.019725 2026] [:error] [pid 31717:tid 31727] [client 20.251.41.44:17160] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acSEVr-SCF7YDISDX4-EFgAAAYU"]
[Thu Mar 26 08:56:54.900582 2026] [:error] [pid 31780:tid 31845] [client 20.251.41.44:44847] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acSEVpJDwZsy5O4ZXEjREQAAAhg"]
[Thu Mar 26 08:56:56.312052 2026] [:error] [pid 31778:tid 31798] [client 20.251.41.44:32679] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acSEWA3kybI2o-xasmBflgAAAcU"]
[Thu Mar 26 08:56:57.243345 2026] [:error] [pid 31780:tid 31845] [client 20.251.41.44:19202] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acSEWZJDwZsy5O4ZXEjRGwAAAhg"]
[Thu Mar 26 08:56:58.115189 2026] [:error] [pid 31778:tid 31809] [client 20.251.41.44:9222] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acSEWg3kybI2o-xasmBfogAAAdA"]
[Thu Mar 26 08:56:59.015338 2026] [:error] [pid 19818:tid 19830] [client 20.251.41.44:33423] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acSEW8zaSnm3d1BeM5WcfQAAAMo"]
[Thu Mar 26 08:56:59.914884 2026] [:error] [pid 31670:tid 31674] [client 20.251.41.44:20788] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acSEWzXVthXxCnWjOTRt9gAAAUI"]
[Thu Mar 26 08:57:00.741695 2026] [:error] [pid 31670:tid 31696] [client 20.251.41.44:7165] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acSEXDXVthXxCnWjOTRt-QAAAVg"]
[Thu Mar 26 08:57:03.180734 2026] [:error] [pid 31780:tid 31827] [client 20.251.41.44:32673] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "acSEX5JDwZsy5O4ZXEjRTwAAAgc"]
[Thu Mar 26 08:57:07.293157 2026] [:error] [pid 31780:tid 31823] [client 20.251.41.44:23426] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "acSEY5JDwZsy5O4ZXEjRVwAAAgM"]
[Thu Mar 26 08:57:11.279696 2026] [:error] [pid 31780:tid 31834] [client 20.251.41.44:16476] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "acSEZ5JDwZsy5O4ZXEjRZAAAAg0"]
[Thu Mar 26 08:57:14.623441 2026] [:error] [pid 31670:tid 31678] [client 20.251.41.44:32702] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "acSEajXVthXxCnWjOTRuJQAAAUY"]
[Thu Mar 26 08:57:15.662350 2026] [:error] [pid 31778:tid 31814] [client 20.251.41.44:54727] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "acSEaw3kybI2o-xasmBfvwAAAdU"]
[Thu Mar 26 08:57:16.679756 2026] [:error] [pid 31778:tid 31811] [client 20.251.41.44:44810] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "acSEbA3kybI2o-xasmBfwQAAAdI"]
[Thu Mar 26 08:57:18.207036 2026] [:error] [pid 19711:tid 19765] [client 20.251.41.44:17769] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "acSEbmj3l1y81GYfluRUMAAAAFA"]
[Thu Mar 26 08:57:19.262612 2026] [:error] [pid 31670:tid 31687] [client 20.251.41.44:11235] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "acSEbzXVthXxCnWjOTRuQwAAAU8"]
[Thu Mar 26 08:57:19.950387 2026] [:error] [pid 31670:tid 31684] [client 20.251.41.44:18809] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acSEbzXVthXxCnWjOTRuSQAAAUw"]
[Thu Mar 26 08:57:20.757432 2026] [:error] [pid 60829:tid 60842] [client 20.251.41.44:33159] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acSEcPTdjHKeZokybaRFDwAAAQs"]
[Thu Mar 26 08:57:22.341854 2026] [:error] [pid 60829:tid 60854] [client 20.251.41.44:18765] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acSEcvTdjHKeZokybaRFEQAAARc"]
[Thu Mar 26 08:57:23.426649 2026] [:error] [pid 31670:tid 31693] [client 20.251.41.44:54540] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acSEczXVthXxCnWjOTRuWwAAAVU"]
[Thu Mar 26 08:57:24.403682 2026] [:error] [pid 60829:tid 60840] [client 20.251.41.44:54773] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acSEdPTdjHKeZokybaRFEgAAAQk"]
[Thu Mar 26 08:57:25.244825 2026] [:error] [pid 31780:tid 31820] [client 20.251.41.44:33411] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acSEdZJDwZsy5O4ZXEjRgAAAAgA"]
[Thu Mar 26 08:57:26.041303 2026] [:error] [pid 31670:tid 31695] [client 20.251.41.44:9748] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acSEdjXVthXxCnWjOTRueAAAAVc"]
[Thu Mar 26 08:57:26.653866 2026] [:error] [pid 31670:tid 31673] [client 20.251.41.44:41071] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acSEdjXVthXxCnWjOTRuhgAAAUE"]
[Thu Mar 26 08:57:27.319099 2026] [:error] [pid 31670:tid 31672] [client 20.251.41.44:33186] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acSEdzXVthXxCnWjOTRujgAAAUA"]
[Thu Mar 26 08:57:28.122806 2026] [:error] [pid 31670:tid 31694] [client 20.251.41.44:55342] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acSEeDXVthXxCnWjOTRukQAAAVY"]
[Thu Mar 26 08:57:28.966000 2026] [:error] [pid 31780:tid 31839] [client 20.251.41.44:6684] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acSEeJJDwZsy5O4ZXEjRhQAAAhI"]
[Thu Mar 26 08:57:29.800066 2026] [:error] [pid 31780:tid 31841] [client 20.251.41.44:6691] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acSEeZJDwZsy5O4ZXEjRjAAAAhQ"]
[Thu Mar 26 08:57:30.456404 2026] [:error] [pid 31780:tid 31821] [client 20.251.41.44:55315] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acSEepJDwZsy5O4ZXEjRkAAAAgE"]
[Thu Mar 26 08:57:31.070556 2026] [:error] [pid 60829:tid 60852] [client 20.251.41.44:28141] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acSEe_TdjHKeZokybaRFHAAAARU"]
[Thu Mar 26 08:57:31.731718 2026] [:error] [pid 31670:tid 31686] [client 20.251.41.44:46239] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acSEezXVthXxCnWjOTRumwAAAU4"]
[Thu Mar 26 08:57:32.503338 2026] [:error] [pid 31780:tid 31824] [client 20.251.41.44:44829] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acSEfJJDwZsy5O4ZXEjRmwAAAgQ"]
[Thu Mar 26 08:57:33.291579 2026] [:error] [pid 31780:tid 31830] [client 20.251.41.44:6649] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acSEfZJDwZsy5O4ZXEjRnwAAAgk"]
[Thu Mar 26 08:57:33.968646 2026] [:error] [pid 31778:tid 31814] [client 20.251.41.44:9841] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acSEfQ3kybI2o-xasmBfzwAAAdU"]
[Thu Mar 26 08:57:34.714412 2026] [:error] [pid 31670:tid 31688] [client 20.251.41.44:56378] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acSEfjXVthXxCnWjOTRuoQAAAVA"]
[Thu Mar 26 08:57:35.627028 2026] [:error] [pid 31670:tid 31674] [client 20.251.41.44:18184] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acSEfzXVthXxCnWjOTRupgAAAUI"]
[Thu Mar 26 08:57:36.516203 2026] [:error] [pid 19711:tid 19757] [client 20.251.41.44:21371] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "acSEgGj3l1y81GYfluRUNAAAAEg"]
[Thu Mar 26 08:57:37.320490 2026] [:error] [pid 60829:tid 60847] [client 20.251.41.44:44841] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "acSEgfTdjHKeZokybaRFJQAAARA"]
[Thu Mar 26 08:57:38.032437 2026] [:error] [pid 31778:tid 31813] [client 20.251.41.44:24994] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "acSEgg3kybI2o-xasmBf2QAAAdQ"]
[Thu Mar 26 08:57:39.266407 2026] [:error] [pid 31778:tid 31811] [client 20.251.41.44:55552] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "acSEgw3kybI2o-xasmBf3gAAAdI"]
[Thu Mar 26 08:57:40.091141 2026] [:error] [pid 31778:tid 31800] [client 20.251.41.44:18220] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acSEhA3kybI2o-xasmBf5AAAAcc"]
[Thu Mar 26 08:57:40.724161 2026] [:error] [pid 31778:tid 31811] [client 20.251.41.44:25038] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acSEhA3kybI2o-xasmBf6wAAAdI"]
[Thu Mar 26 08:57:41.635125 2026] [:error] [pid 31717:tid 31722] [client 20.251.41.44:55799] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acSEhb-SCF7YDISDX4-EMwAAAYA"]
[Thu Mar 26 08:57:44.458546 2026] [:error] [pid 19711:tid 19762] [client 20.251.41.44:6425] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acSEiGj3l1y81GYfluRUNwAAAE0"]
[Thu Mar 26 08:57:55.675357 2026] [:error] [pid 31780:tid 31824] [client 20.251.41.44:20251] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Mar 26 08:57:55.945460 2026] [:error] [pid 31780:tid 31832] [client 20.251.41.44:20251] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu Mar 26 08:57:56.209698 2026] [:error] [pid 31780:tid 31823] [client 20.251.41.44:20251] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Mar 26 08:57:56.475411 2026] [:error] [pid 31780:tid 31843] [client 20.251.41.44:20251] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Thu Mar 26 08:57:56.818289 2026] [:error] [pid 31780:tid 31827] [client 20.251.41.44:20251] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Thu Mar 26 08:57:57.121146 2026] [:error] [pid 31780:tid 31822] [client 20.251.41.44:20251] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Thu Mar 26 08:57:57.385946 2026] [:error] [pid 31780:tid 31831] [client 20.251.41.44:20251] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Thu Mar 26 08:57:57.650684 2026] [:error] [pid 31780:tid 31836] [client 20.251.41.44:20251] File does not exist: /usr/local/apache/htdocs/suspended-page/ws83.php
[Thu Mar 26 08:57:58.024762 2026] [:error] [pid 31780:tid 31823] [client 20.251.41.44:20251] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Thu Mar 26 08:57:58.290522 2026] [:error] [pid 31780:tid 31843] [client 20.251.41.44:20251] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Thu Mar 26 08:57:58.555780 2026] [:error] [pid 31780:tid 31845] [client 20.251.41.44:20251] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Thu Mar 26 08:57:58.817046 2026] [:error] [pid 31780:tid 31837] [client 20.251.41.44:20251] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "acSElpJDwZsy5O4ZXEjR2wAAAhA"]
[Thu Mar 26 08:57:59.627367 2026] [:error] [pid 19710:tid 19733] [client 20.251.41.44:35224] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "acSElwVEWP8Ar68Njk61GwAAAAs"]
[Thu Mar 26 08:58:01.384940 2026] [:error] [pid 31670:tid 31677] [client 20.251.41.44:32712] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "acSEmTXVthXxCnWjOTRu0QAAAUU"]
[Thu Mar 26 08:58:03.800836 2026] [:error] [pid 31780:tid 31827] [client 20.251.41.44:53336] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "acSEm5JDwZsy5O4ZXEjR6gAAAgc"]
[Thu Mar 26 08:58:05.609569 2026] [:error] [pid 31670:tid 31693] [client 20.251.41.44:60081] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "acSEnTXVthXxCnWjOTRu3gAAAVU"]
[Thu Mar 26 08:58:08.815040 2026] [:error] [pid 31670:tid 31691] [client 20.251.41.44:13948] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "acSEoDXVthXxCnWjOTRu8wAAAVM"]
[Thu Mar 26 08:58:13.608490 2026] [:error] [pid 31778:tid 31807] [client 20.251.41.44:33826] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "acSEpQ3kybI2o-xasmBgIQAAAc4"]
[Thu Mar 26 08:58:15.424604 2026] [:error] [pid 31778:tid 31815] [client 20.251.41.44:32760] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "acSEpw3kybI2o-xasmBgLAAAAdY"]
[Thu Mar 26 08:58:16.889966 2026] [:error] [pid 31717:tid 31722] [client 20.251.41.44:44836] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acSEqL-SCF7YDISDX4-EUAAAAYA"]
[Thu Mar 26 08:58:17.679675 2026] [:error] [pid 31670:tid 31688] [client 20.251.41.44:35220] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acSEqTXVthXxCnWjOTRvCgAAAVA"]
[Thu Mar 26 08:58:18.453885 2026] [:error] [pid 60829:tid 60852] [client 20.251.41.44:56122] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acSEqvTdjHKeZokybaRFWAAAARU"]
[Thu Mar 26 08:58:20.640113 2026] [:error] [pid 19711:tid 19753] [client 20.251.41.44:13409] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acSErGj3l1y81GYfluRURQAAAEQ"]
[Thu Mar 26 08:58:21.754482 2026] [:error] [pid 31670:tid 31675] [client 20.251.41.44:37851] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acSErTXVthXxCnWjOTRvEgAAAUM"]
[Thu Mar 26 08:58:23.082127 2026] [:error] [pid 60829:tid 60841] [client 20.251.41.44:63905] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acSEr_TdjHKeZokybaRFYAAAAQo"]
[Thu Mar 26 08:58:23.897467 2026] [:error] [pid 31780:tid 31824] [client 20.251.41.44:29612] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acSEr5JDwZsy5O4ZXEjSDAAAAgQ"]
[Thu Mar 26 08:58:24.930105 2026] [:error] [pid 31670:tid 31694] [client 20.251.41.44:10760] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acSEsDXVthXxCnWjOTRvFgAAAVY"]
[Thu Mar 26 08:58:26.532896 2026] [:error] [pid 31778:tid 31816] [client 20.251.41.44:17675] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acSEsg3kybI2o-xasmBgPgAAAdc"]
[Thu Mar 26 08:58:28.047059 2026] [:error] [pid 19710:tid 19744] [client 20.251.41.44:10821] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acSEtAVEWP8Ar68Njk61IwAAABY"]
[Thu Mar 26 08:58:29.623800 2026] [:error] [pid 31778:tid 31794] [client 20.251.41.44:56090] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acSEtQ3kybI2o-xasmBgSgAAAcE"]
[Thu Mar 26 08:58:30.695595 2026] [:error] [pid 31778:tid 31805] [client 20.251.41.44:33853] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acSEtg3kybI2o-xasmBgUAAAAcw"]
[Thu Mar 26 08:58:32.868388 2026] [:error] [pid 31780:tid 31829] [client 20.251.41.44:15370] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acSEuJJDwZsy5O4ZXEjSJAAAAgg"]
[Thu Mar 26 08:58:35.588553 2026] [:error] [pid 60829:tid 60848] [client 20.251.41.44:14951] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acSEu_TdjHKeZokybaRFawAAARE"]
[Thu Mar 26 08:58:36.627763 2026] [:error] [pid 60829:tid 60845] [client 20.251.41.44:25491] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acSEvPTdjHKeZokybaRFbAAAAQ4"]
[Thu Mar 26 08:58:37.801774 2026] [:error] [pid 60829:tid 60836] [client 20.251.41.44:24564] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acSEvfTdjHKeZokybaRFcgAAAQU"]
[Thu Mar 26 08:58:39.344852 2026] [:error] [pid 31778:tid 31804] [client 20.251.41.44:31686] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acSEvw3kybI2o-xasmBgXwAAAcs"]
[Thu Mar 26 08:58:40.260087 2026] [:error] [pid 31778:tid 31797] [client 20.251.41.44:42292] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acSEwA3kybI2o-xasmBgagAAAcQ"]
[Thu Mar 26 08:58:41.925576 2026] [:error] [pid 31780:tid 31837] [client 20.251.41.44:46808] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acSEwZJDwZsy5O4ZXEjSLwAAAhA"]
[Thu Mar 26 08:58:42.592140 2026] [:error] [pid 31670:tid 31678] [client 20.251.41.44:31728] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acSEwjXVthXxCnWjOTRvNQAAAUY"]
[Thu Mar 26 08:58:45.384791 2026] [:error] [pid 60829:tid 60835] [client 20.251.41.44:15396] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "acSExfTdjHKeZokybaRFfwAAAQQ"]
[Thu Mar 26 08:58:48.802457 2026] [:error] [pid 19711:tid 19773] [client 20.251.41.44:12174] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "acSEyGj3l1y81GYfluRUTgAAAFg"]
[Thu Mar 26 08:58:50.377782 2026] [:error] [pid 31670:tid 31696] [client 20.251.41.44:31680] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "acSEyjXVthXxCnWjOTRvRgAAAVg"]
[Thu Mar 26 08:58:51.707579 2026] [:error] [pid 31670:tid 31689] [client 20.251.41.44:10053] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "acSEyzXVthXxCnWjOTRvUAAAAVE"]
[Thu Mar 26 08:58:54.373544 2026] [:error] [pid 31778:tid 31796] [client 20.251.41.44:45369] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "acSEzg3kybI2o-xasmBg2QAAAcM"]
[Thu Mar 26 08:58:55.755046 2026] [:error] [pid 31670:tid 31689] [client 20.251.41.44:14418] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "acSEzzXVthXxCnWjOTRvXAAAAVE"]
[Thu Mar 26 08:59:01.185160 2026] [:error] [pid 31717:tid 31736] [client 20.251.41.44:56284] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Thu Mar 26 08:59:01.450841 2026] [:error] [pid 31717:tid 31725] [client 20.251.41.44:56284] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Thu Mar 26 08:59:01.981764 2026] [:error] [pid 31717:tid 31727] [client 20.251.41.44:56284] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Thu Mar 26 08:59:02.256617 2026] [:error] [pid 31717:tid 31730] [client 20.251.41.44:56284] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Thu Mar 26 08:59:02.570195 2026] [:error] [pid 31717:tid 31746] [client 20.251.41.44:56284] File does not exist: /usr/local/apache/htdocs/suspended-page/155.php
[Thu Mar 26 08:59:02.836379 2026] [:error] [pid 31717:tid 31732] [client 20.251.41.44:56284] File does not exist: /usr/local/apache/htdocs/suspended-page/d12.php
[Thu Mar 26 08:59:03.104532 2026] [:error] [pid 31717:tid 31742] [client 20.251.41.44:56284] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Thu Mar 26 08:59:03.394422 2026] [:error] [pid 31717:tid 31731] [client 20.251.41.44:56284] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Thu Mar 26 08:59:03.917450 2026] [:error] [pid 31717:tid 31724] [client 20.251.41.44:56284] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Thu Mar 26 08:59:04.681817 2026] [:error] [pid 31717:tid 31745] [client 20.251.41.44:56284] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Thu Mar 26 08:59:05.011757 2026] [:error] [pid 31717:tid 31739] [client 20.251.41.44:56284] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "acSE2b-SCF7YDISDX4-EgAAAAZE"]
[Thu Mar 26 08:59:15.906974 2026] [:error] [pid 19712:tid 19797] [client 20.251.41.44:40973] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "acSE49WhKhRNqm23vFPnTwAAAJU"]
[Thu Mar 26 08:59:18.470144 2026] [:error] [pid 31670:tid 31695] [client 20.251.41.44:42303] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "acSE5jXVthXxCnWjOTRv_AAAAVc"]
[Thu Mar 26 08:59:19.703461 2026] [:error] [pid 31717:tid 31725] [client 20.251.41.44:42270] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "acSE57-SCF7YDISDX4-EjgAAAYM"]
[Thu Mar 26 08:59:20.596759 2026] [:error] [pid 19818:tid 19826] [client 20.251.41.44:45347] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "acSE6MzaSnm3d1BeM5Wc8QAAAMY"]
[Thu Mar 26 08:59:21.539431 2026] [:error] [pid 19818:tid 19830] [client 20.251.41.44:42738] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "acSE6czaSnm3d1BeM5Wc9gAAAMo"]
[Thu Mar 26 08:59:22.619778 2026] [:error] [pid 60829:tid 60848] [client 20.251.41.44:37773] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "acSE6vTdjHKeZokybaRFsAAAARE"]
[Thu Mar 26 08:59:23.671430 2026] [:error] [pid 60829:tid 60840] [client 20.251.41.44:45347] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "acSE6_TdjHKeZokybaRFtgAAAQk"]
[Thu Mar 26 08:59:24.642831 2026] [:error] [pid 19710:tid 19725] [client 20.251.41.44:56267] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "acSE7AVEWP8Ar68Njk61PgAAAAM"]
[Thu Mar 26 08:59:25.964113 2026] [:error] [pid 60829:tid 60832] [client 20.251.41.44:47269] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "acSE7fTdjHKeZokybaRFwAAAAQE"]
[Thu Mar 26 08:59:28.389046 2026] [:error] [pid 31778:tid 31813] [client 20.251.41.44:10106] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "acSE8A3kybI2o-xasmBhGwAAAdQ"]
[Thu Mar 26 08:59:30.435534 2026] [:error] [pid 19818:tid 19835] [client 20.251.41.44:25870] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "acSE8szaSnm3d1BeM5WdIAAAAM8"]
[Thu Mar 26 08:59:33.658043 2026] [:error] [pid 31670:tid 31679] [client 20.251.41.44:59063] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "acSE9TXVthXxCnWjOTRwEwAAAUc"]
[Thu Mar 26 08:59:39.830688 2026] [:error] [pid 31780:tid 31841] [client 20.251.41.44:28664] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "acSE-5JDwZsy5O4ZXEjSwAAAAhQ"]
[Thu Mar 26 08:59:43.025613 2026] [:error] [pid 19818:tid 19830] [client 20.251.41.44:14433] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "acSE_8zaSnm3d1BeM5WdRAAAAMo"]
[Thu Mar 26 08:59:50.236885 2026] [:error] [pid 19818:tid 19829] [client 20.251.41.44:22407] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "acSFBszaSnm3d1BeM5WdXwAAAMk"]
[Thu Mar 26 08:59:51.686551 2026] [:error] [pid 19710:tid 19744] [client 20.251.41.44:40984] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "acSFBwVEWP8Ar68Njk61SgAAABY"]
[Thu Mar 26 08:59:52.520990 2026] [:error] [pid 31778:tid 31806] [client 20.251.41.44:40986] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "acSFCA3kybI2o-xasmBhLAAAAc0"]
[Thu Mar 26 08:59:53.327666 2026] [:error] [pid 19818:tid 19822] [client 20.251.41.44:47290] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "acSFCczaSnm3d1BeM5WdaQAAAMI"]
[Thu Mar 26 08:59:54.876910 2026] [:error] [pid 19818:tid 19832] [client 20.251.41.44:10050] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "acSFCszaSnm3d1BeM5WdbwAAAMw"]
[Thu Mar 26 09:00:01.326712 2026] [:error] [pid 60829:tid 60854] [client 20.251.41.44:34864] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "acSFEfTdjHKeZokybaRFywAAARc"]
[Thu Mar 26 09:00:02.967547 2026] [:error] [pid 31670:tid 31674] [client 20.251.41.44:25889] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "acSFEjXVthXxCnWjOTRwMAAAAUI"]
[Thu Mar 26 09:00:03.615358 2026] [:error] [pid 19711:tid 19763] [client 20.251.41.44:59071] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "acSFE2j3l1y81GYfluRUZAAAAE4"]
[Thu Mar 26 09:00:04.964929 2026] [:error] [pid 31670:tid 31679] [client 20.251.41.44:29175] File does not exist: /usr/local/apache/htdocs/suspended-page/buc.php
[Thu Mar 26 09:00:05.288353 2026] [:error] [pid 31670:tid 31672] [client 20.251.41.44:29175] File does not exist: /usr/local/apache/htdocs/suspended-page/ws84.php
[Thu Mar 26 09:00:05.580616 2026] [:error] [pid 31670:tid 31691] [client 20.251.41.44:29175] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Thu Mar 26 09:00:05.845782 2026] [:error] [pid 31670:tid 31675] [client 20.251.41.44:29175] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Thu Mar 26 09:00:06.181198 2026] [:error] [pid 31670:tid 31693] [client 20.251.41.44:29175] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Thu Mar 26 09:00:06.485055 2026] [:error] [pid 31670:tid 31685] [client 20.251.41.44:29175] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Thu Mar 26 09:00:06.914514 2026] [:error] [pid 31670:tid 31677] [client 20.251.41.44:29175] File does not exist: /usr/local/apache/htdocs/suspended-page/44.php
[Thu Mar 26 09:00:07.178924 2026] [:error] [pid 31670:tid 31684] [client 20.251.41.44:29175] File does not exist: /usr/local/apache/htdocs/suspended-page/ws49.php
[Thu Mar 26 09:00:07.467529 2026] [:error] [pid 31670:tid 31680] [client 20.251.41.44:29175] File does not exist: /usr/local/apache/htdocs/suspended-page/amp.php
[Thu Mar 26 09:00:07.733402 2026] [:error] [pid 31670:tid 31691] [client 20.251.41.44:29175] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Mar 26 09:00:08.017777 2026] [:error] [pid 31670:tid 31685] [client 20.251.41.44:29175] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "acSFGDXVthXxCnWjOTRwTQAAAU0"]
[Thu Mar 26 09:00:09.970562 2026] [:error] [pid 31778:tid 31815] [client 20.251.41.44:43892] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "acSFGQ3kybI2o-xasmBhOgAAAdY"]
[Thu Mar 26 09:00:10.989560 2026] [:error] [pid 19818:tid 19841] [client 20.251.41.44:34837] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "acSFGszaSnm3d1BeM5WdpQAAANU"]
[Thu Mar 26 09:00:12.135586 2026] [:error] [pid 19818:tid 19835] [client 20.251.41.44:6502] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "acSFHMzaSnm3d1BeM5WdqQAAAM8"]
[Thu Mar 26 09:00:13.290283 2026] [:error] [pid 31780:tid 31833] [client 20.251.41.44:6551] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "acSFHZJDwZsy5O4ZXEjS-gAAAgw"]
[Thu Mar 26 09:00:14.639103 2026] [:error] [pid 31670:tid 31673] [client 20.251.41.44:43855] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "acSFHjXVthXxCnWjOTRwYgAAAUE"]
[Thu Mar 26 09:00:16.360965 2026] [:error] [pid 60829:tid 60853] [client 20.251.41.44:29144] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "acSFIPTdjHKeZokybaRF0gAAARY"]
[Thu Mar 26 09:00:18.372626 2026] [:error] [pid 19818:tid 19831] [client 20.251.41.44:58956] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "acSFIszaSnm3d1BeM5WdvQAAAMs"]
[Thu Mar 26 09:00:19.566023 2026] [:error] [pid 19818:tid 19832] [client 20.251.41.44:34238] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "acSFI8zaSnm3d1BeM5WdwAAAAMw"]
[Thu Mar 26 09:00:20.406309 2026] [:error] [pid 19712:tid 19793] [client 20.251.41.44:41887] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "acSFJNWhKhRNqm23vFPnXQAAAJE"]
[Thu Mar 26 09:00:21.698834 2026] [:error] [pid 31778:tid 31804] [client 20.251.41.44:13370] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "acSFJQ3kybI2o-xasmBhSQAAAcs"]
[Thu Mar 26 09:00:22.316632 2026] [:error] [pid 31780:tid 31821] [client 20.251.41.44:40519] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "acSFJpJDwZsy5O4ZXEjTAgAAAgE"]
[Thu Mar 26 09:00:23.215324 2026] [:error] [pid 31780:tid 31826] [client 20.251.41.44:28843] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "acSFJ5JDwZsy5O4ZXEjTBQAAAgY"]
[Thu Mar 26 09:00:24.721674 2026] [:error] [pid 19818:tid 19841] [client 20.251.41.44:13356] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "acSFKMzaSnm3d1BeM5WdyAAAANU"]
[Thu Mar 26 09:00:25.810914 2026] [:error] [pid 19818:tid 19842] [client 20.251.41.44:29087] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "acSFKczaSnm3d1BeM5WdywAAANY"]
[Thu Mar 26 09:00:30.076900 2026] [:error] [pid 31670:tid 31685] [client 20.251.41.44:42684] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "acSFLjXVthXxCnWjOTRwfAAAAU0"]
[Thu Mar 26 09:00:31.233120 2026] [:error] [pid 31780:tid 31830] [client 20.251.41.44:50378] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acSFL5JDwZsy5O4ZXEjTRwAAAgk"]
[Thu Mar 26 09:00:32.365877 2026] [:error] [pid 31670:tid 31679] [client 20.251.41.44:10429] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acSFMDXVthXxCnWjOTRwggAAAUc"]
[Thu Mar 26 09:00:33.562927 2026] [:error] [pid 60829:tid 60852] [client 20.251.41.44:14848] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acSFMfTdjHKeZokybaRF6QAAARU"]
[Thu Mar 26 09:00:38.990059 2026] [:error] [pid 19818:tid 19831] [client 20.251.41.44:38084] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acSFNszaSnm3d1BeM5WecQAAAMs"]
[Thu Mar 26 09:00:39.976304 2026] [:error] [pid 19712:tid 19786] [client 20.251.41.44:6377] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "acSFN9WhKhRNqm23vFPnYAAAAIo"]
[Thu Mar 26 09:00:42.605316 2026] [:error] [pid 31780:tid 31831] [client 20.251.41.44:21257] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "acSFOpJDwZsy5O4ZXEjTVAAAAgo"]
[Thu Mar 26 09:00:45.338321 2026] [:error] [pid 19818:tid 19838] [client 20.251.41.44:31223] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "acSFPczaSnm3d1BeM5WeeAAAANI"]
[Thu Mar 26 09:00:52.262073 2026] [:error] [pid 19818:tid 19840] [client 20.251.41.44:45403] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "acSFRMzaSnm3d1BeM5WehgAAANQ"]
[Thu Mar 26 09:00:55.436392 2026] [:error] [pid 31670:tid 31673] [client 20.251.41.44:31207] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "acSFRzXVthXxCnWjOTRwsQAAAUE"]
[Thu Mar 26 09:00:56.896096 2026] [:error] [pid 31780:tid 31843] [client 20.251.41.44:40485] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "acSFSJJDwZsy5O4ZXEjTawAAAhY"]
[Thu Mar 26 09:00:57.750667 2026] [:error] [pid 31670:tid 31689] [client 20.251.41.44:30691] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "acSFSTXVthXxCnWjOTRwtQAAAVE"]
[Thu Mar 26 09:00:58.698698 2026] [:error] [pid 19818:tid 19829] [client 20.251.41.44:25954] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "acSFSszaSnm3d1BeM5WemwAAAMk"]
[Thu Mar 26 09:00:59.965143 2026] [:error] [pid 31780:tid 31827] [client 20.251.41.44:26886] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "acSFS5JDwZsy5O4ZXEjTbQAAAgc"]
[Thu Mar 26 09:01:00.855923 2026] [:error] [pid 19711:tid 19770] [client 20.251.41.44:38422] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "acSFTGj3l1y81GYfluRUcQAAAFU"]
[Thu Mar 26 09:01:02.117824 2026] [:error] [pid 19818:tid 19834] [client 20.251.41.44:46751] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "acSFTszaSnm3d1BeM5WeoQAAAM4"]
[Thu Mar 26 09:01:04.096908 2026] [:error] [pid 31717:tid 31729] [client 20.251.41.44:26931] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "acSFUL-SCF7YDISDX4-EtAAAAYc"]
[Thu Mar 26 09:01:05.264069 2026] [:error] [pid 31780:tid 31834] [client 20.251.41.44:36248] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "acSFUZJDwZsy5O4ZXEjTdAAAAg0"]
[Thu Mar 26 09:01:06.329848 2026] [:error] [pid 60829:tid 60848] [client 20.251.41.44:30688] [client 20.251.41.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "acSFUvTdjHKeZokybaRF9AAAARE"]
[Thu Mar 26 09:01:07.098646 2026] [:error] [pid 19712:tid 19788] [client 20.251.41.44:7071] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Thu Mar 26 21:09:49.701157 2026] [:error] [pid 19712:tid 19785] [client 20.104.216.159:59058] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Mar 26 21:09:49.910633 2026] [:error] [pid 19712:tid 19792] [client 20.104.216.159:59058] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Mar 26 21:09:50.359756 2026] [:error] [pid 19712:tid 19778] [client 20.104.216.159:59058] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Thu Mar 26 21:09:50.571348 2026] [:error] [pid 19712:tid 19799] [client 20.104.216.159:59058] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Mar 26 21:09:50.992222 2026] [:error] [pid 19712:tid 19787] [client 20.104.216.159:59058] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Thu Mar 26 21:09:51.201674 2026] [:error] [pid 19712:tid 19783] [client 20.104.216.159:59058] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Mar 26 21:09:51.412636 2026] [:error] [pid 19712:tid 19788] [client 20.104.216.159:59058] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Thu Mar 26 21:09:51.828051 2026] [:error] [pid 19712:tid 19796] [client 20.104.216.159:59058] [client 20.104.216.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "acUwH9WhKhRNqm23vFMuuQAAAJQ"]
[Thu Mar 26 21:09:52.656892 2026] [:error] [pid 19711:tid 19770] [client 20.104.216.159:59047] [client 20.104.216.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "acUwIGj3l1y81GYfluSjIwAAAFU"]
[Thu Mar 26 21:09:53.486146 2026] [:error] [pid 31778:tid 31795] [client 20.104.216.159:50312] [client 20.104.216.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "acUwIQ3kybI2o-xasmAcOQAAAcI"]
[Thu Mar 26 21:09:54.327292 2026] [:error] [pid 31780:tid 31835] [client 20.104.216.159:50341] [client 20.104.216.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "acUwIpJDwZsy5O4ZXEjCAwAAAg4"]
[Fri Mar 27 05:47:18.923397 2026] [:error] [pid 63897:tid 63910] [client 158.158.54.101:65110] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Mar 27 05:47:19.227028 2026] [:error] [pid 63897:tid 63908] [client 158.158.54.101:65110] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Fri Mar 27 05:47:19.470065 2026] [:error] [pid 63897:tid 63903] [client 158.158.54.101:65110] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Fri Mar 27 05:47:20.142405 2026] [:error] [pid 63897:tid 63899] [client 158.158.54.101:65110] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri Mar 27 05:47:20.385382 2026] [:error] [pid 63897:tid 63902] [client 158.158.54.101:65110] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Fri Mar 27 05:47:20.632084 2026] [:error] [pid 63897:tid 63917] [client 158.158.54.101:65110] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Fri Mar 27 05:47:20.875431 2026] [:error] [pid 63897:tid 63908] [client 158.158.54.101:65110] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Fri Mar 27 05:47:21.119268 2026] [:error] [pid 63897:tid 63900] [client 158.158.54.101:65110] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Mar 27 05:47:21.364606 2026] [:error] [pid 63897:tid 63899] [client 158.158.54.101:65110] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Fri Mar 27 05:47:21.624059 2026] [:error] [pid 63897:tid 63912] [client 158.158.54.101:65110] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Fri Mar 27 05:47:21.926894 2026] [:error] [pid 63897:tid 63923] [client 158.158.54.101:65110] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acWpaWVSkmYmLu7ycYjqQQAAARg"]
[Fri Mar 27 05:47:22.616481 2026] [:error] [pid 4293:tid 4313] [client 158.158.54.101:64139] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acWpapLjeJUC3OKtEx9PogAAAVI"]
[Fri Mar 27 05:47:23.748137 2026] [:error] [pid 63897:tid 63916] [client 158.158.54.101:64137] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acWpa2VSkmYmLu7ycYjqUwAAARE"]
[Fri Mar 27 05:47:24.494800 2026] [:error] [pid 27743:tid 27779] [client 158.158.54.101:43340] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acWpbCA46UYYLqzw99D7YgAAAA8"]
[Fri Mar 27 05:47:25.146370 2026] [:error] [pid 27749:tid 27808] [client 158.158.54.101:64649] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acWpbcEqyoMni2Q6_X5cYAAAAFE"]
[Fri Mar 27 05:47:25.709342 2026] [:error] [pid 63897:tid 63913] [client 158.158.54.101:64084] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acWpbWVSkmYmLu7ycYjqXAAAAQ4"]
[Fri Mar 27 05:47:26.667902 2026] [:error] [pid 4341:tid 4348] [client 158.158.54.101:65204] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acWpbuKJWrNB5dMlEREE5wAAAYU"]
[Fri Mar 27 05:47:27.185814 2026] [:error] [pid 63897:tid 63922] [client 158.158.54.101:43379] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acWpb2VSkmYmLu7ycYjqZAAAARc"]
[Fri Mar 27 05:47:28.416253 2026] [:error] [pid 27851:tid 27878] [client 158.158.54.101:65128] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "acWpcHR2ccxe3RMCLboNkAAAANQ"]
[Fri Mar 27 05:47:29.051779 2026] [:error] [pid 63897:tid 63909] [client 158.158.54.101:64156] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "acWpcWVSkmYmLu7ycYjqcwAAAQo"]
[Fri Mar 27 05:47:29.823705 2026] [:error] [pid 27851:tid 27864] [client 158.158.54.101:65197] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "acWpcXR2ccxe3RMCLboNkgAAAMY"]
[Fri Mar 27 05:47:30.988865 2026] [:error] [pid 63897:tid 63905] [client 158.158.54.101:64662] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "acWpcmVSkmYmLu7ycYjqggAAAQY"]
[Fri Mar 27 05:47:31.718857 2026] [:error] [pid 4341:tid 4366] [client 158.158.54.101:64677] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "acWpc-KJWrNB5dMlEREE_AAAAZc"]
[Fri Mar 27 05:47:32.546724 2026] [:error] [pid 4341:tid 4367] [client 158.158.54.101:64697] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "acWpdOKJWrNB5dMlEREFAQAAAZg"]
[Fri Mar 27 05:47:34.104108 2026] [:error] [pid 27750:tid 27820] [client 158.158.54.101:65127] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "acWpdoaSil5rd17ieLw1CwAAAII"]
[Fri Mar 27 05:47:35.108073 2026] [:error] [pid 4341:tid 4344] [client 158.158.54.101:65144] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "acWpd-KJWrNB5dMlEREFCwAAAYE"]
[Fri Mar 27 05:47:36.289065 2026] [:error] [pid 27750:tid 27842] [client 158.158.54.101:64133] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acWpeIaSil5rd17ieLw1EQAAAJg"]
[Fri Mar 27 05:47:38.135446 2026] [:error] [pid 27750:tid 27834] [client 158.158.54.101:65525] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acWpeoaSil5rd17ieLw1IAAAAJA"]
[Fri Mar 27 05:47:38.882820 2026] [:error] [pid 27750:tid 27821] [client 158.158.54.101:65140] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acWpeoaSil5rd17ieLw1IgAAAIM"]
[Fri Mar 27 05:47:40.123169 2026] [:error] [pid 63897:tid 63904] [client 158.158.54.101:43386] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acWpfGVSkmYmLu7ycYjqkgAAAQU"]
[Fri Mar 27 05:47:40.958827 2026] [:error] [pid 63897:tid 63921] [client 158.158.54.101:64578] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acWpfGVSkmYmLu7ycYjqlgAAARY"]
[Fri Mar 27 05:47:41.751290 2026] [:error] [pid 27743:tid 27771] [client 158.158.54.101:64645] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acWpfSA46UYYLqzw99D7aQAAAAc"]
[Fri Mar 27 05:47:42.691719 2026] [:error] [pid 4293:tid 4317] [client 158.158.54.101:43383] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acWpfpLjeJUC3OKtEx9PvQAAAVY"]
[Fri Mar 27 05:47:43.781040 2026] [:error] [pid 27749:tid 27795] [client 158.158.54.101:65510] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acWpf8EqyoMni2Q6_X5cbAAAAEQ"]
[Fri Mar 27 05:47:44.439270 2026] [:error] [pid 27851:tid 27877] [client 158.158.54.101:64583] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acWpgHR2ccxe3RMCLboNsAAAANM"]
[Fri Mar 27 05:47:45.360560 2026] [:error] [pid 63897:tid 63904] [client 158.158.54.101:64143] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acWpgWVSkmYmLu7ycYjqoQAAAQU"]
[Fri Mar 27 05:47:46.051356 2026] [:error] [pid 4341:tid 4361] [client 158.158.54.101:65502] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acWpguKJWrNB5dMlEREFLgAAAZI"]
[Fri Mar 27 05:47:46.651413 2026] [:error] [pid 27750:tid 27841] [client 158.158.54.101:43328] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acWpgoaSil5rd17ieLw1KwAAAJc"]
[Fri Mar 27 05:47:48.564502 2026] [:error] [pid 27750:tid 27836] [client 158.158.54.101:65139] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acWphIaSil5rd17ieLw1MgAAAJI"]
[Fri Mar 27 05:47:51.050046 2026] [:error] [pid 27749:tid 27804] [client 158.158.54.101:65118] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acWph8EqyoMni2Q6_X5ccgAAAE0"]
[Fri Mar 27 05:47:52.177129 2026] [:error] [pid 27743:tid 27787] [client 158.158.54.101:65503] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acWpiCA46UYYLqzw99D7cgAAABc"]
[Fri Mar 27 05:47:55.327974 2026] [:error] [pid 63897:tid 63899] [client 158.158.54.101:65495] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acWpi2VSkmYmLu7ycYjq1QAAAQA"]
[Fri Mar 27 05:48:02.030206 2026] [:error] [pid 63897:tid 63920] [client 158.158.54.101:65492] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acWpkmVSkmYmLu7ycYjq8wAAARU"]
[Fri Mar 27 05:48:07.322045 2026] [:error] [pid 27749:tid 27801] [client 158.158.54.101:65175] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acWpl8EqyoMni2Q6_X5cgQAAAEo"]
[Fri Mar 27 05:48:08.305941 2026] [:error] [pid 4341:tid 4366] [client 158.158.54.101:64093] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acWpmOKJWrNB5dMlEREFeQAAAZc"]
[Fri Mar 27 05:48:09.317644 2026] [:error] [pid 4341:tid 4348] [client 158.158.54.101:65121] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acWpmeKJWrNB5dMlEREFewAAAYU"]
[Fri Mar 27 05:48:10.663929 2026] [:error] [pid 4341:tid 4351] [client 158.158.54.101:65096] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "acWpmuKJWrNB5dMlEREFgwAAAYg"]
[Fri Mar 27 05:48:12.160510 2026] [:error] [pid 4293:tid 4302] [client 158.158.54.101:65201] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "acWpnJLjeJUC3OKtEx9QAAAAAUc"]
[Fri Mar 27 05:48:13.455423 2026] [:error] [pid 4341:tid 4347] [client 158.158.54.101:63238] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "acWpneKJWrNB5dMlEREFjQAAAYQ"]
[Fri Mar 27 05:48:14.477328 2026] [:error] [pid 4341:tid 4354] [client 158.158.54.101:65130] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "acWpnuKJWrNB5dMlEREFlwAAAYs"]
[Fri Mar 27 05:48:15.122914 2026] [:error] [pid 4293:tid 4304] [client 158.158.54.101:65164] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acWpn5LjeJUC3OKtEx9QHgAAAUk"]
[Fri Mar 27 05:48:16.408930 2026] [:error] [pid 27851:tid 27867] [client 158.158.54.101:64696] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acWpoHR2ccxe3RMCLboN3gAAAMk"]
[Fri Mar 27 05:48:17.135161 2026] [:error] [pid 27743:tid 27767] [client 158.158.54.101:63680] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acWpoSA46UYYLqzw99D7fgAAAAM"]
[Fri Mar 27 05:48:17.831071 2026] [:error] [pid 4341:tid 4345] [client 158.158.54.101:65213] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acWpoeKJWrNB5dMlEREFrAAAAYI"]
[Fri Mar 27 05:48:18.373565 2026] [:error] [pid 27750:tid 27820] [client 158.158.54.101:65211] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "acWpooaSil5rd17ieLw1RwAAAII"]
[Fri Mar 27 05:48:19.334673 2026] [:error] [pid 27851:tid 27862] [client 158.158.54.101:43351] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "acWpo3R2ccxe3RMCLboN5AAAAMQ"]
[Fri Mar 27 05:48:20.339365 2026] [:error] [pid 4341:tid 4364] [client 158.158.54.101:64591] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "acWppOKJWrNB5dMlEREFswAAAZU"]
[Fri Mar 27 05:48:21.106464 2026] [:error] [pid 27851:tid 27861] [client 158.158.54.101:64095] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Mar 27 05:48:21.349910 2026] [:error] [pid 27851:tid 27864] [client 158.158.54.101:64095] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri Mar 27 05:48:21.594437 2026] [:error] [pid 27851:tid 27859] [client 158.158.54.101:64095] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri Mar 27 05:48:22.159419 2026] [:error] [pid 27851:tid 27881] [client 158.158.54.101:64095] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Fri Mar 27 05:48:22.404260 2026] [:error] [pid 27851:tid 27875] [client 158.158.54.101:64095] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Fri Mar 27 05:48:22.915643 2026] [:error] [pid 27851:tid 27865] [client 158.158.54.101:64095] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Fri Mar 27 05:48:23.188878 2026] [:error] [pid 27851:tid 27865] [client 158.158.54.101:64095] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Fri Mar 27 05:48:23.436199 2026] [:error] [pid 27851:tid 27868] [client 158.158.54.101:64095] File does not exist: /usr/local/apache/htdocs/suspended-page/ws83.php
[Fri Mar 27 05:48:23.679557 2026] [:error] [pid 27851:tid 27870] [client 158.158.54.101:64095] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Fri Mar 27 05:48:23.941586 2026] [:error] [pid 27851:tid 27882] [client 158.158.54.101:64095] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Fri Mar 27 05:48:24.205469 2026] [:error] [pid 27851:tid 27863] [client 158.158.54.101:64095] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Fri Mar 27 05:48:24.559144 2026] [:error] [pid 27851:tid 27869] [client 158.158.54.101:64095] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "acWpqHR2ccxe3RMCLboN-AAAAMs"]
[Fri Mar 27 05:48:25.610823 2026] [:error] [pid 27851:tid 27880] [client 158.158.54.101:64641] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "acWpqXR2ccxe3RMCLboN-wAAANY"]
[Fri Mar 27 05:48:26.321939 2026] [:error] [pid 27851:tid 27859] [client 158.158.54.101:64627] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "acWpqnR2ccxe3RMCLboN_AAAAME"]
[Fri Mar 27 05:48:27.701638 2026] [:error] [pid 4341:tid 4357] [client 158.158.54.101:64175] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "acWpq-KJWrNB5dMlEREFygAAAY4"]
[Fri Mar 27 05:48:28.437785 2026] [:error] [pid 4293:tid 4298] [client 158.158.54.101:65482] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "acWprJLjeJUC3OKtEx9QSAAAAUM"]
[Fri Mar 27 05:48:29.032753 2026] [:error] [pid 4341:tid 4354] [client 158.158.54.101:64123] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "acWpreKJWrNB5dMlEREFzgAAAYs"]
[Fri Mar 27 05:48:29.688648 2026] [:error] [pid 4341:tid 4350] [client 158.158.54.101:65117] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "acWpreKJWrNB5dMlEREF1wAAAYc"]
[Fri Mar 27 05:48:32.346845 2026] [:error] [pid 27743:tid 27768] [client 158.158.54.101:65091] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "acWpsCA46UYYLqzw99D7mAAAAAQ"]
[Fri Mar 27 05:48:33.684048 2026] [:error] [pid 4293:tid 4297] [client 158.158.54.101:65200] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acWpsZLjeJUC3OKtEx9QUgAAAUI"]
[Fri Mar 27 05:48:34.354249 2026] [:error] [pid 63897:tid 63901] [client 158.158.54.101:65135] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acWpsmVSkmYmLu7ycYjrLAAAAQI"]
[Fri Mar 27 05:48:35.248138 2026] [:error] [pid 27851:tid 27862] [client 158.158.54.101:64600] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acWps3R2ccxe3RMCLboOCAAAAMQ"]
[Fri Mar 27 05:48:36.463328 2026] [:error] [pid 4293:tid 4312] [client 158.158.54.101:64153] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acWptJLjeJUC3OKtEx9QXQAAAVE"]
[Fri Mar 27 05:48:37.500142 2026] [:error] [pid 4293:tid 4301] [client 158.158.54.101:64190] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acWptZLjeJUC3OKtEx9QYAAAAUY"]
[Fri Mar 27 05:48:38.264261 2026] [:error] [pid 4341:tid 4362] [client 158.158.54.101:43384] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acWptuKJWrNB5dMlEREF6gAAAZM"]
[Fri Mar 27 05:48:39.106991 2026] [:error] [pid 27851:tid 27860] [client 158.158.54.101:65109] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acWpt3R2ccxe3RMCLboOGAAAAMI"]
[Fri Mar 27 05:48:39.802955 2026] [:error] [pid 4341:tid 4344] [client 158.158.54.101:64581] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acWpt-KJWrNB5dMlEREF9AAAAYE"]
[Fri Mar 27 05:48:40.433419 2026] [:error] [pid 4341:tid 4364] [client 158.158.54.101:43338] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acWpuOKJWrNB5dMlEREF9wAAAZU"]
[Fri Mar 27 05:48:41.291800 2026] [:error] [pid 27851:tid 27864] [client 158.158.54.101:64092] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acWpuXR2ccxe3RMCLboOIwAAAMY"]
[Fri Mar 27 05:48:42.094573 2026] [:error] [pid 27743:tid 27777] [client 158.158.54.101:64097] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acWpuiA46UYYLqzw99D7oAAAAA0"]
[Fri Mar 27 05:48:42.767937 2026] [:error] [pid 27749:tid 27791] [client 158.158.54.101:64577] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acWpusEqyoMni2Q6_X5crgAAAEA"]
[Fri Mar 27 05:48:43.690069 2026] [:error] [pid 4293:tid 4305] [client 158.158.54.101:64611] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acWpu5LjeJUC3OKtEx9QaQAAAUo"]
[Fri Mar 27 05:48:44.502983 2026] [:error] [pid 4341:tid 4367] [client 158.158.54.101:65483] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acWpvOKJWrNB5dMlEREF_gAAAZg"]
[Fri Mar 27 05:48:45.170369 2026] [:error] [pid 4341:tid 4351] [client 158.158.54.101:64668] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acWpveKJWrNB5dMlEREGAQAAAYg"]
[Fri Mar 27 05:48:45.691666 2026] [:error] [pid 27750:tid 27839] [client 158.158.54.101:63708] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acWpvYaSil5rd17ieLw1jAAAAJU"]
[Fri Mar 27 05:48:46.268912 2026] [:error] [pid 4293:tid 4308] [client 158.158.54.101:64681] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acWpvpLjeJUC3OKtEx9QbwAAAU0"]
[Fri Mar 27 05:48:46.856457 2026] [:error] [pid 63897:tid 63920] [client 158.158.54.101:43389] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acWpvmVSkmYmLu7ycYjrTQAAARU"]
[Fri Mar 27 05:48:47.634700 2026] [:error] [pid 63897:tid 63922] [client 158.158.54.101:43390] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acWpv2VSkmYmLu7ycYjrUgAAARc"]
[Fri Mar 27 05:48:48.226154 2026] [:error] [pid 63897:tid 63919] [client 158.158.54.101:65094] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acWpwGVSkmYmLu7ycYjrVQAAARQ"]
[Fri Mar 27 05:48:48.741547 2026] [:error] [pid 27743:tid 27787] [client 158.158.54.101:65199] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "acWpwCA46UYYLqzw99D7rAAAABc"]
[Fri Mar 27 05:48:49.232168 2026] [:error] [pid 4293:tid 4299] [client 158.158.54.101:64678] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "acWpwZLjeJUC3OKtEx9QdAAAAUQ"]
[Fri Mar 27 05:48:49.722695 2026] [:error] [pid 4293:tid 4319] [client 158.158.54.101:43367] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "acWpwZLjeJUC3OKtEx9QeQAAAVg"]
[Fri Mar 27 05:48:50.205347 2026] [:error] [pid 4341:tid 4352] [client 158.158.54.101:65214] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "acWpwuKJWrNB5dMlEREGBgAAAYk"]
[Fri Mar 27 05:48:50.750719 2026] [:error] [pid 63897:tid 63912] [client 158.158.54.101:64653] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "acWpwmVSkmYmLu7ycYjrYwAAAQ0"]
[Fri Mar 27 05:48:51.469844 2026] [:error] [pid 4293:tid 4309] [client 158.158.54.101:43341] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "acWpw5LjeJUC3OKtEx9QfwAAAU4"]
[Fri Mar 27 05:48:52.562533 2026] [:error] [pid 27750:tid 27839] [client 158.158.54.101:63698] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "acWpxIaSil5rd17ieLw1mwAAAJU"]
[Fri Mar 27 05:48:53.851580 2026] [:error] [pid 4341:tid 4356] [client 158.158.54.101:43349] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "acWpxeKJWrNB5dMlEREGFAAAAY0"]
[Fri Mar 27 05:48:54.749772 2026] [:error] [pid 27750:tid 27819] [client 158.158.54.101:43371] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "acWpxoaSil5rd17ieLw1ogAAAIE"]
[Fri Mar 27 05:48:55.878917 2026] [:error] [pid 27750:tid 27822] [client 158.158.54.101:64635] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "acWpx4aSil5rd17ieLw1qwAAAIQ"]
[Fri Mar 27 05:48:57.273707 2026] [:error] [pid 63897:tid 63918] [client 158.158.54.101:65484] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "acWpyWVSkmYmLu7ycYjrcwAAARM"]
[Fri Mar 27 05:48:58.487842 2026] [:error] [pid 27743:tid 27764] [client 158.158.54.101:65138] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "acWpyiA46UYYLqzw99D7uQAAAAA"]
[Fri Mar 27 05:48:59.786035 2026] [:error] [pid 63897:tid 63910] [client 158.158.54.101:64076] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "acWpy2VSkmYmLu7ycYjrewAAAQs"]
[Fri Mar 27 05:49:00.908918 2026] [:error] [pid 27743:tid 27783] [client 158.158.54.101:64605] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "acWpzCA46UYYLqzw99D7wQAAABM"]
[Fri Mar 27 05:49:02.073875 2026] [:error] [pid 4293:tid 4306] [client 158.158.54.101:64071] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "acWpzpLjeJUC3OKtEx9QigAAAUs"]
[Fri Mar 27 05:49:03.223450 2026] [:error] [pid 63897:tid 63905] [client 158.158.54.101:65133] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "acWpz2VSkmYmLu7ycYjrggAAAQY"]
[Fri Mar 27 05:49:04.297470 2026] [:error] [pid 63897:tid 63911] [client 158.158.54.101:64582] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "acWp0GVSkmYmLu7ycYjrjQAAAQw"]
[Fri Mar 27 05:49:05.334822 2026] [:error] [pid 27851:tid 27875] [client 158.158.54.101:65124] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "acWp0XR2ccxe3RMCLboOSwAAANE"]
[Fri Mar 27 05:49:06.042286 2026] [:error] [pid 27750:tid 27827] [client 158.158.54.101:65501] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "acWp0oaSil5rd17ieLw1uAAAAIk"]
[Fri Mar 27 05:49:06.942977 2026] [:error] [pid 27750:tid 27833] [client 158.158.54.101:64064] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "acWp0oaSil5rd17ieLw1uwAAAI8"]
[Fri Mar 27 05:49:07.586732 2026] [:error] [pid 63897:tid 63909] [client 158.158.54.101:61664] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "acWp02VSkmYmLu7ycYjrnAAAAQo"]
[Fri Mar 27 05:49:08.554812 2026] [:error] [pid 4293:tid 4319] [client 158.158.54.101:64594] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "acWp1JLjeJUC3OKtEx9QjgAAAVg"]
[Fri Mar 27 05:49:09.141786 2026] [:error] [pid 27749:tid 27797] [client 158.158.54.101:43348] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "acWp1cEqyoMni2Q6_X5cvgAAAEY"]
[Fri Mar 27 05:49:10.115082 2026] [:error] [pid 4341:tid 4359] [client 158.158.54.101:64110] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "acWp1uKJWrNB5dMlEREGZwAAAZA"]
[Fri Mar 27 05:49:10.909559 2026] [:error] [pid 4341:tid 4348] [client 158.158.54.101:64617] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "acWp1uKJWrNB5dMlEREGbwAAAYU"]
[Fri Mar 27 05:49:11.508017 2026] [:error] [pid 4293:tid 4298] [client 158.158.54.101:64111] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "acWp15LjeJUC3OKtEx9QkwAAAUM"]
[Fri Mar 27 05:49:12.336460 2026] [:error] [pid 4293:tid 4304] [client 158.158.54.101:64610] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "acWp2JLjeJUC3OKtEx9QlgAAAUk"]
[Fri Mar 27 05:49:13.003913 2026] [:error] [pid 27743:tid 27784] [client 158.158.54.101:64580] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "acWp2SA46UYYLqzw99D7zQAAABQ"]
[Fri Mar 27 05:49:14.253861 2026] [:error] [pid 27750:tid 27836] [client 158.158.54.101:65159] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "acWp2oaSil5rd17ieLw1wAAAAJI"]
[Fri Mar 27 05:49:14.897483 2026] [:error] [pid 27750:tid 27828] [client 158.158.54.101:64108] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "acWp2oaSil5rd17ieLw1wQAAAIo"]
[Fri Mar 27 05:49:20.806643 2026] [:error] [pid 63897:tid 63917] [client 158.158.54.101:64102] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "acWp4GVSkmYmLu7ycYjrzgAAARI"]
[Fri Mar 27 05:49:23.595112 2026] [:error] [pid 4341:tid 4351] [client 158.158.54.101:63799] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "acWp4-KJWrNB5dMlEREGtwAAAYg"]
[Fri Mar 27 05:49:25.159482 2026] [:error] [pid 4293:tid 4316] [client 158.158.54.101:64087] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Fri Mar 27 05:49:25.430855 2026] [:error] [pid 4293:tid 4300] [client 158.158.54.101:64087] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Fri Mar 27 05:49:25.676160 2026] [:error] [pid 4293:tid 4310] [client 158.158.54.101:64087] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Fri Mar 27 05:49:25.931155 2026] [:error] [pid 4293:tid 4297] [client 158.158.54.101:64087] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Fri Mar 27 05:49:26.177543 2026] [:error] [pid 4293:tid 4302] [client 158.158.54.101:64087] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Fri Mar 27 05:49:26.420892 2026] [:error] [pid 4293:tid 4305] [client 158.158.54.101:64087] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Fri Mar 27 05:49:26.697608 2026] [:error] [pid 4293:tid 4296] [client 158.158.54.101:64087] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Fri Mar 27 05:49:26.955394 2026] [:error] [pid 4293:tid 4300] [client 158.158.54.101:64087] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Fri Mar 27 05:49:27.499640 2026] [:error] [pid 4293:tid 4310] [client 158.158.54.101:64087] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Fri Mar 27 05:49:27.741843 2026] [:error] [pid 4293:tid 4299] [client 158.158.54.101:64087] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Fri Mar 27 05:49:28.224529 2026] [:error] [pid 4293:tid 4311] [client 158.158.54.101:64087] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "acWp6JLjeJUC3OKtEx9QwAAAAVA"]
[Fri Mar 27 05:49:29.204694 2026] [:error] [pid 27750:tid 27839] [client 158.158.54.101:65184] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "acWp6YaSil5rd17ieLw10AAAAJU"]
[Fri Mar 27 05:49:29.843697 2026] [:error] [pid 27749:tid 27807] [client 158.158.54.101:64149] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "acWp6cEqyoMni2Q6_X5c1QAAAFA"]
[Fri Mar 27 05:49:30.489615 2026] [:error] [pid 4293:tid 4315] [client 158.158.54.101:64185] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "acWp6pLjeJUC3OKtEx9QwwAAAVQ"]
[Fri Mar 27 05:49:31.250702 2026] [:error] [pid 27749:tid 27811] [client 158.158.54.101:64188] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "acWp68EqyoMni2Q6_X5c2AAAAFQ"]
[Fri Mar 27 05:49:31.903338 2026] [:error] [pid 4293:tid 4310] [client 158.158.54.101:65178] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "acWp65LjeJUC3OKtEx9QxwAAAU8"]
[Fri Mar 27 05:49:32.755560 2026] [:error] [pid 27750:tid 27821] [client 158.158.54.101:63307] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "acWp7IaSil5rd17ieLw11QAAAIM"]
[Fri Mar 27 05:49:33.304143 2026] [:error] [pid 27750:tid 27838] [client 158.158.54.101:64647] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "acWp7YaSil5rd17ieLw11gAAAJQ"]
[Fri Mar 27 05:49:33.801546 2026] [:error] [pid 4293:tid 4316] [client 158.158.54.101:65489] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "acWp7ZLjeJUC3OKtEx9QzgAAAVU"]
[Fri Mar 27 05:49:34.389978 2026] [:error] [pid 4293:tid 4297] [client 158.158.54.101:65498] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "acWp7pLjeJUC3OKtEx9Q1QAAAUI"]
[Fri Mar 27 05:49:34.999267 2026] [:error] [pid 4341:tid 4353] [client 158.158.54.101:65205] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "acWp7uKJWrNB5dMlEREGwgAAAYo"]
[Fri Mar 27 05:49:35.549959 2026] [:error] [pid 4293:tid 4314] [client 158.158.54.101:65162] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "acWp75LjeJUC3OKtEx9Q3AAAAVM"]
[Fri Mar 27 05:49:36.119499 2026] [:error] [pid 4293:tid 4308] [client 158.158.54.101:43333] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acWp8JLjeJUC3OKtEx9Q4AAAAU0"]
[Fri Mar 27 05:49:36.793745 2026] [:error] [pid 4293:tid 4302] [client 158.158.54.101:43343] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acWp8JLjeJUC3OKtEx9Q5gAAAUc"]
[Fri Mar 27 05:49:37.337739 2026] [:error] [pid 27749:tid 27798] [client 158.158.54.101:63747] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acWp8cEqyoMni2Q6_X5c4QAAAEc"]
[Fri Mar 27 05:49:38.065131 2026] [:error] [pid 27851:tid 27867] [client 158.158.54.101:64644] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acWp8nR2ccxe3RMCLboOcQAAAMk"]
[Fri Mar 27 05:49:38.767427 2026] [:error] [pid 27750:tid 27825] [client 158.158.54.101:64660] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "acWp8oaSil5rd17ieLw12wAAAIc"]
[Fri Mar 27 05:49:39.309718 2026] [:error] [pid 27851:tid 27870] [client 158.158.54.101:65496] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "acWp83R2ccxe3RMCLboOcwAAAMw"]
[Fri Mar 27 05:49:39.857844 2026] [:error] [pid 63897:tid 63923] [client 158.158.54.101:64629] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "acWp82VSkmYmLu7ycYjr6gAAARg"]
[Fri Mar 27 05:49:40.626012 2026] [:error] [pid 4341:tid 4354] [client 158.158.54.101:65163] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "acWp9OKJWrNB5dMlEREGywAAAYs"]
[Fri Mar 27 05:49:41.638816 2026] [:error] [pid 27750:tid 27820] [client 158.158.54.101:63412] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acWp9YaSil5rd17ieLw13wAAAII"]
[Fri Mar 27 05:49:42.460145 2026] [:error] [pid 27851:tid 27862] [client 158.158.54.101:65518] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acWp9nR2ccxe3RMCLboOeAAAAMQ"]
[Fri Mar 27 05:49:43.252270 2026] [:error] [pid 4341:tid 4356] [client 158.158.54.101:65212] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acWp9-KJWrNB5dMlEREG0wAAAY0"]
[Fri Mar 27 05:49:43.899997 2026] [:error] [pid 63897:tid 63915] [client 158.158.54.101:63802] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acWp92VSkmYmLu7ycYjr7gAAARA"]
[Fri Mar 27 05:49:44.508665 2026] [:error] [pid 27750:tid 27831] [client 158.158.54.101:43369] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/44.php"] [unique_id "acWp-IaSil5rd17ieLw15QAAAI0"]
[Fri Mar 27 05:49:45.101899 2026] [:error] [pid 4341:tid 4354] [client 158.158.54.101:64615] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/44.php"] [unique_id "acWp-eKJWrNB5dMlEREG2AAAAYs"]
[Fri Mar 27 05:49:45.922588 2026] [:error] [pid 27749:tid 27808] [client 158.158.54.101:65198] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/44.php"] [unique_id "acWp-cEqyoMni2Q6_X5c7gAAAFE"]
[Fri Mar 27 05:49:46.671656 2026] [:error] [pid 27749:tid 27799] [client 158.158.54.101:43363] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/44.php"] [unique_id "acWp-sEqyoMni2Q6_X5c8wAAAEg"]
[Fri Mar 27 05:49:47.197152 2026] [:error] [pid 27851:tid 27873] [client 158.158.54.101:64625] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws49.php"] [unique_id "acWp-3R2ccxe3RMCLboOegAAAM8"]
[Fri Mar 27 05:49:48.510529 2026] [:error] [pid 27743:tid 27787] [client 158.158.54.101:65480] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws49.php"] [unique_id "acWp_CA46UYYLqzw99D78gAAABc"]
[Fri Mar 27 05:49:49.036979 2026] [:error] [pid 27743:tid 27770] [client 158.158.54.101:65176] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws49.php"] [unique_id "acWp_SA46UYYLqzw99D78wAAAAY"]
[Fri Mar 27 05:49:49.956014 2026] [:error] [pid 27750:tid 27839] [client 158.158.54.101:64632] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws49.php"] [unique_id "acWp_YaSil5rd17ieLw18AAAAJU"]
[Fri Mar 27 05:49:50.492773 2026] [:error] [pid 63897:tid 63909] [client 158.158.54.101:64642] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amp.php"] [unique_id "acWp_mVSkmYmLu7ycYjr_QAAAQo"]
[Fri Mar 27 05:49:51.361442 2026] [:error] [pid 63897:tid 63913] [client 158.158.54.101:65106] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amp.php"] [unique_id "acWp_2VSkmYmLu7ycYjsBgAAAQ4"]
[Fri Mar 27 05:49:52.159173 2026] [:error] [pid 27750:tid 27819] [client 158.158.54.101:64599] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amp.php"] [unique_id "acWqAIaSil5rd17ieLw19gAAAIE"]
[Fri Mar 27 05:49:53.566247 2026] [:error] [pid 4341:tid 4347] [client 158.158.54.101:64133] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amp.php"] [unique_id "acWqAeKJWrNB5dMlEREG6QAAAYQ"]
[Fri Mar 27 05:49:54.821053 2026] [:error] [pid 4341:tid 4354] [client 158.158.54.101:65112] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "acWqAuKJWrNB5dMlEREG7QAAAYs"]
[Fri Mar 27 05:49:55.595195 2026] [:error] [pid 4341:tid 4355] [client 158.158.54.101:43361] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "acWqA-KJWrNB5dMlEREG8AAAAYw"]
[Fri Mar 27 05:49:56.787277 2026] [:error] [pid 4341:tid 4356] [client 158.158.54.101:65173] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "acWqBOKJWrNB5dMlEREG9AAAAY0"]
[Fri Mar 27 05:49:58.059814 2026] [:error] [pid 63897:tid 63911] [client 158.158.54.101:64663] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "acWqBmVSkmYmLu7ycYjsFAAAAQw"]
[Fri Mar 27 05:49:59.212566 2026] [:error] [pid 4293:tid 4295] [client 158.158.54.101:64146] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "acWqB5LjeJUC3OKtEx9RBwAAAUA"]
[Fri Mar 27 05:50:00.998294 2026] [:error] [pid 63897:tid 63908] [client 158.158.54.101:65157] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "acWqCGVSkmYmLu7ycYjsJQAAAQk"]
[Fri Mar 27 05:50:02.142367 2026] [:error] [pid 63897:tid 63902] [client 158.158.54.101:64621] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "acWqCmVSkmYmLu7ycYjsMgAAAQM"]
[Fri Mar 27 05:50:03.551025 2026] [:error] [pid 4341:tid 4366] [client 158.158.54.101:64067] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "acWqC-KJWrNB5dMlEREG_gAAAZc"]
[Fri Mar 27 05:50:05.699397 2026] [:error] [pid 4341:tid 4362] [client 158.158.54.101:64191] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "acWqDeKJWrNB5dMlEREHAwAAAZM"]
[Fri Mar 27 05:50:07.103203 2026] [:error] [pid 4293:tid 4303] [client 158.158.54.101:65485] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "acWqD5LjeJUC3OKtEx9RGgAAAUg"]
[Fri Mar 27 05:50:07.810276 2026] [:error] [pid 63897:tid 63912] [client 158.158.54.101:64699] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "acWqD2VSkmYmLu7ycYjsQQAAAQ0"]
[Fri Mar 27 05:50:08.567765 2026] [:error] [pid 27851:tid 27876] [client 158.158.54.101:64186] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "acWqEHR2ccxe3RMCLboOwAAAANI"]
[Fri Mar 27 05:50:09.301491 2026] [:error] [pid 4341:tid 4355] [client 158.158.54.101:65154] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "acWqEeKJWrNB5dMlEREHEQAAAYw"]
[Fri Mar 27 05:50:10.182712 2026] [:error] [pid 4341:tid 4344] [client 158.158.54.101:65129] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "acWqEuKJWrNB5dMlEREHFgAAAYE"]
[Fri Mar 27 05:50:11.545993 2026] [:error] [pid 63897:tid 63917] [client 158.158.54.101:65090] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "acWqE2VSkmYmLu7ycYjsTAAAARI"]
[Fri Mar 27 05:50:12.848824 2026] [:error] [pid 27750:tid 27823] [client 158.158.54.101:63771] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "acWqFIaSil5rd17ieLw2LgAAAIU"]
[Fri Mar 27 05:50:15.570938 2026] [:error] [pid 4293:tid 4313] [client 158.158.54.101:65507] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "acWqF5LjeJUC3OKtEx9RLQAAAVI"]
[Fri Mar 27 05:50:17.112743 2026] [:error] [pid 63897:tid 63905] [client 158.158.54.101:61693] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "acWqGWVSkmYmLu7ycYjsUwAAAQY"]
[Fri Mar 27 05:50:18.011943 2026] [:error] [pid 63897:tid 63915] [client 158.158.54.101:65514] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "acWqGmVSkmYmLu7ycYjsVwAAARA"]
[Fri Mar 27 05:50:18.681366 2026] [:error] [pid 27749:tid 27805] [client 158.158.54.101:64655] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "acWqGsEqyoMni2Q6_X5dBgAAAE4"]
[Fri Mar 27 05:50:21.467554 2026] [:error] [pid 27743:tid 27768] [client 158.158.54.101:63748] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acWqHSA46UYYLqzw99D8CgAAAAQ"]
[Fri Mar 27 05:50:22.766653 2026] [:error] [pid 4341:tid 4354] [client 158.158.54.101:62966] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acWqHuKJWrNB5dMlEREHJAAAAYs"]
[Fri Mar 27 05:50:25.813471 2026] [:error] [pid 27749:tid 27802] [client 158.158.54.101:43374] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acWqIcEqyoMni2Q6_X5dDQAAAEs"]
[Fri Mar 27 05:50:27.312001 2026] [:error] [pid 4293:tid 4300] [client 158.158.54.101:62924] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Fri Mar 27 05:50:27.560851 2026] [:error] [pid 4293:tid 4295] [client 158.158.54.101:62924] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Fri Mar 27 05:50:27.804860 2026] [:error] [pid 4293:tid 4313] [client 158.158.54.101:62924] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Fri Mar 27 05:50:28.047759 2026] [:error] [pid 4293:tid 4311] [client 158.158.54.101:62924] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Fri Mar 27 05:50:29.679612 2026] [:error] [pid 4293:tid 4311] [client 158.158.54.101:62924] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Sat Mar 28 05:48:17.365349 2026] [:error] [pid 43579:tid 43623] [client 20.220.13.237:1933] File does not exist: /usr/local/apache/htdocs/suspended-page/ws87.php
[Sat Mar 28 05:48:17.803705 2026] [:error] [pid 43579:tid 43620] [client 20.220.13.237:1933] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sat Mar 28 05:48:18.014951 2026] [:error] [pid 43579:tid 43617] [client 20.220.13.237:1933] File does not exist: /usr/local/apache/htdocs/suspended-page/56c53.php
[Sat Mar 28 05:48:18.224788 2026] [:error] [pid 43579:tid 43631] [client 20.220.13.237:1933] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Sat Mar 28 05:48:19.958184 2026] [:error] [pid 43579:tid 43626] [client 20.220.13.237:1933] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Sat Mar 28 05:48:20.168015 2026] [:error] [pid 43579:tid 43632] [client 20.220.13.237:1933] File does not exist: /usr/local/apache/htdocs/suspended-page/abrand.php
[Sat Mar 28 05:48:20.377138 2026] [:error] [pid 43579:tid 43615] [client 20.220.13.237:1933] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sat Mar 28 05:48:20.585483 2026] [:error] [pid 43579:tid 43618] [client 20.220.13.237:1933] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sat Mar 28 05:48:20.790985 2026] [:error] [pid 43579:tid 43612] [client 20.220.13.237:1933] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "acb7JCRqN4JVI8gB7Al9LQAAAoQ"]
[Sat Mar 28 05:48:21.202345 2026] [:error] [pid 43578:tid 43596] [client 20.220.13.237:2014] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "acb7JXNG2YdGm41aN8LPegAAAk8"]
[Sat Mar 28 05:48:21.611467 2026] [:error] [pid 64860:tid 64912] [client 20.220.13.237:2009] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "acb7JRkU3N0pg_4aEL-hpAAAAEQ"]
[Sat Mar 28 05:48:22.226536 2026] [:error] [pid 64860:tid 64921] [client 20.220.13.237:1984] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "acb7JhkU3N0pg_4aEL-hpwAAAE0"]
[Sat Mar 28 05:48:22.843561 2026] [:error] [pid 34631:tid 34679] [client 20.220.13.237:2024] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "acb7JjtzjMMS6kojpeQPGQAAAdM"]
[Sat Mar 28 05:48:23.257786 2026] [:error] [pid 64861:tid 64949] [client 20.220.13.237:2040] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "acb7J-xK22_lUN2kvnU85gAAAI4"]
[Sat Mar 28 05:48:23.675118 2026] [:error] [pid 64861:tid 64943] [client 20.220.13.237:1999] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "acb7J-xK22_lUN2kvnU85wAAAIg"]
[Sat Mar 28 05:48:24.087804 2026] [:error] [pid 64860:tid 64914] [client 20.220.13.237:2027] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "acb7KBkU3N0pg_4aEL-htAAAAEY"]
[Sat Mar 28 05:48:24.774976 2026] [:error] [pid 64860:tid 64919] [client 20.220.13.237:1998] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "acb7KBkU3N0pg_4aEL-htgAAAEs"]
[Sat Mar 28 05:48:25.444870 2026] [:error] [pid 64861:tid 64941] [client 20.220.13.237:2017] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "acb7KexK22_lUN2kvnU88AAAAIY"]
[Sat Mar 28 05:48:25.859473 2026] [:error] [pid 64861:tid 64944] [client 20.220.13.237:1934] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "acb7KexK22_lUN2kvnU88wAAAIk"]
[Sat Mar 28 05:48:26.280433 2026] [:error] [pid 34597:tid 34610] [client 20.220.13.237:1938] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "acb7KoluI7-e5s1cafcH_AAAAUk"]
[Sat Mar 28 05:48:26.696413 2026] [:error] [pid 64860:tid 64912] [client 20.220.13.237:1952] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "acb7KhkU3N0pg_4aEL-hugAAAEQ"]
[Sat Mar 28 05:48:27.110747 2026] [:error] [pid 64860:tid 64925] [client 20.220.13.237:1932] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "acb7KxkU3N0pg_4aEL-hvgAAAFE"]
[Sat Mar 28 05:48:27.544646 2026] [:error] [pid 64860:tid 64919] [client 20.220.13.237:2034] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "acb7KxkU3N0pg_4aEL-hwAAAAEs"]
[Sat Mar 28 05:48:28.183435 2026] [:error] [pid 64860:tid 64912] [client 20.220.13.237:1970] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "acb7LBkU3N0pg_4aEL-hwwAAAEQ"]
[Sat Mar 28 05:48:28.828379 2026] [:error] [pid 43579:tid 43622] [client 20.220.13.237:1935] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bootstrap.php"] [unique_id "acb7LCRqN4JVI8gB7Al9MAAAAo4"]
[Sat Mar 28 05:48:29.241754 2026] [:error] [pid 34631:tid 34673] [client 20.220.13.237:1928] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bootstrap.php"] [unique_id "acb7LTtzjMMS6kojpeQPHAAAAc0"]
[Sat Mar 28 05:48:29.657863 2026] [:error] [pid 64860:tid 64932] [client 20.220.13.237:2020] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bootstrap.php"] [unique_id "acb7LRkU3N0pg_4aEL-hywAAAFg"]
[Sat Mar 28 05:48:30.330793 2026] [:error] [pid 64860:tid 64921] [client 20.220.13.237:1930] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bootstrap.php"] [unique_id "acb7LhkU3N0pg_4aEL-h0AAAAE0"]
[Sat Mar 28 05:48:31.071466 2026] [:error] [pid 64860:tid 64911] [client 20.220.13.237:1931] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "acb7LxkU3N0pg_4aEL-h1AAAAEM"]
[Sat Mar 28 05:48:31.481617 2026] [:error] [pid 64859:tid 64896] [client 20.220.13.237:2045] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "acb7L23qEBHXq3rHdBmgoAAAAA8"]
[Sat Mar 28 05:48:31.893582 2026] [:error] [pid 34597:tid 34620] [client 20.220.13.237:2002] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "acb7L4luI7-e5s1cafcIAAAAAVM"]
[Sat Mar 28 05:48:32.308160 2026] [:error] [pid 43547:tid 43567] [client 20.220.13.237:1864] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "acb7MD4ZEfdetXP-9aCngwAAAhI"]
[Sat Mar 28 05:48:32.720428 2026] [:error] [pid 34597:tid 34609] [client 20.220.13.237:2026] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "acb7MIluI7-e5s1cafcIAwAAAUg"]
[Sat Mar 28 05:48:33.131371 2026] [:error] [pid 64859:tid 64902] [client 20.220.13.237:1990] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "acb7MW3qEBHXq3rHdBmgpgAAABU"]
[Sat Mar 28 05:48:33.550147 2026] [:error] [pid 64860:tid 64919] [client 20.220.13.237:1859] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "acb7MRkU3N0pg_4aEL-h5QAAAEs"]
[Sat Mar 28 05:48:33.966001 2026] [:error] [pid 64860:tid 64927] [client 20.220.13.237:1959] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "acb7MRkU3N0pg_4aEL-h7AAAAFM"]
[Sat Mar 28 05:48:34.384368 2026] [:error] [pid 34631:tid 34674] [client 20.220.13.237:1995] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "acb7MjtzjMMS6kojpeQPIwAAAc4"]
[Sat Mar 28 05:48:34.800637 2026] [:error] [pid 64860:tid 64924] [client 20.220.13.237:1936] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "acb7MhkU3N0pg_4aEL-h_gAAAFA"]
[Sat Mar 28 05:48:35.220081 2026] [:error] [pid 64860:tid 64920] [client 20.220.13.237:1961] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "acb7MxkU3N0pg_4aEL-iBQAAAEw"]
[Sat Mar 28 05:48:35.633980 2026] [:error] [pid 64859:tid 64882] [client 20.220.13.237:1948] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "acb7M23qEBHXq3rHdBmgrAAAAAE"]
[Sat Mar 28 05:48:36.273841 2026] [:error] [pid 34631:tid 34681] [client 20.220.13.237:2008] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "acb7NDtzjMMS6kojpeQPNgAAAdU"]
[Sat Mar 28 05:48:37.244525 2026] [:error] [pid 34631:tid 34675] [client 20.220.13.237:2037] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "acb7NTtzjMMS6kojpeQPOQAAAc8"]
[Sat Mar 28 05:48:37.850586 2026] [:error] [pid 64966:tid 64996] [client 20.220.13.237:2016] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "acb7NdfSvF5AFfSuKxXttgAAANc"]
[Sat Mar 28 05:48:38.268715 2026] [:error] [pid 64860:tid 64931] [client 20.220.13.237:1992] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "acb7NhkU3N0pg_4aEL-iJwAAAFc"]
[Sat Mar 28 05:48:38.687180 2026] [:error] [pid 34631:tid 34669] [client 20.220.13.237:2019] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acb7NjtzjMMS6kojpeQPQAAAAck"]
[Sat Mar 28 05:48:39.105586 2026] [:error] [pid 43578:tid 43600] [client 20.220.13.237:1915] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acb7N3NG2YdGm41aN8LPgQAAAlM"]
[Sat Mar 28 05:48:39.519319 2026] [:error] [pid 34631:tid 34660] [client 20.220.13.237:2015] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acb7NztzjMMS6kojpeQPQwAAAcA"]
[Sat Mar 28 05:48:39.934076 2026] [:error] [pid 64859:tid 64891] [client 20.220.13.237:1883] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acb7N23qEBHXq3rHdBmgtAAAAAo"]
[Sat Mar 28 05:48:40.345762 2026] [:error] [pid 64861:tid 64941] [client 20.220.13.237:2030] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acb7OOxK22_lUN2kvnU9BwAAAIY"]
[Sat Mar 28 05:48:40.757025 2026] [:error] [pid 64966:tid 64997] [client 20.220.13.237:1997] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acb7ONfSvF5AFfSuKxXtugAAANg"]
[Sat Mar 28 05:48:41.169965 2026] [:error] [pid 64860:tid 64927] [client 20.220.13.237:2001] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acb7ORkU3N0pg_4aEL-iLQAAAFM"]
[Sat Mar 28 05:48:41.876898 2026] [:error] [pid 64860:tid 64926] [client 20.220.13.237:2005] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acb7ORkU3N0pg_4aEL-iMwAAAFI"]
[Sat Mar 28 05:48:43.015419 2026] [:error] [pid 34597:tid 34608] [client 20.220.13.237:1963] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "acb7O4luI7-e5s1cafcIHAAAAUc"]
[Sat Mar 28 05:48:43.844075 2026] [:error] [pid 64861:tid 64948] [client 20.220.13.237:2012] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "acb7O-xK22_lUN2kvnU9IwAAAI0"]
[Sat Mar 28 05:48:44.260557 2026] [:error] [pid 43578:tid 43604] [client 20.220.13.237:1922] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "acb7PHNG2YdGm41aN8LPjwAAAlc"]
[Sat Mar 28 05:48:44.674406 2026] [:error] [pid 34631:tid 34666] [client 20.220.13.237:1962] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "acb7PDtzjMMS6kojpeQPUgAAAcY"]
[Sat Mar 28 05:48:45.096324 2026] [:error] [pid 43547:tid 43567] [client 20.220.13.237:2010] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/okxh.php"] [unique_id "acb7PT4ZEfdetXP-9aCnkgAAAhI"]
[Sat Mar 28 05:48:45.511063 2026] [:error] [pid 64861:tid 64942] [client 20.220.13.237:1940] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/okxh.php"] [unique_id "acb7PexK22_lUN2kvnU9KgAAAIc"]
[Sat Mar 28 05:48:46.339517 2026] [:error] [pid 43578:tid 43594] [client 20.220.13.237:2028] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/okxh.php"] [unique_id "acb7PnNG2YdGm41aN8LPmQAAAk0"]
[Sat Mar 28 05:48:47.189874 2026] [:error] [pid 34631:tid 34673] [client 20.220.13.237:1976] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/okxh.php"] [unique_id "acb7PztzjMMS6kojpeQPYQAAAc0"]
[Sat Mar 28 05:48:47.981350 2026] [:error] [pid 64860:tid 64925] [client 20.220.13.237:1971] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/csv.php"] [unique_id "acb7PxkU3N0pg_4aEL-iRQAAAFE"]
[Sat Mar 28 05:48:48.875943 2026] [:error] [pid 34597:tid 34623] [client 20.220.13.237:1949] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/csv.php"] [unique_id "acb7QIluI7-e5s1cafcIOAAAAVY"]
[Sat Mar 28 05:48:49.643777 2026] [:error] [pid 34597:tid 34620] [client 20.220.13.237:1924] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/csv.php"] [unique_id "acb7QYluI7-e5s1cafcIPgAAAVM"]
[Sat Mar 28 05:48:50.365703 2026] [:error] [pid 34597:tid 34607] [client 20.220.13.237:1925] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/csv.php"] [unique_id "acb7QoluI7-e5s1cafcIQQAAAUY"]
[Sat Mar 28 05:48:50.793593 2026] [:error] [pid 64861:tid 64938] [client 20.220.13.237:1989] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "acb7QuxK22_lUN2kvnU9TgAAAIM"]
[Sat Mar 28 05:48:51.419196 2026] [:error] [pid 34597:tid 34603] [client 20.220.13.237:1958] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "acb7Q4luI7-e5s1cafcISwAAAUI"]
[Sat Mar 28 05:48:52.107195 2026] [:error] [pid 43578:tid 43600] [client 20.220.13.237:1973] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "acb7RHNG2YdGm41aN8LPqAAAAlM"]
[Sat Mar 28 05:48:52.524026 2026] [:error] [pid 64860:tid 64928] [client 20.220.13.237:1927] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "acb7RBkU3N0pg_4aEL-iVgAAAFQ"]
[Sat Mar 28 05:48:52.938305 2026] [:error] [pid 64861:tid 64947] [client 20.220.13.237:2038] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lm15.php"] [unique_id "acb7ROxK22_lUN2kvnU9VgAAAIw"]
[Sat Mar 28 05:48:53.356383 2026] [:error] [pid 64860:tid 64914] [client 20.220.13.237:1882] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lm15.php"] [unique_id "acb7RRkU3N0pg_4aEL-iWQAAAEY"]
[Sat Mar 28 05:48:53.766958 2026] [:error] [pid 34631:tid 34674] [client 20.220.13.237:1923] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lm15.php"] [unique_id "acb7RTtzjMMS6kojpeQPdQAAAc4"]
[Sat Mar 28 05:48:54.177640 2026] [:error] [pid 64861:tid 64953] [client 20.220.13.237:2046] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lm15.php"] [unique_id "acb7RuxK22_lUN2kvnU9XQAAAJI"]
[Sat Mar 28 05:48:54.597925 2026] [:error] [pid 64859:tid 64892] [client 20.220.13.237:2023] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/clss.php"] [unique_id "acb7Rm3qEBHXq3rHdBmgyAAAAAs"]
[Sat Mar 28 05:48:55.029934 2026] [:error] [pid 43578:tid 43594] [client 20.220.13.237:1981] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/clss.php"] [unique_id "acb7R3NG2YdGm41aN8LPqwAAAk0"]
[Sat Mar 28 05:48:55.448375 2026] [:error] [pid 43579:tid 43616] [client 20.220.13.237:1957] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/clss.php"] [unique_id "acb7RyRqN4JVI8gB7Al9TgAAAog"]
[Sat Mar 28 05:48:55.860118 2026] [:error] [pid 64861:tid 64956] [client 20.220.13.237:1941] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/clss.php"] [unique_id "acb7R-xK22_lUN2kvnU9agAAAJU"]
[Sat Mar 28 05:48:56.284482 2026] [:error] [pid 34631:tid 34667] [client 20.220.13.237:1877] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acb7SDtzjMMS6kojpeQPgAAAAcc"]
[Sat Mar 28 05:48:57.103496 2026] [:error] [pid 34631:tid 34668] [client 20.220.13.237:1926] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acb7STtzjMMS6kojpeQPgwAAAcg"]
[Sat Mar 28 05:48:57.925816 2026] [:error] [pid 64861:tid 64959] [client 20.220.13.237:2047] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acb7SexK22_lUN2kvnU9cgAAAJg"]
[Sat Mar 28 05:48:58.341216 2026] [:error] [pid 64860:tid 64917] [client 20.220.13.237:1881] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acb7ShkU3N0pg_4aEL-iZgAAAEk"]
[Sat Mar 28 05:48:58.764506 2026] [:error] [pid 64966:tid 64997] [client 20.220.13.237:1939] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5b9ac.php"] [unique_id "acb7StfSvF5AFfSuKxXtzAAAANg"]
[Sat Mar 28 05:48:59.182571 2026] [:error] [pid 64861:tid 64941] [client 20.220.13.237:1943] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5b9ac.php"] [unique_id "acb7S-xK22_lUN2kvnU9hwAAAIY"]
[Sat Mar 28 05:48:59.599027 2026] [:error] [pid 64860:tid 64914] [client 20.220.13.237:2011] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5b9ac.php"] [unique_id "acb7SxkU3N0pg_4aEL-ibAAAAEY"]
[Sat Mar 28 05:49:00.023537 2026] [:error] [pid 2877:tid 2902] [client 20.220.13.237:1996] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5b9ac.php"] [unique_id "acb7TLgM4xL1Xj409YTVkwAAARc"]
[Sat Mar 28 05:49:00.442997 2026] [:error] [pid 64860:tid 64931] [client 20.220.13.237:1985] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "acb7TBkU3N0pg_4aEL-ibwAAAFc"]
[Sat Mar 28 05:49:00.861310 2026] [:error] [pid 34597:tid 34602] [client 20.220.13.237:2029] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "acb7TIluI7-e5s1cafcIYgAAAUE"]
[Sat Mar 28 05:49:01.277859 2026] [:error] [pid 64966:tid 64973] [client 20.220.13.237:1978] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "acb7TdfSvF5AFfSuKxXt0wAAAMA"]
[Sat Mar 28 05:49:01.690999 2026] [:error] [pid 2877:tid 2900] [client 20.220.13.237:1899] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "acb7TbgM4xL1Xj409YTVmAAAARU"]
[Sat Mar 28 05:49:02.110581 2026] [:error] [pid 64859:tid 64892] [client 20.220.13.237:1975] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "acb7Tm3qEBHXq3rHdBmg2AAAAAs"]
[Sat Mar 28 05:49:02.523069 2026] [:error] [pid 64861:tid 64937] [client 20.220.13.237:1861] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "acb7TuxK22_lUN2kvnU9mgAAAII"]
[Sat Mar 28 05:49:02.945634 2026] [:error] [pid 34631:tid 34665] [client 20.220.13.237:2000] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "acb7TjtzjMMS6kojpeQPlAAAAcU"]
[Sat Mar 28 05:49:03.372935 2026] [:error] [pid 64966:tid 64987] [client 20.220.13.237:1950] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "acb7T9fSvF5AFfSuKxXt2QAAAM4"]
[Sat Mar 28 05:49:03.790353 2026] [:error] [pid 64860:tid 64925] [client 20.220.13.237:1921] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "acb7TxkU3N0pg_4aEL-ifQAAAFE"]
[Sat Mar 28 05:49:04.206133 2026] [:error] [pid 2877:tid 2883] [client 20.220.13.237:2044] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "acb7ULgM4xL1Xj409YTVnQAAAQQ"]
[Sat Mar 28 05:49:04.629344 2026] [:error] [pid 2877:tid 2879] [client 20.220.13.237:1908] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "acb7ULgM4xL1Xj409YTVnwAAAQA"]
[Sat Mar 28 05:49:05.055291 2026] [:error] [pid 2877:tid 2899] [client 20.220.13.237:1910] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "acb7UbgM4xL1Xj409YTVogAAARQ"]
[Sat Mar 28 05:49:05.787709 2026] [:error] [pid 64860:tid 64909] [client 20.220.13.237:1873] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "acb7URkU3N0pg_4aEL-ihQAAAEE"]
[Sat Mar 28 05:49:06.578523 2026] [:error] [pid 64966:tid 64983] [client 20.220.13.237:1954] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "acb7UtfSvF5AFfSuKxXt3gAAAMo"]
[Sat Mar 28 05:49:07.001177 2026] [:error] [pid 43578:tid 43586] [client 20.220.13.237:1867] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "acb7UnNG2YdGm41aN8LPwgAAAkU"]
[Sat Mar 28 05:49:07.686357 2026] [:error] [pid 64860:tid 64919] [client 20.220.13.237:1916] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "acb7UxkU3N0pg_4aEL-ioAAAAEs"]
[Sat Mar 28 05:49:08.782366 2026] [:error] [pid 64860:tid 64912] [client 20.220.13.237:1795] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5e0a.php"] [unique_id "acb7VBkU3N0pg_4aEL-isgAAAEQ"]
[Sat Mar 28 05:49:10.011448 2026] [:error] [pid 34631:tid 34667] [client 20.220.13.237:1937] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5e0a.php"] [unique_id "acb7VjtzjMMS6kojpeQPmgAAAcc"]
[Sat Mar 28 05:49:10.787918 2026] [:error] [pid 64860:tid 64925] [client 20.220.13.237:1872] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5e0a.php"] [unique_id "acb7VhkU3N0pg_4aEL-ixwAAAFE"]
[Sat Mar 28 05:49:11.201063 2026] [:error] [pid 64860:tid 64916] [client 20.220.13.237:1951] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5e0a.php"] [unique_id "acb7VxkU3N0pg_4aEL-izAAAAEg"]
[Sat Mar 28 05:49:11.629864 2026] [:error] [pid 34631:tid 34666] [client 20.220.13.237:2022] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acb7VztzjMMS6kojpeQPogAAAcY"]
[Sat Mar 28 05:49:12.043920 2026] [:error] [pid 34597:tid 34603] [client 20.220.13.237:1955] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acb7WIluI7-e5s1cafcIgAAAAUI"]
[Sat Mar 28 05:49:12.474490 2026] [:error] [pid 34631:tid 34684] [client 20.220.13.237:1879] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acb7WDtzjMMS6kojpeQPqAAAAdg"]
[Sat Mar 28 05:49:12.897123 2026] [:error] [pid 64860:tid 64925] [client 20.220.13.237:1942] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acb7WBkU3N0pg_4aEL-i2QAAAFE"]
[Sat Mar 28 05:49:13.311753 2026] [:error] [pid 43547:tid 43563] [client 20.220.13.237:1904] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "acb7WT4ZEfdetXP-9aCnrQAAAg4"]
[Sat Mar 28 05:49:13.750550 2026] [:error] [pid 43547:tid 43557] [client 20.220.13.237:1929] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "acb7WT4ZEfdetXP-9aCnsAAAAgg"]
[Sat Mar 28 05:49:14.168318 2026] [:error] [pid 64860:tid 64924] [client 20.220.13.237:1337] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "acb7WhkU3N0pg_4aEL-i4AAAAFA"]
[Sat Mar 28 05:49:14.587929 2026] [:error] [pid 64966:tid 64984] [client 20.220.13.237:1870] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "acb7WtfSvF5AFfSuKxXt5AAAAMs"]
[Sat Mar 28 05:49:15.480185 2026] [:error] [pid 43578:tid 43587] [client 20.220.13.237:1987] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acb7W3NG2YdGm41aN8LP0AAAAkY"]
[Sat Mar 28 05:49:16.374400 2026] [:error] [pid 34631:tid 34660] [client 20.220.13.237:1993] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acb7XDtzjMMS6kojpeQPtQAAAcA"]
[Sat Mar 28 05:49:16.788971 2026] [:error] [pid 64966:tid 64985] [client 20.220.13.237:1318] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acb7XNfSvF5AFfSuKxXt6AAAAMw"]
[Sat Mar 28 05:49:17.206646 2026] [:error] [pid 2877:tid 2889] [client 20.220.13.237:1967] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acb7XbgM4xL1Xj409YTVsQAAAQo"]
[Sat Mar 28 05:49:17.619291 2026] [:error] [pid 64860:tid 64909] [client 20.220.13.237:1863] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "acb7XRkU3N0pg_4aEL-i7wAAAEE"]
[Sat Mar 28 05:49:18.057148 2026] [:error] [pid 43578:tid 43583] [client 20.220.13.237:1909] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "acb7XnNG2YdGm41aN8LP2AAAAkI"]
[Sat Mar 28 05:49:18.470072 2026] [:error] [pid 64860:tid 64912] [client 20.220.13.237:1856] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "acb7XhkU3N0pg_4aEL-i8gAAAEQ"]
[Sat Mar 28 05:49:19.233985 2026] [:error] [pid 64860:tid 64927] [client 20.220.13.237:2031] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "acb7XxkU3N0pg_4aEL-jBQAAAFM"]
[Sat Mar 28 05:49:20.066889 2026] [:error] [pid 64860:tid 64909] [client 20.220.13.237:1956] File does not exist: /usr/local/apache/htdocs/suspended-page/ne2026.php
[Sat Mar 28 05:49:20.278325 2026] [:error] [pid 64860:tid 64920] [client 20.220.13.237:1956] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Sat Mar 28 05:49:20.492850 2026] [:error] [pid 64860:tid 64913] [client 20.220.13.237:1956] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat Mar 28 05:49:20.705152 2026] [:error] [pid 64860:tid 64930] [client 20.220.13.237:1956] File does not exist: /usr/local/apache/htdocs/suspended-page/tool.php
[Sat Mar 28 05:49:20.918298 2026] [:error] [pid 64860:tid 64918] [client 20.220.13.237:1956] File does not exist: /usr/local/apache/htdocs/suspended-page/tt.php
[Sat Mar 28 05:49:21.136038 2026] [:error] [pid 64860:tid 64916] [client 20.220.13.237:1956] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sat Mar 28 05:49:21.344897 2026] [:error] [pid 64860:tid 64923] [client 20.220.13.237:1956] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Sat Mar 28 05:49:21.554184 2026] [:error] [pid 64860:tid 64931] [client 20.220.13.237:1956] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Sat Mar 28 05:49:21.780154 2026] [:error] [pid 64860:tid 64927] [client 20.220.13.237:1956] File does not exist: /usr/local/apache/htdocs/suspended-page/green.php
[Sat Mar 28 05:49:21.992424 2026] [:error] [pid 64860:tid 64915] [client 20.220.13.237:1956] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sat Mar 28 05:49:22.201531 2026] [:error] [pid 64860:tid 64909] [client 20.220.13.237:1956] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Sat Mar 28 05:49:22.410800 2026] [:error] [pid 64860:tid 64913] [client 20.220.13.237:1956] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acb7YhkU3N0pg_4aEL-jIwAAAEU"]
[Sat Mar 28 05:49:22.829461 2026] [:error] [pid 34631:tid 34666] [client 20.220.13.237:1880] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acb7YjtzjMMS6kojpeQPwQAAAcY"]
[Sat Mar 28 05:49:23.259232 2026] [:error] [pid 34597:tid 34606] [client 20.220.13.237:2007] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acb7Y4luI7-e5s1cafcImwAAAUU"]
[Sat Mar 28 05:49:24.021817 2026] [:error] [pid 64966:tid 64991] [client 20.220.13.237:1887] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acb7ZNfSvF5AFfSuKxXt9gAAANI"]
[Sat Mar 28 05:49:24.839746 2026] [:error] [pid 64860:tid 64916] [client 20.220.13.237:1944] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-104.php"] [unique_id "acb7ZBkU3N0pg_4aEL-jNQAAAEg"]
[Sat Mar 28 05:49:25.263665 2026] [:error] [pid 64860:tid 64910] [client 20.220.13.237:1966] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-104.php"] [unique_id "acb7ZRkU3N0pg_4aEL-jOgAAAEI"]
[Sat Mar 28 05:49:25.690447 2026] [:error] [pid 64860:tid 64916] [client 20.220.13.237:1920] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-104.php"] [unique_id "acb7ZRkU3N0pg_4aEL-jQQAAAEg"]
[Sat Mar 28 05:49:26.110452 2026] [:error] [pid 64861:tid 64935] [client 20.220.13.237:1878] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-104.php"] [unique_id "acb7ZuxK22_lUN2kvnU90gAAAIA"]
[Sat Mar 28 05:49:26.534727 2026] [:error] [pid 34597:tid 34617] [client 20.220.13.237:1974] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa21.php"] [unique_id "acb7ZoluI7-e5s1cafcIowAAAVA"]
[Sat Mar 28 05:49:26.947675 2026] [:error] [pid 43579:tid 43612] [client 20.220.13.237:1979] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa21.php"] [unique_id "acb7ZiRqN4JVI8gB7Al9eQAAAoQ"]
[Sat Mar 28 05:49:27.737879 2026] [:error] [pid 43578:tid 43587] [client 20.220.13.237:1892] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa21.php"] [unique_id "acb7Z3NG2YdGm41aN8LP7wAAAkY"]
[Sat Mar 28 05:49:28.468897 2026] [:error] [pid 34597:tid 34616] [client 20.220.13.237:1889] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa21.php"] [unique_id "acb7aIluI7-e5s1cafcIrgAAAU8"]
[Sat Mar 28 05:49:29.180104 2026] [:error] [pid 64860:tid 64921] [client 20.220.13.237:1316] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "acb7aRkU3N0pg_4aEL-jUAAAAE0"]
[Sat Mar 28 05:49:29.859359 2026] [:error] [pid 34631:tid 34663] [client 20.220.13.237:1874] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "acb7aTtzjMMS6kojpeQPygAAAcM"]
[Sat Mar 28 05:49:30.275070 2026] [:error] [pid 34597:tid 34605] [client 20.220.13.237:2004] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "acb7aoluI7-e5s1cafcIswAAAUQ"]
[Sat Mar 28 05:49:30.794505 2026] [:error] [pid 34631:tid 34670] [client 20.220.13.237:1865] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "acb7ajtzjMMS6kojpeQPywAAAco"]
[Sat Mar 28 05:49:31.466993 2026] [:error] [pid 34631:tid 34667] [client 20.220.13.237:1303] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "acb7aztzjMMS6kojpeQPzAAAAcc"]
[Sat Mar 28 05:49:31.879761 2026] [:error] [pid 34631:tid 34665] [client 20.220.13.237:1901] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "acb7aztzjMMS6kojpeQP0AAAAcU"]
[Sat Mar 28 05:49:32.429352 2026] [:error] [pid 34631:tid 34660] [client 20.220.13.237:1994] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "acb7bDtzjMMS6kojpeQP0wAAAcA"]
[Sat Mar 28 05:49:32.873095 2026] [:error] [pid 34631:tid 34668] [client 20.220.13.237:1945] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "acb7bDtzjMMS6kojpeQP1wAAAcg"]
[Sat Mar 28 05:49:33.380509 2026] [:error] [pid 34597:tid 34621] [client 20.220.13.237:1290] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "acb7bYluI7-e5s1cafcItwAAAVQ"]
[Sat Mar 28 05:49:33.804627 2026] [:error] [pid 2877:tid 2896] [client 20.220.13.237:1980] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "acb7bbgM4xL1Xj409YTVwAAAARE"]
[Sat Mar 28 05:49:34.220145 2026] [:error] [pid 34597:tid 34606] [client 20.220.13.237:2033] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "acb7boluI7-e5s1cafcIuQAAAUU"]
[Sat Mar 28 05:49:34.710742 2026] [:error] [pid 34597:tid 34609] [client 20.220.13.237:1309] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "acb7boluI7-e5s1cafcIuwAAAUg"]
[Sat Mar 28 05:49:35.269170 2026] [:error] [pid 64860:tid 64931] [client 20.220.13.237:1282] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "acb7bxkU3N0pg_4aEL-jagAAAFc"]
[Sat Mar 28 05:49:36.167587 2026] [:error] [pid 43579:tid 43628] [client 20.220.13.237:1968] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "acb7cCRqN4JVI8gB7Al9hAAAApQ"]
[Sat Mar 28 05:49:37.090534 2026] [:error] [pid 64966:tid 64986] [client 20.220.13.237:2006] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "acb7cdfSvF5AFfSuKxXt-wAAAM0"]
[Sat Mar 28 05:49:37.560355 2026] [:error] [pid 43579:tid 43618] [client 20.220.13.237:1857] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "acb7cSRqN4JVI8gB7Al9hwAAAoo"]
[Sat Mar 28 05:49:38.150307 2026] [:error] [pid 64859:tid 64888] [client 20.220.13.237:1886] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "acb7cm3qEBHXq3rHdBmg4wAAAAc"]
[Sat Mar 28 05:49:38.748450 2026] [:error] [pid 34631:tid 34681] [client 20.220.13.237:1972] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "acb7cjtzjMMS6kojpeQP4QAAAdU"]
[Sat Mar 28 05:49:39.166431 2026] [:error] [pid 64861:tid 64951] [client 20.220.13.237:1797] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "acb7c-xK22_lUN2kvnU93gAAAJA"]
[Sat Mar 28 05:49:39.620098 2026] [:error] [pid 64859:tid 64896] [client 20.220.13.237:1986] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "acb7c23qEBHXq3rHdBmg5gAAAA8"]
[Sat Mar 28 05:49:40.108488 2026] [:error] [pid 43547:tid 43567] [client 20.220.13.237:1898] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vanda.php"] [unique_id "acb7dD4ZEfdetXP-9aCn0wAAAhI"]
[Sat Mar 28 05:49:40.676063 2026] [:error] [pid 64859:tid 64901] [client 20.220.13.237:1798] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vanda.php"] [unique_id "acb7dG3qEBHXq3rHdBmg5wAAABQ"]
[Sat Mar 28 05:49:41.105203 2026] [:error] [pid 64859:tid 64889] [client 20.220.13.237:1988] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vanda.php"] [unique_id "acb7dW3qEBHXq3rHdBmg6AAAAAg"]
[Sat Mar 28 05:49:41.536039 2026] [:error] [pid 64860:tid 64908] [client 20.220.13.237:1869] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vanda.php"] [unique_id "acb7dRkU3N0pg_4aEL-jcwAAAEA"]
[Sat Mar 28 05:49:41.973874 2026] [:error] [pid 64966:tid 64988] [client 20.220.13.237:1285] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acb7ddfSvF5AFfSuKxXuAAAAAM8"]
[Sat Mar 28 05:49:42.404581 2026] [:error] [pid 64859:tid 64883] [client 20.220.13.237:1960] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acb7dm3qEBHXq3rHdBmg7AAAAAI"]
[Sat Mar 28 05:49:43.212601 2026] [:error] [pid 64860:tid 64912] [client 20.220.13.237:1905] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acb7dxkU3N0pg_4aEL-jeAAAAEQ"]
[Sat Mar 28 05:49:43.991307 2026] [:error] [pid 64859:tid 64887] [client 20.220.13.237:1890] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acb7d23qEBHXq3rHdBmg8AAAAAY"]
[Sat Mar 28 05:49:44.430791 2026] [:error] [pid 34597:tid 34621] [client 20.220.13.237:1917] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/55b76.php"] [unique_id "acb7eIluI7-e5s1cafcIwgAAAVQ"]
[Sat Mar 28 05:49:44.886424 2026] [:error] [pid 2877:tid 2893] [client 20.220.13.237:1893] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/55b76.php"] [unique_id "acb7eLgM4xL1Xj409YTVxQAAAQ4"]
[Sat Mar 28 05:49:45.336414 2026] [:error] [pid 64860:tid 64910] [client 20.220.13.237:1969] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/55b76.php"] [unique_id "acb7eRkU3N0pg_4aEL-jjwAAAEI"]
[Sat Mar 28 05:49:46.016661 2026] [:error] [pid 64860:tid 64913] [client 20.220.13.237:1286] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/55b76.php"] [unique_id "acb7ehkU3N0pg_4aEL-jlwAAAEU"]
[Sat Mar 28 05:49:46.750966 2026] [:error] [pid 43547:tid 43556] [client 20.220.13.237:1885] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/44.php"] [unique_id "acb7ej4ZEfdetXP-9aCn2AAAAgc"]
[Sat Mar 28 05:49:47.181527 2026] [:error] [pid 43547:tid 43560] [client 20.220.13.237:1977] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/44.php"] [unique_id "acb7ez4ZEfdetXP-9aCn2QAAAgs"]
[Sat Mar 28 05:49:47.601946 2026] [:error] [pid 64860:tid 64919] [client 20.220.13.237:2042] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/44.php"] [unique_id "acb7exkU3N0pg_4aEL-joQAAAEs"]
[Sat Mar 28 05:49:48.023873 2026] [:error] [pid 64860:tid 64929] [client 20.220.13.237:1947] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/44.php"] [unique_id "acb7fBkU3N0pg_4aEL-jowAAAFU"]
[Sat Mar 28 05:49:48.460449 2026] [:error] [pid 64860:tid 64927] [client 20.220.13.237:2035] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "acb7fBkU3N0pg_4aEL-jqQAAAFM"]
[Sat Mar 28 05:49:48.970525 2026] [:error] [pid 64860:tid 64923] [client 20.220.13.237:1965] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "acb7fBkU3N0pg_4aEL-jrQAAAE8"]
[Sat Mar 28 05:49:49.390555 2026] [:error] [pid 64860:tid 64915] [client 20.220.13.237:2021] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "acb7fRkU3N0pg_4aEL-jsAAAAEc"]
[Sat Mar 28 05:49:49.808472 2026] [:error] [pid 34597:tid 34624] [client 20.220.13.237:1299] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "acb7fYluI7-e5s1cafcIxQAAAVc"]
[Sat Mar 28 05:49:50.222127 2026] [:error] [pid 34597:tid 34602] [client 20.220.13.237:1295] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acb7foluI7-e5s1cafcIxwAAAUE"]
[Sat Mar 28 05:49:50.656961 2026] [:error] [pid 64861:tid 64935] [client 20.220.13.237:1280] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acb7fuxK22_lUN2kvnU95AAAAIA"]
[Sat Mar 28 05:49:51.074743 2026] [:error] [pid 64861:tid 64955] [client 20.220.13.237:1900] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acb7f-xK22_lUN2kvnU95wAAAJQ"]
[Sat Mar 28 05:49:52.018626 2026] [:error] [pid 2877:tid 2902] [client 20.220.13.237:1340] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acb7gLgM4xL1Xj409YTVxgAAARc"]
[Sat Mar 28 05:49:52.847061 2026] [:error] [pid 34597:tid 34616] [client 20.220.13.237:1858] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "acb7gIluI7-e5s1cafcIyQAAAU8"]
[Sat Mar 28 05:49:53.281882 2026] [:error] [pid 64861:tid 64952] [client 20.220.13.237:1314] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "acb7gexK22_lUN2kvnU97wAAAJE"]
[Sat Mar 28 05:49:53.711348 2026] [:error] [pid 34631:tid 34675] [client 20.220.13.237:1918] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "acb7gTtzjMMS6kojpeQP7AAAAc8"]
[Sat Mar 28 05:49:54.143957 2026] [:error] [pid 34631:tid 34662] [client 20.220.13.237:1913] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "acb7gjtzjMMS6kojpeQP7gAAAcI"]
[Sat Mar 28 05:49:54.584774 2026] [:error] [pid 64860:tid 64910] [client 20.220.13.237:2032] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "acb7ghkU3N0pg_4aEL-jtwAAAEI"]
[Sat Mar 28 05:49:55.010652 2026] [:error] [pid 64860:tid 64913] [client 20.220.13.237:1305] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "acb7gxkU3N0pg_4aEL-jvAAAAEU"]
[Sat Mar 28 05:49:55.475831 2026] [:error] [pid 64860:tid 64908] [client 20.220.13.237:2036] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "acb7gxkU3N0pg_4aEL-jwgAAAEA"]
[Sat Mar 28 05:49:55.893572 2026] [:error] [pid 64860:tid 64926] [client 20.220.13.237:1876] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "acb7gxkU3N0pg_4aEL-jyAAAAFI"]
[Sat Mar 28 05:49:56.347712 2026] [:error] [pid 34631:tid 34679] [client 20.220.13.237:2003] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "acb7hDtzjMMS6kojpeQP7wAAAdM"]
[Sat Mar 28 05:49:56.804523 2026] [:error] [pid 64860:tid 64910] [client 20.220.13.237:1982] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "acb7hBkU3N0pg_4aEL-j0wAAAEI"]
[Sat Mar 28 05:49:57.230157 2026] [:error] [pid 64861:tid 64950] [client 20.220.13.237:2041] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "acb7hexK22_lUN2kvnU98QAAAI8"]
[Sat Mar 28 05:49:58.004455 2026] [:error] [pid 64861:tid 64948] [client 20.220.13.237:1294] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "acb7huxK22_lUN2kvnU99AAAAI0"]
[Sat Mar 28 05:49:58.434667 2026] [:error] [pid 43578:tid 43603] [client 20.220.13.237:1306] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/h2.php"] [unique_id "acb7hnNG2YdGm41aN8LP_gAAAlY"]
[Sat Mar 28 05:49:58.860001 2026] [:error] [pid 43578:tid 43602] [client 20.220.13.237:1914] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/h2.php"] [unique_id "acb7hnNG2YdGm41aN8LQAQAAAlU"]
[Sat Mar 28 05:49:59.274113 2026] [:error] [pid 64860:tid 64916] [client 20.220.13.237:1884] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/h2.php"] [unique_id "acb7hxkU3N0pg_4aEL-j3gAAAEg"]
[Sat Mar 28 05:49:59.684360 2026] [:error] [pid 64861:tid 64942] [client 20.220.13.237:1897] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/h2.php"] [unique_id "acb7h-xK22_lUN2kvnU99wAAAIc"]
[Sat Mar 28 05:50:00.108406 2026] [:error] [pid 64861:tid 64946] [client 20.220.13.237:1875] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wxfyf.php"] [unique_id "acb7iOxK22_lUN2kvnU9-AAAAIs"]
[Sat Mar 28 05:50:00.526743 2026] [:error] [pid 64861:tid 64939] [client 20.220.13.237:1830] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wxfyf.php"] [unique_id "acb7iOxK22_lUN2kvnU9-QAAAIQ"]
[Sat Mar 28 05:50:00.983698 2026] [:error] [pid 64860:tid 64917] [client 20.220.13.237:1888] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wxfyf.php"] [unique_id "acb7iBkU3N0pg_4aEL-j5gAAAEk"]
[Sat Mar 28 05:50:01.474109 2026] [:error] [pid 64860:tid 64929] [client 20.220.13.237:1331] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wxfyf.php"] [unique_id "acb7iRkU3N0pg_4aEL-j6QAAAFU"]
[Sat Mar 28 05:50:01.941028 2026] [:error] [pid 43547:tid 43554] [client 20.220.13.237:1297] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drhunthq.php"] [unique_id "acb7iT4ZEfdetXP-9aCn3gAAAgU"]
[Sat Mar 28 05:50:02.385531 2026] [:error] [pid 64860:tid 64929] [client 20.220.13.237:2013] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drhunthq.php"] [unique_id "acb7ihkU3N0pg_4aEL-j7gAAAFU"]
[Sat Mar 28 05:50:02.820754 2026] [:error] [pid 64860:tid 64909] [client 20.220.13.237:1292] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drhunthq.php"] [unique_id "acb7ihkU3N0pg_4aEL-j8QAAAEE"]
[Sat Mar 28 05:50:03.240935 2026] [:error] [pid 64861:tid 64945] [client 20.220.13.237:1311] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drhunthq.php"] [unique_id "acb7i-xK22_lUN2kvnU9_wAAAIo"]
[Sat Mar 28 05:50:04.100580 2026] [:error] [pid 64861:tid 64942] [client 20.220.13.237:1983] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "acb7jOxK22_lUN2kvnU-AwAAAIc"]
[Sat Mar 28 05:50:04.970621 2026] [:error] [pid 34597:tid 34620] [client 20.220.13.237:1895] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "acb7jIluI7-e5s1cafcIzAAAAVM"]
[Sat Mar 28 05:50:05.405847 2026] [:error] [pid 34631:tid 34674] [client 20.220.13.237:1321] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "acb7jTtzjMMS6kojpeQP9gAAAc4"]
[Sat Mar 28 05:50:05.819603 2026] [:error] [pid 34631:tid 34672] [client 20.220.13.237:1808] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "acb7jTtzjMMS6kojpeQP9wAAAcw"]
[Sat Mar 28 05:50:06.275815 2026] [:error] [pid 64860:tid 64930] [client 20.220.13.237:2018] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acb7jhkU3N0pg_4aEL-kEgAAAFY"]
[Sat Mar 28 05:50:06.728901 2026] [:error] [pid 34631:tid 34678] [client 20.220.13.237:1991] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acb7jjtzjMMS6kojpeQP_AAAAdI"]
[Sat Mar 28 05:50:07.154694 2026] [:error] [pid 64860:tid 64914] [client 20.220.13.237:1328] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acb7jxkU3N0pg_4aEL-kHwAAAEY"]
[Sat Mar 28 05:50:07.914602 2026] [:error] [pid 64860:tid 64924] [client 20.220.13.237:1291] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acb7jxkU3N0pg_4aEL-kJAAAAFA"]
[Sat Mar 28 05:50:08.640155 2026] [:error] [pid 64860:tid 64918] [client 20.220.13.237:2025] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sale.php"] [unique_id "acb7kBkU3N0pg_4aEL-kJgAAAEo"]
[Sat Mar 28 05:50:09.058614 2026] [:error] [pid 43578:tid 43582] [client 20.220.13.237:1289] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sale.php"] [unique_id "acb7kXNG2YdGm41aN8LQBQAAAkE"]
[Sat Mar 28 05:50:09.481548 2026] [:error] [pid 64860:tid 64914] [client 20.220.13.237:1327] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sale.php"] [unique_id "acb7kRkU3N0pg_4aEL-kLwAAAEY"]
[Sat Mar 28 05:50:09.896907 2026] [:error] [pid 64860:tid 64912] [client 20.220.13.237:1801] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sale.php"] [unique_id "acb7kRkU3N0pg_4aEL-kNAAAAEQ"]
[Sat Mar 28 05:50:10.347762 2026] [:error] [pid 43578:tid 43588] [client 20.220.13.237:1860] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acb7knNG2YdGm41aN8LQBgAAAkc"]
[Sat Mar 28 05:50:10.763890 2026] [:error] [pid 64860:tid 64928] [client 20.220.13.237:1326] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acb7khkU3N0pg_4aEL-kOgAAAFQ"]
[Sat Mar 28 05:50:11.178708 2026] [:error] [pid 34631:tid 34662] [client 20.220.13.237:1284] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acb7kztzjMMS6kojpeQQBAAAAcI"]
[Sat Mar 28 05:50:11.599535 2026] [:error] [pid 64860:tid 64909] [client 20.220.13.237:1796] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acb7kxkU3N0pg_4aEL-kPwAAAEE"]
[Sat Mar 28 05:50:12.050573 2026] [:error] [pid 64861:tid 64946] [client 20.220.13.237:1307] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "acb7lOxK22_lUN2kvnU-DAAAAIs"]
[Sat Mar 28 05:50:12.604177 2026] [:error] [pid 34631:tid 34682] [client 20.220.13.237:1866] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "acb7lDtzjMMS6kojpeQQCQAAAdY"]
[Sat Mar 28 05:50:13.146625 2026] [:error] [pid 34631:tid 34677] [client 20.220.13.237:1824] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "acb7lTtzjMMS6kojpeQQCwAAAdE"]
[Sat Mar 28 05:50:13.570861 2026] [:error] [pid 64861:tid 64950] [client 20.220.13.237:1288] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "acb7lexK22_lUN2kvnU-EAAAAI8"]
[Sat Mar 28 05:50:14.016741 2026] [:error] [pid 64860:tid 64915] [client 20.220.13.237:1336] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "acb7lhkU3N0pg_4aEL-kRQAAAEc"]
[Sat Mar 28 05:50:14.494572 2026] [:error] [pid 64860:tid 64920] [client 20.220.13.237:1296] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "acb7lhkU3N0pg_4aEL-kSAAAAEw"]
[Sat Mar 28 05:50:14.907841 2026] [:error] [pid 64860:tid 64932] [client 20.220.13.237:1902] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "acb7lhkU3N0pg_4aEL-kSQAAAFg"]
[Sat Mar 28 05:50:15.325593 2026] [:error] [pid 64860:tid 64914] [client 20.220.13.237:1805] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "acb7lxkU3N0pg_4aEL-kSwAAAEY"]
[Sat Mar 28 05:50:15.749787 2026] [:error] [pid 2877:tid 2897] [client 20.220.13.237:1946] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "acb7l7gM4xL1Xj409YTVygAAARI"]
[Sat Mar 28 05:50:16.249494 2026] [:error] [pid 43579:tid 43608] [client 20.220.13.237:1862] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "acb7mCRqN4JVI8gB7Al9lAAAAoA"]
[Sat Mar 28 05:50:16.833177 2026] [:error] [pid 43579:tid 43620] [client 20.220.13.237:1817] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "acb7mCRqN4JVI8gB7Al9lgAAAow"]
[Sat Mar 28 05:50:17.261375 2026] [:error] [pid 34631:tid 34666] [client 20.220.13.237:1324] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "acb7mTtzjMMS6kojpeQQDQAAAcY"]
[Sat Mar 28 05:50:17.688425 2026] [:error] [pid 64966:tid 64997] [client 20.220.13.237:1800] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "acb7mdfSvF5AFfSuKxXuBwAAANg"]
[Sat Mar 28 05:50:18.105640 2026] [:error] [pid 43579:tid 43618] [client 20.220.13.237:1953] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "acb7miRqN4JVI8gB7Al9mgAAAoo"]
[Sat Mar 28 05:50:18.520758 2026] [:error] [pid 34631:tid 34678] [client 20.220.13.237:1298] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "acb7mjtzjMMS6kojpeQQDwAAAdI"]
[Sat Mar 28 05:50:18.935547 2026] [:error] [pid 43578:tid 43584] [client 20.220.13.237:1330] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "acb7mnNG2YdGm41aN8LQDAAAAkM"]
[Sat Mar 28 05:50:19.369759 2026] [:error] [pid 34631:tid 34664] [client 20.220.13.237:1826] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "acb7mztzjMMS6kojpeQQEQAAAcQ"]
[Sat Mar 28 05:50:19.815920 2026] [:error] [pid 64860:tid 64917] [client 20.220.13.237:1911] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "acb7mxkU3N0pg_4aEL-kagAAAEk"]
[Sat Mar 28 05:50:20.232155 2026] [:error] [pid 64860:tid 64908] [client 20.220.13.237:1903] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "acb7nBkU3N0pg_4aEL-kbwAAAEA"]
[Sat Mar 28 05:50:20.654976 2026] [:error] [pid 64860:tid 64916] [client 20.220.13.237:1821] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "acb7nBkU3N0pg_4aEL-kcgAAAEg"]
[Sat Mar 28 05:50:21.406563 2026] [:error] [pid 43579:tid 43612] [client 20.220.13.237:2039] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2ksm17n.php"] [unique_id "acb7nSRqN4JVI8gB7Al9nAAAAoQ"]
[Sat Mar 28 05:50:22.150060 2026] [:error] [pid 43579:tid 43615] [client 20.220.13.237:1304] File does not exist: /usr/local/apache/htdocs/suspended-page/2ksm17n.php
[Sat Mar 28 05:50:22.359087 2026] [:error] [pid 43579:tid 43629] [client 20.220.13.237:1304] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Sat Mar 28 05:50:22.569896 2026] [:error] [pid 43579:tid 43614] [client 20.220.13.237:1304] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Sat Mar 28 05:50:22.778003 2026] [:error] [pid 43579:tid 43616] [client 20.220.13.237:1304] File does not exist: /usr/local/apache/htdocs/suspended-page/ws77.php
[Sat Mar 28 05:50:22.989229 2026] [:error] [pid 43579:tid 43622] [client 20.220.13.237:1304] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Sat Mar 28 05:50:23.202164 2026] [:error] [pid 43579:tid 43611] [client 20.220.13.237:1304] File does not exist: /usr/local/apache/htdocs/suspended-page/amp.php
[Sat Mar 28 05:50:23.421724 2026] [:error] [pid 43579:tid 43624] [client 20.220.13.237:1304] File does not exist: /usr/local/apache/htdocs/suspended-page/ww.php
[Sat Mar 28 05:50:23.630676 2026] [:error] [pid 43579:tid 43620] [client 20.220.13.237:1304] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Sat Mar 28 05:50:23.849537 2026] [:error] [pid 43579:tid 43617] [client 20.220.13.237:1304] File does not exist: /usr/local/apache/htdocs/suspended-page/rzki.php
[Sat Mar 28 05:50:24.070858 2026] [:error] [pid 43579:tid 43628] [client 20.220.13.237:1304] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Sat Mar 28 05:50:24.280029 2026] [:error] [pid 43579:tid 43623] [client 20.220.13.237:1304] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Sat Mar 28 05:50:24.508937 2026] [:error] [pid 43579:tid 43618] [client 20.220.13.237:1304] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/varb.php"] [unique_id "acb7oCRqN4JVI8gB7Al9qQAAAoo"]
[Sat Mar 28 05:50:24.958820 2026] [:error] [pid 64860:tid 64914] [client 20.220.13.237:1820] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/varb.php"] [unique_id "acb7oBkU3N0pg_4aEL-kkgAAAEY"]
[Sat Mar 28 05:50:25.376904 2026] [:error] [pid 34631:tid 34676] [client 20.220.13.237:1792] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/varb.php"] [unique_id "acb7oTtzjMMS6kojpeQQEgAAAdA"]
[Sat Mar 28 05:50:25.795868 2026] [:error] [pid 64861:tid 64957] [client 20.220.13.237:1818] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/varb.php"] [unique_id "acb7oexK22_lUN2kvnU-HAAAAJY"]
[Sat Mar 28 05:50:26.234860 2026] [:error] [pid 43579:tid 43630] [client 20.220.13.237:1840] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acb7oiRqN4JVI8gB7Al9qgAAApY"]
[Sat Mar 28 05:50:26.653825 2026] [:error] [pid 43579:tid 43621] [client 20.220.13.237:1341] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acb7oiRqN4JVI8gB7Al9rAAAAo0"]
[Sat Mar 28 05:50:27.085627 2026] [:error] [pid 43578:tid 43589] [client 20.220.13.237:2043] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acb7o3NG2YdGm41aN8LQDwAAAkg"]
[Sat Mar 28 05:50:27.508327 2026] [:error] [pid 64860:tid 64924] [client 20.220.13.237:1283] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acb7oxkU3N0pg_4aEL-kowAAAFA"]
[Sat Mar 28 05:50:27.942860 2026] [:error] [pid 64860:tid 64909] [client 20.220.13.237:1799] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "acb7oxkU3N0pg_4aEL-kpwAAAEE"]
[Sat Mar 28 05:50:28.361278 2026] [:error] [pid 64860:tid 64908] [client 20.220.13.237:1868] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "acb7pBkU3N0pg_4aEL-krQAAAEA"]
[Sat Mar 28 05:50:29.279792 2026] [:error] [pid 34597:tid 34608] [client 20.220.13.237:1887] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "acb7pYluI7-e5s1cafcI2wAAAUc"]
[Sat Mar 28 05:50:30.422920 2026] [:error] [pid 43547:tid 43552] [client 20.220.13.237:1816] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "acb7pj4ZEfdetXP-9aCn4wAAAgM"]
[Sat Mar 28 05:50:31.271946 2026] [:error] [pid 64860:tid 64915] [client 20.220.13.237:1838] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "acb7pxkU3N0pg_4aEL-kwwAAAEc"]
[Sat Mar 28 05:50:31.694772 2026] [:error] [pid 64861:tid 64943] [client 20.220.13.237:1158] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "acb7p-xK22_lUN2kvnU-HwAAAIg"]
[Sat Mar 28 05:50:32.115521 2026] [:error] [pid 43579:tid 43611] [client 20.220.13.237:1312] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "acb7qCRqN4JVI8gB7Al9swAAAoM"]
[Sat Mar 28 05:50:32.541370 2026] [:error] [pid 64860:tid 64912] [client 20.220.13.237:1802] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "acb7qBkU3N0pg_4aEL-k0AAAAEQ"]
[Sat Mar 28 05:50:32.984936 2026] [:error] [pid 43579:tid 43617] [client 20.220.13.237:1841] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "acb7qCRqN4JVI8gB7Al9tgAAAok"]
[Sat Mar 28 05:50:33.474748 2026] [:error] [pid 64860:tid 64915] [client 20.220.13.237:1332] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "acb7qRkU3N0pg_4aEL-k0gAAAEc"]
[Sat Mar 28 05:50:33.900362 2026] [:error] [pid 64860:tid 64916] [client 20.220.13.237:1847] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "acb7qRkU3N0pg_4aEL-k1gAAAEg"]
[Sat Mar 28 05:50:34.466862 2026] [:error] [pid 64860:tid 64908] [client 20.220.13.237:1310] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "acb7qhkU3N0pg_4aEL-k3QAAAEA"]
[Sat Mar 28 05:50:34.997880 2026] [:error] [pid 64860:tid 64932] [client 20.220.13.237:1343] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws60.php"] [unique_id "acb7qhkU3N0pg_4aEL-k5wAAAFg"]
[Sat Mar 28 05:50:35.449200 2026] [:error] [pid 64861:tid 64951] [client 20.220.13.237:1919] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws60.php"] [unique_id "acb7q-xK22_lUN2kvnU-JgAAAJA"]
[Sat Mar 28 05:50:36.338889 2026] [:error] [pid 64861:tid 64946] [client 20.220.13.237:1894] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws60.php"] [unique_id "acb7rOxK22_lUN2kvnU-MAAAAIs"]
[Sat Mar 28 05:50:37.205855 2026] [:error] [pid 34631:tid 34670] [client 20.220.13.237:1325] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws60.php"] [unique_id "acb7rTtzjMMS6kojpeQQHgAAAco"]
[Sat Mar 28 05:50:37.630982 2026] [:error] [pid 2877:tid 2902] [client 20.220.13.237:1183] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acb7rbgM4xL1Xj409YTV0AAAARc"]
[Sat Mar 28 05:50:38.060390 2026] [:error] [pid 34631:tid 34669] [client 20.220.13.237:1313] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acb7rjtzjMMS6kojpeQQIQAAAck"]
[Sat Mar 28 05:50:38.551925 2026] [:error] [pid 64861:tid 64937] [client 20.220.13.237:1912] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acb7ruxK22_lUN2kvnU-SAAAAII"]
[Sat Mar 28 05:50:38.963119 2026] [:error] [pid 34631:tid 34681] [client 20.220.13.237:1334] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acb7rjtzjMMS6kojpeQQJAAAAdU"]
[Sat Mar 28 05:50:39.375389 2026] [:error] [pid 64860:tid 64923] [client 20.220.13.237:1171] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acb7rxkU3N0pg_4aEL-k-AAAAE8"]
[Sat Mar 28 05:50:39.794931 2026] [:error] [pid 34631:tid 34668] [client 20.220.13.237:1827] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acb7rztzjMMS6kojpeQQJwAAAcg"]
[Sat Mar 28 05:50:40.214932 2026] [:error] [pid 43547:tid 43564] [client 20.220.13.237:1315] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acb7sD4ZEfdetXP-9aCn5gAAAg8"]
[Sat Mar 28 05:50:40.634185 2026] [:error] [pid 64859:tid 64904] [client 20.220.13.237:1803] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acb7sG3qEBHXq3rHdBmhAAAAABc"]
[Sat Mar 28 05:50:41.046716 2026] [:error] [pid 43579:tid 43616] [client 20.220.13.237:1793] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acb7sSRqN4JVI8gB7Al9vAAAAog"]
[Sat Mar 28 05:50:41.464786 2026] [:error] [pid 34597:tid 34620] [client 20.220.13.237:1810] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acb7sYluI7-e5s1cafcI4AAAAVM"]
[Sat Mar 28 05:50:41.923763 2026] [:error] [pid 34597:tid 34608] [client 20.220.13.237:1323] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acb7sYluI7-e5s1cafcI4gAAAUc"]
[Sat Mar 28 05:50:42.421626 2026] [:error] [pid 34597:tid 34601] [client 20.220.13.237:1338] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acb7soluI7-e5s1cafcI4wAAAUA"]
[Sat Mar 28 05:50:42.844714 2026] [:error] [pid 43579:tid 43631] [client 20.220.13.237:1342] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "acb7siRqN4JVI8gB7Al9xwAAApc"]
[Sat Mar 28 05:50:43.267483 2026] [:error] [pid 34631:tid 34683] [client 20.220.13.237:1833] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "acb7sztzjMMS6kojpeQQKQAAAdc"]
[Sat Mar 28 05:50:43.704043 2026] [:error] [pid 43547:tid 43567] [client 20.220.13.237:1871] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "acb7sz4ZEfdetXP-9aCn6QAAAhI"]
[Sat Mar 28 05:50:44.133144 2026] [:error] [pid 64859:tid 64892] [client 20.220.13.237:1813] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "acb7tG3qEBHXq3rHdBmhAQAAAAs"]
[Sat Mar 28 05:50:44.548296 2026] [:error] [pid 34631:tid 34674] [client 20.220.13.237:1319] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maul.php"] [unique_id "acb7tDtzjMMS6kojpeQQLwAAAc4"]
[Sat Mar 28 05:50:44.987999 2026] [:error] [pid 34631:tid 34662] [client 20.220.13.237:1804] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maul.php"] [unique_id "acb7tDtzjMMS6kojpeQQMAAAAcI"]
[Sat Mar 28 05:50:45.504716 2026] [:error] [pid 64860:tid 64916] [client 20.220.13.237:1160] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maul.php"] [unique_id "acb7tRkU3N0pg_4aEL-k_wAAAEg"]
[Sat Mar 28 05:50:46.000331 2026] [:error] [pid 64860:tid 64929] [client 20.220.13.237:1301] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maul.php"] [unique_id "acb7tRkU3N0pg_4aEL-lAgAAAFU"]
[Sat Mar 28 05:50:46.415138 2026] [:error] [pid 34631:tid 34666] [client 20.220.13.237:1157] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxw.php"] [unique_id "acb7tjtzjMMS6kojpeQQMwAAAcY"]
[Sat Mar 28 05:50:46.855461 2026] [:error] [pid 34631:tid 34664] [client 20.220.13.237:1812] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxw.php"] [unique_id "acb7tjtzjMMS6kojpeQQOAAAAcQ"]
[Sat Mar 28 05:50:47.268790 2026] [:error] [pid 43547:tid 43555] [client 20.220.13.237:1906] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxw.php"] [unique_id "acb7tz4ZEfdetXP-9aCn6gAAAgY"]
[Sat Mar 28 05:50:47.933846 2026] [:error] [pid 64861:tid 64954] [client 20.220.13.237:1849] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxw.php"] [unique_id "acb7t-xK22_lUN2kvnU-hAAAAJM"]
[Sat Mar 28 05:50:48.543889 2026] [:error] [pid 43547:tid 43553] [client 20.220.13.237:1320] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "acb7uD4ZEfdetXP-9aCn6wAAAgQ"]
[Sat Mar 28 05:50:48.970109 2026] [:error] [pid 64860:tid 64925] [client 20.220.13.237:1333] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "acb7uBkU3N0pg_4aEL-lCAAAAFE"]
[Sat Mar 28 05:50:49.420164 2026] [:error] [pid 64860:tid 64914] [client 20.220.13.237:1154] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "acb7uRkU3N0pg_4aEL-lDAAAAEY"]
[Sat Mar 28 05:50:49.832794 2026] [:error] [pid 34631:tid 34679] [client 20.220.13.237:1836] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "acb7uTtzjMMS6kojpeQQQgAAAdM"]
[Sat Mar 28 05:50:50.253845 2026] [:error] [pid 43547:tid 43562] [client 20.220.13.237:1843] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "acb7uj4ZEfdetXP-9aCn7QAAAg0"]
[Sat Mar 28 05:50:50.668841 2026] [:error] [pid 64861:tid 64959] [client 20.220.13.237:1831] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "acb7uuxK22_lUN2kvnU-jwAAAJg"]
[Sat Mar 28 05:50:51.089646 2026] [:error] [pid 64861:tid 64949] [client 20.220.13.237:1964] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "acb7u-xK22_lUN2kvnU-kQAAAI4"]
[Sat Mar 28 05:50:51.516726 2026] [:error] [pid 34631:tid 34663] [client 20.220.13.237:1794] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "acb7uztzjMMS6kojpeQQRQAAAcM"]
[Sat Mar 28 05:50:51.956159 2026] [:error] [pid 64860:tid 64911] [client 20.220.13.237:1896] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "acb7uxkU3N0pg_4aEL-lEQAAAEM"]
[Sat Mar 28 05:50:52.396263 2026] [:error] [pid 64861:tid 64958] [client 20.220.13.237:1329] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "acb7vOxK22_lUN2kvnU-lwAAAJc"]
[Sat Mar 28 05:50:52.811887 2026] [:error] [pid 64860:tid 64908] [client 20.220.13.237:1168] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "acb7vBkU3N0pg_4aEL-lFAAAAEA"]
[Sat Mar 28 05:50:53.237342 2026] [:error] [pid 64861:tid 64959] [client 20.220.13.237:1193] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "acb7vexK22_lUN2kvnU-mgAAAJg"]
[Sat Mar 28 05:50:53.691381 2026] [:error] [pid 43579:tid 43630] [client 20.220.13.237:1152] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "acb7vSRqN4JVI8gB7Al90AAAApY"]
[Sat Mar 28 05:50:54.158602 2026] [:error] [pid 43579:tid 43611] [client 20.220.13.237:1293] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "acb7viRqN4JVI8gB7Al90QAAAoM"]
[Sat Mar 28 05:50:54.591171 2026] [:error] [pid 43578:tid 43594] [client 20.220.13.237:1281] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "acb7vnNG2YdGm41aN8LQIAAAAk0"]
[Sat Mar 28 05:50:55.008773 2026] [:error] [pid 64860:tid 64912] [client 20.220.13.237:1161] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "acb7vxkU3N0pg_4aEL-lGwAAAEQ"]
[Sat Mar 28 05:50:55.433205 2026] [:error] [pid 64860:tid 64909] [client 20.220.13.237:1842] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "acb7vxkU3N0pg_4aEL-lHAAAAEE"]
[Sat Mar 28 05:50:55.853856 2026] [:error] [pid 34631:tid 34680] [client 20.220.13.237:1302] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "acb7vztzjMMS6kojpeQQTAAAAdQ"]
[Sat Mar 28 05:50:56.266937 2026] [:error] [pid 64860:tid 64923] [client 20.220.13.237:1184] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "acb7wBkU3N0pg_4aEL-lJAAAAE8"]
[Sat Mar 28 05:50:56.677086 2026] [:error] [pid 64860:tid 64932] [client 20.220.13.237:1202] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "acb7wBkU3N0pg_4aEL-lKQAAAFg"]
[Sat Mar 28 05:50:57.099855 2026] [:error] [pid 34597:tid 34605] [client 20.220.13.237:1308] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/wp-blog.php"] [unique_id "acb7wYluI7-e5s1cafcI9AAAAUQ"]
[Sat Mar 28 05:50:57.528075 2026] [:error] [pid 64860:tid 64923] [client 20.220.13.237:1153] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/wp-blog.php"] [unique_id "acb7wRkU3N0pg_4aEL-lMwAAAE8"]
[Sat Mar 28 05:50:57.977839 2026] [:error] [pid 64860:tid 64927] [client 20.220.13.237:1822] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/wp-blog.php"] [unique_id "acb7wRkU3N0pg_4aEL-lOQAAAFM"]
[Sat Mar 28 05:50:58.396602 2026] [:error] [pid 43579:tid 43621] [client 20.220.13.237:1335] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/wp-blog.php"] [unique_id "acb7wiRqN4JVI8gB7Al93QAAAo0"]
[Sat Mar 28 05:50:58.836990 2026] [:error] [pid 64859:tid 64883] [client 20.220.13.237:1815] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "acb7wm3qEBHXq3rHdBmhBgAAAAI"]
[Sat Mar 28 05:50:59.292199 2026] [:error] [pid 64860:tid 64919] [client 20.220.13.237:1165] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "acb7wxkU3N0pg_4aEL-lQAAAAEs"]
[Sat Mar 28 05:50:59.747189 2026] [:error] [pid 64860:tid 64910] [client 20.220.13.237:1317] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "acb7wxkU3N0pg_4aEL-lRAAAAEI"]
[Sat Mar 28 05:51:00.170673 2026] [:error] [pid 34597:tid 34615] [client 20.220.13.237:1829] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "acb7xIluI7-e5s1cafcI_QAAAU4"]
[Sat Mar 28 05:51:00.581561 2026] [:error] [pid 64860:tid 64916] [client 20.220.13.237:1205] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "acb7xBkU3N0pg_4aEL-lTAAAAEg"]
[Sat Mar 28 05:51:01.005115 2026] [:error] [pid 64861:tid 64949] [client 20.220.13.237:1176] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "acb7xexK22_lUN2kvnU-ogAAAI4"]
[Sat Mar 28 05:51:01.480205 2026] [:error] [pid 64861:tid 64936] [client 20.220.13.237:1200] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "acb7xexK22_lUN2kvnU-qwAAAIE"]
[Sat Mar 28 05:51:01.981707 2026] [:error] [pid 64861:tid 64944] [client 20.220.13.237:1819] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "acb7xexK22_lUN2kvnU-tgAAAIk"]
[Sat Mar 28 05:51:02.429600 2026] [:error] [pid 43579:tid 43608] [client 20.220.13.237:1160] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "acb7xiRqN4JVI8gB7Al96QAAAoA"]
[Sat Mar 28 05:51:02.855607 2026] [:error] [pid 64861:tid 64950] [client 20.220.13.237:1823] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "acb7xuxK22_lUN2kvnU-wwAAAI8"]
[Sat Mar 28 05:51:03.270423 2026] [:error] [pid 43579:tid 43621] [client 20.220.13.237:1747] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "acb7xyRqN4JVI8gB7Al97QAAAo0"]
[Sat Mar 28 05:51:03.683320 2026] [:error] [pid 34631:tid 34668] [client 20.220.13.237:1182] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "acb7xztzjMMS6kojpeQQUAAAAcg"]
[Sat Mar 28 05:51:04.172619 2026] [:error] [pid 2877:tid 2883] [client 20.220.13.237:1849] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "acb7yLgM4xL1Xj409YTV2AAAAQQ"]
[Sat Mar 28 05:51:04.643342 2026] [:error] [pid 64861:tid 64946] [client 20.220.13.237:1155] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "acb7yOxK22_lUN2kvnU-0AAAAIs"]
[Sat Mar 28 05:51:05.062683 2026] [:error] [pid 34631:tid 34665] [client 20.220.13.237:1215] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "acb7yTtzjMMS6kojpeQQVAAAAcU"]
[Sat Mar 28 05:51:05.477109 2026] [:error] [pid 64860:tid 64915] [client 20.220.13.237:1854] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "acb7yRkU3N0pg_4aEL-lWgAAAEc"]
[Sat Mar 28 05:51:05.896949 2026] [:error] [pid 64860:tid 64924] [client 20.220.13.237:1156] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "acb7yRkU3N0pg_4aEL-lXwAAAFA"]
[Sat Mar 28 05:51:06.324376 2026] [:error] [pid 34631:tid 34675] [client 20.220.13.237:1741] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "acb7yjtzjMMS6kojpeQQVwAAAc8"]
[Sat Mar 28 05:51:06.738017 2026] [:error] [pid 43579:tid 43632] [client 20.220.13.237:1213] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "acb7yiRqN4JVI8gB7Al9_gAAApg"]
[Sat Mar 28 05:51:07.155130 2026] [:error] [pid 43579:tid 43617] [client 20.220.13.237:1846] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "acb7yyRqN4JVI8gB7Al-AQAAAok"]
[Sat Mar 28 05:51:07.570934 2026] [:error] [pid 64861:tid 64955] [client 20.220.13.237:1339] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "acb7y-xK22_lUN2kvnU-2AAAAJQ"]
[Sat Mar 28 05:51:07.987714 2026] [:error] [pid 43578:tid 43583] [client 20.220.13.237:1169] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "acb7y3NG2YdGm41aN8LQLgAAAkI"]
[Sat Mar 28 05:51:08.408765 2026] [:error] [pid 64860:tid 64932] [client 20.220.13.237:1891] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "acb7zBkU3N0pg_4aEL-leAAAAFg"]
[Sat Mar 28 05:51:08.917496 2026] [:error] [pid 43578:tid 43591] [client 20.220.13.237:1845] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "acb7zHNG2YdGm41aN8LQNAAAAko"]
[Sat Mar 28 05:51:09.444997 2026] [:error] [pid 34597:tid 34620] [client 20.220.13.237:1173] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws73.php"] [unique_id "acb7zYluI7-e5s1cafcJAAAAAVM"]
[Sat Mar 28 05:51:09.860294 2026] [:error] [pid 34597:tid 34608] [client 20.220.13.237:1745] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws73.php"] [unique_id "acb7zYluI7-e5s1cafcJAQAAAUc"]
[Sat Mar 28 05:51:10.280936 2026] [:error] [pid 43578:tid 43584] [client 20.220.13.237:1300] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws73.php"] [unique_id "acb7znNG2YdGm41aN8LQNgAAAkM"]
[Sat Mar 28 05:51:10.700593 2026] [:error] [pid 34597:tid 34601] [client 20.220.13.237:1778] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws73.php"] [unique_id "acb7zoluI7-e5s1cafcJAwAAAUA"]
[Sat Mar 28 05:51:11.533416 2026] [:error] [pid 64860:tid 64923] [client 20.220.13.237:1181] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "acb7zxkU3N0pg_4aEL-liwAAAE8"]
[Sat Mar 28 05:51:12.466082 2026] [:error] [pid 64860:tid 64926] [client 20.220.13.237:1190] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "acb70BkU3N0pg_4aEL-ljgAAAFI"]
[Sat Mar 28 05:51:13.006113 2026] [:error] [pid 64860:tid 64928] [client 20.220.13.237:1164] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "acb70RkU3N0pg_4aEL-lkwAAAFQ"]
[Sat Mar 28 05:51:13.612424 2026] [:error] [pid 64861:tid 64949] [client 20.220.13.237:1180] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "acb70exK22_lUN2kvnU-4AAAAI4"]
[Sat Mar 28 05:51:14.189539 2026] [:error] [pid 64861:tid 64941] [client 20.220.13.237:1196] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lowpr.php"] [unique_id "acb70uxK22_lUN2kvnU-5gAAAIY"]
[Sat Mar 28 05:51:14.603730 2026] [:error] [pid 43579:tid 43629] [client 20.220.13.237:1851] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lowpr.php"] [unique_id "acb70iRqN4JVI8gB7Al-CwAAApU"]
[Sat Mar 28 05:51:15.020707 2026] [:error] [pid 43579:tid 43613] [client 20.220.13.237:1828] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lowpr.php"] [unique_id "acb70yRqN4JVI8gB7Al-DAAAAoU"]
[Sat Mar 28 05:51:15.442086 2026] [:error] [pid 34597:tid 34603] [client 20.220.13.237:1848] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lowpr.php"] [unique_id "acb704luI7-e5s1cafcJCQAAAUI"]
[Sat Mar 28 05:51:15.886534 2026] [:error] [pid 34597:tid 34611] [client 20.220.13.237:1807] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "acb704luI7-e5s1cafcJCgAAAUo"]
[Sat Mar 28 05:51:16.303183 2026] [:error] [pid 43579:tid 43610] [client 20.220.13.237:1834] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "acb71CRqN4JVI8gB7Al-DwAAAoI"]
[Sat Mar 28 05:51:16.718835 2026] [:error] [pid 64859:tid 64885] [client 20.220.13.237:1852] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "acb71G3qEBHXq3rHdBmhFgAAAAQ"]
[Sat Mar 28 05:51:17.133920 2026] [:error] [pid 64861:tid 64948] [client 20.220.13.237:1737] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "acb71exK22_lUN2kvnU-6gAAAI0"]
[Sat Mar 28 05:51:17.560299 2026] [:error] [pid 64860:tid 64918] [client 20.220.13.237:1844] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/144.php"] [unique_id "acb71RkU3N0pg_4aEL-llgAAAEo"]
[Sat Mar 28 05:51:18.010219 2026] [:error] [pid 34597:tid 34615] [client 20.220.13.237:1839] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/144.php"] [unique_id "acb71oluI7-e5s1cafcJDwAAAU4"]
[Sat Mar 28 05:51:18.429751 2026] [:error] [pid 43547:tid 43549] [client 20.220.13.237:1172] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/144.php"] [unique_id "acb71j4ZEfdetXP-9aCoBgAAAgA"]
[Sat Mar 28 05:51:18.848049 2026] [:error] [pid 64860:tid 64925] [client 20.220.13.237:1177] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/144.php"] [unique_id "acb71hkU3N0pg_4aEL-lmAAAAFE"]
[Sat Mar 28 05:51:19.260406 2026] [:error] [pid 43579:tid 43628] [client 20.220.13.237:1907] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "acb71yRqN4JVI8gB7Al-EgAAApQ"]
[Sat Mar 28 05:51:19.685568 2026] [:error] [pid 64861:tid 64956] [client 20.220.13.237:1207] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "acb71-xK22_lUN2kvnU-8AAAAJU"]
[Sat Mar 28 05:51:20.098893 2026] [:error] [pid 34631:tid 34677] [client 20.220.13.237:1806] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "acb72DtzjMMS6kojpeQQbwAAAdE"]
[Sat Mar 28 05:51:20.525289 2026] [:error] [pid 43578:tid 43594] [client 20.220.13.237:1672] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "acb72HNG2YdGm41aN8LQOQAAAk0"]
[Sat Mar 28 05:51:20.944773 2026] [:error] [pid 34597:tid 34620] [client 20.220.13.237:1749] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "acb72IluI7-e5s1cafcJEAAAAVM"]
[Sat Mar 28 05:51:21.364672 2026] [:error] [pid 2877:tid 2893] [client 20.220.13.237:1199] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "acb72bgM4xL1Xj409YTV4AAAAQ4"]
[Sat Mar 28 05:51:21.805427 2026] [:error] [pid 43579:tid 43627] [client 20.220.13.237:1187] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "acb72SRqN4JVI8gB7Al-FQAAApM"]
[Sat Mar 28 05:51:22.217912 2026] [:error] [pid 43547:tid 43569] [client 20.220.13.237:1170] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "acb72j4ZEfdetXP-9aCoBwAAAhQ"]
[Sat Mar 28 05:51:22.633214 2026] [:error] [pid 64859:tid 64881] [client 20.220.13.237:1175] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "acb72m3qEBHXq3rHdBmhGAAAAAA"]
[Sat Mar 28 05:51:23.052429 2026] [:error] [pid 64861:tid 64958] [client 20.220.13.237:1920] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "acb72-xK22_lUN2kvnU--AAAAJc"]
[Sat Mar 28 05:51:23.471610 2026] [:error] [pid 43547:tid 43567] [client 20.220.13.237:1197] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "acb72z4ZEfdetXP-9aCoCQAAAhI"]
[Sat Mar 28 05:51:23.887081 2026] [:error] [pid 2877:tid 2903] [client 20.220.13.237:1683] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "acb727gM4xL1Xj409YTV4wAAARg"]
[Sat Mar 28 05:51:24.308394 2026] [:error] [pid 64859:tid 64886] [client 20.220.13.237:1759] File does not exist: /usr/local/apache/htdocs/suspended-page/baixy.php
[Sat Mar 28 05:51:24.526517 2026] [:error] [pid 64859:tid 64891] [client 20.220.13.237:1759] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Sat Mar 28 05:51:24.737824 2026] [:error] [pid 64859:tid 64894] [client 20.220.13.237:1759] File does not exist: /usr/local/apache/htdocs/suspended-page/xsas.php
[Sat Mar 28 05:51:24.947393 2026] [:error] [pid 64859:tid 64896] [client 20.220.13.237:1759] File does not exist: /usr/local/apache/htdocs/suspended-page/callback.php
[Sat Mar 28 05:51:26.468763 2026] [:error] [pid 64859:tid 64905] [client 20.220.13.237:1759] File does not exist: /usr/local/apache/htdocs/suspended-page/ws83.php
[Sat Mar 28 05:51:26.677344 2026] [:error] [pid 64859:tid 64898] [client 20.220.13.237:1759] File does not exist: /usr/local/apache/htdocs/suspended-page/ws49.php
[Sat Mar 28 05:51:26.894405 2026] [:error] [pid 64859:tid 64893] [client 20.220.13.237:1759] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Sat Mar 28 05:51:27.103815 2026] [:error] [pid 64859:tid 64897] [client 20.220.13.237:1759] File does not exist: /usr/local/apache/htdocs/suspended-page/bo.php
[Sat Mar 28 05:51:27.313827 2026] [:error] [pid 64859:tid 64882] [client 20.220.13.237:1759] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sat Mar 28 05:51:27.522264 2026] [:error] [pid 64859:tid 64886] [client 20.220.13.237:1759] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Sat Mar 28 05:51:27.761897 2026] [:error] [pid 64859:tid 64884] [client 20.220.13.237:1759] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "acb7323qEBHXq3rHdBmhMAAAAAM"]
[Sat Mar 28 05:51:28.173545 2026] [:error] [pid 34597:tid 34603] [client 20.220.13.237:1752] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "acb74IluI7-e5s1cafcJFQAAAUI"]
[Sat Mar 28 05:51:28.587845 2026] [:error] [pid 43579:tid 43608] [client 20.220.13.237:1835] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "acb74CRqN4JVI8gB7Al-IQAAAoA"]
[Sat Mar 28 05:51:28.998741 2026] [:error] [pid 34597:tid 34611] [client 20.220.13.237:1191] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "acb74IluI7-e5s1cafcJFgAAAUo"]
[Sat Mar 28 05:51:29.411686 2026] [:error] [pid 43579:tid 43629] [client 20.220.13.237:1782] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "acb74SRqN4JVI8gB7Al-IwAAApU"]
[Sat Mar 28 05:51:29.832536 2026] [:error] [pid 64859:tid 64903] [client 20.220.13.237:1991] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "acb74W3qEBHXq3rHdBmhNQAAABY"]
[Sat Mar 28 05:51:30.250696 2026] [:error] [pid 43579:tid 43630] [client 20.220.13.237:1186] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "acb74iRqN4JVI8gB7Al-JAAAApY"]
[Sat Mar 28 05:51:30.667600 2026] [:error] [pid 34597:tid 34616] [client 20.220.13.237:1787] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "acb74oluI7-e5s1cafcJGQAAAU8"]
[Sat Mar 28 05:51:31.104306 2026] [:error] [pid 43579:tid 43610] [client 20.220.13.237:1754] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acb74yRqN4JVI8gB7Al-JQAAAoI"]
[Sat Mar 28 05:51:31.530116 2026] [:error] [pid 64861:tid 64944] [client 20.220.13.237:1174] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acb74-xK22_lUN2kvnU--wAAAIk"]
[Sat Mar 28 05:51:31.965941 2026] [:error] [pid 64861:tid 64953] [client 20.220.13.237:1730] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acb74-xK22_lUN2kvnU-_gAAAJI"]
[Sat Mar 28 05:51:32.383386 2026] [:error] [pid 64966:tid 64988] [client 20.220.13.237:1853] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acb75NfSvF5AFfSuKxXuIQAAAM8"]
[Sat Mar 28 05:51:32.814315 2026] [:error] [pid 43578:tid 43588] [client 20.220.13.237:1201] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "acb75HNG2YdGm41aN8LQQgAAAkc"]
[Sat Mar 28 05:51:33.230002 2026] [:error] [pid 34597:tid 34609] [client 20.220.13.237:1731] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "acb75YluI7-e5s1cafcJHQAAAUg"]
[Sat Mar 28 05:51:33.646912 2026] [:error] [pid 34597:tid 34602] [client 20.220.13.237:1814] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "acb75YluI7-e5s1cafcJHgAAAUE"]
[Sat Mar 28 05:51:34.079134 2026] [:error] [pid 34631:tid 34677] [client 20.220.13.237:1192] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "acb75jtzjMMS6kojpeQQdgAAAdE"]
[Sat Mar 28 05:51:34.491456 2026] [:error] [pid 34631:tid 34681] [client 20.220.13.237:1214] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acb75jtzjMMS6kojpeQQeQAAAdU"]
[Sat Mar 28 05:51:34.926389 2026] [:error] [pid 64861:tid 64941] [client 20.220.13.237:1178] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acb75uxK22_lUN2kvnU_BAAAAIY"]
[Sat Mar 28 05:51:35.349993 2026] [:error] [pid 64860:tid 64921] [client 20.220.13.237:1198] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acb75xkU3N0pg_4aEL-logAAAE0"]
[Sat Mar 28 05:51:35.779728 2026] [:error] [pid 64860:tid 64909] [client 20.220.13.237:1784] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acb75xkU3N0pg_4aEL-lowAAAEE"]
[Sat Mar 28 05:51:36.205272 2026] [:error] [pid 64861:tid 64951] [client 20.220.13.237:1672] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "acb76OxK22_lUN2kvnU_CAAAAJA"]
[Sat Mar 28 05:51:36.620835 2026] [:error] [pid 34597:tid 34616] [client 20.220.13.237:1702] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "acb76IluI7-e5s1cafcJIgAAAU8"]
[Sat Mar 28 05:51:37.041094 2026] [:error] [pid 64861:tid 64942] [client 20.220.13.237:1188] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "acb76exK22_lUN2kvnU_CgAAAIc"]
[Sat Mar 28 05:51:37.455823 2026] [:error] [pid 64861:tid 64955] [client 20.220.13.237:1189] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "acb76exK22_lUN2kvnU_DgAAAJQ"]
[Sat Mar 28 05:51:37.880883 2026] [:error] [pid 64861:tid 64956] [client 20.220.13.237:1739] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws75.php"] [unique_id "acb76exK22_lUN2kvnU_EQAAAJU"]
[Sat Mar 28 05:51:38.302610 2026] [:error] [pid 64859:tid 64899] [client 20.220.13.237:1179] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws75.php"] [unique_id "acb76m3qEBHXq3rHdBmhOAAAABI"]
[Sat Mar 28 05:51:38.717220 2026] [:error] [pid 64860:tid 64910] [client 20.220.13.237:1750] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws75.php"] [unique_id "acb76hkU3N0pg_4aEL-lqQAAAEI"]
[Sat Mar 28 05:51:39.159322 2026] [:error] [pid 64860:tid 64912] [client 20.220.13.237:1212] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws75.php"] [unique_id "acb76xkU3N0pg_4aEL-lrQAAAEQ"]
[Sat Mar 28 05:51:39.596533 2026] [:error] [pid 64861:tid 64956] [client 20.220.13.237:1204] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acb76-xK22_lUN2kvnU_GQAAAJU"]
[Sat Mar 28 05:51:40.009468 2026] [:error] [pid 43547:tid 43559] [client 20.220.13.237:1166] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acb77D4ZEfdetXP-9aCoFQAAAgo"]
[Sat Mar 28 05:51:40.447663 2026] [:error] [pid 34597:tid 34605] [client 20.220.13.237:1811] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acb77IluI7-e5s1cafcJJgAAAUQ"]
[Sat Mar 28 05:51:40.870115 2026] [:error] [pid 43579:tid 43630] [client 20.220.13.237:1789] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acb77CRqN4JVI8gB7Al-LwAAApY"]
[Sat Mar 28 05:51:41.302593 2026] [:error] [pid 43547:tid 43552] [client 20.220.13.237:1765] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "acb77T4ZEfdetXP-9aCoFgAAAgM"]
[Sat Mar 28 05:51:41.720437 2026] [:error] [pid 43579:tid 43609] [client 20.220.13.237:1850] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "acb77SRqN4JVI8gB7Al-MQAAAoE"]
[Sat Mar 28 05:51:42.134427 2026] [:error] [pid 64860:tid 64924] [client 20.220.13.237:1206] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "acb77hkU3N0pg_4aEL-lsAAAAFA"]
[Sat Mar 28 05:51:42.561691 2026] [:error] [pid 43579:tid 43622] [client 20.220.13.237:1740] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "acb77iRqN4JVI8gB7Al-NgAAAo4"]
[Sat Mar 28 05:51:42.982436 2026] [:error] [pid 2877:tid 2882] [client 20.220.13.237:1762] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "acb77rgM4xL1Xj409YTV6gAAAQM"]
[Sat Mar 28 05:51:43.412769 2026] [:error] [pid 43547:tid 43551] [client 20.220.13.237:1755] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "acb77z4ZEfdetXP-9aCoGQAAAgI"]
[Sat Mar 28 05:51:43.827050 2026] [:error] [pid 43579:tid 43620] [client 20.220.13.237:1776] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "acb77yRqN4JVI8gB7Al-OwAAAow"]
[Sat Mar 28 05:51:44.245633 2026] [:error] [pid 43579:tid 43614] [client 20.220.13.237:1175] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "acb78CRqN4JVI8gB7Al-PQAAAoY"]
[Sat Mar 28 05:51:44.658196 2026] [:error] [pid 43579:tid 43622] [client 20.220.13.237:1696] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "acb78CRqN4JVI8gB7Al-QAAAAo4"]
[Sat Mar 28 05:51:45.088129 2026] [:error] [pid 34631:tid 34667] [client 20.220.13.237:1771] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "acb78TtzjMMS6kojpeQQfwAAAcc"]
[Sat Mar 28 05:51:45.512429 2026] [:error] [pid 43547:tid 43568] [client 20.220.13.237:1729] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "acb78T4ZEfdetXP-9aCoHQAAAhM"]
[Sat Mar 28 05:51:45.927560 2026] [:error] [pid 34631:tid 34673] [client 20.220.13.237:1194] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "acb78TtzjMMS6kojpeQQhQAAAc0"]
[Sat Mar 28 05:51:46.339721 2026] [:error] [pid 64860:tid 64923] [client 20.220.13.237:1167] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "acb78hkU3N0pg_4aEL-ltQAAAE8"]
[Sat Mar 28 05:51:46.826345 2026] [:error] [pid 34631:tid 34675] [client 20.220.13.237:1746] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "acb78jtzjMMS6kojpeQQhwAAAc8"]
[Sat Mar 28 05:51:47.276363 2026] [:error] [pid 64860:tid 64924] [client 20.220.13.237:1735] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "acb78xkU3N0pg_4aEL-luwAAAFA"]
[Sat Mar 28 05:51:47.690640 2026] [:error] [pid 64966:tid 64973] [client 20.220.13.237:1768] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "acb789fSvF5AFfSuKxXuJAAAAMA"]
[Sat Mar 28 09:04:23.727158 2026] [:error] [pid 64861:tid 64940] [client 20.220.9.32:43917] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Sat Mar 28 09:04:23.936780 2026] [:error] [pid 64861:tid 64955] [client 20.220.9.32:43917] File does not exist: /usr/local/apache/htdocs/suspended-page/xc0252.php
[Sat Mar 28 09:04:24.146598 2026] [:error] [pid 64861:tid 64954] [client 20.220.9.32:43917] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Sat Mar 28 09:04:24.356118 2026] [:error] [pid 64861:tid 64958] [client 20.220.9.32:43917] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sat Mar 28 09:04:24.566886 2026] [:error] [pid 64861:tid 64949] [client 20.220.9.32:43917] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Sat Mar 28 09:04:24.776966 2026] [:error] [pid 64861:tid 64944] [client 20.220.9.32:43917] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Sat Mar 28 09:04:24.986525 2026] [:error] [pid 64861:tid 64937] [client 20.220.9.32:43917] File does not exist: /usr/local/apache/htdocs/suspended-page/ws47.php
[Sat Mar 28 09:04:25.196561 2026] [:error] [pid 64861:tid 64951] [client 20.220.9.32:43917] File does not exist: /usr/local/apache/htdocs/suspended-page/vvvb.php
[Sat Mar 28 09:04:25.406031 2026] [:error] [pid 64861:tid 64959] [client 20.220.9.32:43917] File does not exist: /usr/local/apache/htdocs/suspended-page/x12.php
[Sat Mar 28 09:04:25.615335 2026] [:error] [pid 64861:tid 64942] [client 20.220.9.32:43917] File does not exist: /usr/local/apache/htdocs/suspended-page/zcsu.php
[Sat Mar 28 09:04:25.821770 2026] [:error] [pid 64861:tid 64936] [client 20.220.9.32:43917] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "accpGexK22_lUN2kvnWI4AAAAIE"]
[Sat Mar 28 09:04:27.254122 2026] [:error] [pid 64860:tid 64923] [client 20.220.9.32:43975] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "accpGxkU3N0pg_4aEL8HxgAAAE8"]
[Sat Mar 28 09:04:28.686519 2026] [:error] [pid 43547:tid 43561] [client 20.220.9.32:44000] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "accpHD4ZEfdetXP-9aC7LgAAAgw"]
[Sat Mar 28 09:04:30.111530 2026] [:error] [pid 64861:tid 64948] [client 20.220.9.32:44001] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "accpHuxK22_lUN2kvnWI4QAAAI0"]
[Sat Mar 28 09:04:31.528867 2026] [:error] [pid 64861:tid 64944] [client 20.220.9.32:43915] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-cxs.php"] [unique_id "accpH-xK22_lUN2kvnWI6AAAAIk"]
[Sat Mar 28 09:04:32.955695 2026] [:error] [pid 43578:tid 43599] [client 20.220.9.32:43912] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-cxs.php"] [unique_id "accpIHNG2YdGm41aN8LtEgAAAlI"]
[Sat Mar 28 09:04:34.376006 2026] [:error] [pid 34597:tid 34612] [client 20.220.9.32:44021] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-cxs.php"] [unique_id "accpIoluI7-e5s1cafc2QAAAAUs"]
[Sat Mar 28 09:04:35.800928 2026] [:error] [pid 34597:tid 34613] [client 20.220.9.32:43991] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-cxs.php"] [unique_id "accpI4luI7-e5s1cafc2QQAAAUw"]
[Sat Mar 28 09:04:37.215776 2026] [:error] [pid 64861:tid 64938] [client 20.220.9.32:44027] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-scanner.php"] [unique_id "accpJexK22_lUN2kvnWI7AAAAIM"]
[Sat Mar 28 09:04:38.630274 2026] [:error] [pid 43579:tid 43618] [client 20.220.9.32:43920] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-scanner.php"] [unique_id "accpJiRqN4JVI8gB7AmhaAAAAoo"]
[Sat Mar 28 09:04:40.051048 2026] [:error] [pid 2877:tid 2898] [client 20.220.9.32:44023] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-scanner.php"] [unique_id "accpKLgM4xL1Xj409YTkBwAAARM"]
[Sat Mar 28 09:04:41.473048 2026] [:error] [pid 34597:tid 34609] [client 20.220.9.32:43840] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-scanner.php"] [unique_id "accpKYluI7-e5s1cafc2RAAAAUg"]
[Sat Mar 28 09:04:42.896864 2026] [:error] [pid 34597:tid 34606] [client 20.220.9.32:43993] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/awh.php"] [unique_id "accpKoluI7-e5s1cafc2RwAAAUU"]
[Sat Mar 28 09:04:44.317879 2026] [:error] [pid 34631:tid 34673] [client 20.220.9.32:44005] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/awh.php"] [unique_id "accpLDtzjMMS6kojpeRMGwAAAc0"]
[Sat Mar 28 09:04:45.736139 2026] [:error] [pid 64859:tid 64905] [client 20.220.9.32:44002] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/awh.php"] [unique_id "accpLW3qEBHXq3rHdBm2nAAAABg"]
[Sat Mar 28 09:04:47.164085 2026] [:error] [pid 2877:tid 2885] [client 20.220.9.32:43971] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/awh.php"] [unique_id "accpL7gM4xL1Xj409YTkCAAAAQY"]
[Sat Mar 28 09:04:48.580963 2026] [:error] [pid 43578:tid 43598] [client 20.220.9.32:43987] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/24.php"] [unique_id "accpMHNG2YdGm41aN8LtFQAAAlE"]
[Sat Mar 28 09:04:50.006901 2026] [:error] [pid 64861:tid 64939] [client 20.220.9.32:44019] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/24.php"] [unique_id "accpMuxK22_lUN2kvnWI8AAAAIQ"]
[Sat Mar 28 09:04:51.431580 2026] [:error] [pid 64860:tid 64910] [client 20.220.9.32:43944] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/24.php"] [unique_id "accpMxkU3N0pg_4aEL8H0gAAAEI"]
[Sat Mar 28 09:04:52.851797 2026] [:error] [pid 43578:tid 43592] [client 20.220.9.32:43918] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/24.php"] [unique_id "accpNHNG2YdGm41aN8LtGwAAAks"]
[Sat Mar 28 09:04:54.274858 2026] [:error] [pid 64860:tid 64912] [client 20.220.9.32:43985] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zz8.php"] [unique_id "accpNhkU3N0pg_4aEL8H1AAAAEQ"]
[Sat Mar 28 09:04:55.695657 2026] [:error] [pid 34631:tid 34679] [client 20.220.9.32:43979] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zz8.php"] [unique_id "accpNztzjMMS6kojpeRMIgAAAdM"]
[Sat Mar 28 09:04:57.115117 2026] [:error] [pid 34631:tid 34670] [client 20.220.9.32:43984] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zz8.php"] [unique_id "accpOTtzjMMS6kojpeRMJAAAAco"]
[Sat Mar 28 09:04:58.541305 2026] [:error] [pid 64966:tid 64986] [client 20.220.9.32:43977] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zz8.php"] [unique_id "accpOtfSvF5AFfSuKxX96wAAAM0"]
[Sat Mar 28 09:04:59.966790 2026] [:error] [pid 34631:tid 34660] [client 20.220.9.32:43922] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/feokc.php"] [unique_id "accpOztzjMMS6kojpeRMKwAAAcA"]
[Sat Mar 28 09:05:01.407947 2026] [:error] [pid 64861:tid 64953] [client 20.220.9.32:43989] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/feokc.php"] [unique_id "accpPexK22_lUN2kvnWI-gAAAJI"]
[Sat Mar 28 09:05:02.825373 2026] [:error] [pid 64860:tid 64930] [client 20.220.9.32:43997] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/feokc.php"] [unique_id "accpPhkU3N0pg_4aEL8H2QAAAFY"]
[Sat Mar 28 09:05:04.246383 2026] [:error] [pid 64861:tid 64954] [client 20.220.9.32:43973] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/feokc.php"] [unique_id "accpQOxK22_lUN2kvnWI_gAAAJM"]
[Sat Mar 28 09:05:05.660136 2026] [:error] [pid 64861:tid 64944] [client 20.220.9.32:44008] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fetch.php"] [unique_id "accpQexK22_lUN2kvnWJAAAAAIk"]
[Sat Mar 28 09:05:07.077597 2026] [:error] [pid 64860:tid 64909] [client 20.220.9.32:43988] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fetch.php"] [unique_id "accpQxkU3N0pg_4aEL8H2wAAAEE"]
[Sat Mar 28 09:05:08.498511 2026] [:error] [pid 64860:tid 64929] [client 20.220.9.32:44012] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fetch.php"] [unique_id "accpRBkU3N0pg_4aEL8H3AAAAFU"]
[Sat Mar 28 09:05:09.926516 2026] [:error] [pid 64860:tid 64908] [client 20.220.9.32:43998] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fetch.php"] [unique_id "accpRRkU3N0pg_4aEL8H3QAAAEA"]
[Sat Mar 28 09:05:11.359585 2026] [:error] [pid 64861:tid 64940] [client 20.220.9.32:43907] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/phpmini.php"] [unique_id "accpR-xK22_lUN2kvnWJCwAAAIU"]
[Sat Mar 28 09:05:12.781266 2026] [:error] [pid 64860:tid 64912] [client 20.220.9.32:43914] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/phpmini.php"] [unique_id "accpSBkU3N0pg_4aEL8H4gAAAEQ"]
[Sat Mar 28 09:05:14.205187 2026] [:error] [pid 64859:tid 64888] [client 20.220.9.32:43996] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/phpmini.php"] [unique_id "accpSm3qEBHXq3rHdBm2owAAAAc"]
[Sat Mar 28 09:05:15.634134 2026] [:error] [pid 64966:tid 64993] [client 20.220.9.32:43936] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/phpmini.php"] [unique_id "accpS9fSvF5AFfSuKxX97QAAANQ"]
[Sat Mar 28 09:05:17.056196 2026] [:error] [pid 64966:tid 64978] [client 20.220.9.32:43976] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "accpTdfSvF5AFfSuKxX97gAAAMU"]
[Sat Mar 28 09:05:18.477351 2026] [:error] [pid 43579:tid 43612] [client 20.220.9.32:43933] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "accpTiRqN4JVI8gB7AmhbQAAAoQ"]
[Sat Mar 28 09:05:19.896542 2026] [:error] [pid 64860:tid 64909] [client 20.220.9.32:44024] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "accpTxkU3N0pg_4aEL8H6AAAAEE"]
[Sat Mar 28 09:05:21.312493 2026] [:error] [pid 34597:tid 34620] [client 20.220.9.32:43970] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "accpUYluI7-e5s1cafc2UAAAAVM"]
[Sat Mar 28 09:05:22.740163 2026] [:error] [pid 64966:tid 64979] [client 20.220.9.32:43957] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tbute.php"] [unique_id "accpUtfSvF5AFfSuKxX98AAAAMY"]
[Sat Mar 28 09:05:24.151912 2026] [:error] [pid 2877:tid 2891] [client 20.220.9.32:43973] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tbute.php"] [unique_id "accpVLgM4xL1Xj409YTkCwAAAQw"]
[Sat Mar 28 09:05:25.571516 2026] [:error] [pid 64860:tid 64932] [client 20.220.9.32:43969] File does not exist: /usr/local/apache/htdocs/suspended-page/tbute.php
[Sat Mar 28 09:05:26.984132 2026] [:error] [pid 64860:tid 64932] [client 20.220.9.32:43969] File does not exist: /usr/local/apache/htdocs/suspended-page/rovoj.php
[Sat Mar 28 09:05:27.193335 2026] [:error] [pid 64860:tid 64920] [client 20.220.9.32:43969] File does not exist: /usr/local/apache/htdocs/suspended-page/r3grt7.php
[Sat Mar 28 09:05:27.402992 2026] [:error] [pid 64860:tid 64921] [client 20.220.9.32:43969] File does not exist: /usr/local/apache/htdocs/suspended-page/phina.php
[Sat Mar 28 09:05:27.612869 2026] [:error] [pid 64860:tid 64926] [client 20.220.9.32:43969] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Sat Mar 28 09:05:27.824634 2026] [:error] [pid 64860:tid 64929] [client 20.220.9.32:43969] File does not exist: /usr/local/apache/htdocs/suspended-page/fs6.php
[Sat Mar 28 09:05:28.034281 2026] [:error] [pid 64860:tid 64924] [client 20.220.9.32:43969] File does not exist: /usr/local/apache/htdocs/suspended-page/fs7.php
[Sat Mar 28 09:05:28.246793 2026] [:error] [pid 64860:tid 64923] [client 20.220.9.32:43969] File does not exist: /usr/local/apache/htdocs/suspended-page/kbfr.php
[Sat Mar 28 09:05:28.456327 2026] [:error] [pid 64860:tid 64910] [client 20.220.9.32:43969] File does not exist: /usr/local/apache/htdocs/suspended-page/595.php
[Sat Mar 28 09:05:28.665376 2026] [:error] [pid 64860:tid 64925] [client 20.220.9.32:43969] File does not exist: /usr/local/apache/htdocs/suspended-page/x1.php
[Sat Mar 28 09:05:28.877880 2026] [:error] [pid 64860:tid 64913] [client 20.220.9.32:43969] File does not exist: /usr/local/apache/htdocs/suspended-page/gk.php
[Sat Mar 28 09:05:29.084176 2026] [:error] [pid 64860:tid 64916] [client 20.220.9.32:43969] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "accpWRkU3N0pg_4aEL8IBAAAAEg"]
[Sat Mar 28 09:05:30.508726 2026] [:error] [pid 64859:tid 64904] [client 20.220.9.32:43864] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "accpWm3qEBHXq3rHdBm2qgAAABc"]
[Sat Mar 28 09:05:31.938061 2026] [:error] [pid 34631:tid 34680] [client 20.220.9.32:44018] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "accpWztzjMMS6kojpeRMMQAAAdQ"]
[Sat Mar 28 09:05:33.360344 2026] [:error] [pid 64859:tid 64884] [client 20.220.9.32:43928] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "accpXW3qEBHXq3rHdBm2qwAAAAM"]
[Sat Mar 28 09:05:34.797025 2026] [:error] [pid 34631:tid 34660] [client 20.220.9.32:43911] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "accpXjtzjMMS6kojpeRMMgAAAcA"]
[Sat Mar 28 09:05:36.222488 2026] [:error] [pid 64860:tid 64921] [client 20.220.9.32:43932] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "accpYBkU3N0pg_4aEL8IEAAAAE0"]
[Sat Mar 28 09:05:37.649988 2026] [:error] [pid 34597:tid 34624] [client 20.220.9.32:43954] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "accpYYluI7-e5s1cafc2UgAAAVc"]
[Sat Mar 28 09:05:39.065174 2026] [:error] [pid 64861:tid 64943] [client 20.220.9.32:44028] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "accpY-xK22_lUN2kvnWJGgAAAIg"]
[Sat Mar 28 09:05:40.487759 2026] [:error] [pid 64861:tid 64944] [client 20.220.9.32:43885] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "accpZOxK22_lUN2kvnWJHgAAAIk"]
[Sat Mar 28 09:05:41.908787 2026] [:error] [pid 64860:tid 64915] [client 20.220.9.32:43927] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "accpZRkU3N0pg_4aEL8IGgAAAEc"]
[Sat Mar 28 09:05:43.334998 2026] [:error] [pid 34631:tid 34665] [client 20.220.9.32:44004] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "accpZztzjMMS6kojpeRMPgAAAcU"]
[Sat Mar 28 09:05:44.754969 2026] [:error] [pid 43547:tid 43559] [client 20.220.9.32:44025] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "accpaD4ZEfdetXP-9aC7OQAAAgo"]
[Sat Mar 28 09:05:46.177823 2026] [:error] [pid 34631:tid 34677] [client 20.220.9.32:44016] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws79.php"] [unique_id "accpajtzjMMS6kojpeRMQAAAAdE"]
[Sat Mar 28 09:05:47.597682 2026] [:error] [pid 34631:tid 34683] [client 20.220.9.32:44017] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws79.php"] [unique_id "accpaztzjMMS6kojpeRMRQAAAdc"]
[Sat Mar 28 09:05:49.017376 2026] [:error] [pid 64861:tid 64956] [client 20.220.9.32:43994] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws79.php"] [unique_id "accpbexK22_lUN2kvnWJJAAAAJU"]
[Sat Mar 28 09:05:50.443494 2026] [:error] [pid 34597:tid 34622] [client 20.220.9.32:43847] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws79.php"] [unique_id "accpboluI7-e5s1cafc2VQAAAVU"]
[Sat Mar 28 09:05:51.860556 2026] [:error] [pid 34597:tid 34621] [client 20.220.9.32:43935] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "accpb4luI7-e5s1cafc2WAAAAVQ"]
[Sat Mar 28 09:05:53.283035 2026] [:error] [pid 64861:tid 64958] [client 20.220.9.32:43924] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "accpcexK22_lUN2kvnWJKgAAAJc"]
[Sat Mar 28 09:05:54.700041 2026] [:error] [pid 64861:tid 64957] [client 20.220.9.32:43906] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "accpcuxK22_lUN2kvnWJLwAAAJY"]
[Sat Mar 28 09:05:56.112004 2026] [:error] [pid 43579:tid 43631] [client 20.220.9.32:43990] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "accpdCRqN4JVI8gB7AmheQAAApc"]
[Sat Mar 28 09:05:57.522549 2026] [:error] [pid 43547:tid 43558] [client 20.220.9.32:43974] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws50.php"] [unique_id "accpdT4ZEfdetXP-9aC7QQAAAgk"]
[Sat Mar 28 09:05:58.940097 2026] [:error] [pid 64966:tid 64991] [client 20.220.9.32:43980] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws50.php"] [unique_id "accpdtfSvF5AFfSuKxX-AQAAANI"]
[Sat Mar 28 09:06:00.370944 2026] [:error] [pid 64859:tid 64881] [client 20.220.9.32:43952] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws50.php"] [unique_id "accpeG3qEBHXq3rHdBm2wwAAAAA"]
[Sat Mar 28 09:06:01.793678 2026] [:error] [pid 64859:tid 64895] [client 20.220.9.32:44030] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws50.php"] [unique_id "accpeW3qEBHXq3rHdBm2xAAAAA4"]
[Sat Mar 28 09:06:03.215018 2026] [:error] [pid 64966:tid 64988] [client 20.220.9.32:43909] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws44.php"] [unique_id "accpe9fSvF5AFfSuKxX-BgAAAM8"]
[Sat Mar 28 09:06:04.636804 2026] [:error] [pid 64860:tid 64927] [client 20.220.9.32:44029] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws44.php"] [unique_id "accpfBkU3N0pg_4aEL8IKAAAAFM"]
[Sat Mar 28 09:06:06.058799 2026] [:error] [pid 34631:tid 34671] [client 20.220.9.32:43965] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws44.php"] [unique_id "accpfjtzjMMS6kojpeRMUQAAAcs"]
[Sat Mar 28 09:06:07.480945 2026] [:error] [pid 64966:tid 64993] [client 20.220.9.32:43948] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws44.php"] [unique_id "accpf9fSvF5AFfSuKxX-CQAAANQ"]
[Sat Mar 28 09:06:08.905308 2026] [:error] [pid 64861:tid 64956] [client 20.220.9.32:43919] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws43.php"] [unique_id "accpgOxK22_lUN2kvnWJNQAAAJU"]
[Sat Mar 28 09:06:10.326106 2026] [:error] [pid 64860:tid 64918] [client 20.220.9.32:43967] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws43.php"] [unique_id "accpghkU3N0pg_4aEL8ILAAAAEo"]
[Sat Mar 28 09:06:11.749977 2026] [:error] [pid 34597:tid 34621] [client 20.220.9.32:44010] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws43.php"] [unique_id "accpg4luI7-e5s1cafc2YAAAAVQ"]
[Sat Mar 28 09:06:13.173063 2026] [:error] [pid 43579:tid 43624] [client 20.220.9.32:43901] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws43.php"] [unique_id "accphSRqN4JVI8gB7AmhhQAAApA"]
[Sat Mar 28 09:06:14.599865 2026] [:error] [pid 43579:tid 43628] [client 20.220.9.32:43999] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws42.php"] [unique_id "accphiRqN4JVI8gB7AmhiQAAApQ"]
[Sat Mar 28 09:06:16.015864 2026] [:error] [pid 64860:tid 64916] [client 20.220.9.32:43874] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws42.php"] [unique_id "accpiBkU3N0pg_4aEL8INwAAAEg"]
[Sat Mar 28 09:06:17.437527 2026] [:error] [pid 43579:tid 43629] [client 20.220.9.32:43978] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws42.php"] [unique_id "accpiSRqN4JVI8gB7AmhjQAAApU"]
[Sat Mar 28 09:06:18.856635 2026] [:error] [pid 43547:tid 43552] [client 20.220.9.32:43939] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws42.php"] [unique_id "accpij4ZEfdetXP-9aC7TAAAAgM"]
[Sat Mar 28 09:06:20.282411 2026] [:error] [pid 43547:tid 43550] [client 20.220.9.32:43893] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws40.php"] [unique_id "accpjD4ZEfdetXP-9aC7TgAAAgE"]
[Sat Mar 28 09:06:21.706364 2026] [:error] [pid 64860:tid 64928] [client 20.220.9.32:43891] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws40.php"] [unique_id "accpjRkU3N0pg_4aEL8IQwAAAFQ"]
[Sat Mar 28 09:06:23.128479 2026] [:error] [pid 64859:tid 64898] [client 20.220.9.32:43841] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws40.php"] [unique_id "accpj23qEBHXq3rHdBm20AAAABE"]
[Sat Mar 28 09:06:24.543122 2026] [:error] [pid 64966:tid 64977] [client 20.220.9.32:43951] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws40.php"] [unique_id "accpkNfSvF5AFfSuKxX-DQAAAMQ"]
[Sat Mar 28 09:06:25.961291 2026] [:error] [pid 43579:tid 43609] [client 20.220.9.32:43908] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws36.php"] [unique_id "accpkSRqN4JVI8gB7AmhkQAAAoE"]
[Sat Mar 28 09:06:27.380314 2026] [:error] [pid 64966:tid 64995] [client 20.220.9.32:43866] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws36.php"] [unique_id "accpk9fSvF5AFfSuKxX-EAAAANY"]
[Sat Mar 28 09:06:28.795362 2026] [:error] [pid 64860:tid 64923] [client 20.220.9.32:43875] File does not exist: /usr/local/apache/htdocs/suspended-page/ws36.php
[Sat Mar 28 09:06:29.004708 2026] [:error] [pid 64860:tid 64927] [client 20.220.9.32:43875] File does not exist: /usr/local/apache/htdocs/suspended-page/vwxbi.php
[Sat Mar 28 09:06:30.596596 2026] [:error] [pid 64860:tid 64927] [client 20.220.9.32:43875] File does not exist: /usr/local/apache/htdocs/suspended-page/shellerr.php
[Sat Mar 28 09:06:30.804764 2026] [:error] [pid 64860:tid 64921] [client 20.220.9.32:43875] File does not exist: /usr/local/apache/htdocs/suspended-page/vaza.php
[Sat Mar 28 09:06:31.015014 2026] [:error] [pid 64860:tid 64923] [client 20.220.9.32:43875] File does not exist: /usr/local/apache/htdocs/suspended-page/cvz.php
[Sat Mar 28 09:06:31.223930 2026] [:error] [pid 64860:tid 64926] [client 20.220.9.32:43875] File does not exist: /usr/local/apache/htdocs/suspended-page/wtiiy.php
[Sat Mar 28 09:06:31.433699 2026] [:error] [pid 64860:tid 64930] [client 20.220.9.32:43875] File does not exist: /usr/local/apache/htdocs/suspended-page/aee.php
[Sat Mar 28 09:06:31.642283 2026] [:error] [pid 64860:tid 64917] [client 20.220.9.32:43875] File does not exist: /usr/local/apache/htdocs/suspended-page/sweg.php
[Sat Mar 28 09:06:31.863281 2026] [:error] [pid 64860:tid 64925] [client 20.220.9.32:43875] File does not exist: /usr/local/apache/htdocs/suspended-page/sql.php
[Sat Mar 28 09:06:32.073071 2026] [:error] [pid 64860:tid 64927] [client 20.220.9.32:43875] File does not exist: /usr/local/apache/htdocs/suspended-page/sc.php
[Sat Mar 28 09:06:32.281590 2026] [:error] [pid 64860:tid 64921] [client 20.220.9.32:43875] File does not exist: /usr/local/apache/htdocs/suspended-page/eee.php
[Sat Mar 28 09:06:32.486851 2026] [:error] [pid 64860:tid 64913] [client 20.220.9.32:43875] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "accpmBkU3N0pg_4aEL8IaAAAAEU"]
[Sat Mar 28 09:06:33.908556 2026] [:error] [pid 64860:tid 64924] [client 20.220.9.32:43888] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "accpmRkU3N0pg_4aEL8IbgAAAFA"]
[Sat Mar 28 09:06:35.319832 2026] [:error] [pid 43579:tid 43610] [client 20.220.9.32:44011] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "accpmyRqN4JVI8gB7AmhlwAAAoI"]
[Sat Mar 28 09:06:36.736710 2026] [:error] [pid 34631:tid 34677] [client 20.220.9.32:43904] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "accpnDtzjMMS6kojpeRMWwAAAdE"]
[Sat Mar 28 09:06:38.159317 2026] [:error] [pid 43579:tid 43612] [client 20.220.9.32:43956] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "accpniRqN4JVI8gB7AmhmgAAAoQ"]
[Sat Mar 28 09:06:39.594944 2026] [:error] [pid 64861:tid 64947] [client 20.220.9.32:43930] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "accpn-xK22_lUN2kvnWJRwAAAIw"]
[Sat Mar 28 09:06:41.025976 2026] [:error] [pid 64859:tid 64899] [client 20.220.9.32:43953] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "accpoW3qEBHXq3rHdBm20wAAABI"]
[Sat Mar 28 09:06:42.441278 2026] [:error] [pid 34631:tid 34662] [client 20.220.9.32:43923] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "accpojtzjMMS6kojpeRMYwAAAcI"]
[Sat Mar 28 09:06:43.864293 2026] [:error] [pid 64861:tid 64949] [client 20.220.9.32:43949] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roter.php"] [unique_id "accpo-xK22_lUN2kvnWJSwAAAI4"]
[Sat Mar 28 09:06:45.288371 2026] [:error] [pid 64861:tid 64955] [client 20.220.9.32:44031] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roter.php"] [unique_id "accppexK22_lUN2kvnWJUAAAAJQ"]
[Sat Mar 28 09:06:46.707977 2026] [:error] [pid 64860:tid 64930] [client 20.220.9.32:43787] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roter.php"] [unique_id "accpphkU3N0pg_4aEL8InQAAAFY"]
[Sat Mar 28 09:06:48.148589 2026] [:error] [pid 64860:tid 64915] [client 20.220.9.32:43995] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roter.php"] [unique_id "accpqBkU3N0pg_4aEL8IrQAAAEc"]
[Sat Mar 28 09:06:49.583440 2026] [:error] [pid 34631:tid 34677] [client 20.220.9.32:43850] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/size.php"] [unique_id "accpqTtzjMMS6kojpeRMbAAAAdE"]
[Sat Mar 28 09:06:51.005366 2026] [:error] [pid 64861:tid 64959] [client 20.220.9.32:44020] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/size.php"] [unique_id "accpq-xK22_lUN2kvnWJXgAAAJg"]
[Sat Mar 28 09:06:52.429590 2026] [:error] [pid 64860:tid 64909] [client 20.220.9.32:43862] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/size.php"] [unique_id "accprBkU3N0pg_4aEL8IvAAAAEE"]
[Sat Mar 28 09:06:53.851636 2026] [:error] [pid 34631:tid 34681] [client 20.220.9.32:43926] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/size.php"] [unique_id "accprTtzjMMS6kojpeRMdQAAAdU"]
[Sat Mar 28 09:06:55.275418 2026] [:error] [pid 34597:tid 34607] [client 20.220.9.32:43869] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/save.php"] [unique_id "accpr4luI7-e5s1cafc2eAAAAUY"]
[Sat Mar 28 09:06:56.702920 2026] [:error] [pid 64860:tid 64918] [client 20.220.9.32:43916] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/save.php"] [unique_id "accpsBkU3N0pg_4aEL8IxAAAAEo"]
[Sat Mar 28 09:06:58.125104 2026] [:error] [pid 64860:tid 64911] [client 20.220.9.32:43946] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/save.php"] [unique_id "accpshkU3N0pg_4aEL8IyAAAAEM"]
[Sat Mar 28 09:06:59.542291 2026] [:error] [pid 64861:tid 64959] [client 20.220.9.32:44007] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/save.php"] [unique_id "accps-xK22_lUN2kvnWJbQAAAJg"]
[Sat Mar 28 09:07:00.965603 2026] [:error] [pid 64859:tid 64895] [client 20.220.9.32:43870] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "accptG3qEBHXq3rHdBm23AAAAA4"]
[Sat Mar 28 09:07:02.409212 2026] [:error] [pid 64861:tid 64947] [client 20.220.9.32:43881] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "accptuxK22_lUN2kvnWJbwAAAIw"]
[Sat Mar 28 09:07:03.826419 2026] [:error] [pid 34631:tid 34673] [client 20.220.9.32:43843] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "accptztzjMMS6kojpeRMgQAAAc0"]
[Sat Mar 28 09:07:05.247183 2026] [:error] [pid 34631:tid 34661] [client 20.220.9.32:43945] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "accpuTtzjMMS6kojpeRMhwAAAcE"]
[Sat Mar 28 09:07:06.669304 2026] [:error] [pid 43578:tid 43594] [client 20.220.9.32:43781] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n1GiO.php"] [unique_id "accpunNG2YdGm41aN8LtKwAAAk0"]
[Sat Mar 28 09:07:08.091677 2026] [:error] [pid 64859:tid 64899] [client 20.220.9.32:43858] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n1GiO.php"] [unique_id "accpvG3qEBHXq3rHdBm24gAAABI"]
[Sat Mar 28 09:07:09.522729 2026] [:error] [pid 43579:tid 43621] [client 20.220.9.32:43934] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n1GiO.php"] [unique_id "accpvSRqN4JVI8gB7AmhqQAAAo0"]
[Sat Mar 28 09:07:10.934625 2026] [:error] [pid 43578:tid 43604] [client 20.220.9.32:43806] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n1GiO.php"] [unique_id "accpvnNG2YdGm41aN8LtOQAAAlc"]
[Sat Mar 28 09:07:12.359263 2026] [:error] [pid 34631:tid 34663] [client 20.220.9.32:44015] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pLdK1.php"] [unique_id "accpwDtzjMMS6kojpeRMlgAAAcM"]
[Sat Mar 28 09:07:13.787585 2026] [:error] [pid 34631:tid 34670] [client 20.220.9.32:43886] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pLdK1.php"] [unique_id "accpwTtzjMMS6kojpeRMmAAAAco"]
[Sat Mar 28 09:07:15.203284 2026] [:error] [pid 2877:tid 2892] [client 20.220.9.32:44026] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pLdK1.php"] [unique_id "accpw7gM4xL1Xj409YTkHgAAAQ0"]
[Sat Mar 28 09:07:16.639382 2026] [:error] [pid 2877:tid 2901] [client 20.220.9.32:43966] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pLdK1.php"] [unique_id "accpxLgM4xL1Xj409YTkHwAAARY"]
[Sat Mar 28 09:07:18.063691 2026] [:error] [pid 64861:tid 64955] [client 20.220.9.32:43913] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/llb1J.php"] [unique_id "accpxuxK22_lUN2kvnWJfgAAAJQ"]
[Sat Mar 28 09:07:19.485583 2026] [:error] [pid 43579:tid 43623] [client 20.220.9.32:43861] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/llb1J.php"] [unique_id "accpxyRqN4JVI8gB7AmhrQAAAo8"]
[Sat Mar 28 09:07:20.914341 2026] [:error] [pid 64860:tid 64928] [client 20.220.9.32:44014] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/llb1J.php"] [unique_id "accpyBkU3N0pg_4aEL8I2wAAAFQ"]
[Sat Mar 28 09:07:22.330521 2026] [:error] [pid 2877:tid 2880] [client 20.220.9.32:43846] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/llb1J.php"] [unique_id "accpyrgM4xL1Xj409YTkJQAAAQE"]
[Sat Mar 28 09:07:23.761441 2026] [:error] [pid 64860:tid 64925] [client 20.220.9.32:43878] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jeZDu.php"] [unique_id "accpyxkU3N0pg_4aEL8I4AAAAFE"]
[Sat Mar 28 09:07:25.182493 2026] [:error] [pid 64859:tid 64882] [client 20.220.9.32:43782] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jeZDu.php"] [unique_id "accpzW3qEBHXq3rHdBm26AAAAAE"]
[Sat Mar 28 09:07:26.603385 2026] [:error] [pid 43547:tid 43563] [client 20.220.9.32:43921] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jeZDu.php"] [unique_id "accpzj4ZEfdetXP-9aC7ZwAAAg4"]
[Sat Mar 28 09:07:28.021252 2026] [:error] [pid 43547:tid 43573] [client 20.220.9.32:43856] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jeZDu.php"] [unique_id "accp0D4ZEfdetXP-9aC7aAAAAhg"]
[Sat Mar 28 09:07:29.441562 2026] [:error] [pid 43547:tid 43569] [client 20.220.9.32:43962] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gec.php"] [unique_id "accp0T4ZEfdetXP-9aC7aQAAAhQ"]
[Sat Mar 28 09:07:30.864766 2026] [:error] [pid 43547:tid 43559] [client 20.220.9.32:43942] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gec.php"] [unique_id "accp0j4ZEfdetXP-9aC7awAAAgo"]
[Sat Mar 28 09:07:32.290918 2026] [:error] [pid 43547:tid 43556] [client 20.220.9.32:43794] File does not exist: /usr/local/apache/htdocs/suspended-page/gec.php
[Sat Mar 28 09:07:32.500027 2026] [:error] [pid 43547:tid 43555] [client 20.220.9.32:43794] File does not exist: /usr/local/apache/htdocs/suspended-page/bfuKK.php
[Sat Mar 28 09:07:32.709881 2026] [:error] [pid 43547:tid 43570] [client 20.220.9.32:43794] File does not exist: /usr/local/apache/htdocs/suspended-page/OpVq6.php
[Sat Mar 28 09:07:32.918054 2026] [:error] [pid 43547:tid 43566] [client 20.220.9.32:43794] File does not exist: /usr/local/apache/htdocs/suspended-page/Q73BO.php
[Sat Mar 28 09:07:33.128336 2026] [:error] [pid 43547:tid 43571] [client 20.220.9.32:43794] File does not exist: /usr/local/apache/htdocs/suspended-page/rmpoa.php
[Sat Mar 28 09:07:33.337267 2026] [:error] [pid 43547:tid 43553] [client 20.220.9.32:43794] File does not exist: /usr/local/apache/htdocs/suspended-page/wgift1.php
[Sat Mar 28 09:07:33.546410 2026] [:error] [pid 43547:tid 43554] [client 20.220.9.32:43794] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Sat Mar 28 09:07:33.755609 2026] [:error] [pid 43547:tid 43567] [client 20.220.9.32:43794] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Sat Mar 28 09:07:33.965096 2026] [:error] [pid 43547:tid 43551] [client 20.220.9.32:43794] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Sat Mar 28 09:07:34.174397 2026] [:error] [pid 43547:tid 43560] [client 20.220.9.32:43794] File does not exist: /usr/local/apache/htdocs/suspended-page/v2.php
[Sat Mar 28 09:07:34.383206 2026] [:error] [pid 43547:tid 43557] [client 20.220.9.32:43794] File does not exist: /usr/local/apache/htdocs/suspended-page/v3.php
[Sat Mar 28 09:07:34.589768 2026] [:error] [pid 43547:tid 43549] [client 20.220.9.32:43794] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "accp1j4ZEfdetXP-9aC7dwAAAgA"]
[Sat Mar 28 09:07:36.001189 2026] [:error] [pid 64859:tid 64897] [client 20.220.9.32:43828] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "accp123qEBHXq3rHdBm27wAAABA"]
[Sat Mar 28 09:07:37.423547 2026] [:error] [pid 34631:tid 34660] [client 20.220.9.32:43937] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "accp2TtzjMMS6kojpeRMxQAAAcA"]
[Sat Mar 28 09:07:38.844677 2026] [:error] [pid 34597:tid 34619] [client 20.220.9.32:44009] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "accp2oluI7-e5s1cafc2kQAAAVI"]
[Sat Mar 28 09:07:40.269363 2026] [:error] [pid 43578:tid 43596] [client 20.220.9.32:44006] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ant.php"] [unique_id "accp3HNG2YdGm41aN8LtqgAAAk8"]
[Sat Mar 28 09:07:41.690803 2026] [:error] [pid 43578:tid 43583] [client 20.220.9.32:43844] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ant.php"] [unique_id "accp3XNG2YdGm41aN8LtrgAAAkI"]
[Sat Mar 28 09:07:43.114225 2026] [:error] [pid 64860:tid 64927] [client 20.220.9.32:43849] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ant.php"] [unique_id "accp3xkU3N0pg_4aEL8I8AAAAFM"]
[Sat Mar 28 09:07:44.536955 2026] [:error] [pid 43579:tid 43626] [client 20.220.9.32:43982] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ant.php"] [unique_id "accp4CRqN4JVI8gB7AmhugAAApI"]
[Sat Mar 28 09:07:45.958679 2026] [:error] [pid 64861:tid 64952] [client 20.220.9.32:43902] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "accp4exK22_lUN2kvnWJjQAAAJE"]
[Sat Mar 28 09:07:47.381630 2026] [:error] [pid 64861:tid 64937] [client 20.220.9.32:43854] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "accp4-xK22_lUN2kvnWJjwAAAII"]
[Sat Mar 28 09:07:48.809131 2026] [:error] [pid 2877:tid 2881] [client 20.220.9.32:43788] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "accp5LgM4xL1Xj409YTkLwAAAQI"]
[Sat Mar 28 09:07:50.225928 2026] [:error] [pid 64859:tid 64888] [client 20.220.9.32:43897] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "accp5m3qEBHXq3rHdBm2_AAAAAc"]
[Sat Mar 28 09:07:51.640427 2026] [:error] [pid 64966:tid 64990] [client 20.220.9.32:43785] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc13.php"] [unique_id "accp59fSvF5AFfSuKxX-KgAAANE"]
[Sat Mar 28 09:07:53.076677 2026] [:error] [pid 2877:tid 2895] [client 20.220.9.32:43890] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc13.php"] [unique_id "accp6bgM4xL1Xj409YTkMAAAARA"]
[Sat Mar 28 09:07:54.497365 2026] [:error] [pid 43579:tid 43615] [client 20.220.9.32:43958] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc13.php"] [unique_id "accp6iRqN4JVI8gB7AmhxgAAAoc"]
[Sat Mar 28 09:07:55.915291 2026] [:error] [pid 34631:tid 34669] [client 20.220.9.32:43867] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc13.php"] [unique_id "accp6ztzjMMS6kojpeRM3QAAAck"]
[Sat Mar 28 09:07:57.336878 2026] [:error] [pid 43578:tid 43588] [client 20.220.9.32:43943] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "accp7XNG2YdGm41aN8LtwAAAAkc"]
[Sat Mar 28 09:07:58.760955 2026] [:error] [pid 64860:tid 64912] [client 20.220.9.32:44022] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "accp7hkU3N0pg_4aEL8I_AAAAEQ"]
[Sat Mar 28 09:08:00.189608 2026] [:error] [pid 34631:tid 34664] [client 20.220.9.32:43925] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "accp8DtzjMMS6kojpeRM5AAAAcQ"]
[Sat Mar 28 09:08:01.605045 2026] [:error] [pid 43579:tid 43617] [client 20.220.9.32:43959] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "accp8SRqN4JVI8gB7AmhzgAAAok"]
[Sat Mar 28 09:08:03.025928 2026] [:error] [pid 64860:tid 64924] [client 20.220.9.32:43887] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "accp8xkU3N0pg_4aEL8JBQAAAFA"]
[Sat Mar 28 09:08:04.449937 2026] [:error] [pid 43578:tid 43595] [client 20.220.9.32:43836] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "accp9HNG2YdGm41aN8LtwQAAAk4"]
[Sat Mar 28 09:08:05.879622 2026] [:error] [pid 64860:tid 64919] [client 20.220.9.32:43905] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "accp9RkU3N0pg_4aEL8JCQAAAEs"]
[Sat Mar 28 09:08:07.294932 2026] [:error] [pid 64860:tid 64909] [client 20.220.9.32:43837] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "accp9xkU3N0pg_4aEL8JDwAAAEE"]
[Sat Mar 28 09:08:08.717376 2026] [:error] [pid 64861:tid 64947] [client 20.220.9.32:43877] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccu.php"] [unique_id "accp-OxK22_lUN2kvnWJpQAAAIw"]
[Sat Mar 28 09:08:10.137960 2026] [:error] [pid 64860:tid 64908] [client 20.220.9.32:43929] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccu.php"] [unique_id "accp-hkU3N0pg_4aEL8JFgAAAEA"]
[Sat Mar 28 09:08:11.562154 2026] [:error] [pid 64861:tid 64949] [client 20.220.9.32:43941] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccu.php"] [unique_id "accp--xK22_lUN2kvnWJqQAAAI4"]
[Sat Mar 28 09:08:12.992094 2026] [:error] [pid 64860:tid 64919] [client 20.220.9.32:43848] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccu.php"] [unique_id "accp_BkU3N0pg_4aEL8JHgAAAEs"]
[Sat Mar 28 09:08:14.406326 2026] [:error] [pid 64859:tid 64889] [client 20.220.9.32:43938] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "accp_m3qEBHXq3rHdBm3BAAAAAg"]
[Sat Mar 28 09:08:15.829087 2026] [:error] [pid 64859:tid 64890] [client 20.220.9.32:43721] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "accp_23qEBHXq3rHdBm3BwAAAAk"]
[Sat Mar 28 09:08:17.251779 2026] [:error] [pid 43579:tid 43628] [client 20.220.9.32:43871] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "accqASRqN4JVI8gB7Amh2AAAApQ"]
[Sat Mar 28 09:08:18.683302 2026] [:error] [pid 64859:tid 64893] [client 20.220.9.32:43857] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "accqAm3qEBHXq3rHdBm3DQAAAAw"]
[Sat Mar 28 09:08:20.096871 2026] [:error] [pid 2877:tid 2903] [client 20.220.9.32:43778] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/north1.php"] [unique_id "accqBLgM4xL1Xj409YTkOAAAARg"]
[Sat Mar 28 09:08:21.517828 2026] [:error] [pid 2877:tid 2885] [client 20.220.9.32:43947] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/north1.php"] [unique_id "accqBbgM4xL1Xj409YTkOgAAAQY"]
[Sat Mar 28 09:08:22.940493 2026] [:error] [pid 64861:tid 64949] [client 20.220.9.32:43792] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/north1.php"] [unique_id "accqBuxK22_lUN2kvnWJtQAAAI4"]
[Sat Mar 28 09:08:24.362975 2026] [:error] [pid 34597:tid 34610] [client 20.220.9.32:43852] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/north1.php"] [unique_id "accqCIluI7-e5s1cafc2oAAAAUk"]
[Sat Mar 28 09:08:25.787186 2026] [:error] [pid 64861:tid 64937] [client 20.220.9.32:43718] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dragonshell.php"] [unique_id "accqCexK22_lUN2kvnWJuAAAAII"]
[Sat Mar 28 09:08:27.206930 2026] [:error] [pid 64860:tid 64929] [client 20.220.9.32:43955] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dragonshell.php"] [unique_id "accqCxkU3N0pg_4aEL8JNQAAAFU"]
[Sat Mar 28 09:08:28.630931 2026] [:error] [pid 64860:tid 64930] [client 20.220.9.32:43805] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dragonshell.php"] [unique_id "accqDBkU3N0pg_4aEL8JdwAAAFY"]
[Sat Mar 28 09:08:30.054620 2026] [:error] [pid 64860:tid 64908] [client 20.220.9.32:44003] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dragonshell.php"] [unique_id "accqDhkU3N0pg_4aEL8JmAAAAEA"]
[Sat Mar 28 09:08:31.476454 2026] [:error] [pid 34631:tid 34678] [client 20.220.9.32:43797] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "accqDztzjMMS6kojpeRM8wAAAdI"]
[Sat Mar 28 09:08:32.898397 2026] [:error] [pid 64860:tid 64927] [client 20.220.9.32:43950] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "accqEBkU3N0pg_4aEL8JngAAAFM"]
[Sat Mar 28 09:08:34.329594 2026] [:error] [pid 64966:tid 64973] [client 20.220.9.32:43961] File does not exist: /usr/local/apache/htdocs/suspended-page/ggb.php
[Sat Mar 28 09:08:34.541658 2026] [:error] [pid 64966:tid 64995] [client 20.220.9.32:43961] File does not exist: /usr/local/apache/htdocs/suspended-page/caiij.php
[Sat Mar 28 09:08:34.756130 2026] [:error] [pid 64966:tid 64988] [client 20.220.9.32:43961] File does not exist: /usr/local/apache/htdocs/suspended-page/gel4y.php
[Sat Mar 28 09:08:34.968001 2026] [:error] [pid 64966:tid 64996] [client 20.220.9.32:43961] File does not exist: /usr/local/apache/htdocs/suspended-page/uxijj.php
[Sat Mar 28 09:08:35.179778 2026] [:error] [pid 64966:tid 64982] [client 20.220.9.32:43961] File does not exist: /usr/local/apache/htdocs/suspended-page/rkiea.php
[Sat Mar 28 09:08:35.391820 2026] [:error] [pid 64966:tid 64981] [client 20.220.9.32:43961] File does not exist: /usr/local/apache/htdocs/suspended-page/resp.php
[Sat Mar 28 09:08:35.603777 2026] [:error] [pid 64966:tid 64990] [client 20.220.9.32:43961] File does not exist: /usr/local/apache/htdocs/suspended-page/lanou.php
[Sat Mar 28 09:08:35.814671 2026] [:error] [pid 64966:tid 64992] [client 20.220.9.32:43961] File does not exist: /usr/local/apache/htdocs/suspended-page/eursi.php
[Sat Mar 28 09:08:36.026577 2026] [:error] [pid 64966:tid 64987] [client 20.220.9.32:43961] File does not exist: /usr/local/apache/htdocs/suspended-page/pas2.php
[Sat Mar 28 09:08:36.238348 2026] [:error] [pid 64966:tid 64986] [client 20.220.9.32:43961] File does not exist: /usr/local/apache/htdocs/suspended-page/schal.php
[Sat Mar 28 09:08:36.450170 2026] [:error] [pid 64966:tid 64994] [client 20.220.9.32:43961] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Sat Mar 28 09:08:36.659044 2026] [:error] [pid 64966:tid 64997] [client 20.220.9.32:43961] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "accqFNfSvF5AFfSuKxX-OwAAANg"]
[Sat Mar 28 09:08:38.088686 2026] [:error] [pid 43579:tid 43608] [client 20.220.9.32:43713] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "accqFiRqN4JVI8gB7Amh4gAAAoA"]
[Sat Mar 28 09:08:39.504305 2026] [:error] [pid 43578:tid 43601] [client 20.220.9.32:43780] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "accqF3NG2YdGm41aN8Lt2QAAAlQ"]
[Sat Mar 28 09:08:40.948816 2026] [:error] [pid 34631:tid 34683] [client 20.220.9.32:43823] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "accqGDtzjMMS6kojpeRNBAAAAdc"]
[Sat Mar 28 09:08:42.364774 2026] [:error] [pid 64860:tid 64910] [client 20.220.9.32:43839] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "accqGhkU3N0pg_4aEL8JpwAAAEI"]
[Sat Mar 28 09:08:43.786675 2026] [:error] [pid 43579:tid 43621] [client 20.220.9.32:43968] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "accqGyRqN4JVI8gB7Amh6AAAAo0"]
[Sat Mar 28 09:08:45.211001 2026] [:error] [pid 43579:tid 43623] [client 20.220.9.32:43815] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "accqHSRqN4JVI8gB7Amh6QAAAo8"]
[Sat Mar 28 09:08:46.639491 2026] [:error] [pid 43579:tid 43613] [client 20.220.9.32:43981] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "accqHiRqN4JVI8gB7Amh6gAAAoU"]
[Sat Mar 28 09:08:48.055553 2026] [:error] [pid 43547:tid 43565] [client 20.220.9.32:44013] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dtyh.php"] [unique_id "accqID4ZEfdetXP-9aC7gAAAAhA"]
[Sat Mar 28 09:08:49.487307 2026] [:error] [pid 34631:tid 34670] [client 20.220.9.32:43964] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dtyh.php"] [unique_id "accqITtzjMMS6kojpeRNEgAAAco"]
[Sat Mar 28 09:08:50.924665 2026] [:error] [pid 43578:tid 43591] [client 20.220.9.32:43991] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dtyh.php"] [unique_id "accqInNG2YdGm41aN8Lt5AAAAko"]
[Sat Mar 28 09:08:52.353069 2026] [:error] [pid 64861:tid 64945] [client 20.220.9.32:43812] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dtyh.php"] [unique_id "accqJOxK22_lUN2kvnWKCQAAAIo"]
[Sat Mar 28 09:08:53.775455 2026] [:error] [pid 43579:tid 43617] [client 20.220.9.32:43963] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wta.php"] [unique_id "accqJSRqN4JVI8gB7Amh7gAAAok"]
[Sat Mar 28 09:08:55.203283 2026] [:error] [pid 43579:tid 43625] [client 20.220.9.32:43895] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wta.php"] [unique_id "accqJyRqN4JVI8gB7Amh7wAAApE"]
[Sat Mar 28 09:08:56.621783 2026] [:error] [pid 34597:tid 34603] [client 20.220.9.32:43896] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wta.php"] [unique_id "accqKIluI7-e5s1cafc2vwAAAUI"]
[Sat Mar 28 09:08:58.041339 2026] [:error] [pid 34597:tid 34614] [client 20.220.9.32:43918] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wta.php"] [unique_id "accqKoluI7-e5s1cafc2wgAAAU0"]
[Sat Mar 28 09:08:59.470472 2026] [:error] [pid 64861:tid 64940] [client 20.220.9.32:43931] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "accqK-xK22_lUN2kvnWKDgAAAIU"]
[Sat Mar 28 09:09:00.904331 2026] [:error] [pid 64861:tid 64938] [client 20.220.9.32:43971] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "accqLOxK22_lUN2kvnWKEwAAAIM"]
[Sat Mar 28 09:09:02.325686 2026] [:error] [pid 43579:tid 43611] [client 20.220.9.32:43811] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "accqLiRqN4JVI8gB7Amh9gAAAoM"]
[Sat Mar 28 09:09:03.762765 2026] [:error] [pid 64860:tid 64930] [client 20.220.9.32:43835] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "accqLxkU3N0pg_4aEL8JxAAAAFY"]
[Sat Mar 28 09:09:05.191972 2026] [:error] [pid 64861:tid 64945] [client 20.220.9.32:43984] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "accqMexK22_lUN2kvnWKFgAAAIo"]
[Sat Mar 28 09:09:06.632077 2026] [:error] [pid 64860:tid 64910] [client 20.220.9.32:43789] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "accqMhkU3N0pg_4aEL8J0gAAAEI"]
[Sat Mar 28 09:09:08.063082 2026] [:error] [pid 34597:tid 34610] [client 20.220.9.32:43920] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "accqNIluI7-e5s1cafc2zgAAAUk"]
[Sat Mar 28 09:09:09.485222 2026] [:error] [pid 64861:tid 64948] [client 20.220.9.32:43868] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "accqNexK22_lUN2kvnWKIgAAAI0"]
[Sat Mar 28 09:09:10.901124 2026] [:error] [pid 43578:tid 43602] [client 20.220.9.32:43799] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "accqNnNG2YdGm41aN8Lt8AAAAlU"]
[Sat Mar 28 09:09:12.330910 2026] [:error] [pid 34597:tid 34622] [client 20.220.9.32:43917] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "accqOIluI7-e5s1cafc20QAAAVU"]
[Sat Mar 28 09:09:13.758507 2026] [:error] [pid 43579:tid 43610] [client 20.220.9.32:43873] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "accqOSRqN4JVI8gB7Amh_QAAAoI"]
[Sat Mar 28 09:09:15.174372 2026] [:error] [pid 64860:tid 64915] [client 20.220.9.32:43899] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "accqOxkU3N0pg_4aEL8J6wAAAEc"]
[Sat Mar 28 09:09:16.599504 2026] [:error] [pid 43579:tid 43613] [client 20.220.9.32:43915] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "accqPCRqN4JVI8gB7AmiAQAAAoU"]
[Sat Mar 28 09:09:18.020532 2026] [:error] [pid 64860:tid 64913] [client 20.220.9.32:43880] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "accqPhkU3N0pg_4aEL8J-QAAAEU"]
[Sat Mar 28 09:09:19.442746 2026] [:error] [pid 34631:tid 34684] [client 20.220.9.32:44027] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "accqPztzjMMS6kojpeRNKQAAAdg"]
[Sat Mar 28 09:09:20.863063 2026] [:error] [pid 34631:tid 34660] [client 20.220.9.32:43979] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "accqQDtzjMMS6kojpeRNLgAAAcA"]
[Sat Mar 28 09:09:22.288051 2026] [:error] [pid 64860:tid 64932] [client 20.220.9.32:44002] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "accqQhkU3N0pg_4aEL8KAgAAAFg"]
[Sat Mar 28 09:09:23.709393 2026] [:error] [pid 43547:tid 43562] [client 20.220.9.32:43804] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "accqQz4ZEfdetXP-9aC7iQAAAg0"]
[Sat Mar 28 09:09:25.133965 2026] [:error] [pid 43578:tid 43584] [client 20.220.9.32:43876] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "accqRXNG2YdGm41aN8Lt-AAAAkM"]
[Sat Mar 28 09:09:26.570044 2026] [:error] [pid 43547:tid 43561] [client 20.220.9.32:44019] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "accqRj4ZEfdetXP-9aC7igAAAgw"]
[Sat Mar 28 09:09:27.993934 2026] [:error] [pid 43578:tid 43596] [client 20.220.9.32:43933] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "accqR3NG2YdGm41aN8LuAQAAAk8"]
[Sat Mar 28 09:09:29.415157 2026] [:error] [pid 43547:tid 43572] [client 20.220.9.32:44012] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "accqST4ZEfdetXP-9aC7iwAAAhc"]
[Sat Mar 28 09:09:30.839184 2026] [:error] [pid 64861:tid 64956] [client 20.220.9.32:43922] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "accqSuxK22_lUN2kvnWKNwAAAJU"]
[Sat Mar 28 09:09:32.266110 2026] [:error] [pid 64861:tid 64948] [client 20.220.9.32:43989] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "accqTOxK22_lUN2kvnWKPwAAAI0"]
[Sat Mar 28 09:09:33.682157 2026] [:error] [pid 34597:tid 34602] [client 20.220.9.32:43855] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gpt-sh.php"] [unique_id "accqTYluI7-e5s1cafc25gAAAUE"]
[Sat Mar 28 09:09:35.106198 2026] [:error] [pid 64861:tid 64938] [client 20.220.9.32:43903] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gpt-sh.php"] [unique_id "accqT-xK22_lUN2kvnWKUQAAAIM"]
[Sat Mar 28 09:09:36.530325 2026] [:error] [pid 64861:tid 64951] [client 20.220.9.32:44008] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Sat Mar 28 09:09:36.739159 2026] [:error] [pid 64861:tid 64937] [client 20.220.9.32:44008] File does not exist: /usr/local/apache/htdocs/suspended-page/bywaf.php
[Sat Mar 28 09:09:36.951690 2026] [:error] [pid 64861:tid 64939] [client 20.220.9.32:44008] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-true.php
[Sat Mar 28 09:09:37.161742 2026] [:error] [pid 64861:tid 64946] [client 20.220.9.32:44008] File does not exist: /usr/local/apache/htdocs/suspended-page/byp8.php
[Sat Mar 28 09:09:37.371406 2026] [:error] [pid 64861:tid 64942] [client 20.220.9.32:44008] File does not exist: /usr/local/apache/htdocs/suspended-page/tx88.php
[Sat Mar 28 09:09:37.580192 2026] [:error] [pid 64861:tid 64956] [client 20.220.9.32:44008] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Sat Mar 28 09:09:37.789933 2026] [:error] [pid 64861:tid 64951] [client 20.220.9.32:44008] File does not exist: /usr/local/apache/htdocs/suspended-page/max.php
[Sat Mar 28 09:09:37.998786 2026] [:error] [pid 64861:tid 64941] [client 20.220.9.32:44008] File does not exist: /usr/local/apache/htdocs/suspended-page/z60.php
[Sat Mar 28 09:09:38.207587 2026] [:error] [pid 64861:tid 64942] [client 20.220.9.32:44008] File does not exist: /usr/local/apache/htdocs/suspended-page/utky.php
[Sat Mar 28 09:09:38.415779 2026] [:error] [pid 64861:tid 64957] [client 20.220.9.32:44008] File does not exist: /usr/local/apache/htdocs/suspended-page/uang.php
[Sat Mar 28 09:09:38.624373 2026] [:error] [pid 64861:tid 64956] [client 20.220.9.32:44008] File does not exist: /usr/local/apache/htdocs/suspended-page/wp3.php
[Sat Mar 28 09:09:38.830254 2026] [:error] [pid 64861:tid 64943] [client 20.220.9.32:44008] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "accqUuxK22_lUN2kvnWKbgAAAIg"]
[Sat Mar 28 09:09:40.256075 2026] [:error] [pid 34597:tid 34619] [client 20.220.9.32:44018] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "accqVIluI7-e5s1cafc26gAAAVI"]
[Sat Mar 28 09:09:41.683858 2026] [:error] [pid 43578:tid 43604] [client 20.220.9.32:43803] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "accqVXNG2YdGm41aN8LuDAAAAlc"]
[Sat Mar 28 09:09:43.102551 2026] [:error] [pid 43578:tid 43587] [client 20.220.9.32:43842] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "accqV3NG2YdGm41aN8LuDgAAAkY"]
[Sat Mar 28 09:09:44.523748 2026] [:error] [pid 64859:tid 64889] [client 20.220.9.32:43987] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "accqWG3qEBHXq3rHdBm3MgAAAAg"]
[Sat Mar 28 09:09:45.940532 2026] [:error] [pid 34597:tid 34613] [client 20.220.9.32:43889] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "accqWYluI7-e5s1cafc26wAAAUw"]
[Sat Mar 28 09:09:47.354814 2026] [:error] [pid 64860:tid 64926] [client 20.220.9.32:43986] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "accqWxkU3N0pg_4aEL8KTAAAAFI"]
[Sat Mar 28 09:09:48.776183 2026] [:error] [pid 34631:tid 34663] [client 20.220.9.32:43882] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "accqXDtzjMMS6kojpeRNUgAAAcM"]
[Sat Mar 28 09:09:50.196786 2026] [:error] [pid 64861:tid 64956] [client 20.220.9.32:43838] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ticket.php"] [unique_id "accqXuxK22_lUN2kvnWKfwAAAJU"]
[Sat Mar 28 09:09:51.619875 2026] [:error] [pid 34631:tid 34660] [client 20.220.9.32:43853] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ticket.php"] [unique_id "accqXztzjMMS6kojpeRNVAAAAcA"]
[Sat Mar 28 09:09:53.041453 2026] [:error] [pid 64966:tid 64987] [client 20.220.9.32:43927] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ticket.php"] [unique_id "accqYdfSvF5AFfSuKxX-UAAAAM4"]
[Sat Mar 28 09:09:54.463765 2026] [:error] [pid 64966:tid 64978] [client 20.220.9.32:43928] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ticket.php"] [unique_id "accqYtfSvF5AFfSuKxX-UwAAAMU"]
[Sat Mar 28 09:09:55.889085 2026] [:error] [pid 64859:tid 64893] [client 20.220.9.32:43992] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wglum1.php"] [unique_id "accqY23qEBHXq3rHdBm3NgAAAAw"]
[Sat Mar 28 09:09:57.312007 2026] [:error] [pid 64861:tid 64958] [client 20.220.9.32:43960] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wglum1.php"] [unique_id "accqZexK22_lUN2kvnWKjAAAAJc"]
[Sat Mar 28 09:09:58.737035 2026] [:error] [pid 64859:tid 64904] [client 20.220.9.32:44005] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wglum1.php"] [unique_id "accqZm3qEBHXq3rHdBm3OAAAABc"]
[Sat Mar 28 09:10:00.156504 2026] [:error] [pid 43547:tid 43563] [client 20.220.9.32:44004] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wglum1.php"] [unique_id "accqaD4ZEfdetXP-9aC7lQAAAg4"]
[Sat Mar 28 09:10:01.579011 2026] [:error] [pid 43579:tid 43624] [client 20.220.9.32:44024] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xpwer1.php"] [unique_id "accqaSRqN4JVI8gB7AmiFAAAApA"]
[Sat Mar 28 09:10:02.998964 2026] [:error] [pid 43579:tid 43620] [client 20.220.9.32:43826] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xpwer1.php"] [unique_id "accqaiRqN4JVI8gB7AmiGgAAAow"]
[Sat Mar 28 09:10:04.432111 2026] [:error] [pid 64861:tid 64953] [client 20.220.9.32:43970] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xpwer1.php"] [unique_id "accqbOxK22_lUN2kvnWKkAAAAJI"]
[Sat Mar 28 09:10:05.861274 2026] [:error] [pid 34597:tid 34624] [client 20.220.9.32:43907] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xpwer1.php"] [unique_id "accqbYluI7-e5s1cafc3AAAAAVc"]
[Sat Mar 28 09:10:07.282826 2026] [:error] [pid 64860:tid 64929] [client 20.220.9.32:43864] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "accqbxkU3N0pg_4aEL8KXAAAAFU"]
[Sat Mar 28 09:10:08.706320 2026] [:error] [pid 64860:tid 64927] [client 20.220.9.32:43924] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "accqcBkU3N0pg_4aEL8KYQAAAFM"]
[Sat Mar 28 09:10:10.127828 2026] [:error] [pid 64860:tid 64924] [client 20.220.9.32:43824] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "accqchkU3N0pg_4aEL8KbwAAAFA"]
[Sat Mar 28 09:10:11.551126 2026] [:error] [pid 64860:tid 64923] [client 20.220.9.32:43972] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "accqcxkU3N0pg_4aEL8KggAAAE8"]
[Sat Mar 28 09:10:12.972772 2026] [:error] [pid 34631:tid 34673] [client 20.220.9.32:43997] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wdone1.php"] [unique_id "accqdDtzjMMS6kojpeRNdwAAAc0"]
[Sat Mar 28 09:10:14.397292 2026] [:error] [pid 34631:tid 34660] [client 20.220.9.32:43944] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wdone1.php"] [unique_id "accqdjtzjMMS6kojpeRNfQAAAcA"]
[Sat Mar 28 09:10:15.817455 2026] [:error] [pid 43579:tid 43611] [client 20.220.9.32:44025] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wdone1.php"] [unique_id "accqdyRqN4JVI8gB7AmiMAAAAoM"]
[Sat Mar 28 09:10:17.239954 2026] [:error] [pid 43579:tid 43627] [client 20.220.9.32:44017] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wdone1.php"] [unique_id "accqeSRqN4JVI8gB7AmiPAAAApM"]
[Sat Mar 28 09:10:18.662465 2026] [:error] [pid 64966:tid 64982] [client 20.220.9.32:43980] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xpass.php"] [unique_id "accqetfSvF5AFfSuKxX-YwAAAMk"]
[Sat Mar 28 09:10:20.085753 2026] [:error] [pid 64861:tid 64939] [client 20.220.9.32:43790] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xpass.php"] [unique_id "accqfOxK22_lUN2kvnWKswAAAIQ"]
[Sat Mar 28 09:10:21.520634 2026] [:error] [pid 43579:tid 43609] [client 20.220.9.32:43969] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xpass.php"] [unique_id "accqfSRqN4JVI8gB7AmiRAAAAoE"]
[Sat Mar 28 09:10:22.955448 2026] [:error] [pid 2877:tid 2893] [client 20.220.9.32:43940] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xpass.php"] [unique_id "accqfrgM4xL1Xj409YTkVQAAAQ4"]
[Sat Mar 28 09:10:24.383378 2026] [:error] [pid 34631:tid 34661] [client 20.220.9.32:43914] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ad.php"] [unique_id "accqgDtzjMMS6kojpeRNlgAAAcE"]
[Sat Mar 28 09:10:25.821120 2026] [:error] [pid 64861:tid 64953] [client 20.220.9.32:43910] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ad.php"] [unique_id "accqgexK22_lUN2kvnWKvAAAAJI"]
[Sat Mar 28 09:10:27.244100 2026] [:error] [pid 34631:tid 34668] [client 20.220.9.32:43885] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ad.php"] [unique_id "accqgztzjMMS6kojpeRNngAAAcg"]
[Sat Mar 28 09:10:28.667802 2026] [:error] [pid 34631:tid 34664] [client 20.220.9.32:43932] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ad.php"] [unique_id "accqhDtzjMMS6kojpeRNoAAAAcQ"]
[Sat Mar 28 09:10:30.088863 2026] [:error] [pid 64860:tid 64910] [client 20.220.9.32:43777] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/h02ugyh.php"] [unique_id "accqhhkU3N0pg_4aEL8KmAAAAEI"]
[Sat Mar 28 09:10:31.512607 2026] [:error] [pid 64860:tid 64921] [client 20.220.9.32:43879] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/h02ugyh.php"] [unique_id "accqhxkU3N0pg_4aEL8KoAAAAE0"]
[Sat Mar 28 09:10:32.933095 2026] [:error] [pid 43547:tid 43552] [client 20.220.9.32:43874] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/h02ugyh.php"] [unique_id "accqiD4ZEfdetXP-9aC7pQAAAgM"]
[Sat Mar 28 09:10:34.358625 2026] [:error] [pid 34631:tid 34670] [client 20.220.9.32:44030] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/h02ugyh.php"] [unique_id "accqijtzjMMS6kojpeRNqwAAAco"]
[Sat Mar 28 12:22:10.535043 2026] [:error] [pid 43578:tid 43600] [client 104.208.74.146:5027] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Mar 28 12:22:10.780661 2026] [:error] [pid 43578:tid 43592] [client 104.208.74.146:5027] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Mar 28 12:22:11.284544 2026] [:error] [pid 43578:tid 43605] [client 104.208.74.146:5027] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Mar 28 12:22:11.407775 2026] [:error] [pid 43578:tid 43604] [client 104.208.74.146:5027] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php
[Sat Mar 28 12:22:11.530966 2026] [:error] [pid 43578:tid 43593] [client 104.208.74.146:5027] File does not exist: /usr/local/apache/htdocs/suspended-page/al.php
[Sat Mar 28 12:22:12.113958 2026] [:error] [pid 43578:tid 43600] [client 104.208.74.146:5027] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sat Mar 28 12:22:12.237125 2026] [:error] [pid 43578:tid 43590] [client 104.208.74.146:5027] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sat Mar 28 12:22:12.357013 2026] [:error] [pid 43578:tid 43581] [client 104.208.74.146:5027] [client 104.208.74.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "acdXdHNG2YdGm41aN8JO_gAAAkA"]
[Sat Mar 28 12:22:12.850073 2026] [:error] [pid 43578:tid 43592] [client 104.208.74.146:3538] [client 104.208.74.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "acdXdHNG2YdGm41aN8JPAQAAAks"]
[Sat Mar 28 12:22:13.332474 2026] [:error] [pid 64860:tid 64921] [client 104.208.74.146:2431] [client 104.208.74.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "acdXdRkU3N0pg_4aEL9IVQAAAE0"]
[Sat Mar 28 12:22:13.834672 2026] [:error] [pid 64861:tid 64956] [client 104.208.74.146:4992] [client 104.208.74.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "acdXdexK22_lUN2kvnW49AAAAJU"]
[Sat Mar 28 12:22:55.308093 2026] [:error] [pid 34631:tid 34674] [client 20.197.29.71:12506] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Mar 28 12:22:55.473122 2026] [:error] [pid 34631:tid 34662] [client 20.197.29.71:12506] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat Mar 28 12:22:55.772083 2026] [:error] [pid 34631:tid 34660] [client 20.197.29.71:12506] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat Mar 28 12:22:55.922277 2026] [:error] [pid 34631:tid 34668] [client 20.197.29.71:12506] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Mar 28 12:22:56.255385 2026] [:error] [pid 34631:tid 34663] [client 20.197.29.71:12506] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sat Mar 28 12:22:56.404962 2026] [:error] [pid 34631:tid 34678] [client 20.197.29.71:12506] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Mar 28 12:22:56.554843 2026] [:error] [pid 34631:tid 34667] [client 20.197.29.71:12506] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sat Mar 28 12:22:57.015371 2026] [:error] [pid 34631:tid 34661] [client 20.197.29.71:12506] [client 20.197.29.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "acdXoTtzjMMS6kojpeSYHgAAAcE"]
[Sat Mar 28 12:22:57.609406 2026] [:error] [pid 34597:tid 34609] [client 20.197.29.71:12536] [client 20.197.29.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "acdXoYluI7-e5s1cafdZwgAAAUg"]
[Sat Mar 28 12:22:58.198270 2026] [:error] [pid 64861:tid 64956] [client 20.197.29.71:12520] [client 20.197.29.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "acdXouxK22_lUN2kvnW5GQAAAJU"]
[Sat Mar 28 12:22:58.838305 2026] [:error] [pid 34631:tid 34668] [client 20.197.29.71:12516] [client 20.197.29.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "acdXojtzjMMS6kojpeSYIwAAAcg"]
[Sun Mar 29 04:11:30.458114 2026] [:error] [pid 32255:tid 32310] [client 20.212.0.99:10571] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sun Mar 29 04:11:30.550410 2026] [:error] [pid 32255:tid 32301] [client 20.212.0.99:10571] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun Mar 29 04:11:30.649866 2026] [:error] [pid 32255:tid 32306] [client 20.212.0.99:10571] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Mar 29 04:11:30.945231 2026] [:error] [pid 32255:tid 32298] [client 20.212.0.99:10571] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 29 04:11:31.037155 2026] [:error] [pid 32255:tid 32299] [client 20.212.0.99:10571] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Mar 29 04:11:31.226204 2026] [:error] [pid 32255:tid 32296] [client 20.212.0.99:10571] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Mar 29 04:11:31.512558 2026] [:error] [pid 32255:tid 32307] [client 20.212.0.99:10571] [client 20.212.0.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "acg182nfn-AtRoMbquwxqAAAAFA"]
[Sun Mar 29 04:11:31.899627 2026] [:error] [pid 32257:tid 32340] [client 20.212.0.99:3402] [client 20.212.0.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "acg18yE3TArOFrUtgWoCaQAAAJY"]
[Sun Mar 29 04:11:32.272688 2026] [:error] [pid 32254:tid 32271] [client 20.212.0.99:10604] [client 20.212.0.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "acg19Kug2IHuyGgCTn_8KwAAAAc"]
[Sun Mar 29 04:11:32.687776 2026] [:error] [pid 32254:tid 32273] [client 20.212.0.99:5836] [client 20.212.0.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "acg19Kug2IHuyGgCTn_8LwAAAAk"]
[Sun Mar 29 05:36:29.551984 2026] [:error] [pid 12910:tid 12914] [client 217.216.37.56:56392] [client 217.216.37.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "achJ3SnoNBcZwnBvsMNSfQAAAUI"]
[Sun Mar 29 05:36:29.762859 2026] [:error] [pid 1524:tid 1546] [client 217.216.37.56:58315] [client 217.216.37.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "achJ3VoaWSl2asqQCh8bBAAAAQ8"]
[Sun Mar 29 05:36:29.974372 2026] [:error] [pid 1524:tid 1551] [client 217.216.37.56:52970] [client 217.216.37.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media/system/js/core.js"] [unique_id "achJ3VoaWSl2asqQCh8bBQAAARM"]
[Sun Mar 29 21:54:55.760615 2026] [:error] [pid 8818:tid 8833] [client 20.29.106.65:34434] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Mar 29 21:54:55.950156 2026] [:error] [pid 8818:tid 8830] [client 20.29.106.65:34434] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Mar 29 21:54:56.330279 2026] [:error] [pid 8818:tid 8835] [client 20.29.106.65:34434] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sun Mar 29 21:54:56.521366 2026] [:error] [pid 8818:tid 8823] [client 20.29.106.65:34434] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 29 21:54:56.907335 2026] [:error] [pid 8818:tid 8843] [client 20.29.106.65:34434] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sun Mar 29 21:54:57.095784 2026] [:error] [pid 8818:tid 8845] [client 20.29.106.65:34434] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Mar 29 21:54:57.285598 2026] [:error] [pid 8818:tid 8828] [client 20.29.106.65:34434] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sun Mar 29 21:54:57.677067 2026] [:error] [pid 8818:tid 8831] [client 20.29.106.65:34434] [client 20.29.106.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ackvMSCDvotZNSF0FBrfuAAAAUk"]
[Sun Mar 29 21:54:58.424140 2026] [:error] [pid 32257:tid 32336] [client 20.29.106.65:4136] [client 20.29.106.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ackvMiE3TArOFrUtgWo0wwAAAJI"]
[Sun Mar 29 21:54:59.187174 2026] [:error] [pid 32359:tid 32372] [client 20.29.106.65:33782] [client 20.29.106.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ackvMwMb8G3UzfQP3WgvcAAAAMs"]
[Sun Mar 29 21:54:59.937853 2026] [:error] [pid 23284:tid 23308] [client 20.29.106.65:34448] [client 20.29.106.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ackvM4zBujdPHsq7wySe2gAAApY"]
[Sun Mar 29 22:50:55.086038 2026] [:error] [pid 32257:tid 32342] [client 20.151.111.128:62962] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Mar 29 22:50:55.294484 2026] [:error] [pid 32257:tid 32338] [client 20.151.111.128:62962] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Mar 29 22:50:55.710710 2026] [:error] [pid 32257:tid 32322] [client 20.151.111.128:62962] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sun Mar 29 22:50:55.973223 2026] [:error] [pid 32257:tid 32339] [client 20.151.111.128:62962] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 29 22:50:56.388966 2026] [:error] [pid 32257:tid 32331] [client 20.151.111.128:62962] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sun Mar 29 22:50:56.598183 2026] [:error] [pid 32257:tid 32328] [client 20.151.111.128:62962] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Mar 29 22:50:56.806630 2026] [:error] [pid 32257:tid 32336] [client 20.151.111.128:62962] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sun Mar 29 22:50:57.220960 2026] [:error] [pid 32257:tid 32327] [client 20.151.111.128:62962] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ack8USE3TArOFrUtgWpUYAAAAIk"]
[Sun Mar 29 22:50:58.061578 2026] [:error] [pid 23284:tid 23310] [client 20.151.111.128:39848] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ack8UozBujdPHsq7wyTLZQAAApg"]
[Sun Mar 29 22:50:58.889577 2026] [:error] [pid 23250:tid 23256] [client 20.151.111.128:3686] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ack8Upxrpj-dQjy1cvoPIgAAAkQ"]
[Sun Mar 29 22:50:59.714568 2026] [:error] [pid 32257:tid 32326] [client 20.151.111.128:41941] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ack8UyE3TArOFrUtgWpUfQAAAIg"]
[Mon Mar 30 00:27:41.383528 2026] [:error] [pid 23284:tid 23286] [client 20.163.106.128:6021] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Mon Mar 30 00:27:41.542811 2026] [:error] [pid 23284:tid 23287] [client 20.163.106.128:6021] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Mon Mar 30 00:27:41.703030 2026] [:error] [pid 23284:tid 23302] [client 20.163.106.128:6021] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Mon Mar 30 00:27:41.863722 2026] [:error] [pid 23284:tid 23310] [client 20.163.106.128:6021] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Mon Mar 30 00:27:42.024894 2026] [:error] [pid 23284:tid 23309] [client 20.163.106.128:6021] File does not exist: /usr/local/apache/htdocs/suspended-page/wxfyf.php
[Mon Mar 30 00:27:42.187284 2026] [:error] [pid 23284:tid 23296] [client 20.163.106.128:6021] File does not exist: /usr/local/apache/htdocs/suspended-page/callback.php
[Mon Mar 30 00:27:42.347488 2026] [:error] [pid 23284:tid 23295] [client 20.163.106.128:6021] File does not exist: /usr/local/apache/htdocs/suspended-page/h2.php
[Mon Mar 30 00:27:42.507244 2026] [:error] [pid 23284:tid 23301] [client 20.163.106.128:6021] File does not exist: /usr/local/apache/htdocs/suspended-page/d12.php
[Mon Mar 30 00:27:42.666577 2026] [:error] [pid 23284:tid 23289] [client 20.163.106.128:6021] File does not exist: /usr/local/apache/htdocs/suspended-page/144.php
[Mon Mar 30 00:27:42.826740 2026] [:error] [pid 23284:tid 23290] [client 20.163.106.128:6021] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Mon Mar 30 00:27:42.983872 2026] [:error] [pid 23284:tid 23307] [client 20.163.106.128:6021] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "aclS_ozBujdPHsq7wyQaKQAAApU"]
[Mon Mar 30 00:27:43.852417 2026] [:error] [pid 32255:tid 32307] [client 20.163.106.128:6107] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "aclS_2nfn-AtRoMbquw3vQAAAFA"]
[Mon Mar 30 00:27:44.165789 2026] [:error] [pid 32257:tid 32342] [client 20.163.106.128:6080] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "aclTACE3TArOFrUtgWqVdgAAAJg"]
[Mon Mar 30 00:27:44.478250 2026] [:error] [pid 32257:tid 32337] [client 20.163.106.128:6109] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "aclTACE3TArOFrUtgWqVeQAAAJM"]
[Mon Mar 30 00:27:44.791637 2026] [:error] [pid 32257:tid 32339] [client 20.163.106.128:6088] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aclTACE3TArOFrUtgWqVfAAAAJU"]
[Mon Mar 30 00:27:45.104963 2026] [:error] [pid 23284:tid 23287] [client 20.163.106.128:6083] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aclTAYzBujdPHsq7wyQaKwAAAoE"]
[Mon Mar 30 00:27:45.425099 2026] [:error] [pid 23284:tid 23299] [client 20.163.106.128:6020] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aclTAYzBujdPHsq7wyQaLAAAAo0"]
[Mon Mar 30 00:27:45.745046 2026] [:error] [pid 32255:tid 32303] [client 20.163.106.128:6090] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aclTAWnfn-AtRoMbquw3wQAAAEw"]
[Mon Mar 30 00:27:46.065366 2026] [:error] [pid 32257:tid 32339] [client 20.163.106.128:6128] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "aclTAiE3TArOFrUtgWqVgwAAAJU"]
[Mon Mar 30 00:27:46.378661 2026] [:error] [pid 32255:tid 32312] [client 20.163.106.128:6032] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "aclTAmnfn-AtRoMbquw3wgAAAFU"]
[Mon Mar 30 00:27:46.692576 2026] [:error] [pid 32257:tid 32333] [client 20.163.106.128:6115] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "aclTAiE3TArOFrUtgWqVhgAAAI8"]
[Mon Mar 30 00:27:47.019973 2026] [:error] [pid 32257:tid 32336] [client 20.163.106.128:6117] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "aclTAyE3TArOFrUtgWqVhwAAAJI"]
[Mon Mar 30 00:27:47.346089 2026] [:error] [pid 23168:tid 23209] [client 20.163.106.128:6129] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "aclTA2P8p0yRL8ot_2_UygAAAgw"]
[Mon Mar 30 00:27:47.724257 2026] [:error] [pid 32257:tid 32327] [client 20.163.106.128:6099] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "aclTAyE3TArOFrUtgWqViwAAAIk"]
[Mon Mar 30 00:27:48.047201 2026] [:error] [pid 32255:tid 32296] [client 20.163.106.128:6121] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "aclTBGnfn-AtRoMbquw3xQAAAEU"]
[Mon Mar 30 00:27:48.360076 2026] [:error] [pid 32255:tid 32314] [client 20.163.106.128:6113] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "aclTBGnfn-AtRoMbquw3xgAAAFc"]
[Mon Mar 30 00:27:48.674108 2026] [:error] [pid 32257:tid 32328] [client 20.163.106.128:6085] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "aclTBCE3TArOFrUtgWqVkgAAAIo"]
[Mon Mar 30 00:27:48.987576 2026] [:error] [pid 32255:tid 32299] [client 20.163.106.128:6078] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "aclTBGnfn-AtRoMbquw3xwAAAEg"]
[Mon Mar 30 00:27:49.303296 2026] [:error] [pid 32255:tid 32291] [client 20.163.106.128:6098] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "aclTBWnfn-AtRoMbquw3ygAAAEA"]
[Mon Mar 30 00:27:49.630318 2026] [:error] [pid 32254:tid 32286] [client 20.163.106.128:6024] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "aclTBaug2IHuyGgCTn9tdgAAABY"]
[Mon Mar 30 00:27:49.984657 2026] [:error] [pid 32254:tid 32274] [client 20.163.106.128:6132] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "aclTBaug2IHuyGgCTn9teQAAAAo"]
[Mon Mar 30 00:27:50.321201 2026] [:error] [pid 32255:tid 32307] [client 20.163.106.128:6134] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "aclTBmnfn-AtRoMbquw3zQAAAFA"]
[Mon Mar 30 00:27:50.687787 2026] [:error] [pid 23168:tid 23207] [client 20.163.106.128:6118] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "aclTBmP8p0yRL8ot_2_UywAAAgo"]
[Mon Mar 30 00:27:51.022630 2026] [:error] [pid 23167:tid 23177] [client 20.163.106.128:6026] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "aclTBxIAHJCFaHff3_frJQAAAcc"]
[Mon Mar 30 00:27:51.368356 2026] [:error] [pid 23284:tid 23299] [client 20.163.106.128:6035] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sale.php"] [unique_id "aclTB4zBujdPHsq7wyQaNAAAAo0"]
[Mon Mar 30 00:27:51.709720 2026] [:error] [pid 23167:tid 23184] [client 20.163.106.128:6105] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sale.php"] [unique_id "aclTBxIAHJCFaHff3_frKAAAAc4"]
[Mon Mar 30 00:27:52.083930 2026] [:error] [pid 32257:tid 32336] [client 20.163.106.128:6029] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sale.php"] [unique_id "aclTCCE3TArOFrUtgWqVmwAAAJI"]
[Mon Mar 30 00:27:52.397858 2026] [:error] [pid 23167:tid 23178] [client 20.163.106.128:6103] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sale.php"] [unique_id "aclTCBIAHJCFaHff3_frKQAAAcg"]
[Mon Mar 30 00:27:52.717636 2026] [:error] [pid 23284:tid 23291] [client 20.163.106.128:6141] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aclTCIzBujdPHsq7wyQaOQAAAoU"]
[Mon Mar 30 00:27:53.034873 2026] [:error] [pid 32257:tid 32324] [client 20.163.106.128:6036] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aclTCSE3TArOFrUtgWqVngAAAIY"]
[Mon Mar 30 00:27:53.355544 2026] [:error] [pid 32257:tid 32325] [client 20.163.106.128:6022] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aclTCSE3TArOFrUtgWqVnwAAAIc"]
[Mon Mar 30 00:27:53.667640 2026] [:error] [pid 32257:tid 32335] [client 20.163.106.128:6108] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aclTCSE3TArOFrUtgWqVowAAAJE"]
[Mon Mar 30 00:27:54.427680 2026] [:error] [pid 32257:tid 32322] [client 20.163.106.128:6089] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2ksm17n.php"] [unique_id "aclTCiE3TArOFrUtgWqVqQAAAIQ"]
[Mon Mar 30 00:27:54.743805 2026] [:error] [pid 32257:tid 32325] [client 20.163.106.128:6119] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2ksm17n.php"] [unique_id "aclTCiE3TArOFrUtgWqVrgAAAIc"]
[Mon Mar 30 00:27:55.057347 2026] [:error] [pid 32257:tid 32326] [client 20.163.106.128:6049] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2ksm17n.php"] [unique_id "aclTCyE3TArOFrUtgWqVsAAAAIg"]
[Mon Mar 30 00:27:56.383076 2026] [:error] [pid 23284:tid 23304] [client 20.163.106.128:6112] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2ksm17n.php"] [unique_id "aclTDIzBujdPHsq7wyQaQQAAApI"]
[Mon Mar 30 00:27:56.700670 2026] [:error] [pid 23284:tid 23298] [client 20.163.106.128:6114] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aclTDIzBujdPHsq7wyQaQwAAAow"]
[Mon Mar 30 00:27:57.020077 2026] [:error] [pid 32255:tid 32310] [client 20.163.106.128:6131] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aclTDWnfn-AtRoMbquw30wAAAFM"]
[Mon Mar 30 00:27:57.345310 2026] [:error] [pid 23284:tid 23300] [client 20.163.106.128:6124] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aclTDYzBujdPHsq7wyQaTAAAAo4"]
[Mon Mar 30 00:27:57.736244 2026] [:error] [pid 32257:tid 32334] [client 20.163.106.128:6044] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aclTDSE3TArOFrUtgWqVtgAAAJA"]
[Mon Mar 30 00:27:58.050198 2026] [:error] [pid 32359:tid 32368] [client 20.163.106.128:6102] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "aclTDgMb8G3UzfQP3WhDzwAAAMc"]
[Mon Mar 30 00:27:58.369952 2026] [:error] [pid 32255:tid 32315] [client 20.163.106.128:6111] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "aclTDmnfn-AtRoMbquw31AAAAFg"]
[Mon Mar 30 00:27:58.685700 2026] [:error] [pid 23167:tid 23171] [client 20.163.106.128:6023] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "aclTDhIAHJCFaHff3_frKgAAAcE"]
[Mon Mar 30 00:27:59.002474 2026] [:error] [pid 32257:tid 32336] [client 20.163.106.128:6081] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "aclTDyE3TArOFrUtgWqVugAAAJI"]
[Mon Mar 30 00:27:59.327353 2026] [:error] [pid 23168:tid 23203] [client 20.163.106.128:5952] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aclTD2P8p0yRL8ot_2_UzAAAAgY"]
[Mon Mar 30 00:27:59.651654 2026] [:error] [pid 32359:tid 32376] [client 20.163.106.128:5978] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aclTDwMb8G3UzfQP3WhD0AAAAM8"]
[Mon Mar 30 00:27:59.968421 2026] [:error] [pid 32257:tid 32334] [client 20.163.106.128:6086] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aclTDyE3TArOFrUtgWqVvgAAAJA"]
[Mon Mar 30 00:28:00.286619 2026] [:error] [pid 23168:tid 23211] [client 20.163.106.128:6031] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aclTEGP8p0yRL8ot_2_UzgAAAg4"]
[Mon Mar 30 00:28:00.623838 2026] [:error] [pid 23167:tid 23183] [client 20.163.106.128:5964] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aclTEBIAHJCFaHff3_frKwAAAc0"]
[Mon Mar 30 00:28:01.028133 2026] [:error] [pid 32257:tid 32324] [client 20.163.106.128:6061] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aclTESE3TArOFrUtgWqVxQAAAIY"]
[Mon Mar 30 00:28:01.343342 2026] [:error] [pid 32257:tid 32335] [client 20.163.106.128:6137] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aclTESE3TArOFrUtgWqVxwAAAJE"]
[Mon Mar 30 00:28:01.665311 2026] [:error] [pid 32257:tid 32325] [client 20.163.106.128:6142] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aclTESE3TArOFrUtgWqVyAAAAIc"]
[Mon Mar 30 00:28:01.979366 2026] [:error] [pid 23167:tid 23193] [client 20.163.106.128:6060] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aclTERIAHJCFaHff3_frLAAAAdc"]
[Mon Mar 30 00:28:02.294583 2026] [:error] [pid 23137:tid 23147] [client 20.163.106.128:5980] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aclTEhaWQa7LdZ_qGFYU5gAAAYg"]
[Mon Mar 30 00:28:02.611666 2026] [:error] [pid 23168:tid 23202] [client 20.163.106.128:5982] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aclTEmP8p0yRL8ot_2_U0AAAAgU"]
[Mon Mar 30 00:28:02.927575 2026] [:error] [pid 23168:tid 23221] [client 20.163.106.128:5962] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aclTEmP8p0yRL8ot_2_U0gAAAhg"]
[Mon Mar 30 00:28:03.248383 2026] [:error] [pid 23284:tid 23302] [client 20.163.106.128:5966] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aclTE4zBujdPHsq7wyQaVwAAApA"]
[Mon Mar 30 00:28:03.565385 2026] [:error] [pid 23284:tid 23300] [client 20.163.106.128:6016] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aclTE4zBujdPHsq7wyQaWgAAAo4"]
[Mon Mar 30 00:28:03.878279 2026] [:error] [pid 32257:tid 32318] [client 20.163.106.128:6019] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aclTEyE3TArOFrUtgWqVzgAAAIA"]
[Mon Mar 30 00:28:04.195981 2026] [:error] [pid 23167:tid 23188] [client 20.163.106.128:6106] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aclTFBIAHJCFaHff3_frLQAAAdI"]
[Mon Mar 30 00:28:04.511447 2026] [:error] [pid 32255:tid 32312] [client 20.163.106.128:6130] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aclTFGnfn-AtRoMbquw31wAAAFU"]
[Mon Mar 30 00:28:04.825391 2026] [:error] [pid 32255:tid 32294] [client 20.163.106.128:6122] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aclTFGnfn-AtRoMbquw32AAAAEM"]
[Mon Mar 30 00:28:05.155043 2026] [:error] [pid 32255:tid 32314] [client 20.163.106.128:6143] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aclTFWnfn-AtRoMbquw32gAAAFc"]
[Mon Mar 30 00:28:05.472714 2026] [:error] [pid 23284:tid 23310] [client 20.163.106.128:6096] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aclTFYzBujdPHsq7wyQaYAAAApg"]
[Mon Mar 30 00:28:05.798381 2026] [:error] [pid 23167:tid 23170] [client 20.163.106.128:6067] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aclTFRIAHJCFaHff3_frLgAAAcA"]
[Mon Mar 30 00:28:06.116379 2026] [:error] [pid 8818:tid 8837] [client 20.163.106.128:6046] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aclTFiCDvotZNSF0FBoEhwAAAU8"]
[Mon Mar 30 00:28:06.438926 2026] [:error] [pid 23168:tid 23204] [client 20.163.106.128:6025] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aclTFmP8p0yRL8ot_2_U2AAAAgc"]
[Mon Mar 30 00:28:06.753830 2026] [:error] [pid 32257:tid 32326] [client 20.163.106.128:6100] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aclTFiE3TArOFrUtgWqV1QAAAIg"]
[Mon Mar 30 00:28:07.070472 2026] [:error] [pid 23137:tid 23162] [client 20.163.106.128:6094] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aclTFxaWQa7LdZ_qGFYU5wAAAZc"]
[Mon Mar 30 00:28:07.387886 2026] [:error] [pid 32254:tid 32269] [client 20.163.106.128:6034] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aclTF6ug2IHuyGgCTn9tfAAAAAU"]
[Mon Mar 30 00:28:07.717173 2026] [:error] [pid 23284:tid 23298] [client 20.163.106.128:6110] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aclTF4zBujdPHsq7wyQaYgAAAow"]
[Mon Mar 30 00:28:08.032139 2026] [:error] [pid 23250:tid 23258] [client 20.163.106.128:5965] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aclTGJxrpj-dQjy1cvojKwAAAkY"]
[Mon Mar 30 00:28:08.349901 2026] [:error] [pid 23167:tid 23189] [client 20.163.106.128:5960] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws83.php"] [unique_id "aclTGBIAHJCFaHff3_frMQAAAdM"]
[Mon Mar 30 00:28:08.664261 2026] [:error] [pid 23284:tid 23307] [client 20.163.106.128:6028] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws83.php"] [unique_id "aclTGIzBujdPHsq7wyQaZgAAApU"]
[Mon Mar 30 00:28:08.987465 2026] [:error] [pid 23168:tid 23202] [client 20.163.106.128:6104] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws83.php"] [unique_id "aclTGGP8p0yRL8ot_2_U3QAAAgU"]
[Mon Mar 30 00:28:09.300905 2026] [:error] [pid 23284:tid 23292] [client 20.163.106.128:6133] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws83.php"] [unique_id "aclTGYzBujdPHsq7wyQaawAAAoY"]
[Mon Mar 30 00:28:09.614843 2026] [:error] [pid 23167:tid 23172] [client 20.163.106.128:6059] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/56c53.php"] [unique_id "aclTGRIAHJCFaHff3_frMgAAAcI"]
[Mon Mar 30 00:28:09.934868 2026] [:error] [pid 32255:tid 32310] [client 20.163.106.128:6075] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/56c53.php"] [unique_id "aclTGWnfn-AtRoMbquw33gAAAFM"]
[Mon Mar 30 00:28:10.257524 2026] [:error] [pid 32257:tid 32331] [client 20.163.106.128:6074] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/56c53.php"] [unique_id "aclTGiE3TArOFrUtgWqV1wAAAI0"]
[Mon Mar 30 00:28:10.574221 2026] [:error] [pid 32359:tid 32385] [client 20.163.106.128:6039] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/56c53.php"] [unique_id "aclTGgMb8G3UzfQP3WhD1AAAANg"]
[Mon Mar 30 00:28:10.891185 2026] [:error] [pid 32254:tid 32278] [client 20.163.106.128:6136] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aclTGqug2IHuyGgCTn9tfwAAAA4"]
[Mon Mar 30 00:28:11.215347 2026] [:error] [pid 32255:tid 32302] [client 20.163.106.128:6005] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aclTG2nfn-AtRoMbquw35AAAAEs"]
[Mon Mar 30 00:28:11.533571 2026] [:error] [pid 32255:tid 32294] [client 20.163.106.128:6126] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aclTG2nfn-AtRoMbquw35gAAAEM"]
[Mon Mar 30 00:28:11.849720 2026] [:error] [pid 32257:tid 32342] [client 20.163.106.128:6065] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aclTGyE3TArOFrUtgWqV3AAAAJg"]
[Mon Mar 30 00:28:12.162173 2026] [:error] [pid 23284:tid 23286] [client 20.163.106.128:5953] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "aclTHIzBujdPHsq7wyQabwAAAoA"]
[Mon Mar 30 00:28:12.475541 2026] [:error] [pid 32257:tid 32330] [client 20.163.106.128:6063] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "aclTHCE3TArOFrUtgWqV4AAAAIw"]
[Mon Mar 30 00:28:12.789588 2026] [:error] [pid 32257:tid 32322] [client 20.163.106.128:5957] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "aclTHCE3TArOFrUtgWqV4QAAAIQ"]
[Mon Mar 30 00:28:13.103578 2026] [:error] [pid 8818:tid 8839] [client 20.163.106.128:6135] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "aclTHSCDvotZNSF0FBoEjAAAAVE"]
[Mon Mar 30 00:28:13.423083 2026] [:error] [pid 8818:tid 8842] [client 20.163.106.128:6091] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "aclTHSCDvotZNSF0FBoEjgAAAVQ"]
[Mon Mar 30 00:28:13.763370 2026] [:error] [pid 23137:tid 23149] [client 20.163.106.128:6084] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "aclTHRaWQa7LdZ_qGFYU6QAAAYo"]
[Mon Mar 30 00:28:14.076977 2026] [:error] [pid 32255:tid 32291] [client 20.163.106.128:5971] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "aclTHmnfn-AtRoMbquw36QAAAEA"]
[Mon Mar 30 00:28:14.405743 2026] [:error] [pid 8818:tid 8841] [client 20.163.106.128:6116] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "aclTHiCDvotZNSF0FBoEjwAAAVM"]
[Mon Mar 30 00:28:14.717717 2026] [:error] [pid 23284:tid 23297] [client 20.163.106.128:5961] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bo.php"] [unique_id "aclTHozBujdPHsq7wyQacwAAAos"]
[Mon Mar 30 00:28:15.033742 2026] [:error] [pid 23284:tid 23293] [client 20.163.106.128:6070] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bo.php"] [unique_id "aclTH4zBujdPHsq7wyQadQAAAoc"]
[Mon Mar 30 00:28:15.348459 2026] [:error] [pid 23167:tid 23181] [client 20.163.106.128:5897] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bo.php"] [unique_id "aclTHxIAHJCFaHff3_frNAAAAcs"]
[Mon Mar 30 00:28:15.672765 2026] [:error] [pid 32257:tid 32322] [client 20.163.106.128:6018] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bo.php"] [unique_id "aclTHyE3TArOFrUtgWqV6gAAAIQ"]
[Mon Mar 30 00:28:16.003467 2026] [:error] [pid 23250:tid 23257] [client 20.163.106.128:6038] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5b9ac.php"] [unique_id "aclTIJxrpj-dQjy1cvojLQAAAkU"]
[Mon Mar 30 00:28:16.319173 2026] [:error] [pid 32257:tid 32341] [client 20.163.106.128:6068] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5b9ac.php"] [unique_id "aclTICE3TArOFrUtgWqV6wAAAJc"]
[Mon Mar 30 00:28:16.644057 2026] [:error] [pid 32255:tid 32295] [client 20.163.106.128:6056] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5b9ac.php"] [unique_id "aclTIGnfn-AtRoMbquw36gAAAEQ"]
[Mon Mar 30 00:28:16.956864 2026] [:error] [pid 23137:tid 23151] [client 20.163.106.128:6029] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5b9ac.php"] [unique_id "aclTIBaWQa7LdZ_qGFYU7AAAAYw"]
[Mon Mar 30 00:28:17.704456 2026] [:error] [pid 32254:tid 32281] [client 20.163.106.128:6079] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aclTIaug2IHuyGgCTn9tgAAAABE"]
[Mon Mar 30 00:28:18.023632 2026] [:error] [pid 32254:tid 32283] [client 20.163.106.128:6120] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aclTIqug2IHuyGgCTn9tgQAAABM"]
[Mon Mar 30 00:28:18.382689 2026] [:error] [pid 32257:tid 32334] [client 20.163.106.128:6055] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aclTIiE3TArOFrUtgWqV_wAAAJA"]
[Mon Mar 30 00:28:18.710595 2026] [:error] [pid 32257:tid 32331] [client 20.163.106.128:6030] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aclTIiE3TArOFrUtgWqWAgAAAI0"]
[Mon Mar 30 00:28:19.023434 2026] [:error] [pid 23250:tid 23270] [client 20.163.106.128:6066] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "aclTI5xrpj-dQjy1cvojLgAAAlI"]
[Mon Mar 30 00:28:19.339936 2026] [:error] [pid 23168:tid 23213] [client 20.163.106.128:6140] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "aclTI2P8p0yRL8ot_2_U5QAAAhA"]
[Mon Mar 30 00:28:19.676891 2026] [:error] [pid 23168:tid 23201] [client 20.163.106.128:6082] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "aclTI2P8p0yRL8ot_2_U5wAAAgQ"]
[Mon Mar 30 00:28:19.989590 2026] [:error] [pid 23168:tid 23208] [client 20.163.106.128:6058] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "aclTI2P8p0yRL8ot_2_U6gAAAgs"]
[Mon Mar 30 00:28:20.305281 2026] [:error] [pid 32255:tid 32313] [client 20.163.106.128:5967] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "aclTJGnfn-AtRoMbquw39wAAAFY"]
[Mon Mar 30 00:28:20.618694 2026] [:error] [pid 32255:tid 32291] [client 20.163.106.128:6027] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "aclTJGnfn-AtRoMbquw3-QAAAEA"]
[Mon Mar 30 00:28:20.932159 2026] [:error] [pid 23167:tid 23193] [client 20.163.106.128:6045] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "aclTJBIAHJCFaHff3_frOAAAAdc"]
[Mon Mar 30 00:28:21.245281 2026] [:error] [pid 32257:tid 32340] [client 20.163.106.128:5963] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "aclTJSE3TArOFrUtgWqWBwAAAJY"]
[Mon Mar 30 00:28:21.559832 2026] [:error] [pid 8818:tid 8844] [client 20.163.106.128:5968] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "aclTJSCDvotZNSF0FBoEkwAAAVY"]
[Mon Mar 30 00:28:21.872109 2026] [:error] [pid 23167:tid 23189] [client 20.163.106.128:6052] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "aclTJRIAHJCFaHff3_frPAAAAdM"]
[Mon Mar 30 00:28:22.188762 2026] [:error] [pid 23137:tid 23139] [client 20.163.106.128:5973] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "aclTJhaWQa7LdZ_qGFYU8AAAAYA"]
[Mon Mar 30 00:28:22.510640 2026] [:error] [pid 23168:tid 23220] [client 20.163.106.128:6041] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "aclTJmP8p0yRL8ot_2_U9QAAAhc"]
[Mon Mar 30 00:28:22.825793 2026] [:error] [pid 23167:tid 23179] [client 20.163.106.128:6125] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "aclTJhIAHJCFaHff3_frPQAAAck"]
[Mon Mar 30 00:28:23.142783 2026] [:error] [pid 23167:tid 23194] [client 20.163.106.128:6087] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "aclTJxIAHJCFaHff3_frPgAAAdg"]
[Mon Mar 30 00:28:23.457736 2026] [:error] [pid 23137:tid 23154] [client 20.163.106.128:5969] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "aclTJxaWQa7LdZ_qGFYU8QAAAY8"]
[Mon Mar 30 00:28:23.774130 2026] [:error] [pid 23137:tid 23162] [client 20.163.106.128:5958] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "aclTJxaWQa7LdZ_qGFYU8gAAAZc"]
[Mon Mar 30 00:28:24.095759 2026] [:error] [pid 23284:tid 23290] [client 20.163.106.128:6123] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "aclTKIzBujdPHsq7wyQaeQAAAoQ"]
[Mon Mar 30 00:28:24.417167 2026] [:error] [pid 23137:tid 23159] [client 20.163.106.128:6037] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "aclTKBaWQa7LdZ_qGFYU9QAAAZQ"]
[Mon Mar 30 00:28:24.732456 2026] [:error] [pid 23167:tid 23190] [client 20.163.106.128:6062] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "aclTKBIAHJCFaHff3_frQwAAAdQ"]
[Mon Mar 30 00:28:25.044933 2026] [:error] [pid 32257:tid 32319] [client 20.163.106.128:6004] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "aclTKSE3TArOFrUtgWqWDgAAAIE"]
[Mon Mar 30 00:28:25.360915 2026] [:error] [pid 32257:tid 32328] [client 20.163.106.128:5995] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "aclTKSE3TArOFrUtgWqWEAAAAIo"]
[Mon Mar 30 00:28:25.682784 2026] [:error] [pid 32257:tid 32338] [client 20.163.106.128:5996] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "aclTKSE3TArOFrUtgWqWEwAAAJQ"]
[Mon Mar 30 00:28:26.103193 2026] [:error] [pid 32257:tid 32326] [client 20.163.106.128:6054] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "aclTKiE3TArOFrUtgWqWFgAAAIg"]
[Mon Mar 30 00:28:26.426596 2026] [:error] [pid 32257:tid 32329] [client 20.163.106.128:5903] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "aclTKiE3TArOFrUtgWqWGwAAAIs"]
[Mon Mar 30 00:28:26.761834 2026] [:error] [pid 32257:tid 32339] [client 20.163.106.128:6139] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aclTKiE3TArOFrUtgWqWHwAAAJU"]
[Mon Mar 30 00:28:27.074187 2026] [:error] [pid 23284:tid 23307] [client 20.163.106.128:6069] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aclTK4zBujdPHsq7wyQaegAAApU"]
[Mon Mar 30 00:28:27.392553 2026] [:error] [pid 23168:tid 23219] [client 20.163.106.128:6013] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aclTK2P8p0yRL8ot_2_U-AAAAhY"]
[Mon Mar 30 00:28:27.713716 2026] [:error] [pid 23168:tid 23214] [client 20.163.106.128:5977] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aclTK2P8p0yRL8ot_2_U-QAAAhE"]
[Mon Mar 30 00:28:28.122452 2026] [:error] [pid 23168:tid 23202] [client 20.163.106.128:5974] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aclTLGP8p0yRL8ot_2_U_AAAAgU"]
[Mon Mar 30 00:28:28.442947 2026] [:error] [pid 23168:tid 23221] [client 20.163.106.128:6138] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aclTLGP8p0yRL8ot_2_U_wAAAhg"]
[Mon Mar 30 00:28:28.756906 2026] [:error] [pid 32255:tid 32313] [client 20.163.106.128:6093] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aclTLGnfn-AtRoMbquw4IgAAAFY"]
[Mon Mar 30 00:28:29.070607 2026] [:error] [pid 32255:tid 32306] [client 20.163.106.128:5991] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aclTLWnfn-AtRoMbquw4JQAAAE8"]
[Mon Mar 30 00:28:29.383104 2026] [:error] [pid 32255:tid 32292] [client 20.163.106.128:5905] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aclTLWnfn-AtRoMbquw4JwAAAEE"]
[Mon Mar 30 00:28:29.700172 2026] [:error] [pid 32257:tid 32335] [client 20.163.106.128:6040] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aclTLSE3TArOFrUtgWqWIQAAAJE"]
[Mon Mar 30 00:28:30.013070 2026] [:error] [pid 23168:tid 23210] [client 20.163.106.128:5981] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aclTLmP8p0yRL8ot_2_VAgAAAg0"]
[Mon Mar 30 00:28:30.340717 2026] [:error] [pid 32257:tid 32320] [client 20.163.106.128:6008] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aclTLiE3TArOFrUtgWqWIwAAAII"]
[Mon Mar 30 00:28:30.654894 2026] [:error] [pid 32257:tid 32323] [client 20.163.106.128:5959] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aclTLiE3TArOFrUtgWqWJAAAAIU"]
[Mon Mar 30 00:28:30.969315 2026] [:error] [pid 23167:tid 23188] [client 20.163.106.128:5986] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aclTLhIAHJCFaHff3_frSAAAAdI"]
[Mon Mar 30 00:28:31.287376 2026] [:error] [pid 23284:tid 23303] [client 20.163.106.128:6076] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aclTL4zBujdPHsq7wyQafwAAApE"]
[Mon Mar 30 00:28:31.601575 2026] [:error] [pid 23137:tid 23143] [client 20.163.106.128:5950] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aclTLxaWQa7LdZ_qGFYU-QAAAYQ"]
[Mon Mar 30 00:28:31.914031 2026] [:error] [pid 23167:tid 23174] [client 20.163.106.128:5917] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "aclTLxIAHJCFaHff3_frSgAAAcQ"]
[Mon Mar 30 00:28:32.236463 2026] [:error] [pid 23168:tid 23212] [client 20.163.106.128:5956] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "aclTMGP8p0yRL8ot_2_VBAAAAg8"]
[Mon Mar 30 00:28:32.552468 2026] [:error] [pid 23167:tid 23189] [client 20.163.106.128:6043] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "aclTMBIAHJCFaHff3_frSwAAAdM"]
[Mon Mar 30 00:28:32.870245 2026] [:error] [pid 8818:tid 8827] [client 20.163.106.128:5987] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "aclTMCCDvotZNSF0FBoEmQAAAUU"]
[Mon Mar 30 00:28:33.189540 2026] [:error] [pid 32254:tid 32285] [client 20.163.106.128:6050] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/ws49.php"] [unique_id "aclTMaug2IHuyGgCTn9thgAAABU"]
[Mon Mar 30 00:28:33.503267 2026] [:error] [pid 32254:tid 32271] [client 20.163.106.128:6051] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/ws49.php"] [unique_id "aclTMaug2IHuyGgCTn9thwAAAAc"]
[Mon Mar 30 00:28:33.818007 2026] [:error] [pid 23137:tid 23152] [client 20.163.106.128:6127] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/ws49.php"] [unique_id "aclTMRaWQa7LdZ_qGFYU-gAAAY0"]
[Mon Mar 30 00:28:34.135743 2026] [:error] [pid 32257:tid 32337] [client 20.163.106.128:5954] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/ws49.php"] [unique_id "aclTMiE3TArOFrUtgWqWLgAAAJM"]
[Mon Mar 30 00:28:34.450508 2026] [:error] [pid 32257:tid 32328] [client 20.163.106.128:6033] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "aclTMiE3TArOFrUtgWqWMQAAAIo"]
[Mon Mar 30 00:28:34.769146 2026] [:error] [pid 23250:tid 23264] [client 20.163.106.128:5898] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "aclTMpxrpj-dQjy1cvojNAAAAkw"]
[Mon Mar 30 00:28:35.082679 2026] [:error] [pid 32257:tid 32338] [client 20.163.106.128:5909] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "aclTMyE3TArOFrUtgWqWNQAAAJQ"]
[Mon Mar 30 00:28:35.399008 2026] [:error] [pid 32359:tid 32372] [client 20.163.106.128:6097] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "aclTMwMb8G3UzfQP3WhD3gAAAMs"]
[Mon Mar 30 00:28:35.713134 2026] [:error] [pid 32255:tid 32308] [client 20.163.106.128:5975] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aclTM2nfn-AtRoMbquw4UgAAAFE"]
[Mon Mar 30 00:28:36.030453 2026] [:error] [pid 32359:tid 32383] [client 20.163.106.128:5923] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aclTNAMb8G3UzfQP3WhD4AAAANY"]
[Mon Mar 30 00:28:36.344783 2026] [:error] [pid 32255:tid 32302] [client 20.163.106.128:6047] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aclTNGnfn-AtRoMbquw4VwAAAEs"]
[Mon Mar 30 00:28:36.681920 2026] [:error] [pid 32255:tid 32303] [client 20.163.106.128:5994] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aclTNGnfn-AtRoMbquw4WgAAAEw"]
[Mon Mar 30 00:28:36.994638 2026] [:error] [pid 23168:tid 23213] [client 20.163.106.128:5895] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amp.php"] [unique_id "aclTNGP8p0yRL8ot_2_VBwAAAhA"]
[Mon Mar 30 00:28:37.307702 2026] [:error] [pid 23168:tid 23211] [client 20.163.106.128:5888] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amp.php"] [unique_id "aclTNWP8p0yRL8ot_2_VCAAAAg4"]
[Mon Mar 30 00:28:37.620986 2026] [:error] [pid 23168:tid 23201] [client 20.163.106.128:6012] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amp.php"] [unique_id "aclTNWP8p0yRL8ot_2_VDAAAAgQ"]
[Mon Mar 30 00:28:37.941288 2026] [:error] [pid 23137:tid 23153] [client 20.163.106.128:6053] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amp.php"] [unique_id "aclTNRaWQa7LdZ_qGFYU_AAAAY4"]
[Mon Mar 30 00:28:38.262215 2026] [:error] [pid 8818:tid 8841] [client 20.163.106.128:5935] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws75.php"] [unique_id "aclTNiCDvotZNSF0FBoEmgAAAVM"]
[Mon Mar 30 00:28:38.575053 2026] [:error] [pid 32257:tid 32330] [client 20.163.106.128:6101] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws75.php"] [unique_id "aclTNiE3TArOFrUtgWqWPQAAAIw"]
[Mon Mar 30 00:28:38.893958 2026] [:error] [pid 32255:tid 32307] [client 20.163.106.128:6092] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws75.php"] [unique_id "aclTNmnfn-AtRoMbquw4awAAAFA"]
[Mon Mar 30 00:28:39.207596 2026] [:error] [pid 23168:tid 23210] [client 20.163.106.128:5984] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws75.php"] [unique_id "aclTN2P8p0yRL8ot_2_VEAAAAg0"]
[Mon Mar 30 00:28:39.544777 2026] [:error] [pid 32257:tid 32338] [client 20.163.106.128:5826] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "aclTNyE3TArOFrUtgWqWPgAAAJQ"]
[Mon Mar 30 00:28:39.876802 2026] [:error] [pid 32255:tid 32297] [client 20.163.106.128:5993] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "aclTN2nfn-AtRoMbquw4dAAAAEY"]
[Mon Mar 30 00:28:40.756389 2026] [:error] [pid 32257:tid 32334] [client 20.163.106.128:6064] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "aclTOCE3TArOFrUtgWqWRAAAAJA"]
[Mon Mar 30 00:28:41.071692 2026] [:error] [pid 32257:tid 32331] [client 20.163.106.128:5900] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "aclTOSE3TArOFrUtgWqWRwAAAI0"]
[Mon Mar 30 00:28:41.384743 2026] [:error] [pid 23250:tid 23269] [client 20.163.106.128:5922] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maul.php"] [unique_id "aclTOZxrpj-dQjy1cvojOAAAAlE"]
[Mon Mar 30 00:28:41.701985 2026] [:error] [pid 23250:tid 23273] [client 20.163.106.128:5911] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maul.php"] [unique_id "aclTOZxrpj-dQjy1cvojOwAAAlU"]
[Mon Mar 30 00:28:42.025383 2026] [:error] [pid 23250:tid 23267] [client 20.163.106.128:5836] File does not exist: /usr/local/apache/htdocs/suspended-page/maul.php
[Mon Mar 30 00:28:42.184806 2026] [:error] [pid 23250:tid 23275] [client 20.163.106.128:5836] File does not exist: /usr/local/apache/htdocs/suspended-page/lowpr.php
[Mon Mar 30 00:28:42.344945 2026] [:error] [pid 23250:tid 23252] [client 20.163.106.128:5836] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Mon Mar 30 00:28:42.504598 2026] [:error] [pid 23250:tid 23276] [client 20.163.106.128:5836] File does not exist: /usr/local/apache/htdocs/suspended-page/166.php
[Mon Mar 30 00:28:42.664528 2026] [:error] [pid 23250:tid 23256] [client 20.163.106.128:5836] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Mon Mar 30 00:28:42.823415 2026] [:error] [pid 23250:tid 23261] [client 20.163.106.128:5836] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Mon Mar 30 00:28:42.984576 2026] [:error] [pid 23250:tid 23263] [client 20.163.106.128:5836] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Mon Mar 30 00:28:43.144029 2026] [:error] [pid 23250:tid 23266] [client 20.163.106.128:5836] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Mon Mar 30 00:28:43.303736 2026] [:error] [pid 23250:tid 23268] [client 20.163.106.128:5836] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Mon Mar 30 00:28:43.463244 2026] [:error] [pid 23250:tid 23274] [client 20.163.106.128:5836] File does not exist: /usr/local/apache/htdocs/suspended-page/ne2026.php
[Mon Mar 30 00:28:43.622883 2026] [:error] [pid 23250:tid 23272] [client 20.163.106.128:5836] File does not exist: /usr/local/apache/htdocs/suspended-page/ws73.php
[Mon Mar 30 00:28:43.779343 2026] [:error] [pid 23250:tid 23257] [client 20.163.106.128:5836] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "aclTO5xrpj-dQjy1cvojTgAAAkU"]
[Mon Mar 30 00:28:44.092720 2026] [:error] [pid 32255:tid 32305] [client 20.163.106.128:6048] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "aclTPGnfn-AtRoMbquw4hwAAAE4"]
[Mon Mar 30 00:28:44.409470 2026] [:error] [pid 32257:tid 32323] [client 20.163.106.128:5988] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "aclTPCE3TArOFrUtgWqWcAAAAIU"]
[Mon Mar 30 00:28:44.794603 2026] [:error] [pid 32255:tid 32303] [client 20.163.106.128:5912] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "aclTPGnfn-AtRoMbquw4iQAAAEw"]
[Mon Mar 30 00:28:45.110495 2026] [:error] [pid 32257:tid 32335] [client 20.163.106.128:5892] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/baixy.php"] [unique_id "aclTPSE3TArOFrUtgWqWcwAAAJE"]
[Mon Mar 30 00:28:45.424691 2026] [:error] [pid 23284:tid 23301] [client 20.163.106.128:5985] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/baixy.php"] [unique_id "aclTPYzBujdPHsq7wyQagQAAAo8"]
[Mon Mar 30 00:28:46.738239 2026] [:error] [pid 32254:tid 32283] [client 20.163.106.128:6073] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/baixy.php"] [unique_id "aclTPqug2IHuyGgCTn9tjQAAABM"]
[Mon Mar 30 00:28:47.051725 2026] [:error] [pid 23167:tid 23173] [client 20.163.106.128:5979] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/baixy.php"] [unique_id "aclTPxIAHJCFaHff3_frWQAAAcM"]
[Mon Mar 30 00:28:48.380415 2026] [:error] [pid 32254:tid 32277] [client 20.163.106.128:6009] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aclTQKug2IHuyGgCTn9tkAAAAA0"]
[Mon Mar 30 00:28:48.705632 2026] [:error] [pid 23137:tid 23145] [client 20.163.106.128:5850] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aclTQBaWQa7LdZ_qGFYVAAAAAYY"]
[Mon Mar 30 00:28:50.023227 2026] [:error] [pid 32257:tid 32333] [client 20.163.106.128:5889] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aclTQiE3TArOFrUtgWqWdwAAAI8"]
[Mon Mar 30 00:28:50.340485 2026] [:error] [pid 23284:tid 23288] [client 20.163.106.128:5990] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aclTQozBujdPHsq7wyQahQAAAoI"]
[Mon Mar 30 00:28:50.655124 2026] [:error] [pid 23284:tid 23295] [client 20.163.106.128:6006] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aclTQozBujdPHsq7wyQaiAAAAok"]
[Mon Mar 30 00:28:50.967809 2026] [:error] [pid 23284:tid 23310] [client 20.163.106.128:6003] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aclTQozBujdPHsq7wyQajQAAApg"]
[Mon Mar 30 00:28:51.280611 2026] [:error] [pid 23167:tid 23186] [client 20.163.106.128:5983] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aclTQxIAHJCFaHff3_frWwAAAdA"]
[Mon Mar 30 00:28:52.610079 2026] [:error] [pid 23284:tid 23304] [client 20.163.106.128:6077] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aclTRIzBujdPHsq7wyQakQAAApI"]
[Mon Mar 30 00:28:52.924096 2026] [:error] [pid 23284:tid 23288] [client 20.163.106.128:5846] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "aclTRIzBujdPHsq7wyQakgAAAoI"]
[Mon Mar 30 00:28:53.240592 2026] [:error] [pid 23284:tid 23295] [client 20.163.106.128:5943] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "aclTRYzBujdPHsq7wyQakwAAAok"]
[Mon Mar 30 00:28:54.614946 2026] [:error] [pid 23284:tid 23287] [client 20.163.106.128:5910] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "aclTRozBujdPHsq7wyQalQAAAoE"]
[Mon Mar 30 00:28:54.942551 2026] [:error] [pid 32255:tid 32299] [client 20.163.106.128:5919] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "aclTRmnfn-AtRoMbquw4lQAAAEg"]
[Mon Mar 30 00:28:55.258395 2026] [:error] [pid 23284:tid 23294] [client 20.163.106.128:5972] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "aclTR4zBujdPHsq7wyQalgAAAog"]
[Mon Mar 30 00:28:55.580213 2026] [:error] [pid 23167:tid 23187] [client 20.163.106.128:5931] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "aclTRxIAHJCFaHff3_frZAAAAdE"]
[Mon Mar 30 00:28:55.901287 2026] [:error] [pid 23284:tid 23296] [client 20.163.106.128:5928] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "aclTR4zBujdPHsq7wyQamgAAAoo"]
[Mon Mar 30 00:28:56.222625 2026] [:error] [pid 32257:tid 32335] [client 20.163.106.128:5947] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "aclTSCE3TArOFrUtgWqWggAAAJE"]
[Mon Mar 30 00:28:56.536810 2026] [:error] [pid 32257:tid 32332] [client 20.163.106.128:5918] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5e0a.php"] [unique_id "aclTSCE3TArOFrUtgWqWgwAAAI4"]
[Mon Mar 30 00:28:56.851524 2026] [:error] [pid 32254:tid 32287] [client 20.163.106.128:5899] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5e0a.php"] [unique_id "aclTSKug2IHuyGgCTn9tlAAAABc"]
[Mon Mar 30 00:28:57.166010 2026] [:error] [pid 23284:tid 23291] [client 20.163.106.128:6001] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5e0a.php"] [unique_id "aclTSYzBujdPHsq7wyQapAAAAoU"]
[Mon Mar 30 00:28:57.482707 2026] [:error] [pid 23168:tid 23214] [client 20.163.106.128:6002] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5e0a.php"] [unique_id "aclTSWP8p0yRL8ot_2_VGwAAAhE"]
[Mon Mar 30 00:28:57.796068 2026] [:error] [pid 32257:tid 32341] [client 20.163.106.128:5930] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aclTSSE3TArOFrUtgWqWhgAAAJc"]
[Mon Mar 30 00:28:58.110232 2026] [:error] [pid 32255:tid 32308] [client 20.163.106.128:5906] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aclTSmnfn-AtRoMbquw4mgAAAFE"]
[Mon Mar 30 00:28:58.425394 2026] [:error] [pid 23284:tid 23287] [client 20.163.106.128:5914] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aclTSozBujdPHsq7wyQargAAAoE"]
[Mon Mar 30 00:28:58.745972 2026] [:error] [pid 23137:tid 23158] [client 20.163.106.128:6095] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aclTShaWQa7LdZ_qGFYVBgAAAZM"]
[Mon Mar 30 00:29:00.083631 2026] [:error] [pid 32254:tid 32279] [client 20.163.106.128:5858] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aclTTKug2IHuyGgCTn9tlwAAAA8"]
[Mon Mar 30 00:29:00.415137 2026] [:error] [pid 32359:tid 32369] [client 20.163.106.128:5955] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aclTTAMb8G3UzfQP3WhD9QAAAMg"]
[Mon Mar 30 00:29:00.732935 2026] [:error] [pid 32254:tid 32283] [client 20.163.106.128:5890] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aclTTKug2IHuyGgCTn9tmgAAABM"]
[Mon Mar 30 00:29:01.055063 2026] [:error] [pid 32257:tid 32320] [client 20.163.106.128:5945] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aclTTSE3TArOFrUtgWqWlwAAAII"]
[Mon Mar 30 00:29:01.368454 2026] [:error] [pid 32359:tid 32377] [client 20.163.106.128:6095] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/55b76.php"] [unique_id "aclTTQMb8G3UzfQP3WhD9wAAANA"]
[Mon Mar 30 00:29:01.683558 2026] [:error] [pid 23167:tid 23188] [client 20.163.106.128:5970] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/55b76.php"] [unique_id "aclTTRIAHJCFaHff3_frZwAAAdI"]
[Mon Mar 30 00:29:01.996910 2026] [:error] [pid 23167:tid 23182] [client 20.163.106.128:5866] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/55b76.php"] [unique_id "aclTTRIAHJCFaHff3_fraAAAAcw"]
[Mon Mar 30 00:29:02.313113 2026] [:error] [pid 32255:tid 32304] [client 20.163.106.128:5934] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/55b76.php"] [unique_id "aclTTmnfn-AtRoMbquw4nAAAAE0"]
[Mon Mar 30 00:29:02.626896 2026] [:error] [pid 23167:tid 23194] [client 20.163.106.128:5893] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "aclTThIAHJCFaHff3_frawAAAdg"]
[Mon Mar 30 00:29:02.942905 2026] [:error] [pid 32254:tid 32267] [client 20.163.106.128:5834] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "aclTTqug2IHuyGgCTn9tnAAAAAM"]
[Mon Mar 30 00:29:03.265308 2026] [:error] [pid 23168:tid 23210] [client 20.163.106.128:5999] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "aclTT2P8p0yRL8ot_2_VIAAAAg0"]
[Mon Mar 30 00:29:03.581363 2026] [:error] [pid 32359:tid 32368] [client 20.163.106.128:5791] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "aclTTwMb8G3UzfQP3WhD-wAAAMc"]
[Mon Mar 30 00:29:03.897569 2026] [:error] [pid 23284:tid 23309] [client 20.163.106.128:5840] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aclTT4zBujdPHsq7wyQatgAAApc"]
[Mon Mar 30 00:29:04.219202 2026] [:error] [pid 23284:tid 23291] [client 20.163.106.128:6015] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aclTUIzBujdPHsq7wyQauAAAAoU"]
[Mon Mar 30 00:29:04.536078 2026] [:error] [pid 23284:tid 23289] [client 20.163.106.128:6071] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aclTUIzBujdPHsq7wyQauQAAAoM"]
[Mon Mar 30 00:29:04.851107 2026] [:error] [pid 32255:tid 32315] [client 20.163.106.128:5949] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aclTUGnfn-AtRoMbquw4ngAAAFg"]
[Mon Mar 30 00:29:05.165054 2026] [:error] [pid 32254:tid 32285] [client 20.163.106.128:5832] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aclTUaug2IHuyGgCTn9tngAAABU"]
[Mon Mar 30 00:29:06.479495 2026] [:error] [pid 8818:tid 8834] [client 20.163.106.128:5884] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aclTUiCDvotZNSF0FBoExAAAAUw"]
[Mon Mar 30 00:29:06.796051 2026] [:error] [pid 8818:tid 8843] [client 20.163.106.128:5926] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aclTUiCDvotZNSF0FBoExQAAAVU"]
[Mon Mar 30 00:29:07.112365 2026] [:error] [pid 32254:tid 32271] [client 20.163.106.128:5989] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aclTU6ug2IHuyGgCTn9tnwAAAAc"]
[Mon Mar 30 00:29:07.430078 2026] [:error] [pid 32257:tid 32325] [client 20.163.106.128:5913] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aclTUyE3TArOFrUtgWqWrAAAAIc"]
[Mon Mar 30 00:29:07.745680 2026] [:error] [pid 32254:tid 32269] [client 20.163.106.128:5976] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aclTU6ug2IHuyGgCTn9toQAAAAU"]
[Mon Mar 30 00:29:08.059735 2026] [:error] [pid 32255:tid 32298] [client 20.163.106.128:5859] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aclTVGnfn-AtRoMbquw4oQAAAEc"]
[Mon Mar 30 00:29:08.374313 2026] [:error] [pid 23284:tid 23292] [client 20.163.106.128:5942] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aclTVIzBujdPHsq7wyQa0gAAAoY"]
[Mon Mar 30 00:29:09.689160 2026] [:error] [pid 8818:tid 8839] [client 20.163.106.128:5825] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drhunthq.php"] [unique_id "aclTVSCDvotZNSF0FBoEyAAAAVE"]
[Mon Mar 30 00:29:10.061487 2026] [:error] [pid 23284:tid 23292] [client 20.163.106.128:5948] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drhunthq.php"] [unique_id "aclTVozBujdPHsq7wyQa3gAAAoY"]
[Mon Mar 30 00:29:10.384291 2026] [:error] [pid 23250:tid 23265] [client 20.163.106.128:5925] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drhunthq.php"] [unique_id "aclTVpxrpj-dQjy1cvojWwAAAk0"]
[Mon Mar 30 00:29:10.717637 2026] [:error] [pid 32255:tid 32292] [client 20.163.106.128:5894] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drhunthq.php"] [unique_id "aclTVmnfn-AtRoMbquw4qAAAAEE"]
[Mon Mar 30 00:29:11.035666 2026] [:error] [pid 32254:tid 32270] [client 20.163.106.128:6010] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/file.php"] [unique_id "aclTV6ug2IHuyGgCTn9tpQAAAAY"]
[Mon Mar 30 00:29:11.350352 2026] [:error] [pid 32255:tid 32301] [client 20.163.106.128:5869] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/file.php"] [unique_id "aclTV2nfn-AtRoMbquw4rAAAAEo"]
[Mon Mar 30 00:29:11.665994 2026] [:error] [pid 32255:tid 32311] [client 20.163.106.128:5764] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/file.php"] [unique_id "aclTV2nfn-AtRoMbquw4sAAAAFQ"]
[Mon Mar 30 00:29:11.987176 2026] [:error] [pid 8818:tid 8842] [client 20.163.106.128:5771] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/file.php"] [unique_id "aclTVyCDvotZNSF0FBoEyQAAAVQ"]
[Mon Mar 30 00:29:12.300583 2026] [:error] [pid 23167:tid 23176] [client 20.163.106.128:5932] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxw.php"] [unique_id "aclTWBIAHJCFaHff3_frcwAAAcY"]
[Mon Mar 30 00:29:12.616628 2026] [:error] [pid 32255:tid 32293] [client 20.163.106.128:5768] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxw.php"] [unique_id "aclTWGnfn-AtRoMbquw4uQAAAEI"]
[Mon Mar 30 00:29:12.950394 2026] [:error] [pid 8818:tid 8827] [client 20.163.106.128:5843] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxw.php"] [unique_id "aclTWCCDvotZNSF0FBoEygAAAUU"]
[Mon Mar 30 00:29:13.266015 2026] [:error] [pid 32257:tid 32335] [client 20.163.106.128:5868] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxw.php"] [unique_id "aclTWSE3TArOFrUtgWqWuAAAAJE"]
[Mon Mar 30 00:29:13.594113 2026] [:error] [pid 32257:tid 32327] [client 20.163.106.128:5842] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aclTWSE3TArOFrUtgWqWvAAAAIk"]
[Mon Mar 30 00:29:13.913023 2026] [:error] [pid 23284:tid 23305] [client 20.163.106.128:5920] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aclTWYzBujdPHsq7wyQa5gAAApM"]
[Mon Mar 30 00:29:14.315038 2026] [:error] [pid 32359:tid 32372] [client 20.163.106.128:5862] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aclTWgMb8G3UzfQP3WhD_AAAAMs"]
[Mon Mar 30 00:29:14.634581 2026] [:error] [pid 23167:tid 23172] [client 20.163.106.128:5827] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aclTWhIAHJCFaHff3_frdAAAAcI"]
[Mon Mar 30 00:29:14.948809 2026] [:error] [pid 23284:tid 23290] [client 20.163.106.128:5916] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aclTWozBujdPHsq7wyQa6QAAAoQ"]
[Mon Mar 30 00:29:15.270053 2026] [:error] [pid 23250:tid 23258] [client 20.163.106.128:5891] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aclTW5xrpj-dQjy1cvojYQAAAkY"]
[Mon Mar 30 00:29:15.583573 2026] [:error] [pid 23167:tid 23191] [client 20.163.106.128:5904] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aclTWxIAHJCFaHff3_frdgAAAdU"]
[Mon Mar 30 00:29:15.899352 2026] [:error] [pid 23137:tid 23144] [client 20.163.106.128:5946] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aclTWxaWQa7LdZ_qGFYVCwAAAYU"]
[Mon Mar 30 00:29:16.213100 2026] [:error] [pid 32359:tid 32371] [client 20.163.106.128:5998] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lm15.php"] [unique_id "aclTXAMb8G3UzfQP3WhD_wAAAMo"]
[Mon Mar 30 00:29:16.527249 2026] [:error] [pid 23167:tid 23187] [client 20.163.106.128:5997] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lm15.php"] [unique_id "aclTXBIAHJCFaHff3_freAAAAdE"]
[Mon Mar 30 00:29:16.850542 2026] [:error] [pid 23284:tid 23286] [client 20.163.106.128:5776] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lm15.php"] [unique_id "aclTXIzBujdPHsq7wyQa9wAAAoA"]
[Mon Mar 30 00:29:17.167067 2026] [:error] [pid 23284:tid 23289] [client 20.163.106.128:5824] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lm15.php"] [unique_id "aclTXYzBujdPHsq7wyQa-gAAAoM"]
[Mon Mar 30 00:29:17.480330 2026] [:error] [pid 23284:tid 23302] [client 20.163.106.128:5830] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/green.php"] [unique_id "aclTXYzBujdPHsq7wyQa_gAAApA"]
[Mon Mar 30 00:29:17.806527 2026] [:error] [pid 23284:tid 23298] [client 20.163.106.128:6042] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/green.php"] [unique_id "aclTXYzBujdPHsq7wyQbAgAAAow"]
[Mon Mar 30 00:29:18.119431 2026] [:error] [pid 23284:tid 23296] [client 20.163.106.128:5716] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/green.php"] [unique_id "aclTXozBujdPHsq7wyQbCgAAAoo"]
[Mon Mar 30 00:29:18.437849 2026] [:error] [pid 32257:tid 32321] [client 20.163.106.128:5864] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/green.php"] [unique_id "aclTXiE3TArOFrUtgWqWxQAAAIM"]
[Mon Mar 30 00:29:19.938354 2026] [:error] [pid 23168:tid 23218] [client 20.163.106.128:5908] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "aclTX2P8p0yRL8ot_2_VMAAAAhU"]
[Mon Mar 30 00:29:20.270272 2026] [:error] [pid 32257:tid 32341] [client 20.163.106.128:5863] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "aclTYCE3TArOFrUtgWqWzwAAAJc"]
[Mon Mar 30 00:29:20.585053 2026] [:error] [pid 32257:tid 32334] [client 20.163.106.128:5844] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "aclTYCE3TArOFrUtgWqW0QAAAJA"]
[Mon Mar 30 00:29:20.902815 2026] [:error] [pid 23250:tid 23268] [client 20.163.106.128:5875] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "aclTYJxrpj-dQjy1cvojYwAAAlA"]
[Mon Mar 30 00:29:22.223272 2026] [:error] [pid 32257:tid 32318] [client 20.163.106.128:5851] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aclTYiE3TArOFrUtgWqW2gAAAIA"]
[Mon Mar 30 00:29:22.536659 2026] [:error] [pid 23250:tid 23272] [client 20.163.106.128:5841] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aclTYpxrpj-dQjy1cvojZQAAAlQ"]
[Mon Mar 30 00:29:22.850412 2026] [:error] [pid 32257:tid 32325] [client 20.163.106.128:5870] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aclTYiE3TArOFrUtgWqW3wAAAIc"]
[Mon Mar 30 00:29:23.649202 2026] [:error] [pid 32257:tid 32341] [client 20.163.106.128:5915] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aclTYyE3TArOFrUtgWqW4QAAAJc"]
[Mon Mar 30 00:29:23.973816 2026] [:error] [pid 23167:tid 23189] [client 20.163.106.128:5852] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aclTYxIAHJCFaHff3_frfQAAAdM"]
[Mon Mar 30 00:29:24.737669 2026] [:error] [pid 32257:tid 32321] [client 20.163.106.128:5857] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aclTZCE3TArOFrUtgWqW5QAAAIM"]
[Mon Mar 30 00:29:25.051704 2026] [:error] [pid 32254:tid 32273] [client 20.163.106.128:5839] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aclTZaug2IHuyGgCTn9tqQAAAAk"]
[Mon Mar 30 00:29:26.376117 2026] [:error] [pid 23167:tid 23178] [client 20.163.106.128:6000] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aclTZhIAHJCFaHff3_frfgAAAcg"]
[Mon Mar 30 00:29:26.708756 2026] [:error] [pid 23284:tid 23290] [client 20.163.106.128:5804] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aclTZozBujdPHsq7wyQbGgAAAoQ"]
[Mon Mar 30 00:29:27.025719 2026] [:error] [pid 23137:tid 23155] [client 20.163.106.128:5901] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aclTZxaWQa7LdZ_qGFYVFQAAAZA"]
[Mon Mar 30 00:29:27.406305 2026] [:error] [pid 23137:tid 23145] [client 20.163.106.128:5881] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aclTZxaWQa7LdZ_qGFYVGAAAAYY"]
[Mon Mar 30 00:29:27.722294 2026] [:error] [pid 23284:tid 23304] [client 20.163.106.128:5831] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aclTZ4zBujdPHsq7wyQbGwAAApI"]
[Mon Mar 30 00:29:28.040623 2026] [:error] [pid 23137:tid 23157] [client 20.163.106.128:6014] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "aclTaBaWQa7LdZ_qGFYVGgAAAZI"]
[Mon Mar 30 00:29:28.363899 2026] [:error] [pid 32359:tid 32377] [client 20.163.106.128:5838] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "aclTaAMb8G3UzfQP3WhEAQAAANA"]
[Mon Mar 30 00:29:28.682089 2026] [:error] [pid 23167:tid 23194] [client 20.163.106.128:5896] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "aclTaBIAHJCFaHff3_frgQAAAdg"]
[Mon Mar 30 00:29:29.021099 2026] [:error] [pid 32257:tid 32327] [client 20.163.106.128:5873] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "aclTaSE3TArOFrUtgWqW7wAAAIk"]
[Mon Mar 30 00:29:29.335191 2026] [:error] [pid 23167:tid 23190] [client 20.163.106.128:5871] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/clss.php"] [unique_id "aclTaRIAHJCFaHff3_frgwAAAdQ"]
[Mon Mar 30 00:29:29.651281 2026] [:error] [pid 23167:tid 23173] [client 20.163.106.128:6007] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/clss.php"] [unique_id "aclTaRIAHJCFaHff3_frhQAAAcM"]
[Mon Mar 30 00:29:29.983757 2026] [:error] [pid 23167:tid 23175] [client 20.163.106.128:5902] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/clss.php"] [unique_id "aclTaRIAHJCFaHff3_friAAAAcU"]
[Mon Mar 30 00:29:30.300604 2026] [:error] [pid 23168:tid 23207] [client 20.163.106.128:6011] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/clss.php"] [unique_id "aclTamP8p0yRL8ot_2_VOQAAAgo"]
[Mon Mar 30 00:29:30.679934 2026] [:error] [pid 23167:tid 23181] [client 20.163.106.128:5856] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "aclTahIAHJCFaHff3_frjAAAAcs"]
[Mon Mar 30 00:29:30.995282 2026] [:error] [pid 23167:tid 23188] [client 20.163.106.128:6025] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "aclTahIAHJCFaHff3_frjwAAAdI"]
[Mon Mar 30 00:29:31.317777 2026] [:error] [pid 23168:tid 23213] [client 20.163.106.128:5803] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "aclTa2P8p0yRL8ot_2_VPwAAAhA"]
[Mon Mar 30 00:29:31.639690 2026] [:error] [pid 32359:tid 32363] [client 20.163.106.128:5775] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "aclTawMb8G3UzfQP3WhEBAAAAMI"]
[Mon Mar 30 00:29:31.954445 2026] [:error] [pid 23284:tid 23297] [client 20.163.106.128:5929] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aclTa4zBujdPHsq7wyQbIwAAAos"]
[Mon Mar 30 00:29:32.282550 2026] [:error] [pid 23168:tid 23197] [client 20.163.106.128:5696] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aclTbGP8p0yRL8ot_2_VRAAAAgA"]
[Mon Mar 30 00:29:32.596143 2026] [:error] [pid 23250:tid 23270] [client 20.163.106.128:5855] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aclTbJxrpj-dQjy1cvojawAAAlI"]
[Mon Mar 30 00:29:32.915382 2026] [:error] [pid 23250:tid 23264] [client 20.163.106.128:5921] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aclTbJxrpj-dQjy1cvojbAAAAkw"]
[Mon Mar 30 00:29:33.231488 2026] [:error] [pid 23250:tid 23276] [client 20.163.106.128:5770] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "aclTbZxrpj-dQjy1cvojbgAAAlg"]
[Mon Mar 30 00:29:33.550180 2026] [:error] [pid 23167:tid 23180] [client 20.163.106.128:5789] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "aclTbRIAHJCFaHff3_frlAAAAco"]
[Mon Mar 30 00:29:33.868482 2026] [:error] [pid 23167:tid 23190] [client 20.163.106.128:5821] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "aclTbRIAHJCFaHff3_frlwAAAdQ"]
[Mon Mar 30 00:29:34.181405 2026] [:error] [pid 23284:tid 23294] [client 20.163.106.128:5835] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "aclTbozBujdPHsq7wyQbKQAAAog"]
[Mon Mar 30 00:29:34.496545 2026] [:error] [pid 23250:tid 23256] [client 20.163.106.128:5848] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "aclTbpxrpj-dQjy1cvojcAAAAkQ"]
[Mon Mar 30 00:29:34.808543 2026] [:error] [pid 23284:tid 23289] [client 20.163.106.128:6017] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "aclTbozBujdPHsq7wyQbLgAAAoM"]
[Mon Mar 30 00:29:35.202405 2026] [:error] [pid 23250:tid 23271] [client 20.163.106.128:5781] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "aclTb5xrpj-dQjy1cvojdwAAAlM"]
[Mon Mar 30 00:29:35.520086 2026] [:error] [pid 23250:tid 23252] [client 20.163.106.128:5907] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "aclTb5xrpj-dQjy1cvojfwAAAkA"]
[Mon Mar 30 00:29:35.839417 2026] [:error] [pid 23168:tid 23200] [client 20.163.106.128:5762] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "aclTb2P8p0yRL8ot_2_VRwAAAgM"]
[Mon Mar 30 00:29:36.156210 2026] [:error] [pid 32359:tid 32378] [client 20.163.106.128:5937] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "aclTcAMb8G3UzfQP3WhEBgAAANE"]
[Mon Mar 30 00:29:36.473957 2026] [:error] [pid 32255:tid 32311] [client 20.163.106.128:5849] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "aclTcGnfn-AtRoMbquw4zgAAAFQ"]
[Mon Mar 30 00:29:36.787328 2026] [:error] [pid 32255:tid 32303] [client 20.163.106.128:5867] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "aclTcGnfn-AtRoMbquw4zwAAAEw"]
[Mon Mar 30 00:29:37.104748 2026] [:error] [pid 23168:tid 23218] [client 20.163.106.128:5992] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "aclTcWP8p0yRL8ot_2_VSAAAAhU"]
[Mon Mar 30 00:29:37.419447 2026] [:error] [pid 23137:tid 23157] [client 20.163.106.128:5879] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "aclTcRaWQa7LdZ_qGFYVKAAAAZI"]
[Mon Mar 30 00:29:37.734767 2026] [:error] [pid 23137:tid 23150] [client 20.163.106.128:5833] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "aclTcRaWQa7LdZ_qGFYVKgAAAYs"]
[Mon Mar 30 00:29:38.061437 2026] [:error] [pid 32257:tid 32322] [client 20.163.106.128:5778] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "aclTciE3TArOFrUtgWqW9wAAAIQ"]
[Mon Mar 30 00:29:38.457874 2026] [:error] [pid 32257:tid 32325] [client 20.163.106.128:6072] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aclTciE3TArOFrUtgWqW-AAAAIc"]
[Mon Mar 30 00:29:38.771988 2026] [:error] [pid 32257:tid 32319] [client 20.163.106.128:5703] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aclTciE3TArOFrUtgWqW-gAAAIE"]
[Mon Mar 30 00:29:39.089519 2026] [:error] [pid 32359:tid 32362] [client 20.163.106.128:5940] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aclTcwMb8G3UzfQP3WhECwAAAME"]
[Mon Mar 30 00:29:39.417731 2026] [:error] [pid 23168:tid 23212] [client 20.163.106.128:5795] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aclTc2P8p0yRL8ot_2_VSgAAAg8"]
[Mon Mar 30 00:29:39.733565 2026] [:error] [pid 23168:tid 23220] [client 20.163.106.128:5865] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aclTc2P8p0yRL8ot_2_VSwAAAhc"]
[Mon Mar 30 00:29:40.048040 2026] [:error] [pid 23167:tid 23183] [client 20.163.106.128:5878] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aclTdBIAHJCFaHff3_frpgAAAc0"]
[Mon Mar 30 00:29:40.365064 2026] [:error] [pid 8818:tid 8829] [client 20.163.106.128:5786] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aclTdCCDvotZNSF0FBoE0wAAAUc"]
[Mon Mar 30 00:29:40.678555 2026] [:error] [pid 23284:tid 23290] [client 20.163.106.128:5760] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aclTdIzBujdPHsq7wyQbMwAAAoQ"]
[Mon Mar 30 00:29:40.996385 2026] [:error] [pid 23284:tid 23303] [client 20.163.106.128:5819] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aclTdIzBujdPHsq7wyQbNAAAApE"]
[Mon Mar 30 00:29:41.310614 2026] [:error] [pid 23284:tid 23301] [client 20.163.106.128:5783] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aclTdYzBujdPHsq7wyQbNwAAAo8"]
[Mon Mar 30 00:29:41.631814 2026] [:error] [pid 23284:tid 23307] [client 20.163.106.128:5847] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aclTdYzBujdPHsq7wyQbOQAAApU"]
[Mon Mar 30 00:29:41.944251 2026] [:error] [pid 23284:tid 23294] [client 20.163.106.128:5713] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aclTdYzBujdPHsq7wyQbPQAAAog"]
[Mon Mar 30 00:29:42.260097 2026] [:error] [pid 23284:tid 23296] [client 20.163.106.128:5766] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws60.php"] [unique_id "aclTdozBujdPHsq7wyQbQAAAAoo"]
[Mon Mar 30 00:29:42.572684 2026] [:error] [pid 32257:tid 32321] [client 20.163.106.128:5828] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws60.php"] [unique_id "aclTdiE3TArOFrUtgWqXAQAAAIM"]
[Mon Mar 30 00:29:42.885631 2026] [:error] [pid 23284:tid 23307] [client 20.163.106.128:5793] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws60.php"] [unique_id "aclTdozBujdPHsq7wyQbRwAAApU"]
[Mon Mar 30 00:29:43.206231 2026] [:error] [pid 23284:tid 23295] [client 20.163.106.128:5939] File does not exist: /usr/local/apache/htdocs/suspended-page/ws60.php
[Mon Mar 30 00:29:43.387404 2026] [:error] [pid 23284:tid 23305] [client 20.163.106.128:5939] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Mon Mar 30 00:29:43.547756 2026] [:error] [pid 23284:tid 23298] [client 20.163.106.128:5939] File does not exist: /usr/local/apache/htdocs/suspended-page/buc.php
[Mon Mar 30 00:29:43.806458 2026] [:error] [pid 23284:tid 23296] [client 20.163.106.128:5939] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Mon Mar 30 00:29:43.967659 2026] [:error] [pid 23284:tid 23308] [client 20.163.106.128:5939] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Mon Mar 30 00:29:44.148883 2026] [:error] [pid 23284:tid 23299] [client 20.163.106.128:5939] File does not exist: /usr/local/apache/htdocs/suspended-page/okxh.php
[Mon Mar 30 00:29:44.308684 2026] [:error] [pid 23284:tid 23290] [client 20.163.106.128:5939] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Mon Mar 30 00:29:44.483289 2026] [:error] [pid 23284:tid 23300] [client 20.163.106.128:5939] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-104.php
[Mon Mar 30 00:29:44.649510 2026] [:error] [pid 23284:tid 23303] [client 20.163.106.128:5939] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Mon Mar 30 00:29:44.910227 2026] [:error] [pid 23284:tid 23304] [client 20.163.106.128:5939] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Mon Mar 30 00:29:45.070205 2026] [:error] [pid 23284:tid 23292] [client 20.163.106.128:5939] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Mon Mar 30 00:29:45.239952 2026] [:error] [pid 23284:tid 23288] [client 20.163.106.128:5939] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "aclTeYzBujdPHsq7wyQbWwAAAoI"]
[Mon Mar 30 00:29:45.569144 2026] [:error] [pid 32255:tid 32295] [client 20.163.106.128:5697] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "aclTeWnfn-AtRoMbquw42wAAAEQ"]
[Mon Mar 30 00:29:45.905973 2026] [:error] [pid 32257:tid 32335] [client 20.163.106.128:5798] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "aclTeSE3TArOFrUtgWqXBwAAAJE"]
[Mon Mar 30 00:29:46.249778 2026] [:error] [pid 32257:tid 32338] [client 20.163.106.128:5802] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "aclTeiE3TArOFrUtgWqXCgAAAJQ"]
[Mon Mar 30 00:29:46.619047 2026] [:error] [pid 8818:tid 8826] [client 20.163.106.128:5876] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "aclTeiCDvotZNSF0FBoE1gAAAUQ"]
[Mon Mar 30 00:29:46.979215 2026] [:error] [pid 32257:tid 32320] [client 20.163.106.128:5941] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "aclTeiE3TArOFrUtgWqXDQAAAII"]
[Mon Mar 30 00:29:47.300472 2026] [:error] [pid 32257:tid 32328] [client 20.163.106.128:5708] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "aclTeyE3TArOFrUtgWqXDgAAAIo"]
[Mon Mar 30 00:29:47.618155 2026] [:error] [pid 23167:tid 23193] [client 20.163.106.128:5797] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "aclTexIAHJCFaHff3_frpwAAAdc"]
[Mon Mar 30 00:29:47.932519 2026] [:error] [pid 32255:tid 32294] [client 20.163.106.128:5886] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "aclTe2nfn-AtRoMbquw44AAAAEM"]
[Mon Mar 30 00:29:48.246270 2026] [:error] [pid 32257:tid 32332] [client 20.163.106.128:5780] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "aclTfCE3TArOFrUtgWqXFAAAAI4"]
[Mon Mar 30 00:29:48.565499 2026] [:error] [pid 23137:tid 23162] [client 20.163.106.128:5924] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "aclTfBaWQa7LdZ_qGFYVMgAAAZc"]
[Mon Mar 30 00:29:48.878708 2026] [:error] [pid 23168:tid 23207] [client 20.163.106.128:5837] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "aclTfGP8p0yRL8ot_2_VUwAAAgo"]
[Mon Mar 30 00:29:49.198703 2026] [:error] [pid 32257:tid 32334] [client 20.163.106.128:5698] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "aclTfSE3TArOFrUtgWqXGwAAAJA"]
[Mon Mar 30 00:29:49.512749 2026] [:error] [pid 23168:tid 23203] [client 20.163.106.128:5745] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "aclTfWP8p0yRL8ot_2_VVQAAAgY"]
[Mon Mar 30 00:29:49.830077 2026] [:error] [pid 32257:tid 32336] [client 20.163.106.128:5787] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "aclTfSE3TArOFrUtgWqXHgAAAJI"]
[Mon Mar 30 00:29:50.144959 2026] [:error] [pid 32257:tid 32339] [client 20.163.106.128:5933] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "aclTfiE3TArOFrUtgWqXIAAAAJU"]
[Mon Mar 30 00:29:50.459810 2026] [:error] [pid 32257:tid 32341] [client 20.163.106.128:5800] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "aclTfiE3TArOFrUtgWqXIgAAAJc"]
[Mon Mar 30 00:29:50.776098 2026] [:error] [pid 32257:tid 32319] [client 20.163.106.128:5712] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "aclTfiE3TArOFrUtgWqXJAAAAIE"]
[Mon Mar 30 00:29:51.090407 2026] [:error] [pid 8818:tid 8836] [client 20.163.106.128:6143] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "aclTfyCDvotZNSF0FBoE2wAAAU4"]
[Mon Mar 30 00:29:51.406788 2026] [:error] [pid 32257:tid 32320] [client 20.163.106.128:5822] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "aclTfyE3TArOFrUtgWqXLgAAAII"]
[Mon Mar 30 00:29:51.721993 2026] [:error] [pid 23284:tid 23309] [client 20.163.106.128:5710] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aclTf4zBujdPHsq7wyQbZQAAApc"]
[Mon Mar 30 00:29:52.052694 2026] [:error] [pid 8818:tid 8840] [client 20.163.106.128:5799] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aclTgCCDvotZNSF0FBoE3gAAAVI"]
[Mon Mar 30 00:29:52.386176 2026] [:error] [pid 32255:tid 32295] [client 20.163.106.128:5736] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aclTgGnfn-AtRoMbquw45QAAAEQ"]
[Mon Mar 30 00:29:52.780810 2026] [:error] [pid 23284:tid 23308] [client 20.163.106.128:5753] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aclTgIzBujdPHsq7wyQbaQAAApY"]
[Mon Mar 30 00:29:53.099837 2026] [:error] [pid 23284:tid 23307] [client 20.163.106.128:5737] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws49.php"] [unique_id "aclTgYzBujdPHsq7wyQbbAAAApU"]
[Mon Mar 30 00:29:53.428332 2026] [:error] [pid 23284:tid 23304] [client 20.163.106.128:5796] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws49.php"] [unique_id "aclTgYzBujdPHsq7wyQbbwAAApI"]
[Mon Mar 30 00:29:53.742841 2026] [:error] [pid 23167:tid 23176] [client 20.163.106.128:5782] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws49.php"] [unique_id "aclTgRIAHJCFaHff3_frqQAAAcY"]
[Mon Mar 30 00:29:54.062006 2026] [:error] [pid 23167:tid 23189] [client 20.163.106.128:5874] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws49.php"] [unique_id "aclTghIAHJCFaHff3_frqgAAAdM"]
[Mon Mar 30 00:29:54.376406 2026] [:error] [pid 32255:tid 32312] [client 20.163.106.128:5727] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aclTgmnfn-AtRoMbquw45gAAAFU"]
[Mon Mar 30 00:29:54.703969 2026] [:error] [pid 23168:tid 23220] [client 20.163.106.128:5647] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aclTgmP8p0yRL8ot_2_VWAAAAhc"]
[Mon Mar 30 00:29:55.021641 2026] [:error] [pid 32255:tid 32308] [client 20.163.106.128:5726] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aclTg2nfn-AtRoMbquw45wAAAFE"]
[Mon Mar 30 00:29:55.335149 2026] [:error] [pid 8818:tid 8842] [client 20.163.106.128:5887] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aclTgyCDvotZNSF0FBoE3wAAAVQ"]
[Mon Mar 30 00:29:55.651416 2026] [:error] [pid 23284:tid 23291] [client 20.163.106.128:5854] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "aclTg4zBujdPHsq7wyQbeAAAAoU"]
[Mon Mar 30 00:29:55.975367 2026] [:error] [pid 23284:tid 23306] [client 20.163.106.128:5807] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "aclTg4zBujdPHsq7wyQbeQAAApQ"]
[Mon Mar 30 00:29:56.291710 2026] [:error] [pid 23284:tid 23304] [client 20.163.106.128:5701] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "aclThIzBujdPHsq7wyQbfAAAApI"]
[Mon Mar 30 00:29:56.607406 2026] [:error] [pid 23284:tid 23289] [client 20.163.106.128:5883] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "aclThIzBujdPHsq7wyQbfgAAAoM"]
[Mon Mar 30 00:29:56.922540 2026] [:error] [pid 8818:tid 8824] [client 20.163.106.128:5816] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vanda.php"] [unique_id "aclThCCDvotZNSF0FBoE4wAAAUI"]
[Mon Mar 30 00:29:57.260930 2026] [:error] [pid 32257:tid 32324] [client 20.163.106.128:5792] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vanda.php"] [unique_id "aclThSE3TArOFrUtgWqXQgAAAIY"]
[Mon Mar 30 00:29:57.575948 2026] [:error] [pid 32257:tid 32335] [client 20.163.106.128:5717] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vanda.php"] [unique_id "aclThSE3TArOFrUtgWqXRAAAAJE"]
[Mon Mar 30 00:29:57.889531 2026] [:error] [pid 32257:tid 32340] [client 20.163.106.128:5853] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vanda.php"] [unique_id "aclThSE3TArOFrUtgWqXSQAAAJY"]
[Mon Mar 30 00:29:58.300750 2026] [:error] [pid 23250:tid 23256] [client 20.163.106.128:5705] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "aclThpxrpj-dQjy1cvojxgAAAkQ"]
[Mon Mar 30 00:29:58.615324 2026] [:error] [pid 8818:tid 8838] [client 20.163.106.128:5743] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "aclThiCDvotZNSF0FBoE5QAAAVA"]
[Mon Mar 30 00:29:58.933669 2026] [:error] [pid 8818:tid 8844] [client 20.163.106.128:5860] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "aclThiCDvotZNSF0FBoE5wAAAVY"]
[Mon Mar 30 00:29:59.253154 2026] [:error] [pid 23168:tid 23221] [client 20.163.106.128:6057] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "aclTh2P8p0yRL8ot_2_VWgAAAhg"]
[Mon Mar 30 00:29:59.573011 2026] [:error] [pid 23168:tid 23217] [client 20.163.106.128:5761] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aclTh2P8p0yRL8ot_2_VXQAAAhQ"]
[Mon Mar 30 00:29:59.885743 2026] [:error] [pid 23284:tid 23306] [client 20.163.106.128:5773] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aclTh4zBujdPHsq7wyQbhAAAApQ"]
[Mon Mar 30 00:30:00.210703 2026] [:error] [pid 23284:tid 23292] [client 20.163.106.128:5944] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aclTiIzBujdPHsq7wyQbhQAAAoY"]
[Mon Mar 30 00:30:00.523754 2026] [:error] [pid 32359:tid 32378] [client 20.163.106.128:5788] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aclTiAMb8G3UzfQP3WhEEgAAANE"]
[Mon Mar 30 00:30:00.838072 2026] [:error] [pid 23284:tid 23301] [client 20.163.106.128:5877] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "aclTiIzBujdPHsq7wyQbhgAAAo8"]
[Mon Mar 30 00:30:01.153911 2026] [:error] [pid 23137:tid 23144] [client 20.163.106.128:5829] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "aclTiRaWQa7LdZ_qGFYVNAAAAYU"]
[Mon Mar 30 00:30:01.468216 2026] [:error] [pid 32255:tid 32299] [client 20.163.106.128:5861] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "aclTiWnfn-AtRoMbquw48wAAAEg"]
[Mon Mar 30 00:30:01.791520 2026] [:error] [pid 8818:tid 8829] [client 20.163.106.128:5951] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "aclTiSCDvotZNSF0FBoE7AAAAUc"]
[Mon Mar 30 00:30:02.106789 2026] [:error] [pid 23250:tid 23259] [client 20.163.106.128:5722] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "aclTipxrpj-dQjy1cvojyQAAAkc"]
[Mon Mar 30 00:30:02.432832 2026] [:error] [pid 32254:tid 32266] [client 20.163.106.128:5699] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "aclTiqug2IHuyGgCTn9tvwAAAAI"]
[Mon Mar 30 00:30:02.746114 2026] [:error] [pid 23250:tid 23266] [client 20.163.106.128:5785] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "aclTipxrpj-dQjy1cvojywAAAk4"]
[Mon Mar 30 00:30:03.060201 2026] [:error] [pid 32255:tid 32305] [client 20.163.106.128:5872] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "aclTi2nfn-AtRoMbquw49QAAAE4"]
[Mon Mar 30 00:30:03.392640 2026] [:error] [pid 23250:tid 23258] [client 20.163.106.128:5790] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aclTi5xrpj-dQjy1cvojzgAAAkY"]
[Mon Mar 30 00:30:03.709417 2026] [:error] [pid 32255:tid 32301] [client 20.163.106.128:5812] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aclTi2nfn-AtRoMbquw49gAAAEo"]
[Mon Mar 30 00:30:04.027802 2026] [:error] [pid 32255:tid 32300] [client 20.163.106.128:5759] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aclTjGnfn-AtRoMbquw4-AAAAEk"]
[Mon Mar 30 00:30:04.348999 2026] [:error] [pid 32255:tid 32309] [client 20.163.106.128:5777] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aclTjGnfn-AtRoMbquw4-wAAAFI"]
[Mon Mar 30 00:30:04.663945 2026] [:error] [pid 8818:tid 8841] [client 20.163.106.128:5784] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa21.php"] [unique_id "aclTjCCDvotZNSF0FBoE7wAAAVM"]
[Mon Mar 30 00:30:04.982873 2026] [:error] [pid 8818:tid 8830] [client 20.163.106.128:5927] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa21.php"] [unique_id "aclTjCCDvotZNSF0FBoE8QAAAUg"]
[Mon Mar 30 00:30:05.296589 2026] [:error] [pid 8818:tid 8822] [client 20.163.106.128:5730] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa21.php"] [unique_id "aclTjSCDvotZNSF0FBoE8wAAAUA"]
[Mon Mar 30 00:30:05.610496 2026] [:error] [pid 8818:tid 8833] [client 20.163.106.128:5715] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa21.php"] [unique_id "aclTjSCDvotZNSF0FBoE9gAAAUs"]
[Mon Mar 30 00:30:06.011999 2026] [:error] [pid 32255:tid 32299] [client 20.163.106.128:5732] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aclTjmnfn-AtRoMbquw5BAAAAEg"]
[Mon Mar 30 00:30:06.324891 2026] [:error] [pid 23168:tid 23219] [client 20.163.106.128:5707] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aclTjmP8p0yRL8ot_2_VYgAAAhY"]
[Mon Mar 30 00:30:06.638748 2026] [:error] [pid 32254:tid 32278] [client 20.163.106.128:5810] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aclTjqug2IHuyGgCTn9twAAAAA4"]
[Mon Mar 30 00:30:06.955178 2026] [:error] [pid 32257:tid 32329] [client 20.163.106.128:5801] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aclTjiE3TArOFrUtgWqXWAAAAIs"]
[Mon Mar 30 00:30:07.271711 2026] [:error] [pid 32254:tid 32286] [client 20.163.106.128:5641] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aclTj6ug2IHuyGgCTn9twgAAABY"]
[Mon Mar 30 00:30:07.584828 2026] [:error] [pid 23284:tid 23299] [client 20.163.106.128:5742] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aclTj4zBujdPHsq7wyQbiQAAAo0"]
[Mon Mar 30 00:30:07.908603 2026] [:error] [pid 23137:tid 23141] [client 20.163.106.128:5885] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aclTjxaWQa7LdZ_qGFYVNwAAAYI"]
[Mon Mar 30 00:30:08.224351 2026] [:error] [pid 32257:tid 32339] [client 20.163.106.128:5763] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aclTkCE3TArOFrUtgWqXXAAAAJU"]
[Mon Mar 30 00:30:09.546956 2026] [:error] [pid 32255:tid 32313] [client 20.163.106.128:5702] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bootstrap.php"] [unique_id "aclTkWnfn-AtRoMbquw5DQAAAFY"]
[Mon Mar 30 00:30:09.879474 2026] [:error] [pid 8818:tid 8827] [client 20.163.106.128:5741] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bootstrap.php"] [unique_id "aclTkSCDvotZNSF0FBoE-QAAAUU"]
[Mon Mar 30 00:30:11.203977 2026] [:error] [pid 32255:tid 32312] [client 20.163.106.128:5569] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bootstrap.php"] [unique_id "aclTk2nfn-AtRoMbquw5EQAAAFU"]
[Mon Mar 30 00:30:11.520684 2026] [:error] [pid 32255:tid 32293] [client 20.163.106.128:5738] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bootstrap.php"] [unique_id "aclTk2nfn-AtRoMbquw5EgAAAEI"]
[Mon Mar 30 00:30:11.833789 2026] [:error] [pid 32255:tid 32314] [client 20.163.106.128:5723] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/wp-blog.php"] [unique_id "aclTk2nfn-AtRoMbquw5GAAAAFc"]
[Mon Mar 30 00:30:12.167249 2026] [:error] [pid 32257:tid 32333] [client 20.163.106.128:5809] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/wp-blog.php"] [unique_id "aclTlCE3TArOFrUtgWqXYgAAAI8"]
[Mon Mar 30 00:30:12.480895 2026] [:error] [pid 32255:tid 32298] [client 20.163.106.128:5817] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/wp-blog.php"] [unique_id "aclTlGnfn-AtRoMbquw5GwAAAEc"]
[Mon Mar 30 00:30:12.794984 2026] [:error] [pid 32257:tid 32337] [client 20.163.106.128:5765] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/wp-blog.php"] [unique_id "aclTlCE3TArOFrUtgWqXZgAAAJM"]
[Mon Mar 30 00:30:13.107436 2026] [:error] [pid 32255:tid 32293] [client 20.163.106.128:5774] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "aclTlWnfn-AtRoMbquw5IAAAAEI"]
[Mon Mar 30 00:30:13.425619 2026] [:error] [pid 23284:tid 23298] [client 20.163.106.128:5709] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "aclTlYzBujdPHsq7wyQbigAAAow"]
[Mon Mar 30 00:30:13.742280 2026] [:error] [pid 23284:tid 23287] [client 20.163.106.128:5728] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "aclTlYzBujdPHsq7wyQbiwAAAoE"]
[Mon Mar 30 00:30:14.055179 2026] [:error] [pid 23168:tid 23207] [client 20.163.106.128:5714] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "aclTlmP8p0yRL8ot_2_VagAAAgo"]
[Mon Mar 30 00:30:14.368119 2026] [:error] [pid 23250:tid 23266] [client 20.163.106.128:5739] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/csv.php"] [unique_id "aclTlpxrpj-dQjy1cvoj1gAAAk4"]
[Mon Mar 30 00:30:14.740357 2026] [:error] [pid 23167:tid 23172] [client 20.163.106.128:5936] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/csv.php"] [unique_id "aclTlhIAHJCFaHff3_fruAAAAcI"]
[Mon Mar 30 00:30:15.060420 2026] [:error] [pid 23167:tid 23187] [client 20.163.106.128:5634] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/csv.php"] [unique_id "aclTlxIAHJCFaHff3_fruQAAAdE"]
[Mon Mar 30 00:30:15.374839 2026] [:error] [pid 32257:tid 32328] [client 20.163.106.128:5767] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/csv.php"] [unique_id "aclTlyE3TArOFrUtgWqXawAAAIo"]
[Mon Mar 30 00:30:15.697186 2026] [:error] [pid 32257:tid 32335] [client 20.163.106.128:5662] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/varb.php"] [unique_id "aclTlyE3TArOFrUtgWqXbwAAAJE"]
[Mon Mar 30 00:30:16.011664 2026] [:error] [pid 32257:tid 32318] [client 20.163.106.128:5649] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/varb.php"] [unique_id "aclTmCE3TArOFrUtgWqXcQAAAIA"]
[Mon Mar 30 00:30:16.325387 2026] [:error] [pid 23167:tid 23186] [client 20.163.106.128:5651] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/varb.php"] [unique_id "aclTmBIAHJCFaHff3_fruwAAAdA"]
[Mon Mar 30 00:30:16.642846 2026] [:error] [pid 23168:tid 23219] [client 20.163.106.128:5729] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/varb.php"] [unique_id "aclTmGP8p0yRL8ot_2_VbQAAAhY"]
[Mon Mar 30 00:30:16.963274 2026] [:error] [pid 8818:tid 8827] [client 20.163.106.128:5636] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "aclTmCCDvotZNSF0FBoFAQAAAUU"]
[Mon Mar 30 00:30:17.299339 2026] [:error] [pid 23168:tid 23210] [client 20.163.106.128:5751] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "aclTmWP8p0yRL8ot_2_VbwAAAg0"]
[Mon Mar 30 00:30:17.627389 2026] [:error] [pid 32257:tid 32324] [client 20.163.106.128:5632] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "aclTmSE3TArOFrUtgWqXdwAAAIY"]
[Mon Mar 30 00:30:17.941934 2026] [:error] [pid 32257:tid 32342] [client 20.163.106.128:5808] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "aclTmSE3TArOFrUtgWqXeQAAAJg"]
[Mon Mar 30 00:30:18.261227 2026] [:error] [pid 32257:tid 32332] [client 20.163.106.128:5721] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aclTmiE3TArOFrUtgWqXfAAAAI4"]
[Mon Mar 30 00:30:18.576506 2026] [:error] [pid 23168:tid 23215] [client 20.163.106.128:5733] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aclTmmP8p0yRL8ot_2_VcgAAAhI"]
[Mon Mar 30 00:30:18.890618 2026] [:error] [pid 32257:tid 32327] [client 20.163.106.128:5642] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aclTmiE3TArOFrUtgWqXgQAAAIk"]
[Mon Mar 30 00:30:19.205184 2026] [:error] [pid 23167:tid 23193] [client 20.163.106.128:5736] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aclTmxIAHJCFaHff3_frvwAAAdc"]
[Mon Mar 30 00:30:19.520372 2026] [:error] [pid 32257:tid 32332] [client 20.163.106.128:5643] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aclTmyE3TArOFrUtgWqXiAAAAI4"]
[Mon Mar 30 00:30:19.840759 2026] [:error] [pid 8818:tid 8829] [client 20.163.106.128:5754] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aclTmyCDvotZNSF0FBoFAwAAAUc"]
[Mon Mar 30 00:30:20.158574 2026] [:error] [pid 23168:tid 23201] [client 20.163.106.128:5806] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aclTnGP8p0yRL8ot_2_VdQAAAgQ"]
[Mon Mar 30 00:30:20.474307 2026] [:error] [pid 23250:tid 23263] [client 20.163.106.128:5650] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aclTnJxrpj-dQjy1cvoj3AAAAks"]
[Mon Mar 30 00:30:20.796091 2026] [:error] [pid 23284:tid 23302] [client 20.163.106.128:5583] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "aclTnIzBujdPHsq7wyQbkQAAApA"]
[Mon Mar 30 00:30:21.111898 2026] [:error] [pid 23168:tid 23218] [client 20.163.106.128:5668] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "aclTnWP8p0yRL8ot_2_VdwAAAhU"]
[Mon Mar 30 00:30:21.427005 2026] [:error] [pid 8818:tid 8826] [client 20.163.106.128:5748] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "aclTnSCDvotZNSF0FBoFBgAAAUQ"]
[Mon Mar 30 00:30:21.739642 2026] [:error] [pid 8818:tid 8841] [client 20.163.106.128:5938] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "aclTnSCDvotZNSF0FBoFCAAAAVM"]
[Mon Mar 30 00:30:22.054428 2026] [:error] [pid 23168:tid 23219] [client 20.163.106.128:5594] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "aclTnmP8p0yRL8ot_2_VegAAAhY"]
[Mon Mar 30 00:30:22.371653 2026] [:error] [pid 23137:tid 23145] [client 20.163.106.128:5769] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "aclTnhaWQa7LdZ_qGFYVQQAAAYY"]
[Mon Mar 30 00:30:22.686650 2026] [:error] [pid 23168:tid 23209] [client 20.163.106.128:5794] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "aclTnmP8p0yRL8ot_2_VewAAAgw"]
[Mon Mar 30 00:30:23.003141 2026] [:error] [pid 23168:tid 23210] [client 20.163.106.128:5750] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "aclTn2P8p0yRL8ot_2_VfAAAAg0"]
[Mon Mar 30 00:30:23.321637 2026] [:error] [pid 23168:tid 23202] [client 20.163.106.128:5718] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "aclTn2P8p0yRL8ot_2_VfQAAAgU"]
[Mon Mar 30 00:30:23.649670 2026] [:error] [pid 23284:tid 23286] [client 20.163.106.128:5704] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "aclTn4zBujdPHsq7wyQblAAAAoA"]
[Mon Mar 30 00:30:23.980523 2026] [:error] [pid 32359:tid 32369] [client 20.163.106.128:5845] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "aclTnwMb8G3UzfQP3WhEGAAAAMg"]
[Mon Mar 30 00:30:24.292496 2026] [:error] [pid 8818:tid 8825] [client 20.163.106.128:5813] [client 20.163.106.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "aclToCCDvotZNSF0FBoFCgAAAUM"]
[Mon Mar 30 12:04:19.828693 2026] [:error] [pid 35248:tid 35266] [client 20.78.135.104:7582] [client 20.78.135.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xmr.php"] [unique_id "acn2Q73igMCgAQPFS_8hngAAAEw"]
[Mon Mar 30 12:04:20.383552 2026] [:error] [pid 35250:tid 35332] [client 20.78.135.104:2735] [client 20.78.135.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xmr.php"] [unique_id "acn2RIaKM1MR6zcp2YO3cQAAANU"]
[Mon Mar 30 12:04:20.978939 2026] [:error] [pid 35250:tid 35322] [client 20.78.135.104:2699] [client 20.78.135.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xmr.php"] [unique_id "acn2RIaKM1MR6zcp2YO3cwAAAMs"]
[Mon Mar 30 12:04:21.528983 2026] [:error] [pid 35248:tid 35261] [client 20.78.135.104:7234] [client 20.78.135.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xmr.php"] [unique_id "acn2Rb3igMCgAQPFS_8hvAAAAEc"]
[Mon Mar 30 12:43:08.770617 2026] [:error] [pid 50663:tid 50678] [client 20.239.139.3:6989] [client 20.239.139.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.trash7206/index.php"] [unique_id "acn_XG28b9DKIAMEdfDGhwAAAY0"]
[Mon Mar 30 12:43:09.303851 2026] [:error] [pid 35343:tid 35364] [client 20.239.139.3:7253] [client 20.239.139.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.trash7206/index.php"] [unique_id "acn_XaP5HurqmbvwN-KQVAAAABM"]
[Mon Mar 30 12:43:09.789778 2026] [:error] [pid 50663:tid 50668] [client 20.239.139.3:7023] [client 20.239.139.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.trash7206/index.php"] [unique_id "acn_XW28b9DKIAMEdfDGkQAAAYM"]
[Mon Mar 30 12:43:10.278339 2026] [:error] [pid 35250:tid 35335] [client 20.239.139.3:1739] [client 20.239.139.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.trash7206/index.php"] [unique_id "acn_XoaKM1MR6zcp2YPFswAAANg"]
[Mon Mar 30 23:55:17.987791 2026] [:error] [pid 60747:tid 60809] [client 20.104.195.176:49891] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon Mar 30 23:55:18.197115 2026] [:error] [pid 60747:tid 60823] [client 20.104.195.176:49891] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon Mar 30 23:55:18.631575 2026] [:error] [pid 60747:tid 60819] [client 20.104.195.176:49891] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Mon Mar 30 23:55:18.864207 2026] [:error] [pid 60747:tid 60817] [client 20.104.195.176:49891] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Mar 30 23:55:19.374466 2026] [:error] [pid 60747:tid 60826] [client 20.104.195.176:49891] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Mon Mar 30 23:55:19.584474 2026] [:error] [pid 60747:tid 60812] [client 20.104.195.176:49891] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Mon Mar 30 23:55:19.794337 2026] [:error] [pid 60747:tid 60825] [client 20.104.195.176:49891] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Mon Mar 30 23:55:20.210330 2026] [:error] [pid 60747:tid 60806] [client 20.104.195.176:49891] [client 20.104.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "acqc6AU3IY-cCpy_-zFaKAAAAMM"]
[Mon Mar 30 23:55:21.044634 2026] [:error] [pid 60745:tid 60749] [client 20.104.195.176:49869] [client 20.104.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "acqc6SQDBn75QnHaPb9c_AAAAEA"]
[Mon Mar 30 23:55:21.874095 2026] [:error] [pid 60747:tid 60821] [client 20.104.195.176:49882] [client 20.104.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "acqc6QU3IY-cCpy_-zFaKwAAANI"]
[Mon Mar 30 23:55:22.712047 2026] [:error] [pid 60746:tid 60794] [client 20.104.195.176:49867] [client 20.104.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "acqc6p4kQrgjDdAbQCo6KQAAAJI"]
[Tue Mar 31 05:08:33.795893 2026] [:error] [pid 18439:tid 18451] [client 74.248.131.192:16077] File does not exist: /usr/local/apache/htdocs/suspended-page/vuln.php
[Tue Mar 31 05:08:34.055317 2026] [:error] [pid 18439:tid 18458] [client 74.248.131.192:16077] File does not exist: /usr/local/apache/htdocs/suspended-page/sw.php
[Tue Mar 31 05:08:34.316319 2026] [:error] [pid 18439:tid 18462] [client 74.248.131.192:16077] File does not exist: /usr/local/apache/htdocs/suspended-page/fsgdjkl.php
[Tue Mar 31 05:08:34.575406 2026] [:error] [pid 18439:tid 18461] [client 74.248.131.192:16077] File does not exist: /usr/local/apache/htdocs/suspended-page/ahutr.php
[Tue Mar 31 05:08:34.833534 2026] [:error] [pid 18439:tid 18455] [client 74.248.131.192:16077] File does not exist: /usr/local/apache/htdocs/suspended-page/y.php
[Tue Mar 31 05:08:35.090997 2026] [:error] [pid 18439:tid 18463] [client 74.248.131.192:16077] File does not exist: /usr/local/apache/htdocs/suspended-page/byrgo.php
[Tue Mar 31 05:08:35.349312 2026] [:error] [pid 18439:tid 18457] [client 74.248.131.192:16077] File does not exist: /usr/local/apache/htdocs/suspended-page/abouta.php
[Tue Mar 31 05:08:35.610479 2026] [:error] [pid 18439:tid 18467] [client 74.248.131.192:16077] File does not exist: /usr/local/apache/htdocs/suspended-page/zfe.php
[Tue Mar 31 05:08:35.868661 2026] [:error] [pid 18439:tid 18453] [client 74.248.131.192:16077] File does not exist: /usr/local/apache/htdocs/suspended-page/by.php
[Tue Mar 31 05:08:36.125199 2026] [:error] [pid 18439:tid 18475] [client 74.248.131.192:16077] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Tue Mar 31 05:08:36.380330 2026] [:error] [pid 18439:tid 18466] [client 74.248.131.192:16077] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-asudo.php"] [unique_id "acrmVC-R9nOaA8Xqs7jF6wAAAM8"]
[Tue Mar 31 05:08:36.894464 2026] [:error] [pid 1224:tid 1237] [client 74.248.131.192:16099] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-asudo.php"] [unique_id "acrmVMXGPQPzIHnCuJgcjAAAAQs"]
[Tue Mar 31 05:08:37.435480 2026] [:error] [pid 1224:tid 1244] [client 74.248.131.192:16116] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-moonka.php"] [unique_id "acrmVcXGPQPzIHnCuJgcjwAAARI"]
[Tue Mar 31 05:08:37.964818 2026] [:error] [pid 18332:tid 18365] [client 74.248.131.192:16093] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrmVb4KXr1F9raS5GSXLAAAABE"]
[Tue Mar 31 05:08:38.481471 2026] [:error] [pid 18332:tid 18356] [client 74.248.131.192:16016] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrmVr4KXr1F9raS5GSXMgAAAAg"]
[Tue Mar 31 05:08:38.992128 2026] [:error] [pid 18333:tid 18388] [client 74.248.131.192:16002] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrmVkSx2C5hLR0-8dLjOAAAAEk"]
[Tue Mar 31 05:08:39.506864 2026] [:error] [pid 18333:tid 18393] [client 74.248.131.192:16079] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-thi.php"] [unique_id "acrmV0Sx2C5hLR0-8dLjOQAAAE4"]
[Tue Mar 31 05:08:40.016782 2026] [:error] [pid 18334:tid 18418] [client 74.248.131.192:16127] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-thi.php"] [unique_id "acrmWHqQrXLbk1cg3mg_2wAAAIw"]
[Tue Mar 31 05:08:40.529392 2026] [:error] [pid 18333:tid 18381] [client 74.248.131.192:16039] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-thi.php"] [unique_id "acrmWESx2C5hLR0-8dLjPQAAAEI"]
[Tue Mar 31 05:08:41.060928 2026] [:error] [pid 18332:tid 18360] [client 74.248.131.192:16004] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "acrmWb4KXr1F9raS5GSXPQAAAAw"]
[Tue Mar 31 05:08:41.573062 2026] [:error] [pid 18439:tid 18462] [client 74.248.131.192:16123] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "acrmWS-R9nOaA8Xqs7jF9QAAAMs"]
[Tue Mar 31 05:08:42.094130 2026] [:error] [pid 18334:tid 18411] [client 74.248.131.192:16012] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xhejulap.php"] [unique_id "acrmWnqQrXLbk1cg3mg_4AAAAIU"]
[Tue Mar 31 05:08:42.717773 2026] [:error] [pid 18333:tid 18383] [client 74.248.131.192:16013] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/IcC7p.php"] [unique_id "acrmWkSx2C5hLR0-8dLjRAAAAEQ"]
[Tue Mar 31 05:08:43.242379 2026] [:error] [pid 18439:tid 18467] [client 74.248.131.192:16001] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/IcC7p.php"] [unique_id "acrmWy-R9nOaA8Xqs7jF-gAAANA"]
[Tue Mar 31 05:08:43.807719 2026] [:error] [pid 18332:tid 18355] [client 74.248.131.192:16117] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/IcC7p.php"] [unique_id "acrmW74KXr1F9raS5GSXRwAAAAc"]
[Tue Mar 31 05:08:44.325026 2026] [:error] [pid 18332:tid 18349] [client 74.248.131.192:16047] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/IcC7p.php"] [unique_id "acrmXL4KXr1F9raS5GSXSAAAAAE"]
[Tue Mar 31 05:08:44.835025 2026] [:error] [pid 1224:tid 1243] [client 74.248.131.192:16106] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "acrmXMXGPQPzIHnCuJgcmgAAARE"]
[Tue Mar 31 05:08:45.367680 2026] [:error] [pid 1224:tid 1231] [client 74.248.131.192:16009] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "acrmXcXGPQPzIHnCuJgcngAAAQU"]
[Tue Mar 31 05:08:45.938454 2026] [:error] [pid 18333:tid 18402] [client 74.248.131.192:16076] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "acrmXUSx2C5hLR0-8dLjSwAAAFc"]
[Tue Mar 31 05:08:46.448429 2026] [:error] [pid 18439:tid 18469] [client 74.248.131.192:16107] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "acrmXi-R9nOaA8Xqs7jGAgAAANI"]
[Tue Mar 31 11:07:23.001894 2026] [:error] [pid 41421:tid 41438] [client 20.216.179.254:65171] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Tue Mar 31 11:07:23.261399 2026] [:error] [pid 41421:tid 41430] [client 20.216.179.254:65171] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Tue Mar 31 11:07:23.509846 2026] [:error] [pid 41421:tid 41440] [client 20.216.179.254:65171] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Tue Mar 31 11:07:23.763347 2026] [:error] [pid 41421:tid 41445] [client 20.216.179.254:65171] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Tue Mar 31 11:07:24.011456 2026] [:error] [pid 41421:tid 41443] [client 20.216.179.254:65171] File does not exist: /usr/local/apache/htdocs/suspended-page/wxfyf.php
[Tue Mar 31 11:07:24.252032 2026] [:error] [pid 41421:tid 41444] [client 20.216.179.254:65171] File does not exist: /usr/local/apache/htdocs/suspended-page/callback.php
[Tue Mar 31 11:07:24.491851 2026] [:error] [pid 41421:tid 41433] [client 20.216.179.254:65171] File does not exist: /usr/local/apache/htdocs/suspended-page/h2.php
[Tue Mar 31 11:07:24.758809 2026] [:error] [pid 41421:tid 41434] [client 20.216.179.254:65171] File does not exist: /usr/local/apache/htdocs/suspended-page/d12.php
[Tue Mar 31 11:07:25.007421 2026] [:error] [pid 41421:tid 41427] [client 20.216.179.254:65171] File does not exist: /usr/local/apache/htdocs/suspended-page/144.php
[Tue Mar 31 11:07:25.246865 2026] [:error] [pid 41421:tid 41432] [client 20.216.179.254:65171] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Tue Mar 31 11:07:25.526280 2026] [:error] [pid 41421:tid 41429] [client 20.216.179.254:65171] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "acs6bRSaDjY9kKFtUQCx6wAAAQU"]
[Tue Mar 31 11:07:26.658706 2026] [:error] [pid 41421:tid 41445] [client 20.216.179.254:62632] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "acs6bhSaDjY9kKFtUQCx7QAAARU"]
[Tue Mar 31 11:07:27.342253 2026] [:error] [pid 41421:tid 41442] [client 20.216.179.254:61897] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "acs6bxSaDjY9kKFtUQCx7wAAARI"]
[Tue Mar 31 11:07:29.661404 2026] [:error] [pid 6548:tid 6570] [client 20.216.179.254:49814] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "acs6cbgIz9HgMl9YwE7d1gAAAVQ"]
[Tue Mar 31 11:07:32.338597 2026] [:error] [pid 6548:tid 6558] [client 20.216.179.254:1347] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acs6dLgIz9HgMl9YwE7d2gAAAUg"]
[Tue Mar 31 11:07:34.879311 2026] [:error] [pid 36892:tid 36963] [client 20.216.179.254:29840] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acs6dkyj9S4G0ek3O4L5TQAAAIw"]
[Tue Mar 31 11:07:35.946041 2026] [:error] [pid 36982:tid 36994] [client 20.216.179.254:65159] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acs6d_lMmeoQKN0r_GPy_QAAAMk"]
[Tue Mar 31 11:07:37.509582 2026] [:error] [pid 41421:tid 41437] [client 20.216.179.254:29883] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acs6eRSaDjY9kKFtUQCx_AAAAQ0"]
[Tue Mar 31 11:07:38.754202 2026] [:error] [pid 36982:tid 37008] [client 20.216.179.254:1344] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "acs6evlMmeoQKN0r_GPzBgAAANc"]
[Tue Mar 31 11:07:40.473539 2026] [:error] [pid 36890:tid 36919] [client 20.216.179.254:29824] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "acs6fJ8FASPd_uH8z7d-egAAABg"]
[Tue Mar 31 11:07:42.172188 2026] [:error] [pid 36982:tid 36988] [client 20.216.179.254:61893] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "acs6fvlMmeoQKN0r_GPzHAAAAMM"]
[Tue Mar 31 11:07:43.302101 2026] [:error] [pid 6548:tid 6554] [client 20.216.179.254:62634] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "acs6f7gIz9HgMl9YwE7d6wAAAUQ"]
[Tue Mar 31 11:07:43.928018 2026] [:error] [pid 6548:tid 6571] [client 20.216.179.254:49822] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "acs6f7gIz9HgMl9YwE7d7wAAAVU"]
[Tue Mar 31 11:07:45.051829 2026] [:error] [pid 36982:tid 36993] [client 20.216.179.254:34200] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "acs6gflMmeoQKN0r_GPzIAAAAMg"]
[Tue Mar 31 11:07:46.954255 2026] [:error] [pid 36892:tid 36973] [client 20.216.179.254:34180] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "acs6gkyj9S4G0ek3O4L5UgAAAJY"]
[Tue Mar 31 11:07:48.413331 2026] [:error] [pid 36891:tid 36934] [client 20.216.179.254:61680] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "acs6hJJhiMaJUqoqfl5WbAAAAEo"]
[Tue Mar 31 11:07:49.391994 2026] [:error] [pid 6548:tid 6564] [client 20.216.179.254:58817] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "acs6hbgIz9HgMl9YwE7d8gAAAU4"]
[Tue Mar 31 11:07:50.259364 2026] [:error] [pid 6548:tid 6558] [client 20.216.179.254:34219] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "acs6hrgIz9HgMl9YwE7d9QAAAUg"]
[Tue Mar 31 11:07:51.553028 2026] [:error] [pid 6548:tid 6561] [client 20.216.179.254:1380] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "acs6h7gIz9HgMl9YwE7d9wAAAUs"]
[Tue Mar 31 11:07:52.894890 2026] [:error] [pid 36982:tid 36998] [client 20.216.179.254:65190] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "acs6iPlMmeoQKN0r_GPzRAAAAM0"]
[Tue Mar 31 11:07:53.673759 2026] [:error] [pid 6548:tid 6564] [client 20.216.179.254:65191] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "acs6ibgIz9HgMl9YwE7d_QAAAU4"]
[Tue Mar 31 11:07:54.571374 2026] [:error] [pid 36982:tid 36998] [client 20.216.179.254:61676] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "acs6ivlMmeoQKN0r_GPzUAAAAM0"]
[Tue Mar 31 11:07:55.583596 2026] [:error] [pid 41421:tid 41437] [client 20.216.179.254:29877] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "acs6ixSaDjY9kKFtUQCyCgAAAQ0"]
[Tue Mar 31 11:07:56.576678 2026] [:error] [pid 36982:tid 36995] [client 20.216.179.254:49796] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "acs6jPlMmeoQKN0r_GPzWQAAAMo"]
[Tue Mar 31 11:07:57.491763 2026] [:error] [pid 36982:tid 36985] [client 20.216.179.254:34906] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sale.php"] [unique_id "acs6jflMmeoQKN0r_GPzXgAAAMA"]
[Tue Mar 31 11:07:58.311380 2026] [:error] [pid 36982:tid 36986] [client 20.216.179.254:1393] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sale.php"] [unique_id "acs6jvlMmeoQKN0r_GPzYAAAAME"]
[Tue Mar 31 11:07:59.290653 2026] [:error] [pid 36890:tid 36915] [client 20.216.179.254:17984] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sale.php"] [unique_id "acs6j58FASPd_uH8z7d-jAAAABQ"]
[Tue Mar 31 11:07:59.991119 2026] [:error] [pid 36892:tid 36964] [client 20.216.179.254:34901] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sale.php"] [unique_id "acs6j0yj9S4G0ek3O4L5VgAAAI0"]
[Tue Mar 31 11:08:00.943967 2026] [:error] [pid 36982:tid 37008] [client 20.216.179.254:1541] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "acs6kPlMmeoQKN0r_GPzaQAAANc"]
[Tue Mar 31 11:08:02.106845 2026] [:error] [pid 6548:tid 6563] [client 20.216.179.254:1407] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "acs6krgIz9HgMl9YwE7eAwAAAU0"]
[Tue Mar 31 11:08:02.931742 2026] [:error] [pid 41421:tid 41447] [client 20.216.179.254:25259] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "acs6khSaDjY9kKFtUQCyFwAAARc"]
[Tue Mar 31 11:08:03.579775 2026] [:error] [pid 36891:tid 36945] [client 20.216.179.254:65203] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "acs6k5JhiMaJUqoqfl5WcgAAAFU"]
[Tue Mar 31 11:08:04.637304 2026] [:error] [pid 36982:tid 36997] [client 20.216.179.254:65197] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2ksm17n.php"] [unique_id "acs6lPlMmeoQKN0r_GPzeQAAAMw"]
[Tue Mar 31 11:08:06.199611 2026] [:error] [pid 36891:tid 36928] [client 20.216.179.254:1566] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2ksm17n.php"] [unique_id "acs6lpJhiMaJUqoqfl5WdQAAAEQ"]
[Tue Mar 31 11:08:07.249702 2026] [:error] [pid 36982:tid 36995] [client 20.216.179.254:34884] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2ksm17n.php"] [unique_id "acs6l_lMmeoQKN0r_GPzewAAAMo"]
[Tue Mar 31 11:08:08.391032 2026] [:error] [pid 36891:tid 36925] [client 20.216.179.254:53642] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2ksm17n.php"] [unique_id "acs6mJJhiMaJUqoqfl5WeQAAAEE"]
[Tue Mar 31 11:08:09.385163 2026] [:error] [pid 41421:tid 41447] [client 20.216.179.254:1348] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "acs6mRSaDjY9kKFtUQCyJAAAARc"]
[Tue Mar 31 11:08:10.819932 2026] [:error] [pid 6548:tid 6555] [client 20.216.179.254:28396] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "acs6mrgIz9HgMl9YwE7eEQAAAUU"]
[Tue Mar 31 11:08:11.718668 2026] [:error] [pid 36982:tid 36990] [client 20.216.179.254:29881] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "acs6m_lMmeoQKN0r_GPzgAAAAMU"]
[Tue Mar 31 11:08:12.457764 2026] [:error] [pid 41421:tid 41442] [client 20.216.179.254:1397] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "acs6nBSaDjY9kKFtUQCyKwAAARI"]
[Tue Mar 31 11:08:13.225499 2026] [:error] [pid 36892:tid 36960] [client 20.216.179.254:25263] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "acs6nUyj9S4G0ek3O4L5XQAAAIk"]
[Tue Mar 31 11:08:13.940034 2026] [:error] [pid 36891:tid 36938] [client 20.216.179.254:25275] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "acs6nZJhiMaJUqoqfl5WewAAAE4"]
[Tue Mar 31 11:08:14.677401 2026] [:error] [pid 36890:tid 36902] [client 20.216.179.254:25253] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "acs6np8FASPd_uH8z7d-lQAAAAc"]
[Tue Mar 31 11:08:15.392042 2026] [:error] [pid 6548:tid 6566] [client 20.216.179.254:26785] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "acs6n7gIz9HgMl9YwE7eHwAAAVA"]
[Tue Mar 31 11:08:16.111092 2026] [:error] [pid 6548:tid 6570] [client 20.216.179.254:29855] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "acs6oLgIz9HgMl9YwE7eIAAAAVQ"]
[Tue Mar 31 11:08:16.717090 2026] [:error] [pid 36890:tid 36899] [client 20.216.179.254:1379] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "acs6oJ8FASPd_uH8z7d-mAAAAAQ"]
[Tue Mar 31 11:08:17.430578 2026] [:error] [pid 41421:tid 41440] [client 20.216.179.254:34939] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "acs6oRSaDjY9kKFtUQCyOAAAARA"]
[Tue Mar 31 11:08:18.261080 2026] [:error] [pid 36892:tid 36953] [client 20.216.179.254:65132] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "acs6okyj9S4G0ek3O4L5ZAAAAII"]
[Tue Mar 31 11:08:19.789811 2026] [:error] [pid 36982:tid 37008] [client 20.216.179.254:61949] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acs6o_lMmeoQKN0r_GPztAAAANc"]
[Tue Mar 31 11:08:21.065767 2026] [:error] [pid 6548:tid 6562] [client 20.216.179.254:62601] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acs6pbgIz9HgMl9YwE7eLwAAAUw"]
[Tue Mar 31 11:08:21.885162 2026] [:error] [pid 36890:tid 36909] [client 20.216.179.254:17985] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acs6pZ8FASPd_uH8z7d-nAAAAA4"]
[Tue Mar 31 11:08:23.098375 2026] [:error] [pid 6548:tid 6567] [client 20.216.179.254:65124] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acs6p7gIz9HgMl9YwE7eNgAAAVE"]
[Tue Mar 31 11:08:23.884881 2026] [:error] [pid 36892:tid 36971] [client 20.216.179.254:53650] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acs6p0yj9S4G0ek3O4L5awAAAJQ"]
[Tue Mar 31 11:08:25.832828 2026] [:error] [pid 36982:tid 36990] [client 20.216.179.254:25216] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Tue Mar 31 11:08:26.084897 2026] [:error] [pid 36982:tid 37006] [client 20.216.179.254:25216] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-p2r3q9c8k4.php
[Tue Mar 31 11:08:26.365946 2026] [:error] [pid 36982:tid 37004] [client 20.216.179.254:25216] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Tue Mar 31 11:08:26.650870 2026] [:error] [pid 36982:tid 36985] [client 20.216.179.254:25216] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Tue Mar 31 11:08:26.902050 2026] [:error] [pid 36982:tid 36988] [client 20.216.179.254:25216] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Tue Mar 31 11:08:27.194879 2026] [:error] [pid 36982:tid 37000] [client 20.216.179.254:25216] File does not exist: /usr/local/apache/htdocs/suspended-page/ws83.php
[Tue Mar 31 11:08:27.448993 2026] [:error] [pid 36982:tid 36992] [client 20.216.179.254:25216] File does not exist: /usr/local/apache/htdocs/suspended-page/56c53.php
[Tue Mar 31 11:08:27.700880 2026] [:error] [pid 36982:tid 37001] [client 20.216.179.254:25216] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Tue Mar 31 11:08:27.957610 2026] [:error] [pid 36982:tid 36985] [client 20.216.179.254:25216] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Tue Mar 31 11:08:28.209555 2026] [:error] [pid 36982:tid 36988] [client 20.216.179.254:25216] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Tue Mar 31 11:08:28.501098 2026] [:error] [pid 36982:tid 36989] [client 20.216.179.254:25216] File does not exist: /usr/local/apache/htdocs/suspended-page/bo.php
[Tue Mar 31 11:08:28.749798 2026] [:error] [pid 36982:tid 37006] [client 20.216.179.254:25216] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5b9ac.php"] [unique_id "acs6rPlMmeoQKN0r_GPz3wAAANU"]
[Tue Mar 31 11:08:30.063372 2026] [:error] [pid 36892:tid 36958] [client 20.216.179.254:28373] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5b9ac.php"] [unique_id "acs6rkyj9S4G0ek3O4L5cgAAAIc"]
[Tue Mar 31 11:08:31.355115 2026] [:error] [pid 36982:tid 36992] [client 20.216.179.254:49265] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5b9ac.php"] [unique_id "acs6r_lMmeoQKN0r_GPz7wAAAMc"]
[Tue Mar 31 11:08:32.354029 2026] [:error] [pid 36890:tid 36900] [client 20.216.179.254:49243] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5b9ac.php"] [unique_id "acs6sJ8FASPd_uH8z7d-pgAAAAU"]
[Tue Mar 31 11:08:33.397795 2026] [:error] [pid 36982:tid 36993] [client 20.216.179.254:25258] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "acs6sflMmeoQKN0r_GPz9QAAAMg"]
[Tue Mar 31 11:08:34.112638 2026] [:error] [pid 6548:tid 6565] [client 20.216.179.254:25270] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "acs6srgIz9HgMl9YwE7eSAAAAU8"]
[Tue Mar 31 11:08:34.820109 2026] [:error] [pid 36982:tid 36988] [client 20.216.179.254:25251] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "acs6svlMmeoQKN0r_GPz-wAAAMM"]
[Tue Mar 31 11:08:35.629396 2026] [:error] [pid 36890:tid 36910] [client 20.216.179.254:40720] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "acs6s58FASPd_uH8z7d-rwAAAA8"]
[Tue Mar 31 11:08:36.319085 2026] [:error] [pid 6548:tid 6561] [client 20.216.179.254:34256] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acs6tLgIz9HgMl9YwE7eTgAAAUs"]
[Tue Mar 31 11:08:37.380149 2026] [:error] [pid 6548:tid 6566] [client 20.216.179.254:61655] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acs6tbgIz9HgMl9YwE7eUwAAAVA"]
[Tue Mar 31 11:08:38.453943 2026] [:error] [pid 36891:tid 36944] [client 20.216.179.254:61683] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acs6tpJhiMaJUqoqfl5WjAAAAFQ"]
[Tue Mar 31 11:08:39.248865 2026] [:error] [pid 36891:tid 36933] [client 20.216.179.254:19544] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acs6t5JhiMaJUqoqfl5WjgAAAEk"]
[Tue Mar 31 11:08:40.114426 2026] [:error] [pid 36891:tid 36947] [client 20.216.179.254:26802] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "acs6uJJhiMaJUqoqfl5WkAAAAFc"]
[Tue Mar 31 11:08:40.827580 2026] [:error] [pid 6548:tid 6558] [client 20.216.179.254:59370] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "acs6uLgIz9HgMl9YwE7eXwAAAUg"]
[Tue Mar 31 11:08:42.056638 2026] [:error] [pid 6548:tid 6563] [client 20.216.179.254:34914] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "acs6urgIz9HgMl9YwE7eYwAAAU0"]
[Tue Mar 31 11:08:42.858165 2026] [:error] [pid 41421:tid 41432] [client 20.216.179.254:37333] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "acs6uhSaDjY9kKFtUQCyUAAAAQg"]
[Tue Mar 31 11:08:43.466188 2026] [:error] [pid 36890:tid 36902] [client 20.216.179.254:59351] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "acs6u58FASPd_uH8z7d-vAAAAAc"]
[Tue Mar 31 11:08:44.140825 2026] [:error] [pid 36891:tid 36941] [client 20.216.179.254:48559] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "acs6vJJhiMaJUqoqfl5WlQAAAFE"]
[Tue Mar 31 11:08:44.875096 2026] [:error] [pid 36891:tid 36944] [client 20.216.179.254:40739] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "acs6vJJhiMaJUqoqfl5WmAAAAFQ"]
[Tue Mar 31 11:08:45.829313 2026] [:error] [pid 36892:tid 36969] [client 20.216.179.254:36784] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "acs6vUyj9S4G0ek3O4L5fAAAAJI"]
[Tue Mar 31 11:08:47.191038 2026] [:error] [pid 6548:tid 6566] [client 20.216.179.254:46625] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "acs6v7gIz9HgMl9YwE7ebAAAAVA"]
[Tue Mar 31 11:08:48.102782 2026] [:error] [pid 6548:tid 6564] [client 20.216.179.254:59321] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "acs6wLgIz9HgMl9YwE7ecgAAAU4"]
[Tue Mar 31 11:08:48.949115 2026] [:error] [pid 6548:tid 6552] [client 20.216.179.254:49230] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "acs6wLgIz9HgMl9YwE7edgAAAUI"]
[Tue Mar 31 11:08:49.981750 2026] [:error] [pid 36982:tid 37002] [client 20.216.179.254:19524] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "acs6wflMmeoQKN0r_GP0FAAAANE"]
[Tue Mar 31 11:08:51.444710 2026] [:error] [pid 6548:tid 6558] [client 20.216.179.254:34200] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "acs6w7gIz9HgMl9YwE7eegAAAUg"]
[Tue Mar 31 11:08:52.054750 2026] [:error] [pid 36892:tid 36968] [client 20.216.179.254:51929] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "acs6xEyj9S4G0ek3O4L5gAAAAJE"]
[Tue Mar 31 11:08:52.773788 2026] [:error] [pid 36890:tid 36898] [client 20.216.179.254:16494] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "acs6xJ8FASPd_uH8z7d-xQAAAAM"]
[Tue Mar 31 11:08:53.698961 2026] [:error] [pid 36892:tid 36954] [client 20.216.179.254:31124] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "acs6xUyj9S4G0ek3O4L5gQAAAIM"]
[Tue Mar 31 11:08:54.491205 2026] [:error] [pid 36890:tid 36918] [client 20.216.179.254:59342] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acs6xp8FASPd_uH8z7d-yQAAABc"]
[Tue Mar 31 11:08:55.157063 2026] [:error] [pid 41421:tid 41431] [client 20.216.179.254:59363] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acs6xxSaDjY9kKFtUQCyXwAAAQc"]
[Tue Mar 31 11:08:56.078282 2026] [:error] [pid 36890:tid 36906] [client 20.216.179.254:63215] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acs6yJ8FASPd_uH8z7d-zwAAAAs"]
[Tue Mar 31 11:08:56.909590 2026] [:error] [pid 36982:tid 36989] [client 20.216.179.254:54968] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acs6yPlMmeoQKN0r_GP0IAAAAMQ"]
[Tue Mar 31 11:08:57.766366 2026] [:error] [pid 36982:tid 36986] [client 20.216.179.254:19998] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "acs6yflMmeoQKN0r_GP0JQAAAME"]
[Tue Mar 31 11:08:58.401794 2026] [:error] [pid 36982:tid 37009] [client 20.216.179.254:51172] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "acs6yvlMmeoQKN0r_GP0KQAAANg"]
[Tue Mar 31 11:08:59.612221 2026] [:error] [pid 6548:tid 6568] [client 20.216.179.254:20997] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "acs6y7gIz9HgMl9YwE7ekwAAAVI"]
[Tue Mar 31 11:09:00.699383 2026] [:error] [pid 6548:tid 6567] [client 20.216.179.254:21000] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "acs6zLgIz9HgMl9YwE7emQAAAVE"]
[Tue Mar 31 11:09:01.278732 2026] [:error] [pid 6548:tid 6565] [client 20.216.179.254:21025] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "acs6zbgIz9HgMl9YwE7emgAAAU8"]
[Tue Mar 31 11:09:01.951196 2026] [:error] [pid 36890:tid 36918] [client 20.216.179.254:51146] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "acs6zZ8FASPd_uH8z7d-1QAAABc"]
[Tue Mar 31 11:09:02.783612 2026] [:error] [pid 41421:tid 41444] [client 20.216.179.254:61263] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "acs6zhSaDjY9kKFtUQCybQAAARQ"]
[Tue Mar 31 11:09:03.578355 2026] [:error] [pid 36892:tid 36952] [client 20.216.179.254:20993] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "acs6z0yj9S4G0ek3O4L5hwAAAIE"]
[Tue Mar 31 11:09:04.422281 2026] [:error] [pid 36982:tid 36992] [client 20.216.179.254:47397] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acs60PlMmeoQKN0r_GP0MAAAAMc"]
[Tue Mar 31 11:09:05.214579 2026] [:error] [pid 36982:tid 37001] [client 20.216.179.254:1407] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acs60flMmeoQKN0r_GP0MQAAANA"]
[Tue Mar 31 11:09:05.865971 2026] [:error] [pid 36892:tid 36966] [client 20.216.179.254:26333] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acs60Uyj9S4G0ek3O4L5iQAAAI8"]
[Tue Mar 31 11:09:06.423524 2026] [:error] [pid 6548:tid 6571] [client 20.216.179.254:31756] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acs60rgIz9HgMl9YwE7epgAAAVU"]
[Tue Mar 31 11:09:07.162046 2026] [:error] [pid 36982:tid 36990] [client 20.216.179.254:20074] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acs60_lMmeoQKN0r_GP0OwAAAMU"]
[Tue Mar 31 11:09:07.890169 2026] [:error] [pid 36892:tid 36951] [client 20.216.179.254:63275] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acs600yj9S4G0ek3O4L5iwAAAIA"]
[Tue Mar 31 11:09:08.474297 2026] [:error] [pid 41421:tid 41439] [client 20.216.179.254:36170] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acs61BSaDjY9kKFtUQCydgAAAQ8"]
[Tue Mar 31 11:09:09.386811 2026] [:error] [pid 36890:tid 36903] [client 20.216.179.254:60920] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acs61Z8FASPd_uH8z7d_NQAAAAg"]
[Tue Mar 31 11:09:10.138787 2026] [:error] [pid 41421:tid 41447] [client 20.216.179.254:63242] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "acs61hSaDjY9kKFtUQCydwAAARc"]
[Tue Mar 31 11:09:11.218997 2026] [:error] [pid 36982:tid 37006] [client 20.216.179.254:33121] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "acs61_lMmeoQKN0r_GP0dwAAANU"]
[Tue Mar 31 11:09:12.414074 2026] [:error] [pid 6548:tid 6558] [client 20.216.179.254:32462] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "acs62LgIz9HgMl9YwE7etgAAAUg"]
[Tue Mar 31 11:09:19.653477 2026] [:error] [pid 41421:tid 41430] [client 20.216.179.254:26357] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "acs63xSaDjY9kKFtUQCyhwAAAQY"]
[Tue Mar 31 11:09:40.034085 2026] [:error] [pid 41421:tid 41448] [client 20.216.179.254:51865] File does not exist: /usr/local/apache/htdocs/suspended-page/gfd.php
[Tue Mar 31 11:09:40.375204 2026] [:error] [pid 41421:tid 41428] [client 20.216.179.254:51865] File does not exist: /usr/local/apache/htdocs/suspended-page/abrand.php
[Tue Mar 31 11:09:40.614928 2026] [:error] [pid 41421:tid 41429] [client 20.216.179.254:51865] File does not exist: /usr/local/apache/htdocs/suspended-page/amp.php
[Tue Mar 31 11:09:40.891009 2026] [:error] [pid 41421:tid 41431] [client 20.216.179.254:51865] File does not exist: /usr/local/apache/htdocs/suspended-page/ws75.php
[Tue Mar 31 11:09:41.142100 2026] [:error] [pid 41421:tid 41424] [client 20.216.179.254:51865] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Tue Mar 31 11:09:41.441678 2026] [:error] [pid 41421:tid 41444] [client 20.216.179.254:51865] File does not exist: /usr/local/apache/htdocs/suspended-page/maul.php
[Tue Mar 31 11:09:41.727350 2026] [:error] [pid 41421:tid 41448] [client 20.216.179.254:51865] File does not exist: /usr/local/apache/htdocs/suspended-page/lowpr.php
[Tue Mar 31 11:09:41.966724 2026] [:error] [pid 41421:tid 41432] [client 20.216.179.254:51865] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Tue Mar 31 11:09:42.273293 2026] [:error] [pid 41421:tid 41428] [client 20.216.179.254:51865] File does not exist: /usr/local/apache/htdocs/suspended-page/166.php
[Tue Mar 31 11:09:42.714944 2026] [:error] [pid 41421:tid 41434] [client 20.216.179.254:51865] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Tue Mar 31 11:09:43.120109 2026] [:error] [pid 41421:tid 41426] [client 20.216.179.254:51865] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Tue Mar 31 11:09:43.623131 2026] [:error] [pid 41421:tid 41427] [client 20.216.179.254:51865] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "acs69xSaDjY9kKFtUQCytwAAAQM"]
[Tue Mar 31 11:09:47.710780 2026] [:error] [pid 36890:tid 36906] [client 20.216.179.254:53700] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "acs6-58FASPd_uH8z7d_dwAAAAs"]
[Tue Mar 31 11:09:48.522471 2026] [:error] [pid 36982:tid 36998] [client 20.216.179.254:1222] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "acs6_PlMmeoQKN0r_GP1BQAAAM0"]
[Tue Mar 31 11:09:49.196445 2026] [:error] [pid 36982:tid 36991] [client 20.216.179.254:51868] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "acs6_flMmeoQKN0r_GP1BwAAAMY"]
[Tue Mar 31 11:09:49.941501 2026] [:error] [pid 36890:tid 36911] [client 20.216.179.254:37282] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hehe.php"] [unique_id "acs6_Z8FASPd_uH8z7d_ewAAABA"]
[Tue Mar 31 11:09:50.481881 2026] [:error] [pid 36982:tid 37007] [client 20.216.179.254:1616] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hehe.php"] [unique_id "acs6_vlMmeoQKN0r_GP1DAAAANY"]
[Tue Mar 31 11:09:51.038962 2026] [:error] [pid 36982:tid 36993] [client 20.216.179.254:64642] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hehe.php"] [unique_id "acs6__lMmeoQKN0r_GP1EgAAAMg"]
[Tue Mar 31 11:09:52.576320 2026] [:error] [pid 36982:tid 36992] [client 20.216.179.254:35519] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hehe.php"] [unique_id "acs7APlMmeoQKN0r_GP1HAAAAMc"]
[Tue Mar 31 11:09:53.288017 2026] [:error] [pid 36982:tid 36992] [client 20.216.179.254:44292] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "acs7AflMmeoQKN0r_GP1IQAAAMc"]
[Tue Mar 31 11:09:54.203201 2026] [:error] [pid 36982:tid 37004] [client 20.216.179.254:64594] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "acs7AvlMmeoQKN0r_GP1JAAAANM"]
[Tue Mar 31 11:09:54.969292 2026] [:error] [pid 36890:tid 36899] [client 20.216.179.254:44930] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "acs7Ap8FASPd_uH8z7d_gQAAAAQ"]
[Tue Mar 31 11:09:56.313465 2026] [:error] [pid 6548:tid 6573] [client 20.216.179.254:16972] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "acs7BLgIz9HgMl9YwE7fNwAAAVc"]
[Tue Mar 31 11:09:58.428588 2026] [:error] [pid 6548:tid 6572] [client 20.216.179.254:51873] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ne2026.php"] [unique_id "acs7BrgIz9HgMl9YwE7fPQAAAVY"]
[Tue Mar 31 11:10:00.976084 2026] [:error] [pid 6548:tid 6558] [client 20.216.179.254:44296] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ne2026.php"] [unique_id "acs7CLgIz9HgMl9YwE7fSAAAAUg"]
[Tue Mar 31 11:10:02.205482 2026] [:error] [pid 36982:tid 36991] [client 20.216.179.254:23084] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ne2026.php"] [unique_id "acs7CvlMmeoQKN0r_GP1ewAAAMY"]
[Tue Mar 31 11:10:03.343708 2026] [:error] [pid 36982:tid 37000] [client 20.216.179.254:1410] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ne2026.php"] [unique_id "acs7C_lMmeoQKN0r_GP1fgAAAM8"]
[Tue Mar 31 11:10:04.306607 2026] [:error] [pid 36982:tid 37009] [client 20.216.179.254:1972] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws73.php"] [unique_id "acs7DPlMmeoQKN0r_GP1ggAAANg"]
[Tue Mar 31 11:10:05.535954 2026] [:error] [pid 36982:tid 36994] [client 20.216.179.254:64605] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws73.php"] [unique_id "acs7DflMmeoQKN0r_GP1jgAAAMk"]
[Tue Mar 31 11:10:07.161564 2026] [:error] [pid 36982:tid 37007] [client 20.216.179.254:23099] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws73.php"] [unique_id "acs7D_lMmeoQKN0r_GP1lgAAANY"]
[Tue Mar 31 11:10:08.907997 2026] [:error] [pid 36890:tid 36897] [client 20.216.179.254:64119] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws73.php"] [unique_id "acs7EJ8FASPd_uH8z7d_lAAAAAI"]
[Tue Mar 31 11:10:10.019176 2026] [:error] [pid 36982:tid 36985] [client 20.216.179.254:64630] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "acs7EvlMmeoQKN0r_GP1pQAAAMA"]
[Tue Mar 31 11:10:10.980431 2026] [:error] [pid 36982:tid 36993] [client 20.216.179.254:53706] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "acs7EvlMmeoQKN0r_GP1qwAAAMg"]
[Tue Mar 31 11:10:11.968976 2026] [:error] [pid 41421:tid 41437] [client 20.216.179.254:23083] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "acs7ExSaDjY9kKFtUQCy-AAAAQ0"]
[Tue Mar 31 11:10:12.843186 2026] [:error] [pid 36892:tid 36959] [client 20.216.179.254:49188] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "acs7FEyj9S4G0ek3O4L5ywAAAIg"]
[Tue Mar 31 11:10:13.787776 2026] [:error] [pid 36982:tid 36991] [client 20.216.179.254:1240] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/baixy.php"] [unique_id "acs7FflMmeoQKN0r_GP1vAAAAMY"]
[Tue Mar 31 11:10:14.605040 2026] [:error] [pid 36982:tid 36994] [client 20.216.179.254:1930] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/baixy.php"] [unique_id "acs7FvlMmeoQKN0r_GP1vwAAAMk"]
[Tue Mar 31 11:10:15.569785 2026] [:error] [pid 6548:tid 6568] [client 20.216.179.254:64635] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/baixy.php"] [unique_id "acs7F7gIz9HgMl9YwE7fbQAAAVI"]
[Tue Mar 31 11:10:16.619245 2026] [:error] [pid 36982:tid 37009] [client 20.216.179.254:23067] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/baixy.php"] [unique_id "acs7GPlMmeoQKN0r_GP1ywAAANg"]
[Tue Mar 31 11:10:17.675401 2026] [:error] [pid 36890:tid 36899] [client 20.216.179.254:23057] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acs7GZ8FASPd_uH8z7d_qQAAAAQ"]
[Tue Mar 31 11:10:18.763428 2026] [:error] [pid 6548:tid 6563] [client 20.216.179.254:23054] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acs7GrgIz9HgMl9YwE7fdwAAAU0"]
[Tue Mar 31 11:10:19.705500 2026] [:error] [pid 41421:tid 41439] [client 20.216.179.254:53720] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acs7GxSaDjY9kKFtUQCzDQAAAQ8"]
[Tue Mar 31 11:10:20.365411 2026] [:error] [pid 36891:tid 36941] [client 20.216.179.254:49887] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acs7HJJhiMaJUqoqfl5WxAAAAFE"]
[Tue Mar 31 11:10:21.088053 2026] [:error] [pid 36890:tid 36912] [client 20.216.179.254:22537] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "acs7HZ8FASPd_uH8z7d_rQAAABE"]
[Tue Mar 31 11:10:21.926851 2026] [:error] [pid 6548:tid 6560] [client 20.216.179.254:1046] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "acs7HbgIz9HgMl9YwE7fhQAAAUo"]
[Tue Mar 31 11:10:22.786008 2026] [:error] [pid 36891:tid 36929] [client 20.216.179.254:22041] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "acs7HpJhiMaJUqoqfl5WxQAAAEU"]
[Tue Mar 31 11:10:23.690228 2026] [:error] [pid 36982:tid 36994] [client 20.216.179.254:21080] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "acs7H_lMmeoQKN0r_GP1_gAAAMk"]
[Tue Mar 31 11:10:24.378208 2026] [:error] [pid 36982:tid 36999] [client 20.216.179.254:18497] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "acs7IPlMmeoQKN0r_GP2BwAAAM4"]
[Tue Mar 31 11:10:25.111578 2026] [:error] [pid 36982:tid 36990] [client 20.216.179.254:22634] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "acs7IflMmeoQKN0r_GP2DQAAAMU"]
[Tue Mar 31 11:10:25.862249 2026] [:error] [pid 6548:tid 6566] [client 20.216.179.254:22110] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "acs7IbgIz9HgMl9YwE7flQAAAVA"]
[Tue Mar 31 11:10:26.643614 2026] [:error] [pid 41421:tid 41442] [client 20.216.179.254:54316] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "acs7IhSaDjY9kKFtUQCzGQAAARI"]
[Tue Mar 31 11:10:27.347484 2026] [:error] [pid 41421:tid 41446] [client 20.216.179.254:23078] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "acs7IxSaDjY9kKFtUQCzGgAAARY"]
[Tue Mar 31 11:10:28.367292 2026] [:error] [pid 36982:tid 37002] [client 20.216.179.254:22090] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "acs7JPlMmeoQKN0r_GP2IAAAANE"]
[Tue Mar 31 11:10:29.589973 2026] [:error] [pid 36890:tid 36910] [client 20.216.179.254:1935] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "acs7JZ8FASPd_uH8z7d_ugAAAA8"]
[Tue Mar 31 11:10:30.568253 2026] [:error] [pid 6548:tid 6563] [client 20.216.179.254:49890] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "acs7JrgIz9HgMl9YwE7fpQAAAU0"]
[Tue Mar 31 11:10:31.459674 2026] [:error] [pid 36982:tid 36997] [client 20.216.179.254:37802] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5e0a.php"] [unique_id "acs7J_lMmeoQKN0r_GP2NQAAAMw"]
[Tue Mar 31 11:10:32.135143 2026] [:error] [pid 36982:tid 36994] [client 20.216.179.254:22106] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5e0a.php"] [unique_id "acs7KPlMmeoQKN0r_GP2OQAAAMk"]
[Tue Mar 31 11:10:33.246385 2026] [:error] [pid 36982:tid 36995] [client 20.216.179.254:54296] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5e0a.php"] [unique_id "acs7KflMmeoQKN0r_GP2QgAAAMo"]
[Tue Mar 31 11:10:33.959577 2026] [:error] [pid 36890:tid 36902] [client 20.216.179.254:22639] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5e0a.php"] [unique_id "acs7KZ8FASPd_uH8z7d_wwAAAAc"]
[Tue Mar 31 11:10:35.200988 2026] [:error] [pid 6548:tid 6572] [client 20.216.179.254:23586] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "acs7K7gIz9HgMl9YwE7fvgAAAVY"]
[Tue Mar 31 11:10:36.166021 2026] [:error] [pid 36892:tid 36972] [client 20.216.179.254:37781] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "acs7LEyj9S4G0ek3O4L51gAAAJU"]
[Tue Mar 31 11:10:36.907639 2026] [:error] [pid 36890:tid 36899] [client 20.216.179.254:22591] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "acs7LJ8FASPd_uH8z7d_yQAAAAQ"]
[Tue Mar 31 11:10:37.732514 2026] [:error] [pid 6548:tid 6572] [client 20.216.179.254:23561] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "acs7LbgIz9HgMl9YwE7fxgAAAVY"]
[Tue Mar 31 11:10:38.450895 2026] [:error] [pid 36891:tid 36924] [client 20.216.179.254:57912] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acs7LpJhiMaJUqoqfl5W0AAAAEA"]
[Tue Mar 31 11:10:39.592294 2026] [:error] [pid 41421:tid 41425] [client 20.216.179.254:22039] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acs7LxSaDjY9kKFtUQCzLAAAAQE"]
[Tue Mar 31 11:10:40.764329 2026] [:error] [pid 36982:tid 37003] [client 20.216.179.254:1028] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acs7MPlMmeoQKN0r_GP2WQAAANI"]
[Tue Mar 31 11:10:41.409932 2026] [:error] [pid 36982:tid 36993] [client 20.216.179.254:18506] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acs7MflMmeoQKN0r_GP2WwAAAMg"]
[Tue Mar 31 11:10:42.170884 2026] [:error] [pid 36982:tid 37005] [client 20.216.179.254:22047] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/55b76.php"] [unique_id "acs7MvlMmeoQKN0r_GP2XwAAANQ"]
[Tue Mar 31 11:10:42.931090 2026] [:error] [pid 6548:tid 6553] [client 20.216.179.254:23574] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/55b76.php"] [unique_id "acs7MrgIz9HgMl9YwE7f1wAAAUM"]
[Tue Mar 31 11:10:43.539185 2026] [:error] [pid 36982:tid 36994] [client 20.216.179.254:1037] File does not exist: /usr/local/apache/htdocs/suspended-page/55b76.php
[Tue Mar 31 11:10:43.778627 2026] [:error] [pid 36982:tid 37008] [client 20.216.179.254:1037] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Tue Mar 31 11:10:44.018032 2026] [:error] [pid 36982:tid 36993] [client 20.216.179.254:1037] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Tue Mar 31 11:10:44.271633 2026] [:error] [pid 36982:tid 36992] [client 20.216.179.254:1037] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Tue Mar 31 11:10:44.510831 2026] [:error] [pid 36982:tid 36995] [client 20.216.179.254:1037] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Tue Mar 31 11:10:44.794531 2026] [:error] [pid 36982:tid 37002] [client 20.216.179.254:1037] File does not exist: /usr/local/apache/htdocs/suspended-page/drhunthq.php
[Tue Mar 31 11:10:45.305117 2026] [:error] [pid 36982:tid 36986] [client 20.216.179.254:1037] File does not exist: /usr/local/apache/htdocs/suspended-page/xxw.php
[Tue Mar 31 11:10:46.847444 2026] [:error] [pid 36982:tid 36986] [client 20.216.179.254:1037] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Tue Mar 31 11:10:47.225998 2026] [:error] [pid 36982:tid 36991] [client 20.216.179.254:1037] File does not exist: /usr/local/apache/htdocs/suspended-page/ws87.php
[Tue Mar 31 11:10:47.481922 2026] [:error] [pid 36982:tid 36992] [client 20.216.179.254:1037] File does not exist: /usr/local/apache/htdocs/suspended-page/lm15.php
[Tue Mar 31 11:10:47.741668 2026] [:error] [pid 36982:tid 36995] [client 20.216.179.254:1037] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/green.php"] [unique_id "acs7N_lMmeoQKN0r_GP2egAAAMo"]
[Tue Mar 31 11:10:49.217719 2026] [:error] [pid 36982:tid 36991] [client 20.216.179.254:22026] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/green.php"] [unique_id "acs7OflMmeoQKN0r_GP2ggAAAMY"]
[Tue Mar 31 11:10:50.536497 2026] [:error] [pid 36890:tid 36911] [client 20.216.179.254:27811] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/green.php"] [unique_id "acs7Op8FASPd_uH8z7d_1wAAABA"]
[Tue Mar 31 11:10:51.191286 2026] [:error] [pid 41421:tid 41448] [client 20.216.179.254:60530] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/green.php"] [unique_id "acs7OxSaDjY9kKFtUQCzPAAAARg"]
[Tue Mar 31 11:10:52.481311 2026] [:error] [pid 36890:tid 36904] [client 20.216.179.254:23573] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acs7PJ8FASPd_uH8z7d_2QAAAAk"]
[Tue Mar 31 11:10:53.370409 2026] [:error] [pid 6548:tid 6563] [client 20.216.179.254:34831] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acs7PbgIz9HgMl9YwE7f_wAAAU0"]
[Tue Mar 31 11:10:55.096179 2026] [:error] [pid 36982:tid 36994] [client 20.216.179.254:22063] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acs7P_lMmeoQKN0r_GP2ogAAAMk"]
[Tue Mar 31 11:10:56.215323 2026] [:error] [pid 6548:tid 6555] [client 20.216.179.254:37788] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acs7QLgIz9HgMl9YwE7gBgAAAUU"]
[Tue Mar 31 11:10:56.975484 2026] [:error] [pid 41421:tid 41430] [client 20.216.179.254:37783] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "acs7QBSaDjY9kKFtUQCzQQAAAQY"]
[Tue Mar 31 11:10:57.551544 2026] [:error] [pid 36982:tid 36992] [client 20.216.179.254:46149] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "acs7QflMmeoQKN0r_GP2qgAAAMc"]
[Tue Mar 31 11:10:58.454883 2026] [:error] [pid 36982:tid 36999] [client 20.216.179.254:37772] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "acs7QvlMmeoQKN0r_GP2sAAAAM4"]
[Tue Mar 31 11:10:59.207579 2026] [:error] [pid 36982:tid 36988] [client 20.216.179.254:46203] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "acs7Q_lMmeoQKN0r_GP2uwAAAMM"]
[Tue Mar 31 11:11:00.173341 2026] [:error] [pid 36982:tid 37009] [client 20.216.179.254:34862] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acs7RPlMmeoQKN0r_GP2wwAAANg"]
[Tue Mar 31 11:11:01.295520 2026] [:error] [pid 36891:tid 36931] [client 20.216.179.254:27388] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acs7RZJhiMaJUqoqfl5W2QAAAEc"]
[Tue Mar 31 11:11:02.062686 2026] [:error] [pid 36891:tid 36946] [client 20.216.179.254:19479] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acs7RpJhiMaJUqoqfl5W2gAAAFY"]
[Tue Mar 31 11:11:03.124351 2026] [:error] [pid 36982:tid 36998] [client 20.216.179.254:53066] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acs7R_lMmeoQKN0r_GP2ygAAAM0"]
[Tue Mar 31 11:11:03.893790 2026] [:error] [pid 36890:tid 36911] [client 20.216.179.254:37805] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acs7R58FASPd_uH8z7d__QAAABA"]
[Tue Mar 31 11:11:06.524693 2026] [:error] [pid 36982:tid 36995] [client 20.216.179.254:37803] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acs7SvlMmeoQKN0r_GP21gAAAMo"]
[Tue Mar 31 11:11:07.517536 2026] [:error] [pid 36982:tid 37008] [client 20.216.179.254:61725] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acs7S_lMmeoQKN0r_GP23wAAANc"]
[Tue Mar 31 11:11:09.313108 2026] [:error] [pid 36982:tid 36998] [client 20.216.179.254:42474] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acs7TflMmeoQKN0r_GP26gAAAM0"]
[Tue Mar 31 11:11:11.226036 2026] [:error] [pid 36982:tid 36997] [client 20.216.179.254:33650] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "acs7T_lMmeoQKN0r_GP2-wAAAMw"]
[Tue Mar 31 11:11:13.232770 2026] [:error] [pid 36982:tid 36992] [client 20.216.179.254:25777] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "acs7UflMmeoQKN0r_GP3CwAAAMc"]
[Tue Mar 31 11:11:14.621158 2026] [:error] [pid 36982:tid 36997] [client 20.216.179.254:27778] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "acs7UvlMmeoQKN0r_GP3GQAAAMw"]
[Tue Mar 31 11:11:15.635499 2026] [:error] [pid 36982:tid 36988] [client 20.216.179.254:34826] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "acs7U_lMmeoQKN0r_GP3IgAAAMM"]
[Tue Mar 31 11:11:16.518661 2026] [:error] [pid 36982:tid 36988] [client 20.216.179.254:61733] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/clss.php"] [unique_id "acs7VPlMmeoQKN0r_GP3KAAAAMM"]
[Tue Mar 31 11:11:17.768489 2026] [:error] [pid 36891:tid 36931] [client 20.216.179.254:33604] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/clss.php"] [unique_id "acs7VZJhiMaJUqoqfl5W5gAAAEc"]
[Tue Mar 31 11:11:18.934669 2026] [:error] [pid 36892:tid 36960] [client 20.216.179.254:42452] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/clss.php"] [unique_id "acs7Vkyj9S4G0ek3O4L5-AAAAIk"]
[Tue Mar 31 11:11:19.500374 2026] [:error] [pid 41421:tid 41426] [client 20.216.179.254:46173] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/clss.php"] [unique_id "acs7VxSaDjY9kKFtUQCzbQAAAQI"]
[Tue Mar 31 11:11:20.655580 2026] [:error] [pid 36892:tid 36962] [client 20.216.179.254:54381] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "acs7WEyj9S4G0ek3O4L6AwAAAIs"]
[Tue Mar 31 11:11:21.818751 2026] [:error] [pid 36892:tid 36962] [client 20.216.179.254:56213] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "acs7WUyj9S4G0ek3O4L6DQAAAIs"]
[Tue Mar 31 11:11:22.502477 2026] [:error] [pid 36982:tid 36986] [client 20.216.179.254:56231] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "acs7WvlMmeoQKN0r_GP3SgAAAME"]
[Tue Mar 31 11:11:23.314551 2026] [:error] [pid 41421:tid 41448] [client 20.216.179.254:34844] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "acs7WxSaDjY9kKFtUQCzeQAAARg"]
[Tue Mar 31 11:11:24.429917 2026] [:error] [pid 41421:tid 41441] [client 20.216.179.254:27824] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acs7XBSaDjY9kKFtUQCzfAAAARE"]
[Tue Mar 31 11:11:25.245793 2026] [:error] [pid 36982:tid 37000] [client 20.216.179.254:27832] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acs7XflMmeoQKN0r_GP3ZwAAAM8"]
[Tue Mar 31 11:11:26.074842 2026] [:error] [pid 36890:tid 36901] [client 20.216.179.254:42489] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acs7Xp8FASPd_uH8z7eAFgAAAAY"]
[Tue Mar 31 11:11:26.918084 2026] [:error] [pid 36890:tid 36906] [client 20.216.179.254:45648] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acs7Xp8FASPd_uH8z7eAGQAAAAs"]
[Tue Mar 31 11:11:27.675609 2026] [:error] [pid 36890:tid 36915] [client 20.216.179.254:45684] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "acs7X58FASPd_uH8z7eAHAAAABQ"]
[Tue Mar 31 11:11:28.303281 2026] [:error] [pid 36982:tid 36997] [client 20.216.179.254:56226] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "acs7YPlMmeoQKN0r_GP3dAAAAMw"]
[Tue Mar 31 11:11:29.106699 2026] [:error] [pid 41421:tid 41424] [client 20.216.179.254:41820] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "acs7YRSaDjY9kKFtUQCznAAAAQA"]
[Tue Mar 31 11:11:30.095911 2026] [:error] [pid 36982:tid 36992] [client 20.216.179.254:19472] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "acs7YvlMmeoQKN0r_GP3fwAAAMc"]
[Tue Mar 31 11:11:30.994402 2026] [:error] [pid 36892:tid 36952] [client 20.216.179.254:54372] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "acs7Ykyj9S4G0ek3O4L6FQAAAIE"]
[Tue Mar 31 11:11:32.265809 2026] [:error] [pid 36982:tid 37001] [client 20.216.179.254:56225] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "acs7ZPlMmeoQKN0r_GP3hAAAANA"]
[Tue Mar 31 11:11:33.041715 2026] [:error] [pid 36891:tid 36938] [client 20.216.179.254:28810] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "acs7ZZJhiMaJUqoqfl5W7QAAAE4"]
[Tue Mar 31 11:11:33.847136 2026] [:error] [pid 6548:tid 6562] [client 20.216.179.254:42487] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "acs7ZbgIz9HgMl9YwE7gVAAAAUw"]
[Tue Mar 31 11:11:34.582333 2026] [:error] [pid 41421:tid 41433] [client 20.216.179.254:60988] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "acs7ZhSaDjY9kKFtUQCzsAAAAQk"]
[Tue Mar 31 11:11:35.505881 2026] [:error] [pid 36982:tid 36998] [client 20.216.179.254:2009] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "acs7Z_lMmeoQKN0r_GP3jgAAAM0"]
[Tue Mar 31 11:11:37.219365 2026] [:error] [pid 41421:tid 41442] [client 20.216.179.254:54352] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "acs7aRSaDjY9kKFtUQCztAAAARI"]
[Tue Mar 31 11:11:44.304150 2026] [:error] [pid 36890:tid 36898] [client 20.216.179.254:47896] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "acs7cJ8FASPd_uH8z7eARwAAAAM"]
[Tue Mar 31 11:11:52.316296 2026] [:error] [pid 36892:tid 36956] [client 20.216.179.254:39059] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Tue Mar 31 11:11:52.968148 2026] [:error] [pid 36892:tid 36967] [client 20.216.179.254:39059] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Tue Mar 31 11:11:53.354905 2026] [:error] [pid 36892:tid 36957] [client 20.216.179.254:39059] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Tue Mar 31 11:11:53.662844 2026] [:error] [pid 36892:tid 36972] [client 20.216.179.254:39059] File does not exist: /usr/local/apache/htdocs/suspended-page/ws60.php
[Tue Mar 31 11:11:53.966002 2026] [:error] [pid 36892:tid 36971] [client 20.216.179.254:39059] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Tue Mar 31 11:11:54.270150 2026] [:error] [pid 36892:tid 36953] [client 20.216.179.254:39059] File does not exist: /usr/local/apache/htdocs/suspended-page/buc.php
[Tue Mar 31 11:11:54.575169 2026] [:error] [pid 36892:tid 36968] [client 20.216.179.254:39059] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Tue Mar 31 11:11:54.902017 2026] [:error] [pid 36892:tid 36964] [client 20.216.179.254:39059] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Tue Mar 31 11:11:55.204548 2026] [:error] [pid 36892:tid 36974] [client 20.216.179.254:39059] File does not exist: /usr/local/apache/htdocs/suspended-page/okxh.php
[Tue Mar 31 11:11:55.507226 2026] [:error] [pid 36892:tid 36958] [client 20.216.179.254:39059] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Tue Mar 31 11:11:55.818593 2026] [:error] [pid 36892:tid 36960] [client 20.216.179.254:39059] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-104.php"] [unique_id "acs7e0yj9S4G0ek3O4L6VAAAAIk"]
[Tue Mar 31 11:11:56.975128 2026] [:error] [pid 6548:tid 6551] [client 20.216.179.254:28815] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-104.php"] [unique_id "acs7fLgIz9HgMl9YwE7gmwAAAUE"]
[Tue Mar 31 11:11:57.802005 2026] [:error] [pid 36982:tid 37009] [client 20.216.179.254:33548] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-104.php"] [unique_id "acs7fflMmeoQKN0r_GP38QAAANg"]
[Tue Mar 31 11:11:58.678606 2026] [:error] [pid 36982:tid 37008] [client 20.216.179.254:58791] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-104.php"] [unique_id "acs7fvlMmeoQKN0r_GP3-AAAANc"]
[Tue Mar 31 11:11:59.398615 2026] [:error] [pid 6548:tid 6550] [client 20.216.179.254:40134] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "acs7f7gIz9HgMl9YwE7goQAAAUA"]
[Tue Mar 31 11:12:00.486145 2026] [:error] [pid 41421:tid 41433] [client 20.216.179.254:18468] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "acs7gBSaDjY9kKFtUQC0CQAAAQk"]
[Tue Mar 31 11:12:01.747442 2026] [:error] [pid 6548:tid 6557] [client 20.216.179.254:40133] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "acs7gbgIz9HgMl9YwE7gsQAAAUc"]
[Tue Mar 31 11:12:02.527559 2026] [:error] [pid 36982:tid 37004] [client 20.216.179.254:47930] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "acs7gvlMmeoQKN0r_GP4CAAAANM"]
[Tue Mar 31 11:12:03.191767 2026] [:error] [pid 6548:tid 6574] [client 20.216.179.254:39040] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acs7g7gIz9HgMl9YwE7gtwAAAVg"]
[Tue Mar 31 11:12:03.842643 2026] [:error] [pid 36892:tid 36966] [client 20.216.179.254:42407] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acs7g0yj9S4G0ek3O4L6ZQAAAI8"]
[Tue Mar 31 11:12:04.499647 2026] [:error] [pid 36982:tid 37001] [client 20.216.179.254:58807] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acs7hPlMmeoQKN0r_GP4EQAAANA"]
[Tue Mar 31 11:12:05.148780 2026] [:error] [pid 36982:tid 37004] [client 20.216.179.254:33549] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acs7hflMmeoQKN0r_GP4GQAAANM"]
[Tue Mar 31 11:12:06.119869 2026] [:error] [pid 36891:tid 36929] [client 20.216.179.254:42368] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "acs7hpJhiMaJUqoqfl5XGAAAAEU"]
[Tue Mar 31 11:12:07.289447 2026] [:error] [pid 6548:tid 6567] [client 20.216.179.254:28903] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "acs7h7gIz9HgMl9YwE7gwAAAAVE"]
[Tue Mar 31 11:12:08.015566 2026] [:error] [pid 6548:tid 6554] [client 20.216.179.254:1877] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "acs7iLgIz9HgMl9YwE7gwQAAAUQ"]
[Tue Mar 31 11:12:09.402852 2026] [:error] [pid 6548:tid 6564] [client 20.216.179.254:40128] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "acs7ibgIz9HgMl9YwE7gxwAAAU4"]
[Tue Mar 31 11:12:10.439558 2026] [:error] [pid 36892:tid 36962] [client 20.216.179.254:36157] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "acs7ikyj9S4G0ek3O4L6bQAAAIs"]
[Tue Mar 31 11:12:11.264200 2026] [:error] [pid 36982:tid 37009] [client 20.216.179.254:32401] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "acs7i_lMmeoQKN0r_GP4UQAAANg"]
[Tue Mar 31 11:12:11.915301 2026] [:error] [pid 36890:tid 36909] [client 20.216.179.254:18465] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "acs7i58FASPd_uH8z7eAgwAAAA4"]
[Tue Mar 31 11:12:12.935992 2026] [:error] [pid 36890:tid 36907] [client 20.216.179.254:36146] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "acs7jJ8FASPd_uH8z7eAiQAAAAw"]
[Tue Mar 31 11:12:13.532735 2026] [:error] [pid 36891:tid 36933] [client 20.216.179.254:38443] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "acs7jZJhiMaJUqoqfl5XJQAAAEk"]
[Tue Mar 31 11:12:14.205686 2026] [:error] [pid 41421:tid 41443] [client 20.216.179.254:37846] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "acs7jhSaDjY9kKFtUQC0GAAAARM"]
[Tue Mar 31 11:12:14.781526 2026] [:error] [pid 36982:tid 37007] [client 20.216.179.254:56836] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "acs7jvlMmeoQKN0r_GP5HwAAANY"]
[Tue Mar 31 11:12:15.838015 2026] [:error] [pid 41421:tid 41439] [client 20.216.179.254:18436] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "acs7jxSaDjY9kKFtUQC0GwAAAQ8"]
[Tue Mar 31 11:12:16.536328 2026] [:error] [pid 36982:tid 37007] [client 20.216.179.254:18461] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "acs7kPlMmeoQKN0r_GP5JwAAANY"]
[Tue Mar 31 11:12:17.365803 2026] [:error] [pid 36982:tid 36996] [client 20.216.179.254:47872] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "acs7kflMmeoQKN0r_GP5LwAAAMs"]
[Tue Mar 31 11:12:18.152280 2026] [:error] [pid 36982:tid 36998] [client 20.216.179.254:56267] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "acs7kvlMmeoQKN0r_GP5OAAAAM0"]
[Tue Mar 31 11:12:18.916446 2026] [:error] [pid 36890:tid 36900] [client 20.216.179.254:30571] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "acs7kp8FASPd_uH8z7eAkgAAAAU"]
[Tue Mar 31 11:12:19.509136 2026] [:error] [pid 36892:tid 36964] [client 20.216.179.254:18480] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "acs7k0yj9S4G0ek3O4L6egAAAI0"]
[Tue Mar 31 11:12:20.136739 2026] [:error] [pid 36890:tid 36909] [client 20.216.179.254:31198] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "acs7lJ8FASPd_uH8z7eAkwAAAA4"]
[Tue Mar 31 11:12:20.657456 2026] [:error] [pid 6548:tid 6569] [client 20.216.179.254:39085] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "acs7lLgIz9HgMl9YwE7g5gAAAVM"]
[Tue Mar 31 11:12:21.590254 2026] [:error] [pid 6548:tid 6550] [client 20.216.179.254:37853] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "acs7lbgIz9HgMl9YwE7g7AAAAUA"]
[Tue Mar 31 11:12:22.235297 2026] [:error] [pid 6548:tid 6574] [client 20.216.179.254:52377] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "acs7lrgIz9HgMl9YwE7g8QAAAVg"]
[Tue Mar 31 11:12:23.167496 2026] [:error] [pid 36890:tid 36914] [client 20.216.179.254:18488] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "acs7l58FASPd_uH8z7eAmAAAABM"]
[Tue Mar 31 11:12:24.035399 2026] [:error] [pid 36982:tid 36991] [client 20.216.179.254:38491] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "acs7mPlMmeoQKN0r_GP5TgAAAMY"]
[Tue Mar 31 11:12:24.749086 2026] [:error] [pid 41421:tid 41426] [client 20.216.179.254:52407] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "acs7mBSaDjY9kKFtUQC0LQAAAQI"]
[Tue Mar 31 11:12:25.817488 2026] [:error] [pid 36890:tid 36915] [client 20.216.179.254:31845] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "acs7mZ8FASPd_uH8z7eAnwAAABQ"]
[Tue Mar 31 11:12:26.466899 2026] [:error] [pid 6548:tid 6552] [client 20.216.179.254:60125] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "acs7mrgIz9HgMl9YwE7g-wAAAUI"]
[Tue Mar 31 11:12:27.231884 2026] [:error] [pid 36982:tid 36990] [client 20.216.179.254:52380] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "acs7m_lMmeoQKN0r_GP5WAAAAMU"]
[Tue Mar 31 11:12:28.188175 2026] [:error] [pid 6548:tid 6552] [client 20.216.179.254:31819] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "acs7nLgIz9HgMl9YwE7hBQAAAUI"]
[Tue Mar 31 11:12:29.358496 2026] [:error] [pid 36890:tid 36897] [client 20.216.179.254:31180] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws49.php"] [unique_id "acs7nZ8FASPd_uH8z7eAogAAAAI"]
[Tue Mar 31 11:12:30.209785 2026] [:error] [pid 36890:tid 36908] [client 20.216.179.254:56932] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws49.php"] [unique_id "acs7np8FASPd_uH8z7eAowAAAA0"]
[Tue Mar 31 11:12:30.793085 2026] [:error] [pid 36891:tid 36927] [client 20.216.179.254:31849] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws49.php"] [unique_id "acs7npJhiMaJUqoqfl5XOAAAAEM"]
[Tue Mar 31 11:12:31.701416 2026] [:error] [pid 36982:tid 36988] [client 20.216.179.254:30582] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws49.php"] [unique_id "acs7n_lMmeoQKN0r_GP5ZAAAAMM"]
[Tue Mar 31 11:12:32.632660 2026] [:error] [pid 41421:tid 41446] [client 20.216.179.254:48576] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "acs7oBSaDjY9kKFtUQC0QAAAARY"]
[Tue Mar 31 11:12:33.361285 2026] [:error] [pid 41421:tid 41424] [client 20.216.179.254:26302] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "acs7oRSaDjY9kKFtUQC0RwAAAQA"]
[Tue Mar 31 11:12:33.962286 2026] [:error] [pid 6548:tid 6551] [client 20.216.179.254:30464] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "acs7obgIz9HgMl9YwE7hIgAAAUE"]
[Tue Mar 31 11:12:34.698205 2026] [:error] [pid 36892:tid 36962] [client 20.216.179.254:42370] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "acs7okyj9S4G0ek3O4L6nQAAAIs"]
[Tue Mar 31 11:12:35.344333 2026] [:error] [pid 41421:tid 41437] [client 20.216.179.254:36170] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "acs7oxSaDjY9kKFtUQC0UQAAAQ0"]
[Tue Mar 31 11:12:35.900280 2026] [:error] [pid 6548:tid 6558] [client 20.216.179.254:38512] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "acs7o7gIz9HgMl9YwE7hMwAAAUg"]
[Tue Mar 31 11:12:36.509212 2026] [:error] [pid 6548:tid 6555] [client 20.216.179.254:62586] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "acs7pLgIz9HgMl9YwE7hOAAAAUU"]
[Tue Mar 31 11:12:37.122578 2026] [:error] [pid 36890:tid 36903] [client 20.216.179.254:62540] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "acs7pZ8FASPd_uH8z7eAuAAAAAg"]
[Tue Mar 31 11:12:38.226931 2026] [:error] [pid 6548:tid 6574] [client 20.216.179.254:58859] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vanda.php"] [unique_id "acs7prgIz9HgMl9YwE7hPgAAAVg"]
[Tue Mar 31 11:12:39.162963 2026] [:error] [pid 36891:tid 36932] [client 20.216.179.254:57348] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vanda.php"] [unique_id "acs7p5JhiMaJUqoqfl5XQAAAAEg"]
[Tue Mar 31 11:12:39.920595 2026] [:error] [pid 36982:tid 36992] [client 20.216.179.254:48593] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vanda.php"] [unique_id "acs7p_lMmeoQKN0r_GP5fwAAAMc"]
[Tue Mar 31 11:12:40.999306 2026] [:error] [pid 41421:tid 41441] [client 20.216.179.254:56954] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vanda.php"] [unique_id "acs7qBSaDjY9kKFtUQC0WgAAARE"]
[Tue Mar 31 11:12:41.932057 2026] [:error] [pid 36890:tid 36898] [client 20.216.179.254:1795] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acs7qZ8FASPd_uH8z7eAxAAAAAM"]
[Tue Mar 31 11:12:42.725647 2026] [:error] [pid 36892:tid 36952] [client 20.216.179.254:56256] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acs7qkyj9S4G0ek3O4L6qQAAAIE"]
[Tue Mar 31 11:12:43.874968 2026] [:error] [pid 36890:tid 36913] [client 20.216.179.254:30580] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acs7q58FASPd_uH8z7eAxwAAABI"]
[Tue Mar 31 11:12:44.593889 2026] [:error] [pid 36890:tid 36911] [client 20.216.179.254:30562] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acs7rJ8FASPd_uH8z7eAygAAABA"]
[Tue Mar 31 11:12:45.685655 2026] [:error] [pid 6548:tid 6563] [client 20.216.179.254:31216] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "acs7rbgIz9HgMl9YwE7hawAAAU0"]
[Tue Mar 31 11:12:46.939950 2026] [:error] [pid 36982:tid 36990] [client 20.216.179.254:62574] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "acs7rvlMmeoQKN0r_GP5nwAAAMU"]
[Tue Mar 31 11:12:47.688864 2026] [:error] [pid 36982:tid 37003] [client 20.216.179.254:43741] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "acs7r_lMmeoQKN0r_GP5qAAAANI"]
[Tue Mar 31 11:12:48.438339 2026] [:error] [pid 36982:tid 36988] [client 20.216.179.254:31189] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "acs7sPlMmeoQKN0r_GP5rAAAAMM"]
[Tue Mar 31 11:12:49.123866 2026] [:error] [pid 36982:tid 37001] [client 20.216.179.254:58848] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acs7sflMmeoQKN0r_GP5sgAAANA"]
[Tue Mar 31 11:12:50.315394 2026] [:error] [pid 36890:tid 36902] [client 20.216.179.254:65153] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acs7sp8FASPd_uH8z7eA0AAAAAc"]
[Tue Mar 31 11:12:50.840483 2026] [:error] [pid 36982:tid 36998] [client 20.216.179.254:34196] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acs7svlMmeoQKN0r_GP5xAAAAM0"]
[Tue Mar 31 11:12:51.530709 2026] [:error] [pid 36982:tid 37004] [client 20.216.179.254:57380] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acs7s_lMmeoQKN0r_GP50QAAANM"]
[Tue Mar 31 11:12:52.283021 2026] [:error] [pid 6548:tid 6568] [client 20.216.179.254:58854] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "acs7tLgIz9HgMl9YwE7hfAAAAVI"]
[Tue Mar 31 11:12:52.885593 2026] [:error] [pid 36890:tid 36910] [client 20.216.179.254:1390] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "acs7tJ8FASPd_uH8z7eA2QAAAA8"]
[Tue Mar 31 11:12:53.544379 2026] [:error] [pid 36982:tid 36999] [client 20.216.179.254:30488] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "acs7tflMmeoQKN0r_GP55AAAAM4"]
[Tue Mar 31 11:12:54.301706 2026] [:error] [pid 6548:tid 6554] [client 20.216.179.254:65175] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "acs7trgIz9HgMl9YwE7hhAAAAUQ"]
[Tue Mar 31 11:12:55.233772 2026] [:error] [pid 6548:tid 6568] [client 20.216.179.254:10634] File does not exist: /usr/local/apache/htdocs/suspended-page/bnm.php
[Tue Mar 31 11:12:55.488675 2026] [:error] [pid 6548:tid 6550] [client 20.216.179.254:10634] File does not exist: /usr/local/apache/htdocs/suspended-page/aa21.php
[Tue Mar 31 11:12:55.731412 2026] [:error] [pid 6548:tid 6574] [client 20.216.179.254:10634] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Tue Mar 31 11:12:56.000613 2026] [:error] [pid 6548:tid 6560] [client 20.216.179.254:10634] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Tue Mar 31 11:12:56.241395 2026] [:error] [pid 6548:tid 6559] [client 20.216.179.254:10634] File does not exist: /usr/local/apache/htdocs/suspended-page/bootstrap.php
[Tue Mar 31 11:12:56.793758 2026] [:error] [pid 6548:tid 6552] [client 20.216.179.254:10634] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Tue Mar 31 11:12:57.033169 2026] [:error] [pid 6548:tid 6553] [client 20.216.179.254:10634] File does not exist: /usr/local/apache/htdocs/suspended-page/csv.php
[Tue Mar 31 11:12:57.278733 2026] [:error] [pid 6548:tid 6553] [client 20.216.179.254:10634] File does not exist: /usr/local/apache/htdocs/suspended-page/varb.php
[Tue Mar 31 11:12:57.517444 2026] [:error] [pid 6548:tid 6564] [client 20.216.179.254:10634] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Tue Mar 31 11:12:57.761381 2026] [:error] [pid 6548:tid 6571] [client 20.216.179.254:10634] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Tue Mar 31 11:12:57.996667 2026] [:error] [pid 6548:tid 6553] [client 20.216.179.254:10634] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "acs7ubgIz9HgMl9YwE7hpAAAAUM"]
[Tue Mar 31 11:12:58.643576 2026] [:error] [pid 36982:tid 36987] [client 20.216.179.254:57405] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "acs7uvlMmeoQKN0r_GP6CwAAAMI"]
[Tue Mar 31 11:12:59.332451 2026] [:error] [pid 36982:tid 37007] [client 20.216.179.254:48528] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "acs7u_lMmeoQKN0r_GP6FAAAANY"]
[Tue Mar 31 11:13:00.042450 2026] [:error] [pid 6548:tid 6570] [client 20.216.179.254:29842] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "acs7vLgIz9HgMl9YwE7hyQAAAVQ"]
[Tue Mar 31 11:13:00.808188 2026] [:error] [pid 36982:tid 37006] [client 20.216.179.254:40717] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "acs7vPlMmeoQKN0r_GP6KAAAANU"]
[Tue Mar 31 11:13:01.558502 2026] [:error] [pid 41421:tid 41431] [client 20.216.179.254:37369] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "acs7vRSaDjY9kKFtUQC0dgAAAQc"]
[Tue Mar 31 11:13:02.675416 2026] [:error] [pid 36982:tid 37002] [client 20.216.179.254:55588] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "acs7vvlMmeoQKN0r_GP6MwAAANE"]
[Tue Mar 31 11:13:03.393690 2026] [:error] [pid 36890:tid 36906] [client 20.216.179.254:18023] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "acs7v58FASPd_uH8z7eA8wAAAAs"]
[Tue Mar 31 11:13:04.404436 2026] [:error] [pid 41421:tid 41436] [client 20.216.179.254:65133] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "acs7wBSaDjY9kKFtUQC0fAAAAQw"]
[Tue Mar 31 11:13:05.259322 2026] [:error] [pid 36982:tid 37005] [client 20.216.179.254:55610] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "acs7wflMmeoQKN0r_GP6TAAAANQ"]
[Tue Mar 31 11:13:05.928866 2026] [:error] [pid 6548:tid 6574] [client 20.216.179.254:29827] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "acs7wbgIz9HgMl9YwE7h1AAAAVg"]
[Tue Mar 31 11:13:06.768659 2026] [:error] [pid 36890:tid 36898] [client 20.216.179.254:29856] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "acs7wp8FASPd_uH8z7eA-QAAAAM"]
[Tue Mar 31 11:13:07.371422 2026] [:error] [pid 36982:tid 36996] [client 20.216.179.254:1565] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "acs7w_lMmeoQKN0r_GP6WAAAAMs"]
[Tue Mar 31 11:13:07.944579 2026] [:error] [pid 36982:tid 37000] [client 20.216.179.254:33086] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "acs7w_lMmeoQKN0r_GP6XQAAAM8"]
[Tue Mar 31 11:13:08.550976 2026] [:error] [pid 36982:tid 36998] [client 20.216.179.254:18034] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "acs7xPlMmeoQKN0r_GP6YwAAAM0"]
[Tue Mar 31 11:13:09.167161 2026] [:error] [pid 6548:tid 6565] [client 20.216.179.254:61367] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "acs7xbgIz9HgMl9YwE7h3AAAAU8"]
[Tue Mar 31 19:15:09.602372 2026] [:error] [pid 36982:tid 36987] [client 172.161.1.56:65010] File does not exist: /usr/local/apache/htdocs/suspended-page/fffff.php
[Tue Mar 31 19:15:09.842808 2026] [:error] [pid 36982:tid 36991] [client 172.161.1.56:65010] File does not exist: /usr/local/apache/htdocs/suspended-page/w2025.php
[Tue Mar 31 19:15:10.082560 2026] [:error] [pid 36982:tid 36996] [client 172.161.1.56:65010] File does not exist: /usr/local/apache/htdocs/suspended-page/xdd.php
[Tue Mar 31 19:15:10.327719 2026] [:error] [pid 36982:tid 37002] [client 172.161.1.56:65010] File does not exist: /usr/local/apache/htdocs/suspended-page/wo.php
[Tue Mar 31 19:15:10.566639 2026] [:error] [pid 36982:tid 36998] [client 172.161.1.56:65010] File does not exist: /usr/local/apache/htdocs/suspended-page/wdone1.php
[Tue Mar 31 19:15:10.808222 2026] [:error] [pid 36982:tid 36996] [client 172.161.1.56:65010] File does not exist: /usr/local/apache/htdocs/suspended-page/ws79.php
[Tue Mar 31 19:15:11.050445 2026] [:error] [pid 36982:tid 37009] [client 172.161.1.56:65010] File does not exist: /usr/local/apache/htdocs/suspended-page/aee.php
[Tue Mar 31 19:15:11.289643 2026] [:error] [pid 36982:tid 37002] [client 172.161.1.56:65010] File does not exist: /usr/local/apache/htdocs/suspended-page/max.php
[Tue Mar 31 19:15:11.531071 2026] [:error] [pid 36982:tid 36998] [client 172.161.1.56:65010] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Tue Mar 31 19:15:11.771192 2026] [:error] [pid 36982:tid 37007] [client 172.161.1.56:65010] File does not exist: /usr/local/apache/htdocs/suspended-page/wglum1.php
[Tue Mar 31 19:15:12.010083 2026] [:error] [pid 36982:tid 36990] [client 172.161.1.56:65010] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "acuswPlMmeoQKN0r_GOKLQAAAMU"]
[Tue Mar 31 19:15:12.483474 2026] [:error] [pid 6548:tid 6556] [client 172.161.1.56:64964] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "acuswLgIz9HgMl9YwE4YTQAAAUY"]
[Tue Mar 31 19:15:12.961195 2026] [:error] [pid 36982:tid 37000] [client 172.161.1.56:65007] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "acuswPlMmeoQKN0r_GOKNAAAAM8"]
[Tue Mar 31 19:15:13.435775 2026] [:error] [pid 6548:tid 6570] [client 172.161.1.56:64906] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "acuswbgIz9HgMl9YwE4YUAAAAVQ"]
[Tue Mar 31 19:15:13.909993 2026] [:error] [pid 6548:tid 6569] [client 172.161.1.56:65015] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-true.php"] [unique_id "acuswbgIz9HgMl9YwE4YUwAAAVM"]
[Tue Mar 31 19:15:14.390627 2026] [:error] [pid 36982:tid 37007] [client 172.161.1.56:65019] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-true.php"] [unique_id "acuswvlMmeoQKN0r_GOKNQAAANY"]
[Tue Mar 31 19:15:14.866487 2026] [:error] [pid 36890:tid 36916] [client 172.161.1.56:64987] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-true.php"] [unique_id "acuswp8FASPd_uH8z7cnEQAAABU"]
[Tue Mar 31 19:15:15.341981 2026] [:error] [pid 36982:tid 36997] [client 172.161.1.56:64973] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-true.php"] [unique_id "acusw_lMmeoQKN0r_GOKOQAAAMw"]
[Tue Mar 31 19:15:15.824722 2026] [:error] [pid 6548:tid 6552] [client 172.161.1.56:64997] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws42.php"] [unique_id "acusw7gIz9HgMl9YwE4YVQAAAUI"]
[Tue Mar 31 19:15:16.298811 2026] [:error] [pid 6548:tid 6557] [client 172.161.1.56:64927] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws42.php"] [unique_id "acusxLgIz9HgMl9YwE4YWAAAAUc"]
[Tue Mar 31 19:15:16.790292 2026] [:error] [pid 36982:tid 37001] [client 172.161.1.56:65014] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws42.php"] [unique_id "acusxPlMmeoQKN0r_GOKOwAAANA"]
[Tue Mar 31 19:15:17.263633 2026] [:error] [pid 36982:tid 37004] [client 172.161.1.56:64970] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws42.php"] [unique_id "acusxflMmeoQKN0r_GOKPwAAANM"]
[Tue Mar 31 19:15:17.739639 2026] [:error] [pid 36982:tid 36988] [client 172.161.1.56:65019] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acusxflMmeoQKN0r_GOKRAAAAMM"]
[Tue Mar 31 19:15:18.219871 2026] [:error] [pid 36982:tid 36994] [client 172.161.1.56:64914] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acusxvlMmeoQKN0r_GOKRgAAAMk"]
[Tue Mar 31 19:15:18.692938 2026] [:error] [pid 6548:tid 6551] [client 172.161.1.56:65022] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acusxrgIz9HgMl9YwE4YYAAAAUE"]
[Tue Mar 31 19:15:19.169062 2026] [:error] [pid 41421:tid 41433] [client 172.161.1.56:64917] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acusxxSaDjY9kKFtUQCCzwAAAQk"]
[Tue Mar 31 19:15:19.647128 2026] [:error] [pid 36982:tid 36998] [client 172.161.1.56:64915] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "acusx_lMmeoQKN0r_GOKUwAAAM0"]
[Tue Mar 31 19:15:20.125811 2026] [:error] [pid 36982:tid 36995] [client 172.161.1.56:64912] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "acusyPlMmeoQKN0r_GOKVQAAAMo"]
[Tue Mar 31 19:15:20.640749 2026] [:error] [pid 41421:tid 41436] [client 172.161.1.56:5056] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "acusyBSaDjY9kKFtUQCC0gAAAQw"]
[Tue Mar 31 19:15:21.117799 2026] [:error] [pid 6548:tid 6564] [client 172.161.1.56:64900] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "acusybgIz9HgMl9YwE4YYwAAAU4"]
[Tue Mar 31 19:15:21.604948 2026] [:error] [pid 6548:tid 6570] [client 172.161.1.56:64981] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "acusybgIz9HgMl9YwE4YZgAAAVQ"]
[Tue Mar 31 19:15:22.081938 2026] [:error] [pid 36982:tid 36990] [client 172.161.1.56:65006] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "acusyvlMmeoQKN0r_GOKXwAAAMU"]
[Tue Mar 31 19:15:22.559610 2026] [:error] [pid 6548:tid 6567] [client 172.161.1.56:5058] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "acusyrgIz9HgMl9YwE4YaAAAAVE"]
[Tue Mar 31 19:15:23.033269 2026] [:error] [pid 36982:tid 36988] [client 172.161.1.56:64999] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "acusy_lMmeoQKN0r_GOKZAAAAMM"]
[Tue Mar 31 19:15:23.513612 2026] [:error] [pid 6548:tid 6568] [client 172.161.1.56:64929] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/north1.php"] [unique_id "acusy7gIz9HgMl9YwE4YawAAAVI"]
[Tue Mar 31 19:15:23.987619 2026] [:error] [pid 6548:tid 6555] [client 172.161.1.56:65018] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/north1.php"] [unique_id "acusy7gIz9HgMl9YwE4YbgAAAUU"]
[Tue Mar 31 19:15:24.461684 2026] [:error] [pid 36892:tid 36962] [client 172.161.1.56:65011] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/north1.php"] [unique_id "acuszEyj9S4G0ek3O4KDRwAAAIs"]
[Tue Mar 31 19:15:24.959881 2026] [:error] [pid 36982:tid 37006] [client 172.161.1.56:65021] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/north1.php"] [unique_id "acuszPlMmeoQKN0r_GOKagAAANU"]
[Tue Mar 31 19:15:25.433594 2026] [:error] [pid 6548:tid 6562] [client 172.161.1.56:65012] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eee.php"] [unique_id "acuszbgIz9HgMl9YwE4YcAAAAUw"]
[Tue Mar 31 19:15:25.914200 2026] [:error] [pid 36892:tid 36953] [client 172.161.1.56:64913] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eee.php"] [unique_id "acuszUyj9S4G0ek3O4KDSAAAAII"]
[Tue Mar 31 19:15:26.387949 2026] [:error] [pid 36892:tid 36968] [client 172.161.1.56:64963] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eee.php"] [unique_id "acuszkyj9S4G0ek3O4KDSQAAAJE"]
[Tue Mar 31 19:15:26.863663 2026] [:error] [pid 6548:tid 6563] [client 172.161.1.56:65013] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eee.php"] [unique_id "acuszrgIz9HgMl9YwE4YeAAAAU0"]
[Tue Mar 31 19:15:27.335712 2026] [:error] [pid 41421:tid 41443] [client 172.161.1.56:64902] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "acuszxSaDjY9kKFtUQCC4AAAARM"]
[Tue Mar 31 19:15:27.817643 2026] [:error] [pid 36891:tid 36926] [client 172.161.1.56:5060] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "acusz5JhiMaJUqoqfl7FtgAAAEI"]
[Tue Mar 31 19:15:28.295713 2026] [:error] [pid 36890:tid 36916] [client 172.161.1.56:64982] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "acus0J8FASPd_uH8z7cnGgAAABU"]
[Tue Mar 31 19:15:28.777766 2026] [:error] [pid 36892:tid 36959] [client 172.161.1.56:64925] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "acus0Eyj9S4G0ek3O4KDTAAAAIg"]
[Tue Mar 31 19:15:29.256646 2026] [:error] [pid 36892:tid 36960] [client 172.161.1.56:65002] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acus0Uyj9S4G0ek3O4KDTgAAAIk"]
[Tue Mar 31 19:15:29.735026 2026] [:error] [pid 41421:tid 41439] [client 172.161.1.56:64904] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acus0RSaDjY9kKFtUQCC5QAAAQ8"]
[Tue Mar 31 19:15:30.207306 2026] [:error] [pid 36892:tid 36961] [client 172.161.1.56:64980] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acus0kyj9S4G0ek3O4KDUgAAAIo"]
[Tue Mar 31 19:15:30.688001 2026] [:error] [pid 36892:tid 36964] [client 172.161.1.56:64968] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acus0kyj9S4G0ek3O4KDUwAAAI0"]
[Tue Mar 31 19:15:31.168331 2026] [:error] [pid 6548:tid 6566] [client 172.161.1.56:64966] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "acus07gIz9HgMl9YwE4YfwAAAVA"]
[Tue Mar 31 19:15:31.641862 2026] [:error] [pid 36892:tid 36975] [client 172.161.1.56:64965] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "acus00yj9S4G0ek3O4KDVgAAAJg"]
[Tue Mar 31 19:15:32.138953 2026] [:error] [pid 36982:tid 37000] [client 172.161.1.56:64916] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "acus1PlMmeoQKN0r_GOKcQAAAM8"]
[Tue Mar 31 19:15:32.615500 2026] [:error] [pid 36982:tid 36985] [client 172.161.1.56:65000] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "acus1PlMmeoQKN0r_GOKcgAAAMA"]
[Tue Mar 31 19:15:33.093022 2026] [:error] [pid 36982:tid 36992] [client 172.161.1.56:64937] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gpt-sh.php"] [unique_id "acus1flMmeoQKN0r_GOKeAAAAMc"]
[Tue Mar 31 19:15:33.570596 2026] [:error] [pid 6548:tid 6556] [client 172.161.1.56:64978] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gpt-sh.php"] [unique_id "acus1bgIz9HgMl9YwE4YggAAAUY"]
[Tue Mar 31 19:15:34.045825 2026] [:error] [pid 36890:tid 36898] [client 172.161.1.56:64919] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gpt-sh.php"] [unique_id "acus1p8FASPd_uH8z7cnLgAAAAM"]
[Tue Mar 31 19:15:34.519508 2026] [:error] [pid 36890:tid 36913] [client 172.161.1.56:64911] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gpt-sh.php"] [unique_id "acus1p8FASPd_uH8z7cnMAAAABI"]
[Tue Mar 31 19:15:35.013696 2026] [:error] [pid 6548:tid 6550] [client 172.161.1.56:5006] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "acus17gIz9HgMl9YwE4YhwAAAUA"]
[Tue Mar 31 19:15:35.492502 2026] [:error] [pid 6548:tid 6567] [client 172.161.1.56:64946] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "acus17gIz9HgMl9YwE4YiAAAAVE"]
[Tue Mar 31 19:15:35.966779 2026] [:error] [pid 36892:tid 36975] [client 172.161.1.56:5084] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "acus10yj9S4G0ek3O4KDXgAAAJg"]
[Tue Mar 31 19:15:36.441456 2026] [:error] [pid 36890:tid 36895] [client 172.161.1.56:64976] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "acus2J8FASPd_uH8z7cnMgAAAAA"]
[Tue Mar 31 19:15:36.923107 2026] [:error] [pid 6548:tid 6559] [client 172.161.1.56:64998] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "acus2LgIz9HgMl9YwE4YkAAAAUk"]
[Tue Mar 31 19:15:37.407299 2026] [:error] [pid 36890:tid 36908] [client 172.161.1.56:64948] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "acus2Z8FASPd_uH8z7cnNgAAAA0"]
[Tue Mar 31 19:15:37.882798 2026] [:error] [pid 36891:tid 36940] [client 172.161.1.56:5068] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "acus2ZJhiMaJUqoqfl7FuwAAAFA"]
[Tue Mar 31 19:15:38.406764 2026] [:error] [pid 41421:tid 41438] [client 172.161.1.56:64903] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "acus2hSaDjY9kKFtUQCC8gAAAQ4"]
[Tue Mar 31 19:15:38.879465 2026] [:error] [pid 41421:tid 41428] [client 172.161.1.56:64908] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wander.php"] [unique_id "acus2hSaDjY9kKFtUQCC8wAAAQQ"]
[Tue Mar 31 19:15:39.367671 2026] [:error] [pid 36891:tid 36928] [client 172.161.1.56:64905] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wander.php"] [unique_id "acus25JhiMaJUqoqfl7FvQAAAEQ"]
[Tue Mar 31 19:15:39.847719 2026] [:error] [pid 6548:tid 6553] [client 172.161.1.56:64994] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wander.php"] [unique_id "acus27gIz9HgMl9YwE4YlgAAAUM"]
[Tue Mar 31 19:15:40.323275 2026] [:error] [pid 6548:tid 6568] [client 172.161.1.56:64931] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wander.php"] [unique_id "acus3LgIz9HgMl9YwE4YmgAAAVI"]
[Tue Mar 31 19:15:40.802973 2026] [:error] [pid 6548:tid 6562] [client 172.161.1.56:5113] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/h02ugyh.php"] [unique_id "acus3LgIz9HgMl9YwE4YoQAAAUw"]
[Tue Mar 31 19:15:41.285820 2026] [:error] [pid 6548:tid 6565] [client 172.161.1.56:64984] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/h02ugyh.php"] [unique_id "acus3bgIz9HgMl9YwE4YowAAAU8"]
[Tue Mar 31 19:15:41.765404 2026] [:error] [pid 6548:tid 6557] [client 172.161.1.56:64935] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/h02ugyh.php"] [unique_id "acus3bgIz9HgMl9YwE4YpwAAAUc"]
[Tue Mar 31 19:15:42.289198 2026] [:error] [pid 6548:tid 6560] [client 172.161.1.56:5007] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/h02ugyh.php"] [unique_id "acus3rgIz9HgMl9YwE4YqgAAAUo"]
[Tue Mar 31 19:15:42.762298 2026] [:error] [pid 6548:tid 6567] [client 172.161.1.56:65008] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ad.php"] [unique_id "acus3rgIz9HgMl9YwE4YrQAAAVE"]
[Tue Mar 31 19:15:43.241901 2026] [:error] [pid 41421:tid 41439] [client 172.161.1.56:64971] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ad.php"] [unique_id "acus3xSaDjY9kKFtUQCC_AAAAQ8"]
[Tue Mar 31 19:15:43.727350 2026] [:error] [pid 41421:tid 41444] [client 172.161.1.56:65023] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ad.php"] [unique_id "acus3xSaDjY9kKFtUQCC_wAAARQ"]
[Tue Mar 31 19:15:44.203208 2026] [:error] [pid 6548:tid 6566] [client 172.161.1.56:64940] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ad.php"] [unique_id "acus4LgIz9HgMl9YwE4YsQAAAVA"]
[Tue Mar 31 19:15:44.702700 2026] [:error] [pid 36890:tid 36918] [client 172.161.1.56:5062] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z60.php"] [unique_id "acus4J8FASPd_uH8z7cnPgAAABc"]
[Tue Mar 31 19:15:45.183121 2026] [:error] [pid 36890:tid 36899] [client 172.161.1.56:65020] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z60.php"] [unique_id "acus4Z8FASPd_uH8z7cnQQAAAAQ"]
[Tue Mar 31 19:15:45.675915 2026] [:error] [pid 6548:tid 6571] [client 172.161.1.56:64983] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z60.php"] [unique_id "acus4bgIz9HgMl9YwE4YtgAAAVU"]
[Tue Mar 31 19:15:46.154574 2026] [:error] [pid 41421:tid 41447] [client 172.161.1.56:5063] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z60.php"] [unique_id "acus4hSaDjY9kKFtUQCDBQAAARc"]
[Tue Mar 31 19:15:46.646311 2026] [:error] [pid 36892:tid 36968] [client 172.161.1.56:64977] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "acus4kyj9S4G0ek3O4KDagAAAJE"]
[Tue Mar 31 19:15:47.184617 2026] [:error] [pid 36892:tid 36972] [client 172.161.1.56:64990] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "acus40yj9S4G0ek3O4KDawAAAJU"]
[Tue Mar 31 19:15:47.686686 2026] [:error] [pid 41421:tid 41442] [client 172.161.1.56:65003] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "acus4xSaDjY9kKFtUQCDCQAAARI"]
[Tue Mar 31 19:15:48.184973 2026] [:error] [pid 36890:tid 36906] [client 172.161.1.56:64967] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "acus5J8FASPd_uH8z7cnRQAAAAs"]
[Tue Mar 31 19:15:48.745493 2026] [:error] [pid 36982:tid 36986] [client 172.161.1.56:5065] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acus5PlMmeoQKN0r_GOKfwAAAME"]
[Tue Mar 31 19:15:49.235418 2026] [:error] [pid 36982:tid 36998] [client 172.161.1.56:64941] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acus5flMmeoQKN0r_GOKhAAAAM0"]
[Tue Mar 31 19:15:49.711795 2026] [:error] [pid 36891:tid 36928] [client 172.161.1.56:5088] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acus5ZJhiMaJUqoqfl7FyQAAAEQ"]
[Tue Mar 31 19:15:50.202350 2026] [:error] [pid 36890:tid 36911] [client 172.161.1.56:5076] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acus5p8FASPd_uH8z7cnSAAAABA"]
[Tue Mar 31 19:15:50.699374 2026] [:error] [pid 36891:tid 36944] [client 172.161.1.56:64930] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sql.php"] [unique_id "acus5pJhiMaJUqoqfl7FywAAAFQ"]
[Tue Mar 31 19:15:51.201290 2026] [:error] [pid 36982:tid 36991] [client 172.161.1.56:64923] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sql.php"] [unique_id "acus5_lMmeoQKN0r_GOKiAAAAMY"]
[Tue Mar 31 19:15:51.712056 2026] [:error] [pid 36982:tid 36996] [client 172.161.1.56:64991] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sql.php"] [unique_id "acus5_lMmeoQKN0r_GOKjAAAAMs"]
[Tue Mar 31 19:15:52.223042 2026] [:error] [pid 36982:tid 37006] [client 172.161.1.56:5107] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sql.php"] [unique_id "acus6PlMmeoQKN0r_GOKjwAAANU"]
[Tue Mar 31 19:15:52.724593 2026] [:error] [pid 36982:tid 37004] [client 172.161.1.56:5086] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "acus6PlMmeoQKN0r_GOKlAAAANM"]
[Tue Mar 31 19:15:53.222244 2026] [:error] [pid 6548:tid 6550] [client 172.161.1.56:64944] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "acus6bgIz9HgMl9YwE4Y0gAAAUA"]
[Tue Mar 31 19:15:53.731937 2026] [:error] [pid 36982:tid 36997] [client 172.161.1.56:5095] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "acus6flMmeoQKN0r_GOKlgAAAMw"]
[Tue Mar 31 19:15:54.210310 2026] [:error] [pid 6548:tid 6568] [client 172.161.1.56:64942] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "acus6rgIz9HgMl9YwE4Y1wAAAVI"]
[Tue Mar 31 19:15:54.692868 2026] [:error] [pid 36982:tid 36996] [client 172.161.1.56:64936] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "acus6vlMmeoQKN0r_GOKmAAAAMs"]
[Tue Mar 31 19:15:55.166605 2026] [:error] [pid 6548:tid 6562] [client 172.161.1.56:64921] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "acus67gIz9HgMl9YwE4Y2gAAAUw"]
[Tue Mar 31 19:15:55.643748 2026] [:error] [pid 6548:tid 6564] [client 172.161.1.56:64897] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "acus67gIz9HgMl9YwE4Y3wAAAU4"]
[Tue Mar 31 19:15:56.132246 2026] [:error] [pid 36982:tid 36999] [client 172.161.1.56:64899] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "acus7PlMmeoQKN0r_GOKoAAAAM4"]
[Tue Mar 31 19:15:56.608462 2026] [:error] [pid 36982:tid 37003] [client 172.161.1.56:64939] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "acus7PlMmeoQKN0r_GOKowAAANI"]
[Tue Mar 31 19:15:57.087472 2026] [:error] [pid 41421:tid 41429] [client 172.161.1.56:64961] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "acus7RSaDjY9kKFtUQCDEwAAAQU"]
[Tue Mar 31 19:15:57.586489 2026] [:error] [pid 41421:tid 41437] [client 172.161.1.56:64996] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "acus7RSaDjY9kKFtUQCDFQAAAQ0"]
[Tue Mar 31 19:15:58.065186 2026] [:error] [pid 36982:tid 37004] [client 172.161.1.56:5094] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "acus7vlMmeoQKN0r_GOKqAAAANM"]
[Tue Mar 31 19:15:58.538679 2026] [:error] [pid 36892:tid 36975] [client 172.161.1.56:5103] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "acus7kyj9S4G0ek3O4KDcwAAAJg"]
[Tue Mar 31 19:15:59.011431 2026] [:error] [pid 36982:tid 36999] [client 172.161.1.56:64955] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "acus7_lMmeoQKN0r_GOKrAAAAM4"]
[Tue Mar 31 19:15:59.484157 2026] [:error] [pid 36890:tid 36917] [client 172.161.1.56:65004] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "acus758FASPd_uH8z7cnTgAAABY"]
[Tue Mar 31 19:15:59.961037 2026] [:error] [pid 36982:tid 37005] [client 172.161.1.56:64896] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "acus7_lMmeoQKN0r_GOKsAAAANQ"]
[Tue Mar 31 19:16:00.441430 2026] [:error] [pid 36982:tid 36985] [client 172.161.1.56:64986] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uang.php"] [unique_id "acus8PlMmeoQKN0r_GOKtgAAAMA"]
[Tue Mar 31 19:16:00.919567 2026] [:error] [pid 36982:tid 37009] [client 172.161.1.56:5090] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uang.php"] [unique_id "acus8PlMmeoQKN0r_GOKuQAAANg"]
[Tue Mar 31 19:16:01.392898 2026] [:error] [pid 36982:tid 36986] [client 172.161.1.56:64909] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uang.php"] [unique_id "acus8flMmeoQKN0r_GOKugAAAME"]
[Tue Mar 31 19:16:01.867786 2026] [:error] [pid 6548:tid 6571] [client 172.161.1.56:64898] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uang.php"] [unique_id "acus8bgIz9HgMl9YwE4Y5AAAAVU"]
[Tue Mar 31 19:16:02.342924 2026] [:error] [pid 36982:tid 37004] [client 172.161.1.56:64932] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/save.php"] [unique_id "acus8vlMmeoQKN0r_GOKvwAAANM"]
[Tue Mar 31 19:16:02.816496 2026] [:error] [pid 6548:tid 6558] [client 172.161.1.56:64920] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/save.php"] [unique_id "acus8rgIz9HgMl9YwE4Y5QAAAUg"]
[Tue Mar 31 19:16:03.295619 2026] [:error] [pid 36982:tid 36994] [client 172.161.1.56:64956] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/save.php"] [unique_id "acus8_lMmeoQKN0r_GOKxQAAAMk"]
[Tue Mar 31 19:16:03.769903 2026] [:error] [pid 6548:tid 6568] [client 172.161.1.56:64969] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/save.php"] [unique_id "acus87gIz9HgMl9YwE4Y7gAAAVI"]
[Tue Mar 31 19:16:04.244189 2026] [:error] [pid 6548:tid 6561] [client 172.161.1.56:64957] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "acus9LgIz9HgMl9YwE4Y7wAAAUs"]
[Tue Mar 31 19:16:04.718455 2026] [:error] [pid 36982:tid 36985] [client 172.161.1.56:64950] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "acus9PlMmeoQKN0r_GOKzAAAAMA"]
[Tue Mar 31 19:16:05.191257 2026] [:error] [pid 6548:tid 6566] [client 172.161.1.56:5106] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "acus9bgIz9HgMl9YwE4Y8gAAAVA"]
[Tue Mar 31 19:16:05.663978 2026] [:error] [pid 41421:tid 41442] [client 172.161.1.56:64901] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "acus9RSaDjY9kKFtUQCDJAAAARI"]
[Tue Mar 31 19:16:06.135551 2026] [:error] [pid 36982:tid 36996] [client 172.161.1.56:5074] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "acus9vlMmeoQKN0r_GOK0QAAAMs"]
[Tue Mar 31 19:16:06.607314 2026] [:error] [pid 36982:tid 37001] [client 172.161.1.56:64943] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "acus9vlMmeoQKN0r_GOK0gAAANA"]
[Tue Mar 31 19:16:07.081782 2026] [:error] [pid 36982:tid 36999] [client 172.161.1.56:5096] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "acus9_lMmeoQKN0r_GOK1QAAAM4"]
[Tue Mar 31 19:16:07.556115 2026] [:error] [pid 36982:tid 36985] [client 172.161.1.56:64995] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "acus9_lMmeoQKN0r_GOK1wAAAMA"]
[Tue Mar 31 19:16:08.034209 2026] [:error] [pid 36982:tid 36990] [client 172.161.1.56:5089] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "acus-PlMmeoQKN0r_GOK2gAAAMU"]
[Tue Mar 31 19:16:08.508183 2026] [:error] [pid 36892:tid 36954] [client 172.161.1.56:64938] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "acus-Eyj9S4G0ek3O4KDfgAAAIM"]
[Tue Mar 31 19:16:08.980486 2026] [:error] [pid 36892:tid 36968] [client 172.161.1.56:5016] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "acus-Eyj9S4G0ek3O4KDggAAAJE"]
[Tue Mar 31 19:16:09.456688 2026] [:error] [pid 6548:tid 6560] [client 172.161.1.56:65009] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "acus-bgIz9HgMl9YwE4Y9gAAAUo"]
[Tue Mar 31 19:16:09.930928 2026] [:error] [pid 36890:tid 36902] [client 172.161.1.56:64960] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "acus-Z8FASPd_uH8z7cnVgAAAAc"]
[Tue Mar 31 19:16:10.407863 2026] [:error] [pid 36891:tid 36946] [client 172.161.1.56:64907] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "acus-pJhiMaJUqoqfl7FzwAAAFY"]
[Tue Mar 31 19:16:10.896103 2026] [:error] [pid 36982:tid 37009] [client 172.161.1.56:64985] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "acus-vlMmeoQKN0r_GOK3wAAANg"]
[Tue Mar 31 19:16:11.371562 2026] [:error] [pid 6548:tid 6550] [client 172.161.1.56:64992] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Tue Mar 31 19:16:11.611981 2026] [:error] [pid 6548:tid 6564] [client 172.161.1.56:64992] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Tue Mar 31 19:16:11.850518 2026] [:error] [pid 6548:tid 6556] [client 172.161.1.56:64992] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Tue Mar 31 19:16:12.089645 2026] [:error] [pid 6548:tid 6552] [client 172.161.1.56:64992] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Tue Mar 31 19:16:12.328283 2026] [:error] [pid 6548:tid 6561] [client 172.161.1.56:64992] File does not exist: /usr/local/apache/htdocs/suspended-page/sweg.php
[Tue Mar 31 19:16:12.567464 2026] [:error] [pid 6548:tid 6562] [client 172.161.1.56:64992] File does not exist: /usr/local/apache/htdocs/suspended-page/xpwer1.php
[Tue Mar 31 19:16:13.051452 2026] [:error] [pid 6548:tid 6562] [client 172.161.1.56:64992] File does not exist: /usr/local/apache/htdocs/suspended-page/ws40.php
[Tue Mar 31 19:16:13.292170 2026] [:error] [pid 6548:tid 6554] [client 172.161.1.56:64992] File does not exist: /usr/local/apache/htdocs/suspended-page/albin.php
[Tue Mar 31 19:16:13.531607 2026] [:error] [pid 6548:tid 6567] [client 172.161.1.56:64992] File does not exist: /usr/local/apache/htdocs/suspended-page/awh.php
[Tue Mar 31 19:16:13.772076 2026] [:error] [pid 6548:tid 6553] [client 172.161.1.56:64992] File does not exist: /usr/local/apache/htdocs/suspended-page/shellerr.php
[Tue Mar 31 19:16:14.012878 2026] [:error] [pid 6548:tid 6559] [client 172.161.1.56:64992] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-scanner.php
[Tue Mar 31 19:16:14.249052 2026] [:error] [pid 6548:tid 6558] [client 172.161.1.56:64992] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "acus_rgIz9HgMl9YwE4ZDQAAAUg"]
[Tue Mar 31 19:16:14.907608 2026] [:error] [pid 36892:tid 36972] [client 172.161.1.56:5100] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "acus_kyj9S4G0ek3O4KDhgAAAJU"]
[Tue Mar 31 19:16:15.383019 2026] [:error] [pid 41421:tid 41426] [client 172.161.1.56:5119] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "acus_xSaDjY9kKFtUQCDMAAAAQI"]
[Tue Mar 31 19:16:15.862339 2026] [:error] [pid 6548:tid 6573] [client 172.161.1.56:5072] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "acus_7gIz9HgMl9YwE4ZEgAAAVc"]
[Tue Mar 31 19:16:16.336470 2026] [:error] [pid 36982:tid 36997] [client 172.161.1.56:64989] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/to.php"] [unique_id "acutAPlMmeoQKN0r_GOK7wAAAMw"]
[Tue Mar 31 19:16:16.811903 2026] [:error] [pid 36982:tid 36986] [client 172.161.1.56:5079] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/to.php"] [unique_id "acutAPlMmeoQKN0r_GOK8QAAAME"]
[Tue Mar 31 19:16:17.316580 2026] [:error] [pid 36982:tid 36992] [client 172.161.1.56:64910] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/to.php"] [unique_id "acutAflMmeoQKN0r_GOK9AAAAMc"]
[Tue Mar 31 19:16:17.812506 2026] [:error] [pid 6548:tid 6559] [client 172.161.1.56:65016] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/to.php"] [unique_id "acutAbgIz9HgMl9YwE4ZFwAAAUk"]
[Tue Mar 31 19:16:18.285666 2026] [:error] [pid 36890:tid 36907] [client 172.161.1.56:5114] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acutAp8FASPd_uH8z7cnYQAAAAw"]
[Tue Mar 31 19:16:18.759086 2026] [:error] [pid 41421:tid 41440] [client 172.161.1.56:5070] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acutAhSaDjY9kKFtUQCDNgAAARA"]
[Tue Mar 31 19:16:19.232793 2026] [:error] [pid 36891:tid 36925] [client 172.161.1.56:5092] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acutA5JhiMaJUqoqfl7F1wAAAEE"]
[Tue Mar 31 19:16:19.708921 2026] [:error] [pid 6548:tid 6573] [client 172.161.1.56:4998] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acutA7gIz9HgMl9YwE4ZIgAAAVc"]
[Tue Mar 31 19:16:20.183671 2026] [:error] [pid 36890:tid 36910] [client 172.161.1.56:64962] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ant.php"] [unique_id "acutBJ8FASPd_uH8z7cnZAAAAA8"]
[Tue Mar 31 19:16:20.657782 2026] [:error] [pid 36982:tid 36995] [client 172.161.1.56:5035] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ant.php"] [unique_id "acutBPlMmeoQKN0r_GOK9wAAAMo"]
[Tue Mar 31 19:16:21.131394 2026] [:error] [pid 36892:tid 36971] [client 172.161.1.56:5099] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ant.php"] [unique_id "acutBUyj9S4G0ek3O4KDiwAAAJQ"]
[Tue Mar 31 19:16:21.605624 2026] [:error] [pid 36891:tid 36938] [client 172.161.1.56:5013] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ant.php"] [unique_id "acutBZJhiMaJUqoqfl7F3wAAAE4"]
[Tue Mar 31 19:16:22.081689 2026] [:error] [pid 6548:tid 6574] [client 172.161.1.56:64947] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "acutBrgIz9HgMl9YwE4ZKwAAAVg"]
[Tue Mar 31 19:16:22.555319 2026] [:error] [pid 6548:tid 6567] [client 172.161.1.56:64924] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "acutBrgIz9HgMl9YwE4ZLQAAAVE"]
[Tue Mar 31 19:16:23.036081 2026] [:error] [pid 36890:tid 36916] [client 172.161.1.56:5104] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "acutB58FASPd_uH8z7cnZwAAABU"]
[Tue Mar 31 19:16:23.513622 2026] [:error] [pid 36890:tid 36915] [client 172.161.1.56:5085] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "acutB58FASPd_uH8z7cnawAAABQ"]
[Tue Mar 31 19:16:24.049345 2026] [:error] [pid 36890:tid 36917] [client 172.161.1.56:65017] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "acutCJ8FASPd_uH8z7cnbgAAABY"]
[Tue Mar 31 19:16:24.567003 2026] [:error] [pid 36890:tid 36912] [client 172.161.1.56:5116] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "acutCJ8FASPd_uH8z7cnbwAAABE"]
[Tue Mar 31 19:16:25.046680 2026] [:error] [pid 36890:tid 36906] [client 172.161.1.56:4992] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "acutCZ8FASPd_uH8z7cncQAAAAs"]
[Tue Mar 31 19:16:25.581649 2026] [:error] [pid 36890:tid 36898] [client 172.161.1.56:5066] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "acutCZ8FASPd_uH8z7cndQAAAAM"]
[Tue Mar 31 19:16:26.705749 2026] [:error] [pid 6548:tid 6559] [client 172.161.1.56:5064] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "acutCrgIz9HgMl9YwE4ZOQAAAUk"]
[Tue Mar 31 19:16:27.191029 2026] [:error] [pid 36982:tid 36998] [client 172.161.1.56:64988] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "acutC_lMmeoQKN0r_GOK_AAAAM0"]
[Tue Mar 31 19:16:27.666589 2026] [:error] [pid 36982:tid 36993] [client 172.161.1.56:4995] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "acutC_lMmeoQKN0r_GOK_QAAAMg"]
[Tue Mar 31 19:16:28.160036 2026] [:error] [pid 41421:tid 41444] [client 172.161.1.56:64952] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classgoto24.php"] [unique_id "acutDBSaDjY9kKFtUQCDPAAAARQ"]
[Tue Mar 31 19:16:28.636409 2026] [:error] [pid 6548:tid 6550] [client 172.161.1.56:5000] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classgoto24.php"] [unique_id "acutDLgIz9HgMl9YwE4ZQAAAAUA"]
[Tue Mar 31 19:16:29.115524 2026] [:error] [pid 41421:tid 41432] [client 172.161.1.56:5045] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classgoto24.php"] [unique_id "acutDRSaDjY9kKFtUQCDPQAAAQg"]
[Tue Mar 31 19:16:29.591911 2026] [:error] [pid 36982:tid 36987] [client 172.161.1.56:5081] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classgoto24.php"] [unique_id "acutDflMmeoQKN0r_GOLAgAAAMI"]
[Tue Mar 31 19:16:30.071581 2026] [:error] [pid 36982:tid 37009] [client 172.161.1.56:4931] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "acutDvlMmeoQKN0r_GOLAwAAANg"]
[Tue Mar 31 19:16:30.550808 2026] [:error] [pid 36892:tid 36953] [client 172.161.1.56:5075] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "acutDkyj9S4G0ek3O4KDlgAAAII"]
[Tue Mar 31 19:16:31.026720 2026] [:error] [pid 6548:tid 6565] [client 172.161.1.56:64945] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "acutD7gIz9HgMl9YwE4ZSAAAAU8"]
[Tue Mar 31 19:16:31.502004 2026] [:error] [pid 41421:tid 41424] [client 172.161.1.56:64953] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "acutDxSaDjY9kKFtUQCDQgAAAQA"]
[Tue Mar 31 19:16:31.976888 2026] [:error] [pid 36890:tid 36914] [client 172.161.1.56:5098] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws43.php"] [unique_id "acutD58FASPd_uH8z7cnfwAAABM"]
[Tue Mar 31 19:16:32.453752 2026] [:error] [pid 6548:tid 6550] [client 172.161.1.56:4928] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws43.php"] [unique_id "acutELgIz9HgMl9YwE4ZSQAAAUA"]
[Tue Mar 31 19:16:32.928542 2026] [:error] [pid 6548:tid 6568] [client 172.161.1.56:64922] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws43.php"] [unique_id "acutELgIz9HgMl9YwE4ZSwAAAVI"]
[Tue Mar 31 19:16:33.404635 2026] [:error] [pid 41421:tid 41440] [client 172.161.1.56:64934] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws43.php"] [unique_id "acutERSaDjY9kKFtUQCDSQAAARA"]
[Tue Mar 31 19:16:33.881544 2026] [:error] [pid 36982:tid 36993] [client 172.161.1.56:5010] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gec.php"] [unique_id "acutEflMmeoQKN0r_GOLCwAAAMg"]
[Tue Mar 31 19:16:34.357144 2026] [:error] [pid 36982:tid 36996] [client 172.161.1.56:5087] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gec.php"] [unique_id "acutEvlMmeoQKN0r_GOLDwAAAMs"]
[Tue Mar 31 19:16:34.836554 2026] [:error] [pid 36892:tid 36973] [client 172.161.1.56:64926] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gec.php"] [unique_id "acutEkyj9S4G0ek3O4KDmwAAAJY"]
[Tue Mar 31 19:16:35.309484 2026] [:error] [pid 36892:tid 36951] [client 172.161.1.56:5105] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gec.php"] [unique_id "acutE0yj9S4G0ek3O4KDnQAAAIA"]
[Tue Mar 31 19:16:35.808594 2026] [:error] [pid 36892:tid 36960] [client 172.161.1.56:5109] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acutE0yj9S4G0ek3O4KDnwAAAIk"]
[Tue Mar 31 19:16:36.283706 2026] [:error] [pid 6548:tid 6553] [client 172.161.1.56:4935] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acutFLgIz9HgMl9YwE4ZUgAAAUM"]
[Tue Mar 31 19:16:36.794856 2026] [:error] [pid 36890:tid 36915] [client 172.161.1.56:5057] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acutFJ8FASPd_uH8z7cngwAAABQ"]
[Tue Mar 31 19:16:37.269862 2026] [:error] [pid 36982:tid 37008] [client 172.161.1.56:5073] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acutFflMmeoQKN0r_GOLHAAAANc"]
[Tue Mar 31 19:16:37.742036 2026] [:error] [pid 36982:tid 36989] [client 172.161.1.56:5077] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "acutFflMmeoQKN0r_GOLIAAAAMQ"]
[Tue Mar 31 19:16:38.233579 2026] [:error] [pid 36892:tid 36952] [client 172.161.1.56:5032] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "acutFkyj9S4G0ek3O4KDpQAAAIE"]
[Tue Mar 31 19:16:38.785954 2026] [:error] [pid 36982:tid 36993] [client 172.161.1.56:64933] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "acutFvlMmeoQKN0r_GOLIwAAAMg"]
[Tue Mar 31 19:16:39.312301 2026] [:error] [pid 36982:tid 36999] [client 172.161.1.56:5041] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "acutF_lMmeoQKN0r_GOLJwAAAM4"]
[Tue Mar 31 19:16:39.784853 2026] [:error] [pid 36890:tid 36918] [client 172.161.1.56:4993] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/size.php"] [unique_id "acutF58FASPd_uH8z7cniQAAABc"]
[Tue Mar 31 19:16:40.258971 2026] [:error] [pid 36982:tid 36993] [client 172.161.1.56:64993] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/size.php"] [unique_id "acutGPlMmeoQKN0r_GOLLQAAAMg"]
[Tue Mar 31 19:16:40.733233 2026] [:error] [pid 36982:tid 37007] [client 172.161.1.56:5061] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/size.php"] [unique_id "acutGPlMmeoQKN0r_GOLLwAAANY"]
[Tue Mar 31 19:16:41.207665 2026] [:error] [pid 36982:tid 37009] [client 172.161.1.56:5093] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/size.php"] [unique_id "acutGflMmeoQKN0r_GOLNAAAANg"]
[Tue Mar 31 19:16:41.681660 2026] [:error] [pid 36982:tid 36996] [client 172.161.1.56:5034] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "acutGflMmeoQKN0r_GOLNwAAAMs"]
[Tue Mar 31 19:16:42.250844 2026] [:error] [pid 36982:tid 37003] [client 172.161.1.56:5111] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "acutGvlMmeoQKN0r_GOLOwAAANI"]
[Tue Mar 31 19:16:42.770676 2026] [:error] [pid 6548:tid 6570] [client 172.161.1.56:5038] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "acutGrgIz9HgMl9YwE4ZXwAAAVQ"]
[Tue Mar 31 19:16:43.318313 2026] [:error] [pid 36891:tid 36937] [client 172.161.1.56:5015] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "acutG5JhiMaJUqoqfl7F-wAAAE0"]
[Tue Mar 31 19:16:44.101962 2026] [:error] [pid 36890:tid 36908] [client 172.161.1.56:64974] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "acutHJ8FASPd_uH8z7cnjgAAAA0"]
[Tue Mar 31 19:16:44.697857 2026] [:error] [pid 36890:tid 36902] [client 172.161.1.56:5027] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "acutHJ8FASPd_uH8z7cnkwAAAAc"]
[Tue Mar 31 19:16:45.182861 2026] [:error] [pid 41421:tid 41440] [client 172.161.1.56:5009] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "acutHRSaDjY9kKFtUQCDVwAAARA"]
[Tue Mar 31 19:16:45.681572 2026] [:error] [pid 36890:tid 36906] [client 172.161.1.56:5002] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "acutHZ8FASPd_uH8z7cnmQAAAAs"]
[Tue Mar 31 19:16:46.159364 2026] [:error] [pid 6548:tid 6550] [client 172.161.1.56:5117] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acutHrgIz9HgMl9YwE4ZYwAAAUA"]
[Tue Mar 31 19:16:46.664357 2026] [:error] [pid 36890:tid 36913] [client 172.161.1.56:4965] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acutHp8FASPd_uH8z7cnmwAAABI"]
[Tue Mar 31 19:16:47.141402 2026] [:error] [pid 41421:tid 41437] [client 172.161.1.56:5021] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acutHxSaDjY9kKFtUQCDXAAAAQ0"]
[Tue Mar 31 19:16:47.616594 2026] [:error] [pid 36982:tid 37002] [client 172.161.1.56:5028] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acutH_lMmeoQKN0r_GOLQwAAANE"]
[Tue Mar 31 19:16:48.108312 2026] [:error] [pid 6548:tid 6557] [client 172.161.1.56:64951] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/b.php"] [unique_id "acutILgIz9HgMl9YwE4ZZwAAAUc"]
[Tue Mar 31 19:16:48.584280 2026] [:error] [pid 36982:tid 37006] [client 172.161.1.56:64979] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/b.php"] [unique_id "acutIPlMmeoQKN0r_GOLRQAAANU"]
[Tue Mar 31 19:16:49.085863 2026] [:error] [pid 36890:tid 36899] [client 172.161.1.56:5069] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/b.php"] [unique_id "acutIZ8FASPd_uH8z7cnnAAAAAQ"]
[Tue Mar 31 19:16:49.558644 2026] [:error] [pid 36890:tid 36915] [client 172.161.1.56:5053] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/b.php"] [unique_id "acutIZ8FASPd_uH8z7cnnQAAABQ"]
[Tue Mar 31 19:16:50.058979 2026] [:error] [pid 36891:tid 36948] [client 172.161.1.56:4873] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vaza.php"] [unique_id "acutIpJhiMaJUqoqfl7F_wAAAFg"]
[Tue Mar 31 19:16:50.537532 2026] [:error] [pid 36891:tid 36927] [client 172.161.1.56:5017] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vaza.php"] [unique_id "acutIpJhiMaJUqoqfl7GAAAAAEM"]
[Tue Mar 31 19:16:51.011266 2026] [:error] [pid 6548:tid 6561] [client 172.161.1.56:4872] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vaza.php"] [unique_id "acutI7gIz9HgMl9YwE4ZdQAAAUs"]
[Tue Mar 31 19:16:51.484941 2026] [:error] [pid 36982:tid 36997] [client 172.161.1.56:5078] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vaza.php"] [unique_id "acutI_lMmeoQKN0r_GOLSAAAAMw"]
[Tue Mar 31 19:16:51.962784 2026] [:error] [pid 36890:tid 36898] [client 172.161.1.56:4968] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "acutI58FASPd_uH8z7cnoQAAAAM"]
[Tue Mar 31 19:16:52.435488 2026] [:error] [pid 36891:tid 36931] [client 172.161.1.56:5083] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "acutJJJhiMaJUqoqfl7GAwAAAEc"]
[Tue Mar 31 19:16:52.911450 2026] [:error] [pid 36890:tid 36914] [client 172.161.1.56:5019] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "acutJJ8FASPd_uH8z7cnowAAABM"]
[Tue Mar 31 19:16:53.391761 2026] [:error] [pid 6548:tid 6560] [client 172.161.1.56:4934] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "acutJbgIz9HgMl9YwE4ZfAAAAUo"]
[Tue Mar 31 19:16:53.876910 2026] [:error] [pid 6548:tid 6556] [client 172.161.1.56:5051] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acutJbgIz9HgMl9YwE4ZfgAAAUY"]
[Tue Mar 31 19:16:54.359455 2026] [:error] [pid 36891:tid 36936] [client 172.161.1.56:5115] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acutJpJhiMaJUqoqfl7GBAAAAEw"]
[Tue Mar 31 19:16:54.834908 2026] [:error] [pid 36982:tid 37009] [client 172.161.1.56:5036] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acutJvlMmeoQKN0r_GOLUQAAANg"]
[Tue Mar 31 19:16:55.311044 2026] [:error] [pid 41421:tid 41434] [client 172.161.1.56:4942] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acutJxSaDjY9kKFtUQCDbwAAAQo"]
[Tue Mar 31 19:16:55.790682 2026] [:error] [pid 36892:tid 36960] [client 172.161.1.56:4940] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xc0252.php"] [unique_id "acutJ0yj9S4G0ek3O4KDswAAAIk"]
[Tue Mar 31 19:16:56.283268 2026] [:error] [pid 41421:tid 41424] [client 172.161.1.56:4994] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xc0252.php"] [unique_id "acutKBSaDjY9kKFtUQCDcwAAAQA"]
[Tue Mar 31 19:16:56.756206 2026] [:error] [pid 36891:tid 36934] [client 172.161.1.56:5080] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xc0252.php"] [unique_id "acutKJJhiMaJUqoqfl7GCAAAAEo"]
[Tue Mar 31 19:16:57.237749 2026] [:error] [pid 41421:tid 41426] [client 172.161.1.56:5025] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xc0252.php"] [unique_id "acutKRSaDjY9kKFtUQCDdQAAAQI"]
[Tue Mar 31 19:16:57.713299 2026] [:error] [pid 41421:tid 41447] [client 172.161.1.56:5020] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "acutKRSaDjY9kKFtUQCDdwAAARc"]
[Tue Mar 31 19:16:58.187269 2026] [:error] [pid 6548:tid 6556] [client 172.161.1.56:5005] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "acutKrgIz9HgMl9YwE4ZhwAAAUY"]
[Tue Mar 31 19:16:58.664909 2026] [:error] [pid 6548:tid 6557] [client 172.161.1.56:5043] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "acutKrgIz9HgMl9YwE4ZiQAAAUc"]
[Tue Mar 31 19:16:59.138303 2026] [:error] [pid 36891:tid 36943] [client 172.161.1.56:4946] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "acutK5JhiMaJUqoqfl7GCQAAAFM"]
[Tue Mar 31 19:16:59.610589 2026] [:error] [pid 36891:tid 36944] [client 172.161.1.56:4986] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "acutK5JhiMaJUqoqfl7GCgAAAFQ"]
[Tue Mar 31 19:17:00.085189 2026] [:error] [pid 41421:tid 41445] [client 172.161.1.56:5108] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "acutLBSaDjY9kKFtUQCDgAAAARU"]
[Tue Mar 31 19:17:00.558116 2026] [:error] [pid 36891:tid 36933] [client 172.161.1.56:65001] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "acutLJJhiMaJUqoqfl7GDQAAAEk"]
[Tue Mar 31 19:17:01.036281 2026] [:error] [pid 36892:tid 36964] [client 172.161.1.56:4949] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "acutLUyj9S4G0ek3O4KDwwAAAI0"]
[Tue Mar 31 19:17:01.511771 2026] [:error] [pid 6548:tid 6564] [client 172.161.1.56:4884] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acutLbgIz9HgMl9YwE4ZjQAAAU4"]
[Tue Mar 31 19:17:01.983474 2026] [:error] [pid 36892:tid 36963] [client 172.161.1.56:64954] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acutLUyj9S4G0ek3O4KDxQAAAIw"]
[Tue Mar 31 19:17:02.464140 2026] [:error] [pid 36982:tid 36999] [client 172.161.1.56:5033] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acutLvlMmeoQKN0r_GOLZAAAAM4"]
[Tue Mar 31 19:17:02.935163 2026] [:error] [pid 36891:tid 36936] [client 172.161.1.56:64959] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acutLpJhiMaJUqoqfl7GEAAAAEw"]
[Tue Mar 31 19:17:03.417781 2026] [:error] [pid 41421:tid 41436] [client 172.161.1.56:4996] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp3.php"] [unique_id "acutLxSaDjY9kKFtUQCDiwAAAQw"]
[Tue Mar 31 19:17:03.889819 2026] [:error] [pid 41421:tid 41426] [client 172.161.1.56:5059] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp3.php"] [unique_id "acutLxSaDjY9kKFtUQCDkQAAAQI"]
[Tue Mar 31 19:17:04.393054 2026] [:error] [pid 41421:tid 41441] [client 172.161.1.56:5004] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp3.php"] [unique_id "acutMBSaDjY9kKFtUQCDkwAAARE"]
[Tue Mar 31 19:17:04.864383 2026] [:error] [pid 41421:tid 41434] [client 172.161.1.56:5110] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp3.php"] [unique_id "acutMBSaDjY9kKFtUQCDlQAAAQo"]
[Tue Mar 31 19:17:05.335223 2026] [:error] [pid 41421:tid 41431] [client 172.161.1.56:5112] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "acutMRSaDjY9kKFtUQCDmgAAAQc"]
[Tue Mar 31 19:17:05.807888 2026] [:error] [pid 41421:tid 41447] [client 172.161.1.56:64928] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "acutMRSaDjY9kKFtUQCDnwAAARc"]
[Tue Mar 31 19:17:06.282660 2026] [:error] [pid 36982:tid 37000] [client 172.161.1.56:5082] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "acutMvlMmeoQKN0r_GOLbwAAAM8"]
[Tue Mar 31 19:17:06.761638 2026] [:error] [pid 36982:tid 36986] [client 172.161.1.56:64972] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "acutMvlMmeoQKN0r_GOLcgAAAME"]
[Tue Mar 31 19:17:07.237179 2026] [:error] [pid 36982:tid 37005] [client 172.161.1.56:5048] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "acutM_lMmeoQKN0r_GOLdgAAANQ"]
[Tue Mar 31 19:17:07.712320 2026] [:error] [pid 36982:tid 36991] [client 172.161.1.56:5071] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "acutM_lMmeoQKN0r_GOLfAAAAMY"]
[Tue Mar 31 19:17:08.185089 2026] [:error] [pid 36982:tid 37000] [client 172.161.1.56:4937] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "acutNPlMmeoQKN0r_GOLgAAAAM8"]
[Tue Mar 31 19:17:08.670197 2026] [:error] [pid 36982:tid 37005] [client 172.161.1.56:65005] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "acutNPlMmeoQKN0r_GOLhQAAANQ"]
[Tue Mar 31 19:17:09.152213 2026] [:error] [pid 36982:tid 36994] [client 172.161.1.56:4951] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d2.php"] [unique_id "acutNflMmeoQKN0r_GOLhwAAAMk"]
[Tue Mar 31 19:17:09.625172 2026] [:error] [pid 36982:tid 36991] [client 172.161.1.56:4989] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d2.php"] [unique_id "acutNflMmeoQKN0r_GOLigAAAMY"]
[Tue Mar 31 19:17:10.098175 2026] [:error] [pid 41421:tid 41440] [client 172.161.1.56:5102] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d2.php"] [unique_id "acutNhSaDjY9kKFtUQCDrgAAARA"]
[Tue Mar 31 19:17:10.573250 2026] [:error] [pid 36982:tid 37001] [client 172.161.1.56:5022] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d2.php"] [unique_id "acutNvlMmeoQKN0r_GOLkQAAANA"]
[Tue Mar 31 19:17:11.049873 2026] [:error] [pid 36982:tid 37002] [client 172.161.1.56:4950] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xc.php"] [unique_id "acutN_lMmeoQKN0r_GOLlAAAANE"]
[Tue Mar 31 19:17:11.531923 2026] [:error] [pid 36982:tid 36989] [client 172.161.1.56:5052] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xc.php"] [unique_id "acutN_lMmeoQKN0r_GOLmAAAAMQ"]
[Tue Mar 31 19:17:12.006975 2026] [:error] [pid 6548:tid 6568] [client 172.161.1.56:5046] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xc.php"] [unique_id "acutOLgIz9HgMl9YwE4ZkgAAAVI"]
[Tue Mar 31 19:17:12.481658 2026] [:error] [pid 6548:tid 6571] [client 172.161.1.56:5019] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xc.php"] [unique_id "acutOLgIz9HgMl9YwE4ZkwAAAVU"]
[Tue Mar 31 19:17:12.962061 2026] [:error] [pid 41421:tid 41434] [client 172.161.1.56:64975] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "acutOBSaDjY9kKFtUQCDtQAAAQo"]
[Tue Mar 31 19:17:13.469811 2026] [:error] [pid 36982:tid 37002] [client 172.161.1.56:4964] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "acutOflMmeoQKN0r_GOLoAAAANE"]
[Tue Mar 31 19:17:13.953976 2026] [:error] [pid 36982:tid 36990] [client 172.161.1.56:5003] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "acutOflMmeoQKN0r_GOLogAAAMU"]
[Tue Mar 31 19:17:14.432639 2026] [:error] [pid 36892:tid 36956] [client 172.161.1.56:4897] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Tue Mar 31 19:17:14.678405 2026] [:error] [pid 36892:tid 36963] [client 172.161.1.56:4897] File does not exist: /usr/local/apache/htdocs/suspended-page/gmo.php
[Tue Mar 31 19:17:14.918273 2026] [:error] [pid 36892:tid 36966] [client 172.161.1.56:4897] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Tue Mar 31 19:17:15.156590 2026] [:error] [pid 36892:tid 36974] [client 172.161.1.56:4897] File does not exist: /usr/local/apache/htdocs/suspended-page/20.php
[Tue Mar 31 19:17:15.398637 2026] [:error] [pid 36892:tid 36962] [client 172.161.1.56:4897] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Tue Mar 31 19:17:15.637401 2026] [:error] [pid 36892:tid 36951] [client 172.161.1.56:4897] File does not exist: /usr/local/apache/htdocs/suspended-page/c.php
[Tue Mar 31 19:17:15.874868 2026] [:error] [pid 36892:tid 36961] [client 172.161.1.56:4897] File does not exist: /usr/local/apache/htdocs/suspended-page/we2.php
[Tue Mar 31 19:17:16.119374 2026] [:error] [pid 36892:tid 36954] [client 172.161.1.56:4897] File does not exist: /usr/local/apache/htdocs/suspended-page/04.php
[Tue Mar 31 19:17:16.358296 2026] [:error] [pid 36892:tid 36957] [client 172.161.1.56:4897] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Tue Mar 31 23:05:32.323638 2026] [:error] [pid 3135:tid 3144] [client 35.193.176.249:40182] [client 35.193.176.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "acvivOpETmuVjzalvCA5SQAAAoY"]
[Wed Apr 01 05:37:50.810404 2026] [:error] [pid 23716:tid 23797] [client 20.203.130.156:56028] File does not exist: /usr/local/apache/htdocs/suspended-page/sw.php
[Wed Apr 01 05:37:51.052657 2026] [:error] [pid 23716:tid 23812] [client 20.203.130.156:56028] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX2.php
[Wed Apr 01 05:37:51.292326 2026] [:error] [pid 23716:tid 23807] [client 20.203.130.156:56028] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX1.php
[Wed Apr 01 05:37:51.533089 2026] [:error] [pid 23716:tid 23793] [client 20.203.130.156:56028] File does not exist: /usr/local/apache/htdocs/suspended-page/fsgdjkl.php
[Wed Apr 01 05:37:51.773298 2026] [:error] [pid 23716:tid 23788] [client 20.203.130.156:56028] File does not exist: /usr/local/apache/htdocs/suspended-page/ahutr.php
[Wed Apr 01 05:37:52.013898 2026] [:error] [pid 23716:tid 23809] [client 20.203.130.156:56028] File does not exist: /usr/local/apache/htdocs/suspended-page/byrgo.php
[Wed Apr 01 05:37:52.253807 2026] [:error] [pid 23716:tid 23802] [client 20.203.130.156:56028] File does not exist: /usr/local/apache/htdocs/suspended-page/abouta.php
[Wed Apr 01 05:37:52.493274 2026] [:error] [pid 23716:tid 23803] [client 20.203.130.156:56028] File does not exist: /usr/local/apache/htdocs/suspended-page/zfe.php
[Wed Apr 01 05:37:52.734069 2026] [:error] [pid 23716:tid 23794] [client 20.203.130.156:56028] File does not exist: /usr/local/apache/htdocs/suspended-page/by.php
[Wed Apr 01 05:37:52.972692 2026] [:error] [pid 23716:tid 23797] [client 20.203.130.156:56028] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Wed Apr 01 05:37:53.208977 2026] [:error] [pid 23716:tid 23805] [client 20.203.130.156:56028] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-asudo.php"] [unique_id "acw-sXVtFUg_mx-RYb5cRwAAAJE"]
[Wed Apr 01 05:37:53.680021 2026] [:error] [pid 23714:tid 23736] [client 20.203.130.156:56049] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-asudo.php"] [unique_id "acw-sUHxDDU2ETcG9DSleAAAAAI"]
[Wed Apr 01 05:37:54.151413 2026] [:error] [pid 23715:tid 23783] [client 20.203.130.156:48804] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-asudo.php"] [unique_id "acw-sq-REzOruNbiT9wq6gAAAFY"]
[Wed Apr 01 05:37:54.623477 2026] [:error] [pid 24346:tid 24369] [client 20.203.130.156:65337] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-asudo.php"] [unique_id "acw-src1l8kg9MhGHIJ37AAAAVE"]
[Wed Apr 01 05:37:55.096494 2026] [:error] [pid 23715:tid 23781] [client 20.203.130.156:13790] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-moonka.php"] [unique_id "acw-s6-REzOruNbiT9wq8wAAAFQ"]
[Wed Apr 01 05:37:55.569396 2026] [:error] [pid 23819:tid 23840] [client 20.203.130.156:13785] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-moonka.php"] [unique_id "acw-s9dfUS_37wFAM77ZXgAAANI"]
[Wed Apr 01 05:37:56.041129 2026] [:error] [pid 24314:tid 24331] [client 20.203.130.156:48816] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-moonka.php"] [unique_id "acw-tJRF3FCzjmMUX5bV0AAAAQ0"]
[Wed Apr 01 05:37:56.512225 2026] [:error] [pid 24346:tid 24362] [client 20.203.130.156:56022] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-moonka.php"] [unique_id "acw-tLc1l8kg9MhGHIJ39AAAAUo"]
[Wed Apr 01 05:37:56.984818 2026] [:error] [pid 24346:tid 24372] [client 20.203.130.156:13809] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "acw-tLc1l8kg9MhGHIJ39QAAAVQ"]
[Wed Apr 01 05:37:57.456711 2026] [:error] [pid 24314:tid 24326] [client 20.203.130.156:56369] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "acw-tZRF3FCzjmMUX5bV1AAAAQg"]
[Wed Apr 01 05:37:57.930845 2026] [:error] [pid 23716:tid 23809] [client 20.203.130.156:56060] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "acw-tXVtFUg_mx-RYb5cTAAAAJU"]
[Wed Apr 01 05:37:58.402337 2026] [:error] [pid 24314:tid 24329] [client 20.203.130.156:55408] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "acw-tpRF3FCzjmMUX5bV1wAAAQs"]
[Wed Apr 01 05:37:58.873911 2026] [:error] [pid 23819:tid 23842] [client 20.203.130.156:65340] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zlnckdxn.php"] [unique_id "acw-ttdfUS_37wFAM77ZaQAAANQ"]
[Wed Apr 01 05:37:59.353635 2026] [:error] [pid 23716:tid 23794] [client 20.203.130.156:58850] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zlnckdxn.php"] [unique_id "acw-t3VtFUg_mx-RYb5cUwAAAIY"]
[Wed Apr 01 05:37:59.826357 2026] [:error] [pid 23716:tid 23805] [client 20.203.130.156:58878] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zlnckdxn.php"] [unique_id "acw-t3VtFUg_mx-RYb5cVAAAAJE"]
[Wed Apr 01 05:38:00.300433 2026] [:error] [pid 23714:tid 23742] [client 20.203.130.156:56015] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zlnckdxn.php"] [unique_id "acw-uEHxDDU2ETcG9DSliQAAAAg"]
[Wed Apr 01 05:38:00.776627 2026] [:error] [pid 23714:tid 23745] [client 20.203.130.156:58869] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-thi.php"] [unique_id "acw-uEHxDDU2ETcG9DSliwAAAAs"]
[Wed Apr 01 05:38:01.248957 2026] [:error] [pid 23714:tid 23758] [client 20.203.130.156:65303] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-thi.php"] [unique_id "acw-uUHxDDU2ETcG9DSljAAAABg"]
[Wed Apr 01 05:38:01.737778 2026] [:error] [pid 23714:tid 23754] [client 20.203.130.156:65285] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-thi.php"] [unique_id "acw-uUHxDDU2ETcG9DSljwAAABQ"]
[Wed Apr 01 05:38:02.209579 2026] [:error] [pid 24346:tid 24360] [client 20.203.130.156:56379] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-thi.php"] [unique_id "acw-urc1l8kg9MhGHIJ4BQAAAUg"]
[Wed Apr 01 05:38:02.680654 2026] [:error] [pid 24346:tid 24353] [client 20.203.130.156:56053] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "acw-urc1l8kg9MhGHIJ4BwAAAUE"]
[Wed Apr 01 05:38:03.152272 2026] [:error] [pid 24314:tid 24319] [client 20.203.130.156:56000] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "acw-u5RF3FCzjmMUX5bV8QAAAQE"]
[Wed Apr 01 05:38:03.622865 2026] [:error] [pid 24346:tid 24357] [client 20.203.130.156:56357] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "acw-u7c1l8kg9MhGHIJ4CgAAAUU"]
[Wed Apr 01 05:38:04.095100 2026] [:error] [pid 23715:tid 23783] [client 20.203.130.156:58836] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "acw-vK-REzOruNbiT9wq-QAAAFY"]
[Wed Apr 01 05:38:04.570469 2026] [:error] [pid 24346:tid 24366] [client 20.203.130.156:48780] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "acw-vLc1l8kg9MhGHIJ4EgAAAU4"]
[Wed Apr 01 05:38:05.042754 2026] [:error] [pid 23715:tid 23782] [client 20.203.130.156:65288] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "acw-va-REzOruNbiT9wq-wAAAFU"]
[Wed Apr 01 05:38:05.515005 2026] [:error] [pid 24348:tid 24394] [client 20.203.130.156:58873] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "acw-vW0Vs69Y5nF1HA_BagAAAY8"]
[Wed Apr 01 05:38:05.988231 2026] [:error] [pid 23714:tid 23752] [client 20.203.130.156:13787] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "acw-vUHxDDU2ETcG9DSlnAAAABI"]
[Wed Apr 01 05:38:06.459638 2026] [:error] [pid 24348:tid 24401] [client 20.203.130.156:56371] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Geforce.php"] [unique_id "acw-vm0Vs69Y5nF1HA_BbAAAAZY"]
[Wed Apr 01 05:38:06.930064 2026] [:error] [pid 23819:tid 23829] [client 20.203.130.156:13817] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Geforce.php"] [unique_id "acw-vtdfUS_37wFAM77ZcwAAAMc"]
[Wed Apr 01 05:38:07.412659 2026] [:error] [pid 23716:tid 23804] [client 20.203.130.156:13338] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Geforce.php"] [unique_id "acw-v3VtFUg_mx-RYb5cWQAAAJA"]
[Wed Apr 01 05:38:07.884592 2026] [:error] [pid 24346:tid 24357] [client 20.203.130.156:48787] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Geforce.php"] [unique_id "acw-v7c1l8kg9MhGHIJ4GgAAAUU"]
[Wed Apr 01 05:38:08.358685 2026] [:error] [pid 23715:tid 23763] [client 20.203.130.156:56027] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "acw-wK-REzOruNbiT9wrAQAAAEI"]
[Wed Apr 01 05:38:08.829809 2026] [:error] [pid 23714:tid 23741] [client 20.203.130.156:65335] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "acw-wEHxDDU2ETcG9DSlowAAAAc"]
[Wed Apr 01 05:38:09.301408 2026] [:error] [pid 23715:tid 23766] [client 20.203.130.156:58816] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "acw-wa-REzOruNbiT9wrBQAAAEU"]
[Wed Apr 01 05:38:09.771518 2026] [:error] [pid 24348:tid 24385] [client 20.203.130.156:55391] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "acw-wW0Vs69Y5nF1HA_BdgAAAYY"]
[Wed Apr 01 05:38:10.243768 2026] [:error] [pid 24348:tid 24380] [client 20.203.130.156:55404] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dichku.php"] [unique_id "acw-wm0Vs69Y5nF1HA_BeAAAAYE"]
[Wed Apr 01 05:38:10.715870 2026] [:error] [pid 23714:tid 23749] [client 20.203.130.156:13782] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dichku.php"] [unique_id "acw-wkHxDDU2ETcG9DSlpQAAAA8"]
[Wed Apr 01 05:38:11.188033 2026] [:error] [pid 24348:tid 24379] [client 20.203.130.156:56320] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dichku.php"] [unique_id "acw-w20Vs69Y5nF1HA_BeQAAAYA"]
[Wed Apr 01 05:38:11.659797 2026] [:error] [pid 23714:tid 23736] [client 20.203.130.156:55385] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dichku.php"] [unique_id "acw-w0HxDDU2ETcG9DSlqgAAAAI"]
[Wed Apr 01 05:38:12.131591 2026] [:error] [pid 23714:tid 23758] [client 20.203.130.156:48811] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t00l.php"] [unique_id "acw-xEHxDDU2ETcG9DSlrAAAABg"]
[Wed Apr 01 05:38:12.604340 2026] [:error] [pid 23819:tid 23840] [client 20.203.130.156:56352] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t00l.php"] [unique_id "acw-xNdfUS_37wFAM77ZegAAANI"]
[Wed Apr 01 05:38:13.087501 2026] [:error] [pid 23715:tid 23762] [client 20.203.130.156:48826] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t00l.php"] [unique_id "acw-xa-REzOruNbiT9wrDgAAAEE"]
[Wed Apr 01 05:38:13.559635 2026] [:error] [pid 24314:tid 24325] [client 20.203.130.156:65289] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t00l.php"] [unique_id "acw-xZRF3FCzjmMUX5bWDgAAAQc"]
[Wed Apr 01 05:38:14.033764 2026] [:error] [pid 23714:tid 23734] [client 20.203.130.156:58871] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vvedr.php"] [unique_id "acw-xkHxDDU2ETcG9DSltAAAAAA"]
[Wed Apr 01 05:38:14.506865 2026] [:error] [pid 24346:tid 24368] [client 20.203.130.156:13795] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vvedr.php"] [unique_id "acw-xrc1l8kg9MhGHIJ4IAAAAVA"]
[Wed Apr 01 05:38:14.980365 2026] [:error] [pid 23714:tid 23755] [client 20.203.130.156:13763] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vvedr.php"] [unique_id "acw-xkHxDDU2ETcG9DSltwAAABU"]
[Wed Apr 01 05:38:15.452744 2026] [:error] [pid 23715:tid 23775] [client 20.203.130.156:58840] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vvedr.php"] [unique_id "acw-x6-REzOruNbiT9wrEAAAAE4"]
[Wed Apr 01 05:38:15.924797 2026] [:error] [pid 24346:tid 24353] [client 20.203.130.156:13760] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "acw-x7c1l8kg9MhGHIJ4IQAAAUE"]
[Wed Apr 01 05:38:16.397552 2026] [:error] [pid 23714:tid 23757] [client 20.203.130.156:65308] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "acw-yEHxDDU2ETcG9DSlvAAAABc"]
[Wed Apr 01 05:38:16.869581 2026] [:error] [pid 23715:tid 23765] [client 20.203.130.156:48803] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "acw-yK-REzOruNbiT9wrEwAAAEQ"]
[Wed Apr 01 05:38:17.341027 2026] [:error] [pid 23714:tid 23736] [client 20.203.130.156:58876] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "acw-yUHxDDU2ETcG9DSlwAAAAAI"]
[Wed Apr 01 05:38:17.814047 2026] [:error] [pid 24348:tid 24394] [client 20.203.130.156:56062] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "acw-yW0Vs69Y5nF1HA_BhwAAAY8"]
[Wed Apr 01 05:38:18.286578 2026] [:error] [pid 23714:tid 23754] [client 20.203.130.156:56063] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "acw-ykHxDDU2ETcG9DSlwgAAABQ"]
[Wed Apr 01 05:38:18.760874 2026] [:error] [pid 24346:tid 24374] [client 20.203.130.156:56383] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "acw-yrc1l8kg9MhGHIJ4JAAAAVY"]
[Wed Apr 01 05:38:19.233698 2026] [:error] [pid 23715:tid 23767] [client 20.203.130.156:48818] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "acw-y6-REzOruNbiT9wrGAAAAEY"]
[Wed Apr 01 05:38:19.708783 2026] [:error] [pid 24314:tid 24318] [client 20.203.130.156:55384] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acw-y5RF3FCzjmMUX5bWEQAAAQA"]
[Wed Apr 01 05:38:20.181805 2026] [:error] [pid 23715:tid 23771] [client 20.203.130.156:56376] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acw-zK-REzOruNbiT9wrHwAAAEo"]
[Wed Apr 01 05:38:20.654626 2026] [:error] [pid 23715:tid 23778] [client 20.203.130.156:58874] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acw-zK-REzOruNbiT9wrIgAAAFE"]
[Wed Apr 01 05:38:21.129703 2026] [:error] [pid 23716:tid 23802] [client 20.203.130.156:65328] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acw-zXVtFUg_mx-RYb5cZgAAAI4"]
[Wed Apr 01 05:38:21.602934 2026] [:error] [pid 23716:tid 23812] [client 20.203.130.156:56336] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/htto.php"] [unique_id "acw-zXVtFUg_mx-RYb5caQAAAJg"]
[Wed Apr 01 05:38:22.074667 2026] [:error] [pid 23714:tid 23757] [client 20.203.130.156:56327] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/htto.php"] [unique_id "acw-zkHxDDU2ETcG9DSlxQAAABc"]
[Wed Apr 01 05:38:22.545534 2026] [:error] [pid 24348:tid 24393] [client 20.203.130.156:56321] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/htto.php"] [unique_id "acw-zm0Vs69Y5nF1HA_BjwAAAY4"]
[Wed Apr 01 05:38:23.016105 2026] [:error] [pid 23714:tid 23739] [client 20.203.130.156:58838] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/htto.php"] [unique_id "acw-z0HxDDU2ETcG9DSlyAAAAAU"]
[Wed Apr 01 05:38:23.494815 2026] [:error] [pid 23714:tid 23742] [client 20.203.130.156:65311] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xhejulap.php"] [unique_id "acw-z0HxDDU2ETcG9DSlzAAAAAg"]
[Wed Apr 01 05:38:23.965418 2026] [:error] [pid 23714:tid 23747] [client 20.203.130.156:13777] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xhejulap.php"] [unique_id "acw-z0HxDDU2ETcG9DSlzgAAAA0"]
[Wed Apr 01 05:38:24.436373 2026] [:error] [pid 23714:tid 23758] [client 20.203.130.156:13812] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xhejulap.php"] [unique_id "acw-0EHxDDU2ETcG9DSl0QAAABg"]
[Wed Apr 01 05:38:24.910336 2026] [:error] [pid 23714:tid 23738] [client 20.203.130.156:65305] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xhejulap.php"] [unique_id "acw-0EHxDDU2ETcG9DSl1QAAAAQ"]
[Wed Apr 01 05:38:25.389431 2026] [:error] [pid 23714:tid 23747] [client 20.203.130.156:65339] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acw-0UHxDDU2ETcG9DSl2gAAAA0"]
[Wed Apr 01 05:38:25.860426 2026] [:error] [pid 24346:tid 24354] [client 20.203.130.156:55395] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acw-0bc1l8kg9MhGHIJ4KAAAAUI"]
[Wed Apr 01 05:38:26.331818 2026] [:error] [pid 23715:tid 23765] [client 20.203.130.156:65324] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acw-0q-REzOruNbiT9wrLgAAAEQ"]
[Wed Apr 01 05:38:26.804337 2026] [:error] [pid 24346:tid 24365] [client 20.203.130.156:55375] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acw-0rc1l8kg9MhGHIJ4LAAAAU0"]
[Wed Apr 01 05:38:27.277472 2026] [:error] [pid 23819:tid 23826] [client 20.203.130.156:13815] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8pewqMTX.php"] [unique_id "acw-09dfUS_37wFAM77ZhwAAAMQ"]
[Wed Apr 01 05:38:27.753314 2026] [:error] [pid 23819:tid 23831] [client 20.203.130.156:63574] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8pewqMTX.php"] [unique_id "acw-09dfUS_37wFAM77ZiQAAAMk"]
[Wed Apr 01 05:38:28.229956 2026] [:error] [pid 24348:tid 24392] [client 20.203.130.156:56059] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8pewqMTX.php"] [unique_id "acw-1G0Vs69Y5nF1HA_BkwAAAY0"]
[Wed Apr 01 05:38:28.702027 2026] [:error] [pid 24314:tid 24321] [client 20.203.130.156:58839] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8pewqMTX.php"] [unique_id "acw-1JRF3FCzjmMUX5bWFwAAAQM"]
[Wed Apr 01 05:38:29.175388 2026] [:error] [pid 24314:tid 24337] [client 20.203.130.156:56347] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ddpxi.php"] [unique_id "acw-1ZRF3FCzjmMUX5bWGwAAARM"]
[Wed Apr 01 05:38:29.648577 2026] [:error] [pid 24314:tid 24319] [client 20.203.130.156:65294] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ddpxi.php"] [unique_id "acw-1ZRF3FCzjmMUX5bWHAAAAQE"]
[Wed Apr 01 05:38:30.121721 2026] [:error] [pid 23714:tid 23737] [client 20.203.130.156:55419] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ddpxi.php"] [unique_id "acw-1kHxDDU2ETcG9DSl5AAAAAM"]
[Wed Apr 01 05:38:30.593600 2026] [:error] [pid 23714:tid 23742] [client 20.203.130.156:65316] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ddpxi.php"] [unique_id "acw-1kHxDDU2ETcG9DSl5gAAAAg"]
[Wed Apr 01 05:38:31.064918 2026] [:error] [pid 23714:tid 23744] [client 20.203.130.156:56333] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cdkfu.php"] [unique_id "acw-10HxDDU2ETcG9DSl6AAAAAo"]
[Wed Apr 01 05:38:31.534871 2026] [:error] [pid 24346:tid 24372] [client 20.203.130.156:55393] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cdkfu.php"] [unique_id "acw-17c1l8kg9MhGHIJ4NAAAAVQ"]
[Wed Apr 01 05:38:32.005005 2026] [:error] [pid 23714:tid 23746] [client 20.203.130.156:55371] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cdkfu.php"] [unique_id "acw-2EHxDDU2ETcG9DSl7AAAAAw"]
[Wed Apr 01 05:38:32.476862 2026] [:error] [pid 23714:tid 23742] [client 20.203.130.156:48814] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cdkfu.php"] [unique_id "acw-2EHxDDU2ETcG9DSl7wAAAAg"]
[Wed Apr 01 05:38:32.947905 2026] [:error] [pid 24346:tid 24356] [client 20.203.130.156:56008] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/IcC7p.php"] [unique_id "acw-2Lc1l8kg9MhGHIJ4OAAAAUQ"]
[Wed Apr 01 05:38:33.419550 2026] [:error] [pid 23714:tid 23745] [client 20.203.130.156:55387] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/IcC7p.php"] [unique_id "acw-2UHxDDU2ETcG9DSl9AAAAAs"]
[Wed Apr 01 05:38:33.890184 2026] [:error] [pid 23714:tid 23736] [client 20.203.130.156:56013] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/IcC7p.php"] [unique_id "acw-2UHxDDU2ETcG9DSl9gAAAAI"]
[Wed Apr 01 05:38:34.362052 2026] [:error] [pid 24348:tid 24403] [client 20.203.130.156:56365] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/IcC7p.php"] [unique_id "acw-2m0Vs69Y5nF1HA_BmgAAAZg"]
[Wed Apr 01 05:38:34.833395 2026] [:error] [pid 23715:tid 23779] [client 20.203.130.156:65333] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "acw-2q-REzOruNbiT9wrNgAAAFI"]
[Wed Apr 01 05:38:35.307041 2026] [:error] [pid 23819:tid 23838] [client 20.203.130.156:65319] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "acw-29dfUS_37wFAM77ZkAAAANA"]
[Wed Apr 01 05:38:35.781694 2026] [:error] [pid 23714:tid 23739] [client 20.203.130.156:48792] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "acw-20HxDDU2ETcG9DSl_wAAAAU"]
[Wed Apr 01 05:38:36.254615 2026] [:error] [pid 24314:tid 24338] [client 20.203.130.156:55394] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "acw-3JRF3FCzjmMUX5bWJgAAARQ"]
[Wed Apr 01 05:38:36.726873 2026] [:error] [pid 23714:tid 23746] [client 20.203.130.156:55409] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Jcrop.php"] [unique_id "acw-3EHxDDU2ETcG9DSmBwAAAAw"]
[Wed Apr 01 05:38:37.198764 2026] [:error] [pid 23714:tid 23737] [client 20.203.130.156:48819] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Jcrop.php"] [unique_id "acw-3UHxDDU2ETcG9DSmDQAAAAM"]
[Wed Apr 01 05:38:37.669092 2026] [:error] [pid 23714:tid 23736] [client 20.203.130.156:56343] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Jcrop.php"] [unique_id "acw-3UHxDDU2ETcG9DSmEAAAAAI"]
[Wed Apr 01 05:38:38.139671 2026] [:error] [pid 23714:tid 23740] [client 20.203.130.156:48813] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Jcrop.php"] [unique_id "acw-3kHxDDU2ETcG9DSmFQAAAAY"]
[Wed Apr 01 05:38:38.611507 2026] [:error] [pid 23819:tid 23840] [client 20.203.130.156:65330] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "acw-3tdfUS_37wFAM77ZkgAAANI"]
[Wed Apr 01 05:38:39.085994 2026] [:error] [pid 23715:tid 23772] [client 20.203.130.156:65300] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "acw-36-REzOruNbiT9wrOgAAAEs"]
[Wed Apr 01 05:38:39.557393 2026] [:error] [pid 24348:tid 24392] [client 20.203.130.156:13794] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "acw-320Vs69Y5nF1HA_BoAAAAY0"]
[Wed Apr 01 05:38:40.031637 2026] [:error] [pid 23714:tid 23757] [client 20.203.130.156:13796] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "acw-4EHxDDU2ETcG9DSmGwAAABc"]
[Wed Apr 01 21:37:41.441397 2026] [:error] [pid 17856:tid 17861] [client 3.36.71.235:33280] [client 3.36.71.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ac0fpT7Idlm5j9frhqRIqwAAAEM"]
[Wed Apr 01 21:37:42.056542 2026] [:error] [pid 17856:tid 17870] [client 3.36.71.235:33308] [client 3.36.71.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "ac0fpj7Idlm5j9frhqRIrQAAAEw"]
[Wed Apr 01 21:37:42.667090 2026] [:error] [pid 17856:tid 17865] [client 3.36.71.235:33328] [client 3.36.71.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "ac0fpj7Idlm5j9frhqRIsQAAAEc"]
[Wed Apr 01 21:37:43.279155 2026] [:error] [pid 8908:tid 8934] [client 3.36.71.235:33346] [client 3.36.71.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.staging"] [unique_id "ac0fp_kmxtJXGnLdvgCX0AAAAJU"]
[Wed Apr 01 21:37:43.895202 2026] [:error] [pid 62559:tid 62581] [client 3.36.71.235:33362] [client 3.36.71.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.development"] [unique_id "ac0fpy7NKI8IaNKZFIeqXQAAAVQ"]
[Wed Apr 01 21:37:44.506394 2026] [:error] [pid 8908:tid 8921] [client 3.36.71.235:33388] [client 3.36.71.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.test"] [unique_id "ac0fqPkmxtJXGnLdvgCX2AAAAIg"]
[Wed Apr 01 21:37:45.117315 2026] [:error] [pid 17856:tid 17863] [client 3.36.71.235:33412] [client 3.36.71.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.remote"] [unique_id "ac0fqT7Idlm5j9frhqRIugAAAEU"]
[Wed Apr 01 21:37:45.729525 2026] [:error] [pid 17856:tid 17859] [client 3.36.71.235:33434] [client 3.36.71.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.bak"] [unique_id "ac0fqT7Idlm5j9frhqRIwAAAAEE"]
[Wed Apr 01 21:37:46.340943 2026] [:error] [pid 8995:tid 9021] [client 3.36.71.235:33454] [client 3.36.71.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.backup"] [unique_id "ac0fquonaBjs3qxcRefTRQAAABc"]
[Wed Apr 01 21:37:46.953557 2026] [:error] [pid 8995:tid 9012] [client 3.36.71.235:33476] [client 3.36.71.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.save"] [unique_id "ac0fquonaBjs3qxcRefTRgAAAA4"]
[Wed Apr 01 21:37:47.573590 2026] [:error] [pid 8995:tid 9011] [client 3.36.71.235:33502] [client 3.36.71.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.old"] [unique_id "ac0fq-onaBjs3qxcRefTSwAAAA0"]
[Wed Apr 01 21:37:48.188980 2026] [:error] [pid 17856:tid 17878] [client 3.36.71.235:33520] [client 3.36.71.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.sample"] [unique_id "ac0frD7Idlm5j9frhqRIzQAAAFQ"]
[Wed Apr 01 21:37:48.800798 2026] [:error] [pid 8908:tid 8933] [client 3.36.71.235:33548] [client 3.36.71.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vendor/.env"] [unique_id "ac0frPkmxtJXGnLdvgCX3wAAAJQ"]
[Wed Apr 01 21:37:49.411026 2026] [:error] [pid 8909:tid 8957] [client 3.36.71.235:33568] [client 3.36.71.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib/.env"] [unique_id "ac0frTvP_a0662gDl6DfIwAAANA"]
[Wed Apr 01 21:37:50.021557 2026] [:error] [pid 17856:tid 17863] [client 3.36.71.235:33586] [client 3.36.71.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lab/.env"] [unique_id "ac0frj7Idlm5j9frhqRI0QAAAEU"]
[Wed Apr 01 21:37:50.627185 2026] [:error] [pid 8909:tid 8955] [client 3.36.71.235:33604] [client 3.36.71.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cronlab/.env"] [unique_id "ac0frjvP_a0662gDl6DfJQAAAM4"]
[Wed Apr 01 21:37:51.243484 2026] [:error] [pid 8909:tid 8962] [client 3.36.71.235:33630] [client 3.36.71.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cron/.env"] [unique_id "ac0frzvP_a0662gDl6DfJgAAANU"]
[Wed Apr 01 21:37:51.856187 2026] [:error] [pid 17856:tid 17865] [client 3.36.71.235:33646] [client 3.36.71.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/core/.env"] [unique_id "ac0frz7Idlm5j9frhqRI2wAAAEc"]
[Wed Apr 01 21:37:52.466976 2026] [:error] [pid 17856:tid 17878] [client 3.36.71.235:33678] [client 3.36.71.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/core/app/.env"] [unique_id "ac0fsD7Idlm5j9frhqRI3wAAAFQ"]
[Wed Apr 01 21:37:53.083067 2026] [:error] [pid 62559:tid 62573] [client 3.36.71.235:33698] [client 3.36.71.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/core/Datavase/.env"] [unique_id "ac0fsS7NKI8IaNKZFIeqaAAAAUw"]
[Wed Apr 01 21:37:53.709091 2026] [:error] [pid 17856:tid 17860] [client 3.36.71.235:33716] [client 3.36.71.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/database/.env"] [unique_id "ac0fsT7Idlm5j9frhqRI6AAAAEI"]
[Wed Apr 01 21:37:54.324032 2026] [:error] [pid 17856:tid 17858] [client 3.36.71.235:33746] [client 3.36.71.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config/.env"] [unique_id "ac0fsj7Idlm5j9frhqRI7QAAAEA"]
[Wed Apr 01 23:27:06.654501 2026] [:error] [pid 8995:tid 9022] [client 3.85.31.41:33810] [client 3.85.31.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ac05SuonaBjs3qxcRef0ZAAAABg"]
[Wed Apr 01 23:27:07.484507 2026] [:error] [pid 8909:tid 8944] [client 3.85.31.41:33860] [client 3.85.31.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "ac05SzvP_a0662gDl6AShwAAAMM"]
[Wed Apr 01 23:27:08.332679 2026] [:error] [pid 8908:tid 8918] [client 3.85.31.41:33886] [client 3.85.31.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "ac05TPkmxtJXGnLdvgDTcQAAAIU"]
[Wed Apr 01 23:27:09.160005 2026] [:error] [pid 62559:tid 62570] [client 3.85.31.41:33920] [client 3.85.31.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.staging"] [unique_id "ac05TS7NKI8IaNKZFIf2QAAAAUk"]
[Wed Apr 01 23:27:10.004938 2026] [:error] [pid 8908:tid 8935] [client 3.85.31.41:33952] [client 3.85.31.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.development"] [unique_id "ac05TvkmxtJXGnLdvgDTewAAAJY"]
[Wed Apr 01 23:27:10.826450 2026] [:error] [pid 8909:tid 8965] [client 3.85.31.41:33982] [client 3.85.31.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.test"] [unique_id "ac05TjvP_a0662gDl6ASjAAAANg"]
[Wed Apr 01 23:27:11.649480 2026] [:error] [pid 8909:tid 8958] [client 3.85.31.41:34014] [client 3.85.31.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.remote"] [unique_id "ac05TzvP_a0662gDl6ASkwAAANE"]
[Wed Apr 01 23:27:13.900087 2026] [:error] [pid 62559:tid 62570] [client 3.85.31.41:34120] [client 3.85.31.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.backup"] [unique_id "ac05US7NKI8IaNKZFIf2TgAAAUk"]
[Wed Apr 01 23:27:14.725671 2026] [:error] [pid 8908:tid 8933] [client 3.85.31.41:34148] [client 3.85.31.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.save"] [unique_id "ac05UvkmxtJXGnLdvgDTiwAAAJQ"]
[Wed Apr 01 23:27:15.580618 2026] [:error] [pid 8909:tid 8955] [client 3.85.31.41:34190] [client 3.85.31.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.old"] [unique_id "ac05UzvP_a0662gDl6ASowAAAM4"]
[Wed Apr 01 23:27:16.401345 2026] [:error] [pid 62559:tid 62570] [client 3.85.31.41:34220] [client 3.85.31.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.sample"] [unique_id "ac05VC7NKI8IaNKZFIf2ZwAAAUk"]
[Wed Apr 01 23:27:17.226912 2026] [:error] [pid 8908:tid 8934] [client 3.85.31.41:34260] [client 3.85.31.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/vendor/.env"] [unique_id "ac05VfkmxtJXGnLdvgDTkgAAAJU"]
[Wed Apr 01 23:27:18.046103 2026] [:error] [pid 8908:tid 8913] [client 3.85.31.41:34334] [client 3.85.31.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lib/.env"] [unique_id "ac05VvkmxtJXGnLdvgDTmwAAAIA"]
[Wed Apr 01 23:27:18.885626 2026] [:error] [pid 62559:tid 62577] [client 3.85.31.41:34426] [client 3.85.31.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lab/.env"] [unique_id "ac05Vi7NKI8IaNKZFIf2bgAAAVA"]
[Wed Apr 01 23:27:19.718815 2026] [:error] [pid 17856:tid 17881] [client 3.85.31.41:34522] [client 3.85.31.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cronlab/.env"] [unique_id "ac05Vz7Idlm5j9frhqR90gAAAFc"]
[Thu Apr 02 00:47:04.897496 2026] [:error] [pid 16761:tid 16767] [client 20.104.69.172:65512] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Thu Apr 02 00:47:05.733538 2026] [:error] [pid 16761:tid 16774] [client 20.104.69.172:65512] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Apr 02 00:47:06.567196 2026] [:error] [pid 16761:tid 16786] [client 20.104.69.172:65512] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w/contact.php"] [unique_id "ac1MCt4bJXDGRqKZnzwJIAAAAFY"]
[Thu Apr 02 00:47:06.982158 2026] [:error] [pid 16761:tid 16768] [client 20.104.69.172:65474] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w/contact.php"] [unique_id "ac1MCt4bJXDGRqKZnzwJJAAAAEQ"]
[Thu Apr 02 00:47:07.395355 2026] [:error] [pid 8035:tid 8042] [client 20.104.69.172:65450] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w/contact.php"] [unique_id "ac1MCwY2zflwGmvw_QbT8gAAAII"]
[Thu Apr 02 00:47:07.808692 2026] [:error] [pid 16761:tid 16780] [client 20.104.69.172:65495] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w/contact.php"] [unique_id "ac1MC94bJXDGRqKZnzwJLAAAAFA"]
[Thu Apr 02 00:47:08.231146 2026] [:error] [pid 16761:tid 16779] [client 20.104.69.172:65417] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w/kill.php"] [unique_id "ac1MDN4bJXDGRqKZnzwJNAAAAE8"]
[Thu Apr 02 00:47:08.660335 2026] [:error] [pid 16761:tid 16788] [client 20.104.69.172:65514] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w/kill.php"] [unique_id "ac1MDN4bJXDGRqKZnzwJOAAAAFg"]
[Thu Apr 02 00:47:09.079097 2026] [:error] [pid 8387:tid 8460] [client 20.104.69.172:65414] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w/kill.php"] [unique_id "ac1MDRdQYJ2y8LDYkv_xugAAABM"]
[Thu Apr 02 00:47:09.525216 2026] [:error] [pid 8035:tid 8061] [client 20.104.69.172:65440] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w/kill.php"] [unique_id "ac1MDQY2zflwGmvw_QbT-AAAAJU"]
[Thu Apr 02 00:47:09.944103 2026] [:error] [pid 8037:tid 8124] [client 20.104.69.172:65504] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w/app/tools/functions.php"] [unique_id "ac1MDYGD8ox-W9jHVfC0WAAAARA"]
[Thu Apr 02 00:47:10.359643 2026] [:error] [pid 8035:tid 8064] [client 20.104.69.172:65507] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w/app/tools/functions.php"] [unique_id "ac1MDgY2zflwGmvw_QbT_AAAAJg"]
[Thu Apr 02 00:47:10.776503 2026] [:error] [pid 16761:tid 16768] [client 20.104.69.172:65503] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w/app/tools/functions.php"] [unique_id "ac1MDt4bJXDGRqKZnzwJPQAAAEQ"]
[Thu Apr 02 00:47:11.189040 2026] [:error] [pid 16761:tid 16777] [client 20.104.69.172:65509] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w/app/tools/functions.php"] [unique_id "ac1MD94bJXDGRqKZnzwJQgAAAE0"]
[Thu Apr 02 00:47:11.601010 2026] [:error] [pid 16761:tid 16773] [client 20.104.69.172:65457] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w/app/database/basic.php"] [unique_id "ac1MD94bJXDGRqKZnzwJRgAAAEk"]
[Thu Apr 02 00:47:12.020843 2026] [:error] [pid 8387:tid 8456] [client 20.104.69.172:65501] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w/app/database/basic.php"] [unique_id "ac1MEBdQYJ2y8LDYkv_xwgAAAA8"]
[Thu Apr 02 00:47:12.435078 2026] [:error] [pid 16761:tid 16780] [client 20.104.69.172:65436] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w/app/database/basic.php"] [unique_id "ac1MEN4bJXDGRqKZnzwJUwAAAFA"]
[Thu Apr 02 00:47:12.859716 2026] [:error] [pid 8387:tid 8445] [client 20.104.69.172:65494] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w/app/database/basic.php"] [unique_id "ac1MEBdQYJ2y8LDYkv_xxQAAAAU"]
[Thu Apr 02 00:47:13.283590 2026] [:error] [pid 16761:tid 16779] [client 20.104.69.172:65453] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w/template/views/.php"] [unique_id "ac1MEd4bJXDGRqKZnzwJYwAAAE8"]
[Thu Apr 02 00:47:13.711732 2026] [:error] [pid 16761:tid 16787] [client 20.104.69.172:65421] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w/template/views/.php"] [unique_id "ac1MEd4bJXDGRqKZnzwJZwAAAFc"]
[Thu Apr 02 00:47:14.126340 2026] [:error] [pid 8387:tid 8457] [client 20.104.69.172:65491] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w/template/views/.php"] [unique_id "ac1MEhdQYJ2y8LDYkv_xywAAABA"]
[Thu Apr 02 00:47:14.541705 2026] [:error] [pid 8036:tid 8087] [client 20.104.69.172:64832] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w/template/views/.php"] [unique_id "ac1MEkMvKg9PFa_VV4zSJwAAAMs"]
[Thu Apr 02 00:47:14.958208 2026] [:error] [pid 8035:tid 8040] [client 20.104.69.172:65456] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin-ajax.php"] [unique_id "ac1MEgY2zflwGmvw_QbUAAAAAIA"]
[Thu Apr 02 00:47:15.374009 2026] [:error] [pid 8036:tid 8094] [client 20.104.69.172:65526] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin-ajax.php"] [unique_id "ac1ME0MvKg9PFa_VV4zSKAAAANE"]
[Thu Apr 02 00:47:15.795080 2026] [:error] [pid 8037:tid 8123] [client 20.104.69.172:65437] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin-ajax.php"] [unique_id "ac1ME4GD8ox-W9jHVfC0ZgAAAQ8"]
[Thu Apr 02 00:47:16.223562 2026] [:error] [pid 16761:tid 16777] [client 20.104.69.172:65409] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin-ajax.php"] [unique_id "ac1MFN4bJXDGRqKZnzwJbwAAAE0"]
[Thu Apr 02 00:47:16.644012 2026] [:error] [pid 8387:tid 8457] [client 20.104.69.172:65445] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "ac1MFBdQYJ2y8LDYkv_x0wAAABA"]
[Thu Apr 02 00:47:17.063312 2026] [:error] [pid 8387:tid 8459] [client 20.104.69.172:65488] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "ac1MFRdQYJ2y8LDYkv_x1QAAABI"]
[Thu Apr 02 00:47:17.482467 2026] [:error] [pid 8387:tid 8458] [client 20.104.69.172:64776] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "ac1MFRdQYJ2y8LDYkv_x2AAAABE"]
[Thu Apr 02 00:47:17.902679 2026] [:error] [pid 16761:tid 16782] [client 20.104.69.172:65422] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "ac1MFd4bJXDGRqKZnzwJdwAAAFI"]
[Thu Apr 02 00:47:18.338125 2026] [:error] [pid 16761:tid 16783] [client 20.104.69.172:65444] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/profile.php"] [unique_id "ac1MFt4bJXDGRqKZnzwJewAAAFM"]
[Thu Apr 02 00:47:18.769993 2026] [:error] [pid 16761:tid 16787] [client 20.104.69.172:65492] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/profile.php"] [unique_id "ac1MFt4bJXDGRqKZnzwJgQAAAFc"]
[Thu Apr 02 00:47:19.193829 2026] [:error] [pid 8035:tid 8054] [client 20.104.69.172:65516] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/profile.php"] [unique_id "ac1MFwY2zflwGmvw_QbUCQAAAI4"]
[Thu Apr 02 00:47:19.606627 2026] [:error] [pid 8037:tid 8110] [client 20.104.69.172:65482] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/profile.php"] [unique_id "ac1MF4GD8ox-W9jHVfC0awAAAQI"]
[Thu Apr 02 00:47:20.019928 2026] [:error] [pid 16761:tid 16766] [client 20.104.69.172:65429] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wer.php"] [unique_id "ac1MGN4bJXDGRqKZnzwJiAAAAEI"]
[Thu Apr 02 00:47:20.449372 2026] [:error] [pid 8037:tid 8123] [client 20.104.69.172:65465] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wer.php"] [unique_id "ac1MGIGD8ox-W9jHVfC0cQAAAQ8"]
[Thu Apr 02 00:47:20.865090 2026] [:error] [pid 8037:tid 8130] [client 20.104.69.172:64893] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wer.php"] [unique_id "ac1MGIGD8ox-W9jHVfC0dgAAARY"]
[Thu Apr 02 00:47:21.276384 2026] [:error] [pid 8035:tid 8057] [client 20.104.69.172:65408] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wer.php"] [unique_id "ac1MGQY2zflwGmvw_QbUDAAAAJE"]
[Thu Apr 02 00:47:21.693014 2026] [:error] [pid 8035:tid 8041] [client 20.104.69.172:65524] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/crouter.php"] [unique_id "ac1MGQY2zflwGmvw_QbUFAAAAIE"]
[Thu Apr 02 00:47:22.106243 2026] [:error] [pid 8035:tid 8048] [client 20.104.69.172:65520] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/crouter.php"] [unique_id "ac1MGgY2zflwGmvw_QbUGAAAAIg"]
[Thu Apr 02 00:47:22.515811 2026] [:error] [pid 8387:tid 8455] [client 20.104.69.172:65435] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/crouter.php"] [unique_id "ac1MGhdQYJ2y8LDYkv_x4AAAAA4"]
[Thu Apr 02 00:47:22.934308 2026] [:error] [pid 16761:tid 16781] [client 20.104.69.172:65502] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/crouter.php"] [unique_id "ac1MGt4bJXDGRqKZnzwJigAAAFE"]
[Thu Apr 02 00:47:23.344520 2026] [:error] [pid 8035:tid 8064] [client 20.104.69.172:65519] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/COPYRIGHT.php"] [unique_id "ac1MGwY2zflwGmvw_QbUHAAAAJg"]
[Thu Apr 02 00:47:23.764911 2026] [:error] [pid 8036:tid 8097] [client 20.104.69.172:65473] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/COPYRIGHT.php"] [unique_id "ac1MG0MvKg9PFa_VV4zSLwAAANQ"]
[Thu Apr 02 00:47:24.174985 2026] [:error] [pid 8035:tid 8045] [client 20.104.69.172:65426] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/COPYRIGHT.php"] [unique_id "ac1MHAY2zflwGmvw_QbUIgAAAIU"]
[Thu Apr 02 00:47:24.586347 2026] [:error] [pid 8037:tid 8118] [client 20.104.69.172:65478] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/COPYRIGHT.php"] [unique_id "ac1MHIGD8ox-W9jHVfC0egAAAQo"]
[Thu Apr 02 00:47:25.000078 2026] [:error] [pid 8387:tid 8450] [client 20.104.69.172:65419] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/images/hehe.php"] [unique_id "ac1MHBdQYJ2y8LDYkv_x7AAAAAo"]
[Thu Apr 02 00:47:25.425660 2026] [:error] [pid 8036:tid 8089] [client 20.104.69.172:65461] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/images/hehe.php"] [unique_id "ac1MHUMvKg9PFa_VV4zSMAAAAM0"]
[Thu Apr 02 00:47:25.847636 2026] [:error] [pid 8387:tid 8442] [client 20.104.69.172:65442] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/images/hehe.php"] [unique_id "ac1MHRdQYJ2y8LDYkv_x8QAAAAI"]
[Thu Apr 02 00:47:26.263767 2026] [:error] [pid 8387:tid 8451] [client 20.104.69.172:64841] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/images/hehe.php"] [unique_id "ac1MHhdQYJ2y8LDYkv_x8wAAAAs"]
[Thu Apr 02 00:47:26.685821 2026] [:error] [pid 8035:tid 8043] [client 20.104.69.172:65416] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-conter.php"] [unique_id "ac1MHgY2zflwGmvw_QbUKwAAAIM"]
[Thu Apr 02 00:47:27.113468 2026] [:error] [pid 16761:tid 16774] [client 20.104.69.172:65462] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-conter.php"] [unique_id "ac1MH94bJXDGRqKZnzwJkQAAAEo"]
[Thu Apr 02 00:47:27.528162 2026] [:error] [pid 8387:tid 8456] [client 20.104.69.172:64877] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-conter.php"] [unique_id "ac1MHxdQYJ2y8LDYkv_x-AAAAA8"]
[Thu Apr 02 00:47:27.993467 2026] [:error] [pid 8036:tid 8087] [client 20.104.69.172:65496] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-conter.php"] [unique_id "ac1MH0MvKg9PFa_VV4zSMwAAAMs"]
[Thu Apr 02 00:47:28.403617 2026] [:error] [pid 16761:tid 16779] [client 20.104.69.172:64845] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ua/index_old.php"] [unique_id "ac1MIN4bJXDGRqKZnzwJmgAAAE8"]
[Thu Apr 02 00:47:28.835066 2026] [:error] [pid 16761:tid 16768] [client 20.104.69.172:65476] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ua/index_old.php"] [unique_id "ac1MIN4bJXDGRqKZnzwJnAAAAEQ"]
[Thu Apr 02 00:47:29.255911 2026] [:error] [pid 8387:tid 8453] [client 20.104.69.172:64771] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ua/index_old.php"] [unique_id "ac1MIRdQYJ2y8LDYkv_x-gAAAA0"]
[Thu Apr 02 00:47:29.669846 2026] [:error] [pid 16761:tid 16770] [client 20.104.69.172:65515] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ua/index_old.php"] [unique_id "ac1MId4bJXDGRqKZnzwJoQAAAEY"]
[Thu Apr 02 00:47:30.097495 2026] [:error] [pid 16761:tid 16784] [client 20.104.69.172:65469] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/upgrade.php"] [unique_id "ac1MIt4bJXDGRqKZnzwJpgAAAFQ"]
[Thu Apr 02 00:47:30.511750 2026] [:error] [pid 16761:tid 16769] [client 20.104.69.172:64885] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/upgrade.php"] [unique_id "ac1MIt4bJXDGRqKZnzwJqgAAAEU"]
[Thu Apr 02 00:47:30.929215 2026] [:error] [pid 16761:tid 16780] [client 20.104.69.172:65493] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/upgrade.php"] [unique_id "ac1MIt4bJXDGRqKZnzwJrwAAAFA"]
[Thu Apr 02 00:47:31.343921 2026] [:error] [pid 16761:tid 16781] [client 20.104.69.172:64866] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/upgrade.php"] [unique_id "ac1MI94bJXDGRqKZnzwJswAAAFE"]
[Thu Apr 02 00:47:31.774698 2026] [:error] [pid 8035:tid 8051] [client 20.104.69.172:65427] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-adminmaintmailer.php"] [unique_id "ac1MIwY2zflwGmvw_QbUMwAAAIs"]
[Thu Apr 02 00:47:32.200172 2026] [:error] [pid 8037:tid 8120] [client 20.104.69.172:65446] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-adminmaintmailer.php"] [unique_id "ac1MJIGD8ox-W9jHVfC0iQAAAQw"]
[Thu Apr 02 00:47:32.622647 2026] [:error] [pid 8035:tid 8055] [client 20.104.69.172:65425] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-adminmaintmailer.php"] [unique_id "ac1MJAY2zflwGmvw_QbUNwAAAI8"]
[Thu Apr 02 00:47:33.041280 2026] [:error] [pid 8037:tid 8131] [client 20.104.69.172:65410] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-adminmaintmailer.php"] [unique_id "ac1MJYGD8ox-W9jHVfC0igAAARc"]
[Thu Apr 02 00:47:33.457977 2026] [:error] [pid 8037:tid 8130] [client 20.104.69.172:64858] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/en/wp-login.php"] [unique_id "ac1MJYGD8ox-W9jHVfC0iwAAARY"]
[Thu Apr 02 00:47:33.869031 2026] [:error] [pid 8037:tid 8124] [client 20.104.69.172:65434] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/en/wp-login.php"] [unique_id "ac1MJYGD8ox-W9jHVfC0jQAAARA"]
[Thu Apr 02 00:47:34.297178 2026] [:error] [pid 8387:tid 8452] [client 20.104.69.172:65463] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/en/wp-login.php"] [unique_id "ac1MJhdQYJ2y8LDYkv_yAwAAAAw"]
[Thu Apr 02 00:47:34.717701 2026] [:error] [pid 16761:tid 16770] [client 20.104.69.172:64773] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/en/wp-login.php"] [unique_id "ac1MJt4bJXDGRqKZnzwJuwAAAEY"]
[Thu Apr 02 00:47:35.142842 2026] [:error] [pid 8387:tid 8457] [client 20.104.69.172:65484] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ru/adminer-4.2.4.php"] [unique_id "ac1MJxdQYJ2y8LDYkv_yCQAAABA"]
[Thu Apr 02 00:47:35.565036 2026] [:error] [pid 8035:tid 8051] [client 20.104.69.172:65467] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ru/adminer-4.2.4.php"] [unique_id "ac1MJwY2zflwGmvw_QbUQQAAAIs"]
[Thu Apr 02 00:47:35.979875 2026] [:error] [pid 8035:tid 8056] [client 20.104.69.172:64852] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ru/adminer-4.2.4.php"] [unique_id "ac1MJwY2zflwGmvw_QbURAAAAJA"]
[Thu Apr 02 00:47:36.410171 2026] [:error] [pid 8036:tid 8089] [client 20.104.69.172:65458] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ru/adminer-4.2.4.php"] [unique_id "ac1MKEMvKg9PFa_VV4zSPwAAAM0"]
[Thu Apr 02 00:47:36.821066 2026] [:error] [pid 8035:tid 8061] [client 20.104.69.172:64842] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hvoxejcn.php"] [unique_id "ac1MKAY2zflwGmvw_QbUUAAAAJU"]
[Thu Apr 02 00:47:37.238948 2026] [:error] [pid 8035:tid 8050] [client 20.104.69.172:65415] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hvoxejcn.php"] [unique_id "ac1MKQY2zflwGmvw_QbUVQAAAIo"]
[Thu Apr 02 00:47:37.651743 2026] [:error] [pid 8387:tid 8452] [client 20.104.69.172:65413] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hvoxejcn.php"] [unique_id "ac1MKRdQYJ2y8LDYkv_yFgAAAAw"]
[Thu Apr 02 00:47:38.069309 2026] [:error] [pid 16761:tid 16773] [client 20.104.69.172:65479] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hvoxejcn.php"] [unique_id "ac1MKt4bJXDGRqKZnzwJvwAAAEk"]
[Thu Apr 02 00:47:38.497825 2026] [:error] [pid 8387:tid 8468] [client 20.104.69.172:65489] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rasp.php"] [unique_id "ac1MKhdQYJ2y8LDYkv_yGgAAABg"]
[Thu Apr 02 00:47:38.922475 2026] [:error] [pid 8037:tid 8116] [client 20.104.69.172:65459] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rasp.php"] [unique_id "ac1MKoGD8ox-W9jHVfC0lgAAAQg"]
[Thu Apr 02 00:47:39.347028 2026] [:error] [pid 16761:tid 16788] [client 20.104.69.172:65431] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rasp.php"] [unique_id "ac1MK94bJXDGRqKZnzwJyAAAAFg"]
[Thu Apr 02 00:47:39.763380 2026] [:error] [pid 8035:tid 8047] [client 20.104.69.172:65438] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rasp.php"] [unique_id "ac1MKwY2zflwGmvw_QbUYQAAAIc"]
[Thu Apr 02 00:47:40.201130 2026] [:error] [pid 8037:tid 8123] [client 20.104.69.172:64880] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sk-park.php"] [unique_id "ac1MLIGD8ox-W9jHVfC0mQAAAQ8"]
[Thu Apr 02 00:47:40.614697 2026] [:error] [pid 16761:tid 16784] [client 20.104.69.172:65451] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sk-park.php"] [unique_id "ac1MLN4bJXDGRqKZnzwJywAAAFQ"]
[Thu Apr 02 00:47:41.035585 2026] [:error] [pid 8037:tid 8130] [client 20.104.69.172:65448] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sk-park.php"] [unique_id "ac1MLYGD8ox-W9jHVfC0mwAAARY"]
[Thu Apr 02 00:47:41.447340 2026] [:error] [pid 8387:tid 8442] [client 20.104.69.172:64836] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sk-park.php"] [unique_id "ac1MLRdQYJ2y8LDYkv_yHgAAAAI"]
[Thu Apr 02 00:47:41.859676 2026] [:error] [pid 8035:tid 8054] [client 20.104.69.172:65460] [client 20.104.69.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/functions.php"] [unique_id "ac1MLQY2zflwGmvw_QbUaAAAAI4"]
[Thu Apr 02 00:47:42.271818 2026] [:error] [pid 16761:tid 16787] [client 20.104.69.172:65418] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-settings.php"] [unique_id "ac1MLt4bJXDGRqKZnzwJzwAAAFc"]
[Thu Apr 02 00:47:42.701602 2026] [:error] [pid 16761:tid 16768] [client 20.104.69.172:65480] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-settings.php"] [unique_id "ac1MLt4bJXDGRqKZnzwJ0wAAAEQ"]
[Thu Apr 02 00:47:43.133332 2026] [:error] [pid 16761:tid 16783] [client 20.104.69.172:64839] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-settings.php"] [unique_id "ac1ML94bJXDGRqKZnzwJ1gAAAFM"]
[Thu Apr 02 00:47:43.550188 2026] [:error] [pid 16761:tid 16773] [client 20.104.69.172:64844] [client 20.104.69.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pluggable.php"] [unique_id "ac1ML94bJXDGRqKZnzwJ4AAAAEk"]
[Thu Apr 02 00:47:43.983613 2026] [:error] [pid 16761:tid 16764] [client 20.104.69.172:64819] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index.php"] [unique_id "ac1ML94bJXDGRqKZnzwJ4wAAAEA"]
[Thu Apr 02 00:47:44.397624 2026] [:error] [pid 8387:tid 8440] [client 20.104.69.172:65523] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index.php"] [unique_id "ac1MMBdQYJ2y8LDYkv_yIwAAAAA"]
[Thu Apr 02 00:47:44.815897 2026] [:error] [pid 8387:tid 8468] [client 20.104.69.172:65443] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index.php"] [unique_id "ac1MMBdQYJ2y8LDYkv_yJQAAABg"]
[Thu Apr 02 00:47:45.236480 2026] [:error] [pid 8387:tid 8450] [client 20.104.69.172:64859] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index.php"] [unique_id "ac1MMRdQYJ2y8LDYkv_yKQAAAAo"]
[Thu Apr 02 00:47:45.651775 2026] [:error] [pid 8037:tid 8110] [client 20.104.69.172:64840] [client 20.104.69.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/13.php"] [unique_id "ac1MMYGD8ox-W9jHVfC0pwAAAQI"]
[Thu Apr 02 00:47:46.104080 2026] [:error] [pid 8036:tid 8101] [client 20.104.69.172:64849] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uctshcum.php"] [unique_id "ac1MMkMvKg9PFa_VV4zSRQAAANc"]
[Thu Apr 02 00:47:46.523056 2026] [:error] [pid 8036:tid 8090] [client 20.104.69.172:64873] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uctshcum.php"] [unique_id "ac1MMkMvKg9PFa_VV4zSSQAAAM4"]
[Thu Apr 02 00:47:46.948515 2026] [:error] [pid 8036:tid 8085] [client 20.104.69.172:65424] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uctshcum.php"] [unique_id "ac1MMkMvKg9PFa_VV4zSTAAAAMk"]
[Thu Apr 02 00:47:47.378354 2026] [:error] [pid 8036:tid 8094] [client 20.104.69.172:65497] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/old/wp-admin/setup-config.php"] [unique_id "ac1MM0MvKg9PFa_VV4zSUAAAANE"]
[Thu Apr 02 00:47:47.804564 2026] [:error] [pid 8037:tid 8124] [client 20.104.69.172:65471] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/old/wp-admin/setup-config.php"] [unique_id "ac1MM4GD8ox-W9jHVfC0rgAAARA"]
[Thu Apr 02 00:47:48.222477 2026] [:error] [pid 16761:tid 16766] [client 20.104.69.172:65447] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/old/wp-admin/setup-config.php"] [unique_id "ac1MNN4bJXDGRqKZnzwJ7gAAAEI"]
[Thu Apr 02 00:47:48.636039 2026] [:error] [pid 8387:tid 8440] [client 20.104.69.172:65527] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/old/wp-admin/setup-config.php"] [unique_id "ac1MNBdQYJ2y8LDYkv_yMQAAAAA"]
[Thu Apr 02 00:47:49.058636 2026] [:error] [pid 8035:tid 8052] [client 20.104.69.172:64775] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/expect.php"] [unique_id "ac1MNQY2zflwGmvw_QbUbQAAAIw"]
[Thu Apr 02 00:47:49.482393 2026] [:error] [pid 8036:tid 8076] [client 20.104.69.172:65511] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/expect.php"] [unique_id "ac1MNUMvKg9PFa_VV4zSVAAAAMA"]
[Thu Apr 02 00:47:49.901322 2026] [:error] [pid 8035:tid 8055] [client 20.104.69.172:64856] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/expect.php"] [unique_id "ac1MNQY2zflwGmvw_QbUcAAAAI8"]
[Thu Apr 02 00:47:50.318556 2026] [:error] [pid 16761:tid 16775] [client 20.104.69.172:65487] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/expect.php"] [unique_id "ac1MNt4bJXDGRqKZnzwKAQAAAEs"]
[Thu Apr 02 00:47:50.749666 2026] [:error] [pid 16761:tid 16788] [client 20.104.69.172:64780] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/json.php"] [unique_id "ac1MNt4bJXDGRqKZnzwKAgAAAFg"]
[Thu Apr 02 00:47:51.192627 2026] [:error] [pid 16761:tid 16767] [client 20.104.69.172:64881] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/json.php"] [unique_id "ac1MN94bJXDGRqKZnzwKBQAAAEM"]
[Thu Apr 02 00:47:51.605953 2026] [:error] [pid 8035:tid 8047] [client 20.104.69.172:64772] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/json.php"] [unique_id "ac1MNwY2zflwGmvw_QbUeQAAAIc"]
[Thu Apr 02 00:47:52.042194 2026] [:error] [pid 16761:tid 16775] [client 20.104.69.172:64843] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/json.php"] [unique_id "ac1MON4bJXDGRqKZnzwKDAAAAEs"]
[Thu Apr 02 00:47:52.460256 2026] [:error] [pid 8037:tid 8111] [client 20.104.69.172:65508] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/uploads/lv.php"] [unique_id "ac1MOIGD8ox-W9jHVfC0vgAAAQM"]
[Thu Apr 02 00:47:52.884057 2026] [:error] [pid 8387:tid 8446] [client 20.104.69.172:64786] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/uploads/lv.php"] [unique_id "ac1MOBdQYJ2y8LDYkv_yNwAAAAY"]
[Thu Apr 02 00:47:53.314190 2026] [:error] [pid 8035:tid 8058] [client 20.104.69.172:65470] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/uploads/lv.php"] [unique_id "ac1MOQY2zflwGmvw_QbUfQAAAJI"]
[Thu Apr 02 00:47:53.730943 2026] [:error] [pid 8387:tid 8443] [client 20.104.69.172:65452] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/uploads/lv.php"] [unique_id "ac1MORdQYJ2y8LDYkv_yPQAAAAM"]
[Thu Apr 02 00:47:54.145870 2026] [:error] [pid 8036:tid 8096] [client 20.104.69.172:64203] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "ac1MOkMvKg9PFa_VV4zSXQAAANM"]
[Thu Apr 02 00:47:54.565096 2026] [:error] [pid 8387:tid 8450] [client 20.104.69.172:64825] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "ac1MOhdQYJ2y8LDYkv_yQwAAAAo"]
[Thu Apr 02 00:47:54.982026 2026] [:error] [pid 16761:tid 16780] [client 20.104.69.172:65499] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "ac1MOt4bJXDGRqKZnzwKGQAAAFA"]
[Thu Apr 02 00:47:55.395291 2026] [:error] [pid 8387:tid 8453] [client 20.104.69.172:65505] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "ac1MOxdQYJ2y8LDYkv_ySgAAAA0"]
[Thu Apr 02 00:47:55.812756 2026] [:error] [pid 8387:tid 8456] [client 20.104.69.172:64783] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/uploads/media.php"] [unique_id "ac1MOxdQYJ2y8LDYkv_yTQAAAA8"]
[Thu Apr 02 00:47:56.249371 2026] [:error] [pid 8387:tid 8442] [client 20.104.69.172:65472] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/uploads/media.php"] [unique_id "ac1MPBdQYJ2y8LDYkv_yUAAAAAI"]
[Thu Apr 02 00:47:56.667973 2026] [:error] [pid 8036:tid 8080] [client 20.104.69.172:65466] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/uploads/media.php"] [unique_id "ac1MPEMvKg9PFa_VV4zSYQAAAMQ"]
[Thu Apr 02 00:47:57.105856 2026] [:error] [pid 16761:tid 16768] [client 20.104.69.172:64835] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/uploads/media.php"] [unique_id "ac1MPd4bJXDGRqKZnzwKHwAAAEQ"]
[Thu Apr 02 00:47:57.519762 2026] [:error] [pid 16761:tid 16783] [client 20.104.69.172:64837] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "ac1MPd4bJXDGRqKZnzwKIgAAAFM"]
[Thu Apr 02 00:47:57.942395 2026] [:error] [pid 16761:tid 16776] [client 20.104.69.172:64804] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "ac1MPd4bJXDGRqKZnzwKJAAAAEw"]
[Thu Apr 02 00:47:58.362732 2026] [:error] [pid 16761:tid 16788] [client 20.104.69.172:64822] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "ac1MPt4bJXDGRqKZnzwKKAAAAFg"]
[Thu Apr 02 00:47:58.793424 2026] [:error] [pid 8036:tid 8082] [client 20.104.69.172:64874] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "ac1MPkMvKg9PFa_VV4zSaAAAAMY"]
[Thu Apr 02 00:47:59.237460 2026] [:error] [pid 8036:tid 8080] [client 20.104.69.172:65490] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/coffee/about.php"] [unique_id "ac1MP0MvKg9PFa_VV4zSbAAAAMQ"]
[Thu Apr 02 00:47:59.653740 2026] [:error] [pid 8036:tid 8085] [client 20.104.69.172:65481] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/coffee/about.php"] [unique_id "ac1MP0MvKg9PFa_VV4zScQAAAMk"]
[Thu Apr 02 00:48:00.083877 2026] [:error] [pid 8387:tid 8444] [client 20.104.69.172:65500] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/coffee/about.php"] [unique_id "ac1MQBdQYJ2y8LDYkv_ybgAAAAQ"]
[Thu Apr 02 00:48:00.502671 2026] [:error] [pid 8387:tid 8446] [client 20.104.69.172:65428] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/coffee/about.php"] [unique_id "ac1MQBdQYJ2y8LDYkv_ybwAAAAY"]
[Thu Apr 02 00:48:00.942400 2026] [:error] [pid 8387:tid 8452] [client 20.104.69.172:65475] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/browse.php"] [unique_id "ac1MQBdQYJ2y8LDYkv_ydQAAAAw"]
[Thu Apr 02 00:48:01.392680 2026] [:error] [pid 8387:tid 8444] [client 20.104.69.172:64846] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/browse.php"] [unique_id "ac1MQRdQYJ2y8LDYkv_yfAAAAAQ"]
[Thu Apr 02 00:48:01.815783 2026] [:error] [pid 8036:tid 8082] [client 20.104.69.172:64802] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/browse.php"] [unique_id "ac1MQUMvKg9PFa_VV4zSdgAAAMY"]
[Thu Apr 02 00:48:02.238625 2026] [:error] [pid 8387:tid 8449] [client 20.104.69.172:64807] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/browse.php"] [unique_id "ac1MQhdQYJ2y8LDYkv_ygQAAAAk"]
[Thu Apr 02 00:48:02.654424 2026] [:error] [pid 8387:tid 8461] [client 20.104.69.172:64134] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index/lock.php"] [unique_id "ac1MQhdQYJ2y8LDYkv_yggAAABQ"]
[Thu Apr 02 00:48:03.072959 2026] [:error] [pid 8036:tid 8089] [client 20.104.69.172:65441] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index/lock.php"] [unique_id "ac1MQ0MvKg9PFa_VV4zSfQAAAM0"]
[Thu Apr 02 00:48:03.487707 2026] [:error] [pid 16761:tid 16785] [client 20.104.69.172:64815] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index/lock.php"] [unique_id "ac1MQ94bJXDGRqKZnzwKRQAAAFU"]
[Thu Apr 02 00:48:03.908839 2026] [:error] [pid 8387:tid 8467] [client 20.104.69.172:64865] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index/lock.php"] [unique_id "ac1MQxdQYJ2y8LDYkv_yhgAAABc"]
[Thu Apr 02 00:48:04.330213 2026] [:error] [pid 8035:tid 8040] [client 20.104.69.172:64801] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/config.php"] [unique_id "ac1MRAY2zflwGmvw_QbUiwAAAIA"]
[Thu Apr 02 00:48:04.755578 2026] [:error] [pid 16761:tid 16773] [client 20.104.69.172:65432] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/config.php"] [unique_id "ac1MRN4bJXDGRqKZnzwKUgAAAEk"]
[Thu Apr 02 00:48:05.186141 2026] [:error] [pid 16761:tid 16776] [client 20.104.69.172:64805] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/config.php"] [unique_id "ac1MRd4bJXDGRqKZnzwKWQAAAEw"]
[Thu Apr 02 00:48:05.598459 2026] [:error] [pid 16761:tid 16788] [client 20.104.69.172:64198] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/config.php"] [unique_id "ac1MRd4bJXDGRqKZnzwKYAAAAFg"]
[Thu Apr 02 00:48:06.033484 2026] [:error] [pid 8036:tid 8082] [client 20.104.69.172:64871] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Thu Apr 02 00:48:06.238868 2026] [:error] [pid 8036:tid 8083] [client 20.104.69.172:64871] [client 20.104.69.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "ac1MRkMvKg9PFa_VV4zSgQAAAMc"]
[Thu Apr 02 00:48:07.306249 2026] [:error] [pid 8387:tid 8460] [client 20.104.69.172:64792] [client 20.104.69.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "ac1MRxdQYJ2y8LDYkv_ykgAAABM"]
[Thu Apr 02 00:48:07.721605 2026] [:error] [pid 8035:tid 8049] [client 20.104.69.172:64855] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packed.php"] [unique_id "ac1MRwY2zflwGmvw_QbUmwAAAIk"]
[Thu Apr 02 00:48:08.138936 2026] [:error] [pid 8035:tid 8055] [client 20.104.69.172:64847] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packed.php"] [unique_id "ac1MSAY2zflwGmvw_QbUnQAAAI8"]
[Thu Apr 02 00:48:08.565914 2026] [:error] [pid 16761:tid 16774] [client 20.104.69.172:64833] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packed.php"] [unique_id "ac1MSN4bJXDGRqKZnzwKfgAAAEo"]
[Thu Apr 02 00:48:09.008877 2026] [:error] [pid 16761:tid 16771] [client 20.104.69.172:65423] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/update.php"] [unique_id "ac1MSd4bJXDGRqKZnzwKhQAAAEc"]
[Thu Apr 02 00:48:09.422307 2026] [:error] [pid 16761:tid 16774] [client 20.104.69.172:64848] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/update.php"] [unique_id "ac1MSd4bJXDGRqKZnzwKiQAAAEo"]
[Thu Apr 02 00:48:09.833973 2026] [:error] [pid 8387:tid 8457] [client 20.104.69.172:65510] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/update.php"] [unique_id "ac1MSRdQYJ2y8LDYkv_ymgAAABA"]
[Thu Apr 02 00:48:10.259806 2026] [:error] [pid 16761:tid 16783] [client 20.104.69.172:64795] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/update.php"] [unique_id "ac1MSt4bJXDGRqKZnzwKkAAAAFM"]
[Thu Apr 02 00:48:10.703888 2026] [:error] [pid 8036:tid 8078] [client 20.104.69.172:64787] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "ac1MSkMvKg9PFa_VV4zSigAAAMI"]
[Thu Apr 02 00:48:11.124147 2026] [:error] [pid 8036:tid 8085] [client 20.104.69.172:65430] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "ac1MS0MvKg9PFa_VV4zSjAAAAMk"]
[Thu Apr 02 00:48:11.537107 2026] [:error] [pid 8035:tid 8059] [client 20.104.69.172:65468] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "ac1MSwY2zflwGmvw_QbUpwAAAJM"]
[Thu Apr 02 00:48:11.966275 2026] [:error] [pid 16761:tid 16783] [client 20.104.69.172:65439] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "ac1MS94bJXDGRqKZnzwKmgAAAFM"]
[Thu Apr 02 00:48:12.381515 2026] [:error] [pid 8036:tid 8087] [client 20.104.69.172:65455] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/footer.php"] [unique_id "ac1MTEMvKg9PFa_VV4zSjQAAAMs"]
[Thu Apr 02 00:48:12.794562 2026] [:error] [pid 8036:tid 8090] [client 20.104.69.172:64889] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/footer.php"] [unique_id "ac1MTEMvKg9PFa_VV4zSjwAAAM4"]
[Thu Apr 02 00:48:13.244568 2026] [:error] [pid 8037:tid 8116] [client 20.104.69.172:64797] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/footer.php"] [unique_id "ac1MTYGD8ox-W9jHVfC02QAAAQg"]
[Thu Apr 02 00:48:13.657186 2026] [:error] [pid 8387:tid 8447] [client 20.104.69.172:65477] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/footer.php"] [unique_id "ac1MTRdQYJ2y8LDYkv_yqgAAAAc"]
[Thu Apr 02 00:48:14.104306 2026] [:error] [pid 8036:tid 8094] [client 20.104.69.172:65449] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "ac1MTkMvKg9PFa_VV4zSlAAAANE"]
[Thu Apr 02 00:48:14.524838 2026] [:error] [pid 8387:tid 8448] [client 20.104.69.172:64217] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "ac1MThdQYJ2y8LDYkv_yrQAAAAg"]
[Thu Apr 02 00:48:14.945043 2026] [:error] [pid 16761:tid 16782] [client 20.104.69.172:64215] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "ac1MTt4bJXDGRqKZnzwKsQAAAFI"]
[Thu Apr 02 00:48:15.368985 2026] [:error] [pid 8036:tid 8099] [client 20.104.69.172:64821] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "ac1MT0MvKg9PFa_VV4zSlwAAANY"]
[Thu Apr 02 00:48:15.784149 2026] [:error] [pid 16761:tid 16775] [client 20.104.69.172:64202] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fw.php"] [unique_id "ac1MT94bJXDGRqKZnzwKtwAAAEs"]
[Thu Apr 02 00:48:16.200360 2026] [:error] [pid 8387:tid 8460] [client 20.104.69.172:64838] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fw.php"] [unique_id "ac1MUBdQYJ2y8LDYkv_ytQAAABM"]
[Thu Apr 02 00:48:16.612340 2026] [:error] [pid 16761:tid 16774] [client 20.104.69.172:65506] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fw.php"] [unique_id "ac1MUN4bJXDGRqKZnzwKugAAAEo"]
[Thu Apr 02 00:48:17.038002 2026] [:error] [pid 16761:tid 16764] [client 20.104.69.172:64796] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fw.php"] [unique_id "ac1MUd4bJXDGRqKZnzwKvQAAAEA"]
[Thu Apr 02 00:48:17.457935 2026] [:error] [pid 16761:tid 16767] [client 20.104.69.172:64861] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/post.php"] [unique_id "ac1MUd4bJXDGRqKZnzwKwAAAAEM"]
[Thu Apr 02 00:48:17.872474 2026] [:error] [pid 8037:tid 8123] [client 20.104.69.172:65513] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/post.php"] [unique_id "ac1MUYGD8ox-W9jHVfC03AAAAQ8"]
[Thu Apr 02 00:48:18.288571 2026] [:error] [pid 16761:tid 16768] [client 20.104.69.172:64853] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/post.php"] [unique_id "ac1MUt4bJXDGRqKZnzwKxwAAAEQ"]
[Thu Apr 02 00:48:18.699051 2026] [:error] [pid 16761:tid 16769] [client 20.104.69.172:64882] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/post.php"] [unique_id "ac1MUt4bJXDGRqKZnzwKzAAAAEU"]
[Thu Apr 02 00:48:19.134217 2026] [:error] [pid 8036:tid 8090] [client 20.104.69.172:65525] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "ac1MU0MvKg9PFa_VV4zSmwAAAM4"]
[Thu Apr 02 00:48:19.558107 2026] [:error] [pid 16761:tid 16783] [client 20.104.69.172:64244] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "ac1MU94bJXDGRqKZnzwK1AAAAFM"]
[Thu Apr 02 00:48:19.980665 2026] [:error] [pid 8036:tid 8092] [client 20.104.69.172:64788] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "ac1MU0MvKg9PFa_VV4zSnAAAANA"]
[Thu Apr 02 00:48:20.400362 2026] [:error] [pid 16761:tid 16766] [client 20.104.69.172:65454] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "ac1MVN4bJXDGRqKZnzwK2wAAAEI"]
[Thu Apr 02 00:48:20.827252 2026] [:error] [pid 16761:tid 16787] [client 20.104.69.172:64827] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/moon.php"] [unique_id "ac1MVN4bJXDGRqKZnzwK4QAAAFc"]
[Thu Apr 02 00:48:21.244064 2026] [:error] [pid 16761:tid 16772] [client 20.104.69.172:64887] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/moon.php"] [unique_id "ac1MVd4bJXDGRqKZnzwK5gAAAEg"]
[Thu Apr 02 00:48:21.703109 2026] [:error] [pid 8037:tid 8110] [client 20.104.69.172:64223] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/moon.php"] [unique_id "ac1MVYGD8ox-W9jHVfC04QAAAQI"]
[Thu Apr 02 00:48:22.118324 2026] [:error] [pid 16761:tid 16771] [client 20.104.69.172:64860] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/moon.php"] [unique_id "ac1MVt4bJXDGRqKZnzwK6gAAAEc"]
[Thu Apr 02 00:48:22.534378 2026] [:error] [pid 8387:tid 8450] [client 20.104.69.172:64204] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/m.php"] [unique_id "ac1MVhdQYJ2y8LDYkv_yvQAAAAo"]
[Thu Apr 02 00:48:22.964653 2026] [:error] [pid 8037:tid 8123] [client 20.104.69.172:64156] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/m.php"] [unique_id "ac1MVoGD8ox-W9jHVfC05gAAAQ8"]
[Thu Apr 02 00:48:23.392335 2026] [:error] [pid 16761:tid 16776] [client 20.104.69.172:64789] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/m.php"] [unique_id "ac1MV94bJXDGRqKZnzwK7QAAAEw"]
[Thu Apr 02 00:48:23.821282 2026] [:error] [pid 8036:tid 8076] [client 20.104.69.172:64212] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/m.php"] [unique_id "ac1MV0MvKg9PFa_VV4zSoQAAAMA"]
[Thu Apr 02 00:48:24.248558 2026] [:error] [pid 8037:tid 8124] [client 20.104.69.172:64249] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/images/admin.php"] [unique_id "ac1MWIGD8ox-W9jHVfC07AAAARA"]
[Thu Apr 02 00:48:24.688649 2026] [:error] [pid 8037:tid 8131] [client 20.104.69.172:64224] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/images/admin.php"] [unique_id "ac1MWIGD8ox-W9jHVfC07QAAARc"]
[Thu Apr 02 00:48:25.190801 2026] [:error] [pid 8387:tid 8445] [client 20.104.69.172:65411] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/images/admin.php"] [unique_id "ac1MWRdQYJ2y8LDYkv_ywwAAAAU"]
[Thu Apr 02 00:48:25.603616 2026] [:error] [pid 8387:tid 8455] [client 20.104.69.172:64850] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/images/admin.php"] [unique_id "ac1MWRdQYJ2y8LDYkv_yxgAAAA4"]
[Thu Apr 02 00:48:26.022624 2026] [:error] [pid 8387:tid 8448] [client 20.104.69.172:64811] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/user/admin.php"] [unique_id "ac1MWhdQYJ2y8LDYkv_yyAAAAAg"]
[Thu Apr 02 00:48:26.490137 2026] [:error] [pid 8387:tid 8449] [client 20.104.69.172:64857] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/user/admin.php"] [unique_id "ac1MWhdQYJ2y8LDYkv_yzAAAAAk"]
[Thu Apr 02 00:48:26.999024 2026] [:error] [pid 8387:tid 8455] [client 20.104.69.172:64818] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/user/admin.php"] [unique_id "ac1MWhdQYJ2y8LDYkv_y0wAAAA4"]
[Thu Apr 02 00:48:27.508432 2026] [:error] [pid 8387:tid 8460] [client 20.104.69.172:65521] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/user/admin.php"] [unique_id "ac1MWxdQYJ2y8LDYkv_y1QAAABM"]
[Thu Apr 02 00:48:27.999865 2026] [:error] [pid 8036:tid 8078] [client 20.104.69.172:64770] [client 20.104.69.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/shell.php"] [unique_id "ac1MW0MvKg9PFa_VV4zSpQAAAMI"]
[Thu Apr 02 00:48:28.427284 2026] [:error] [pid 8036:tid 8081] [client 20.104.69.172:64242] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "ac1MXEMvKg9PFa_VV4zSqAAAAMU"]
[Thu Apr 02 00:48:28.842781 2026] [:error] [pid 8036:tid 8090] [client 20.104.69.172:64854] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "ac1MXEMvKg9PFa_VV4zSqQAAAM4"]
[Thu Apr 02 00:48:29.279606 2026] [:error] [pid 8387:tid 8467] [client 20.104.69.172:64782] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "ac1MXRdQYJ2y8LDYkv_y2gAAABc"]
[Thu Apr 02 00:48:29.697627 2026] [:error] [pid 8037:tid 8121] [client 20.104.69.172:65420] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/upload/themes-install.php"] [unique_id "ac1MXYGD8ox-W9jHVfC08gAAAQ0"]
[Thu Apr 02 00:48:30.114688 2026] [:error] [pid 16761:tid 16782] [client 20.104.69.172:64810] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/upload/themes-install.php"] [unique_id "ac1MXt4bJXDGRqKZnzwK-gAAAFI"]
[Thu Apr 02 00:48:30.542994 2026] [:error] [pid 8387:tid 8457] [client 20.104.69.172:64879] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/upload/themes-install.php"] [unique_id "ac1MXhdQYJ2y8LDYkv_y4AAAABA"]
[Thu Apr 02 00:48:30.960105 2026] [:error] [pid 8387:tid 8452] [client 20.104.69.172:64875] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/upload/themes-install.php"] [unique_id "ac1MXhdQYJ2y8LDYkv_y5AAAAAw"]
[Thu Apr 02 00:48:31.390037 2026] [:error] [pid 16761:tid 16776] [client 20.104.69.172:64233] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ac1MX94bJXDGRqKZnzwK_AAAAEw"]
[Thu Apr 02 00:48:31.806249 2026] [:error] [pid 8037:tid 8115] [client 20.104.69.172:64218] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ac1MX4GD8ox-W9jHVfC09wAAAQc"]
[Thu Apr 02 00:48:32.217217 2026] [:error] [pid 16761:tid 16766] [client 20.104.69.172:64868] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ac1MYN4bJXDGRqKZnzwK_wAAAEI"]
[Thu Apr 02 00:48:32.634672 2026] [:error] [pid 16761:tid 16771] [client 20.104.69.172:64851] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ac1MYN4bJXDGRqKZnzwLAQAAAEc"]
[Thu Apr 02 00:48:33.048928 2026] [:error] [pid 16761:tid 16779] [client 20.104.69.172:64213] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/alfa-rex.php"] [unique_id "ac1MYd4bJXDGRqKZnzwLAwAAAE8"]
[Thu Apr 02 00:48:33.469483 2026] [:error] [pid 8035:tid 8045] [client 20.104.69.172:65483] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/alfa-rex.php"] [unique_id "ac1MYQY2zflwGmvw_QbUvAAAAIU"]
[Thu Apr 02 00:48:33.885508 2026] [:error] [pid 8035:tid 8042] [client 20.104.69.172:65433] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/alfa-rex.php"] [unique_id "ac1MYQY2zflwGmvw_QbUvQAAAII"]
[Thu Apr 02 00:48:34.308358 2026] [:error] [pid 8035:tid 8057] [client 20.104.69.172:64894] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/alfa-rex.php"] [unique_id "ac1MYgY2zflwGmvw_QbUvgAAAJE"]
[Thu Apr 02 00:48:34.737223 2026] [:error] [pid 16761:tid 16767] [client 20.104.69.172:64809] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/include/mail.php"] [unique_id "ac1MYt4bJXDGRqKZnzwLCgAAAEM"]
[Thu Apr 02 00:48:35.154207 2026] [:error] [pid 16761:tid 16778] [client 20.104.69.172:64769] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/include/mail.php"] [unique_id "ac1MY94bJXDGRqKZnzwLDgAAAE4"]
[Thu Apr 02 00:48:35.572508 2026] [:error] [pid 8036:tid 8098] [client 20.104.69.172:64808] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/include/mail.php"] [unique_id "ac1MY0MvKg9PFa_VV4zSrQAAANU"]
[Thu Apr 02 00:48:36.003735 2026] [:error] [pid 16761:tid 16775] [client 20.104.69.172:64798] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/include/mail.php"] [unique_id "ac1MZN4bJXDGRqKZnzwLEwAAAEs"]
[Thu Apr 02 00:48:36.429506 2026] [:error] [pid 8387:tid 8442] [client 20.104.69.172:64226] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.well-known/admin.php"] [unique_id "ac1MZBdQYJ2y8LDYkv_y_gAAAAI"]
[Thu Apr 02 00:48:36.841585 2026] [:error] [pid 8037:tid 8121] [client 20.104.69.172:64201] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.well-known/admin.php"] [unique_id "ac1MZIGD8ox-W9jHVfC0_wAAAQ0"]
[Thu Apr 02 00:48:37.264224 2026] [:error] [pid 8387:tid 8441] [client 20.104.69.172:64160] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.well-known/admin.php"] [unique_id "ac1MZRdQYJ2y8LDYkv_zAQAAAAE"]
[Thu Apr 02 00:48:37.678321 2026] [:error] [pid 8387:tid 8450] [client 20.104.69.172:64207] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.well-known/admin.php"] [unique_id "ac1MZRdQYJ2y8LDYkv_zAwAAAAo"]
[Thu Apr 02 00:48:38.094140 2026] [:error] [pid 8036:tid 8095] [client 20.104.69.172:64195] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "ac1MZkMvKg9PFa_VV4zSsAAAANI"]
[Thu Apr 02 00:48:38.516956 2026] [:error] [pid 8387:tid 8458] [client 20.104.69.172:65501] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "ac1MZhdQYJ2y8LDYkv_zBwAAABE"]
[Thu Apr 02 00:48:38.931948 2026] [:error] [pid 16761:tid 16786] [client 20.104.69.172:65517] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "ac1MZt4bJXDGRqKZnzwLHAAAAFY"]
[Thu Apr 02 00:48:39.346423 2026] [:error] [pid 16761:tid 16777] [client 20.104.69.172:65412] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "ac1MZ94bJXDGRqKZnzwLIQAAAE0"]
[Thu Apr 02 00:48:39.765788 2026] [:error] [pid 8035:tid 8053] [client 20.104.69.172:64777] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/about.php"] [unique_id "ac1MZwY2zflwGmvw_QbUwgAAAI0"]
[Thu Apr 02 00:48:40.187788 2026] [:error] [pid 16761:tid 16771] [client 20.104.69.172:64194] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/about.php"] [unique_id "ac1MaN4bJXDGRqKZnzwLKQAAAEc"]
[Thu Apr 02 00:48:40.610030 2026] [:error] [pid 8387:tid 8445] [client 20.104.69.172:64208] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/about.php"] [unique_id "ac1MaBdQYJ2y8LDYkv_zCgAAAAU"]
[Thu Apr 02 00:48:41.071346 2026] [:error] [pid 16761:tid 16776] [client 20.104.69.172:64133] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/about.php"] [unique_id "ac1Mad4bJXDGRqKZnzwLMAAAAEw"]
[Thu Apr 02 00:48:41.486135 2026] [:error] [pid 16761:tid 16779] [client 20.104.69.172:64199] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/log.php"] [unique_id "ac1Mad4bJXDGRqKZnzwLNwAAAE8"]
[Thu Apr 02 00:48:41.901376 2026] [:error] [pid 8036:tid 8086] [client 20.104.69.172:64800] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/log.php"] [unique_id "ac1MaUMvKg9PFa_VV4zSuAAAAMo"]
[Thu Apr 02 00:48:42.321309 2026] [:error] [pid 16761:tid 16786] [client 20.104.69.172:64820] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/log.php"] [unique_id "ac1Mat4bJXDGRqKZnzwLPwAAAFY"]
[Thu Apr 02 00:48:42.737668 2026] [:error] [pid 16761:tid 16767] [client 20.104.69.172:64784] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/log.php"] [unique_id "ac1Mat4bJXDGRqKZnzwLRwAAAEM"]
[Thu Apr 02 00:48:43.154983 2026] [:error] [pid 16761:tid 16766] [client 20.104.69.172:64231] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/xmrlpc.php"] [unique_id "ac1Ma94bJXDGRqKZnzwLSwAAAEI"]
[Thu Apr 02 00:48:43.571171 2026] [:error] [pid 8387:tid 8455] [client 20.104.69.172:64166] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/xmrlpc.php"] [unique_id "ac1MaxdQYJ2y8LDYkv_zDwAAAA4"]
[Thu Apr 02 00:48:43.990994 2026] [:error] [pid 8037:tid 8117] [client 20.104.69.172:64876] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/xmrlpc.php"] [unique_id "ac1Ma4GD8ox-W9jHVfC1DwAAAQk"]
[Thu Apr 02 00:48:44.405621 2026] [:error] [pid 8387:tid 8448] [client 20.104.69.172:64250] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/xmrlpc.php"] [unique_id "ac1MbBdQYJ2y8LDYkv_zFgAAAAg"]
[Thu Apr 02 00:48:44.818514 2026] [:error] [pid 8387:tid 8466] [client 20.104.69.172:65522] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uploads/test.php"] [unique_id "ac1MbBdQYJ2y8LDYkv_zGwAAABY"]
[Thu Apr 02 00:48:45.238332 2026] [:error] [pid 8035:tid 8056] [client 20.104.69.172:64222] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uploads/test.php"] [unique_id "ac1MbQY2zflwGmvw_QbUwwAAAJA"]
[Thu Apr 02 00:48:45.650543 2026] [:error] [pid 8387:tid 8450] [client 20.104.69.172:64196] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uploads/test.php"] [unique_id "ac1MbRdQYJ2y8LDYkv_zHQAAAAo"]
[Thu Apr 02 00:48:46.073085 2026] [:error] [pid 8036:tid 8098] [client 20.104.69.172:64143] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uploads/test.php"] [unique_id "ac1MbkMvKg9PFa_VV4zSuwAAANU"]
[Thu Apr 02 00:48:46.492541 2026] [:error] [pid 8036:tid 8095] [client 20.104.69.172:64251] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/upgrade.php"] [unique_id "ac1MbkMvKg9PFa_VV4zSvQAAANI"]
[Thu Apr 02 00:48:46.907002 2026] [:error] [pid 8387:tid 8467] [client 20.104.69.172:64155] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/upgrade.php"] [unique_id "ac1MbhdQYJ2y8LDYkv_zIQAAABc"]
[Thu Apr 02 00:48:47.322441 2026] [:error] [pid 8035:tid 8044] [client 20.104.69.172:8176] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/upgrade.php"] [unique_id "ac1MbwY2zflwGmvw_QbUygAAAIQ"]
[Thu Apr 02 00:48:47.733682 2026] [:error] [pid 8036:tid 8087] [client 20.104.69.172:64169] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/upgrade.php"] [unique_id "ac1Mb0MvKg9PFa_VV4zSwgAAAMs"]
[Thu Apr 02 00:48:48.148894 2026] [:error] [pid 8035:tid 8041] [client 20.104.69.172:64144] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/max.php"] [unique_id "ac1McAY2zflwGmvw_QbUzgAAAIE"]
[Thu Apr 02 00:48:48.565867 2026] [:error] [pid 16761:tid 16786] [client 20.104.69.172:64883] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/max.php"] [unique_id "ac1McN4bJXDGRqKZnzwLUwAAAFY"]
[Thu Apr 02 00:48:48.979905 2026] [:error] [pid 8035:tid 8061] [client 20.104.69.172:64140] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/max.php"] [unique_id "ac1McAY2zflwGmvw_QbUzwAAAJU"]
[Thu Apr 02 00:48:49.395866 2026] [:error] [pid 8387:tid 8466] [client 20.104.69.172:64794] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/max.php"] [unique_id "ac1McRdQYJ2y8LDYkv_zJgAAABY"]
[Thu Apr 02 00:48:49.808778 2026] [:error] [pid 8387:tid 8460] [client 20.104.69.172:64190] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugins/phpThumb/404.php"] [unique_id "ac1McRdQYJ2y8LDYkv_zKQAAABM"]
[Thu Apr 02 00:48:50.226250 2026] [:error] [pid 16761:tid 16773] [client 20.104.69.172:64884] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugins/phpThumb/404.php"] [unique_id "ac1Mct4bJXDGRqKZnzwLVwAAAEk"]
[Thu Apr 02 00:48:50.656635 2026] [:error] [pid 8035:tid 8049] [client 20.104.69.172:64785] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugins/phpThumb/404.php"] [unique_id "ac1McgY2zflwGmvw_QbU0QAAAIk"]
[Thu Apr 02 00:48:51.070899 2026] [:error] [pid 16761:tid 16785] [client 20.104.69.172:64892] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugins/phpThumb/404.php"] [unique_id "ac1Mc94bJXDGRqKZnzwLWAAAAFU"]
[Thu Apr 02 00:48:51.491393 2026] [:error] [pid 8035:tid 8063] [client 20.104.69.172:64146] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/media.php"] [unique_id "ac1McwY2zflwGmvw_QbU1wAAAJc"]
[Thu Apr 02 00:48:51.911763 2026] [:error] [pid 8036:tid 8076] [client 20.104.69.172:64171] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/media.php"] [unique_id "ac1Mc0MvKg9PFa_VV4zSxQAAAMA"]
[Thu Apr 02 00:48:52.337587 2026] [:error] [pid 8035:tid 8048] [client 20.104.69.172:64834] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/media.php"] [unique_id "ac1MdAY2zflwGmvw_QbU2gAAAIg"]
[Thu Apr 02 00:48:52.768193 2026] [:error] [pid 8037:tid 8108] [client 20.104.69.172:64870] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/media.php"] [unique_id "ac1MdIGD8ox-W9jHVfC1IAAAAQA"]
[Thu Apr 02 00:48:53.189552 2026] [:error] [pid 8387:tid 8455] [client 20.104.69.172:8142] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ac1MdRdQYJ2y8LDYkv_zNwAAAA4"]
[Thu Apr 02 00:48:53.602176 2026] [:error] [pid 8037:tid 8109] [client 20.104.69.172:64768] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ac1MdYGD8ox-W9jHVfC1IQAAAQE"]
[Thu Apr 02 00:48:54.023879 2026] [:error] [pid 8387:tid 8445] [client 20.104.69.172:64829] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ac1MdhdQYJ2y8LDYkv_zPAAAAAU"]
[Thu Apr 02 00:48:54.441515 2026] [:error] [pid 8037:tid 8132] [client 20.104.69.172:8130] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ac1MdoGD8ox-W9jHVfC1IgAAARg"]
[Thu Apr 02 00:48:54.869538 2026] [:error] [pid 8387:tid 8455] [client 20.104.69.172:64823] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "ac1MdhdQYJ2y8LDYkv_zRQAAAA4"]
[Thu Apr 02 00:48:55.298648 2026] [:error] [pid 8035:tid 8058] [client 20.104.69.172:64237] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "ac1MdwY2zflwGmvw_QbU3QAAAJI"]
[Thu Apr 02 00:48:55.712332 2026] [:error] [pid 8035:tid 8062] [client 20.104.69.172:64791] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "ac1MdwY2zflwGmvw_QbU3wAAAJY"]
[Thu Apr 02 00:48:56.132298 2026] [:error] [pid 8036:tid 8081] [client 20.104.69.172:64814] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "ac1MeEMvKg9PFa_VV4zSyAAAAMU"]
[Thu Apr 02 00:48:56.561981 2026] [:error] [pid 8035:tid 8052] [client 20.104.69.172:64252] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/include/wp-configs.php"] [unique_id "ac1MeAY2zflwGmvw_QbU4QAAAIw"]
[Thu Apr 02 00:48:56.977857 2026] [:error] [pid 8037:tid 8120] [client 20.104.69.172:65464] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/include/wp-configs.php"] [unique_id "ac1MeIGD8ox-W9jHVfC1KQAAAQw"]
[Thu Apr 02 00:48:57.406038 2026] [:error] [pid 16761:tid 16766] [client 20.104.69.172:64188] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/include/wp-configs.php"] [unique_id "ac1Med4bJXDGRqKZnzwLaQAAAEI"]
[Thu Apr 02 00:48:57.822312 2026] [:error] [pid 16761:tid 16786] [client 20.104.69.172:64824] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/include/wp-configs.php"] [unique_id "ac1Med4bJXDGRqKZnzwLbAAAAFY"]
[Thu Apr 02 00:48:58.238852 2026] [:error] [pid 16761:tid 16778] [client 20.104.69.172:64225] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "ac1Met4bJXDGRqKZnzwLbQAAAE4"]
[Thu Apr 02 00:48:58.660576 2026] [:error] [pid 8037:tid 8108] [client 20.104.69.172:64234] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "ac1MeoGD8ox-W9jHVfC1LgAAAQA"]
[Thu Apr 02 00:48:59.073262 2026] [:error] [pid 8036:tid 8083] [client 20.104.69.172:64816] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "ac1Me0MvKg9PFa_VV4zSzQAAAMc"]
[Thu Apr 02 00:48:59.485506 2026] [:error] [pid 8387:tid 8461] [client 20.104.69.172:64890] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "ac1MexdQYJ2y8LDYkv_zTgAAABQ"]
[Thu Apr 02 00:48:59.896920 2026] [:error] [pid 8037:tid 8124] [client 20.104.69.172:64774] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "ac1Me4GD8ox-W9jHVfC1MAAAARA"]
[Thu Apr 02 00:49:00.321244 2026] [:error] [pid 8036:tid 8092] [client 20.104.69.172:64778] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "ac1MfEMvKg9PFa_VV4zSzgAAANA"]
[Thu Apr 02 00:49:00.755340 2026] [:error] [pid 16761:tid 16780] [client 20.104.69.172:64139] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "ac1MfN4bJXDGRqKZnzwLcAAAAFA"]
[Thu Apr 02 00:49:01.188934 2026] [:error] [pid 16761:tid 16766] [client 20.104.69.172:64131] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "ac1Mfd4bJXDGRqKZnzwLcwAAAEI"]
[Thu Apr 02 00:49:01.609414 2026] [:error] [pid 16761:tid 16786] [client 20.104.69.172:64151] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bg/xmrlpc.php"] [unique_id "ac1Mfd4bJXDGRqKZnzwLdwAAAFY"]
[Thu Apr 02 00:49:02.022177 2026] [:error] [pid 8035:tid 8046] [client 20.104.69.172:64239] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bg/xmrlpc.php"] [unique_id "ac1MfgY2zflwGmvw_QbU7QAAAIY"]
[Thu Apr 02 00:49:02.446560 2026] [:error] [pid 8387:tid 8446] [client 20.104.69.172:65485] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bg/xmrlpc.php"] [unique_id "ac1MfhdQYJ2y8LDYkv_zVAAAAAY"]
[Thu Apr 02 00:49:02.868076 2026] [:error] [pid 8036:tid 8089] [client 20.104.69.172:64158] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bg/xmrlpc.php"] [unique_id "ac1MfkMvKg9PFa_VV4zS0AAAAM0"]
[Thu Apr 02 00:49:03.330517 2026] [:error] [pid 16761:tid 16775] [client 20.104.69.172:64206] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "ac1Mf94bJXDGRqKZnzwLfgAAAEs"]
[Thu Apr 02 00:49:03.769696 2026] [:error] [pid 16761:tid 16766] [client 20.104.69.172:64197] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "ac1Mf94bJXDGRqKZnzwLfwAAAEI"]
[Thu Apr 02 00:49:04.183553 2026] [:error] [pid 16761:tid 16783] [client 20.104.69.172:64130] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "ac1MgN4bJXDGRqKZnzwLhQAAAFM"]
[Thu Apr 02 00:49:04.599704 2026] [:error] [pid 16761:tid 16767] [client 20.104.69.172:64179] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "ac1MgN4bJXDGRqKZnzwLiQAAAEM"]
[Thu Apr 02 00:49:05.044779 2026] [:error] [pid 16761:tid 16784] [client 20.104.69.172:64253] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "ac1Mgd4bJXDGRqKZnzwLjAAAAFQ"]
[Thu Apr 02 00:49:05.502028 2026] [:error] [pid 16761:tid 16771] [client 20.104.69.172:8070] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "ac1Mgd4bJXDGRqKZnzwLkAAAAEc"]
[Thu Apr 02 00:49:05.918453 2026] [:error] [pid 8387:tid 8460] [client 20.104.69.172:64174] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "ac1MgRdQYJ2y8LDYkv_zXAAAABM"]
[Thu Apr 02 00:49:06.352486 2026] [:error] [pid 16761:tid 16784] [client 20.104.69.172:8135] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "ac1Mgt4bJXDGRqKZnzwLmQAAAFQ"]
[Thu Apr 02 00:49:06.780514 2026] [:error] [pid 16761:tid 16787] [client 20.104.69.172:64822] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/byp.php"] [unique_id "ac1Mgt4bJXDGRqKZnzwLnQAAAFc"]
[Thu Apr 02 00:49:07.414501 2026] [:error] [pid 8036:tid 8081] [client 20.104.69.172:64145] [client 20.104.69.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/index.php"] [unique_id "ac1Mg0MvKg9PFa_VV4zS1gAAAMU"]
[Thu Apr 02 00:49:07.833888 2026] [:error] [pid 8387:tid 8440] [client 20.104.69.172:64246] [client 20.104.69.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.104.69.172, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "ac1MgxdQYJ2y8LDYkv_zYgAAAAA"]
[Thu Apr 02 00:49:08.257719 2026] [:error] [pid 8387:tid 8447] [client 20.104.69.172:64246] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Apr 02 00:49:08.676373 2026] [:error] [pid 8387:tid 8467] [client 20.104.69.172:64246] [client 20.104.69.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/html-api/about.php"] [unique_id "ac1MhBdQYJ2y8LDYkv_zawAAABc"]
[Thu Apr 02 00:49:09.094690 2026] [:error] [pid 8035:tid 8050] [client 20.104.69.172:65518] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/images/lmfi2.php"] [unique_id "ac1MhQY2zflwGmvw_QbU-gAAAIo"]
[Thu Apr 02 00:49:09.518611 2026] [:error] [pid 8037:tid 8123] [client 20.104.69.172:64150] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/images/lmfi2.php"] [unique_id "ac1MhYGD8ox-W9jHVfC1RAAAAQ8"]
[Thu Apr 02 00:49:09.932689 2026] [:error] [pid 8387:tid 8455] [client 20.104.69.172:8144] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/images/lmfi2.php"] [unique_id "ac1MhRdQYJ2y8LDYkv_zdgAAAA4"]
[Thu Apr 02 00:49:10.360839 2026] [:error] [pid 8037:tid 8108] [client 20.104.69.172:64170] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/function.php"] [unique_id "ac1MhoGD8ox-W9jHVfC1RwAAAQA"]
[Thu Apr 02 00:49:10.774861 2026] [:error] [pid 16761:tid 16767] [client 20.104.69.172:64241] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/function.php"] [unique_id "ac1Mht4bJXDGRqKZnzwLpgAAAEM"]
[Thu Apr 02 00:49:11.193849 2026] [:error] [pid 16761:tid 16773] [client 20.104.69.172:64221] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/function.php"] [unique_id "ac1Mh94bJXDGRqKZnzwLqwAAAEk"]
[Thu Apr 02 00:49:11.617133 2026] [:error] [pid 16761:tid 16778] [client 20.104.69.172:64191] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/function.php"] [unique_id "ac1Mh94bJXDGRqKZnzwLrgAAAE4"]
[Thu Apr 02 00:49:12.034595 2026] [:error] [pid 16761:tid 16773] [client 20.104.69.172:8171] [client 20.104.69.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/alfa-rex.php"] [unique_id "ac1MiN4bJXDGRqKZnzwLswAAAEk"]
[Thu Apr 02 00:49:12.455867 2026] [:error] [pid 8035:tid 8056] [client 20.104.69.172:64878] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/images/chosen.php"] [unique_id "ac1MiAY2zflwGmvw_QbU-wAAAJA"]
[Thu Apr 02 00:49:12.868934 2026] [:error] [pid 8035:tid 8057] [client 20.104.69.172:64886] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/images/chosen.php"] [unique_id "ac1MiAY2zflwGmvw_QbU_QAAAJE"]
[Thu Apr 02 00:49:13.302605 2026] [:error] [pid 8037:tid 8120] [client 20.104.69.172:8191] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/images/chosen.php"] [unique_id "ac1MiYGD8ox-W9jHVfC1SgAAAQw"]
[Thu Apr 02 00:49:13.719034 2026] [:error] [pid 8037:tid 8110] [client 20.104.69.172:64872] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mah.php"] [unique_id "ac1MiYGD8ox-W9jHVfC1SwAAAQI"]
[Thu Apr 02 00:49:14.157170 2026] [:error] [pid 8035:tid 8055] [client 20.104.69.172:64193] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mah.php"] [unique_id "ac1MigY2zflwGmvw_QbVBgAAAI8"]
[Thu Apr 02 00:49:14.569338 2026] [:error] [pid 8036:tid 8091] [client 20.104.69.172:64888] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mah.php"] [unique_id "ac1MikMvKg9PFa_VV4zS2gAAAM8"]
[Thu Apr 02 00:49:14.984583 2026] [:error] [pid 8037:tid 8108] [client 20.104.69.172:64219] [client 20.104.69.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mah.php"] [unique_id "ac1MioGD8ox-W9jHVfC1UAAAAQA"]
[Thu Apr 02 13:35:15.841990 2026] [:error] [pid 37543:tid 37566] [client 4.197.75.18:1101] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Thu Apr 02 13:35:15.861157 2026] [:error] [pid 37543:tid 37556] [client 4.197.75.18:1101] File does not exist: /usr/local/apache/htdocs/suspended-page/7logs.php
[Thu Apr 02 13:35:16.836595 2026] [:error] [pid 37543:tid 37554] [client 4.197.75.18:1101] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Apr 02 13:35:16.856860 2026] [:error] [pid 37543:tid 37552] [client 4.197.75.18:1101] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Thu Apr 02 13:35:16.872877 2026] [:error] [pid 37543:tid 37553] [client 4.197.75.18:1101] [client 4.197.75.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "ac4AFHhdk2bEYJCvILaAXQAAAUg"]
[Thu Apr 02 13:35:18.022270 2026] [:error] [pid 54384:tid 54409] [client 4.197.75.18:1110] File does not exist: /usr/local/apache/htdocs/suspended-page/gfile.php
[Thu Apr 02 13:35:18.043915 2026] [:error] [pid 54384:tid 54401] [client 4.197.75.18:1110] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Thu Apr 02 13:35:18.063445 2026] [:error] [pid 54384:tid 54406] [client 4.197.75.18:1110] File does not exist: /usr/local/apache/htdocs/suspended-page/sty.php
[Thu Apr 02 13:35:18.091931 2026] [:error] [pid 54384:tid 54403] [client 4.197.75.18:1110] File does not exist: /usr/local/apache/htdocs/suspended-page/h.php
[Thu Apr 02 13:35:18.107808 2026] [:error] [pid 54384:tid 54392] [client 4.197.75.18:1110] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ac4AFtWWpaby3TVN7MeYSQAAAcY"]
[Thu Apr 02 13:35:20.948168 2026] [:error] [pid 23927:tid 23952] [client 4.197.75.18:1116] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ac4AGEsZwqCndhl9uKASBwAAAZc"]
[Thu Apr 02 13:35:21.772036 2026] [:error] [pid 23927:tid 23929] [client 4.197.75.18:1028] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ac4AGUsZwqCndhl9uKASCwAAAYA"]
[Thu Apr 02 13:35:22.001994 2026] [:error] [pid 23927:tid 23931] [client 4.197.75.18:1025] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ac4AGksZwqCndhl9uKASDQAAAYI"]
[Thu Apr 02 13:35:22.189590 2026] [:error] [pid 54384:tid 54388] [client 4.197.75.18:3604] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "ac4AGtWWpaby3TVN7MeYTAAAAcI"]
[Thu Apr 02 13:35:23.325443 2026] [:error] [pid 23927:tid 23948] [client 4.197.75.18:1112] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "ac4AG0sZwqCndhl9uKASDwAAAZM"]
[Thu Apr 02 13:35:25.163035 2026] [:error] [pid 59305:tid 59324] [client 4.197.75.18:1127] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "ac4AHar2tV4rDwKFxKe-kwAAAM8"]
[Thu Apr 02 13:35:26.550282 2026] [:error] [pid 54384:tid 54387] [client 4.197.75.18:1040] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "ac4AHtWWpaby3TVN7MeYUgAAAcE"]
[Thu Apr 02 13:35:27.979523 2026] [:error] [pid 23927:tid 23930] [client 4.197.75.18:1036] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sys.php"] [unique_id "ac4AH0sZwqCndhl9uKASEQAAAYE"]
[Thu Apr 02 13:35:29.121934 2026] [:error] [pid 54384:tid 54402] [client 4.197.75.18:1051] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sys.php"] [unique_id "ac4AIdWWpaby3TVN7MeYVgAAAdA"]
[Thu Apr 02 13:35:29.810950 2026] [:error] [pid 54384:tid 54388] [client 4.197.75.18:1139] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sys.php"] [unique_id "ac4AIdWWpaby3TVN7MeYWQAAAcI"]
[Thu Apr 02 13:35:30.437429 2026] [:error] [pid 54384:tid 54390] [client 4.197.75.18:1129] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sys.php"] [unique_id "ac4AItWWpaby3TVN7MeYWwAAAcQ"]
[Thu Apr 02 13:35:30.989498 2026] [:error] [pid 54384:tid 54398] [client 4.197.75.18:1097] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "ac4AItWWpaby3TVN7MeYXQAAAcw"]
[Thu Apr 02 13:35:32.062400 2026] [:error] [pid 54384:tid 54404] [client 4.197.75.18:1145] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "ac4AJNWWpaby3TVN7MeYYAAAAdI"]
[Thu Apr 02 13:35:32.716059 2026] [:error] [pid 37543:tid 37551] [client 4.197.75.18:1150] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "ac4AJHhdk2bEYJCvILaAYQAAAUY"]
[Thu Apr 02 13:35:33.421327 2026] [:error] [pid 23927:tid 23941] [client 4.197.75.18:1090] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "ac4AJUsZwqCndhl9uKASFwAAAYw"]
[Thu Apr 02 13:35:34.294494 2026] [:error] [pid 23927:tid 23945] [client 4.197.75.18:1030] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "ac4AJksZwqCndhl9uKASGgAAAZA"]
[Thu Apr 02 13:35:35.168090 2026] [:error] [pid 23927:tid 23937] [client 4.197.75.18:1111] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "ac4AJ0sZwqCndhl9uKASHAAAAYg"]
[Thu Apr 02 13:35:35.287903 2026] [:error] [pid 59194:tid 59216] [client 4.197.75.18:1142] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "ac4AJxMpAeV11hcQehwNPAAAAAM"]
[Thu Apr 02 13:35:35.342489 2026] [:error] [pid 59201:tid 59284] [client 4.197.75.18:1100] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "ac4AJ8AC0Tw8eL6gzZ7OaAAAAJE"]
[Thu Apr 02 13:35:35.468421 2026] [:error] [pid 59194:tid 59236] [client 4.197.75.18:1035] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "ac4AJxMpAeV11hcQehwNPQAAABc"]
[Thu Apr 02 13:35:35.808083 2026] [:error] [pid 59305:tid 59313] [client 4.197.75.18:1052] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "ac4AJ6r2tV4rDwKFxKe-mgAAAMQ"]
[Thu Apr 02 13:35:35.975956 2026] [:error] [pid 23927:tid 23936] [client 4.197.75.18:1127] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "ac4AJ0sZwqCndhl9uKASHwAAAYc"]
[Thu Apr 02 13:35:36.146359 2026] [:error] [pid 59305:tid 59325] [client 4.197.75.18:1031] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "ac4AKKr2tV4rDwKFxKe-nQAAANA"]
[Thu Apr 02 13:35:36.250700 2026] [:error] [pid 59305:tid 59329] [client 4.197.75.18:1047] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/path.php"] [unique_id "ac4AKKr2tV4rDwKFxKe-ngAAANQ"]
[Thu Apr 02 13:35:36.494106 2026] [:error] [pid 59305:tid 59311] [client 4.197.75.18:1126] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/path.php"] [unique_id "ac4AKKr2tV4rDwKFxKe-oQAAAMI"]
[Thu Apr 02 13:35:36.820127 2026] [:error] [pid 54384:tid 54395] [client 4.197.75.18:3586] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/path.php"] [unique_id "ac4AKNWWpaby3TVN7MeYYwAAAck"]
[Thu Apr 02 13:35:37.040507 2026] [:error] [pid 59194:tid 59224] [client 4.197.75.18:1044] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/path.php"] [unique_id "ac4AKRMpAeV11hcQehwNQAAAAAs"]
[Thu Apr 02 13:35:37.379713 2026] [:error] [pid 59305:tid 59330] [client 4.197.75.18:1103] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wdf.php"] [unique_id "ac4AKar2tV4rDwKFxKe-owAAANU"]
[Thu Apr 02 13:35:37.435170 2026] [:error] [pid 59305:tid 59333] [client 4.197.75.18:1027] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wdf.php"] [unique_id "ac4AKar2tV4rDwKFxKe-pAAAANg"]
[Thu Apr 02 13:35:37.559018 2026] [:error] [pid 59305:tid 59327] [client 4.197.75.18:1107] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wdf.php"] [unique_id "ac4AKar2tV4rDwKFxKe-pQAAANI"]
[Thu Apr 02 13:35:37.829928 2026] [:error] [pid 59305:tid 59331] [client 4.197.75.18:1024] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wdf.php"] [unique_id "ac4AKar2tV4rDwKFxKe-pgAAANY"]
[Thu Apr 02 13:35:38.148273 2026] [:error] [pid 59305:tid 59324] [client 4.197.75.18:1037] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fleen.php"] [unique_id "ac4AKqr2tV4rDwKFxKe-qQAAAM8"]
[Thu Apr 02 13:35:38.797512 2026] [:error] [pid 23927:tid 23943] [client 4.197.75.18:1143] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fleen.php"] [unique_id "ac4AKksZwqCndhl9uKASIAAAAY4"]
[Thu Apr 02 13:35:39.258385 2026] [:error] [pid 59305:tid 59332] [client 4.197.75.18:1033] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fleen.php"] [unique_id "ac4AK6r2tV4rDwKFxKe-rQAAANc"]
[Thu Apr 02 13:35:39.665969 2026] [:error] [pid 59305:tid 59319] [client 4.197.75.18:1088] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fleen.php"] [unique_id "ac4AK6r2tV4rDwKFxKe-sAAAAMo"]
[Thu Apr 02 13:35:40.754643 2026] [:error] [pid 29467:tid 29479] [client 4.197.75.18:1114] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-tem.php"] [unique_id "ac4ALL4VUBFCJAq-WOmiFQAAAQk"]
[Thu Apr 02 13:35:41.403035 2026] [:error] [pid 54384:tid 54406] [client 4.197.75.18:1125] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-tem.php"] [unique_id "ac4ALdWWpaby3TVN7MeYZAAAAdQ"]
[Thu Apr 02 13:35:41.684423 2026] [:error] [pid 59305:tid 59330] [client 4.197.75.18:1029] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-tem.php"] [unique_id "ac4ALar2tV4rDwKFxKe-tQAAANU"]
[Thu Apr 02 13:35:41.912988 2026] [:error] [pid 54384:tid 54403] [client 4.197.75.18:1151] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-tem.php"] [unique_id "ac4ALdWWpaby3TVN7MeYZQAAAdE"]
[Thu Apr 02 13:35:42.300225 2026] [:error] [pid 59305:tid 59333] [client 4.197.75.18:1041] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av6m.php"] [unique_id "ac4ALqr2tV4rDwKFxKe-tgAAANg"]
[Thu Apr 02 13:35:43.140982 2026] [:error] [pid 23927:tid 23944] [client 4.197.75.18:1136] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av6m.php"] [unique_id "ac4AL0sZwqCndhl9uKASJAAAAY8"]
[Thu Apr 02 13:35:43.628520 2026] [:error] [pid 23927:tid 23933] [client 4.197.75.18:1054] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av6m.php"] [unique_id "ac4AL0sZwqCndhl9uKASJQAAAYQ"]
[Thu Apr 02 13:35:44.033244 2026] [:error] [pid 59305:tid 59314] [client 4.197.75.18:3609] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av6m.php"] [unique_id "ac4AMKr2tV4rDwKFxKe-twAAAMU"]
[Thu Apr 02 13:35:44.538150 2026] [:error] [pid 23927:tid 23953] [client 4.197.75.18:1123] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/autogooey.php"] [unique_id "ac4AMEsZwqCndhl9uKASKgAAAZg"]
[Thu Apr 02 13:35:45.074950 2026] [:error] [pid 23927:tid 23948] [client 4.197.75.18:1098] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/autogooey.php"] [unique_id "ac4AMUsZwqCndhl9uKASLQAAAZM"]
[Thu Apr 02 13:35:45.756670 2026] [:error] [pid 23927:tid 23949] [client 4.197.75.18:1095] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/autogooey.php"] [unique_id "ac4AMUsZwqCndhl9uKASLwAAAZQ"]
[Thu Apr 02 13:35:46.301879 2026] [:error] [pid 29467:tid 29491] [client 4.197.75.18:1134] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/autogooey.php"] [unique_id "ac4AMr4VUBFCJAq-WOmiGQAAARU"]
[Thu Apr 02 13:35:46.745728 2026] [:error] [pid 29467:tid 29475] [client 4.197.75.18:1140] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/btx25.php"] [unique_id "ac4AMr4VUBFCJAq-WOmiGgAAAQU"]
[Thu Apr 02 13:35:47.169312 2026] [:error] [pid 29467:tid 29482] [client 4.197.75.18:1091] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/btx25.php"] [unique_id "ac4AM74VUBFCJAq-WOmiGwAAAQw"]
[Thu Apr 02 13:35:47.768825 2026] [:error] [pid 54384:tid 54394] [client 4.197.75.18:3592] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/btx25.php"] [unique_id "ac4AM9WWpaby3TVN7MeYbwAAAcg"]
[Thu Apr 02 13:35:49.220000 2026] [:error] [pid 59305:tid 59323] [client 4.197.75.18:1043] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/btx25.php"] [unique_id "ac4ANar2tV4rDwKFxKe-uAAAAM4"]
[Thu Apr 02 13:35:49.667192 2026] [:error] [pid 59305:tid 59327] [client 4.197.75.18:1109] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mga.php"] [unique_id "ac4ANar2tV4rDwKFxKe-uwAAANI"]
[Thu Apr 02 13:35:50.134459 2026] [:error] [pid 59305:tid 59322] [client 4.197.75.18:1026] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mga.php"] [unique_id "ac4ANqr2tV4rDwKFxKe-vQAAAM0"]
[Thu Apr 02 13:35:51.048002 2026] [:error] [pid 59305:tid 59328] [client 4.197.75.18:1117] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mga.php"] [unique_id "ac4AN6r2tV4rDwKFxKe-vwAAANM"]
[Thu Apr 02 13:35:51.456929 2026] [:error] [pid 59305:tid 59329] [client 4.197.75.18:1096] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mga.php"] [unique_id "ac4AN6r2tV4rDwKFxKe-wwAAANQ"]
[Thu Apr 02 13:35:51.859484 2026] [:error] [pid 37543:tid 37561] [client 4.197.75.18:1105] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maxro.php"] [unique_id "ac4AN3hdk2bEYJCvILaAZQAAAVA"]
[Thu Apr 02 13:35:52.141152 2026] [:error] [pid 37543:tid 37552] [client 4.197.75.18:1137] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maxro.php"] [unique_id "ac4AOHhdk2bEYJCvILaAZgAAAUc"]
[Thu Apr 02 13:35:52.349748 2026] [:error] [pid 54384:tid 54408] [client 4.197.75.18:1119] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maxro.php"] [unique_id "ac4AONWWpaby3TVN7MeYcgAAAdY"]
[Thu Apr 02 13:35:52.540657 2026] [:error] [pid 29467:tid 29474] [client 4.197.75.18:1113] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maxro.php"] [unique_id "ac4AOL4VUBFCJAq-WOmiLAAAAQQ"]
[Thu Apr 02 13:35:52.657747 2026] [:error] [pid 59305:tid 59326] [client 4.197.75.18:1141] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/agg.php"] [unique_id "ac4AOKr2tV4rDwKFxKe-xwAAANE"]
[Thu Apr 02 13:35:52.810770 2026] [:error] [pid 29467:tid 29471] [client 4.197.75.18:1067] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/agg.php"] [unique_id "ac4AOL4VUBFCJAq-WOmiLQAAAQE"]
[Thu Apr 02 13:35:53.166978 2026] [:error] [pid 54384:tid 54398] [client 4.197.75.18:3647] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/agg.php"] [unique_id "ac4AOdWWpaby3TVN7MeYcwAAAcw"]
[Thu Apr 02 13:35:53.543958 2026] [:error] [pid 37543:tid 37562] [client 4.197.75.18:1068] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/agg.php"] [unique_id "ac4AOXhdk2bEYJCvILaAagAAAVE"]
[Thu Apr 02 13:35:53.695638 2026] [:error] [pid 59200:tid 59258] [client 4.197.75.18:1059] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pass4.php"] [unique_id "ac4AObfP26txrdLs3Eo1IQAAAFI"]
[Thu Apr 02 13:35:53.809871 2026] [:error] [pid 37543:tid 37548] [client 4.197.75.18:1144] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pass4.php"] [unique_id "ac4AOXhdk2bEYJCvILaAawAAAUM"]
[Thu Apr 02 13:35:54.144509 2026] [:error] [pid 54384:tid 54388] [client 4.197.75.18:1147] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pass4.php"] [unique_id "ac4AOtWWpaby3TVN7MeYdQAAAcI"]
[Thu Apr 02 13:35:54.547017 2026] [:error] [pid 59201:tid 59286] [client 4.197.75.18:1080] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pass4.php"] [unique_id "ac4AOsAC0Tw8eL6gzZ7OdgAAAJM"]
[Thu Apr 02 13:35:54.985223 2026] [:error] [pid 37543:tid 37569] [client 4.197.75.18:1045] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsvvs.php"] [unique_id "ac4AOnhdk2bEYJCvILaAbwAAAVg"]
[Thu Apr 02 13:35:55.240970 2026] [:error] [pid 59200:tid 59252] [client 4.197.75.18:1046] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsvvs.php"] [unique_id "ac4AO7fP26txrdLs3Eo1IwAAAEw"]
[Thu Apr 02 13:35:55.419678 2026] [:error] [pid 59305:tid 59332] [client 4.197.75.18:1064] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsvvs.php"] [unique_id "ac4AO6r2tV4rDwKFxKe-1QAAANc"]
[Thu Apr 02 13:35:55.522797 2026] [:error] [pid 59305:tid 59310] [client 4.197.75.18:3589] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsvvs.php"] [unique_id "ac4AO6r2tV4rDwKFxKe-1gAAAME"]
[Thu Apr 02 13:35:55.734922 2026] [:error] [pid 59305:tid 59319] [client 4.197.75.18:4040] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "ac4AO6r2tV4rDwKFxKe-2AAAAMo"]
[Thu Apr 02 13:35:56.124519 2026] [:error] [pid 29467:tid 29491] [client 4.197.75.18:3594] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "ac4APL4VUBFCJAq-WOmiMQAAARU"]
[Thu Apr 02 13:35:56.275356 2026] [:error] [pid 23927:tid 23931] [client 4.197.75.18:4051] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "ac4APEsZwqCndhl9uKASOwAAAYI"]
[Thu Apr 02 13:35:56.770889 2026] [:error] [pid 59305:tid 59325] [client 4.197.75.18:1094] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "ac4APKr2tV4rDwKFxKe-4QAAANA"]
[Thu Apr 02 13:35:57.412181 2026] [:error] [pid 59305:tid 59314] [client 4.197.75.18:3639] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ac4APar2tV4rDwKFxKe-5QAAAMU"]
[Thu Apr 02 13:35:57.951866 2026] [:error] [pid 54384:tid 54404] [client 4.197.75.18:3633] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ac4APdWWpaby3TVN7MeYewAAAdI"]
[Thu Apr 02 13:35:58.215377 2026] [:error] [pid 59194:tid 59217] [client 4.197.75.18:1093] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ac4APhMpAeV11hcQehwNQgAAAAQ"]
[Thu Apr 02 13:35:58.530332 2026] [:error] [pid 59194:tid 59229] [client 4.197.75.18:3593] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ac4APhMpAeV11hcQehwNQwAAABA"]
[Thu Apr 02 13:35:58.748507 2026] [:error] [pid 59200:tid 59255] [client 4.197.75.18:1071] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac4APrfP26txrdLs3Eo1KAAAAE8"]
[Thu Apr 02 13:35:59.046684 2026] [:error] [pid 59201:tid 59277] [client 4.197.75.18:1060] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac4AP8AC0Tw8eL6gzZ7OeQAAAIo"]
[Thu Apr 02 13:35:59.315816 2026] [:error] [pid 59305:tid 59317] [client 4.197.75.18:3598] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac4AP6r2tV4rDwKFxKe-6wAAAMg"]
[Thu Apr 02 13:36:00.075171 2026] [:error] [pid 59200:tid 59257] [client 4.197.75.18:1039] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac4AQLfP26txrdLs3Eo1KQAAAFE"]
[Thu Apr 02 13:36:00.722615 2026] [:error] [pid 37543:tid 37566] [client 4.197.75.18:1118] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ac4AQHhdk2bEYJCvILaAdwAAAVU"]
[Thu Apr 02 13:36:00.920873 2026] [:error] [pid 29467:tid 29486] [client 4.197.75.18:1099] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ac4AQL4VUBFCJAq-WOmiNAAAARA"]
[Thu Apr 02 13:36:01.028875 2026] [:error] [pid 54384:tid 54389] [client 4.197.75.18:1049] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ac4AQdWWpaby3TVN7MeYgAAAAcM"]
[Thu Apr 02 13:36:01.221848 2026] [:error] [pid 59201:tid 59267] [client 4.197.75.18:1032] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ac4AQcAC0Tw8eL6gzZ7OfAAAAIA"]
[Thu Apr 02 13:36:01.432924 2026] [:error] [pid 54384:tid 54406] [client 4.197.75.18:3628] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "ac4AQdWWpaby3TVN7MeYgQAAAdQ"]
[Thu Apr 02 13:36:01.485795 2026] [:error] [pid 59201:tid 59272] [client 4.197.75.18:3618] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "ac4AQcAC0Tw8eL6gzZ7OfQAAAIU"]
[Thu Apr 02 13:36:01.661177 2026] [:error] [pid 29467:tid 29489] [client 4.197.75.18:1124] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "ac4AQb4VUBFCJAq-WOmiNgAAARM"]
[Thu Apr 02 13:36:01.864609 2026] [:error] [pid 23927:tid 23934] [client 4.197.75.18:3608] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "ac4AQUsZwqCndhl9uKASQQAAAYU"]
[Thu Apr 02 13:36:02.005518 2026] [:error] [pid 23927:tid 23944] [client 4.197.75.18:1133] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "ac4AQksZwqCndhl9uKASQwAAAY8"]
[Thu Apr 02 13:36:02.104748 2026] [:error] [pid 23927:tid 23933] [client 4.197.75.18:4058] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "ac4AQksZwqCndhl9uKASRAAAAYQ"]
[Thu Apr 02 13:36:02.178905 2026] [:error] [pid 29467:tid 29485] [client 4.197.75.18:4035] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "ac4AQr4VUBFCJAq-WOmiOAAAAQ8"]
[Thu Apr 02 13:36:02.491936 2026] [:error] [pid 29467:tid 29479] [client 4.197.75.18:3596] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "ac4AQr4VUBFCJAq-WOmiOQAAAQk"]
[Thu Apr 02 13:36:02.703881 2026] [:error] [pid 54384:tid 54388] [client 4.197.75.18:1070] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "ac4AQtWWpaby3TVN7MeYggAAAcI"]
[Thu Apr 02 13:36:03.045013 2026] [:error] [pid 54384:tid 54410] [client 4.197.75.18:1074] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "ac4AQ9WWpaby3TVN7MeYhAAAAdg"]
[Thu Apr 02 13:36:03.170946 2026] [:error] [pid 23927:tid 23941] [client 4.197.75.18:1131] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "ac4AQ0sZwqCndhl9uKASSQAAAYw"]
[Thu Apr 02 13:36:03.226943 2026] [:error] [pid 23927:tid 23932] [client 4.197.75.18:1135] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "ac4AQ0sZwqCndhl9uKASSwAAAYM"]
[Thu Apr 02 13:36:03.317701 2026] [:error] [pid 23927:tid 23930] [client 4.197.75.18:1063] [client 4.197.75.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "ac4AQ0sZwqCndhl9uKASTQAAAYE"]
[Thu Apr 02 13:36:03.951410 2026] [:error] [pid 54384:tid 54394] [client 4.197.75.18:4070] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "ac4AQ9WWpaby3TVN7MeYhwAAAcg"]
[Thu Apr 02 13:36:04.115217 2026] [:error] [pid 23927:tid 23934] [client 4.197.75.18:1132] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "ac4AREsZwqCndhl9uKASTwAAAYU"]
[Thu Apr 02 13:36:04.246983 2026] [:error] [pid 23927:tid 23937] [client 4.197.75.18:3584] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "ac4AREsZwqCndhl9uKASUQAAAYg"]
[Thu Apr 02 13:36:04.349362 2026] [:error] [pid 59305:tid 59309] [client 4.197.75.18:1083] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "ac4ARKr2tV4rDwKFxKe-7gAAAMA"]
[Thu Apr 02 13:36:04.576191 2026] [:error] [pid 54384:tid 54401] [client 4.197.75.18:4053] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ac4ARNWWpaby3TVN7MeYigAAAc8"]
[Thu Apr 02 13:36:04.663555 2026] [:error] [pid 54384:tid 54389] [client 4.197.75.18:1078] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ac4ARNWWpaby3TVN7MeYiwAAAcM"]
[Thu Apr 02 13:36:04.909975 2026] [:error] [pid 59305:tid 59330] [client 4.197.75.18:1146] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ac4ARKr2tV4rDwKFxKe-7wAAANU"]
[Thu Apr 02 13:36:05.110142 2026] [:error] [pid 23927:tid 23935] [client 4.197.75.18:3590] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ac4ARUsZwqCndhl9uKASVAAAAYY"]
[Thu Apr 02 13:36:05.316044 2026] [:error] [pid 59200:tid 59248] [client 4.197.75.18:3615] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/css/index.php"] [unique_id "ac4ARbfP26txrdLs3Eo1LAAAAEg"]
[Thu Apr 02 13:36:05.552100 2026] [:error] [pid 23927:tid 23941] [client 4.197.75.18:1079] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/css/index.php"] [unique_id "ac4ARUsZwqCndhl9uKASVwAAAYw"]
[Thu Apr 02 13:36:05.607195 2026] [:error] [pid 23927:tid 23932] [client 4.197.75.18:1086] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/css/index.php"] [unique_id "ac4ARUsZwqCndhl9uKASWQAAAYM"]
[Thu Apr 02 13:36:05.686842 2026] [:error] [pid 23927:tid 23936] [client 4.197.75.18:1106] [client 4.197.75.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/css/index.php"] [unique_id "ac4ARUsZwqCndhl9uKASWgAAAYc"]
[Thu Apr 02 17:19:18.311617 2026] [:error] [pid 29467:tid 29492] [client 172.213.211.100:15087] File does not exist: /usr/local/apache/htdocs/suspended-page/bhm.php
[Thu Apr 02 17:19:18.549564 2026] [:error] [pid 29467:tid 29489] [client 172.213.211.100:15087] File does not exist: /usr/local/apache/htdocs/suspended-page/class-bda.php
[Thu Apr 02 17:19:18.785571 2026] [:error] [pid 29467:tid 29484] [client 172.213.211.100:15087] File does not exist: /usr/local/apache/htdocs/suspended-page/f2.php
[Thu Apr 02 17:19:19.021517 2026] [:error] [pid 29467:tid 29487] [client 172.213.211.100:15087] File does not exist: /usr/local/apache/htdocs/suspended-page/classc.php
[Thu Apr 02 17:19:19.259851 2026] [:error] [pid 29467:tid 29493] [client 172.213.211.100:15087] File does not exist: /usr/local/apache/htdocs/suspended-page/ahutr.php
[Thu Apr 02 17:19:19.495747 2026] [:error] [pid 29467:tid 29485] [client 172.213.211.100:15087] File does not exist: /usr/local/apache/htdocs/suspended-page/class-cc.php
[Thu Apr 02 17:19:19.735494 2026] [:error] [pid 29467:tid 29477] [client 172.213.211.100:15087] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Thu Apr 02 17:19:19.971634 2026] [:error] [pid 29467:tid 29475] [client 172.213.211.100:15087] File does not exist: /usr/local/apache/htdocs/suspended-page/brtnd.php
[Thu Apr 02 17:19:20.207685 2026] [:error] [pid 29467:tid 29481] [client 172.213.211.100:15087] File does not exist: /usr/local/apache/htdocs/suspended-page/azrhw.php
[Thu Apr 02 17:19:20.444128 2026] [:error] [pid 29467:tid 29478] [client 172.213.211.100:15087] File does not exist: /usr/local/apache/htdocs/suspended-page/cnusw.php
[Thu Apr 02 17:19:20.676892 2026] [:error] [pid 29467:tid 29494] [client 172.213.211.100:15087] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dtwpf.php"] [unique_id "ac40mL4VUBFCJAq-WOkEyQAAARg"]
[Thu Apr 02 17:19:21.158904 2026] [:error] [pid 54384:tid 54406] [client 172.213.211.100:63290] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dtwpf.php"] [unique_id "ac40mdWWpaby3TVN7MfZDgAAAdQ"]
[Thu Apr 02 17:19:21.753361 2026] [:error] [pid 29467:tid 29476] [client 172.213.211.100:63280] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dtwpf.php"] [unique_id "ac40mb4VUBFCJAq-WOkEywAAAQY"]
[Thu Apr 02 17:19:22.232406 2026] [:error] [pid 29467:tid 29493] [client 172.213.211.100:13373] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dtwpf.php"] [unique_id "ac40mr4VUBFCJAq-WOkEzgAAARc"]
[Thu Apr 02 17:19:22.782532 2026] [:error] [pid 29467:tid 29481] [client 172.213.211.100:13343] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "ac40mr4VUBFCJAq-WOkE1AAAAQs"]
[Thu Apr 02 17:19:23.390937 2026] [:error] [pid 59201:tid 59279] [client 172.213.211.100:39180] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "ac40m8AC0Tw8eL6gzZ708AAAAIw"]
[Thu Apr 02 17:19:23.929318 2026] [:error] [pid 59201:tid 59275] [client 172.213.211.100:63287] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "ac40m8AC0Tw8eL6gzZ708gAAAIg"]
[Thu Apr 02 17:19:24.438051 2026] [:error] [pid 23927:tid 23952] [client 172.213.211.100:16263] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "ac40nEsZwqCndhl9uKBrWAAAAZc"]
[Thu Apr 02 17:19:24.950948 2026] [:error] [pid 54384:tid 54389] [client 172.213.211.100:16281] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ac40nNWWpaby3TVN7MfZEAAAAcM"]
[Thu Apr 02 17:19:25.441699 2026] [:error] [pid 59305:tid 59333] [client 172.213.211.100:16352] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ac40nar2tV4rDwKFxKcwwgAAANg"]
[Thu Apr 02 17:19:25.922653 2026] [:error] [pid 54384:tid 54387] [client 172.213.211.100:16327] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ac40ndWWpaby3TVN7MfZEQAAAcE"]
[Thu Apr 02 17:19:26.416485 2026] [:error] [pid 54384:tid 54400] [client 172.213.211.100:7526] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ac40ntWWpaby3TVN7MfZFAAAAc4"]
[Thu Apr 02 17:19:26.882777 2026] [:error] [pid 29467:tid 29478] [client 172.213.211.100:13362] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lef.php"] [unique_id "ac40nr4VUBFCJAq-WOkE3wAAAQg"]
[Thu Apr 02 17:19:27.350274 2026] [:error] [pid 59305:tid 59312] [client 172.213.211.100:7522] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lef.php"] [unique_id "ac40n6r2tV4rDwKFxKcwxAAAAMM"]
[Thu Apr 02 17:19:27.954110 2026] [:error] [pid 29467:tid 29493] [client 172.213.211.100:13367] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "ac40n74VUBFCJAq-WOkE5AAAARc"]
[Thu Apr 02 17:19:28.422787 2026] [:error] [pid 29467:tid 29479] [client 172.213.211.100:7542] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "ac40oL4VUBFCJAq-WOkE6QAAAQk"]
[Thu Apr 02 17:19:28.978499 2026] [:error] [pid 37543:tid 37564] [client 172.213.211.100:18937] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-ccv.php"] [unique_id "ac40oHhdk2bEYJCvILatyAAAAVM"]
[Thu Apr 02 17:19:29.448954 2026] [:error] [pid 59305:tid 59319] [client 172.213.211.100:39171] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-ccv.php"] [unique_id "ac40oar2tV4rDwKFxKcwyQAAAMo"]
[Thu Apr 02 17:19:29.943778 2026] [:error] [pid 59201:tid 59277] [client 172.213.211.100:7541] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "ac40ocAC0Tw8eL6gzZ709QAAAIo"]
[Thu Apr 02 17:19:30.425837 2026] [:error] [pid 59305:tid 59316] [client 172.213.211.100:63263] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "ac40oqr2tV4rDwKFxKcwzAAAAMc"]
[Thu Apr 02 17:19:30.949758 2026] [:error] [pid 59200:tid 59253] [client 172.213.211.100:63273] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kiwkiw.php"] [unique_id "ac40orfP26txrdLs3EpT_AAAAE0"]
[Thu Apr 02 17:19:31.431798 2026] [:error] [pid 59201:tid 59269] [client 172.213.211.100:18895] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kiwkiw.php"] [unique_id "ac40o8AC0Tw8eL6gzZ709wAAAII"]
[Thu Apr 02 17:19:31.914802 2026] [:error] [pid 59201:tid 59271] [client 172.213.211.100:63281] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kiwkiw.php"] [unique_id "ac40o8AC0Tw8eL6gzZ70-AAAAIQ"]
[Thu Apr 02 17:19:32.380742 2026] [:error] [pid 29467:tid 29490] [client 172.213.211.100:13358] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kiwkiw.php"] [unique_id "ac40pL4VUBFCJAq-WOkE7QAAARQ"]
[Thu Apr 02 17:19:32.845224 2026] [:error] [pid 59305:tid 59311] [client 172.213.211.100:39220] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sfcl.php"] [unique_id "ac40pKr2tV4rDwKFxKcw0gAAAMI"]
[Thu Apr 02 17:19:33.343341 2026] [:error] [pid 59305:tid 59321] [client 172.213.211.100:16314] [client 172.213.211.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "ac40par2tV4rDwKFxKcw1AAAAMw"]
[Fri Apr 03 00:08:26.483838 2026] [:error] [pid 29467:tid 29488] [client 172.213.211.100:55055] File does not exist: /usr/local/apache/htdocs/suspended-page/xozx.php
[Fri Apr 03 05:33:58.286419 2026] [:error] [pid 58590:tid 58614] [client 20.215.208.34:57382] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Fri Apr 03 05:33:58.559704 2026] [:error] [pid 58590:tid 58597] [client 20.215.208.34:57382] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri Apr 03 05:33:58.820608 2026] [:error] [pid 58590:tid 58610] [client 20.215.208.34:57382] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Fri Apr 03 05:33:59.080990 2026] [:error] [pid 58590:tid 58601] [client 20.215.208.34:57382] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Fri Apr 03 05:33:59.340489 2026] [:error] [pid 58590:tid 58592] [client 20.215.208.34:57382] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Fri Apr 03 05:33:59.602945 2026] [:error] [pid 58590:tid 58613] [client 20.215.208.34:57382] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Fri Apr 03 05:34:00.124583 2026] [:error] [pid 58590:tid 58596] [client 20.215.208.34:57382] File does not exist: /usr/local/apache/htdocs/suspended-page/wolv2.php
[Fri Apr 03 05:34:00.402366 2026] [:error] [pid 58590:tid 58597] [client 20.215.208.34:57382] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Fri Apr 03 05:34:00.668322 2026] [:error] [pid 58590:tid 58600] [client 20.215.208.34:57382] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Fri Apr 03 05:34:00.943791 2026] [:error] [pid 58590:tid 58610] [client 20.215.208.34:57382] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac7gyEze_aEPDM9xEE22XAAAARI"]
[Fri Apr 03 05:34:01.455381 2026] [:error] [pid 22671:tid 22715] [client 20.215.208.34:58163] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac7gySRuUnMW7r8hvyZGPgAAABg"]
[Fri Apr 03 05:34:01.967771 2026] [:error] [pid 22673:tid 22750] [client 20.215.208.34:57431] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac7gye-GlVDWdWxxwJCCtAAAAIQ"]
[Fri Apr 03 05:34:02.478525 2026] [:error] [pid 22778:tid 22793] [client 20.215.208.34:52846] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac7gyvS-q9hkdFqUjq97FAAAAMg"]
[Fri Apr 03 05:34:02.997129 2026] [:error] [pid 58590:tid 58599] [client 20.215.208.34:58237] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "ac7gykze_aEPDM9xEE22XQAAAQc"]
[Fri Apr 03 05:34:03.512209 2026] [:error] [pid 58590:tid 58597] [client 20.215.208.34:58189] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "ac7gy0ze_aEPDM9xEE22YAAAAQU"]
[Fri Apr 03 05:34:04.026945 2026] [:error] [pid 22673:tid 22761] [client 20.215.208.34:57349] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "ac7gzO-GlVDWdWxxwJCCuwAAAI8"]
[Fri Apr 03 05:34:04.569408 2026] [:error] [pid 58590:tid 58601] [client 20.215.208.34:57432] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "ac7gzEze_aEPDM9xEE22ZAAAAQk"]
[Fri Apr 03 05:34:05.081312 2026] [:error] [pid 22778:tid 22799] [client 20.215.208.34:57446] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ac7gzfS-q9hkdFqUjq97HQAAAM4"]
[Fri Apr 03 05:34:05.602713 2026] [:error] [pid 22778:tid 22809] [client 20.215.208.34:58205] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ac7gzfS-q9hkdFqUjq97IgAAANg"]
[Fri Apr 03 05:34:06.119016 2026] [:error] [pid 58590:tid 58604] [client 20.215.208.34:57421] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ac7gzkze_aEPDM9xEE22cAAAAQw"]
[Fri Apr 03 05:34:06.634677 2026] [:error] [pid 22672:tid 22726] [client 20.215.208.34:58147] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ac7gzqzrgXkFSOK0fvqEcgAAAEc"]
[Fri Apr 03 05:34:07.163636 2026] [:error] [pid 22672:tid 22728] [client 20.215.208.34:58222] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ac7gz6zrgXkFSOK0fvqEdgAAAEk"]
[Fri Apr 03 05:34:07.682402 2026] [:error] [pid 22672:tid 22731] [client 20.215.208.34:58157] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ac7gz6zrgXkFSOK0fvqEdwAAAEw"]
[Fri Apr 03 05:34:08.198127 2026] [:error] [pid 22671:tid 22702] [client 20.215.208.34:57442] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ac7g0CRuUnMW7r8hvyZGRAAAAAs"]
[Fri Apr 03 05:34:08.709227 2026] [:error] [pid 22778:tid 22795] [client 20.215.208.34:57406] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ac7g0PS-q9hkdFqUjq97KQAAAMo"]
[Fri Apr 03 05:34:09.221920 2026] [:error] [pid 22778:tid 22792] [client 20.215.208.34:57374] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ac7g0fS-q9hkdFqUjq97KwAAAMc"]
[Fri Apr 03 05:34:09.733635 2026] [:error] [pid 22673:tid 22766] [client 20.215.208.34:57388] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ac7g0e-GlVDWdWxxwJCCywAAAJQ"]
[Fri Apr 03 05:34:10.247067 2026] [:error] [pid 22778:tid 22791] [client 20.215.208.34:57457] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ac7g0vS-q9hkdFqUjq97LQAAAMY"]
[Fri Apr 03 05:34:10.773181 2026] [:error] [pid 22778:tid 22796] [client 20.215.208.34:58201] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ac7g0vS-q9hkdFqUjq97LwAAAMs"]
[Fri Apr 03 05:34:11.287466 2026] [:error] [pid 22778:tid 22790] [client 20.215.208.34:57396] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac7g0_S-q9hkdFqUjq97MwAAAMU"]
[Fri Apr 03 05:34:11.803251 2026] [:error] [pid 22673:tid 22763] [client 20.215.208.34:58227] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac7g0--GlVDWdWxxwJCC1QAAAJE"]
[Fri Apr 03 05:34:12.315037 2026] [:error] [pid 22672:tid 22726] [client 20.215.208.34:57351] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac7g1KzrgXkFSOK0fvqEgQAAAEc"]
[Fri Apr 03 05:34:12.825523 2026] [:error] [pid 22672:tid 22728] [client 20.215.208.34:57422] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac7g1KzrgXkFSOK0fvqEgwAAAEk"]
[Fri Apr 03 05:34:13.347011 2026] [:error] [pid 22673:tid 22749] [client 20.215.208.34:58140] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ac7g1e-GlVDWdWxxwJCC4gAAAIM"]
[Fri Apr 03 05:34:13.861624 2026] [:error] [pid 22673:tid 22757] [client 20.215.208.34:58195] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ac7g1e-GlVDWdWxxwJCC6AAAAIs"]
[Fri Apr 03 05:34:14.377003 2026] [:error] [pid 22672:tid 22740] [client 20.215.208.34:58144] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ac7g1qzrgXkFSOK0fvqEhwAAAFU"]
[Fri Apr 03 05:34:14.891634 2026] [:error] [pid 58590:tid 58605] [client 20.215.208.34:57435] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ac7g1kze_aEPDM9xEE22hQAAAQ0"]
[Fri Apr 03 05:34:15.403697 2026] [:error] [pid 22673:tid 22762] [client 20.215.208.34:58229] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ac7g1--GlVDWdWxxwJCC9gAAAJA"]
[Fri Apr 03 05:34:15.924616 2026] [:error] [pid 22673:tid 22752] [client 20.215.208.34:57354] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ac7g1--GlVDWdWxxwJCC-gAAAIY"]
[Fri Apr 03 05:34:16.440788 2026] [:error] [pid 22671:tid 22707] [client 20.215.208.34:58196] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ac7g2CRuUnMW7r8hvyZGTgAAABA"]
[Fri Apr 03 05:34:16.950596 2026] [:error] [pid 22673:tid 22768] [client 20.215.208.34:57352] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ac7g2O-GlVDWdWxxwJCDAQAAAJY"]
[Fri Apr 03 05:34:17.465089 2026] [:error] [pid 22673:tid 22760] [client 20.215.208.34:58200] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "ac7g2e-GlVDWdWxxwJCDBgAAAI4"]
[Fri Apr 03 05:34:18.025616 2026] [:error] [pid 22673:tid 22748] [client 20.215.208.34:58220] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "ac7g2u-GlVDWdWxxwJCDDAAAAII"]
[Fri Apr 03 05:34:18.545689 2026] [:error] [pid 58590:tid 58614] [client 20.215.208.34:57371] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "ac7g2kze_aEPDM9xEE22kAAAARY"]
[Fri Apr 03 05:34:19.057522 2026] [:error] [pid 22673:tid 22758] [client 20.215.208.34:57434] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "ac7g2--GlVDWdWxxwJCDEwAAAIw"]
[Fri Apr 03 05:34:19.581922 2026] [:error] [pid 58590:tid 58595] [client 20.215.208.34:57367] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "ac7g20ze_aEPDM9xEE22lAAAAQM"]
[Fri Apr 03 05:34:20.116743 2026] [:error] [pid 58590:tid 58615] [client 20.215.208.34:57399] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "ac7g3Eze_aEPDM9xEE22mQAAARc"]
[Fri Apr 03 05:34:20.660328 2026] [:error] [pid 58590:tid 58592] [client 20.215.208.34:57464] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "ac7g3Eze_aEPDM9xEE22nAAAAQA"]
[Fri Apr 03 05:34:21.171992 2026] [:error] [pid 58590:tid 58613] [client 20.215.208.34:53550] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "ac7g3Uze_aEPDM9xEE22nwAAARU"]
[Fri Apr 03 05:34:21.684539 2026] [:error] [pid 22778:tid 22798] [client 20.215.208.34:58193] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "ac7g3fS-q9hkdFqUjq97NQAAAM0"]
[Fri Apr 03 05:34:22.198320 2026] [:error] [pid 58590:tid 58609] [client 20.215.208.34:58122] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "ac7g3kze_aEPDM9xEE22qAAAARE"]
[Fri Apr 03 05:34:22.710508 2026] [:error] [pid 22673:tid 22760] [client 20.215.208.34:58162] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "ac7g3u-GlVDWdWxxwJCDIwAAAI4"]
[Fri Apr 03 05:34:23.224618 2026] [:error] [pid 22673:tid 22768] [client 20.215.208.34:58176] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "ac7g3--GlVDWdWxxwJCDJgAAAJY"]
[Fri Apr 03 05:34:23.748768 2026] [:error] [pid 58590:tid 58601] [client 20.215.208.34:57387] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac7g30ze_aEPDM9xEE22rQAAAQk"]
[Fri Apr 03 05:34:24.268651 2026] [:error] [pid 22778:tid 22800] [client 20.215.208.34:57358] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac7g4PS-q9hkdFqUjq97NwAAAM8"]
[Fri Apr 03 05:34:24.780522 2026] [:error] [pid 22673:tid 22766] [client 20.215.208.34:57406] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac7g4O-GlVDWdWxxwJCDMAAAAJQ"]
[Fri Apr 03 05:34:25.294058 2026] [:error] [pid 58590:tid 58601] [client 20.215.208.34:58212] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac7g4Uze_aEPDM9xEE22tQAAAQk"]
[Fri Apr 03 05:34:25.809416 2026] [:error] [pid 22778:tid 22806] [client 20.215.208.34:57385] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ac7g4fS-q9hkdFqUjq97OQAAANU"]
[Fri Apr 03 05:34:26.330847 2026] [:error] [pid 58590:tid 58593] [client 20.215.208.34:57389] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ac7g4kze_aEPDM9xEE22uAAAAQE"]
[Fri Apr 03 05:34:26.845041 2026] [:error] [pid 22671:tid 22715] [client 20.215.208.34:57443] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ac7g4iRuUnMW7r8hvyZGZgAAABg"]
[Fri Apr 03 05:34:27.361750 2026] [:error] [pid 22671:tid 22702] [client 20.215.208.34:52848] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ac7g4yRuUnMW7r8hvyZGaQAAAAs"]
[Fri Apr 03 05:34:27.875603 2026] [:error] [pid 22673:tid 22756] [client 20.215.208.34:57348] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ac7g4--GlVDWdWxxwJCDOwAAAIo"]
[Fri Apr 03 05:34:28.389044 2026] [:error] [pid 22673:tid 22766] [client 20.215.208.34:58216] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ac7g5O-GlVDWdWxxwJCDQAAAAJQ"]
[Fri Apr 03 05:34:28.907039 2026] [:error] [pid 22673:tid 22753] [client 20.215.208.34:57416] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ac7g5O-GlVDWdWxxwJCDRgAAAIc"]
[Fri Apr 03 05:34:29.250016 2026] [:error] [pid 58590:tid 58595] [client 20.215.208.34:58158] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac7g5Uze_aEPDM9xEE22vwAAAQM"]
[Fri Apr 03 05:34:29.419602 2026] [:error] [pid 22778:tid 22803] [client 20.215.208.34:58180] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ac7g5fS-q9hkdFqUjq97PQAAANI"]
[Fri Apr 03 05:34:29.764514 2026] [:error] [pid 22778:tid 22793] [client 20.215.208.34:58235] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac7g5fS-q9hkdFqUjq97PgAAAMg"]
[Fri Apr 03 05:34:29.931065 2026] [:error] [pid 22671:tid 22695] [client 20.215.208.34:58148] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ac7g5SRuUnMW7r8hvyZGbgAAAAQ"]
[Fri Apr 03 05:34:30.278661 2026] [:error] [pid 58590:tid 58594] [client 20.215.208.34:57449] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac7g5kze_aEPDM9xEE22xQAAAQI"]
[Fri Apr 03 05:34:30.442799 2026] [:error] [pid 58590:tid 58609] [client 20.215.208.34:58138] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ac7g5kze_aEPDM9xEE22xwAAARE"]
[Fri Apr 03 05:34:30.791217 2026] [:error] [pid 22673:tid 22763] [client 20.215.208.34:58165] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac7g5u-GlVDWdWxxwJCDUQAAAJE"]
[Fri Apr 03 05:34:30.956302 2026] [:error] [pid 22673:tid 22761] [client 20.215.208.34:58230] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ac7g5u-GlVDWdWxxwJCDUgAAAI8"]
[Fri Apr 03 05:34:31.472878 2026] [:error] [pid 58590:tid 58613] [client 20.215.208.34:58219] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ac7g50ze_aEPDM9xEE22zAAAARU"]
[Fri Apr 03 05:34:31.983571 2026] [:error] [pid 22673:tid 22768] [client 20.215.208.34:57468] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "ac7g5--GlVDWdWxxwJCDWAAAAJY"]
[Fri Apr 03 05:34:32.500080 2026] [:error] [pid 22778:tid 22798] [client 20.215.208.34:57394] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "ac7g6PS-q9hkdFqUjq97RwAAAM0"]
[Fri Apr 03 05:34:33.013372 2026] [:error] [pid 58590:tid 58601] [client 20.215.208.34:53569] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "ac7g6Uze_aEPDM9xEE222wAAAQk"]
[Fri Apr 03 05:34:33.532165 2026] [:error] [pid 22672:tid 22724] [client 20.215.208.34:58221] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "ac7g6azrgXkFSOK0fvqElwAAAEU"]
[Fri Apr 03 05:34:34.049039 2026] [:error] [pid 58590:tid 58602] [client 20.215.208.34:58217] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nope.php"] [unique_id "ac7g6kze_aEPDM9xEE223wAAAQo"]
[Fri Apr 03 05:34:34.564309 2026] [:error] [pid 22672:tid 22722] [client 20.215.208.34:58208] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nope.php"] [unique_id "ac7g6qzrgXkFSOK0fvqEmAAAAEM"]
[Fri Apr 03 05:34:35.079097 2026] [:error] [pid 22778:tid 22801] [client 20.215.208.34:58233] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nope.php"] [unique_id "ac7g6_S-q9hkdFqUjq97TAAAANA"]
[Fri Apr 03 05:34:35.595111 2026] [:error] [pid 22672:tid 22733] [client 20.215.208.34:57454] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nope.php"] [unique_id "ac7g66zrgXkFSOK0fvqEmwAAAE4"]
[Fri Apr 03 05:34:36.111740 2026] [:error] [pid 22672:tid 22742] [client 20.215.208.34:58177] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js.php"] [unique_id "ac7g7KzrgXkFSOK0fvqEnQAAAFc"]
[Fri Apr 03 05:34:36.624821 2026] [:error] [pid 22672:tid 22739] [client 20.215.208.34:58194] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js.php"] [unique_id "ac7g7KzrgXkFSOK0fvqEoAAAAFQ"]
[Fri Apr 03 05:34:37.157013 2026] [:error] [pid 22672:tid 22736] [client 20.215.208.34:57420] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js.php"] [unique_id "ac7g7azrgXkFSOK0fvqEowAAAFE"]
[Fri Apr 03 05:34:37.669098 2026] [:error] [pid 22778:tid 22793] [client 20.215.208.34:53573] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js.php"] [unique_id "ac7g7fS-q9hkdFqUjq97WAAAAMg"]
[Fri Apr 03 05:34:38.181059 2026] [:error] [pid 22778:tid 22795] [client 20.215.208.34:58231] [client 20.215.208.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ac7g7vS-q9hkdFqUjq97WwAAAMo"]
[Fri Apr 03 05:34:38.692586 2026] [:error] [pid 22778:tid 22786] [client 20.215.208.34:58136] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/num.php"] [unique_id "ac7g7vS-q9hkdFqUjq97XQAAAME"]
[Fri Apr 03 05:34:39.206909 2026] [:error] [pid 58590:tid 58610] [client 20.215.208.34:57350] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/num.php"] [unique_id "ac7g70ze_aEPDM9xEE225gAAARI"]
[Fri Apr 03 05:34:39.716668 2026] [:error] [pid 22778:tid 22808] [client 20.215.208.34:57403] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/num.php"] [unique_id "ac7g7_S-q9hkdFqUjq97ZwAAANc"]
[Fri Apr 03 05:34:40.238806 2026] [:error] [pid 22672:tid 22735] [client 20.215.208.34:57361] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mah.php"] [unique_id "ac7g8KzrgXkFSOK0fvqEqAAAAFA"]
[Fri Apr 03 05:34:40.771805 2026] [:error] [pid 58590:tid 58609] [client 20.215.208.34:58137] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mah.php"] [unique_id "ac7g8Eze_aEPDM9xEE228wAAARE"]
[Fri Apr 03 05:34:41.283551 2026] [:error] [pid 22671:tid 22712] [client 20.215.208.34:58204] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mah.php"] [unique_id "ac7g8SRuUnMW7r8hvyZGdwAAABU"]
[Fri Apr 03 05:34:41.796359 2026] [:error] [pid 22672:tid 22733] [client 20.215.208.34:57356] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mah.php"] [unique_id "ac7g8azrgXkFSOK0fvqEqwAAAE4"]
[Fri Apr 03 05:34:42.309633 2026] [:error] [pid 58590:tid 58595] [client 20.215.208.34:57345] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ac7g8kze_aEPDM9xEE22-QAAAQM"]
[Fri Apr 03 05:34:42.820343 2026] [:error] [pid 58590:tid 58606] [client 20.215.208.34:57462] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ac7g8kze_aEPDM9xEE22_QAAAQ4"]
[Fri Apr 03 05:34:43.338690 2026] [:error] [pid 58590:tid 58596] [client 20.215.208.34:53533] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ac7g80ze_aEPDM9xEE23AAAAAQQ"]
[Fri Apr 03 05:34:43.852128 2026] [:error] [pid 22672:tid 22736] [client 20.215.208.34:58206] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ac7g86zrgXkFSOK0fvqErwAAAFE"]
[Fri Apr 03 05:34:44.368847 2026] [:error] [pid 58590:tid 58604] [client 20.215.208.34:53570] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "ac7g9Eze_aEPDM9xEE23BgAAAQw"]
[Fri Apr 03 05:34:44.916140 2026] [:error] [pid 22673:tid 22763] [client 20.215.208.34:58162] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "ac7g9O-GlVDWdWxxwJCDbQAAAJE"]
[Fri Apr 03 05:34:45.428345 2026] [:error] [pid 58590:tid 58607] [client 20.215.208.34:57408] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "ac7g9Uze_aEPDM9xEE23EAAAAQ8"]
[Fri Apr 03 05:34:45.942548 2026] [:error] [pid 22673:tid 22759] [client 20.215.208.34:57427] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "ac7g9e-GlVDWdWxxwJCDcAAAAI0"]
[Fri Apr 03 05:34:46.461454 2026] [:error] [pid 22673:tid 22770] [client 20.215.208.34:58181] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "ac7g9u-GlVDWdWxxwJCDcgAAAJg"]
[Fri Apr 03 05:34:46.979923 2026] [:error] [pid 58590:tid 58609] [client 20.215.208.34:58211] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "ac7g9kze_aEPDM9xEE23GAAAARE"]
[Fri Apr 03 05:34:47.493120 2026] [:error] [pid 58590:tid 58615] [client 20.215.208.34:57344] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "ac7g90ze_aEPDM9xEE23GwAAARc"]
[Fri Apr 03 05:34:48.012341 2026] [:error] [pid 22672:tid 22733] [client 20.215.208.34:53614] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "ac7g-KzrgXkFSOK0fvqEtQAAAE4"]
[Fri Apr 03 05:34:48.530542 2026] [:error] [pid 22778:tid 22809] [client 20.215.208.34:58214] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "ac7g-PS-q9hkdFqUjq97bQAAANg"]
[Fri Apr 03 05:34:49.047223 2026] [:error] [pid 22778:tid 22802] [client 20.215.208.34:58159] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "ac7g-fS-q9hkdFqUjq97cQAAANE"]
[Fri Apr 03 05:34:49.565735 2026] [:error] [pid 22778:tid 22796] [client 20.215.208.34:52839] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "ac7g-fS-q9hkdFqUjq97dQAAAMs"]
[Fri Apr 03 05:34:50.082792 2026] [:error] [pid 22672:tid 22721] [client 20.215.208.34:53612] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "ac7g-qzrgXkFSOK0fvqEwQAAAEI"]
[Fri Apr 03 05:34:50.616135 2026] [:error] [pid 22672:tid 22731] [client 20.215.208.34:58132] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ac7g-qzrgXkFSOK0fvqExAAAAEw"]
[Fri Apr 03 05:34:51.128512 2026] [:error] [pid 22673:tid 22750] [client 20.215.208.34:57469] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ac7g---GlVDWdWxxwJCDfgAAAIQ"]
[Fri Apr 03 05:34:51.642950 2026] [:error] [pid 22673:tid 22768] [client 20.215.208.34:57458] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ac7g---GlVDWdWxxwJCDgwAAAJY"]
[Fri Apr 03 05:34:52.161796 2026] [:error] [pid 22673:tid 22752] [client 20.215.208.34:53577] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ac7g_O-GlVDWdWxxwJCDiAAAAIY"]
[Fri Apr 03 05:34:52.677532 2026] [:error] [pid 22672:tid 22735] [client 20.215.208.34:57429] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ac7g_KzrgXkFSOK0fvqEywAAAFA"]
[Fri Apr 03 05:34:53.248986 2026] [:error] [pid 22672:tid 22731] [client 20.215.208.34:53554] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ac7g_azrgXkFSOK0fvqEzgAAAEw"]
[Fri Apr 03 05:34:53.783606 2026] [:error] [pid 22673:tid 22766] [client 20.215.208.34:57455] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ac7g_e-GlVDWdWxxwJCDkwAAAJQ"]
[Fri Apr 03 05:34:54.296341 2026] [:error] [pid 22671:tid 22693] [client 20.215.208.34:57447] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ac7g_iRuUnMW7r8hvyZGewAAAAI"]
[Fri Apr 03 05:34:54.819747 2026] [:error] [pid 22672:tid 22734] [client 20.215.208.34:53608] [client 20.215.208.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "ac7g_qzrgXkFSOK0fvqE0wAAAE8"]
[Fri Apr 03 05:34:55.337419 2026] [:error] [pid 22778:tid 22785] [client 20.215.208.34:52738] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/123.php"] [unique_id "ac7g__S-q9hkdFqUjq97fQAAAMA"]
[Fri Apr 03 05:34:55.851228 2026] [:error] [pid 22673:tid 22751] [client 20.215.208.34:57456] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/123.php"] [unique_id "ac7g_--GlVDWdWxxwJCDlwAAAIU"]
[Fri Apr 03 05:34:56.402970 2026] [:error] [pid 22672:tid 22736] [client 20.215.208.34:58238] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/123.php"] [unique_id "ac7hAKzrgXkFSOK0fvqE1gAAAFE"]
[Fri Apr 03 05:34:56.928913 2026] [:error] [pid 22672:tid 22719] [client 20.215.208.34:58116] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/123.php"] [unique_id "ac7hAKzrgXkFSOK0fvqE1wAAAEA"]
[Fri Apr 03 05:34:57.447351 2026] [:error] [pid 22673:tid 22756] [client 20.215.208.34:58174] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac7hAe-GlVDWdWxxwJCDnAAAAIo"]
[Fri Apr 03 05:34:57.959548 2026] [:error] [pid 22778:tid 22799] [client 20.215.208.34:53523] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac7hAfS-q9hkdFqUjq97hQAAAM4"]
[Fri Apr 03 05:34:58.473371 2026] [:error] [pid 22672:tid 22725] [client 20.215.208.34:53615] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac7hAqzrgXkFSOK0fvqE4AAAAEY"]
[Fri Apr 03 05:34:58.986492 2026] [:error] [pid 22778:tid 22786] [client 20.215.208.34:53599] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac7hAvS-q9hkdFqUjq97jQAAAME"]
[Fri Apr 03 05:34:59.520164 2026] [:error] [pid 58590:tid 58595] [client 20.215.208.34:58178] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "ac7hA0ze_aEPDM9xEE23LQAAAQM"]
[Fri Apr 03 05:35:00.301320 2026] [:error] [pid 22672:tid 22741] [client 20.215.208.34:52803] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Fri Apr 03 05:35:00.565185 2026] [:error] [pid 22672:tid 22733] [client 20.215.208.34:52803] File does not exist: /usr/local/apache/htdocs/suspended-page/33.php
[Fri Apr 03 05:35:00.825804 2026] [:error] [pid 22672:tid 22721] [client 20.215.208.34:52803] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Apr 03 05:35:01.083764 2026] [:error] [pid 22672:tid 22724] [client 20.215.208.34:52803] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Fri Apr 03 05:35:01.606596 2026] [:error] [pid 22672:tid 22735] [client 20.215.208.34:52803] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-x7.php
[Fri Apr 03 05:35:01.864664 2026] [:error] [pid 22672:tid 22733] [client 20.215.208.34:52803] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Fri Apr 03 05:35:02.122788 2026] [:error] [pid 22672:tid 22722] [client 20.215.208.34:52803] File does not exist: /usr/local/apache/htdocs/suspended-page/v4.php
[Fri Apr 03 05:35:02.384457 2026] [:error] [pid 22672:tid 22725] [client 20.215.208.34:52803] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Fri Apr 03 05:35:02.652409 2026] [:error] [pid 22672:tid 22738] [client 20.215.208.34:52803] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Apr 03 05:35:02.906876 2026] [:error] [pid 22672:tid 22727] [client 20.215.208.34:52803] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "ac7hBqzrgXkFSOK0fvqFCQAAAEg"]
[Fri Apr 03 05:35:03.432583 2026] [:error] [pid 22673:tid 22761] [client 20.215.208.34:58131] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "ac7hB--GlVDWdWxxwJCDrQAAAI8"]
[Fri Apr 03 05:35:03.970890 2026] [:error] [pid 58590:tid 58599] [client 20.215.208.34:53574] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "ac7hB0ze_aEPDM9xEE23QgAAAQc"]
[Fri Apr 03 05:35:04.485336 2026] [:error] [pid 22673:tid 22751] [client 20.215.208.34:57438] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "ac7hCO-GlVDWdWxxwJCDrwAAAIU"]
[Fri Apr 03 05:35:04.996984 2026] [:error] [pid 58590:tid 58612] [client 20.215.208.34:57415] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "ac7hCEze_aEPDM9xEE23UAAAARQ"]
[Fri Apr 03 05:35:05.510920 2026] [:error] [pid 22673:tid 22757] [client 20.215.208.34:52862] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "ac7hCe-GlVDWdWxxwJCDswAAAIs"]
[Fri Apr 03 05:35:06.028765 2026] [:error] [pid 58590:tid 58592] [client 20.215.208.34:58152] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "ac7hCkze_aEPDM9xEE23WgAAAQA"]
[Fri Apr 03 05:35:06.542107 2026] [:error] [pid 22673:tid 22758] [client 20.215.208.34:58128] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "ac7hCu-GlVDWdWxxwJCDtAAAAIw"]
[Fri Apr 03 05:35:07.053886 2026] [:error] [pid 22673:tid 22748] [client 20.215.208.34:58207] [client 20.215.208.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ac7hC--GlVDWdWxxwJCDtQAAAII"]
[Fri Apr 03 05:35:07.569147 2026] [:error] [pid 22673:tid 22747] [client 20.215.208.34:53605] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "ac7hC--GlVDWdWxxwJCDuAAAAIE"]
[Fri Apr 03 05:35:08.084265 2026] [:error] [pid 22673:tid 22759] [client 20.215.208.34:53594] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "ac7hDO-GlVDWdWxxwJCDuQAAAI0"]
[Fri Apr 03 05:35:08.601966 2026] [:error] [pid 58590:tid 58609] [client 20.215.208.34:58161] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "ac7hDEze_aEPDM9xEE23cAAAARE"]
[Fri Apr 03 05:35:09.129179 2026] [:error] [pid 22673:tid 22751] [client 20.215.208.34:58187] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ext.php"] [unique_id "ac7hDe-GlVDWdWxxwJCDvgAAAIU"]
[Fri Apr 03 05:35:09.652084 2026] [:error] [pid 22673:tid 22746] [client 20.215.208.34:52844] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ext.php"] [unique_id "ac7hDe-GlVDWdWxxwJCDwgAAAIA"]
[Fri Apr 03 05:35:10.172784 2026] [:error] [pid 22673:tid 22755] [client 20.215.208.34:58228] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ext.php"] [unique_id "ac7hDu-GlVDWdWxxwJCDxwAAAIk"]
[Fri Apr 03 05:35:10.709169 2026] [:error] [pid 22673:tid 22751] [client 20.215.208.34:53556] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ext.php"] [unique_id "ac7hDu-GlVDWdWxxwJCDyQAAAIU"]
[Fri Apr 03 05:35:11.228278 2026] [:error] [pid 22672:tid 22724] [client 20.215.208.34:58125] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about3.php"] [unique_id "ac7hD6zrgXkFSOK0fvqFOQAAAEU"]
[Fri Apr 03 05:35:11.750575 2026] [:error] [pid 22671:tid 22695] [client 20.215.208.34:57363] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about3.php"] [unique_id "ac7hDyRuUnMW7r8hvyZGhwAAAAQ"]
[Fri Apr 03 05:35:12.267898 2026] [:error] [pid 22672:tid 22734] [client 20.215.208.34:57463] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about3.php"] [unique_id "ac7hEKzrgXkFSOK0fvqFRQAAAE8"]
[Fri Apr 03 05:35:12.781815 2026] [:error] [pid 22673:tid 22763] [client 20.215.208.34:57424] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about3.php"] [unique_id "ac7hEO-GlVDWdWxxwJCDzwAAAJE"]
[Fri Apr 03 05:35:13.335781 2026] [:error] [pid 58590:tid 58604] [client 20.215.208.34:58202] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ac7hEUze_aEPDM9xEE23kgAAAQw"]
[Fri Apr 03 05:35:13.850980 2026] [:error] [pid 22672:tid 22735] [client 20.215.208.34:57413] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ac7hEazrgXkFSOK0fvqFUAAAAFA"]
[Fri Apr 03 05:35:14.363849 2026] [:error] [pid 58590:tid 58605] [client 20.215.208.34:58173] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ac7hEkze_aEPDM9xEE23nwAAAQ0"]
[Fri Apr 03 05:35:14.876103 2026] [:error] [pid 22778:tid 22804] [client 20.215.208.34:53601] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ac7hEvS-q9hkdFqUjq97lgAAANM"]
[Fri Apr 03 05:35:15.395327 2026] [:error] [pid 22778:tid 22797] [client 20.215.208.34:58185] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "ac7hE_S-q9hkdFqUjq97mAAAAMw"]
[Fri Apr 03 05:35:15.916441 2026] [:error] [pid 22778:tid 22798] [client 20.215.208.34:53580] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "ac7hE_S-q9hkdFqUjq97mQAAAM0"]
[Fri Apr 03 05:35:16.515766 2026] [:error] [pid 22672:tid 22723] [client 20.215.208.34:53544] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "ac7hFKzrgXkFSOK0fvqFXgAAAEQ"]
[Fri Apr 03 05:35:17.036583 2026] [:error] [pid 58590:tid 58612] [client 20.215.208.34:52743] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "ac7hFUze_aEPDM9xEE23tQAAARQ"]
[Fri Apr 03 05:35:17.554717 2026] [:error] [pid 22778:tid 22795] [client 20.215.208.34:58146] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ac7hFfS-q9hkdFqUjq97nwAAAMo"]
[Fri Apr 03 05:35:18.067952 2026] [:error] [pid 58590:tid 58605] [client 20.215.208.34:58192] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ac7hFkze_aEPDM9xEE23vgAAAQ0"]
[Fri Apr 03 05:35:18.585197 2026] [:error] [pid 58590:tid 58606] [client 20.215.208.34:58133] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ac7hFkze_aEPDM9xEE23xAAAAQ4"]
[Fri Apr 03 05:35:19.102558 2026] [:error] [pid 22671:tid 22705] [client 20.215.208.34:58172] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ac7hFyRuUnMW7r8hvyZGjgAAAA4"]
[Fri Apr 03 05:35:19.615380 2026] [:error] [pid 58590:tid 58607] [client 20.215.208.34:58232] [client 20.215.208.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "ac7hF0ze_aEPDM9xEE23zAAAAQ8"]
[Fri Apr 03 05:35:20.126225 2026] [:error] [pid 22673:tid 22750] [client 20.215.208.34:53576] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "ac7hGO-GlVDWdWxxwJCD1gAAAIQ"]
[Fri Apr 03 05:35:20.640581 2026] [:error] [pid 22778:tid 22794] [client 20.215.208.34:52837] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "ac7hGPS-q9hkdFqUjq97qAAAAMk"]
[Fri Apr 03 05:35:21.168100 2026] [:error] [pid 22673:tid 22754] [client 20.215.208.34:53597] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "ac7hGe-GlVDWdWxxwJCD3AAAAIg"]
[Fri Apr 03 05:35:21.680031 2026] [:error] [pid 22672:tid 22741] [client 20.215.208.34:57355] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ac7hGazrgXkFSOK0fvqFfgAAAFY"]
[Fri Apr 03 05:35:22.223530 2026] [:error] [pid 58590:tid 58592] [client 20.215.208.34:58150] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ac7hGkze_aEPDM9xEE234QAAAQA"]
[Fri Apr 03 05:35:22.739936 2026] [:error] [pid 58590:tid 58608] [client 20.215.208.34:52838] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ac7hGkze_aEPDM9xEE235QAAARA"]
[Fri Apr 03 05:35:23.252132 2026] [:error] [pid 58590:tid 58613] [client 20.215.208.34:53590] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ac7hG0ze_aEPDM9xEE237AAAARU"]
[Fri Apr 03 05:35:23.765116 2026] [:error] [pid 22672:tid 22725] [client 20.215.208.34:51545] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ac7hG6zrgXkFSOK0fvqFfwAAAEY"]
[Fri Apr 03 05:35:24.285446 2026] [:error] [pid 22672:tid 22732] [client 20.215.208.34:58160] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ac7hHKzrgXkFSOK0fvqFgQAAAE0"]
[Fri Apr 03 05:35:24.796017 2026] [:error] [pid 22778:tid 22800] [client 20.215.208.34:57386] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ac7hHPS-q9hkdFqUjq97sAAAAM8"]
[Fri Apr 03 05:35:25.308260 2026] [:error] [pid 22778:tid 22790] [client 20.215.208.34:57347] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ac7hHfS-q9hkdFqUjq97sgAAAMU"]
[Fri Apr 03 05:35:25.844249 2026] [:error] [pid 22778:tid 22798] [client 20.215.208.34:57372] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac7hHfS-q9hkdFqUjq97uQAAAM0"]
[Fri Apr 03 05:35:26.356670 2026] [:error] [pid 22671:tid 22709] [client 20.215.208.34:57402] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac7hHiRuUnMW7r8hvyZGmAAAABI"]
[Fri Apr 03 05:35:26.890392 2026] [:error] [pid 22778:tid 22809] [client 20.215.208.34:58151] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac7hHvS-q9hkdFqUjq97ugAAANg"]
[Fri Apr 03 05:35:27.428166 2026] [:error] [pid 22671:tid 22712] [client 20.215.208.34:53619] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac7hHyRuUnMW7r8hvyZGmwAAABU"]
[Fri Apr 03 05:35:27.941108 2026] [:error] [pid 22671:tid 22691] [client 20.215.208.34:57383] [client 20.215.208.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "ac7hHyRuUnMW7r8hvyZGnwAAAAA"]
[Fri Apr 03 05:35:28.467267 2026] [:error] [pid 22778:tid 22805] [client 20.215.208.34:57470] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ac7hIPS-q9hkdFqUjq97wgAAANQ"]
[Fri Apr 03 05:35:28.989168 2026] [:error] [pid 22778:tid 22807] [client 20.215.208.34:58209] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ac7hIPS-q9hkdFqUjq97xwAAANY"]
[Fri Apr 03 05:35:29.503144 2026] [:error] [pid 22673:tid 22760] [client 20.215.208.34:53611] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ac7hIe-GlVDWdWxxwJCD9AAAAI4"]
[Fri Apr 03 05:35:30.014032 2026] [:error] [pid 22671:tid 22702] [client 20.215.208.34:57397] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ac7hIiRuUnMW7r8hvyZGogAAAAs"]
[Fri Apr 03 05:35:30.542322 2026] [:error] [pid 22671:tid 22696] [client 20.215.208.34:52048] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "ac7hIiRuUnMW7r8hvyZGpgAAAAU"]
[Fri Apr 03 05:35:31.079462 2026] [:error] [pid 22778:tid 22791] [client 20.215.208.34:57466] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "ac7hI_S-q9hkdFqUjq97zgAAAMY"]
[Fri Apr 03 05:35:31.592057 2026] [:error] [pid 22673:tid 22770] [client 20.215.208.34:52861] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "ac7hI--GlVDWdWxxwJCD-AAAAJg"]
[Fri Apr 03 05:35:32.106961 2026] [:error] [pid 22778:tid 22805] [client 20.215.208.34:57465] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "ac7hJPS-q9hkdFqUjq97zwAAANQ"]
[Fri Apr 03 05:35:32.621588 2026] [:error] [pid 58590:tid 58600] [client 20.215.208.34:57366] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/filemanager.php"] [unique_id "ac7hJEze_aEPDM9xEE23_wAAAQg"]
[Fri Apr 03 05:35:33.141904 2026] [:error] [pid 22778:tid 22796] [client 20.215.208.34:58118] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/filemanager.php"] [unique_id "ac7hJfS-q9hkdFqUjq970QAAAMs"]
[Fri Apr 03 05:35:33.660564 2026] [:error] [pid 22778:tid 22797] [client 20.215.208.34:57410] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/filemanager.php"] [unique_id "ac7hJfS-q9hkdFqUjq971AAAAMw"]
[Fri Apr 03 05:35:34.171761 2026] [:error] [pid 22671:tid 22693] [client 20.215.208.34:53596] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/filemanager.php"] [unique_id "ac7hJiRuUnMW7r8hvyZGswAAAAI"]
[Fri Apr 03 05:35:34.709778 2026] [:error] [pid 22778:tid 22792] [client 20.215.208.34:58218] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac7hJvS-q9hkdFqUjq972gAAAMc"]
[Fri Apr 03 05:35:35.245174 2026] [:error] [pid 58590:tid 58597] [client 20.215.208.34:57407] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac7hJ0ze_aEPDM9xEE24CgAAAQU"]
[Fri Apr 03 05:35:35.758197 2026] [:error] [pid 22672:tid 22727] [client 20.215.208.34:52740] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac7hJ6zrgXkFSOK0fvqFkAAAAEg"]
[Fri Apr 03 05:35:36.297304 2026] [:error] [pid 22671:tid 22710] [client 20.215.208.34:58154] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac7hKCRuUnMW7r8hvyZGvQAAABM"]
[Fri Apr 03 05:35:36.829895 2026] [:error] [pid 22673:tid 22749] [client 20.215.208.34:57365] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dlu.php"] [unique_id "ac7hKO-GlVDWdWxxwJCEAQAAAIM"]
[Fri Apr 03 05:35:37.366620 2026] [:error] [pid 58590:tid 58614] [client 20.215.208.34:57370] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dlu.php"] [unique_id "ac7hKUze_aEPDM9xEE24FgAAARY"]
[Fri Apr 03 05:35:37.885427 2026] [:error] [pid 58590:tid 58610] [client 20.215.208.34:58184] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dlu.php"] [unique_id "ac7hKUze_aEPDM9xEE24GwAAARI"]
[Fri Apr 03 05:35:38.431668 2026] [:error] [pid 58590:tid 58612] [client 20.215.208.34:57440] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dlu.php"] [unique_id "ac7hKkze_aEPDM9xEE24HgAAARQ"]
[Fri Apr 03 05:35:38.961496 2026] [:error] [pid 58590:tid 58593] [client 20.215.208.34:53566] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ac7hKkze_aEPDM9xEE24IAAAAQE"]
[Fri Apr 03 05:35:39.491013 2026] [:error] [pid 22778:tid 22785] [client 20.215.208.34:57417] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ac7hK_S-q9hkdFqUjq974QAAAMA"]
[Fri Apr 03 05:35:40.005008 2026] [:error] [pid 22671:tid 22712] [client 20.215.208.34:53631] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ac7hLCRuUnMW7r8hvyZGxQAAABU"]
[Fri Apr 03 05:35:40.515925 2026] [:error] [pid 58590:tid 58603] [client 20.215.208.34:53575] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ac7hLEze_aEPDM9xEE24KgAAAQs"]
[Fri Apr 03 05:35:41.031421 2026] [:error] [pid 22671:tid 22695] [client 20.215.208.34:53518] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "ac7hLSRuUnMW7r8hvyZGxgAAAAQ"]
[Fri Apr 03 05:35:41.547105 2026] [:error] [pid 58590:tid 58594] [client 20.215.208.34:53627] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "ac7hLUze_aEPDM9xEE24MAAAAQI"]
[Fri Apr 03 05:35:42.058027 2026] [:error] [pid 22672:tid 22734] [client 20.215.208.34:58223] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "ac7hLqzrgXkFSOK0fvqFlwAAAE8"]
[Fri Apr 03 05:35:42.576865 2026] [:error] [pid 58590:tid 58603] [client 20.215.208.34:53553] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "ac7hLkze_aEPDM9xEE24NQAAAQs"]
[Fri Apr 03 05:35:43.089385 2026] [:error] [pid 58590:tid 58598] [client 20.215.208.34:57428] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ac7hL0ze_aEPDM9xEE24OwAAAQY"]
[Fri Apr 03 05:35:43.630115 2026] [:error] [pid 22672:tid 22741] [client 20.215.208.34:52742] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ac7hL6zrgXkFSOK0fvqFmAAAAFY"]
[Fri Apr 03 05:35:44.141347 2026] [:error] [pid 58590:tid 58606] [client 20.215.208.34:53572] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ac7hMEze_aEPDM9xEE24SQAAAQ4"]
[Fri Apr 03 05:35:44.655878 2026] [:error] [pid 58590:tid 58604] [client 20.215.208.34:58234] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ac7hMEze_aEPDM9xEE24TQAAAQw"]
[Fri Apr 03 05:35:45.191158 2026] [:error] [pid 22673:tid 22768] [client 20.215.208.34:57412] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "ac7hMe-GlVDWdWxxwJCEFgAAAJY"]
[Fri Apr 03 05:35:45.703514 2026] [:error] [pid 58590:tid 58603] [client 20.215.208.34:57460] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "ac7hMUze_aEPDM9xEE24VwAAAQs"]
[Fri Apr 03 05:35:46.222957 2026] [:error] [pid 58590:tid 58593] [client 20.215.208.34:52828] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "ac7hMkze_aEPDM9xEE24XAAAAQE"]
[Fri Apr 03 05:35:46.733375 2026] [:error] [pid 22671:tid 22698] [client 20.215.208.34:57448] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "ac7hMiRuUnMW7r8hvyZGywAAAAc"]
[Fri Apr 03 05:35:47.251990 2026] [:error] [pid 22673:tid 22752] [client 20.215.208.34:58119] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ac7hM--GlVDWdWxxwJCEGQAAAIY"]
[Fri Apr 03 05:35:47.770072 2026] [:error] [pid 22778:tid 22801] [client 20.215.208.34:53620] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ac7hM_S-q9hkdFqUjq975QAAANA"]
[Fri Apr 03 05:35:48.284607 2026] [:error] [pid 58590:tid 58605] [client 20.215.208.34:53593] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ac7hNEze_aEPDM9xEE24YwAAAQ0"]
[Fri Apr 03 05:35:48.796306 2026] [:error] [pid 58590:tid 58597] [client 20.215.208.34:52095] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ac7hNEze_aEPDM9xEE24ZwAAAQU"]
[Fri Apr 03 05:35:49.307353 2026] [:error] [pid 58590:tid 58603] [client 20.215.208.34:53610] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "ac7hNUze_aEPDM9xEE24bAAAAQs"]
[Fri Apr 03 05:35:49.824633 2026] [:error] [pid 22672:tid 22731] [client 20.215.208.34:58224] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "ac7hNazrgXkFSOK0fvqFmwAAAEw"]
[Fri Apr 03 05:35:50.339939 2026] [:error] [pid 58590:tid 58595] [client 20.215.208.34:58143] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "ac7hNkze_aEPDM9xEE24dQAAAQM"]
[Fri Apr 03 05:35:50.851456 2026] [:error] [pid 22778:tid 22794] [client 20.215.208.34:53568] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "ac7hNvS-q9hkdFqUjq976wAAAMk"]
[Fri Apr 03 05:35:51.362503 2026] [:error] [pid 22673:tid 22756] [client 20.215.208.34:53509] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "ac7hN--GlVDWdWxxwJCEIQAAAIo"]
[Fri Apr 03 05:35:51.874822 2026] [:error] [pid 22673:tid 22768] [client 20.215.208.34:57362] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "ac7hN--GlVDWdWxxwJCEJQAAAJY"]
[Fri Apr 03 05:35:52.395200 2026] [:error] [pid 22778:tid 22788] [client 20.215.208.34:58198] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "ac7hOPS-q9hkdFqUjq978wAAAMM"]
[Fri Apr 03 05:35:52.911790 2026] [:error] [pid 58590:tid 58607] [client 20.215.208.34:52795] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "ac7hOEze_aEPDM9xEE24gAAAAQ8"]
[Fri Apr 03 05:35:53.422894 2026] [:error] [pid 22672:tid 22722] [client 20.215.208.34:53592] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ac7hOazrgXkFSOK0fvqFogAAAEM"]
[Fri Apr 03 05:35:53.946331 2026] [:error] [pid 58590:tid 58615] [client 20.215.208.34:57378] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ac7hOUze_aEPDM9xEE24iQAAARc"]
[Fri Apr 03 05:35:54.501650 2026] [:error] [pid 58590:tid 58596] [client 20.215.208.34:53621] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ac7hOkze_aEPDM9xEE24jgAAAQQ"]
[Fri Apr 03 05:35:55.017422 2026] [:error] [pid 22672:tid 22740] [client 20.215.208.34:58156] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ac7hO6zrgXkFSOK0fvqFowAAAFU"]
[Fri Apr 03 05:35:55.574592 2026] [:error] [pid 58590:tid 58594] [client 20.215.208.34:53535] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "ac7hO0ze_aEPDM9xEE24lwAAAQI"]
[Fri Apr 03 05:35:56.128906 2026] [:error] [pid 22778:tid 22797] [client 20.215.208.34:58168] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "ac7hPPS-q9hkdFqUjq97-QAAAMw"]
[Fri Apr 03 05:35:56.640373 2026] [:error] [pid 22673:tid 22766] [client 20.215.208.34:53598] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "ac7hPO-GlVDWdWxxwJCELgAAAJQ"]
[Fri Apr 03 05:35:57.154591 2026] [:error] [pid 58590:tid 58612] [client 20.215.208.34:57414] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "ac7hPUze_aEPDM9xEE24ogAAARQ"]
[Fri Apr 03 05:35:57.682699 2026] [:error] [pid 58590:tid 58605] [client 20.215.208.34:57369] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/te.php"] [unique_id "ac7hPUze_aEPDM9xEE24pgAAAQ0"]
[Fri Apr 03 05:35:58.457767 2026] [:error] [pid 22673:tid 22752] [client 20.215.208.34:52856] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/te.php"] [unique_id "ac7hPu-GlVDWdWxxwJCEPAAAAIY"]
[Fri Apr 03 05:35:59.002785 2026] [:error] [pid 22673:tid 22759] [client 20.215.208.34:57444] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/te.php"] [unique_id "ac7hP--GlVDWdWxxwJCEQQAAAI0"]
[Fri Apr 03 05:35:59.536013 2026] [:error] [pid 58590:tid 58614] [client 20.215.208.34:57360] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/te.php"] [unique_id "ac7hP0ze_aEPDM9xEE24swAAARY"]
[Fri Apr 03 05:36:00.059182 2026] [:error] [pid 22673:tid 22762] [client 20.215.208.34:53531] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "ac7hQO-GlVDWdWxxwJCESgAAAJA"]
[Fri Apr 03 05:36:00.585148 2026] [:error] [pid 22672:tid 22739] [client 20.215.208.34:58197] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "ac7hQKzrgXkFSOK0fvqFpwAAAFQ"]
[Fri Apr 03 05:36:01.111989 2026] [:error] [pid 22671:tid 22699] [client 20.215.208.34:58171] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "ac7hQSRuUnMW7r8hvyZG1gAAAAg"]
[Fri Apr 03 05:36:01.650007 2026] [:error] [pid 58590:tid 58596] [client 20.215.208.34:57395] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "ac7hQUze_aEPDM9xEE24vwAAAQQ"]
[Fri Apr 03 05:36:02.168350 2026] [:error] [pid 22673:tid 22749] [client 20.215.208.34:58155] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Fri Apr 03 05:36:02.441625 2026] [:error] [pid 22673:tid 22747] [client 20.215.208.34:58155] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Fri Apr 03 05:36:02.699650 2026] [:error] [pid 22673:tid 22766] [client 20.215.208.34:58155] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Fri Apr 03 05:36:02.957471 2026] [:error] [pid 22673:tid 22751] [client 20.215.208.34:58155] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Apr 03 05:36:03.474728 2026] [:error] [pid 22673:tid 22769] [client 20.215.208.34:58155] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Apr 03 05:36:03.732787 2026] [:error] [pid 22673:tid 22757] [client 20.215.208.34:58155] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Fri Apr 03 05:36:03.991306 2026] [:error] [pid 22673:tid 22747] [client 20.215.208.34:58155] File does not exist: /usr/local/apache/htdocs/suspended-page/v2.php
[Fri Apr 03 05:36:04.508356 2026] [:error] [pid 22673:tid 22746] [client 20.215.208.34:58155] File does not exist: /usr/local/apache/htdocs/suspended-page/shoha.php
[Fri Apr 03 05:36:04.769112 2026] [:error] [pid 22673:tid 22764] [client 20.215.208.34:58155] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Apr 03 05:36:05.024503 2026] [:error] [pid 22673:tid 22760] [client 20.215.208.34:58155] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ac7hRe-GlVDWdWxxwJCEdwAAAI4"]
[Fri Apr 03 05:36:05.535724 2026] [:error] [pid 22778:tid 22790] [client 20.215.208.34:52762] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ac7hRfS-q9hkdFqUjq98GAAAAMU"]
[Fri Apr 03 05:36:06.050621 2026] [:error] [pid 58590:tid 58602] [client 20.215.208.34:53588] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ac7hRkze_aEPDM9xEE24zQAAAQo"]
[Fri Apr 03 05:36:06.571066 2026] [:error] [pid 22671:tid 22713] [client 20.215.208.34:52751] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ac7hRiRuUnMW7r8hvyZG2AAAABY"]
[Fri Apr 03 05:36:07.086616 2026] [:error] [pid 22778:tid 22804] [client 20.215.208.34:58170] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac7hR_S-q9hkdFqUjq98HQAAANM"]
[Fri Apr 03 05:36:07.603767 2026] [:error] [pid 22778:tid 22796] [client 20.215.208.34:57380] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac7hR_S-q9hkdFqUjq98HgAAAMs"]
[Fri Apr 03 05:36:08.116515 2026] [:error] [pid 22672:tid 22721] [client 20.215.208.34:53521] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac7hSKzrgXkFSOK0fvqFsAAAAEI"]
[Fri Apr 03 05:36:08.637958 2026] [:error] [pid 22778:tid 22791] [client 20.215.208.34:52088] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac7hSPS-q9hkdFqUjq98JQAAAMY"]
[Fri Apr 03 05:36:09.148336 2026] [:error] [pid 22672:tid 22743] [client 20.215.208.34:58121] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ac7hSazrgXkFSOK0fvqFsgAAAFg"]
[Fri Apr 03 05:36:09.658346 2026] [:error] [pid 22673:tid 22748] [client 20.215.208.34:57393] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ac7hSe-GlVDWdWxxwJCEmQAAAII"]
[Fri Apr 03 05:36:10.169734 2026] [:error] [pid 22672:tid 22726] [client 20.215.208.34:53511] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ac7hSqzrgXkFSOK0fvqFswAAAEc"]
[Fri Apr 03 05:36:10.681028 2026] [:error] [pid 22778:tid 22800] [client 20.215.208.34:52773] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ac7hSvS-q9hkdFqUjq98KQAAAM8"]
[Fri Apr 03 05:36:11.191749 2026] [:error] [pid 58590:tid 58605] [client 20.215.208.34:52746] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ac7hS0ze_aEPDM9xEE243AAAAQ0"]
[Fri Apr 03 05:36:11.705504 2026] [:error] [pid 22778:tid 22791] [client 20.215.208.34:57419] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ac7hS_S-q9hkdFqUjq98LAAAAMY"]
[Fri Apr 03 05:36:12.222867 2026] [:error] [pid 22778:tid 22809] [client 20.215.208.34:52059] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ac7hTPS-q9hkdFqUjq98LgAAANg"]
[Fri Apr 03 05:36:12.734516 2026] [:error] [pid 22672:tid 22727] [client 20.215.208.34:57445] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ac7hTKzrgXkFSOK0fvqFuAAAAEg"]
[Fri Apr 03 05:36:13.244448 2026] [:error] [pid 58590:tid 58608] [client 20.215.208.34:57471] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ac7hTUze_aEPDM9xEE245QAAARA"]
[Fri Apr 03 05:36:13.757200 2026] [:error] [pid 58590:tid 58614] [client 20.215.208.34:53578] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ac7hTUze_aEPDM9xEE245gAAARY"]
[Fri Apr 03 05:36:14.290049 2026] [:error] [pid 22778:tid 22793] [client 20.215.208.34:52757] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ac7hTvS-q9hkdFqUjq98MwAAAMg"]
[Fri Apr 03 05:36:14.803317 2026] [:error] [pid 58590:tid 58606] [client 20.215.208.34:57436] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ac7hTkze_aEPDM9xEE248AAAAQ4"]
[Fri Apr 03 05:36:15.315069 2026] [:error] [pid 22672:tid 22721] [client 20.215.208.34:58127] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ac7hT6zrgXkFSOK0fvqFvgAAAEI"]
[Fri Apr 03 05:36:15.829859 2026] [:error] [pid 58590:tid 58596] [client 20.215.208.34:53591] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ac7hT0ze_aEPDM9xEE249gAAAQQ"]
[Fri Apr 03 05:36:16.341123 2026] [:error] [pid 58590:tid 58602] [client 20.215.208.34:53606] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ac7hUEze_aEPDM9xEE24-wAAAQo"]
[Fri Apr 03 05:36:16.856389 2026] [:error] [pid 58590:tid 58610] [client 20.215.208.34:53609] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ac7hUEze_aEPDM9xEE24_gAAARI"]
[Fri Apr 03 05:36:17.365706 2026] [:error] [pid 58590:tid 58592] [client 20.215.208.34:57451] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac7hUUze_aEPDM9xEE25BAAAAQA"]
[Fri Apr 03 05:36:17.883727 2026] [:error] [pid 22778:tid 22789] [client 20.215.208.34:53630] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac7hUfS-q9hkdFqUjq98OQAAAMQ"]
[Fri Apr 03 05:36:18.394542 2026] [:error] [pid 22672:tid 22725] [client 20.215.208.34:57411] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac7hUqzrgXkFSOK0fvqFwQAAAEY"]
[Fri Apr 03 05:36:18.907305 2026] [:error] [pid 58590:tid 58602] [client 20.215.208.34:53561] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac7hUkze_aEPDM9xEE25CAAAAQo"]
[Fri Apr 03 05:36:19.420521 2026] [:error] [pid 22672:tid 22741] [client 20.215.208.34:53512] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ac7hU6zrgXkFSOK0fvqFxAAAAFY"]
[Fri Apr 03 05:36:19.943675 2026] [:error] [pid 22671:tid 22714] [client 20.215.208.34:57390] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ac7hUyRuUnMW7r8hvyZG6AAAABc"]
[Fri Apr 03 05:36:20.456993 2026] [:error] [pid 22778:tid 22804] [client 20.215.208.34:53604] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ac7hVPS-q9hkdFqUjq98QQAAANM"]
[Fri Apr 03 05:36:20.970782 2026] [:error] [pid 22671:tid 22703] [client 20.215.208.34:52816] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ac7hVCRuUnMW7r8hvyZG6gAAAAw"]
[Fri Apr 03 05:36:21.488500 2026] [:error] [pid 22671:tid 22702] [client 20.215.208.34:57437] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zxin.php"] [unique_id "ac7hVSRuUnMW7r8hvyZG6wAAAAs"]
[Fri Apr 03 05:36:22.005446 2026] [:error] [pid 22671:tid 22705] [client 20.215.208.34:52749] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zxin.php"] [unique_id "ac7hViRuUnMW7r8hvyZG7QAAAA4"]
[Fri Apr 03 05:36:22.517871 2026] [:error] [pid 22778:tid 22787] [client 20.215.208.34:52796] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zxin.php"] [unique_id "ac7hVvS-q9hkdFqUjq98RAAAAMI"]
[Fri Apr 03 05:36:23.030189 2026] [:error] [pid 22778:tid 22797] [client 20.215.208.34:52842] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zxin.php"] [unique_id "ac7hV_S-q9hkdFqUjq98SAAAAMw"]
[Fri Apr 03 05:36:23.544360 2026] [:error] [pid 22673:tid 22751] [client 20.215.208.34:52830] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "ac7hV--GlVDWdWxxwJCE0wAAAIU"]
[Fri Apr 03 05:36:24.056837 2026] [:error] [pid 22671:tid 22713] [client 20.215.208.34:52831] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "ac7hWCRuUnMW7r8hvyZG8gAAABY"]
[Fri Apr 03 05:36:24.569641 2026] [:error] [pid 22673:tid 22756] [client 20.215.208.34:57439] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "ac7hWO-GlVDWdWxxwJCE1wAAAIo"]
[Fri Apr 03 05:36:25.080972 2026] [:error] [pid 22672:tid 22727] [client 20.215.208.34:58190] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "ac7hWazrgXkFSOK0fvqFzAAAAEg"]
[Fri Apr 03 05:36:25.591189 2026] [:error] [pid 58590:tid 58602] [client 20.215.208.34:57357] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/NewFile.php"] [unique_id "ac7hWUze_aEPDM9xEE25EwAAAQo"]
[Fri Apr 03 05:36:26.107967 2026] [:error] [pid 58590:tid 58605] [client 20.215.208.34:57375] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/NewFile.php"] [unique_id "ac7hWkze_aEPDM9xEE25FQAAAQ0"]
[Fri Apr 03 05:36:26.632906 2026] [:error] [pid 22778:tid 22799] [client 20.215.208.34:53587] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/NewFile.php"] [unique_id "ac7hWvS-q9hkdFqUjq98UgAAAM4"]
[Fri Apr 03 05:36:27.181386 2026] [:error] [pid 22672:tid 22721] [client 20.215.208.34:57376] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/NewFile.php"] [unique_id "ac7hW6zrgXkFSOK0fvqF0QAAAEI"]
[Fri Apr 03 05:36:27.701474 2026] [:error] [pid 22671:tid 22704] [client 20.215.208.34:57391] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "ac7hWyRuUnMW7r8hvyZG9wAAAA0"]
[Fri Apr 03 05:36:28.216675 2026] [:error] [pid 22672:tid 22726] [client 20.215.208.34:53536] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "ac7hXKzrgXkFSOK0fvqF1wAAAEc"]
[Fri Apr 03 05:36:28.730186 2026] [:error] [pid 22672:tid 22725] [client 20.215.208.34:58226] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "ac7hXKzrgXkFSOK0fvqF2QAAAEY"]
[Fri Apr 03 05:36:29.257707 2026] [:error] [pid 22672:tid 22731] [client 20.215.208.34:58186] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "ac7hXazrgXkFSOK0fvqF3AAAAEw"]
[Fri Apr 03 05:36:29.783059 2026] [:error] [pid 22673:tid 22754] [client 20.215.208.34:58213] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wolv2.php"] [unique_id "ac7hXe-GlVDWdWxxwJCE6AAAAIg"]
[Fri Apr 03 05:36:30.316267 2026] [:error] [pid 22673:tid 22762] [client 20.215.208.34:57450] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wolv2.php"] [unique_id "ac7hXu-GlVDWdWxxwJCE6QAAAJA"]
[Fri Apr 03 05:36:30.839651 2026] [:error] [pid 58590:tid 58604] [client 20.215.208.34:58112] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wolv2.php"] [unique_id "ac7hXkze_aEPDM9xEE25IAAAAQw"]
[Fri Apr 03 05:36:31.369220 2026] [:error] [pid 58590:tid 58596] [client 20.215.208.34:58123] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wolv2.php"] [unique_id "ac7hX0ze_aEPDM9xEE25JwAAAQQ"]
[Fri Apr 03 05:36:31.891379 2026] [:error] [pid 22673:tid 22759] [client 20.215.208.34:52060] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/geck.php"] [unique_id "ac7hX--GlVDWdWxxwJCE8gAAAI0"]
[Fri Apr 03 05:36:32.401020 2026] [:error] [pid 58590:tid 58612] [client 20.215.208.34:52749] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/geck.php"] [unique_id "ac7hYEze_aEPDM9xEE25NQAAARQ"]
[Fri Apr 03 05:36:32.913722 2026] [:error] [pid 58590:tid 58599] [client 20.215.208.34:58142] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/geck.php"] [unique_id "ac7hYEze_aEPDM9xEE25OwAAAQc"]
[Fri Apr 03 05:36:33.453475 2026] [:error] [pid 58590:tid 58594] [client 20.215.208.34:52857] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/geck.php"] [unique_id "ac7hYUze_aEPDM9xEE25QQAAAQI"]
[Fri Apr 03 05:36:33.964003 2026] [:error] [pid 58590:tid 58616] [client 20.215.208.34:57346] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xtt.php"] [unique_id "ac7hYUze_aEPDM9xEE25RQAAARg"]
[Fri Apr 03 05:36:34.480637 2026] [:error] [pid 58590:tid 58595] [client 20.215.208.34:53552] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xtt.php"] [unique_id "ac7hYkze_aEPDM9xEE25TAAAAQM"]
[Fri Apr 03 05:36:34.992394 2026] [:error] [pid 22671:tid 22705] [client 20.215.208.34:58145] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xtt.php"] [unique_id "ac7hYiRuUnMW7r8hvyZHAgAAAA4"]
[Fri Apr 03 05:36:35.510727 2026] [:error] [pid 22672:tid 22726] [client 20.215.208.34:51559] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xtt.php"] [unique_id "ac7hY6zrgXkFSOK0fvqF6QAAAEc"]
[Fri Apr 03 05:36:36.030498 2026] [:error] [pid 22778:tid 22803] [client 20.215.208.34:52741] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ac7hZPS-q9hkdFqUjq98XQAAANI"]
[Fri Apr 03 05:36:36.545147 2026] [:error] [pid 22778:tid 22791] [client 20.215.208.34:53626] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ac7hZPS-q9hkdFqUjq98XwAAAMY"]
[Fri Apr 03 05:36:37.074237 2026] [:error] [pid 22673:tid 22762] [client 20.215.208.34:52858] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ac7hZe-GlVDWdWxxwJCFAgAAAJA"]
[Fri Apr 03 05:36:37.585904 2026] [:error] [pid 22673:tid 22753] [client 20.215.208.34:52847] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ac7hZe-GlVDWdWxxwJCFBQAAAIc"]
[Fri Apr 03 05:36:38.097536 2026] [:error] [pid 58590:tid 58599] [client 20.215.208.34:57392] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system.php"] [unique_id "ac7hZkze_aEPDM9xEE25VgAAAQc"]
[Fri Apr 03 05:36:38.611513 2026] [:error] [pid 22778:tid 22805] [client 20.215.208.34:58130] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system.php"] [unique_id "ac7hZvS-q9hkdFqUjq98YQAAANQ"]
[Fri Apr 03 05:36:39.123928 2026] [:error] [pid 22673:tid 22749] [client 20.215.208.34:53540] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system.php"] [unique_id "ac7hZ--GlVDWdWxxwJCFDgAAAIM"]
[Fri Apr 03 05:36:39.646959 2026] [:error] [pid 22673:tid 22755] [client 20.215.208.34:52756] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system.php"] [unique_id "ac7hZ--GlVDWdWxxwJCFEAAAAIk"]
[Fri Apr 03 05:36:40.158781 2026] [:error] [pid 22673:tid 22756] [client 20.215.208.34:52038] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "ac7haO-GlVDWdWxxwJCFFAAAAIo"]
[Fri Apr 03 05:36:40.692117 2026] [:error] [pid 22672:tid 22730] [client 20.215.208.34:52063] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "ac7haKzrgXkFSOK0fvqF8QAAAEs"]
[Fri Apr 03 05:36:41.206835 2026] [:error] [pid 22778:tid 22808] [client 20.215.208.34:58135] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "ac7hafS-q9hkdFqUjq98bwAAANc"]
[Fri Apr 03 05:36:41.718904 2026] [:error] [pid 58590:tid 58592] [client 20.215.208.34:53602] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "ac7haUze_aEPDM9xEE25WAAAAQA"]
[Fri Apr 03 05:36:42.231968 2026] [:error] [pid 22673:tid 22762] [client 20.215.208.34:58166] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "ac7hau-GlVDWdWxxwJCFIwAAAJA"]
[Fri Apr 03 05:36:42.744716 2026] [:error] [pid 22778:tid 22798] [client 20.215.208.34:52752] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "ac7havS-q9hkdFqUjq98dAAAAM0"]
[Fri Apr 03 05:36:43.257672 2026] [:error] [pid 22671:tid 22714] [client 20.215.208.34:53528] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "ac7hayRuUnMW7r8hvyZHCgAAABc"]
[Fri Apr 03 05:36:43.769133 2026] [:error] [pid 22673:tid 22770] [client 20.215.208.34:57398] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "ac7ha--GlVDWdWxxwJCFKQAAAJg"]
[Fri Apr 03 05:36:44.279273 2026] [:error] [pid 22778:tid 22800] [client 20.215.208.34:57459] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ac7hbPS-q9hkdFqUjq98dwAAAM8"]
[Fri Apr 03 05:36:44.792027 2026] [:error] [pid 22778:tid 22796] [client 20.215.208.34:53567] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ac7hbPS-q9hkdFqUjq98eQAAAMs"]
[Fri Apr 03 05:36:45.301211 2026] [:error] [pid 22671:tid 22696] [client 20.215.208.34:52852] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ac7hbSRuUnMW7r8hvyZHEAAAAAU"]
[Fri Apr 03 05:36:45.814532 2026] [:error] [pid 22671:tid 22708] [client 20.215.208.34:52853] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ac7hbSRuUnMW7r8hvyZHFAAAABE"]
[Fri Apr 03 05:36:46.326904 2026] [:error] [pid 22778:tid 22791] [client 20.215.208.34:57379] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media.php"] [unique_id "ac7hbvS-q9hkdFqUjq98fQAAAMY"]
[Fri Apr 03 05:36:46.838728 2026] [:error] [pid 22778:tid 22787] [client 20.215.208.34:52823] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media.php"] [unique_id "ac7hbvS-q9hkdFqUjq98ggAAAMI"]
[Fri Apr 03 05:36:47.355782 2026] [:error] [pid 22672:tid 22727] [client 20.215.208.34:52813] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media.php"] [unique_id "ac7hb6zrgXkFSOK0fvqF9wAAAEg"]
[Fri Apr 03 05:36:47.879531 2026] [:error] [pid 22673:tid 22767] [client 20.215.208.34:58167] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media.php"] [unique_id "ac7hb--GlVDWdWxxwJCFLQAAAJU"]
[Fri Apr 03 05:36:48.395833 2026] [:error] [pid 58590:tid 58610] [client 20.215.208.34:51537] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac7hcEze_aEPDM9xEE25aAAAARI"]
[Fri Apr 03 05:36:48.907377 2026] [:error] [pid 58590:tid 58607] [client 20.215.208.34:53571] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac7hcEze_aEPDM9xEE25agAAAQ8"]
[Fri Apr 03 05:36:49.420135 2026] [:error] [pid 22673:tid 22763] [client 20.215.208.34:57400] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac7hce-GlVDWdWxxwJCFMgAAAJE"]
[Fri Apr 03 05:36:49.935243 2026] [:error] [pid 22673:tid 22757] [client 20.215.208.34:58169] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac7hce-GlVDWdWxxwJCFNwAAAIs"]
[Fri Apr 03 05:36:50.446293 2026] [:error] [pid 22673:tid 22746] [client 20.215.208.34:52833] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admir.php"] [unique_id "ac7hcu-GlVDWdWxxwJCFOgAAAIA"]
[Fri Apr 03 05:36:50.957880 2026] [:error] [pid 22673:tid 22758] [client 20.215.208.34:58225] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admir.php"] [unique_id "ac7hcu-GlVDWdWxxwJCFPgAAAIw"]
[Fri Apr 03 05:36:51.476783 2026] [:error] [pid 58590:tid 58604] [client 20.215.208.34:57467] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admir.php"] [unique_id "ac7hc0ze_aEPDM9xEE25cgAAAQw"]
[Fri Apr 03 05:36:51.994034 2026] [:error] [pid 58590:tid 58593] [client 20.215.208.34:52745] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admir.php"] [unique_id "ac7hc0ze_aEPDM9xEE25dwAAAQE"]
[Fri Apr 03 05:36:52.508084 2026] [:error] [pid 22778:tid 22786] [client 20.215.208.34:52827] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "ac7hdPS-q9hkdFqUjq98nAAAAME"]
[Fri Apr 03 05:36:53.020073 2026] [:error] [pid 22671:tid 22700] [client 20.215.208.34:52821] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "ac7hdSRuUnMW7r8hvyZHPQAAAAk"]
[Fri Apr 03 05:36:53.561565 2026] [:error] [pid 22673:tid 22756] [client 20.215.208.34:57401] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "ac7hde-GlVDWdWxxwJCFRQAAAIo"]
[Fri Apr 03 05:36:54.078050 2026] [:error] [pid 22673:tid 22748] [client 20.215.208.34:51976] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "ac7hdu-GlVDWdWxxwJCFSAAAAII"]
[Fri Apr 03 05:36:54.595563 2026] [:error] [pid 22673:tid 22753] [client 20.215.208.34:53565] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "ac7hdu-GlVDWdWxxwJCFSwAAAIc"]
[Fri Apr 03 05:36:55.106797 2026] [:error] [pid 22673:tid 22749] [client 20.215.208.34:52765] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "ac7hd--GlVDWdWxxwJCFTgAAAIM"]
[Fri Apr 03 05:36:55.638748 2026] [:error] [pid 22673:tid 22746] [client 20.215.208.34:52811] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "ac7hd--GlVDWdWxxwJCFUQAAAIA"]
[Fri Apr 03 05:36:56.155187 2026] [:error] [pid 22778:tid 22796] [client 20.215.208.34:52824] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "ac7hePS-q9hkdFqUjq98pAAAAMs"]
[Fri Apr 03 05:36:56.673286 2026] [:error] [pid 22778:tid 22786] [client 20.215.208.34:53595] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac7hePS-q9hkdFqUjq98qwAAAME"]
[Fri Apr 03 05:36:57.196694 2026] [:error] [pid 58590:tid 58607] [client 20.215.208.34:53538] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac7heUze_aEPDM9xEE25ggAAAQ8"]
[Fri Apr 03 05:36:57.714305 2026] [:error] [pid 22673:tid 22758] [client 20.215.208.34:52786] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac7hee-GlVDWdWxxwJCFVAAAAIw"]
[Fri Apr 03 05:36:58.234041 2026] [:error] [pid 22778:tid 22797] [client 20.215.208.34:53624] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac7hevS-q9hkdFqUjq98sgAAAMw"]
[Fri Apr 03 05:36:58.753541 2026] [:error] [pid 58590:tid 58610] [client 20.215.208.34:52822] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc.php"] [unique_id "ac7hekze_aEPDM9xEE25igAAARI"]
[Fri Apr 03 05:36:59.308635 2026] [:error] [pid 58590:tid 58594] [client 20.215.208.34:53530] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc.php"] [unique_id "ac7he0ze_aEPDM9xEE25jAAAAQI"]
[Fri Apr 03 05:36:59.828927 2026] [:error] [pid 22778:tid 22795] [client 20.215.208.34:53522] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc.php"] [unique_id "ac7he_S-q9hkdFqUjq98twAAAMo"]
[Fri Apr 03 05:37:00.344521 2026] [:error] [pid 58590:tid 58600] [client 20.215.208.34:52807] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc.php"] [unique_id "ac7hfEze_aEPDM9xEE25kgAAAQg"]
[Fri Apr 03 05:37:00.856931 2026] [:error] [pid 22671:tid 22695] [client 20.215.208.34:53547] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "ac7hfCRuUnMW7r8hvyZHPwAAAAQ"]
[Fri Apr 03 05:37:01.379754 2026] [:error] [pid 22778:tid 22803] [client 20.215.208.34:53579] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "ac7hffS-q9hkdFqUjq98vgAAANI"]
[Fri Apr 03 05:37:01.893044 2026] [:error] [pid 58590:tid 58599] [client 20.215.208.34:52768] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "ac7hfUze_aEPDM9xEE25mQAAAQc"]
[Fri Apr 03 05:37:02.416620 2026] [:error] [pid 22673:tid 22769] [client 20.215.208.34:58114] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "ac7hfu-GlVDWdWxxwJCFXAAAAJc"]
[Fri Apr 03 05:37:02.935538 2026] [:error] [pid 58590:tid 58595] [client 20.215.208.34:52775] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "ac7hfkze_aEPDM9xEE25nAAAAQM"]
[Fri Apr 03 05:37:03.449158 2026] [:error] [pid 58590:tid 58612] [client 20.215.208.34:52010] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "ac7hf0ze_aEPDM9xEE25oQAAARQ"]
[Fri Apr 03 05:37:03.980417 2026] [:error] [pid 58590:tid 58611] [client 20.215.208.34:57359] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "ac7hf0ze_aEPDM9xEE25pAAAARM"]
[Fri Apr 03 05:37:04.495983 2026] [:error] [pid 58590:tid 58599] [client 20.215.208.34:53622] File does not exist: /usr/local/apache/htdocs/suspended-page/lo.php
[Fri Apr 03 05:37:04.754382 2026] [:error] [pid 58590:tid 58607] [client 20.215.208.34:53622] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Fri Apr 03 05:37:05.014403 2026] [:error] [pid 58590:tid 58603] [client 20.215.208.34:53622] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Fri Apr 03 05:37:05.532199 2026] [:error] [pid 58590:tid 58597] [client 20.215.208.34:53622] File does not exist: /usr/local/apache/htdocs/suspended-page/lmutxdvyp7u5yksqke8ozbjgCdefault.php
[Fri Apr 03 05:37:05.790461 2026] [:error] [pid 58590:tid 58613] [client 20.215.208.34:53622] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Fri Apr 03 05:37:06.048560 2026] [:error] [pid 58590:tid 58596] [client 20.215.208.34:53622] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Fri Apr 03 05:37:06.306892 2026] [:error] [pid 58590:tid 58599] [client 20.215.208.34:53622] File does not exist: /usr/local/apache/htdocs/suspended-page/yas.php
[Fri Apr 03 05:37:06.565123 2026] [:error] [pid 58590:tid 58598] [client 20.215.208.34:53622] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Fri Apr 03 05:37:06.824355 2026] [:error] [pid 58590:tid 58593] [client 20.215.208.34:53622] File does not exist: /usr/local/apache/htdocs/suspended-page/v3.php
[Fri Apr 03 05:37:07.344593 2026] [:error] [pid 58590:tid 58604] [client 20.215.208.34:53622] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "ac7hg0ze_aEPDM9xEE25vAAAAQw"]
[Fri Apr 03 05:37:07.863059 2026] [:error] [pid 22671:tid 22706] [client 20.215.208.34:58153] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "ac7hgyRuUnMW7r8hvyZHRAAAAA8"]
[Fri Apr 03 05:37:08.374047 2026] [:error] [pid 22778:tid 22788] [client 20.215.208.34:52826] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "ac7hhPS-q9hkdFqUjq980gAAAMM"]
[Fri Apr 03 05:37:08.884445 2026] [:error] [pid 22778:tid 22802] [client 20.215.208.34:52852] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "ac7hhPS-q9hkdFqUjq981QAAANE"]
[Fri Apr 03 05:37:09.399725 2026] [:error] [pid 22671:tid 22696] [client 20.215.208.34:58164] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac7hhSRuUnMW7r8hvyZHRQAAAAU"]
[Fri Apr 03 05:37:09.920341 2026] [:error] [pid 22672:tid 22719] [client 20.215.208.34:51985] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac7hhazrgXkFSOK0fvqGBAAAAEA"]
[Fri Apr 03 05:37:10.430467 2026] [:error] [pid 22778:tid 22805] [client 20.215.208.34:53618] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac7hhvS-q9hkdFqUjq983AAAANQ"]
[Fri Apr 03 05:37:10.958853 2026] [:error] [pid 22671:tid 22712] [client 20.215.208.34:53542] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac7hhiRuUnMW7r8hvyZHSwAAABU"]
[Fri Apr 03 05:37:11.470040 2026] [:error] [pid 22672:tid 22722] [client 20.215.208.34:53539] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/himu.php"] [unique_id "ac7hh6zrgXkFSOK0fvqGCQAAAEM"]
[Fri Apr 03 05:37:11.982770 2026] [:error] [pid 58590:tid 58604] [client 20.215.208.34:52745] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/himu.php"] [unique_id "ac7hh0ze_aEPDM9xEE25wwAAAQw"]
[Fri Apr 03 05:37:12.494708 2026] [:error] [pid 58590:tid 58615] [client 20.215.208.34:52092] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/himu.php"] [unique_id "ac7hiEze_aEPDM9xEE25xQAAARc"]
[Fri Apr 03 05:37:13.006743 2026] [:error] [pid 58590:tid 58599] [client 20.215.208.34:51523] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/himu.php"] [unique_id "ac7hiUze_aEPDM9xEE25yAAAAQc"]
[Fri Apr 03 05:37:13.522320 2026] [:error] [pid 22671:tid 22697] [client 20.215.208.34:51534] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "ac7hiSRuUnMW7r8hvyZHVgAAAAY"]
[Fri Apr 03 05:37:14.036935 2026] [:error] [pid 58590:tid 58615] [client 20.215.208.34:53527] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "ac7hikze_aEPDM9xEE25zgAAARc"]
[Fri Apr 03 05:37:14.558492 2026] [:error] [pid 22671:tid 22693] [client 20.215.208.34:53549] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "ac7hiiRuUnMW7r8hvyZHWgAAAAI"]
[Fri Apr 03 05:37:15.071577 2026] [:error] [pid 22778:tid 22793] [client 20.215.208.34:52080] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "ac7hi_S-q9hkdFqUjq985QAAAMg"]
[Fri Apr 03 05:37:15.583149 2026] [:error] [pid 22778:tid 22791] [client 20.215.208.34:53513] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "ac7hi_S-q9hkdFqUjq986AAAAMY"]
[Fri Apr 03 05:37:16.094971 2026] [:error] [pid 58590:tid 58611] [client 20.215.208.34:53505] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "ac7hjEze_aEPDM9xEE251gAAARM"]
[Fri Apr 03 05:37:16.608142 2026] [:error] [pid 22778:tid 22792] [client 20.215.208.34:51508] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "ac7hjPS-q9hkdFqUjq987QAAAMc"]
[Fri Apr 03 05:37:17.119590 2026] [:error] [pid 58590:tid 58604] [client 20.215.208.34:52776] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "ac7hjUze_aEPDM9xEE252gAAAQw"]
[Fri Apr 03 05:37:17.631001 2026] [:error] [pid 22778:tid 22786] [client 20.215.208.34:53524] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "ac7hjfS-q9hkdFqUjq987wAAAME"]
[Fri Apr 03 05:37:18.143178 2026] [:error] [pid 22671:tid 22715] [client 20.215.208.34:52747] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "ac7hjiRuUnMW7r8hvyZHYgAAABg"]
[Fri Apr 03 05:37:18.655511 2026] [:error] [pid 22671:tid 22707] [client 20.215.208.34:52085] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "ac7hjiRuUnMW7r8hvyZHZQAAABA"]
[Fri Apr 03 05:37:19.168615 2026] [:error] [pid 58590:tid 58599] [client 20.215.208.34:52759] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "ac7hj0ze_aEPDM9xEE255AAAAQc"]
[Fri Apr 03 05:37:19.679063 2026] [:error] [pid 22778:tid 22794] [client 20.215.208.34:52747] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ac7hj_S-q9hkdFqUjq989QAAAMk"]
[Fri Apr 03 05:37:20.194115 2026] [:error] [pid 22778:tid 22798] [client 20.215.208.34:52783] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ac7hkPS-q9hkdFqUjq989wAAAM0"]
[Fri Apr 03 05:37:20.707356 2026] [:error] [pid 22672:tid 22724] [client 20.215.208.34:53600] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ac7hkKzrgXkFSOK0fvqGHQAAAEU"]
[Fri Apr 03 05:37:21.222623 2026] [:error] [pid 22778:tid 22792] [client 20.215.208.34:52050] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ac7hkfS-q9hkdFqUjq98-QAAAMc"]
[Fri Apr 03 05:37:21.737901 2026] [:error] [pid 58590:tid 58609] [client 20.215.208.34:53603] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "ac7hkUze_aEPDM9xEE257gAAARE"]
[Fri Apr 03 05:37:22.254987 2026] [:error] [pid 22673:tid 22763] [client 20.215.208.34:57405] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "ac7hku-GlVDWdWxxwJCFbAAAAJE"]
[Fri Apr 03 05:37:22.771155 2026] [:error] [pid 22671:tid 22696] [client 20.215.208.34:58199] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "ac7hkiRuUnMW7r8hvyZHagAAAAU"]
[Fri Apr 03 05:37:23.287973 2026] [:error] [pid 58590:tid 58607] [client 20.215.208.34:52035] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "ac7hk0ze_aEPDM9xEE258wAAAQ8"]
[Fri Apr 03 05:37:23.801514 2026] [:error] [pid 22778:tid 22794] [client 20.215.208.34:58120] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "ac7hk_S-q9hkdFqUjq98_wAAAMk"]
[Fri Apr 03 05:37:24.318619 2026] [:error] [pid 22673:tid 22767] [client 20.215.208.34:53629] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "ac7hlO-GlVDWdWxxwJCFcAAAAJU"]
[Fri Apr 03 05:37:24.836113 2026] [:error] [pid 58590:tid 58595] [client 20.215.208.34:52062] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "ac7hlEze_aEPDM9xEE259QAAAQM"]
[Fri Apr 03 05:37:25.346736 2026] [:error] [pid 22673:tid 22753] [client 20.215.208.34:58203] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "ac7hle-GlVDWdWxxwJCFdAAAAIc"]
[Fri Apr 03 05:37:25.867014 2026] [:error] [pid 58590:tid 58616] [client 20.215.208.34:53508] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "ac7hlUze_aEPDM9xEE259wAAARg"]
[Fri Apr 03 05:37:26.381344 2026] [:error] [pid 22673:tid 22760] [client 20.215.208.34:53564] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "ac7hlu-GlVDWdWxxwJCFeQAAAI4"]
[Fri Apr 03 05:37:26.891299 2026] [:error] [pid 22671:tid 22703] [client 20.215.208.34:51551] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "ac7hliRuUnMW7r8hvyZHlQAAAAw"]
[Fri Apr 03 05:37:27.402701 2026] [:error] [pid 22778:tid 22789] [client 20.215.208.34:52004] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "ac7hl_S-q9hkdFqUjq99CAAAAMQ"]
[Fri Apr 03 05:37:27.937864 2026] [:error] [pid 22671:tid 22691] [client 20.215.208.34:51493] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ac7hlyRuUnMW7r8hvyZHpgAAAAA"]
[Fri Apr 03 05:37:28.461059 2026] [:error] [pid 58590:tid 58611] [client 20.215.208.34:58134] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ac7hmEze_aEPDM9xEE26AgAAARM"]
[Fri Apr 03 05:37:28.972378 2026] [:error] [pid 22671:tid 22710] [client 20.215.208.34:58143] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ac7hmCRuUnMW7r8hvyZHsQAAABM"]
[Fri Apr 03 05:37:29.487491 2026] [:error] [pid 22778:tid 22786] [client 20.215.208.34:57368] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ac7hmfS-q9hkdFqUjq99DgAAAME"]
[Fri Apr 03 05:37:30.004759 2026] [:error] [pid 22778:tid 22800] [client 20.215.208.34:51525] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ac7hmvS-q9hkdFqUjq99EAAAAM8"]
[Fri Apr 03 05:37:30.515502 2026] [:error] [pid 58590:tid 58612] [client 20.215.208.34:53504] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ac7hmkze_aEPDM9xEE26DQAAARQ"]
[Fri Apr 03 05:37:31.025907 2026] [:error] [pid 58590:tid 58592] [client 20.215.208.34:53607] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ac7hm0ze_aEPDM9xEE26EQAAAQA"]
[Fri Apr 03 05:37:31.536473 2026] [:error] [pid 22778:tid 22788] [client 20.215.208.34:52781] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ac7hm_S-q9hkdFqUjq99FQAAAMM"]
[Fri Apr 03 05:37:32.049672 2026] [:error] [pid 22672:tid 22722] [client 20.215.208.34:57373] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "ac7hnKzrgXkFSOK0fvqGLQAAAEM"]
[Fri Apr 03 05:37:32.562854 2026] [:error] [pid 22672:tid 22732] [client 20.215.208.34:58128] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "ac7hnKzrgXkFSOK0fvqGLwAAAE0"]
[Fri Apr 03 05:37:33.077871 2026] [:error] [pid 22778:tid 22809] [client 20.215.208.34:57404] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "ac7hnfS-q9hkdFqUjq99FgAAANg"]
[Fri Apr 03 05:37:33.588686 2026] [:error] [pid 22778:tid 22806] [client 20.215.208.34:53581] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "ac7hnfS-q9hkdFqUjq99FwAAANU"]
[Fri Apr 03 05:37:34.103518 2026] [:error] [pid 58590:tid 58614] [client 20.215.208.34:52785] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ac7hnkze_aEPDM9xEE26GAAAARY"]
[Fri Apr 03 05:37:34.616697 2026] [:error] [pid 22673:tid 22757] [client 20.215.208.34:52818] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ac7hnu-GlVDWdWxxwJCFggAAAIs"]
[Fri Apr 03 05:37:35.135530 2026] [:error] [pid 58590:tid 58592] [client 20.215.208.34:52819] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ac7hn0ze_aEPDM9xEE26GgAAAQA"]
[Fri Apr 03 05:37:35.650060 2026] [:error] [pid 58590:tid 58604] [client 20.215.208.34:52805] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ac7hn0ze_aEPDM9xEE26HQAAAQw"]
[Fri Apr 03 05:37:36.168143 2026] [:error] [pid 58590:tid 58597] [client 20.215.208.34:58236] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lol.php"] [unique_id "ac7hoEze_aEPDM9xEE26IQAAAQU"]
[Fri Apr 03 05:37:36.691928 2026] [:error] [pid 58590:tid 58605] [client 20.215.208.34:51993] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lol.php"] [unique_id "ac7hoEze_aEPDM9xEE26JQAAAQ0"]
[Fri Apr 03 05:37:37.201370 2026] [:error] [pid 22673:tid 22749] [client 20.215.208.34:52810] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lol.php"] [unique_id "ac7hoe-GlVDWdWxxwJCFgwAAAIM"]
[Fri Apr 03 05:37:37.712182 2026] [:error] [pid 22778:tid 22804] [client 20.215.208.34:52829] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lol.php"] [unique_id "ac7hofS-q9hkdFqUjq99GQAAANM"]
[Fri Apr 03 05:37:38.222285 2026] [:error] [pid 22673:tid 22760] [client 20.215.208.34:52793] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/radio.php"] [unique_id "ac7hou-GlVDWdWxxwJCFhQAAAI4"]
[Fri Apr 03 05:37:38.733313 2026] [:error] [pid 22778:tid 22798] [client 20.215.208.34:52859] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/radio.php"] [unique_id "ac7hovS-q9hkdFqUjq99HgAAAM0"]
[Fri Apr 03 05:37:39.278307 2026] [:error] [pid 58590:tid 58606] [client 20.215.208.34:52091] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/radio.php"] [unique_id "ac7ho0ze_aEPDM9xEE26NAAAAQ4"]
[Fri Apr 03 05:37:39.789167 2026] [:error] [pid 58590:tid 58602] [client 20.215.208.34:53628] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/radio.php"] [unique_id "ac7ho0ze_aEPDM9xEE26OQAAAQo"]
[Fri Apr 03 05:39:33.573990 2026] [:error] [pid 22672:tid 22721] [client 20.215.208.34:63379] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Fri Apr 03 05:39:33.912302 2026] [:error] [pid 22672:tid 22736] [client 20.215.208.34:63379] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri Apr 03 05:39:34.177144 2026] [:error] [pid 22672:tid 22739] [client 20.215.208.34:63379] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Fri Apr 03 05:39:35.710665 2026] [:error] [pid 22672:tid 22739] [client 20.215.208.34:63379] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Fri Apr 03 05:39:35.972970 2026] [:error] [pid 22672:tid 22738] [client 20.215.208.34:63379] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Fri Apr 03 05:39:36.257323 2026] [:error] [pid 22672:tid 22725] [client 20.215.208.34:63379] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Fri Apr 03 05:39:36.869154 2026] [:error] [pid 22672:tid 22732] [client 20.215.208.34:63379] File does not exist: /usr/local/apache/htdocs/suspended-page/wolv2.php
[Fri Apr 03 05:39:37.128215 2026] [:error] [pid 22672:tid 22721] [client 20.215.208.34:63379] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Fri Apr 03 05:39:37.394629 2026] [:error] [pid 22672:tid 22726] [client 20.215.208.34:63379] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Fri Apr 03 05:39:37.676691 2026] [:error] [pid 22672:tid 22743] [client 20.215.208.34:63379] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac7iGazrgXkFSOK0fvqGuwAAAFg"]
[Fri Apr 03 05:39:38.632690 2026] [:error] [pid 58590:tid 58602] [client 20.215.208.34:65023] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac7iGkze_aEPDM9xEE28pgAAAQo"]
[Fri Apr 03 05:39:39.286640 2026] [:error] [pid 22672:tid 22728] [client 20.215.208.34:64968] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac7iG6zrgXkFSOK0fvqGvgAAAEk"]
[Fri Apr 03 05:39:39.811571 2026] [:error] [pid 22671:tid 22712] [client 20.215.208.34:64943] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac7iGyRuUnMW7r8hvyZIvgAAABU"]
[Fri Apr 03 05:39:40.342846 2026] [:error] [pid 22673:tid 22767] [client 20.215.208.34:64940] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "ac7iHO-GlVDWdWxxwJCGbAAAAJU"]
[Fri Apr 03 05:39:41.231913 2026] [:error] [pid 22672:tid 22728] [client 20.215.208.34:63384] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "ac7iHazrgXkFSOK0fvqGyAAAAEk"]
[Fri Apr 03 05:39:41.771780 2026] [:error] [pid 22672:tid 22721] [client 20.215.208.34:63454] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "ac7iHazrgXkFSOK0fvqGywAAAEI"]
[Fri Apr 03 05:39:42.294129 2026] [:error] [pid 22778:tid 22788] [client 20.215.208.34:63378] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "ac7iHvS-q9hkdFqUjq9-VAAAAMM"]
[Fri Apr 03 05:39:42.985562 2026] [:error] [pid 22672:tid 22743] [client 20.215.208.34:64995] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ac7iHqzrgXkFSOK0fvqGzwAAAFg"]
[Fri Apr 03 05:39:43.511631 2026] [:error] [pid 22673:tid 22760] [client 20.215.208.34:61910] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ac7iH--GlVDWdWxxwJCGcwAAAI4"]
[Fri Apr 03 05:39:44.062917 2026] [:error] [pid 58590:tid 58603] [client 20.215.208.34:64924] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ac7iIEze_aEPDM9xEE28sAAAAQs"]
[Fri Apr 03 05:39:44.633671 2026] [:error] [pid 58590:tid 58600] [client 20.215.208.34:61899] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ac7iIEze_aEPDM9xEE28swAAAQg"]
[Fri Apr 03 05:39:45.370221 2026] [:error] [pid 22672:tid 22734] [client 20.215.208.34:64901] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ac7iIazrgXkFSOK0fvqG0QAAAE8"]
[Fri Apr 03 05:39:45.898466 2026] [:error] [pid 58590:tid 58610] [client 20.215.208.34:64963] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ac7iIUze_aEPDM9xEE28uAAAARI"]
[Fri Apr 03 05:39:46.439497 2026] [:error] [pid 22778:tid 22790] [client 20.215.208.34:61845] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ac7iIvS-q9hkdFqUjq9-cQAAAMU"]
[Fri Apr 03 05:39:47.001861 2026] [:error] [pid 22672:tid 22732] [client 20.215.208.34:64997] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ac7iI6zrgXkFSOK0fvqG1AAAAE0"]
[Fri Apr 03 05:39:47.532669 2026] [:error] [pid 22778:tid 22806] [client 20.215.208.34:63364] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ac7iI_S-q9hkdFqUjq9-eAAAANU"]
[Fri Apr 03 05:39:48.142885 2026] [:error] [pid 22778:tid 22794] [client 20.215.208.34:63485] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ac7iJPS-q9hkdFqUjq9-fAAAAMk"]
[Fri Apr 03 05:39:48.755837 2026] [:error] [pid 22778:tid 22809] [client 20.215.208.34:63456] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ac7iJPS-q9hkdFqUjq9-fwAAANg"]
[Fri Apr 03 05:39:49.291509 2026] [:error] [pid 22778:tid 22805] [client 20.215.208.34:63423] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ac7iJfS-q9hkdFqUjq9-hAAAANQ"]
[Fri Apr 03 05:39:49.804218 2026] [:error] [pid 22778:tid 22806] [client 20.215.208.34:64917] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac7iJfS-q9hkdFqUjq9-igAAANU"]
[Fri Apr 03 05:39:50.351508 2026] [:error] [pid 58590:tid 58594] [client 20.215.208.34:61894] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac7iJkze_aEPDM9xEE28zwAAAQI"]
[Fri Apr 03 05:39:50.994346 2026] [:error] [pid 22673:tid 22748] [client 20.215.208.34:63434] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac7iJu-GlVDWdWxxwJCGeQAAAII"]
[Fri Apr 03 05:39:51.568856 2026] [:error] [pid 58590:tid 58608] [client 20.215.208.34:63410] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac7iJ0ze_aEPDM9xEE281gAAARA"]
[Fri Apr 03 05:39:52.175402 2026] [:error] [pid 22673:tid 22766] [client 20.215.208.34:61836] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ac7iKO-GlVDWdWxxwJCGfAAAAJQ"]
[Fri Apr 03 05:39:52.700641 2026] [:error] [pid 22673:tid 22763] [client 20.215.208.34:61840] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ac7iKO-GlVDWdWxxwJCGfgAAAJE"]
[Fri Apr 03 05:39:53.468796 2026] [:error] [pid 58590:tid 58604] [client 20.215.208.34:64983] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ac7iKUze_aEPDM9xEE284QAAAQw"]
[Fri Apr 03 05:39:54.303310 2026] [:error] [pid 58590:tid 58597] [client 20.215.208.34:64926] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ac7iKkze_aEPDM9xEE287gAAAQU"]
[Fri Apr 03 05:39:54.918999 2026] [:error] [pid 22672:tid 22723] [client 20.215.208.34:63428] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ac7iKqzrgXkFSOK0fvqG4gAAAEQ"]
[Fri Apr 03 05:39:55.502000 2026] [:error] [pid 58590:tid 58592] [client 20.215.208.34:61900] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ac7iK0ze_aEPDM9xEE29CAAAAQA"]
[Fri Apr 03 05:39:56.097083 2026] [:error] [pid 58590:tid 58613] [client 20.215.208.34:61841] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ac7iLEze_aEPDM9xEE29DAAAARU"]
[Fri Apr 03 05:39:56.748490 2026] [:error] [pid 22672:tid 22725] [client 20.215.208.34:63457] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ac7iLKzrgXkFSOK0fvqG5wAAAEY"]
[Fri Apr 03 05:39:57.345175 2026] [:error] [pid 22672:tid 22734] [client 20.215.208.34:63465] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "ac7iLazrgXkFSOK0fvqG6QAAAE8"]
[Fri Apr 03 05:39:58.016867 2026] [:error] [pid 22778:tid 22805] [client 20.215.208.34:63437] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "ac7iLvS-q9hkdFqUjq9-vQAAANQ"]
[Fri Apr 03 05:39:58.679794 2026] [:error] [pid 58590:tid 58609] [client 20.215.208.34:61908] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "ac7iLkze_aEPDM9xEE29EgAAARE"]
[Fri Apr 03 05:39:59.392815 2026] [:error] [pid 22778:tid 22792] [client 20.215.208.34:63389] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "ac7iL_S-q9hkdFqUjq9-wgAAAMc"]
[Fri Apr 03 05:40:00.105638 2026] [:error] [pid 22673:tid 22765] [client 20.215.208.34:61892] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "ac7iMO-GlVDWdWxxwJCGnAAAAJM"]
[Fri Apr 03 05:40:00.649913 2026] [:error] [pid 58590:tid 58600] [client 20.215.208.34:64993] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "ac7iMEze_aEPDM9xEE29FAAAAQg"]
[Fri Apr 03 05:40:01.200831 2026] [:error] [pid 58590:tid 58607] [client 20.215.208.34:61920] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "ac7iMUze_aEPDM9xEE29GgAAAQ8"]
[Fri Apr 03 05:40:01.727856 2026] [:error] [pid 22672:tid 22720] [client 20.215.208.34:64985] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "ac7iMazrgXkFSOK0fvqG-wAAAEE"]
[Fri Apr 03 05:40:02.253740 2026] [:error] [pid 58590:tid 58614] [client 20.215.208.34:64911] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "ac7iMkze_aEPDM9xEE29HgAAARY"]
[Fri Apr 03 05:40:02.794836 2026] [:error] [pid 58590:tid 58605] [client 20.215.208.34:64945] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "ac7iMkze_aEPDM9xEE29JgAAAQ0"]
[Fri Apr 03 05:40:03.321391 2026] [:error] [pid 22671:tid 22701] [client 20.215.208.34:64949] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "ac7iMyRuUnMW7r8hvyZI0AAAAAo"]
[Fri Apr 03 05:40:03.859721 2026] [:error] [pid 58590:tid 58592] [client 20.215.208.34:64951] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "ac7iM0ze_aEPDM9xEE29NQAAAQA"]
[Fri Apr 03 05:40:04.390975 2026] [:error] [pid 58590:tid 58603] [client 20.215.208.34:63455] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac7iNEze_aEPDM9xEE29PgAAAQs"]
[Fri Apr 03 05:40:04.922544 2026] [:error] [pid 22778:tid 22802] [client 20.215.208.34:64978] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac7iNPS-q9hkdFqUjq9-2QAAANE"]
[Fri Apr 03 05:40:05.450977 2026] [:error] [pid 22672:tid 22735] [client 20.215.208.34:64956] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac7iNazrgXkFSOK0fvqG_gAAAFA"]
[Fri Apr 03 05:40:05.995578 2026] [:error] [pid 22672:tid 22729] [client 20.215.208.34:63381] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac7iNazrgXkFSOK0fvqHAAAAAEo"]
[Fri Apr 03 05:40:06.518808 2026] [:error] [pid 22778:tid 22807] [client 20.215.208.34:63449] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ac7iNvS-q9hkdFqUjq9-4wAAANY"]
[Fri Apr 03 05:40:07.069652 2026] [:error] [pid 22672:tid 22719] [client 20.215.208.34:61897] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ac7iN6zrgXkFSOK0fvqHAwAAAEA"]
[Fri Apr 03 05:40:07.630304 2026] [:error] [pid 22671:tid 22712] [client 20.215.208.34:61833] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ac7iNyRuUnMW7r8hvyZI2gAAABU"]
[Fri Apr 03 05:40:08.200455 2026] [:error] [pid 22778:tid 22790] [client 20.215.208.34:64931] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ac7iOPS-q9hkdFqUjq9-6QAAAMU"]
[Fri Apr 03 05:40:08.736971 2026] [:error] [pid 22672:tid 22737] [client 20.215.208.34:63368] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ac7iOKzrgXkFSOK0fvqHBwAAAFI"]
[Fri Apr 03 05:40:09.354960 2026] [:error] [pid 22778:tid 22809] [client 20.215.208.34:63408] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ac7iOfS-q9hkdFqUjq9-7gAAANg"]
[Fri Apr 03 05:40:09.872775 2026] [:error] [pid 22673:tid 22767] [client 20.215.208.34:64913] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ac7iOe-GlVDWdWxxwJCGqQAAAJU"]
[Fri Apr 03 05:40:10.395489 2026] [:error] [pid 22671:tid 22700] [client 20.215.208.34:60624] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ac7iOiRuUnMW7r8hvyZI4QAAAAk"]
[Fri Apr 03 05:40:10.927528 2026] [:error] [pid 22778:tid 22800] [client 20.215.208.34:61888] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ac7iOvS-q9hkdFqUjq9-9QAAAM8"]
[Fri Apr 03 05:40:11.461676 2026] [:error] [pid 58590:tid 58603] [client 20.215.208.34:63459] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ac7iO0ze_aEPDM9xEE29ZAAAAQs"]
[Fri Apr 03 05:40:11.978558 2026] [:error] [pid 58590:tid 58599] [client 20.215.208.34:64944] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ac7iO0ze_aEPDM9xEE29aQAAAQc"]
[Fri Apr 03 05:40:12.493332 2026] [:error] [pid 22778:tid 22785] [client 20.215.208.34:63438] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ac7iPPS-q9hkdFqUjq9--AAAAMA"]
[Fri Apr 03 05:40:13.103899 2026] [:error] [pid 58590:tid 58595] [client 20.215.208.34:63481] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "ac7iPUze_aEPDM9xEE29cAAAAQM"]
[Fri Apr 03 05:40:13.936077 2026] [:error] [pid 58590:tid 58604] [client 20.215.208.34:63469] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "ac7iPUze_aEPDM9xEE29eAAAAQw"]
[Fri Apr 03 05:40:14.463781 2026] [:error] [pid 22778:tid 22802] [client 20.215.208.34:64899] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "ac7iPvS-q9hkdFqUjq9--QAAANE"]
[Fri Apr 03 05:40:15.000033 2026] [:error] [pid 22672:tid 22733] [client 20.215.208.34:63409] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "ac7iPqzrgXkFSOK0fvqHEAAAAE4"]
[Fri Apr 03 05:40:15.540939 2026] [:error] [pid 22671:tid 22708] [client 20.215.208.34:63370] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nope.php"] [unique_id "ac7iPyRuUnMW7r8hvyZI7AAAABE"]
[Fri Apr 03 05:40:16.066500 2026] [:error] [pid 22778:tid 22786] [client 20.215.208.34:60545] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nope.php"] [unique_id "ac7iQPS-q9hkdFqUjq9_AQAAAME"]
[Fri Apr 03 05:40:16.584154 2026] [:error] [pid 22673:tid 22766] [client 20.215.208.34:61926] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nope.php"] [unique_id "ac7iQO-GlVDWdWxxwJCGswAAAJQ"]
[Fri Apr 03 05:40:17.147282 2026] [:error] [pid 22778:tid 22806] [client 20.215.208.34:64972] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nope.php"] [unique_id "ac7iQfS-q9hkdFqUjq9_BAAAANU"]
[Fri Apr 03 05:40:17.678835 2026] [:error] [pid 22778:tid 22789] [client 20.215.208.34:63431] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js.php"] [unique_id "ac7iQfS-q9hkdFqUjq9_BwAAAMQ"]
[Fri Apr 03 05:40:18.212982 2026] [:error] [pid 22672:tid 22743] [client 20.215.208.34:63448] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js.php"] [unique_id "ac7iQqzrgXkFSOK0fvqHFAAAAFg"]
[Fri Apr 03 05:40:18.750412 2026] [:error] [pid 22778:tid 22798] [client 20.215.208.34:61928] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js.php"] [unique_id "ac7iQvS-q9hkdFqUjq9_DQAAAM0"]
[Fri Apr 03 05:40:19.271425 2026] [:error] [pid 22778:tid 22792] [client 20.215.208.34:65021] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js.php"] [unique_id "ac7iQ_S-q9hkdFqUjq9_EQAAAMc"]
[Fri Apr 03 05:40:19.798892 2026] [:error] [pid 22673:tid 22762] [client 20.215.208.34:64974] [client 20.215.208.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ac7iQ--GlVDWdWxxwJCGvQAAAJA"]
[Fri Apr 03 05:40:20.316597 2026] [:error] [pid 22778:tid 22787] [client 20.215.208.34:63388] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/num.php"] [unique_id "ac7iRPS-q9hkdFqUjq9_EwAAAMI"]
[Fri Apr 03 05:40:20.844213 2026] [:error] [pid 22673:tid 22751] [client 20.215.208.34:64919] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/num.php"] [unique_id "ac7iRO-GlVDWdWxxwJCGwAAAAIU"]
[Fri Apr 03 05:40:21.359059 2026] [:error] [pid 22671:tid 22715] [client 20.215.208.34:60620] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/num.php"] [unique_id "ac7iRSRuUnMW7r8hvyZI-AAAABg"]
[Fri Apr 03 05:40:22.118061 2026] [:error] [pid 22673:tid 22749] [client 20.215.208.34:64900] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mah.php"] [unique_id "ac7iRu-GlVDWdWxxwJCGwgAAAIM"]
[Fri Apr 03 05:40:22.631915 2026] [:error] [pid 58590:tid 58599] [client 20.215.208.34:63362] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mah.php"] [unique_id "ac7iRkze_aEPDM9xEE29lAAAAQc"]
[Fri Apr 03 05:40:23.159998 2026] [:error] [pid 22671:tid 22703] [client 20.215.208.34:63405] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mah.php"] [unique_id "ac7iRyRuUnMW7r8hvyZJAQAAAAw"]
[Fri Apr 03 05:40:23.681669 2026] [:error] [pid 22673:tid 22759] [client 20.215.208.34:61905] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mah.php"] [unique_id "ac7iR--GlVDWdWxxwJCGxwAAAI0"]
[Fri Apr 03 05:40:24.206911 2026] [:error] [pid 58590:tid 58601] [client 20.215.208.34:61906] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ac7iSEze_aEPDM9xEE29lwAAAQk"]
[Fri Apr 03 05:40:24.836843 2026] [:error] [pid 22778:tid 22793] [client 20.215.208.34:61831] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ac7iSPS-q9hkdFqUjq9_IQAAAMg"]
[Fri Apr 03 05:40:25.376259 2026] [:error] [pid 22671:tid 22705] [client 20.215.208.34:64953] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ac7iSSRuUnMW7r8hvyZJBAAAAA4"]
[Fri Apr 03 05:40:25.895382 2026] [:error] [pid 22673:tid 22760] [client 20.215.208.34:63393] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ac7iSe-GlVDWdWxxwJCGzQAAAI4"]
[Fri Apr 03 05:40:26.415830 2026] [:error] [pid 58590:tid 58615] [client 20.215.208.34:61838] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "ac7iSkze_aEPDM9xEE29mwAAARc"]
[Fri Apr 03 05:40:26.971166 2026] [:error] [pid 58590:tid 58597] [client 20.215.208.34:61930] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "ac7iSkze_aEPDM9xEE29nQAAAQU"]
[Fri Apr 03 05:40:27.497875 2026] [:error] [pid 58590:tid 58602] [client 20.215.208.34:64904] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "ac7iS0ze_aEPDM9xEE29ogAAAQo"]
[Fri Apr 03 05:40:28.037127 2026] [:error] [pid 58590:tid 58594] [client 20.215.208.34:61907] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "ac7iTEze_aEPDM9xEE29qgAAAQI"]
[Fri Apr 03 05:40:28.582514 2026] [:error] [pid 58590:tid 58602] [client 20.215.208.34:63367] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "ac7iTEze_aEPDM9xEE29sQAAAQo"]
[Fri Apr 03 05:40:29.100756 2026] [:error] [pid 58590:tid 58598] [client 20.215.208.34:64947] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "ac7iTUze_aEPDM9xEE29uAAAAQY"]
[Fri Apr 03 05:40:29.682526 2026] [:error] [pid 22672:tid 22737] [client 20.215.208.34:63466] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "ac7iTazrgXkFSOK0fvqHJgAAAFI"]
[Fri Apr 03 05:40:30.211490 2026] [:error] [pid 22673:tid 22761] [client 20.215.208.34:64937] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "ac7iTu-GlVDWdWxxwJCG0wAAAI8"]
[Fri Apr 03 05:40:30.734765 2026] [:error] [pid 22671:tid 22698] [client 20.215.208.34:60654] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "ac7iTiRuUnMW7r8hvyZJDAAAAAc"]
[Fri Apr 03 05:40:31.254890 2026] [:error] [pid 22671:tid 22707] [client 20.215.208.34:61889] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "ac7iTyRuUnMW7r8hvyZJDgAAABA"]
[Fri Apr 03 05:40:31.815284 2026] [:error] [pid 22673:tid 22751] [client 20.215.208.34:61828] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "ac7iT--GlVDWdWxxwJCG1wAAAIU"]
[Fri Apr 03 05:40:32.345987 2026] [:error] [pid 58590:tid 58607] [client 20.215.208.34:61864] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "ac7iUEze_aEPDM9xEE29wQAAAQ8"]
[Fri Apr 03 05:40:32.878445 2026] [:error] [pid 58590:tid 58604] [client 20.215.208.34:64991] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ac7iUEze_aEPDM9xEE29wgAAAQw"]
[Fri Apr 03 05:40:33.396122 2026] [:error] [pid 22778:tid 22794] [client 20.215.208.34:61870] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ac7iUfS-q9hkdFqUjq9_OAAAAMk"]
[Fri Apr 03 05:40:33.917633 2026] [:error] [pid 22672:tid 22741] [client 20.215.208.34:61879] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ac7iUazrgXkFSOK0fvqHLwAAAFY"]
[Fri Apr 03 05:40:34.439522 2026] [:error] [pid 22672:tid 22733] [client 20.215.208.34:63417] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ac7iUqzrgXkFSOK0fvqHMgAAAE4"]
[Fri Apr 03 05:40:34.968313 2026] [:error] [pid 22672:tid 22723] [client 20.215.208.34:60559] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ac7iUqzrgXkFSOK0fvqHNQAAAEQ"]
[Fri Apr 03 05:40:35.720992 2026] [:error] [pid 58590:tid 58601] [client 20.215.208.34:61923] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ac7iU0ze_aEPDM9xEE29yAAAAQk"]
[Fri Apr 03 05:40:36.246910 2026] [:error] [pid 22673:tid 22750] [client 20.215.208.34:65012] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ac7iVO-GlVDWdWxxwJCG4wAAAIQ"]
[Fri Apr 03 05:40:36.778751 2026] [:error] [pid 22778:tid 22791] [client 20.215.208.34:60665] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ac7iVPS-q9hkdFqUjq9_RAAAAMY"]
[Fri Apr 03 05:40:37.296814 2026] [:error] [pid 22778:tid 22804] [client 20.215.208.34:65016] [client 20.215.208.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "ac7iVfS-q9hkdFqUjq9_RwAAANM"]
[Fri Apr 03 05:40:37.824781 2026] [:error] [pid 58590:tid 58599] [client 20.215.208.34:63406] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php
[Fri Apr 03 05:40:38.082739 2026] [:error] [pid 58590:tid 58602] [client 20.215.208.34:63406] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Fri Apr 03 05:40:38.600714 2026] [:error] [pid 58590:tid 58600] [client 20.215.208.34:63406] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Fri Apr 03 05:40:38.858867 2026] [:error] [pid 58590:tid 58593] [client 20.215.208.34:63406] File does not exist: /usr/local/apache/htdocs/suspended-page/33.php
[Fri Apr 03 05:40:39.117494 2026] [:error] [pid 58590:tid 58595] [client 20.215.208.34:63406] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Apr 03 05:40:39.376016 2026] [:error] [pid 58590:tid 58598] [client 20.215.208.34:63406] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Fri Apr 03 05:40:39.892885 2026] [:error] [pid 58590:tid 58615] [client 20.215.208.34:63406] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-x7.php
[Fri Apr 03 05:40:40.151734 2026] [:error] [pid 58590:tid 58599] [client 20.215.208.34:63406] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Fri Apr 03 05:40:40.413369 2026] [:error] [pid 58590:tid 58596] [client 20.215.208.34:63406] File does not exist: /usr/local/apache/htdocs/suspended-page/v4.php
[Fri Apr 03 05:40:40.669531 2026] [:error] [pid 58590:tid 58606] [client 20.215.208.34:63406] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "ac7iWEze_aEPDM9xEE295wAAAQ4"]
[Fri Apr 03 05:40:41.317479 2026] [:error] [pid 22672:tid 22737] [client 20.215.208.34:61922] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "ac7iWazrgXkFSOK0fvqHOwAAAFI"]
[Fri Apr 03 05:40:41.828747 2026] [:error] [pid 22672:tid 22723] [client 20.215.208.34:63424] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "ac7iWazrgXkFSOK0fvqHPQAAAEQ"]
[Fri Apr 03 05:40:42.346971 2026] [:error] [pid 22673:tid 22753] [client 20.215.208.34:64998] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "ac7iWu-GlVDWdWxxwJCG8QAAAIc"]
[Fri Apr 03 05:40:42.879214 2026] [:error] [pid 58590:tid 58601] [client 20.215.208.34:63382] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ac7iWkze_aEPDM9xEE297AAAAQk"]
[Fri Apr 03 05:40:43.424963 2026] [:error] [pid 58590:tid 58613] [client 20.215.208.34:63427] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ac7iW0ze_aEPDM9xEE298AAAARU"]
[Fri Apr 03 05:40:43.941939 2026] [:error] [pid 58590:tid 58616] [client 20.215.208.34:61938] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ac7iW0ze_aEPDM9xEE299AAAARg"]
[Fri Apr 03 05:40:44.461724 2026] [:error] [pid 58590:tid 58603] [client 20.215.208.34:63486] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ac7iXEze_aEPDM9xEE29-wAAAQs"]
[Fri Apr 03 05:40:44.988007 2026] [:error] [pid 22672:tid 22723] [client 20.215.208.34:61844] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "ac7iXKzrgXkFSOK0fvqHTQAAAEQ"]
[Fri Apr 03 05:40:45.508334 2026] [:error] [pid 58590:tid 58609] [client 20.215.208.34:60584] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "ac7iXUze_aEPDM9xEE2-BAAAARE"]
[Fri Apr 03 05:40:46.044450 2026] [:error] [pid 22673:tid 22751] [client 20.215.208.34:61893] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "ac7iXu-GlVDWdWxxwJCG8wAAAIU"]
[Fri Apr 03 05:40:46.601893 2026] [:error] [pid 58590:tid 58610] [client 20.215.208.34:64959] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "ac7iXkze_aEPDM9xEE2-EgAAARI"]
[Fri Apr 03 05:40:47.112506 2026] [:error] [pid 22673:tid 22750] [client 20.215.208.34:63430] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "ac7iX--GlVDWdWxxwJCG-AAAAIQ"]
[Fri Apr 03 05:40:47.628908 2026] [:error] [pid 22673:tid 22748] [client 20.215.208.34:61898] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "ac7iX--GlVDWdWxxwJCG-gAAAII"]
[Fri Apr 03 05:40:48.187176 2026] [:error] [pid 22672:tid 22742] [client 20.215.208.34:61916] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "ac7iYKzrgXkFSOK0fvqHUwAAAFc"]
[Fri Apr 03 05:40:48.718131 2026] [:error] [pid 22672:tid 22720] [client 20.215.208.34:61935] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "ac7iYKzrgXkFSOK0fvqHVwAAAEE"]
[Fri Apr 03 05:40:49.245300 2026] [:error] [pid 22673:tid 22751] [client 20.215.208.34:61939] [client 20.215.208.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ac7iYe-GlVDWdWxxwJCG_wAAAIU"]
[Fri Apr 03 05:40:49.852619 2026] [:error] [pid 22673:tid 22752] [client 20.215.208.34:61937] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "ac7iYe-GlVDWdWxxwJCHBAAAAIY"]
[Fri Apr 03 05:40:50.368257 2026] [:error] [pid 22673:tid 22761] [client 20.215.208.34:61948] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "ac7iYu-GlVDWdWxxwJCHBQAAAI8"]
[Fri Apr 03 05:40:50.903969 2026] [:error] [pid 22673:tid 22753] [client 20.215.208.34:61925] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "ac7iYu-GlVDWdWxxwJCHBwAAAIc"]
[Fri Apr 03 05:40:51.593401 2026] [:error] [pid 22671:tid 22704] [client 20.215.208.34:61921] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ext.php"] [unique_id "ac7iYyRuUnMW7r8hvyZJIQAAAA0"]
[Fri Apr 03 05:40:52.122688 2026] [:error] [pid 58590:tid 58601] [client 20.215.208.34:63483] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ext.php"] [unique_id "ac7iZEze_aEPDM9xEE2-JQAAAQk"]
[Fri Apr 03 05:40:52.639915 2026] [:error] [pid 22778:tid 22792] [client 20.215.208.34:60548] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ext.php"] [unique_id "ac7iZPS-q9hkdFqUjq9_XAAAAMc"]
[Fri Apr 03 05:40:53.163728 2026] [:error] [pid 22671:tid 22699] [client 20.215.208.34:60564] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ext.php"] [unique_id "ac7iZSRuUnMW7r8hvyZJJAAAAAg"]
[Fri Apr 03 05:40:53.683321 2026] [:error] [pid 22672:tid 22724] [client 20.215.208.34:64980] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about3.php"] [unique_id "ac7iZazrgXkFSOK0fvqHYwAAAEU"]
[Fri Apr 03 05:40:54.254236 2026] [:error] [pid 22673:tid 22753] [client 20.215.208.34:61943] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about3.php"] [unique_id "ac7iZu-GlVDWdWxxwJCHFwAAAIc"]
[Fri Apr 03 05:40:54.799548 2026] [:error] [pid 22671:tid 22695] [client 20.215.208.34:61917] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about3.php"] [unique_id "ac7iZiRuUnMW7r8hvyZJKgAAAAQ"]
[Fri Apr 03 05:40:55.318300 2026] [:error] [pid 22673:tid 22760] [client 20.215.208.34:63470] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about3.php"] [unique_id "ac7iZ--GlVDWdWxxwJCHHwAAAI4"]
[Fri Apr 03 05:40:55.842791 2026] [:error] [pid 22673:tid 22756] [client 20.215.208.34:64896] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ac7iZ--GlVDWdWxxwJCHJQAAAIo"]
[Fri Apr 03 05:40:56.363413 2026] [:error] [pid 22673:tid 22764] [client 20.215.208.34:61835] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ac7iaO-GlVDWdWxxwJCHKQAAAJI"]
[Fri Apr 03 05:40:56.884439 2026] [:error] [pid 22672:tid 22727] [client 20.215.208.34:63470] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ac7iaKzrgXkFSOK0fvqHagAAAEg"]
[Fri Apr 03 05:40:57.408766 2026] [:error] [pid 58590:tid 58604] [client 20.215.208.34:61832] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ac7iaUze_aEPDM9xEE2-NwAAAQw"]
[Fri Apr 03 05:40:57.933962 2026] [:error] [pid 22671:tid 22714] [client 20.215.208.34:63446] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "ac7iaSRuUnMW7r8hvyZJLwAAABc"]
[Fri Apr 03 05:40:58.454516 2026] [:error] [pid 22673:tid 22770] [client 20.215.208.34:60592] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "ac7iau-GlVDWdWxxwJCHNwAAAJg"]
[Fri Apr 03 05:40:58.971574 2026] [:error] [pid 22673:tid 22752] [client 20.215.208.34:63380] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "ac7iau-GlVDWdWxxwJCHOwAAAIY"]
[Fri Apr 03 05:40:59.499283 2026] [:error] [pid 22672:tid 22740] [client 20.215.208.34:61944] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "ac7ia6zrgXkFSOK0fvqHcgAAAFU"]
[Fri Apr 03 05:41:00.215509 2026] [:error] [pid 58590:tid 58595] [client 20.215.208.34:63461] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ac7ibEze_aEPDM9xEE2-RQAAAQM"]
[Fri Apr 03 05:41:00.732681 2026] [:error] [pid 22672:tid 22739] [client 20.215.208.34:65019] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ac7ibKzrgXkFSOK0fvqHdQAAAFQ"]
[Fri Apr 03 05:41:01.393712 2026] [:error] [pid 58590:tid 58613] [client 20.215.208.34:64973] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ac7ibUze_aEPDM9xEE2-TAAAARU"]
[Fri Apr 03 05:41:01.912538 2026] [:error] [pid 22672:tid 22721] [client 20.215.208.34:64999] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ac7ibazrgXkFSOK0fvqHegAAAEI"]
[Fri Apr 03 05:41:02.440607 2026] [:error] [pid 22778:tid 22802] [client 20.215.208.34:61839] [client 20.215.208.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "ac7ibvS-q9hkdFqUjq9_bAAAANE"]
[Fri Apr 03 05:41:03.002742 2026] [:error] [pid 22672:tid 22740] [client 20.215.208.34:60643] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "ac7ib6zrgXkFSOK0fvqHfAAAAFU"]
[Fri Apr 03 05:41:03.626849 2026] [:error] [pid 58590:tid 58611] [client 20.215.208.34:63429] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "ac7ib0ze_aEPDM9xEE2-UgAAARM"]
[Fri Apr 03 05:41:04.152784 2026] [:error] [pid 58590:tid 58603] [client 20.215.208.34:61936] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "ac7icEze_aEPDM9xEE2-VgAAAQs"]
[Fri Apr 03 05:41:04.675315 2026] [:error] [pid 58590:tid 58616] [client 20.215.208.34:61843] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "ac7icEze_aEPDM9xEE2-WgAAARg"]
[Fri Apr 03 05:41:05.212841 2026] [:error] [pid 22672:tid 22732] [client 20.215.208.34:59999] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ac7icazrgXkFSOK0fvqHgwAAAE0"]
[Fri Apr 03 05:41:05.731210 2026] [:error] [pid 22673:tid 22753] [client 20.215.208.34:61942] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ac7ice-GlVDWdWxxwJCHYgAAAIc"]
[Fri Apr 03 05:41:06.270329 2026] [:error] [pid 58590:tid 58613] [client 20.215.208.34:63476] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ac7ickze_aEPDM9xEE2-ZQAAARU"]
[Fri Apr 03 05:41:06.850106 2026] [:error] [pid 22671:tid 22700] [client 20.215.208.34:59943] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ac7iciRuUnMW7r8hvyZJPQAAAAk"]
[Fri Apr 03 05:41:07.449987 2026] [:error] [pid 58590:tid 58594] [client 20.215.208.34:63425] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ac7ic0ze_aEPDM9xEE2-aAAAAQI"]
[Fri Apr 03 05:41:08.070848 2026] [:error] [pid 58590:tid 58592] [client 20.215.208.34:63395] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ac7idEze_aEPDM9xEE2-awAAAQA"]
[Fri Apr 03 05:41:08.621293 2026] [:error] [pid 58590:tid 58593] [client 20.215.208.34:60608] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ac7idEze_aEPDM9xEE2-cgAAAQE"]
[Fri Apr 03 05:41:09.144158 2026] [:error] [pid 58590:tid 58604] [client 20.215.208.34:63392] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ac7idUze_aEPDM9xEE2-dQAAAQw"]
[Fri Apr 03 05:41:09.661759 2026] [:error] [pid 58590:tid 58601] [client 20.215.208.34:59908] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac7idUze_aEPDM9xEE2-eAAAAQk"]
[Fri Apr 03 05:41:10.189569 2026] [:error] [pid 22778:tid 22802] [client 20.215.208.34:64996] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac7idvS-q9hkdFqUjq9_egAAANE"]
[Fri Apr 03 05:41:10.745007 2026] [:error] [pid 22672:tid 22739] [client 20.215.208.34:64932] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac7idqzrgXkFSOK0fvqHhwAAAFQ"]
[Fri Apr 03 05:41:11.278032 2026] [:error] [pid 22672:tid 22725] [client 20.215.208.34:63371] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac7id6zrgXkFSOK0fvqHiAAAAEY"]
[Fri Apr 03 05:41:11.795161 2026] [:error] [pid 58590:tid 58604] [client 20.215.208.34:63432] [client 20.215.208.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "ac7id0ze_aEPDM9xEE2-gwAAAQw"]
[Fri Apr 03 05:41:12.372163 2026] [:error] [pid 22671:tid 22707] [client 20.215.208.34:63414] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ac7ieCRuUnMW7r8hvyZJRQAAABA"]
[Fri Apr 03 05:41:12.882653 2026] [:error] [pid 58590:tid 58600] [client 20.215.208.34:63376] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ac7ieEze_aEPDM9xEE2-iQAAAQg"]
[Fri Apr 03 05:41:13.408601 2026] [:error] [pid 22672:tid 22733] [client 20.215.208.34:65003] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ac7ieazrgXkFSOK0fvqHjgAAAE4"]
[Fri Apr 03 05:41:13.937232 2026] [:error] [pid 58590:tid 58611] [client 20.215.208.34:61915] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ac7ieUze_aEPDM9xEE2-kAAAARM"]
[Fri Apr 03 05:41:14.454887 2026] [:error] [pid 58590:tid 58595] [client 20.215.208.34:65001] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "ac7iekze_aEPDM9xEE2-lQAAAQM"]
[Fri Apr 03 05:41:14.995216 2026] [:error] [pid 22672:tid 22738] [client 20.215.208.34:60001] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "ac7ieqzrgXkFSOK0fvqHkwAAAFM"]
[Fri Apr 03 05:41:15.516759 2026] [:error] [pid 58590:tid 58602] [client 20.215.208.34:61857] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "ac7ie0ze_aEPDM9xEE2-mQAAAQo"]
[Fri Apr 03 05:41:16.048915 2026] [:error] [pid 22673:tid 22747] [client 20.215.208.34:61951] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "ac7ifO-GlVDWdWxxwJCHnQAAAIE"]
[Fri Apr 03 05:41:16.647561 2026] [:error] [pid 22778:tid 22794] [client 20.215.208.34:63402] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/filemanager.php"] [unique_id "ac7ifPS-q9hkdFqUjq9_hAAAAMk"]
[Fri Apr 03 05:41:17.162074 2026] [:error] [pid 22673:tid 22758] [client 20.215.208.34:63391] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/filemanager.php"] [unique_id "ac7ife-GlVDWdWxxwJCHoQAAAIw"]
[Fri Apr 03 05:41:17.677465 2026] [:error] [pid 58590:tid 58607] [client 20.215.208.34:63475] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/filemanager.php"] [unique_id "ac7ifUze_aEPDM9xEE2-pQAAAQ8"]
[Fri Apr 03 05:41:18.192990 2026] [:error] [pid 22673:tid 22765] [client 20.215.208.34:60668] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/filemanager.php"] [unique_id "ac7ifu-GlVDWdWxxwJCHpAAAAJM"]
[Fri Apr 03 05:41:18.729355 2026] [:error] [pid 58590:tid 58611] [client 20.215.208.34:61890] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac7ifkze_aEPDM9xEE2-rAAAARM"]
[Fri Apr 03 05:41:19.357769 2026] [:error] [pid 58590:tid 58608] [client 20.215.208.34:63419] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac7if0ze_aEPDM9xEE2-sQAAARA"]
[Fri Apr 03 05:41:19.877331 2026] [:error] [pid 22673:tid 22766] [client 20.215.208.34:61826] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac7if--GlVDWdWxxwJCHpQAAAJQ"]
[Fri Apr 03 05:41:20.404842 2026] [:error] [pid 58590:tid 58595] [client 20.215.208.34:64925] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac7igEze_aEPDM9xEE2-twAAAQM"]
[Fri Apr 03 05:41:20.929858 2026] [:error] [pid 22671:tid 22694] [client 20.215.208.34:64914] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dlu.php"] [unique_id "ac7igCRuUnMW7r8hvyZJSAAAAAM"]
[Fri Apr 03 05:41:21.531887 2026] [:error] [pid 22671:tid 22702] [client 20.215.208.34:61878] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dlu.php"] [unique_id "ac7igSRuUnMW7r8hvyZJSgAAAAs"]
[Fri Apr 03 05:41:22.086802 2026] [:error] [pid 22671:tid 22715] [client 20.215.208.34:63440] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dlu.php"] [unique_id "ac7igiRuUnMW7r8hvyZJTgAAABg"]
[Fri Apr 03 05:41:22.649775 2026] [:error] [pid 22671:tid 22701] [client 20.215.208.34:61887] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dlu.php"] [unique_id "ac7igiRuUnMW7r8hvyZJVgAAAAo"]
[Fri Apr 03 05:41:23.167554 2026] [:error] [pid 22673:tid 22755] [client 20.215.208.34:61885] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ac7ig--GlVDWdWxxwJCHpgAAAIk"]
[Fri Apr 03 05:41:23.815652 2026] [:error] [pid 58590:tid 58601] [client 20.215.208.34:64912] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ac7ig0ze_aEPDM9xEE2-ywAAAQk"]
[Fri Apr 03 05:41:24.332598 2026] [:error] [pid 58590:tid 58595] [client 20.215.208.34:60604] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ac7ihEze_aEPDM9xEE2-zgAAAQM"]
[Fri Apr 03 05:41:24.998532 2026] [:error] [pid 58590:tid 58608] [client 20.215.208.34:61947] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ac7ihEze_aEPDM9xEE2-1QAAARA"]
[Fri Apr 03 05:41:25.529792 2026] [:error] [pid 58590:tid 58593] [client 20.215.208.34:63426] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "ac7ihUze_aEPDM9xEE2-1wAAAQE"]
[Fri Apr 03 05:41:26.066190 2026] [:error] [pid 22673:tid 22748] [client 20.215.208.34:63467] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "ac7ihu-GlVDWdWxxwJCHrgAAAII"]
[Fri Apr 03 05:41:26.653815 2026] [:error] [pid 22672:tid 22727] [client 20.215.208.34:60645] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "ac7ihqzrgXkFSOK0fvqHlgAAAEg"]
[Fri Apr 03 05:41:27.210732 2026] [:error] [pid 22673:tid 22764] [client 20.215.208.34:61847] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "ac7ih--GlVDWdWxxwJCHtwAAAJI"]
[Fri Apr 03 05:41:27.738921 2026] [:error] [pid 22778:tid 22788] [client 20.215.208.34:59470] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ac7ih_S-q9hkdFqUjq9_ogAAAMM"]
[Fri Apr 03 05:41:28.257094 2026] [:error] [pid 22673:tid 22761] [client 20.215.208.34:61824] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ac7iiO-GlVDWdWxxwJCHuwAAAI8"]
[Fri Apr 03 05:41:28.778375 2026] [:error] [pid 58590:tid 58606] [client 20.215.208.34:63383] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ac7iiEze_aEPDM9xEE2-4wAAAQ4"]
[Fri Apr 03 05:41:29.302731 2026] [:error] [pid 58590:tid 58605] [client 20.215.208.34:63375] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ac7iiUze_aEPDM9xEE2-5wAAAQ0"]
[Fri Apr 03 05:41:29.831354 2026] [:error] [pid 58590:tid 58600] [client 20.215.208.34:61934] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "ac7iiUze_aEPDM9xEE2-7QAAAQg"]
[Fri Apr 03 05:41:30.384350 2026] [:error] [pid 58590:tid 58607] [client 20.215.208.34:59514] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "ac7iikze_aEPDM9xEE2-8gAAAQ8"]
[Fri Apr 03 05:41:31.030176 2026] [:error] [pid 22673:tid 22756] [client 20.215.208.34:64960] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "ac7ii--GlVDWdWxxwJCHvwAAAIo"]
[Fri Apr 03 05:41:31.617375 2026] [:error] [pid 22778:tid 22787] [client 20.215.208.34:60017] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "ac7ii_S-q9hkdFqUjq9_qAAAAMI"]
[Fri Apr 03 05:41:32.198557 2026] [:error] [pid 22778:tid 22809] [client 20.215.208.34:64976] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ac7ijPS-q9hkdFqUjq9_qgAAANg"]
[Fri Apr 03 05:41:32.751003 2026] [:error] [pid 22778:tid 22793] [client 20.215.208.34:60653] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ac7ijPS-q9hkdFqUjq9_qwAAAMg"]
[Fri Apr 03 05:41:33.353126 2026] [:error] [pid 22778:tid 22800] [client 20.215.208.34:63418] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ac7ijfS-q9hkdFqUjq9_rQAAAM8"]
[Fri Apr 03 05:41:33.870888 2026] [:error] [pid 58590:tid 58614] [client 20.215.208.34:60646] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ac7ijUze_aEPDM9xEE2_CAAAARY"]
[Fri Apr 03 05:41:34.398421 2026] [:error] [pid 58590:tid 58594] [client 20.215.208.34:60621] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "ac7ijkze_aEPDM9xEE2_CwAAAQI"]
[Fri Apr 03 05:41:34.943873 2026] [:error] [pid 22673:tid 22752] [client 20.215.208.34:63421] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "ac7iju-GlVDWdWxxwJCHxwAAAIY"]
[Fri Apr 03 05:41:35.549490 2026] [:error] [pid 22673:tid 22759] [client 20.215.208.34:61940] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "ac7ij--GlVDWdWxxwJCHyAAAAI0"]
[Fri Apr 03 05:41:36.069773 2026] [:error] [pid 22778:tid 22802] [client 20.215.208.34:63487] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "ac7ikPS-q9hkdFqUjq9_twAAANE"]
[Fri Apr 03 05:41:36.736941 2026] [:error] [pid 58590:tid 58599] [client 20.215.208.34:65022] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "ac7ikEze_aEPDM9xEE2_FgAAAQc"]
[Fri Apr 03 05:41:37.371250 2026] [:error] [pid 58590:tid 58596] [client 20.215.208.34:64905] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "ac7ikUze_aEPDM9xEE2_GgAAAQQ"]
[Fri Apr 03 05:41:37.907683 2026] [:error] [pid 58590:tid 58606] [client 20.215.208.34:63401] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "ac7ikUze_aEPDM9xEE2_HQAAAQ4"]
[Fri Apr 03 05:41:38.424875 2026] [:error] [pid 58590:tid 58603] [client 20.215.208.34:65011] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "ac7ikkze_aEPDM9xEE2_IgAAAQs"]
[Fri Apr 03 05:41:38.973291 2026] [:error] [pid 22673:tid 22747] [client 20.215.208.34:65004] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ac7iku-GlVDWdWxxwJCHzgAAAIE"]
[Fri Apr 03 05:41:39.494742 2026] [:error] [pid 58590:tid 58614] [client 20.215.208.34:61932] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ac7ik0ze_aEPDM9xEE2_KAAAARY"]
[Fri Apr 03 05:41:40.023952 2026] [:error] [pid 22778:tid 22799] [client 20.215.208.34:59997] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Apr 03 05:41:40.282310 2026] [:error] [pid 22778:tid 22804] [client 20.215.208.34:59997] File does not exist: /usr/local/apache/htdocs/suspended-page/v.php
[Fri Apr 03 05:41:40.541708 2026] [:error] [pid 22778:tid 22796] [client 20.215.208.34:59997] File does not exist: /usr/local/apache/htdocs/suspended-page/te.php
[Fri Apr 03 05:41:40.802546 2026] [:error] [pid 22778:tid 22802] [client 20.215.208.34:59997] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Apr 03 05:41:41.061057 2026] [:error] [pid 22778:tid 22808] [client 20.215.208.34:59997] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Fri Apr 03 05:41:41.319510 2026] [:error] [pid 22778:tid 22800] [client 20.215.208.34:59997] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Fri Apr 03 05:41:41.577557 2026] [:error] [pid 22778:tid 22804] [client 20.215.208.34:59997] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Fri Apr 03 05:41:41.835890 2026] [:error] [pid 22778:tid 22789] [client 20.215.208.34:59997] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Apr 03 05:41:42.380078 2026] [:error] [pid 22778:tid 22787] [client 20.215.208.34:59997] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Apr 03 05:41:42.656588 2026] [:error] [pid 22778:tid 22793] [client 20.215.208.34:59997] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Fri Apr 03 05:41:42.911864 2026] [:error] [pid 22778:tid 22795] [client 20.215.208.34:59997] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v2.php"] [unique_id "ac7ilvS-q9hkdFqUjq9_2AAAAMo"]
[Fri Apr 03 05:41:43.441186 2026] [:error] [pid 22778:tid 22796] [client 20.215.208.34:59967] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v2.php"] [unique_id "ac7il_S-q9hkdFqUjq9_2wAAAMs"]
[Fri Apr 03 05:41:43.967428 2026] [:error] [pid 22673:tid 22753] [client 20.215.208.34:63360] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v2.php"] [unique_id "ac7il--GlVDWdWxxwJCH4QAAAIc"]
[Fri Apr 03 05:41:44.480309 2026] [:error] [pid 22778:tid 22793] [client 20.215.208.34:61863] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v2.php"] [unique_id "ac7imPS-q9hkdFqUjq9_4wAAAMg"]
[Fri Apr 03 05:41:44.992680 2026] [:error] [pid 22672:tid 22721] [client 20.215.208.34:65013] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac7imKzrgXkFSOK0fvqHpgAAAEI"]
[Fri Apr 03 05:41:45.518111 2026] [:error] [pid 58590:tid 58610] [client 20.215.208.34:61914] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac7imUze_aEPDM9xEE2_MAAAARI"]
[Fri Apr 03 05:41:46.051966 2026] [:error] [pid 58590:tid 58613] [client 20.215.208.34:64950] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac7imkze_aEPDM9xEE2_MgAAARU"]
[Fri Apr 03 05:41:46.912349 2026] [:error] [pid 58590:tid 58611] [client 20.215.208.34:60666] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac7imkze_aEPDM9xEE2_OQAAARM"]
[Fri Apr 03 05:41:47.465708 2026] [:error] [pid 22778:tid 22789] [client 20.215.208.34:61840] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shoha.php"] [unique_id "ac7im_S-q9hkdFqUjq9_6QAAAMQ"]
[Fri Apr 03 05:41:48.211229 2026] [:error] [pid 22672:tid 22737] [client 20.215.208.34:59981] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shoha.php"] [unique_id "ac7inKzrgXkFSOK0fvqHrgAAAFI"]
[Fri Apr 03 05:41:48.896446 2026] [:error] [pid 58590:tid 58610] [client 20.215.208.34:60632] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shoha.php"] [unique_id "ac7inEze_aEPDM9xEE2_PgAAARI"]
[Fri Apr 03 05:41:49.494636 2026] [:error] [pid 58590:tid 58616] [client 20.215.208.34:60593] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shoha.php"] [unique_id "ac7inUze_aEPDM9xEE2_QwAAARg"]
[Fri Apr 03 05:41:50.060152 2026] [:error] [pid 22671:tid 22713] [client 20.215.208.34:59918] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "ac7iniRuUnMW7r8hvyZJfQAAABY"]
[Fri Apr 03 05:41:50.596594 2026] [:error] [pid 58590:tid 58612] [client 20.215.208.34:59985] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "ac7inkze_aEPDM9xEE2_SgAAARQ"]
[Fri Apr 03 05:41:51.254008 2026] [:error] [pid 22672:tid 22738] [client 20.215.208.34:65010] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "ac7in6zrgXkFSOK0fvqHuAAAAFM"]
[Fri Apr 03 05:41:51.814420 2026] [:error] [pid 22671:tid 22697] [client 20.215.208.34:63369] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "ac7inyRuUnMW7r8hvyZJgwAAAAY"]
[Fri Apr 03 05:41:52.576224 2026] [:error] [pid 22673:tid 22767] [client 20.215.208.34:64916] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ac7ioO-GlVDWdWxxwJCH_wAAAJU"]
[Fri Apr 03 05:41:53.319330 2026] [:error] [pid 58590:tid 58598] [client 20.215.208.34:60633] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ac7ioUze_aEPDM9xEE2_SwAAAQY"]
[Fri Apr 03 05:41:54.020468 2026] [:error] [pid 22778:tid 22802] [client 20.215.208.34:63453] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ac7iovS-q9hkdFqUjq9_7wAAANE"]
[Fri Apr 03 05:41:54.577983 2026] [:error] [pid 58590:tid 58596] [client 20.215.208.34:61895] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ac7iokze_aEPDM9xEE2_TwAAAQQ"]
[Fri Apr 03 05:41:55.250861 2026] [:error] [pid 22673:tid 22748] [client 20.215.208.34:64952] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac7io--GlVDWdWxxwJCIBQAAAII"]
[Fri Apr 03 05:41:55.880744 2026] [:error] [pid 58590:tid 58608] [client 20.215.208.34:61945] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac7io0ze_aEPDM9xEE2_UwAAARA"]
[Fri Apr 03 05:41:56.752982 2026] [:error] [pid 58590:tid 58598] [client 20.215.208.34:63484] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac7ipEze_aEPDM9xEE2_VAAAAQY"]
[Fri Apr 03 05:41:57.753059 2026] [:error] [pid 22672:tid 22737] [client 20.215.208.34:63413] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac7ipazrgXkFSOK0fvqHxgAAAFI"]
[Fri Apr 03 05:41:58.474674 2026] [:error] [pid 22778:tid 22807] [client 20.215.208.34:61903] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ac7ipvS-q9hkdFqUjq9_8gAAANY"]
[Fri Apr 03 05:41:59.219386 2026] [:error] [pid 22672:tid 22721] [client 20.215.208.34:63452] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ac7ip6zrgXkFSOK0fvqHzAAAAEI"]
[Fri Apr 03 05:41:59.952979 2026] [:error] [pid 58590:tid 58607] [client 20.215.208.34:60656] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ac7ip0ze_aEPDM9xEE2_WQAAAQ8"]
[Fri Apr 03 05:42:01.470997 2026] [:error] [pid 22672:tid 22724] [client 20.215.208.34:60577] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ac7iqazrgXkFSOK0fvqHzgAAAEU"]
[Fri Apr 03 05:42:02.175614 2026] [:error] [pid 22673:tid 22765] [client 20.215.208.34:60007] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ac7iqu-GlVDWdWxxwJCIHQAAAJM"]
[Fri Apr 03 05:42:02.744088 2026] [:error] [pid 22672:tid 22741] [client 20.215.208.34:64906] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ac7iqqzrgXkFSOK0fvqH0QAAAFY"]
[Fri Apr 03 05:42:03.373918 2026] [:error] [pid 58590:tid 58616] [client 20.215.208.34:61881] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ac7iq0ze_aEPDM9xEE2_bwAAARg"]
[Fri Apr 03 05:42:04.009392 2026] [:error] [pid 22672:tid 22742] [client 20.215.208.34:61901] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ac7irKzrgXkFSOK0fvqH1QAAAFc"]
[Fri Apr 03 05:42:04.950817 2026] [:error] [pid 58590:tid 58611] [client 20.215.208.34:63411] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ac7irEze_aEPDM9xEE2_dgAAARM"]
[Fri Apr 03 05:42:05.510193 2026] [:error] [pid 58590:tid 58607] [client 20.215.208.34:63451] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ac7irUze_aEPDM9xEE2_egAAAQ8"]
[Fri Apr 03 05:42:06.138939 2026] [:error] [pid 22671:tid 22709] [client 20.215.208.34:63421] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ac7iriRuUnMW7r8hvyZJiwAAABI"]
[Fri Apr 03 05:42:06.712227 2026] [:error] [pid 22671:tid 22691] [client 20.215.208.34:61825] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ac7iriRuUnMW7r8hvyZJjgAAAAA"]
[Fri Apr 03 05:42:07.308624 2026] [:error] [pid 22672:tid 22725] [client 20.215.208.34:61891] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ac7ir6zrgXkFSOK0fvqH2gAAAEY"]
[Fri Apr 03 05:42:07.921367 2026] [:error] [pid 22672:tid 22741] [client 20.215.208.34:63458] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ac7ir6zrgXkFSOK0fvqH3AAAAFY"]
[Fri Apr 03 05:42:08.633318 2026] [:error] [pid 22778:tid 22798] [client 20.215.208.34:59969] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ac7isPS-q9hkdFqUjq-AAwAAAM0"]
[Fri Apr 03 05:42:09.169647 2026] [:error] [pid 22671:tid 22710] [client 20.215.208.34:60006] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ac7isSRuUnMW7r8hvyZJlwAAABM"]
[Fri Apr 03 05:42:09.681338 2026] [:error] [pid 22673:tid 22767] [client 20.215.208.34:59942] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac7ise-GlVDWdWxxwJCIPwAAAJU"]
[Fri Apr 03 05:42:10.212373 2026] [:error] [pid 58590:tid 58603] [client 20.215.208.34:63420] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac7iskze_aEPDM9xEE2_hAAAAQs"]
[Fri Apr 03 05:42:10.838292 2026] [:error] [pid 58590:tid 58595] [client 20.215.208.34:63464] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac7iskze_aEPDM9xEE2_iAAAAQM"]
[Fri Apr 03 05:42:11.493919 2026] [:error] [pid 58590:tid 58604] [client 20.215.208.34:64954] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac7is0ze_aEPDM9xEE2_jAAAAQw"]
[Fri Apr 03 05:42:12.109445 2026] [:error] [pid 22778:tid 22793] [client 20.215.208.34:64942] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ac7itPS-q9hkdFqUjq-ADAAAAMg"]
[Fri Apr 03 05:42:12.631385 2026] [:error] [pid 22671:tid 22697] [client 20.215.208.34:64935] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ac7itCRuUnMW7r8hvyZJmwAAAAY"]
[Fri Apr 03 05:42:13.226659 2026] [:error] [pid 22673:tid 22749] [client 20.215.208.34:65000] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ac7ite-GlVDWdWxxwJCISwAAAIM"]
[Fri Apr 03 05:42:13.807345 2026] [:error] [pid 22673:tid 22755] [client 20.215.208.34:60030] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ac7ite-GlVDWdWxxwJCITgAAAIk"]
[Fri Apr 03 05:42:14.348443 2026] [:error] [pid 22778:tid 22802] [client 20.215.208.34:59911] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zxin.php"] [unique_id "ac7itvS-q9hkdFqUjq-AFQAAANE"]
[Fri Apr 03 05:42:14.866852 2026] [:error] [pid 22778:tid 22792] [client 20.215.208.34:63416] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zxin.php"] [unique_id "ac7itvS-q9hkdFqUjq-AGAAAAMc"]
[Fri Apr 03 05:42:15.431209 2026] [:error] [pid 22671:tid 22715] [client 20.215.208.34:60629] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zxin.php"] [unique_id "ac7ityRuUnMW7r8hvyZJoQAAABg"]
[Fri Apr 03 05:42:16.061422 2026] [:error] [pid 22778:tid 22797] [client 20.215.208.34:59983] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zxin.php"] [unique_id "ac7iuPS-q9hkdFqUjq-AGwAAAMw"]
[Fri Apr 03 05:42:16.718905 2026] [:error] [pid 22671:tid 22709] [client 20.215.208.34:64982] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "ac7iuCRuUnMW7r8hvyZJpAAAABI"]
[Fri Apr 03 05:42:17.263931 2026] [:error] [pid 22673:tid 22755] [client 20.215.208.34:64957] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "ac7iue-GlVDWdWxxwJCIXAAAAIk"]
[Fri Apr 03 05:42:17.824324 2026] [:error] [pid 22673:tid 22747] [client 20.215.208.34:64962] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "ac7iue-GlVDWdWxxwJCIXQAAAIE"]
[Fri Apr 03 05:42:18.406768 2026] [:error] [pid 22673:tid 22758] [client 20.215.208.34:61931] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "ac7iuu-GlVDWdWxxwJCIYQAAAIw"]
[Fri Apr 03 05:42:18.941360 2026] [:error] [pid 58590:tid 58610] [client 20.215.208.34:60671] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/NewFile.php"] [unique_id "ac7iukze_aEPDM9xEE2_lwAAARI"]
[Fri Apr 03 05:42:19.523726 2026] [:error] [pid 58590:tid 58599] [client 20.215.208.34:63398] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/NewFile.php"] [unique_id "ac7iu0ze_aEPDM9xEE2_mwAAAQc"]
[Fri Apr 03 05:42:20.109176 2026] [:error] [pid 58590:tid 58597] [client 20.215.208.34:60561] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/NewFile.php"] [unique_id "ac7ivEze_aEPDM9xEE2_oAAAAQU"]
[Fri Apr 03 05:42:20.670892 2026] [:error] [pid 58590:tid 58609] [client 20.215.208.34:59992] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/NewFile.php"] [unique_id "ac7ivEze_aEPDM9xEE2_pAAAARE"]
[Fri Apr 03 05:42:21.267591 2026] [:error] [pid 22672:tid 22726] [client 20.215.208.34:59924] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "ac7ivazrgXkFSOK0fvqH5gAAAEc"]
[Fri Apr 03 05:42:21.833290 2026] [:error] [pid 58590:tid 58614] [client 20.215.208.34:61848] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "ac7ivUze_aEPDM9xEE2_qQAAARY"]
[Fri Apr 03 05:42:22.380550 2026] [:error] [pid 58590:tid 58605] [client 20.215.208.34:64897] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "ac7ivkze_aEPDM9xEE2_rQAAAQ0"]
[Fri Apr 03 05:42:22.944422 2026] [:error] [pid 22778:tid 22791] [client 20.215.208.34:64975] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "ac7ivvS-q9hkdFqUjq-AKQAAAMY"]
[Fri Apr 03 05:42:23.527979 2026] [:error] [pid 58590:tid 58603] [client 20.215.208.34:61859] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wolv2.php"] [unique_id "ac7iv0ze_aEPDM9xEE2_sgAAAQs"]
[Fri Apr 03 05:42:24.046275 2026] [:error] [pid 58590:tid 58615] [client 20.215.208.34:59990] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wolv2.php"] [unique_id "ac7iwEze_aEPDM9xEE2_tgAAARc"]
[Fri Apr 03 05:42:24.683612 2026] [:error] [pid 22673:tid 22766] [client 20.215.208.34:64979] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wolv2.php"] [unique_id "ac7iwO-GlVDWdWxxwJCIaAAAAJQ"]
[Fri Apr 03 05:42:25.209149 2026] [:error] [pid 22673:tid 22756] [client 20.215.208.34:59923] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wolv2.php"] [unique_id "ac7iwe-GlVDWdWxxwJCIawAAAIo"]
[Fri Apr 03 05:42:25.855185 2026] [:error] [pid 22778:tid 22791] [client 20.215.208.34:64958] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/geck.php"] [unique_id "ac7iwfS-q9hkdFqUjq-AMgAAAMY"]
[Fri Apr 03 05:42:26.389229 2026] [:error] [pid 22778:tid 22786] [client 20.215.208.34:61933] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/geck.php"] [unique_id "ac7iwvS-q9hkdFqUjq-ANQAAAME"]
[Fri Apr 03 05:42:27.057728 2026] [:error] [pid 58590:tid 58614] [client 20.215.208.34:60556] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/geck.php"] [unique_id "ac7iw0ze_aEPDM9xEE2_vwAAARY"]
[Fri Apr 03 05:42:27.615296 2026] [:error] [pid 58590:tid 58607] [client 20.215.208.34:61829] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/geck.php"] [unique_id "ac7iw0ze_aEPDM9xEE2_wwAAAQ8"]
[Fri Apr 03 05:42:28.160356 2026] [:error] [pid 58590:tid 58593] [client 20.215.208.34:63482] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xtt.php"] [unique_id "ac7ixEze_aEPDM9xEE2_xQAAAQE"]
[Fri Apr 03 05:42:28.722358 2026] [:error] [pid 22778:tid 22799] [client 20.215.208.34:63365] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xtt.php"] [unique_id "ac7ixPS-q9hkdFqUjq-AOAAAAM4"]
[Fri Apr 03 05:42:29.264436 2026] [:error] [pid 22778:tid 22792] [client 20.215.208.34:60594] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xtt.php"] [unique_id "ac7ixfS-q9hkdFqUjq-AOwAAAMc"]
[Fri Apr 03 05:42:29.842150 2026] [:error] [pid 58590:tid 58601] [client 20.215.208.34:59905] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xtt.php"] [unique_id "ac7ixUze_aEPDM9xEE2_0QAAAQk"]
[Fri Apr 03 05:42:30.374050 2026] [:error] [pid 22778:tid 22796] [client 20.215.208.34:59444] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ac7ixvS-q9hkdFqUjq-AQAAAAMs"]
[Fri Apr 03 05:42:30.970166 2026] [:error] [pid 22673:tid 22757] [client 20.215.208.34:63407] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ac7ixu-GlVDWdWxxwJCIcwAAAIs"]
[Fri Apr 03 05:42:31.489395 2026] [:error] [pid 22673:tid 22764] [client 20.215.208.34:60021] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ac7ix--GlVDWdWxxwJCIdQAAAJI"]
[Fri Apr 03 05:42:32.068720 2026] [:error] [pid 58590:tid 58605] [client 20.215.208.34:63374] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ac7iyEze_aEPDM9xEE2_1wAAAQ0"]
[Fri Apr 03 05:42:32.655985 2026] [:error] [pid 22671:tid 22707] [client 20.215.208.34:59932] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system.php"] [unique_id "ac7iyCRuUnMW7r8hvyZJvQAAABA"]
[Fri Apr 03 05:42:33.280323 2026] [:error] [pid 22671:tid 22694] [client 20.215.208.34:60655] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system.php"] [unique_id "ac7iySRuUnMW7r8hvyZJvwAAAAM"]
[Fri Apr 03 05:42:33.906605 2026] [:error] [pid 22778:tid 22798] [client 20.215.208.34:60575] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system.php"] [unique_id "ac7iyfS-q9hkdFqUjq-ASQAAAM0"]
[Fri Apr 03 05:42:34.429433 2026] [:error] [pid 22778:tid 22791] [client 20.215.208.34:64928] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system.php"] [unique_id "ac7iyvS-q9hkdFqUjq-ATQAAAMY"]
[Fri Apr 03 05:42:35.078305 2026] [:error] [pid 22673:tid 22762] [client 20.215.208.34:61876] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "ac7iy--GlVDWdWxxwJCIeQAAAJA"]
[Fri Apr 03 05:42:35.615385 2026] [:error] [pid 22778:tid 22792] [client 20.215.208.34:59913] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "ac7iy_S-q9hkdFqUjq-AUQAAAMc"]
[Fri Apr 03 05:42:36.174447 2026] [:error] [pid 22778:tid 22794] [client 20.215.208.34:60546] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "ac7izPS-q9hkdFqUjq-AXQAAAMk"]
[Fri Apr 03 05:42:36.706562 2026] [:error] [pid 22671:tid 22713] [client 20.215.208.34:60623] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "ac7izCRuUnMW7r8hvyZJ1wAAABY"]
[Fri Apr 03 05:42:37.322799 2026] [:error] [pid 58590:tid 58597] [client 20.215.208.34:61860] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "ac7izUze_aEPDM9xEE2_4QAAAQU"]
[Fri Apr 03 05:42:38.005286 2026] [:error] [pid 58590:tid 58607] [client 20.215.208.34:63403] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "ac7izkze_aEPDM9xEE2_5AAAAQ8"]
[Fri Apr 03 05:42:38.544090 2026] [:error] [pid 22672:tid 22725] [client 20.215.208.34:65009] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "ac7izqzrgXkFSOK0fvqH-gAAAEY"]
[Fri Apr 03 05:42:39.058846 2026] [:error] [pid 22673:tid 22767] [client 20.215.208.34:61850] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "ac7iz--GlVDWdWxxwJCIfgAAAJU"]
[Fri Apr 03 05:42:39.593498 2026] [:error] [pid 22778:tid 22789] [client 20.215.208.34:64908] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ac7iz_S-q9hkdFqUjq-AbAAAAMQ"]
[Fri Apr 03 05:42:40.129195 2026] [:error] [pid 22672:tid 22735] [client 20.215.208.34:61904] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ac7i0KzrgXkFSOK0fvqH_gAAAFA"]
[Fri Apr 03 05:42:40.649939 2026] [:error] [pid 22673:tid 22763] [client 20.215.208.34:61868] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ac7i0O-GlVDWdWxxwJCIiAAAAJE"]
[Fri Apr 03 05:42:41.344673 2026] [:error] [pid 22778:tid 22790] [client 20.215.208.34:64923] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ac7i0fS-q9hkdFqUjq-AcgAAAMU"]
[Fri Apr 03 05:42:41.873855 2026] [:error] [pid 22673:tid 22767] [client 20.215.208.34:60571] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media.php"] [unique_id "ac7i0e-GlVDWdWxxwJCIigAAAJU"]
[Fri Apr 03 05:42:42.402130 2026] [:error] [pid 22672:tid 22738] [client 20.215.208.34:63366] File does not exist: /usr/local/apache/htdocs/suspended-page/media.php
[Fri Apr 03 05:42:42.943602 2026] [:error] [pid 22672:tid 22720] [client 20.215.208.34:63366] File does not exist: /usr/local/apache/htdocs/suspended-page/admir.php
[Fri Apr 03 05:42:43.201934 2026] [:error] [pid 22672:tid 22734] [client 20.215.208.34:63366] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Fri Apr 03 05:42:43.461419 2026] [:error] [pid 22672:tid 22724] [client 20.215.208.34:63366] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Fri Apr 03 05:42:44.109409 2026] [:error] [pid 22672:tid 22742] [client 20.215.208.34:63366] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Fri Apr 03 05:42:44.467432 2026] [:error] [pid 22672:tid 22723] [client 20.215.208.34:63366] File does not exist: /usr/local/apache/htdocs/suspended-page/bkxzo.php
[Fri Apr 03 05:42:44.775639 2026] [:error] [pid 22672:tid 22722] [client 20.215.208.34:63366] File does not exist: /usr/local/apache/htdocs/suspended-page/lo.php
[Fri Apr 03 05:42:45.033751 2026] [:error] [pid 22672:tid 22733] [client 20.215.208.34:63366] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Fri Apr 03 05:42:45.327169 2026] [:error] [pid 22672:tid 22734] [client 20.215.208.34:63366] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Fri Apr 03 05:42:45.582570 2026] [:error] [pid 22672:tid 22724] [client 20.215.208.34:63366] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac7i1azrgXkFSOK0fvqIFQAAAEU"]
[Fri Apr 03 05:42:46.104687 2026] [:error] [pid 22673:tid 22757] [client 20.215.208.34:59935] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac7i1u-GlVDWdWxxwJCIkQAAAIs"]
[Fri Apr 03 05:42:46.629464 2026] [:error] [pid 58590:tid 58612] [client 20.215.208.34:60019] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac7i1kze_aEPDM9xEE2_9gAAARQ"]
[Fri Apr 03 05:42:47.144990 2026] [:error] [pid 22673:tid 22752] [client 20.215.208.34:59968] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac7i1--GlVDWdWxxwJCIlQAAAIY"]
[Fri Apr 03 05:42:47.662442 2026] [:error] [pid 58590:tid 58615] [client 20.215.208.34:59978] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7i10ze_aEPDM9xEE2__AAAARc"]
[Fri Apr 03 05:42:48.184990 2026] [:error] [pid 58590:tid 58599] [client 20.215.208.34:59937] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7i2Eze_aEPDM9xEE3AAgAAAQc"]
[Fri Apr 03 05:42:48.715838 2026] [:error] [pid 58590:tid 58598] [client 20.215.208.34:59912] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7i2Eze_aEPDM9xEE3ABQAAAQY"]
[Fri Apr 03 05:42:49.443857 2026] [:error] [pid 22671:tid 22710] [client 20.215.208.34:61837] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7i2SRuUnMW7r8hvyZJ3AAAABM"]
[Fri Apr 03 05:42:50.032344 2026] [:error] [pid 22778:tid 22793] [client 20.215.208.34:63473] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/content.php"] [unique_id "ac7i2vS-q9hkdFqUjq-AegAAAMg"]
[Fri Apr 03 05:42:50.545017 2026] [:error] [pid 58590:tid 58603] [client 20.215.208.34:61846] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/content.php"] [unique_id "ac7i2kze_aEPDM9xEE3ADwAAAQs"]
[Fri Apr 03 05:42:51.109751 2026] [:error] [pid 58590:tid 58606] [client 20.215.208.34:63463] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/content.php"] [unique_id "ac7i20ze_aEPDM9xEE3AEwAAAQ4"]
[Fri Apr 03 05:42:51.712002 2026] [:error] [pid 58590:tid 58604] [client 20.215.208.34:63387] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/content.php"] [unique_id "ac7i20ze_aEPDM9xEE3AGAAAAQw"]
[Fri Apr 03 05:42:52.259337 2026] [:error] [pid 22778:tid 22794] [client 20.215.208.34:63433] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-configs.php"] [unique_id "ac7i3PS-q9hkdFqUjq-AfQAAAMk"]
[Fri Apr 03 05:42:52.781411 2026] [:error] [pid 22673:tid 22763] [client 20.215.208.34:65015] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-configs.php"] [unique_id "ac7i3O-GlVDWdWxxwJCImQAAAJE"]
[Fri Apr 03 05:42:53.515112 2026] [:error] [pid 22673:tid 22765] [client 20.215.208.34:64941] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-configs.php"] [unique_id "ac7i3e-GlVDWdWxxwJCImgAAAJM"]
[Fri Apr 03 05:42:54.029507 2026] [:error] [pid 22778:tid 22789] [client 20.215.208.34:61871] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-configs.php"] [unique_id "ac7i3vS-q9hkdFqUjq-AiAAAAMQ"]
[Fri Apr 03 05:42:54.559989 2026] [:error] [pid 58590:tid 58616] [client 20.215.208.34:64965] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "ac7i3kze_aEPDM9xEE3AIgAAARg"]
[Fri Apr 03 05:42:55.117134 2026] [:error] [pid 22778:tid 22803] [client 20.215.208.34:64971] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "ac7i3_S-q9hkdFqUjq-AkAAAANI"]
[Fri Apr 03 05:42:55.643156 2026] [:error] [pid 22778:tid 22800] [client 20.215.208.34:59489] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "ac7i3_S-q9hkdFqUjq-AlAAAAM8"]
[Fri Apr 03 05:42:56.191827 2026] [:error] [pid 22778:tid 22794] [client 20.215.208.34:61941] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "ac7i4PS-q9hkdFqUjq-AlgAAAMk"]
[Fri Apr 03 05:42:56.715062 2026] [:error] [pid 22778:tid 22793] [client 20.215.208.34:64969] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ac7i4PS-q9hkdFqUjq-AmwAAAMg"]
[Fri Apr 03 05:42:57.232748 2026] [:error] [pid 58590:tid 58597] [client 20.215.208.34:65020] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ac7i4Uze_aEPDM9xEE3AJgAAAQU"]
[Fri Apr 03 05:42:57.746891 2026] [:error] [pid 58590:tid 58599] [client 20.215.208.34:59995] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ac7i4Uze_aEPDM9xEE3AKQAAAQc"]
[Fri Apr 03 05:42:58.265702 2026] [:error] [pid 58590:tid 58612] [client 20.215.208.34:61927] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ac7i4kze_aEPDM9xEE3ALQAAARQ"]
[Fri Apr 03 05:42:58.876334 2026] [:error] [pid 58590:tid 58597] [client 20.215.208.34:60606] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "ac7i4kze_aEPDM9xEE3AMQAAAQU"]
[Fri Apr 03 05:42:59.451991 2026] [:error] [pid 22672:tid 22733] [client 20.215.208.34:61830] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "ac7i46zrgXkFSOK0fvqIGQAAAE4"]
[Fri Apr 03 05:43:00.010092 2026] [:error] [pid 22673:tid 22770] [client 20.215.208.34:63477] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "ac7i5O-GlVDWdWxxwJCInwAAAJg"]
[Fri Apr 03 05:43:00.620063 2026] [:error] [pid 22673:tid 22766] [client 20.215.208.34:63441] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "ac7i5O-GlVDWdWxxwJCIoAAAAJQ"]
[Fri Apr 03 05:43:01.290173 2026] [:error] [pid 22671:tid 22699] [client 20.215.208.34:63462] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac7i5SRuUnMW7r8hvyZJ4AAAAAg"]
[Fri Apr 03 05:43:02.033112 2026] [:error] [pid 58590:tid 58599] [client 20.215.208.34:59928] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac7i5kze_aEPDM9xEE3APAAAAQc"]
[Fri Apr 03 05:43:02.713156 2026] [:error] [pid 22672:tid 22726] [client 20.215.208.34:65017] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac7i5qzrgXkFSOK0fvqIIAAAAEc"]
[Fri Apr 03 05:43:03.251850 2026] [:error] [pid 22673:tid 22769] [client 20.215.208.34:59490] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac7i5--GlVDWdWxxwJCIpwAAAJc"]
[Fri Apr 03 05:43:03.834376 2026] [:error] [pid 22671:tid 22702] [client 20.215.208.34:58717] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "ac7i5yRuUnMW7r8hvyZJ5QAAAAs"]
[Fri Apr 03 05:43:04.380725 2026] [:error] [pid 22672:tid 22742] [client 20.215.208.34:64915] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "ac7i6KzrgXkFSOK0fvqIJAAAAFc"]
[Fri Apr 03 05:43:04.922452 2026] [:error] [pid 58590:tid 58598] [client 20.215.208.34:61918] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "ac7i6Eze_aEPDM9xEE3AQgAAAQY"]
[Fri Apr 03 05:43:05.507472 2026] [:error] [pid 22673:tid 22746] [client 20.215.208.34:61909] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "ac7i6e-GlVDWdWxxwJCIqwAAAIA"]
[Fri Apr 03 05:43:06.044556 2026] [:error] [pid 22671:tid 22700] [client 20.215.208.34:60650] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac7i6iRuUnMW7r8hvyZJ6QAAAAk"]
[Fri Apr 03 05:43:06.660161 2026] [:error] [pid 58590:tid 58601] [client 20.215.208.34:61858] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac7i6kze_aEPDM9xEE3ASQAAAQk"]
[Fri Apr 03 05:43:07.267369 2026] [:error] [pid 58590:tid 58608] [client 20.215.208.34:63415] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac7i60ze_aEPDM9xEE3AWAAAARA"]
[Fri Apr 03 05:43:08.010664 2026] [:error] [pid 22673:tid 22748] [client 20.215.208.34:59433] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac7i7O-GlVDWdWxxwJCIsAAAAII"]
[Fri Apr 03 05:43:08.576057 2026] [:error] [pid 58590:tid 58612] [client 20.215.208.34:60027] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/himu.php"] [unique_id "ac7i7Eze_aEPDM9xEE3AhQAAARQ"]
[Fri Apr 03 05:43:09.275034 2026] [:error] [pid 22778:tid 22785] [client 20.215.208.34:63372] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/himu.php"] [unique_id "ac7i7fS-q9hkdFqUjq-ArwAAAMA"]
[Fri Apr 03 05:43:09.902082 2026] [:error] [pid 22778:tid 22806] [client 20.215.208.34:61949] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/himu.php"] [unique_id "ac7i7fS-q9hkdFqUjq-AsAAAANU"]
[Fri Apr 03 05:43:10.487821 2026] [:error] [pid 22778:tid 22794] [client 20.215.208.34:63386] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/himu.php"] [unique_id "ac7i7vS-q9hkdFqUjq-AswAAAMk"]
[Fri Apr 03 05:43:11.080826 2026] [:error] [pid 22778:tid 22788] [client 20.215.208.34:60658] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "ac7i7_S-q9hkdFqUjq-AtwAAAMM"]
[Fri Apr 03 05:43:11.633937 2026] [:error] [pid 22672:tid 22736] [client 20.215.208.34:61853] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "ac7i76zrgXkFSOK0fvqIKgAAAFE"]
[Fri Apr 03 05:43:12.153175 2026] [:error] [pid 22672:tid 22721] [client 20.215.208.34:60648] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "ac7i8KzrgXkFSOK0fvqILAAAAEI"]
[Fri Apr 03 05:43:12.670653 2026] [:error] [pid 22778:tid 22803] [client 20.215.208.34:60011] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "ac7i8PS-q9hkdFqUjq-AvgAAANI"]
[Fri Apr 03 05:43:13.193991 2026] [:error] [pid 22671:tid 22695] [client 20.215.208.34:64902] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "ac7i8SRuUnMW7r8hvyZJ9QAAAAQ"]
[Fri Apr 03 05:43:13.719066 2026] [:error] [pid 22778:tid 22798] [client 20.215.208.34:60572] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "ac7i8fS-q9hkdFqUjq-AxAAAAM0"]
[Fri Apr 03 05:43:14.236174 2026] [:error] [pid 58590:tid 58614] [client 20.215.208.34:65018] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "ac7i8kze_aEPDM9xEE3AjgAAARY"]
[Fri Apr 03 05:43:15.162933 2026] [:error] [pid 22672:tid 22724] [client 20.215.208.34:59939] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "ac7i86zrgXkFSOK0fvqIMQAAAEU"]
[Fri Apr 03 05:43:15.689459 2026] [:error] [pid 22672:tid 22743] [client 20.215.208.34:63447] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "ac7i86zrgXkFSOK0fvqIMgAAAFg"]
[Fri Apr 03 05:43:16.392954 2026] [:error] [pid 22673:tid 22748] [client 20.215.208.34:59944] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "ac7i9O-GlVDWdWxxwJCIxQAAAII"]
[Fri Apr 03 05:43:16.952413 2026] [:error] [pid 22673:tid 22760] [client 20.215.208.34:60565] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "ac7i9O-GlVDWdWxxwJCIyAAAAI4"]
[Fri Apr 03 05:43:17.499743 2026] [:error] [pid 22778:tid 22798] [client 20.215.208.34:63450] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "ac7i9fS-q9hkdFqUjq-AywAAAM0"]
[Fri Apr 03 05:43:18.052922 2026] [:error] [pid 22778:tid 22789] [client 20.215.208.34:59497] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ac7i9vS-q9hkdFqUjq-AzwAAAMQ"]
[Fri Apr 03 05:43:18.596091 2026] [:error] [pid 22672:tid 22721] [client 20.215.208.34:59971] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ac7i9qzrgXkFSOK0fvqIPAAAAEI"]
[Fri Apr 03 05:43:19.116568 2026] [:error] [pid 22778:tid 22797] [client 20.215.208.34:60009] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ac7i9_S-q9hkdFqUjq-A2AAAAMw"]
[Fri Apr 03 05:43:19.639784 2026] [:error] [pid 22672:tid 22720] [client 20.215.208.34:59998] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ac7i96zrgXkFSOK0fvqIPgAAAEE"]
[Fri Apr 03 05:43:20.220439 2026] [:error] [pid 22671:tid 22708] [client 20.215.208.34:61875] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "ac7i-CRuUnMW7r8hvyZJ-QAAABE"]
[Fri Apr 03 05:43:20.742952 2026] [:error] [pid 22778:tid 22787] [client 20.215.208.34:59482] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "ac7i-PS-q9hkdFqUjq-A2wAAAMI"]
[Fri Apr 03 05:43:21.259908 2026] [:error] [pid 22778:tid 22791] [client 20.215.208.34:63444] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "ac7i-fS-q9hkdFqUjq-A3gAAAMY"]
[Fri Apr 03 05:43:22.291776 2026] [:error] [pid 22672:tid 22738] [client 20.215.208.34:60639] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "ac7i-qzrgXkFSOK0fvqIRgAAAFM"]
[Fri Apr 03 05:43:22.869106 2026] [:error] [pid 22673:tid 22766] [client 20.215.208.34:60649] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "ac7i-u-GlVDWdWxxwJCI0wAAAJQ"]
[Fri Apr 03 05:43:23.602471 2026] [:error] [pid 58590:tid 58610] [client 20.215.208.34:61852] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "ac7i-0ze_aEPDM9xEE3AkQAAARI"]
[Fri Apr 03 05:43:24.135696 2026] [:error] [pid 22672:tid 22737] [client 20.215.208.34:64955] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "ac7i_KzrgXkFSOK0fvqISwAAAFI"]
[Fri Apr 03 05:43:24.666629 2026] [:error] [pid 22778:tid 22799] [client 20.215.208.34:59930] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "ac7i_PS-q9hkdFqUjq-A5QAAAM4"]
[Fri Apr 03 05:43:25.390333 2026] [:error] [pid 22672:tid 22738] [client 20.215.208.34:59517] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "ac7i_azrgXkFSOK0fvqIUQAAAFM"]
[Fri Apr 03 05:43:25.936381 2026] [:error] [pid 58590:tid 58593] [client 20.215.208.34:61902] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "ac7i_Uze_aEPDM9xEE3AkwAAAQE"]
[Fri Apr 03 05:43:26.538348 2026] [:error] [pid 58590:tid 58613] [client 20.215.208.34:60569] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "ac7i_kze_aEPDM9xEE3AlwAAARU"]
[Fri Apr 03 05:43:27.053178 2026] [:error] [pid 22673:tid 22753] [client 20.215.208.34:65002] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "ac7i_--GlVDWdWxxwJCI4gAAAIc"]
[Fri Apr 03 05:43:27.569453 2026] [:error] [pid 22671:tid 22692] [client 20.215.208.34:59405] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ac7i_yRuUnMW7r8hvyZJ_wAAAAE"]
[Fri Apr 03 05:43:28.086775 2026] [:error] [pid 22778:tid 22802] [client 20.215.208.34:61882] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ac7jAPS-q9hkdFqUjq-A6QAAANE"]
[Fri Apr 03 05:43:28.630002 2026] [:error] [pid 22672:tid 22733] [client 20.215.208.34:59474] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ac7jAKzrgXkFSOK0fvqIUwAAAE4"]
[Fri Apr 03 05:43:29.238130 2026] [:error] [pid 22673:tid 22752] [client 20.215.208.34:60670] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ac7jAe-GlVDWdWxxwJCI5wAAAIY"]
[Fri Apr 03 05:43:29.819273 2026] [:error] [pid 22672:tid 22719] [client 20.215.208.34:59993] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ac7jAazrgXkFSOK0fvqIVAAAAEA"]
[Fri Apr 03 05:43:30.373161 2026] [:error] [pid 22673:tid 22759] [client 20.215.208.34:59393] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ac7jAu-GlVDWdWxxwJCI7AAAAI0"]
[Fri Apr 03 05:43:30.902982 2026] [:error] [pid 22673:tid 22758] [client 20.215.208.34:59964] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ac7jAu-GlVDWdWxxwJCI7wAAAIw"]
[Fri Apr 03 05:43:31.438626 2026] [:error] [pid 22673:tid 22752] [client 20.215.208.34:60602] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ac7jA--GlVDWdWxxwJCI8gAAAIY"]
[Fri Apr 03 05:43:32.069746 2026] [:error] [pid 22778:tid 22796] [client 20.215.208.34:61861] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "ac7jBPS-q9hkdFqUjq-A9AAAAMs"]
[Fri Apr 03 05:43:32.674841 2026] [:error] [pid 22778:tid 22805] [client 20.215.208.34:64987] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "ac7jBPS-q9hkdFqUjq-A9gAAANQ"]
[Fri Apr 03 05:43:33.205786 2026] [:error] [pid 22673:tid 22758] [client 20.215.208.34:64936] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "ac7jBe-GlVDWdWxxwJCI-AAAAIw"]
[Fri Apr 03 05:43:33.735084 2026] [:error] [pid 22672:tid 22738] [client 20.215.208.34:63439] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "ac7jBazrgXkFSOK0fvqIWgAAAFM"]
[Fri Apr 03 05:43:34.331273 2026] [:error] [pid 22673:tid 22757] [client 20.215.208.34:60667] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ac7jBu-GlVDWdWxxwJCI-wAAAIs"]
[Fri Apr 03 05:43:34.920088 2026] [:error] [pid 22673:tid 22766] [client 20.215.208.34:59940] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ac7jBu-GlVDWdWxxwJCI_gAAAJQ"]
[Fri Apr 03 05:43:35.470772 2026] [:error] [pid 22672:tid 22722] [client 20.215.208.34:60613] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ac7jB6zrgXkFSOK0fvqIYwAAAEM"]
[Fri Apr 03 05:43:36.059000 2026] [:error] [pid 22671:tid 22696] [client 20.215.208.34:63361] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ac7jCCRuUnMW7r8hvyZKDwAAAAU"]
[Fri Apr 03 05:43:36.612502 2026] [:error] [pid 58590:tid 58592] [client 20.215.208.34:61867] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lol.php"] [unique_id "ac7jCEze_aEPDM9xEE3AqgAAAQA"]
[Fri Apr 03 05:43:37.136388 2026] [:error] [pid 22673:tid 22769] [client 20.215.208.34:60573] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lol.php"] [unique_id "ac7jCe-GlVDWdWxxwJCJBAAAAJc"]
[Fri Apr 03 05:43:37.735152 2026] [:error] [pid 58590:tid 58615] [client 20.215.208.34:60642] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lol.php"] [unique_id "ac7jCUze_aEPDM9xEE3ArgAAARc"]
[Fri Apr 03 05:43:38.263759 2026] [:error] [pid 22672:tid 22719] [client 20.215.208.34:60603] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lol.php"] [unique_id "ac7jCqzrgXkFSOK0fvqIbwAAAEA"]
[Fri Apr 03 05:43:38.841328 2026] [:error] [pid 22672:tid 22723] [client 20.215.208.34:59965] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/radio.php"] [unique_id "ac7jCqzrgXkFSOK0fvqIcwAAAEQ"]
[Fri Apr 03 05:43:39.408283 2026] [:error] [pid 22671:tid 22695] [client 20.215.208.34:61880] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/radio.php"] [unique_id "ac7jCyRuUnMW7r8hvyZKEgAAAAQ"]
[Fri Apr 03 05:43:39.932540 2026] [:error] [pid 22671:tid 22699] [client 20.215.208.34:60582] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/radio.php"] [unique_id "ac7jCyRuUnMW7r8hvyZKFAAAAAg"]
[Fri Apr 03 05:43:40.468567 2026] [:error] [pid 22672:tid 22743] [client 20.215.208.34:61856] [client 20.215.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/radio.php"] [unique_id "ac7jDKzrgXkFSOK0fvqIfwAAAFg"]
[Fri Apr 03 06:15:28.924956 2026] [:error] [pid 22778:tid 22789] [client 172.161.11.137:59790] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Fri Apr 03 06:15:29.277695 2026] [:error] [pid 22778:tid 22797] [client 172.161.11.137:59790] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri Apr 03 06:15:29.538322 2026] [:error] [pid 22778:tid 22801] [client 172.161.11.137:59790] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Fri Apr 03 06:15:29.783489 2026] [:error] [pid 22778:tid 22791] [client 172.161.11.137:59790] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Fri Apr 03 06:15:30.325867 2026] [:error] [pid 22778:tid 22808] [client 172.161.11.137:59790] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Fri Apr 03 06:15:30.644859 2026] [:error] [pid 22778:tid 22790] [client 172.161.11.137:59790] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Fri Apr 03 06:15:31.145473 2026] [:error] [pid 22778:tid 22800] [client 172.161.11.137:59790] File does not exist: /usr/local/apache/htdocs/suspended-page/wolv2.php
[Fri Apr 03 06:15:31.384115 2026] [:error] [pid 22778:tid 22787] [client 172.161.11.137:59790] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Fri Apr 03 06:15:31.623415 2026] [:error] [pid 22778:tid 22793] [client 172.161.11.137:59790] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Fri Apr 03 06:15:31.938439 2026] [:error] [pid 22778:tid 22801] [client 172.161.11.137:59790] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac7qg_S-q9hkdFqUjq-UeAAAANA"]
[Fri Apr 03 06:15:32.857943 2026] [:error] [pid 22671:tid 22692] [client 172.161.11.137:44459] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac7qhCRuUnMW7r8hvyZV5AAAAAE"]
[Fri Apr 03 06:15:33.852701 2026] [:error] [pid 22671:tid 22712] [client 172.161.11.137:42535] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac7qhSRuUnMW7r8hvyZV6AAAABU"]
[Fri Apr 03 06:15:35.010932 2026] [:error] [pid 22778:tid 22807] [client 172.161.11.137:48852] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac7qh_S-q9hkdFqUjq-UfAAAANY"]
[Fri Apr 03 06:15:36.624451 2026] [:error] [pid 22672:tid 22724] [client 172.161.11.137:64974] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "ac7qiKzrgXkFSOK0fvqT2QAAAEU"]
[Fri Apr 03 06:15:40.088949 2026] [:error] [pid 22778:tid 22785] [client 172.161.11.137:48776] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "ac7qjPS-q9hkdFqUjq-UjQAAAMA"]
[Fri Apr 03 06:15:41.912487 2026] [:error] [pid 58590:tid 58596] [client 172.161.11.137:42528] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "ac7qjUze_aEPDM9xEE3bBQAAAQQ"]
[Fri Apr 03 06:15:42.942313 2026] [:error] [pid 58590:tid 58615] [client 172.161.11.137:3306] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "ac7qjkze_aEPDM9xEE3bCgAAARc"]
[Fri Apr 03 06:15:44.604849 2026] [:error] [pid 22671:tid 22699] [client 172.161.11.137:37751] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ac7qkCRuUnMW7r8hvyZV-gAAAAg"]
[Fri Apr 03 06:15:46.596104 2026] [:error] [pid 22673:tid 22754] [client 172.161.11.137:3642] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ac7qku-GlVDWdWxxwJCYRAAAAIg"]
[Fri Apr 03 06:15:48.468486 2026] [:error] [pid 22672:tid 22737] [client 172.161.11.137:3586] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ac7qlKzrgXkFSOK0fvqT6AAAAFI"]
[Fri Apr 03 06:15:50.076260 2026] [:error] [pid 22778:tid 22790] [client 172.161.11.137:33158] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ac7qlvS-q9hkdFqUjq-UmgAAAMU"]
[Fri Apr 03 06:15:51.148971 2026] [:error] [pid 22778:tid 22800] [client 172.161.11.137:45066] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ac7ql_S-q9hkdFqUjq-UngAAAM8"]
[Fri Apr 03 06:15:53.105915 2026] [:error] [pid 58590:tid 58607] [client 172.161.11.137:55654] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ac7qmUze_aEPDM9xEE3bMAAAAQ8"]
[Fri Apr 03 06:15:55.191358 2026] [:error] [pid 22778:tid 22791] [client 172.161.11.137:37664] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ac7qm_S-q9hkdFqUjq-UogAAAMY"]
[Fri Apr 03 06:15:57.162744 2026] [:error] [pid 22778:tid 22787] [client 172.161.11.137:47433] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ac7qnfS-q9hkdFqUjq-UpgAAAMI"]
[Fri Apr 03 06:15:59.750885 2026] [:error] [pid 58590:tid 58616] [client 172.161.11.137:58796] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ac7qn0ze_aEPDM9xEE3bRgAAARg"]
[Fri Apr 03 06:16:01.174045 2026] [:error] [pid 22778:tid 22805] [client 172.161.11.137:40731] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ac7qofS-q9hkdFqUjq-UrwAAANQ"]
[Fri Apr 03 06:16:02.809869 2026] [:error] [pid 22672:tid 22723] [client 172.161.11.137:40733] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ac7qoqzrgXkFSOK0fvqT7gAAAEQ"]
[Fri Apr 03 06:16:04.310283 2026] [:error] [pid 22778:tid 22791] [client 172.161.11.137:35615] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ac7qpPS-q9hkdFqUjq-UtAAAAMY"]
[Fri Apr 03 06:16:05.561108 2026] [:error] [pid 58590:tid 58602] [client 172.161.11.137:40182] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac7qpUze_aEPDM9xEE3bVgAAAQo"]
[Fri Apr 03 06:16:07.537542 2026] [:error] [pid 22673:tid 22764] [client 172.161.11.137:40143] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac7qp--GlVDWdWxxwJCYTwAAAJI"]
[Fri Apr 03 06:16:08.946877 2026] [:error] [pid 58590:tid 58600] [client 172.161.11.137:47474] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac7qqEze_aEPDM9xEE3bZgAAAQg"]
[Fri Apr 03 06:16:10.466341 2026] [:error] [pid 58590:tid 58596] [client 172.161.11.137:60017] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac7qqkze_aEPDM9xEE3bbQAAAQQ"]
[Fri Apr 03 06:16:11.610539 2026] [:error] [pid 22673:tid 22754] [client 172.161.11.137:61180] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ac7qq--GlVDWdWxxwJCYUgAAAIg"]
[Fri Apr 03 06:16:12.339525 2026] [:error] [pid 22673:tid 22768] [client 172.161.11.137:59998] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ac7qrO-GlVDWdWxxwJCYVQAAAJY"]
[Fri Apr 03 06:16:13.089509 2026] [:error] [pid 22673:tid 22746] [client 172.161.11.137:40134] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ac7qre-GlVDWdWxxwJCYVwAAAIA"]
[Fri Apr 03 06:16:13.891107 2026] [:error] [pid 22778:tid 22785] [client 172.161.11.137:48150] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ac7qrfS-q9hkdFqUjq-UzgAAAMA"]
[Fri Apr 03 06:16:15.132005 2026] [:error] [pid 22673:tid 22765] [client 172.161.11.137:32536] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ac7qr--GlVDWdWxxwJCYXwAAAJM"]
[Fri Apr 03 06:16:15.835629 2026] [:error] [pid 22672:tid 22743] [client 172.161.11.137:3375] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ac7qr6zrgXkFSOK0fvqT-wAAAFg"]
[Fri Apr 03 06:16:16.919487 2026] [:error] [pid 58590:tid 58593] [client 172.161.11.137:3779] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ac7qsEze_aEPDM9xEE3bcgAAAQE"]
[Fri Apr 03 06:16:17.744532 2026] [:error] [pid 22672:tid 22723] [client 172.161.11.137:32554] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ac7qsazrgXkFSOK0fvqT_QAAAEQ"]
[Fri Apr 03 06:16:18.609481 2026] [:error] [pid 58590:tid 58594] [client 172.161.11.137:60004] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "ac7qskze_aEPDM9xEE3bdgAAAQI"]
[Fri Apr 03 06:16:19.183521 2026] [:error] [pid 58590:tid 58615] [client 172.161.11.137:36286] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "ac7qs0ze_aEPDM9xEE3bewAAARc"]
[Fri Apr 03 06:16:20.209911 2026] [:error] [pid 22672:tid 22727] [client 172.161.11.137:60026] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "ac7qtKzrgXkFSOK0fvqUAwAAAEg"]
[Fri Apr 03 06:16:20.811983 2026] [:error] [pid 58590:tid 58602] [client 172.161.11.137:46921] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "ac7qtEze_aEPDM9xEE3bhAAAAQo"]
[Fri Apr 03 06:16:21.653016 2026] [:error] [pid 58590:tid 58614] [client 172.161.11.137:61142] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "ac7qtUze_aEPDM9xEE3bkAAAARY"]
[Fri Apr 03 06:16:23.050937 2026] [:error] [pid 58590:tid 58600] [client 172.161.11.137:39510] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "ac7qt0ze_aEPDM9xEE3bmAAAAQg"]
[Fri Apr 03 06:16:24.123772 2026] [:error] [pid 22672:tid 22738] [client 172.161.11.137:3384] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "ac7quKzrgXkFSOK0fvqUBQAAAFM"]
[Fri Apr 03 06:16:25.042214 2026] [:error] [pid 22672:tid 22735] [client 172.161.11.137:56740] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "ac7quazrgXkFSOK0fvqUCQAAAFA"]
[Fri Apr 03 06:16:25.846653 2026] [:error] [pid 22673:tid 22759] [client 172.161.11.137:35073] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "ac7que-GlVDWdWxxwJCYYAAAAI0"]
[Fri Apr 03 06:16:27.920403 2026] [:error] [pid 22672:tid 22739] [client 172.161.11.137:35074] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "ac7qu6zrgXkFSOK0fvqUDQAAAFQ"]
[Fri Apr 03 06:16:29.646599 2026] [:error] [pid 22673:tid 22767] [client 172.161.11.137:50574] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "ac7qve-GlVDWdWxxwJCYZQAAAJU"]
[Fri Apr 03 06:16:30.995354 2026] [:error] [pid 22672:tid 22726] [client 172.161.11.137:46935] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "ac7qvqzrgXkFSOK0fvqUEAAAAEc"]
[Fri Apr 03 06:16:32.291471 2026] [:error] [pid 58590:tid 58616] [client 172.161.11.137:61580] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Fri Apr 03 06:16:32.738206 2026] [:error] [pid 58590:tid 58605] [client 172.161.11.137:61580] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Apr 03 06:16:33.257314 2026] [:error] [pid 58590:tid 58595] [client 172.161.11.137:61580] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Fri Apr 03 06:16:33.640780 2026] [:error] [pid 58590:tid 58607] [client 172.161.11.137:61580] File does not exist: /usr/local/apache/htdocs/suspended-page/file32.php
[Fri Apr 03 06:16:34.049091 2026] [:error] [pid 58590:tid 58603] [client 172.161.11.137:61580] File does not exist: /usr/local/apache/htdocs/suspended-page/nope.php
[Fri Apr 03 06:16:34.471410 2026] [:error] [pid 58590:tid 58602] [client 172.161.11.137:61580] File does not exist: /usr/local/apache/htdocs/suspended-page/js.php
[Fri Apr 03 06:16:34.811443 2026] [:error] [pid 58590:tid 58609] [client 172.161.11.137:61580] [client 172.161.11.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ac7qwkze_aEPDM9xEE3b0AAAARE"]
[Fri Apr 03 06:16:35.701746 2026] [:error] [pid 22673:tid 22759] [client 172.161.11.137:56716] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Fri Apr 03 06:16:36.078861 2026] [:error] [pid 22673:tid 22759] [client 172.161.11.137:56716] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Apr 03 06:16:36.437431 2026] [:error] [pid 22673:tid 22768] [client 172.161.11.137:56716] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Apr 03 06:16:36.796733 2026] [:error] [pid 22673:tid 22751] [client 172.161.11.137:56716] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Fri Apr 03 06:16:37.124318 2026] [:error] [pid 22673:tid 22752] [client 172.161.11.137:56716] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "ac7qxe-GlVDWdWxxwJCYcwAAAIY"]
[Fri Apr 03 06:16:38.112530 2026] [:error] [pid 22778:tid 22809] [client 172.161.11.137:65366] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "ac7qxvS-q9hkdFqUjq-U6gAAANg"]
[Fri Apr 03 06:16:39.853791 2026] [:error] [pid 22778:tid 22799] [client 172.161.11.137:39501] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "ac7qx_S-q9hkdFqUjq-U8gAAAM4"]
[Fri Apr 03 06:16:40.641748 2026] [:error] [pid 58590:tid 58607] [client 172.161.11.137:61612] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "ac7qyEze_aEPDM9xEE3b1gAAAQ8"]
[Fri Apr 03 06:16:41.372425 2026] [:error] [pid 22778:tid 22786] [client 172.161.11.137:35107] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "ac7qyfS-q9hkdFqUjq-U_QAAAME"]
[Fri Apr 03 06:16:42.435550 2026] [:error] [pid 22671:tid 22701] [client 172.161.11.137:58040] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "ac7qyiRuUnMW7r8hvyZWHgAAAAo"]
[Fri Apr 03 06:16:43.145325 2026] [:error] [pid 22778:tid 22798] [client 172.161.11.137:57999] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "ac7qy_S-q9hkdFqUjq-VBwAAAM0"]
[Fri Apr 03 06:16:44.091077 2026] [:error] [pid 22778:tid 22800] [client 172.161.11.137:56760] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "ac7qzPS-q9hkdFqUjq-VDQAAAM8"]
[Fri Apr 03 06:16:45.134432 2026] [:error] [pid 58590:tid 58606] [client 172.161.11.137:58033] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ac7qzUze_aEPDM9xEE3b3wAAAQ4"]
[Fri Apr 03 06:16:46.052411 2026] [:error] [pid 22673:tid 22746] [client 172.161.11.137:50583] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ac7qzu-GlVDWdWxxwJCYggAAAIA"]
[Fri Apr 03 06:16:46.908675 2026] [:error] [pid 22671:tid 22695] [client 172.161.11.137:59463] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ac7qziRuUnMW7r8hvyZWIwAAAAQ"]
[Fri Apr 03 06:16:48.143886 2026] [:error] [pid 58590:tid 58604] [client 172.161.11.137:50561] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ac7q0Eze_aEPDM9xEE3b9wAAAQw"]
[Fri Apr 03 06:16:48.974457 2026] [:error] [pid 22673:tid 22746] [client 172.161.11.137:3853] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ac7q0O-GlVDWdWxxwJCYjgAAAIA"]
[Fri Apr 03 06:16:49.894563 2026] [:error] [pid 22673:tid 22767] [client 172.161.11.137:59497] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ac7q0e-GlVDWdWxxwJCYkgAAAJU"]
[Fri Apr 03 06:16:50.704087 2026] [:error] [pid 22778:tid 22787] [client 172.161.11.137:3771] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ac7q0vS-q9hkdFqUjq-VGgAAAMI"]
[Fri Apr 03 06:16:51.541965 2026] [:error] [pid 58590:tid 58613] [client 172.161.11.137:38260] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ac7q00ze_aEPDM9xEE3cDQAAARU"]
[Fri Apr 03 06:16:52.288723 2026] [:error] [pid 58590:tid 58602] [client 172.161.11.137:50576] [client 172.161.11.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "ac7q1Eze_aEPDM9xEE3cEwAAAQo"]
[Fri Apr 03 06:16:53.079048 2026] [:error] [pid 22778:tid 22807] [client 172.161.11.137:3860] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/123.php"] [unique_id "ac7q1fS-q9hkdFqUjq-VIwAAANY"]
[Fri Apr 03 06:16:54.169665 2026] [:error] [pid 58590:tid 58613] [client 172.161.11.137:3735] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/123.php"] [unique_id "ac7q1kze_aEPDM9xEE3cIAAAARU"]
[Fri Apr 03 06:16:54.866549 2026] [:error] [pid 22672:tid 22739] [client 172.161.11.137:3773] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/123.php"] [unique_id "ac7q1qzrgXkFSOK0fvqUJQAAAFQ"]
[Fri Apr 03 06:16:56.254195 2026] [:error] [pid 22672:tid 22738] [client 172.161.11.137:38262] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/123.php"] [unique_id "ac7q2KzrgXkFSOK0fvqUKQAAAFM"]
[Fri Apr 03 06:16:57.187691 2026] [:error] [pid 22778:tid 22806] [client 172.161.11.137:57984] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac7q2fS-q9hkdFqUjq-VMQAAANU"]
[Fri Apr 03 06:16:57.782426 2026] [:error] [pid 22778:tid 22794] [client 172.161.11.137:32055] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac7q2fS-q9hkdFqUjq-VOgAAAMk"]
[Fri Apr 03 06:16:58.665926 2026] [:error] [pid 22778:tid 22790] [client 172.161.11.137:36952] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac7q2vS-q9hkdFqUjq-VQgAAAMU"]
[Fri Apr 03 06:16:59.487769 2026] [:error] [pid 22673:tid 22763] [client 172.161.11.137:62924] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac7q2--GlVDWdWxxwJCYsQAAAJE"]
[Fri Apr 03 06:17:00.845684 2026] [:error] [pid 22672:tid 22739] [client 172.161.11.137:3731] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "ac7q3KzrgXkFSOK0fvqUMQAAAFQ"]
[Fri Apr 03 06:17:10.786893 2026] [:error] [pid 22778:tid 22809] [client 172.161.11.137:38256] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "ac7q5vS-q9hkdFqUjq-VYQAAANg"]
[Fri Apr 03 06:17:11.805867 2026] [:error] [pid 22778:tid 22804] [client 172.161.11.137:43369] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "ac7q5_S-q9hkdFqUjq-VZAAAANM"]
[Fri Apr 03 06:17:13.204799 2026] [:error] [pid 58590:tid 58603] [client 172.161.11.137:47610] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "ac7q6Uze_aEPDM9xEE3cfQAAAQs"]
[Fri Apr 03 06:17:14.272509 2026] [:error] [pid 22778:tid 22790] [client 172.161.11.137:46861] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "ac7q6vS-q9hkdFqUjq-VcgAAAMU"]
[Fri Apr 03 06:17:15.706445 2026] [:error] [pid 22673:tid 22758] [client 172.161.11.137:55133] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "ac7q6--GlVDWdWxxwJCYwgAAAIw"]
[Fri Apr 03 06:17:16.520952 2026] [:error] [pid 22672:tid 22732] [client 172.161.11.137:46858] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "ac7q7KzrgXkFSOK0fvqUTgAAAE0"]
[Fri Apr 03 06:17:17.503327 2026] [:error] [pid 22672:tid 22733] [client 172.161.11.137:54077] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "ac7q7azrgXkFSOK0fvqUUgAAAE4"]
[Fri Apr 03 06:17:19.111411 2026] [:error] [pid 22778:tid 22786] [client 172.161.11.137:58022] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "ac7q7_S-q9hkdFqUjq-VkwAAAME"]
[Fri Apr 03 06:17:21.000850 2026] [:error] [pid 58590:tid 58592] [client 172.161.11.137:3890] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "ac7q8Eze_aEPDM9xEE3cjgAAAQA"]
[Fri Apr 03 06:17:22.629799 2026] [:error] [pid 22672:tid 22726] [client 172.161.11.137:55160] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "ac7q8qzrgXkFSOK0fvqUXgAAAEc"]
[Fri Apr 03 06:17:23.600107 2026] [:error] [pid 22778:tid 22792] [client 172.161.11.137:40582] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "ac7q8_S-q9hkdFqUjq-VswAAAMc"]
[Fri Apr 03 06:17:24.320462 2026] [:error] [pid 22778:tid 22809] [client 172.161.11.137:40579] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ac7q9PS-q9hkdFqUjq-VuQAAANg"]
[Fri Apr 03 06:17:25.274896 2026] [:error] [pid 22778:tid 22796] [client 172.161.11.137:51515] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ac7q9fS-q9hkdFqUjq-VvwAAAMs"]
[Fri Apr 03 06:17:26.095459 2026] [:error] [pid 22673:tid 22766] [client 172.161.11.137:61235] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ac7q9u-GlVDWdWxxwJCY0gAAAJQ"]
[Fri Apr 03 06:17:27.206486 2026] [:error] [pid 22672:tid 22733] [client 172.161.11.137:55158] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ac7q96zrgXkFSOK0fvqUZgAAAE4"]
[Fri Apr 03 06:17:28.138275 2026] [:error] [pid 22778:tid 22804] [client 172.161.11.137:54052] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "ac7q-PS-q9hkdFqUjq-VzwAAANM"]
[Fri Apr 03 06:17:28.911537 2026] [:error] [pid 22778:tid 22801] [client 172.161.11.137:52119] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "ac7q-PS-q9hkdFqUjq-V1AAAANA"]
[Fri Apr 03 06:17:29.752680 2026] [:error] [pid 22778:tid 22791] [client 172.161.11.137:51082] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "ac7q-fS-q9hkdFqUjq-V2wAAAMY"]
[Fri Apr 03 06:17:30.789104 2026] [:error] [pid 22672:tid 22734] [client 172.161.11.137:51142] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "ac7q-qzrgXkFSOK0fvqUbAAAAE8"]
[Fri Apr 03 06:17:31.644340 2026] [:error] [pid 22672:tid 22721] [client 172.161.11.137:46852] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ac7q-6zrgXkFSOK0fvqUbwAAAEI"]
[Fri Apr 03 06:17:32.974558 2026] [:error] [pid 22672:tid 22732] [client 172.161.11.137:27505] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ac7q_KzrgXkFSOK0fvqUdAAAAE0"]
[Fri Apr 03 06:17:33.927047 2026] [:error] [pid 22778:tid 22796] [client 172.161.11.137:54038] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ac7q_fS-q9hkdFqUjq-V6QAAAMs"]
[Fri Apr 03 06:17:38.683278 2026] [:error] [pid 22673:tid 22770] [client 172.161.11.137:31370] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-x7.php
[Fri Apr 03 06:17:38.978703 2026] [:error] [pid 22673:tid 22756] [client 172.161.11.137:31370] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Fri Apr 03 06:17:39.217558 2026] [:error] [pid 22673:tid 22746] [client 172.161.11.137:31370] File does not exist: /usr/local/apache/htdocs/suspended-page/v4.php
[Fri Apr 03 06:17:39.511684 2026] [:error] [pid 22673:tid 22769] [client 172.161.11.137:31370] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Fri Apr 03 06:17:39.934747 2026] [:error] [pid 22673:tid 22761] [client 172.161.11.137:31370] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Apr 03 06:17:40.275557 2026] [:error] [pid 22673:tid 22757] [client 172.161.11.137:31370] File does not exist: /usr/local/apache/htdocs/suspended-page/an7.php
[Fri Apr 03 06:17:40.562899 2026] [:error] [pid 22673:tid 22752] [client 172.161.11.137:31370] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-gr.php
[Fri Apr 03 06:17:40.930789 2026] [:error] [pid 22673:tid 22767] [client 172.161.11.137:31370] [client 172.161.11.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ac7rBO-GlVDWdWxxwJCY5wAAAJU"]
[Fri Apr 03 06:17:42.078717 2026] [:error] [pid 22671:tid 22707] [client 172.161.11.137:38873] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Fri Apr 03 06:17:42.671909 2026] [:error] [pid 22671:tid 22712] [client 172.161.11.137:38873] File does not exist: /usr/local/apache/htdocs/suspended-page/about3.php
[Fri Apr 03 06:17:42.961713 2026] [:error] [pid 22671:tid 22708] [client 172.161.11.137:38873] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ac7rBiRuUnMW7r8hvyZWVwAAABE"]
[Fri Apr 03 06:17:43.994140 2026] [:error] [pid 22671:tid 22695] [client 172.161.11.137:46292] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ac7rByRuUnMW7r8hvyZWWQAAAAQ"]
[Fri Apr 03 06:17:45.205407 2026] [:error] [pid 58590:tid 58603] [client 172.161.11.137:29823] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ac7rCUze_aEPDM9xEE3cvwAAAQs"]
[Fri Apr 03 06:17:46.291616 2026] [:error] [pid 58590:tid 58602] [client 172.161.11.137:46332] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ac7rCkze_aEPDM9xEE3cxQAAAQo"]
[Fri Apr 03 06:17:47.819861 2026] [:error] [pid 58590:tid 58602] [client 172.161.11.137:34357] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "ac7rC0ze_aEPDM9xEE3c1AAAAQo"]
[Fri Apr 03 06:17:50.043972 2026] [:error] [pid 22673:tid 22748] [client 172.161.11.137:56317] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "ac7rDu-GlVDWdWxxwJCY7gAAAII"]
[Fri Apr 03 06:17:52.561480 2026] [:error] [pid 22778:tid 22790] [client 172.161.11.137:52125] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "ac7rEPS-q9hkdFqUjq-WGQAAAMU"]
[Fri Apr 03 06:17:54.247155 2026] [:error] [pid 58590:tid 58601] [client 172.161.11.137:4036] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "ac7rEkze_aEPDM9xEE3c6gAAAQk"]
[Fri Apr 03 06:17:55.327973 2026] [:error] [pid 58590:tid 58609] [client 172.161.11.137:32629] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ac7rE0ze_aEPDM9xEE3c8gAAARE"]
[Fri Apr 03 06:17:56.560535 2026] [:error] [pid 58590:tid 58608] [client 172.161.11.137:38881] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ac7rFEze_aEPDM9xEE3c-QAAARA"]
[Fri Apr 03 06:17:57.909438 2026] [:error] [pid 22672:tid 22729] [client 172.161.11.137:60246] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ac7rFazrgXkFSOK0fvqUlAAAAEo"]
[Fri Apr 03 06:17:58.991325 2026] [:error] [pid 22672:tid 22734] [client 172.161.11.137:60252] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ac7rFqzrgXkFSOK0fvqUlwAAAE8"]
[Fri Apr 03 06:17:59.767350 2026] [:error] [pid 58590:tid 58595] [client 172.161.11.137:60279] [client 172.161.11.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "ac7rF0ze_aEPDM9xEE3dCAAAAQM"]
[Fri Apr 03 06:18:00.659511 2026] [:error] [pid 22673:tid 22769] [client 172.161.11.137:56260] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "ac7rGO-GlVDWdWxxwJCY_AAAAJc"]
[Fri Apr 03 06:18:02.133897 2026] [:error] [pid 22671:tid 22704] [client 172.161.11.137:29810] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "ac7rGiRuUnMW7r8hvyZWZwAAAA0"]
[Fri Apr 03 06:18:03.310687 2026] [:error] [pid 22778:tid 22795] [client 172.161.11.137:56271] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "ac7rG_S-q9hkdFqUjq-WKAAAAMo"]
[Fri Apr 03 06:18:04.101114 2026] [:error] [pid 22673:tid 22765] [client 172.161.11.137:29784] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "ac7rHO-GlVDWdWxxwJCZAwAAAJM"]
[Fri Apr 03 06:18:05.974797 2026] [:error] [pid 22778:tid 22793] [client 172.161.11.137:60256] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ac7rHfS-q9hkdFqUjq-WMAAAAMg"]
[Fri Apr 03 06:18:06.958412 2026] [:error] [pid 22672:tid 22729] [client 172.161.11.137:53736] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ac7rHqzrgXkFSOK0fvqUnwAAAEo"]
[Fri Apr 03 06:18:08.051560 2026] [:error] [pid 22778:tid 22795] [client 172.161.11.137:47565] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ac7rIPS-q9hkdFqUjq-WOQAAAMo"]
[Fri Apr 03 06:18:09.391602 2026] [:error] [pid 22672:tid 22731] [client 172.161.11.137:52115] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ac7rIazrgXkFSOK0fvqUqQAAAEw"]
[Fri Apr 03 06:18:10.279553 2026] [:error] [pid 22778:tid 22809] [client 172.161.11.137:51179] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ac7rIvS-q9hkdFqUjq-WPAAAANg"]
[Fri Apr 03 06:18:11.531132 2026] [:error] [pid 58590:tid 58594] [client 172.161.11.137:55148] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ac7rI0ze_aEPDM9xEE3dIgAAAQI"]
[Fri Apr 03 06:18:12.769435 2026] [:error] [pid 22778:tid 22805] [client 172.161.11.137:43358] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ac7rJPS-q9hkdFqUjq-WQgAAANQ"]
[Fri Apr 03 06:18:13.497137 2026] [:error] [pid 58590:tid 58592] [client 172.161.11.137:51166] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ac7rJUze_aEPDM9xEE3dKAAAAQA"]
[Fri Apr 03 06:18:14.585259 2026] [:error] [pid 22778:tid 22806] [client 172.161.11.137:38228] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac7rJvS-q9hkdFqUjq-WRQAAANU"]
[Fri Apr 03 06:18:15.282947 2026] [:error] [pid 22673:tid 22763] [client 172.161.11.137:3750] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac7rJ--GlVDWdWxxwJCZFwAAAJE"]
[Fri Apr 03 06:18:16.161327 2026] [:error] [pid 58590:tid 58614] [client 172.161.11.137:50592] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac7rKEze_aEPDM9xEE3dLgAAARY"]
[Fri Apr 03 06:18:16.933776 2026] [:error] [pid 22673:tid 22768] [client 172.161.11.137:32029] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac7rKO-GlVDWdWxxwJCZGgAAAJY"]
[Fri Apr 03 06:18:17.686733 2026] [:error] [pid 22672:tid 22733] [client 172.161.11.137:50621] [client 172.161.11.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "ac7rKazrgXkFSOK0fvqUtgAAAE4"]
[Fri Apr 03 06:18:18.583760 2026] [:error] [pid 22671:tid 22694] [client 172.161.11.137:61514] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ac7rKiRuUnMW7r8hvyZWdwAAAAM"]
[Fri Apr 03 06:18:19.170741 2026] [:error] [pid 22778:tid 22802] [client 172.161.11.137:51497] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ac7rK_S-q9hkdFqUjq-WTgAAANE"]
[Fri Apr 03 06:18:20.009410 2026] [:error] [pid 22778:tid 22788] [client 172.161.11.137:36928] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ac7rLPS-q9hkdFqUjq-WVAAAAMM"]
[Fri Apr 03 06:18:21.307555 2026] [:error] [pid 22672:tid 22737] [client 172.161.11.137:53167] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ac7rLazrgXkFSOK0fvqUuwAAAFI"]
[Fri Apr 03 06:18:21.919191 2026] [:error] [pid 58590:tid 58596] [client 172.161.11.137:38267] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "ac7rLUze_aEPDM9xEE3dOAAAAQQ"]
[Fri Apr 03 06:18:23.332862 2026] [:error] [pid 22672:tid 22722] [client 172.161.11.137:62975] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "ac7rL6zrgXkFSOK0fvqUvwAAAEM"]
[Fri Apr 03 06:18:24.138609 2026] [:error] [pid 22672:tid 22719] [client 172.161.11.137:61544] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "ac7rMKzrgXkFSOK0fvqUwgAAAEA"]
[Fri Apr 03 06:18:25.148099 2026] [:error] [pid 58590:tid 58608] [client 172.161.11.137:38235] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "ac7rMUze_aEPDM9xEE3dRwAAARA"]
[Fri Apr 03 06:18:25.940715 2026] [:error] [pid 22778:tid 22800] [client 172.161.11.137:55167] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/filemanager.php"] [unique_id "ac7rMfS-q9hkdFqUjq-WWgAAAM8"]
[Fri Apr 03 06:18:26.719758 2026] [:error] [pid 58590:tid 58613] [client 172.161.11.137:65380] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/filemanager.php"] [unique_id "ac7rMkze_aEPDM9xEE3dSwAAARU"]
[Fri Apr 03 06:18:27.526361 2026] [:error] [pid 58590:tid 58616] [client 172.161.11.137:57985] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/filemanager.php"] [unique_id "ac7rM0ze_aEPDM9xEE3dTwAAARg"]
[Fri Apr 03 06:18:28.342529 2026] [:error] [pid 22671:tid 22707] [client 172.161.11.137:3887] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/filemanager.php"] [unique_id "ac7rNCRuUnMW7r8hvyZWgAAAABA"]
[Fri Apr 03 06:18:28.989968 2026] [:error] [pid 22672:tid 22743] [client 172.161.11.137:56713] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac7rNKzrgXkFSOK0fvqU1QAAAFg"]
[Fri Apr 03 06:18:30.137176 2026] [:error] [pid 22673:tid 22762] [client 172.161.11.137:56745] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac7rNu-GlVDWdWxxwJCZLQAAAJA"]
[Fri Apr 03 06:18:31.015968 2026] [:error] [pid 22673:tid 22755] [client 172.161.11.137:50565] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac7rN--GlVDWdWxxwJCZMgAAAIk"]
[Fri Apr 03 06:18:32.005016 2026] [:error] [pid 22673:tid 22770] [client 172.161.11.137:59486] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac7rOO-GlVDWdWxxwJCZOgAAAJg"]
[Fri Apr 03 06:18:33.679798 2026] [:error] [pid 58590:tid 58596] [client 172.161.11.137:36960] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dlu.php"] [unique_id "ac7rOUze_aEPDM9xEE3dYwAAAQQ"]
[Fri Apr 03 06:18:35.683841 2026] [:error] [pid 58590:tid 58611] [client 172.161.11.137:56723] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dlu.php"] [unique_id "ac7rO0ze_aEPDM9xEE3dawAAARM"]
[Fri Apr 03 06:18:37.213114 2026] [:error] [pid 22673:tid 22761] [client 172.161.11.137:35095] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dlu.php"] [unique_id "ac7rPe-GlVDWdWxxwJCZQgAAAI8"]
[Fri Apr 03 06:18:38.221258 2026] [:error] [pid 58590:tid 58605] [client 172.161.11.137:59468] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dlu.php"] [unique_id "ac7rPkze_aEPDM9xEE3dfAAAAQ0"]
[Fri Apr 03 06:18:39.365470 2026] [:error] [pid 22673:tid 22770] [client 172.161.11.137:35125] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ac7rP--GlVDWdWxxwJCZRAAAAJg"]
[Fri Apr 03 06:18:40.199653 2026] [:error] [pid 22672:tid 22720] [client 172.161.11.137:38223] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ac7rQKzrgXkFSOK0fvqU6wAAAEE"]
[Fri Apr 03 06:18:40.970178 2026] [:error] [pid 22672:tid 22733] [client 172.161.11.137:62973] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ac7rQKzrgXkFSOK0fvqU8AAAAE4"]
[Fri Apr 03 06:18:41.918317 2026] [:error] [pid 22673:tid 22759] [client 172.161.11.137:3873] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ac7rQe-GlVDWdWxxwJCZRQAAAI0"]
[Fri Apr 03 06:18:43.193157 2026] [:error] [pid 22778:tid 22809] [client 172.161.11.137:57996] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Fri Apr 03 06:18:43.528123 2026] [:error] [pid 22778:tid 22800] [client 172.161.11.137:57996] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Fri Apr 03 06:18:43.905146 2026] [:error] [pid 22778:tid 22793] [client 172.161.11.137:57996] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Fri Apr 03 06:18:44.143533 2026] [:error] [pid 22778:tid 22798] [client 172.161.11.137:57996] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Fri Apr 03 06:18:44.435019 2026] [:error] [pid 22778:tid 22799] [client 172.161.11.137:57996] File does not exist: /usr/local/apache/htdocs/suspended-page/hook.php
[Fri Apr 03 06:18:44.920373 2026] [:error] [pid 22778:tid 22806] [client 172.161.11.137:57996] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Fri Apr 03 06:18:45.275355 2026] [:error] [pid 22778:tid 22800] [client 172.161.11.137:57996] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Apr 03 06:18:45.596462 2026] [:error] [pid 22778:tid 22796] [client 172.161.11.137:57996] File does not exist: /usr/local/apache/htdocs/suspended-page/v.php
[Fri Apr 03 06:18:45.842929 2026] [:error] [pid 22778:tid 22793] [client 172.161.11.137:57996] File does not exist: /usr/local/apache/htdocs/suspended-page/te.php
[Fri Apr 03 06:18:46.082616 2026] [:error] [pid 22778:tid 22807] [client 172.161.11.137:57996] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Apr 03 06:18:46.321894 2026] [:error] [pid 22778:tid 22798] [client 172.161.11.137:57996] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Fri Apr 03 06:18:46.707351 2026] [:error] [pid 22778:tid 22789] [client 172.161.11.137:57996] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "ac7rRvS-q9hkdFqUjq-WfQAAAMQ"]
[Fri Apr 03 06:18:48.486529 2026] [:error] [pid 22673:tid 22767] [client 172.161.11.137:61551] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "ac7rSO-GlVDWdWxxwJCZVwAAAJU"]
[Fri Apr 03 06:18:49.364375 2026] [:error] [pid 22673:tid 22757] [client 172.161.11.137:50585] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "ac7rSe-GlVDWdWxxwJCZWwAAAIs"]
[Fri Apr 03 06:18:50.710538 2026] [:error] [pid 58590:tid 58597] [client 172.161.11.137:61510] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "ac7rSkze_aEPDM9xEE3diwAAAQU"]
[Fri Apr 03 06:18:51.948128 2026] [:error] [pid 22778:tid 22790] [client 172.161.11.137:61535] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "ac7rS_S-q9hkdFqUjq-WmwAAAMU"]
[Fri Apr 03 06:18:52.697616 2026] [:error] [pid 58590:tid 58600] [client 172.161.11.137:59481] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "ac7rTEze_aEPDM9xEE3dkgAAAQg"]
[Fri Apr 03 06:18:53.379739 2026] [:error] [pid 58590:tid 58594] [client 172.161.11.137:56711] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "ac7rTUze_aEPDM9xEE3dlQAAAQI"]
[Fri Apr 03 06:18:54.144357 2026] [:error] [pid 22673:tid 22768] [client 172.161.11.137:3738] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "ac7rTu-GlVDWdWxxwJCZcQAAAJY"]
[Fri Apr 03 06:18:55.026448 2026] [:error] [pid 58590:tid 58595] [client 172.161.11.137:3743] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "ac7rT0ze_aEPDM9xEE3dmAAAAQM"]
[Fri Apr 03 06:18:55.860555 2026] [:error] [pid 58590:tid 58608] [client 172.161.11.137:50613] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "ac7rT0ze_aEPDM9xEE3dngAAARA"]
[Fri Apr 03 06:18:56.695732 2026] [:error] [pid 22671:tid 22696] [client 172.161.11.137:35127] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "ac7rUCRuUnMW7r8hvyZWngAAAAU"]
[Fri Apr 03 06:18:57.645655 2026] [:error] [pid 22671:tid 22697] [client 172.161.11.137:50596] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "ac7rUSRuUnMW7r8hvyZWoAAAAAY"]
[Fri Apr 03 06:18:58.613997 2026] [:error] [pid 22778:tid 22804] [client 172.161.11.137:3729] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/manager.php"] [unique_id "ac7rUvS-q9hkdFqUjq-WswAAANM"]
[Fri Apr 03 06:18:59.316335 2026] [:error] [pid 22671:tid 22711] [client 172.161.11.137:3733] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/manager.php"] [unique_id "ac7rUyRuUnMW7r8hvyZWvwAAABQ"]
[Fri Apr 03 06:19:00.539875 2026] [:error] [pid 58590:tid 58614] [client 172.161.11.137:57987] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/manager.php"] [unique_id "ac7rVEze_aEPDM9xEE3dxgAAARY"]
[Fri Apr 03 06:19:01.469104 2026] [:error] [pid 58590:tid 58606] [client 172.161.11.137:35114] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/manager.php"] [unique_id "ac7rVUze_aEPDM9xEE3d0wAAAQ4"]
[Fri Apr 03 06:19:02.412230 2026] [:error] [pid 22673:tid 22753] [client 172.161.11.137:58021] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ac7rVu-GlVDWdWxxwJCZfQAAAIc"]
[Fri Apr 03 06:19:03.068660 2026] [:error] [pid 22671:tid 22710] [client 172.161.11.137:50578] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ac7rVyRuUnMW7r8hvyZWygAAABM"]
[Fri Apr 03 06:19:03.898932 2026] [:error] [pid 58590:tid 58606] [client 172.161.11.137:53128] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ac7rV0ze_aEPDM9xEE3d2wAAAQ4"]
[Fri Apr 03 06:19:04.670146 2026] [:error] [pid 22778:tid 22797] [client 172.161.11.137:61589] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ac7rWPS-q9hkdFqUjq-W1gAAAMw"]
[Fri Apr 03 06:19:05.454628 2026] [:error] [pid 58590:tid 58608] [client 172.161.11.137:43384] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "ac7rWUze_aEPDM9xEE3d4QAAARA"]
[Fri Apr 03 06:19:06.144635 2026] [:error] [pid 22778:tid 22792] [client 172.161.11.137:61532] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "ac7rWvS-q9hkdFqUjq-W2AAAAMc"]
[Fri Apr 03 06:19:06.770600 2026] [:error] [pid 22671:tid 22702] [client 172.161.11.137:36946] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "ac7rWiRuUnMW7r8hvyZWywAAAAs"]
[Fri Apr 03 06:19:07.495614 2026] [:error] [pid 58590:tid 58602] [client 172.161.11.137:62913] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "ac7rW0ze_aEPDM9xEE3d7gAAAQo"]
[Fri Apr 03 06:19:08.099276 2026] [:error] [pid 22673:tid 22762] [client 172.161.11.137:50564] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v2.php"] [unique_id "ac7rXO-GlVDWdWxxwJCZhQAAAJA"]
[Fri Apr 03 06:19:08.747125 2026] [:error] [pid 22778:tid 22806] [client 172.161.11.137:62958] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v2.php"] [unique_id "ac7rXPS-q9hkdFqUjq-W3AAAANU"]
[Fri Apr 03 06:19:09.521033 2026] [:error] [pid 58590:tid 58615] [client 172.161.11.137:35109] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v2.php"] [unique_id "ac7rXUze_aEPDM9xEE3d9gAAARc"]
[Fri Apr 03 06:19:10.162173 2026] [:error] [pid 58590:tid 58602] [client 172.161.11.137:3724] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v2.php"] [unique_id "ac7rXkze_aEPDM9xEE3d-gAAAQo"]
[Fri Apr 03 06:19:11.663383 2026] [:error] [pid 22778:tid 22808] [client 172.161.11.137:3765] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac7rX_S-q9hkdFqUjq-W5wAAANc"]
[Fri Apr 03 06:19:12.755078 2026] [:error] [pid 22672:tid 22742] [client 172.161.11.137:61631] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac7rYKzrgXkFSOK0fvqVLAAAAFc"]
[Fri Apr 03 06:19:14.300779 2026] [:error] [pid 22673:tid 22759] [client 172.161.11.137:3879] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac7rYu-GlVDWdWxxwJCZjwAAAI0"]
[Fri Apr 03 06:19:15.265131 2026] [:error] [pid 58590:tid 58597] [client 172.161.11.137:50616] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac7rY0ze_aEPDM9xEE3eCgAAAQU"]
[Fri Apr 03 06:19:16.632871 2026] [:error] [pid 22673:tid 22762] [client 172.161.11.137:38253] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shoha.php"] [unique_id "ac7rZO-GlVDWdWxxwJCZkgAAAJA"]
[Fri Apr 03 06:19:17.643960 2026] [:error] [pid 22778:tid 22792] [client 172.161.11.137:61563] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shoha.php"] [unique_id "ac7rZfS-q9hkdFqUjq-W8gAAAMc"]
[Fri Apr 03 06:19:18.313855 2026] [:error] [pid 22671:tid 22712] [client 172.161.11.137:35124] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shoha.php"] [unique_id "ac7rZiRuUnMW7r8hvyZW0QAAABU"]
[Fri Apr 03 06:19:19.008944 2026] [:error] [pid 22672:tid 22743] [client 172.161.11.137:32002] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shoha.php"] [unique_id "ac7rZ6zrgXkFSOK0fvqVNgAAAFg"]
[Fri Apr 03 06:19:20.021971 2026] [:error] [pid 22673:tid 22765] [client 172.161.11.137:38220] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "ac7raO-GlVDWdWxxwJCZmQAAAJM"]
[Fri Apr 03 06:19:20.620320 2026] [:error] [pid 22673:tid 22759] [client 172.161.11.137:59467] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "ac7raO-GlVDWdWxxwJCZmwAAAI0"]
[Fri Apr 03 06:19:21.548351 2026] [:error] [pid 22778:tid 22806] [client 172.161.11.137:3869] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "ac7rafS-q9hkdFqUjq-XIQAAANU"]
[Fri Apr 03 06:19:23.005123 2026] [:error] [pid 58590:tid 58616] [client 172.161.11.137:36956] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "ac7ra0ze_aEPDM9xEE3eKQAAARg"]
[Fri Apr 03 06:19:24.272256 2026] [:error] [pid 22672:tid 22743] [client 172.161.11.137:61594] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ac7rbKzrgXkFSOK0fvqVRQAAAFg"]
[Fri Apr 03 06:19:25.020431 2026] [:error] [pid 22672:tid 22739] [client 172.161.11.137:61534] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ac7rbazrgXkFSOK0fvqVSgAAAFQ"]
[Fri Apr 03 06:19:25.715546 2026] [:error] [pid 22778:tid 22798] [client 172.161.11.137:59492] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ac7rbfS-q9hkdFqUjq-XVAAAAM0"]
[Fri Apr 03 06:19:26.395300 2026] [:error] [pid 22672:tid 22724] [client 172.161.11.137:38251] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ac7rbqzrgXkFSOK0fvqVUwAAAEU"]
[Fri Apr 03 06:19:27.187467 2026] [:error] [pid 22672:tid 22739] [client 172.161.11.137:65369] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac7rb6zrgXkFSOK0fvqVWgAAAFQ"]
[Fri Apr 03 06:19:28.155031 2026] [:error] [pid 22672:tid 22741] [client 172.161.11.137:3764] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac7rcKzrgXkFSOK0fvqVYAAAAFY"]
[Fri Apr 03 06:19:28.827535 2026] [:error] [pid 22672:tid 22731] [client 172.161.11.137:59456] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac7rcKzrgXkFSOK0fvqVZAAAAEw"]
[Fri Apr 03 06:19:29.779314 2026] [:error] [pid 58590:tid 58605] [client 172.161.11.137:62926] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac7rcUze_aEPDM9xEE3eVQAAAQ0"]
[Fri Apr 03 06:19:30.493495 2026] [:error] [pid 22672:tid 22730] [client 172.161.11.137:59487] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ac7rcqzrgXkFSOK0fvqVZwAAAEs"]
[Fri Apr 03 06:19:31.347860 2026] [:error] [pid 22778:tid 22794] [client 172.161.11.137:47579] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ac7rc_S-q9hkdFqUjq-XewAAAMk"]
[Fri Apr 03 06:19:31.991454 2026] [:error] [pid 58590:tid 58595] [client 172.161.11.137:61569] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ac7rc0ze_aEPDM9xEE3eWwAAAQM"]
[Fri Apr 03 06:19:32.608126 2026] [:error] [pid 58590:tid 58597] [client 172.161.11.137:62969] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ac7rdEze_aEPDM9xEE3eXQAAAQU"]
[Fri Apr 03 06:19:33.762812 2026] [:error] [pid 22672:tid 22724] [client 172.161.11.137:56763] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ac7rdazrgXkFSOK0fvqVbgAAAEU"]
[Fri Apr 03 06:19:34.523250 2026] [:error] [pid 22673:tid 22751] [client 172.161.11.137:61520] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ac7rdu-GlVDWdWxxwJCZsgAAAIU"]
[Fri Apr 03 06:19:35.531519 2026] [:error] [pid 58590:tid 58614] [client 172.161.11.137:36989] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ac7rd0ze_aEPDM9xEE3eZQAAARY"]
[Fri Apr 03 06:19:36.316003 2026] [:error] [pid 58590:tid 58604] [client 172.161.11.137:65349] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ac7reEze_aEPDM9xEE3eaQAAAQw"]
[Fri Apr 03 06:19:37.062832 2026] [:error] [pid 58590:tid 58615] [client 172.161.11.137:35118] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ac7reUze_aEPDM9xEE3ebgAAARc"]
[Fri Apr 03 06:19:38.232413 2026] [:error] [pid 58590:tid 58606] [client 172.161.11.137:3756] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ac7rekze_aEPDM9xEE3eeQAAAQ4"]
[Fri Apr 03 06:19:39.057813 2026] [:error] [pid 22673:tid 22749] [client 172.161.11.137:62942] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ac7re--GlVDWdWxxwJCZuQAAAIM"]
[Fri Apr 03 06:19:39.678534 2026] [:error] [pid 22672:tid 22725] [client 172.161.11.137:3775] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ac7re6zrgXkFSOK0fvqVeQAAAEY"]
[Fri Apr 03 06:19:40.415446 2026] [:error] [pid 22778:tid 22790] [client 172.161.11.137:35089] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ac7rfPS-q9hkdFqUjq-XrwAAAMU"]
[Fri Apr 03 06:19:41.462739 2026] [:error] [pid 58590:tid 58597] [client 172.161.11.137:61582] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ac7rfUze_aEPDM9xEE3ehgAAAQU"]
[Fri Apr 03 06:19:42.118643 2026] [:error] [pid 58590:tid 58614] [client 172.161.11.137:61624] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ac7rfkze_aEPDM9xEE3ejQAAARY"]
[Fri Apr 03 06:19:42.830310 2026] [:error] [pid 22673:tid 22756] [client 172.161.11.137:57992] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ac7rfu-GlVDWdWxxwJCZwwAAAIo"]
[Fri Apr 03 06:19:43.651791 2026] [:error] [pid 58590:tid 58607] [client 172.161.11.137:32020] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac7rf0ze_aEPDM9xEE3emQAAAQ8"]
[Fri Apr 03 06:19:44.349940 2026] [:error] [pid 58590:tid 58595] [client 172.161.11.137:58012] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac7rgEze_aEPDM9xEE3eoQAAAQM"]
[Fri Apr 03 06:19:44.980616 2026] [:error] [pid 58590:tid 58593] [client 172.161.11.137:43384] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac7rgEze_aEPDM9xEE3epQAAAQE"]
[Fri Apr 03 06:19:45.744884 2026] [:error] [pid 58590:tid 58615] [client 172.161.11.137:32000] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac7rgUze_aEPDM9xEE3eqgAAARc"]
[Fri Apr 03 06:19:46.499570 2026] [:error] [pid 22671:tid 22709] [client 172.161.11.137:32034] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Apr 03 06:19:46.882379 2026] [:error] [pid 22671:tid 22694] [client 172.161.11.137:32034] File does not exist: /usr/local/apache/htdocs/suspended-page/zxin.php
[Fri Apr 03 06:19:47.437634 2026] [:error] [pid 22671:tid 22712] [client 172.161.11.137:32034] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Fri Apr 03 06:19:47.677513 2026] [:error] [pid 22671:tid 22698] [client 172.161.11.137:32034] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri Apr 03 06:19:47.917635 2026] [:error] [pid 22671:tid 22696] [client 172.161.11.137:32034] File does not exist: /usr/local/apache/htdocs/suspended-page/wolv2.php
[Fri Apr 03 06:19:48.217063 2026] [:error] [pid 22671:tid 22704] [client 172.161.11.137:32034] File does not exist: /usr/local/apache/htdocs/suspended-page/geck.php
[Fri Apr 03 06:19:48.588996 2026] [:error] [pid 22671:tid 22704] [client 172.161.11.137:32034] File does not exist: /usr/local/apache/htdocs/suspended-page/xtt.php
[Fri Apr 03 06:19:48.833740 2026] [:error] [pid 22671:tid 22710] [client 172.161.11.137:32034] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Apr 03 06:19:49.249277 2026] [:error] [pid 22671:tid 22706] [client 172.161.11.137:32034] File does not exist: /usr/local/apache/htdocs/suspended-page/system.php
[Fri Apr 03 06:19:50.774048 2026] [:error] [pid 22671:tid 22706] [client 172.161.11.137:32034] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Apr 03 06:19:51.045152 2026] [:error] [pid 22671:tid 22702] [client 172.161.11.137:32034] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "ac7rhyRuUnMW7r8hvyZW-wAAAAs"]
[Fri Apr 03 06:19:51.724834 2026] [:error] [pid 22672:tid 22733] [client 172.161.11.137:65403] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "ac7rh6zrgXkFSOK0fvqVkQAAAE4"]
[Fri Apr 03 06:19:52.568981 2026] [:error] [pid 22778:tid 22787] [client 172.161.11.137:36979] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "ac7riPS-q9hkdFqUjq-XvQAAAMI"]
[Fri Apr 03 06:19:53.561840 2026] [:error] [pid 22778:tid 22785] [client 172.161.11.137:36878] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "ac7rifS-q9hkdFqUjq-XwwAAAMA"]
[Fri Apr 03 06:19:54.227014 2026] [:error] [pid 58590:tid 58605] [client 172.161.11.137:65394] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ac7rikze_aEPDM9xEE3ezgAAAQ0"]
[Fri Apr 03 06:19:54.755087 2026] [:error] [pid 22673:tid 22754] [client 172.161.11.137:3746] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ac7riu-GlVDWdWxxwJCZ0wAAAIg"]
[Fri Apr 03 06:19:55.449126 2026] [:error] [pid 22673:tid 22762] [client 172.161.11.137:56721] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ac7ri--GlVDWdWxxwJCZ1wAAAJA"]
[Fri Apr 03 06:19:56.009640 2026] [:error] [pid 22673:tid 22757] [client 172.161.11.137:56767] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ac7rjO-GlVDWdWxxwJCZ3AAAAIs"]
[Fri Apr 03 06:19:56.626321 2026] [:error] [pid 22778:tid 22795] [client 172.161.11.137:61581] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media.php"] [unique_id "ac7rjPS-q9hkdFqUjq-XygAAAMo"]
[Fri Apr 03 06:19:57.398843 2026] [:error] [pid 22778:tid 22793] [client 172.161.11.137:61609] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media.php"] [unique_id "ac7rjfS-q9hkdFqUjq-X0AAAAMg"]
[Fri Apr 03 06:19:58.103613 2026] [:error] [pid 22778:tid 22796] [client 172.161.11.137:50610] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media.php"] [unique_id "ac7rjvS-q9hkdFqUjq-X0wAAAMs"]
[Fri Apr 03 06:19:58.951075 2026] [:error] [pid 22672:tid 22732] [client 172.161.11.137:47587] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media.php"] [unique_id "ac7rjqzrgXkFSOK0fvqVmwAAAE0"]
[Fri Apr 03 06:19:59.669143 2026] [:error] [pid 58590:tid 58613] [client 172.161.11.137:65404] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac7rj0ze_aEPDM9xEE3e3gAAARU"]
[Fri Apr 03 06:20:00.511544 2026] [:error] [pid 22673:tid 22748] [client 172.161.11.137:54074] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac7rkO-GlVDWdWxxwJCZ4wAAAII"]
[Fri Apr 03 06:20:01.593509 2026] [:error] [pid 22671:tid 22713] [client 172.161.11.137:61548] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac7rkSRuUnMW7r8hvyZXAAAAABY"]
[Fri Apr 03 06:20:02.300166 2026] [:error] [pid 22673:tid 22750] [client 172.161.11.137:65359] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac7rku-GlVDWdWxxwJCZ5gAAAIQ"]
[Fri Apr 03 06:20:03.056483 2026] [:error] [pid 22778:tid 22791] [client 172.161.11.137:38234] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admir.php"] [unique_id "ac7rk_S-q9hkdFqUjq-X1wAAAMY"]
[Fri Apr 03 06:20:03.930763 2026] [:error] [pid 22778:tid 22800] [client 172.161.11.137:43329] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admir.php"] [unique_id "ac7rk_S-q9hkdFqUjq-X2gAAAM8"]
[Fri Apr 03 06:20:04.856380 2026] [:error] [pid 22673:tid 22759] [client 172.161.11.137:61604] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admir.php"] [unique_id "ac7rlO-GlVDWdWxxwJCZ6gAAAI0"]
[Fri Apr 03 06:20:05.749139 2026] [:error] [pid 22672:tid 22723] [client 172.161.11.137:3722] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admir.php"] [unique_id "ac7rlazrgXkFSOK0fvqVpwAAAEQ"]
[Fri Apr 03 06:20:06.644306 2026] [:error] [pid 22673:tid 22756] [client 172.161.11.137:50586] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "ac7rlu-GlVDWdWxxwJCZ7gAAAIo"]
[Fri Apr 03 06:20:08.070081 2026] [:error] [pid 58590:tid 58606] [client 172.161.11.137:61571] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "ac7rmEze_aEPDM9xEE3e8QAAAQ4"]
[Fri Apr 03 06:20:08.870405 2026] [:error] [pid 22778:tid 22794] [client 172.161.11.137:32060] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "ac7rmPS-q9hkdFqUjq-X3AAAAMk"]
[Fri Apr 03 06:20:10.048775 2026] [:error] [pid 22778:tid 22809] [client 172.161.11.137:36986] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "ac7rmvS-q9hkdFqUjq-X3wAAANg"]
[Fri Apr 03 06:20:10.744915 2026] [:error] [pid 22673:tid 22770] [client 172.161.11.137:50562] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "ac7rmu-GlVDWdWxxwJCZ9wAAAJg"]
[Fri Apr 03 06:20:11.770499 2026] [:error] [pid 22673:tid 22760] [client 172.161.11.137:53148] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "ac7rm--GlVDWdWxxwJCZ-QAAAI4"]
[Fri Apr 03 06:20:12.638168 2026] [:error] [pid 22778:tid 22799] [client 172.161.11.137:58010] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "ac7rnPS-q9hkdFqUjq-X6QAAAM4"]
[Fri Apr 03 06:20:13.641108 2026] [:error] [pid 22673:tid 22766] [client 172.161.11.137:38218] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "ac7rne-GlVDWdWxxwJCZ_gAAAJQ"]
[Fri Apr 03 06:20:14.907069 2026] [:error] [pid 58590:tid 58606] [client 172.161.11.137:62965] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac7rnkze_aEPDM9xEE3e-gAAAQ4"]
[Fri Apr 03 06:20:15.986161 2026] [:error] [pid 22778:tid 22786] [client 172.161.11.137:55112] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac7rn_S-q9hkdFqUjq-X-QAAAME"]
[Fri Apr 03 06:20:17.031133 2026] [:error] [pid 22673:tid 22770] [client 172.161.11.137:36985] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac7roe-GlVDWdWxxwJCaAQAAAJg"]
[Fri Apr 03 06:20:17.818310 2026] [:error] [pid 22778:tid 22804] [client 172.161.11.137:61552] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac7rofS-q9hkdFqUjq-YAAAAANM"]
[Fri Apr 03 06:20:18.482428 2026] [:error] [pid 22671:tid 22715] [client 172.161.11.137:65383] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc.php"] [unique_id "ac7roiRuUnMW7r8hvyZXCgAAABg"]
[Fri Apr 03 06:20:19.425994 2026] [:error] [pid 22778:tid 22786] [client 172.161.11.137:65367] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc.php"] [unique_id "ac7ro_S-q9hkdFqUjq-YBAAAAME"]
[Fri Apr 03 06:20:20.268600 2026] [:error] [pid 22671:tid 22700] [client 172.161.11.137:62944] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc.php"] [unique_id "ac7rpCRuUnMW7r8hvyZXEAAAAAk"]
[Fri Apr 03 06:20:21.002151 2026] [:error] [pid 22672:tid 22720] [client 172.161.11.137:53179] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc.php"] [unique_id "ac7rpazrgXkFSOK0fvqVswAAAEE"]
[Fri Apr 03 06:20:21.850524 2026] [:error] [pid 22672:tid 22728] [client 172.161.11.137:50604] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "ac7rpazrgXkFSOK0fvqVtwAAAEk"]
[Fri Apr 03 06:20:22.583934 2026] [:error] [pid 22672:tid 22721] [client 172.161.11.137:55162] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "ac7rpqzrgXkFSOK0fvqVuQAAAEI"]
[Fri Apr 03 06:20:23.283837 2026] [:error] [pid 22778:tid 22798] [client 172.161.11.137:32014] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "ac7rp_S-q9hkdFqUjq-YDQAAAM0"]
[Fri Apr 03 06:20:24.031138 2026] [:error] [pid 22671:tid 22710] [client 172.161.11.137:32045] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "ac7rqCRuUnMW7r8hvyZXFAAAABM"]
[Fri Apr 03 06:20:24.839307 2026] [:error] [pid 22671:tid 22715] [client 172.161.11.137:36981] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "ac7rqCRuUnMW7r8hvyZXGQAAABg"]
[Fri Apr 03 06:20:25.520093 2026] [:error] [pid 58590:tid 58603] [client 172.161.11.137:59472] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "ac7rqUze_aEPDM9xEE3fEQAAAQs"]
[Fri Apr 03 06:20:26.319066 2026] [:error] [pid 22778:tid 22789] [client 172.161.11.137:53138] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "ac7rqvS-q9hkdFqUjq-YFwAAAMQ"]
[Fri Apr 03 06:20:26.884859 2026] [:error] [pid 22778:tid 22785] [client 172.161.11.137:53176] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "ac7rqvS-q9hkdFqUjq-YGQAAAMA"]
[Fri Apr 03 06:20:27.661533 2026] [:error] [pid 22778:tid 22809] [client 172.161.11.137:53176] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ac7rq_S-q9hkdFqUjq-YHwAAANg"]
[Fri Apr 03 06:20:28.761118 2026] [:error] [pid 22671:tid 22708] [client 172.161.11.137:61223] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ac7rrCRuUnMW7r8hvyZXHgAAABE"]
[Fri Apr 03 06:20:29.616057 2026] [:error] [pid 58590:tid 58607] [client 172.161.11.137:36886] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ac7rrUze_aEPDM9xEE3fFgAAAQ8"]
[Fri Apr 03 06:20:30.246290 2026] [:error] [pid 58590:tid 58609] [client 172.161.11.137:53152] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ac7rrkze_aEPDM9xEE3fGAAAARE"]
[Fri Apr 03 06:20:31.164129 2026] [:error] [pid 58590:tid 58615] [client 172.161.11.137:33910] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "ac7rr0ze_aEPDM9xEE3fHQAAARc"]
[Fri Apr 03 06:20:32.053456 2026] [:error] [pid 22778:tid 22809] [client 172.161.11.137:32003] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "ac7rsPS-q9hkdFqUjq-YKQAAANg"]
[Fri Apr 03 06:20:32.868838 2026] [:error] [pid 58590:tid 58595] [client 172.161.11.137:65361] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "ac7rsEze_aEPDM9xEE3fIwAAAQM"]
[Fri Apr 03 06:20:33.454431 2026] [:error] [pid 22778:tid 22804] [client 172.161.11.137:53181] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "ac7rsfS-q9hkdFqUjq-YMQAAANM"]
[Fri Apr 03 06:20:34.211262 2026] [:error] [pid 22673:tid 22748] [client 172.161.11.137:59138] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac7rsu-GlVDWdWxxwJCaCQAAAII"]
[Fri Apr 03 06:20:34.972872 2026] [:error] [pid 22672:tid 22727] [client 172.161.11.137:33887] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac7rsqzrgXkFSOK0fvqVvgAAAEg"]
[Fri Apr 03 06:20:35.824084 2026] [:error] [pid 22673:tid 22762] [client 172.161.11.137:42545] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac7rs--GlVDWdWxxwJCaDAAAAJA"]
[Fri Apr 03 06:20:36.629573 2026] [:error] [pid 22671:tid 22705] [client 172.161.11.137:65339] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac7rtCRuUnMW7r8hvyZXKQAAAA4"]
[Fri Apr 03 06:20:37.459995 2026] [:error] [pid 22778:tid 22803] [client 172.161.11.137:42551] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7rtfS-q9hkdFqUjq-YNwAAANI"]
[Fri Apr 03 06:20:38.030671 2026] [:error] [pid 22778:tid 22805] [client 172.161.11.137:52337] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7rtvS-q9hkdFqUjq-YOgAAANQ"]
[Fri Apr 03 06:20:38.753799 2026] [:error] [pid 22778:tid 22794] [client 172.161.11.137:59527] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7rtvS-q9hkdFqUjq-YPwAAAMk"]
[Fri Apr 03 06:20:39.453975 2026] [:error] [pid 58590:tid 58611] [client 172.161.11.137:62307] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7rt0ze_aEPDM9xEE3fKgAAARM"]
[Fri Apr 03 06:20:40.422162 2026] [:error] [pid 22778:tid 22806] [client 172.161.11.137:32078] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/content.php"] [unique_id "ac7ruPS-q9hkdFqUjq-YQQAAANU"]
[Fri Apr 03 06:20:41.087862 2026] [:error] [pid 22778:tid 22803] [client 172.161.11.137:65287] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/content.php"] [unique_id "ac7rufS-q9hkdFqUjq-YRgAAANI"]
[Fri Apr 03 06:20:42.137470 2026] [:error] [pid 22778:tid 22808] [client 172.161.11.137:32068] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/content.php"] [unique_id "ac7ruvS-q9hkdFqUjq-YSQAAANc"]
[Fri Apr 03 06:20:43.140740 2026] [:error] [pid 22778:tid 22791] [client 172.161.11.137:42621] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/content.php"] [unique_id "ac7ru_S-q9hkdFqUjq-YSwAAAMY"]
[Fri Apr 03 06:20:44.033821 2026] [:error] [pid 58590:tid 58614] [client 172.161.11.137:35041] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-configs.php"] [unique_id "ac7rvEze_aEPDM9xEE3fNQAAARY"]
[Fri Apr 03 06:20:44.883749 2026] [:error] [pid 58590:tid 58607] [client 172.161.11.137:49841] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-configs.php"] [unique_id "ac7rvEze_aEPDM9xEE3fOAAAAQ8"]
[Fri Apr 03 06:20:45.649344 2026] [:error] [pid 58590:tid 58606] [client 172.161.11.137:28781] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-configs.php"] [unique_id "ac7rvUze_aEPDM9xEE3fOwAAAQ4"]
[Fri Apr 03 06:20:46.311780 2026] [:error] [pid 22673:tid 22752] [client 172.161.11.137:32126] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-configs.php"] [unique_id "ac7rvu-GlVDWdWxxwJCaGAAAAIY"]
[Fri Apr 03 06:20:46.899707 2026] [:error] [pid 22673:tid 22747] [client 172.161.11.137:49500] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "ac7rvu-GlVDWdWxxwJCaHAAAAIE"]
[Fri Apr 03 06:20:47.628732 2026] [:error] [pid 22673:tid 22756] [client 172.161.11.137:3620] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "ac7rv--GlVDWdWxxwJCaHgAAAIo"]
[Fri Apr 03 06:20:48.691208 2026] [:error] [pid 22671:tid 22715] [client 172.161.11.137:49532] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "ac7rwCRuUnMW7r8hvyZXMwAAABg"]
[Fri Apr 03 06:20:49.454494 2026] [:error] [pid 58590:tid 58604] [client 172.161.11.137:35019] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "ac7rwUze_aEPDM9xEE3fRwAAAQw"]
[Fri Apr 03 06:20:50.680562 2026] [:error] [pid 22778:tid 22808] [client 172.161.11.137:56814] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Fri Apr 03 06:20:50.941185 2026] [:error] [pid 22778:tid 22791] [client 172.161.11.137:56814] File does not exist: /usr/local/apache/htdocs/suspended-page/v3.php
[Fri Apr 03 06:20:51.766829 2026] [:error] [pid 22778:tid 22792] [client 172.161.11.137:56814] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Fri Apr 03 06:20:52.328165 2026] [:error] [pid 22778:tid 22785] [client 172.161.11.137:56814] File does not exist: /usr/local/apache/htdocs/suspended-page/himu.php
[Fri Apr 03 06:20:52.571492 2026] [:error] [pid 22778:tid 22789] [client 172.161.11.137:56814] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Fri Apr 03 06:20:52.922840 2026] [:error] [pid 22778:tid 22803] [client 172.161.11.137:56814] File does not exist: /usr/local/apache/htdocs/suspended-page/png.php
[Fri Apr 03 06:20:53.309791 2026] [:error] [pid 22778:tid 22787] [client 172.161.11.137:56814] File does not exist: /usr/local/apache/htdocs/suspended-page/mds.php
[Fri Apr 03 06:20:53.557684 2026] [:error] [pid 22778:tid 22802] [client 172.161.11.137:56814] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Fri Apr 03 06:20:53.908025 2026] [:error] [pid 22778:tid 22800] [client 172.161.11.137:56814] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Fri Apr 03 06:20:54.145454 2026] [:error] [pid 22778:tid 22809] [client 172.161.11.137:56814] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "ac7rxvS-q9hkdFqUjq-YZwAAANg"]
[Fri Apr 03 06:20:55.116600 2026] [:error] [pid 58590:tid 58595] [client 172.161.11.137:60061] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "ac7rx0ze_aEPDM9xEE3fUwAAAQM"]
[Fri Apr 03 06:20:56.103548 2026] [:error] [pid 22673:tid 22752] [client 172.161.11.137:60041] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "ac7ryO-GlVDWdWxxwJCaKQAAAIY"]
[Fri Apr 03 06:20:56.937491 2026] [:error] [pid 22673:tid 22767] [client 172.161.11.137:53201] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "ac7ryO-GlVDWdWxxwJCaLgAAAJU"]
[Fri Apr 03 06:20:57.822651 2026] [:error] [pid 22673:tid 22749] [client 172.161.11.137:49352] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "ac7rye-GlVDWdWxxwJCaMQAAAIM"]
[Fri Apr 03 06:20:58.762971 2026] [:error] [pid 58590:tid 58611] [client 172.161.11.137:60049] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "ac7rykze_aEPDM9xEE3fYQAAARM"]
[Fri Apr 03 06:20:59.973857 2026] [:error] [pid 22778:tid 22785] [client 172.161.11.137:53217] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "ac7ry_S-q9hkdFqUjq-YbgAAAMA"]
[Fri Apr 03 06:21:00.743041 2026] [:error] [pid 22673:tid 22753] [client 172.161.11.137:37561] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "ac7rzO-GlVDWdWxxwJCaNQAAAIc"]
[Fri Apr 03 06:21:01.609899 2026] [:error] [pid 22673:tid 22757] [client 172.161.11.137:31486] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ac7rze-GlVDWdWxxwJCaNwAAAIs"]
[Fri Apr 03 06:21:02.539553 2026] [:error] [pid 58590:tid 58603] [client 172.161.11.137:43282] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ac7rzkze_aEPDM9xEE3fbgAAAQs"]
[Fri Apr 03 06:21:03.217381 2026] [:error] [pid 58590:tid 58607] [client 172.161.11.137:64509] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ac7rz0ze_aEPDM9xEE3fcAAAAQ8"]
[Fri Apr 03 06:21:04.254063 2026] [:error] [pid 22673:tid 22759] [client 172.161.11.137:26937] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ac7r0O-GlVDWdWxxwJCaOwAAAI0"]
[Fri Apr 03 06:21:04.958917 2026] [:error] [pid 58590:tid 58593] [client 172.161.11.137:55646] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ac7r0Eze_aEPDM9xEE3fdQAAAQE"]
[Fri Apr 03 06:21:05.606830 2026] [:error] [pid 58590:tid 58616] [client 172.161.11.137:43283] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ac7r0Uze_aEPDM9xEE3fdwAAARg"]
[Fri Apr 03 06:21:06.237020 2026] [:error] [pid 58590:tid 58599] [client 172.161.11.137:3180] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ac7r0kze_aEPDM9xEE3ffQAAAQc"]
[Fri Apr 03 06:21:07.036550 2026] [:error] [pid 58590:tid 58610] [client 172.161.11.137:35162] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ac7r00ze_aEPDM9xEE3fggAAARI"]
[Fri Apr 03 06:21:07.685525 2026] [:error] [pid 22778:tid 22792] [client 172.161.11.137:47422] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "ac7r0_S-q9hkdFqUjq-YeAAAAMc"]
[Fri Apr 03 06:21:08.431077 2026] [:error] [pid 22673:tid 22761] [client 172.161.11.137:27424] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "ac7r1O-GlVDWdWxxwJCaQgAAAI8"]
[Fri Apr 03 06:21:09.359095 2026] [:error] [pid 58590:tid 58602] [client 172.161.11.137:29293] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "ac7r1Uze_aEPDM9xEE3fhAAAAQo"]
[Fri Apr 03 06:21:10.259905 2026] [:error] [pid 22778:tid 22800] [client 172.161.11.137:26887] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "ac7r1vS-q9hkdFqUjq-YfwAAAM8"]
[Fri Apr 03 06:21:10.892635 2026] [:error] [pid 22673:tid 22767] [client 172.161.11.137:33224] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ac7r1u-GlVDWdWxxwJCaSAAAAJU"]
[Fri Apr 03 06:21:13.065633 2026] [:error] [pid 22672:tid 22740] [client 172.161.11.137:35140] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ac7r2azrgXkFSOK0fvqV0QAAAFU"]
[Fri Apr 03 06:21:14.052919 2026] [:error] [pid 22778:tid 22807] [client 172.161.11.137:30313] [client 172.161.11.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ac7r2vS-q9hkdFqUjq-YiAAAANY"]
[Fri Apr 03 06:22:37.492693 2026] [:error] [pid 22671:tid 22691] [client 4.232.187.184:33162] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Fri Apr 03 06:22:37.729320 2026] [:error] [pid 22671:tid 22714] [client 4.232.187.184:33162] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri Apr 03 06:22:38.076914 2026] [:error] [pid 22671:tid 22708] [client 4.232.187.184:33162] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Fri Apr 03 06:22:38.477980 2026] [:error] [pid 22671:tid 22701] [client 4.232.187.184:33162] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Fri Apr 03 06:22:38.743643 2026] [:error] [pid 22671:tid 22710] [client 4.232.187.184:33162] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Fri Apr 03 06:22:39.038900 2026] [:error] [pid 22671:tid 22715] [client 4.232.187.184:33162] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Fri Apr 03 06:22:39.658950 2026] [:error] [pid 22671:tid 22698] [client 4.232.187.184:33162] File does not exist: /usr/local/apache/htdocs/suspended-page/wolv2.php
[Fri Apr 03 06:22:40.031341 2026] [:error] [pid 22671:tid 22704] [client 4.232.187.184:33162] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Fri Apr 03 06:22:40.267774 2026] [:error] [pid 22671:tid 22696] [client 4.232.187.184:33162] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Fri Apr 03 06:22:40.507804 2026] [:error] [pid 22671:tid 22713] [client 4.232.187.184:33162] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac7sMCRuUnMW7r8hvyZXpgAAABY"]
[Fri Apr 03 06:22:41.588810 2026] [:error] [pid 22671:tid 22703] [client 4.232.187.184:57390] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac7sMSRuUnMW7r8hvyZXqAAAAAw"]
[Fri Apr 03 06:22:42.362014 2026] [:error] [pid 22778:tid 22798] [client 4.232.187.184:57381] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac7sMvS-q9hkdFqUjq-ZJAAAAM0"]
[Fri Apr 03 06:22:43.658128 2026] [:error] [pid 22672:tid 22720] [client 4.232.187.184:33170] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac7sM6zrgXkFSOK0fvqWKAAAAEE"]
[Fri Apr 03 06:22:44.288586 2026] [:error] [pid 22673:tid 22768] [client 4.232.187.184:45521] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "ac7sNO-GlVDWdWxxwJCa2gAAAJY"]
[Fri Apr 03 06:22:45.297709 2026] [:error] [pid 58590:tid 58605] [client 4.232.187.184:48589] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "ac7sNUze_aEPDM9xEE3grgAAAQ0"]
[Fri Apr 03 06:22:46.173031 2026] [:error] [pid 22672:tid 22740] [client 4.232.187.184:35690] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "ac7sNqzrgXkFSOK0fvqWLQAAAFU"]
[Fri Apr 03 06:22:46.961269 2026] [:error] [pid 22673:tid 22769] [client 4.232.187.184:33180] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "ac7sNu-GlVDWdWxxwJCa3gAAAJc"]
[Fri Apr 03 06:22:47.688291 2026] [:error] [pid 22672:tid 22743] [client 4.232.187.184:32042] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ac7sN6zrgXkFSOK0fvqWLwAAAFg"]
[Fri Apr 03 06:22:48.481091 2026] [:error] [pid 22778:tid 22795] [client 4.232.187.184:38830] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ac7sOPS-q9hkdFqUjq-ZNQAAAMo"]
[Fri Apr 03 06:22:49.380547 2026] [:error] [pid 22673:tid 22753] [client 4.232.187.184:33176] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ac7sOe-GlVDWdWxxwJCa3wAAAIc"]
[Fri Apr 03 06:22:50.072594 2026] [:error] [pid 58590:tid 58605] [client 4.232.187.184:48430] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ac7sOkze_aEPDM9xEE3gvAAAAQ0"]
[Fri Apr 03 06:22:50.781952 2026] [:error] [pid 22778:tid 22805] [client 4.232.187.184:3246] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ac7sOvS-q9hkdFqUjq-ZOAAAANQ"]
[Fri Apr 03 06:22:51.533343 2026] [:error] [pid 58590:tid 58595] [client 4.232.187.184:48487] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ac7sO0ze_aEPDM9xEE3gxAAAAQM"]
[Fri Apr 03 06:22:52.299620 2026] [:error] [pid 58590:tid 58594] [client 4.232.187.184:39569] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ac7sPEze_aEPDM9xEE3gxgAAAQI"]
[Fri Apr 03 06:22:53.059659 2026] [:error] [pid 58590:tid 58592] [client 4.232.187.184:61597] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ac7sPUze_aEPDM9xEE3gygAAAQA"]
[Fri Apr 03 06:22:53.910129 2026] [:error] [pid 22673:tid 22761] [client 4.232.187.184:60693] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ac7sPe-GlVDWdWxxwJCa4QAAAI8"]
[Fri Apr 03 06:22:55.117512 2026] [:error] [pid 58590:tid 58599] [client 4.232.187.184:30041] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ac7sP0ze_aEPDM9xEE3g1wAAAQc"]
[Fri Apr 03 06:22:56.687969 2026] [:error] [pid 22671:tid 22693] [client 4.232.187.184:29040] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ac7sQCRuUnMW7r8hvyZXtwAAAAI"]
[Fri Apr 03 06:22:58.121652 2026] [:error] [pid 22672:tid 22740] [client 4.232.187.184:3595] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ac7sQqzrgXkFSOK0fvqWOgAAAFU"]
[Fri Apr 03 06:22:59.134026 2026] [:error] [pid 22778:tid 22801] [client 4.232.187.184:28183] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac7sQ_S-q9hkdFqUjq-ZQQAAANA"]
[Fri Apr 03 06:23:00.335148 2026] [:error] [pid 22673:tid 22749] [client 4.232.187.184:62882] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac7sRO-GlVDWdWxxwJCa5gAAAIM"]
[Fri Apr 03 06:23:01.156592 2026] [:error] [pid 22671:tid 22699] [client 4.232.187.184:30055] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac7sRSRuUnMW7r8hvyZXxwAAAAg"]
[Fri Apr 03 06:23:02.282086 2026] [:error] [pid 22778:tid 22792] [client 4.232.187.184:41833] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac7sRvS-q9hkdFqUjq-ZTAAAAMc"]
[Fri Apr 03 06:23:04.758811 2026] [:error] [pid 58590:tid 58592] [client 4.232.187.184:52117] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ac7sSEze_aEPDM9xEE3g8QAAAQA"]
[Fri Apr 03 06:23:06.401090 2026] [:error] [pid 22778:tid 22802] [client 4.232.187.184:35990] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ac7sSvS-q9hkdFqUjq-ZVgAAANE"]
[Fri Apr 03 06:23:07.966786 2026] [:error] [pid 22671:tid 22708] [client 4.232.187.184:40452] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ac7sSyRuUnMW7r8hvyZX1wAAABE"]
[Fri Apr 03 06:23:08.951976 2026] [:error] [pid 58590:tid 58613] [client 4.232.187.184:62496] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ac7sTEze_aEPDM9xEE3g8gAAARU"]
[Fri Apr 03 06:23:10.580183 2026] [:error] [pid 22778:tid 22801] [client 4.232.187.184:27075] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ac7sTvS-q9hkdFqUjq-ZdwAAANA"]
[Fri Apr 03 06:23:11.680370 2026] [:error] [pid 58590:tid 58615] [client 4.232.187.184:34361] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ac7sT0ze_aEPDM9xEE3g9wAAARc"]
[Fri Apr 03 06:23:12.395048 2026] [:error] [pid 58590:tid 58610] [client 4.232.187.184:41364] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ac7sUEze_aEPDM9xEE3g_AAAARI"]
[Fri Apr 03 06:23:13.389024 2026] [:error] [pid 58590:tid 58595] [client 4.232.187.184:63666] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ac7sUUze_aEPDM9xEE3hAAAAAQM"]
[Fri Apr 03 06:23:14.387128 2026] [:error] [pid 58590:tid 58596] [client 4.232.187.184:44590] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "ac7sUkze_aEPDM9xEE3hCQAAAQQ"]
[Fri Apr 03 06:23:15.348556 2026] [:error] [pid 58590:tid 58600] [client 4.232.187.184:60332] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "ac7sU0ze_aEPDM9xEE3hDwAAAQg"]
[Fri Apr 03 06:23:16.434856 2026] [:error] [pid 58590:tid 58610] [client 4.232.187.184:42540] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "ac7sVEze_aEPDM9xEE3hFwAAARI"]
[Fri Apr 03 06:23:17.781008 2026] [:error] [pid 22672:tid 22724] [client 4.232.187.184:42687] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "ac7sVazrgXkFSOK0fvqWWgAAAEU"]
[Fri Apr 03 06:23:18.444626 2026] [:error] [pid 22672:tid 22740] [client 4.232.187.184:37796] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "ac7sVqzrgXkFSOK0fvqWXAAAAFU"]
[Fri Apr 03 06:23:19.202855 2026] [:error] [pid 58590:tid 58606] [client 4.232.187.184:37791] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "ac7sV0ze_aEPDM9xEE3hHAAAAQ4"]
[Fri Apr 03 06:23:19.858522 2026] [:error] [pid 22671:tid 22700] [client 4.232.187.184:42674] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "ac7sVyRuUnMW7r8hvyZX2QAAAAk"]
[Fri Apr 03 06:23:20.621692 2026] [:error] [pid 22673:tid 22751] [client 4.232.187.184:51238] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "ac7sWO-GlVDWdWxxwJCbCQAAAIU"]
[Fri Apr 03 06:23:21.245075 2026] [:error] [pid 22778:tid 22808] [client 4.232.187.184:42647] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "ac7sWfS-q9hkdFqUjq-ZgAAAANc"]
[Fri Apr 03 06:23:22.026595 2026] [:error] [pid 22672:tid 22727] [client 4.232.187.184:37787] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "ac7sWqzrgXkFSOK0fvqWZAAAAEg"]
[Fri Apr 03 06:23:22.638208 2026] [:error] [pid 22672:tid 22721] [client 4.232.187.184:37789] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "ac7sWqzrgXkFSOK0fvqWZwAAAEI"]
[Fri Apr 03 06:23:23.356605 2026] [:error] [pid 22672:tid 22736] [client 4.232.187.184:56372] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "ac7sW6zrgXkFSOK0fvqWbwAAAFE"]
[Fri Apr 03 06:23:24.208135 2026] [:error] [pid 22673:tid 22758] [client 4.232.187.184:36529] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac7sXO-GlVDWdWxxwJCbDQAAAIw"]
[Fri Apr 03 06:23:25.032181 2026] [:error] [pid 22673:tid 22770] [client 4.232.187.184:37838] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac7sXe-GlVDWdWxxwJCbEQAAAJg"]
[Fri Apr 03 06:23:26.024029 2026] [:error] [pid 22778:tid 22809] [client 4.232.187.184:46119] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac7sXvS-q9hkdFqUjq-ZhgAAANg"]
[Fri Apr 03 06:23:26.747392 2026] [:error] [pid 22673:tid 22757] [client 4.232.187.184:37621] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac7sXu-GlVDWdWxxwJCbFQAAAIs"]
[Fri Apr 03 06:23:27.495375 2026] [:error] [pid 22673:tid 22768] [client 4.232.187.184:47363] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ac7sX--GlVDWdWxxwJCbGQAAAJY"]
[Fri Apr 03 06:23:28.238167 2026] [:error] [pid 22673:tid 22764] [client 4.232.187.184:54591] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ac7sYO-GlVDWdWxxwJCbGwAAAJI"]
[Fri Apr 03 06:23:29.122122 2026] [:error] [pid 22671:tid 22704] [client 4.232.187.184:42095] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ac7sYSRuUnMW7r8hvyZX3gAAAA0"]
[Fri Apr 03 06:23:30.064318 2026] [:error] [pid 58590:tid 58594] [client 4.232.187.184:56117] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ac7sYkze_aEPDM9xEE3hLQAAAQI"]
[Fri Apr 03 06:23:30.658152 2026] [:error] [pid 22673:tid 22757] [client 4.232.187.184:54941] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ac7sYu-GlVDWdWxxwJCbIAAAAIs"]
[Fri Apr 03 06:23:31.656717 2026] [:error] [pid 22672:tid 22722] [client 4.232.187.184:47360] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ac7sY6zrgXkFSOK0fvqWfgAAAEM"]
[Fri Apr 03 06:23:32.377424 2026] [:error] [pid 22671:tid 22713] [client 4.232.187.184:3865] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ac7sZCRuUnMW7r8hvyZX4AAAABY"]
[Fri Apr 03 06:23:33.111895 2026] [:error] [pid 58590:tid 58606] [client 4.232.187.184:55712] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ac7sZUze_aEPDM9xEE3hNAAAAQ4"]
[Fri Apr 03 06:23:33.949311 2026] [:error] [pid 58590:tid 58599] [client 4.232.187.184:35733] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ac7sZUze_aEPDM9xEE3hNwAAAQc"]
[Fri Apr 03 06:23:34.671460 2026] [:error] [pid 22673:tid 22770] [client 4.232.187.184:63297] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ac7sZu-GlVDWdWxxwJCbKgAAAJg"]
[Fri Apr 03 06:23:35.388841 2026] [:error] [pid 58590:tid 58600] [client 4.232.187.184:38861] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ac7sZ0ze_aEPDM9xEE3hPAAAAQg"]
[Fri Apr 03 06:23:36.007452 2026] [:error] [pid 58590:tid 58607] [client 4.232.187.184:59531] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ac7saEze_aEPDM9xEE3hQQAAAQ8"]
[Fri Apr 03 06:23:36.884039 2026] [:error] [pid 58590:tid 58601] [client 4.232.187.184:35626] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "ac7saEze_aEPDM9xEE3hRQAAAQk"]
[Fri Apr 03 06:23:37.467169 2026] [:error] [pid 58590:tid 58600] [client 4.232.187.184:60362] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "ac7saUze_aEPDM9xEE3hSwAAAQg"]
[Fri Apr 03 06:23:38.415373 2026] [:error] [pid 58590:tid 58599] [client 4.232.187.184:34970] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "ac7sakze_aEPDM9xEE3hTwAAAQc"]
[Fri Apr 03 06:23:39.051850 2026] [:error] [pid 22671:tid 22710] [client 4.232.187.184:54534] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "ac7sayRuUnMW7r8hvyZX6wAAABM"]
[Fri Apr 03 06:23:39.974111 2026] [:error] [pid 58590:tid 58600] [client 4.232.187.184:33981] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nope.php"] [unique_id "ac7sa0ze_aEPDM9xEE3hVwAAAQg"]
[Fri Apr 03 06:23:40.957192 2026] [:error] [pid 22671:tid 22715] [client 4.232.187.184:62996] File does not exist: /usr/local/apache/htdocs/suspended-page/nope.php
[Fri Apr 03 06:23:41.322787 2026] [:error] [pid 22671:tid 22713] [client 4.232.187.184:62996] File does not exist: /usr/local/apache/htdocs/suspended-page/js.php
[Fri Apr 03 06:23:41.601391 2026] [:error] [pid 22671:tid 22697] [client 4.232.187.184:62996] [client 4.232.187.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ac7sbSRuUnMW7r8hvyZX7wAAAAY"]
[Fri Apr 03 06:23:42.265501 2026] [:error] [pid 22778:tid 22809] [client 4.232.187.184:60377] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Fri Apr 03 06:23:42.582259 2026] [:error] [pid 22778:tid 22802] [client 4.232.187.184:60377] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Apr 03 06:23:42.823352 2026] [:error] [pid 22778:tid 22805] [client 4.232.187.184:60377] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Apr 03 06:23:43.143504 2026] [:error] [pid 22778:tid 22807] [client 4.232.187.184:60377] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Fri Apr 03 06:23:43.385747 2026] [:error] [pid 22778:tid 22785] [client 4.232.187.184:60377] File does not exist: /usr/local/apache/htdocs/suspended-page/wfile.php
[Fri Apr 03 06:23:43.633052 2026] [:error] [pid 22778:tid 22796] [client 4.232.187.184:60377] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Fri Apr 03 06:23:44.049915 2026] [:error] [pid 22778:tid 22793] [client 4.232.187.184:60377] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Fri Apr 03 06:23:44.287498 2026] [:error] [pid 22778:tid 22790] [client 4.232.187.184:60377] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri Apr 03 06:23:44.548695 2026] [:error] [pid 22778:tid 22804] [client 4.232.187.184:60377] [client 4.232.187.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "ac7scPS-q9hkdFqUjq-ZsAAAANM"]
[Fri Apr 03 06:23:45.244429 2026] [:error] [pid 58590:tid 58609] [client 4.232.187.184:62844] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php
[Fri Apr 03 06:23:45.507173 2026] [:error] [pid 58590:tid 58612] [client 4.232.187.184:62844] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac7scUze_aEPDM9xEE3haAAAARQ"]
[Fri Apr 03 06:23:46.130639 2026] [:error] [pid 22672:tid 22734] [client 4.232.187.184:59580] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac7scqzrgXkFSOK0fvqWigAAAE8"]
[Fri Apr 03 06:23:46.702843 2026] [:error] [pid 22778:tid 22808] [client 4.232.187.184:31604] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac7scvS-q9hkdFqUjq-ZsQAAANc"]
[Fri Apr 03 06:23:47.353338 2026] [:error] [pid 22778:tid 22800] [client 4.232.187.184:54221] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac7sc_S-q9hkdFqUjq-ZtAAAAM8"]
[Fri Apr 03 06:23:48.079036 2026] [:error] [pid 58590:tid 58614] [client 4.232.187.184:62991] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "ac7sdEze_aEPDM9xEE3hbgAAARY"]
[Fri Apr 03 06:23:48.721478 2026] [:error] [pid 22673:tid 22751] [client 4.232.187.184:63324] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "ac7sdO-GlVDWdWxxwJCbPwAAAIU"]
[Fri Apr 03 06:23:49.412492 2026] [:error] [pid 22673:tid 22749] [client 4.232.187.184:46194] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "ac7sde-GlVDWdWxxwJCbRAAAAIM"]
[Fri Apr 03 06:23:49.907858 2026] [:error] [pid 22778:tid 22798] [client 4.232.187.184:58739] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "ac7sdfS-q9hkdFqUjq-ZuwAAAM0"]
[Fri Apr 03 06:23:50.632707 2026] [:error] [pid 22671:tid 22698] [client 4.232.187.184:43345] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "ac7sdiRuUnMW7r8hvyZX-AAAAAc"]
[Fri Apr 03 06:23:51.206128 2026] [:error] [pid 22671:tid 22701] [client 4.232.187.184:56909] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "ac7sdyRuUnMW7r8hvyZX_QAAAAo"]
[Fri Apr 03 06:23:51.766040 2026] [:error] [pid 22671:tid 22705] [client 4.232.187.184:54215] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "ac7sdyRuUnMW7r8hvyZYAwAAAA4"]
[Fri Apr 03 06:23:52.354582 2026] [:error] [pid 22778:tid 22804] [client 4.232.187.184:63351] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "ac7sePS-q9hkdFqUjq-ZwAAAANM"]
[Fri Apr 03 06:23:52.884901 2026] [:error] [pid 22673:tid 22766] [client 4.232.187.184:35618] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "ac7seO-GlVDWdWxxwJCbTwAAAJQ"]
[Fri Apr 03 06:23:53.457469 2026] [:error] [pid 22673:tid 22758] [client 4.232.187.184:33966] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "ac7see-GlVDWdWxxwJCbUwAAAIw"]
[Fri Apr 03 06:23:54.087515 2026] [:error] [pid 22671:tid 22699] [client 4.232.187.184:33926] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "ac7seiRuUnMW7r8hvyZYCQAAAAg"]
[Fri Apr 03 06:23:54.664266 2026] [:error] [pid 22778:tid 22792] [client 4.232.187.184:60369] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "ac7sevS-q9hkdFqUjq-ZwwAAAMc"]
[Fri Apr 03 06:23:55.476462 2026] [:error] [pid 22671:tid 22712] [client 4.232.187.184:56283] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ac7seyRuUnMW7r8hvyZYCgAAABU"]
[Fri Apr 03 06:23:56.037947 2026] [:error] [pid 22778:tid 22788] [client 4.232.187.184:58720] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ac7sfPS-q9hkdFqUjq-ZxgAAAMM"]
[Fri Apr 03 06:23:56.521160 2026] [:error] [pid 58590:tid 58602] [client 4.232.187.184:33969] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ac7sfEze_aEPDM9xEE3hgQAAAQo"]
[Fri Apr 03 06:23:57.330916 2026] [:error] [pid 58590:tid 58615] [client 4.232.187.184:62997] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ac7sfUze_aEPDM9xEE3hiAAAARc"]
[Fri Apr 03 06:23:57.927085 2026] [:error] [pid 58590:tid 58608] [client 4.232.187.184:58694] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "ac7sfUze_aEPDM9xEE3hkAAAARA"]
[Fri Apr 03 06:23:58.553556 2026] [:error] [pid 22671:tid 22714] [client 4.232.187.184:55375] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "ac7sfiRuUnMW7r8hvyZYDQAAABc"]
[Fri Apr 03 06:23:59.130849 2026] [:error] [pid 58590:tid 58616] [client 4.232.187.184:61833] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "ac7sf0ze_aEPDM9xEE3hmQAAARg"]
[Fri Apr 03 06:23:59.843952 2026] [:error] [pid 22671:tid 22711] [client 4.232.187.184:52590] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "ac7sfyRuUnMW7r8hvyZYEgAAABQ"]
[Fri Apr 03 06:24:00.334629 2026] [:error] [pid 22671:tid 22708] [client 4.232.187.184:52598] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ac7sgCRuUnMW7r8hvyZYFAAAABE"]
[Fri Apr 03 06:24:00.876337 2026] [:error] [pid 22778:tid 22805] [client 4.232.187.184:51742] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ac7sgPS-q9hkdFqUjq-ZyQAAANQ"]
[Fri Apr 03 06:24:01.584559 2026] [:error] [pid 58590:tid 58612] [client 4.232.187.184:62977] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ac7sgUze_aEPDM9xEE3hpQAAARQ"]
[Fri Apr 03 06:24:02.143585 2026] [:error] [pid 22778:tid 22804] [client 4.232.187.184:54233] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ac7sgvS-q9hkdFqUjq-ZzgAAANM"]
[Fri Apr 03 06:24:02.760620 2026] [:error] [pid 58590:tid 58595] [client 4.232.187.184:35747] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-x7.php"] [unique_id "ac7sgkze_aEPDM9xEE3hrAAAAQM"]
[Fri Apr 03 06:24:03.363686 2026] [:error] [pid 58590:tid 58614] [client 4.232.187.184:56295] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-x7.php"] [unique_id "ac7sg0ze_aEPDM9xEE3hrwAAARY"]
[Fri Apr 03 06:24:04.457486 2026] [:error] [pid 22672:tid 22742] [client 4.232.187.184:54239] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-x7.php"] [unique_id "ac7shKzrgXkFSOK0fvqWngAAAFc"]
[Fri Apr 03 06:24:04.988431 2026] [:error] [pid 22672:tid 22727] [client 4.232.187.184:61881] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-x7.php"] [unique_id "ac7shKzrgXkFSOK0fvqWoAAAAEg"]
[Fri Apr 03 06:24:05.779869 2026] [:error] [pid 22671:tid 22714] [client 4.232.187.184:60384] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/log.php"] [unique_id "ac7shSRuUnMW7r8hvyZYGwAAABc"]
[Fri Apr 03 06:24:06.459095 2026] [:error] [pid 22672:tid 22735] [client 4.232.187.184:61844] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/log.php"] [unique_id "ac7shqzrgXkFSOK0fvqWoQAAAFA"]
[Fri Apr 03 06:24:07.202398 2026] [:error] [pid 58590:tid 58613] [client 4.232.187.184:42560] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/log.php"] [unique_id "ac7sh0ze_aEPDM9xEE3hyQAAARU"]
[Fri Apr 03 06:24:07.929975 2026] [:error] [pid 22673:tid 22753] [client 4.232.187.184:61839] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/log.php"] [unique_id "ac7sh--GlVDWdWxxwJCbZQAAAIc"]
[Fri Apr 03 06:24:08.563907 2026] [:error] [pid 22778:tid 22798] [client 4.232.187.184:52583] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "ac7siPS-q9hkdFqUjq-Z1gAAAM0"]
[Fri Apr 03 06:24:09.213016 2026] [:error] [pid 22672:tid 22737] [client 4.232.187.184:49284] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "ac7siazrgXkFSOK0fvqWowAAAFI"]
[Fri Apr 03 06:24:10.049009 2026] [:error] [pid 22778:tid 22790] [client 4.232.187.184:62818] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "ac7sivS-q9hkdFqUjq-Z2gAAAMU"]
[Fri Apr 03 06:24:10.634118 2026] [:error] [pid 22778:tid 22785] [client 4.232.187.184:52841] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "ac7sivS-q9hkdFqUjq-Z3wAAAMA"]
[Fri Apr 03 06:24:11.287771 2026] [:error] [pid 22672:tid 22734] [client 4.232.187.184:60407] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "ac7si6zrgXkFSOK0fvqWqAAAAE8"]
[Fri Apr 03 06:24:12.040914 2026] [:error] [pid 22671:tid 22692] [client 4.232.187.184:58724] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "ac7sjCRuUnMW7r8hvyZYHwAAAAE"]
[Fri Apr 03 06:24:13.763282 2026] [:error] [pid 58590:tid 58611] [client 4.232.187.184:31537] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "ac7sjUze_aEPDM9xEE3h5wAAARM"]
[Fri Apr 03 06:24:14.791544 2026] [:error] [pid 22778:tid 22795] [client 4.232.187.184:63157] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "ac7sjvS-q9hkdFqUjq-Z9QAAAMo"]
[Fri Apr 03 06:24:15.477602 2026] [:error] [pid 22673:tid 22763] [client 4.232.187.184:43386] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ac7sj--GlVDWdWxxwJCbbgAAAJE"]
[Fri Apr 03 06:24:16.137475 2026] [:error] [pid 58590:tid 58614] [client 4.232.187.184:52823] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ac7skEze_aEPDM9xEE3h8AAAARY"]
[Fri Apr 03 06:24:16.766589 2026] [:error] [pid 22778:tid 22801] [client 4.232.187.184:63602] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ac7skPS-q9hkdFqUjq-Z-QAAANA"]
[Fri Apr 03 06:24:17.397637 2026] [:error] [pid 58590:tid 58599] [client 4.232.187.184:61825] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ac7skUze_aEPDM9xEE3h8gAAAQc"]
[Fri Apr 03 06:24:18.341907 2026] [:error] [pid 22671:tid 22696] [client 4.232.187.184:51773] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "ac7skiRuUnMW7r8hvyZYIwAAAAU"]
[Fri Apr 03 06:24:18.865795 2026] [:error] [pid 58590:tid 58612] [client 4.232.187.184:54457] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "ac7skkze_aEPDM9xEE3h8wAAARQ"]
[Fri Apr 03 06:24:19.485608 2026] [:error] [pid 58590:tid 58605] [client 4.232.187.184:60368] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "ac7sk0ze_aEPDM9xEE3h9wAAAQ0"]
[Fri Apr 03 06:24:21.992731 2026] [:error] [pid 22673:tid 22755] [client 4.232.187.184:47244] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "ac7sle-GlVDWdWxxwJCbdgAAAIk"]
[Fri Apr 03 06:24:27.049769 2026] [:error] [pid 22672:tid 22743] [client 4.232.187.184:59932] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "ac7sm6zrgXkFSOK0fvqWvgAAAFg"]
[Fri Apr 03 06:25:55.204839 2026] [:error] [pid 22672:tid 22730] [client 4.232.187.184:48546] [client 4.232.187.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ac7s86zrgXkFSOK0fvqXPgAAAEs"]
[Fri Apr 03 06:25:58.664642 2026] [:error] [pid 22778:tid 22802] [client 4.232.187.184:52604] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Fri Apr 03 06:25:58.900376 2026] [:error] [pid 22778:tid 22797] [client 4.232.187.184:52604] File does not exist: /usr/local/apache/htdocs/suspended-page/about3.php
[Fri Apr 03 06:25:59.136689 2026] [:error] [pid 22778:tid 22791] [client 4.232.187.184:52604] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Apr 03 06:25:59.374208 2026] [:error] [pid 22778:tid 22793] [client 4.232.187.184:52604] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Apr 03 06:25:59.610148 2026] [:error] [pid 22778:tid 22792] [client 4.232.187.184:52604] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Apr 03 06:25:59.992653 2026] [:error] [pid 22778:tid 22807] [client 4.232.187.184:52604] [client 4.232.187.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "ac7s9_S-q9hkdFqUjq-apQAAANY"]
[Fri Apr 03 06:26:00.971201 2026] [:error] [pid 58590:tid 58596] [client 4.232.187.184:59911] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Fri Apr 03 06:26:01.298820 2026] [:error] [pid 58590:tid 58600] [client 4.232.187.184:59911] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Fri Apr 03 06:26:01.641847 2026] [:error] [pid 58590:tid 58603] [client 4.232.187.184:59911] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Fri Apr 03 06:26:02.165550 2026] [:error] [pid 58590:tid 58592] [client 4.232.187.184:59911] [client 4.232.187.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "ac7s-kze_aEPDM9xEE3jZAAAAQA"]
[Fri Apr 03 06:26:02.865717 2026] [:error] [pid 58590:tid 58608] [client 4.232.187.184:32789] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Fri Apr 03 06:26:03.099377 2026] [:error] [pid 58590:tid 58603] [client 4.232.187.184:32789] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "ac7s-0ze_aEPDM9xEE3jbQAAAQs"]
[Fri Apr 03 06:26:03.843821 2026] [:error] [pid 22778:tid 22793] [client 4.232.187.184:43816] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "ac7s-_S-q9hkdFqUjq-asAAAAMg"]
[Fri Apr 03 06:26:04.681505 2026] [:error] [pid 22778:tid 22801] [client 4.232.187.184:59960] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "ac7s_PS-q9hkdFqUjq-asgAAANA"]
[Fri Apr 03 06:26:05.456893 2026] [:error] [pid 58590:tid 58605] [client 4.232.187.184:63145] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "ac7s_Uze_aEPDM9xEE3jjgAAAQ0"]
[Fri Apr 03 06:26:06.366979 2026] [:error] [pid 22671:tid 22695] [client 4.232.187.184:59904] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/filemanager.php"] [unique_id "ac7s_iRuUnMW7r8hvyZYiwAAAAQ"]
[Fri Apr 03 06:26:07.232600 2026] [:error] [pid 58590:tid 58610] [client 4.232.187.184:40177] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/filemanager.php"] [unique_id "ac7s_0ze_aEPDM9xEE3jmAAAARI"]
[Fri Apr 03 06:26:07.989823 2026] [:error] [pid 22671:tid 22707] [client 4.232.187.184:50025] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/filemanager.php"] [unique_id "ac7s_yRuUnMW7r8hvyZYjQAAABA"]
[Fri Apr 03 06:26:09.090275 2026] [:error] [pid 22672:tid 22742] [client 4.232.187.184:52560] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/filemanager.php"] [unique_id "ac7tAazrgXkFSOK0fvqXQwAAAFc"]
[Fri Apr 03 06:26:10.532530 2026] [:error] [pid 22778:tid 22801] [client 4.232.187.184:52837] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac7tAvS-q9hkdFqUjq-awgAAANA"]
[Fri Apr 03 06:26:11.790147 2026] [:error] [pid 22673:tid 22755] [client 4.232.187.184:27055] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac7tA--GlVDWdWxxwJCcOwAAAIk"]
[Fri Apr 03 06:26:13.310774 2026] [:error] [pid 22673:tid 22766] [client 4.232.187.184:51557] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac7tBe-GlVDWdWxxwJCcQgAAAJQ"]
[Fri Apr 03 06:26:15.372003 2026] [:error] [pid 58590:tid 58613] [client 4.232.187.184:3724] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac7tB0ze_aEPDM9xEE3j2wAAARU"]
[Fri Apr 03 06:26:16.303161 2026] [:error] [pid 58590:tid 58605] [client 4.232.187.184:49343] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dlu.php"] [unique_id "ac7tCEze_aEPDM9xEE3j4gAAAQ0"]
[Fri Apr 03 06:26:17.373906 2026] [:error] [pid 22778:tid 22785] [client 4.232.187.184:37140] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dlu.php"] [unique_id "ac7tCfS-q9hkdFqUjq-a1wAAAMA"]
[Fri Apr 03 06:26:18.581130 2026] [:error] [pid 58590:tid 58608] [client 4.232.187.184:37169] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dlu.php"] [unique_id "ac7tCkze_aEPDM9xEE3j8QAAARA"]
[Fri Apr 03 06:26:19.436734 2026] [:error] [pid 22673:tid 22767] [client 4.232.187.184:36774] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dlu.php"] [unique_id "ac7tC--GlVDWdWxxwJCcSAAAAJU"]
[Fri Apr 03 06:26:20.984223 2026] [:error] [pid 22778:tid 22793] [client 4.232.187.184:37136] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ac7tDPS-q9hkdFqUjq-a4gAAAMg"]
[Fri Apr 03 06:26:22.147933 2026] [:error] [pid 22671:tid 22695] [client 4.232.187.184:40188] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ac7tDiRuUnMW7r8hvyZYrAAAAAQ"]
[Fri Apr 03 06:26:23.575958 2026] [:error] [pid 22778:tid 22786] [client 4.232.187.184:52545] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ac7tD_S-q9hkdFqUjq-a6wAAAME"]
[Fri Apr 03 06:26:24.968455 2026] [:error] [pid 22673:tid 22749] [client 4.232.187.184:40143] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ac7tEO-GlVDWdWxxwJCcUgAAAIM"]
[Fri Apr 03 06:26:27.348655 2026] [:error] [pid 22672:tid 22731] [client 4.232.187.184:32116] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "ac7tE6zrgXkFSOK0fvqXWwAAAEw"]
[Fri Apr 03 06:26:28.469662 2026] [:error] [pid 22671:tid 22711] [client 4.232.187.184:31522] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "ac7tFCRuUnMW7r8hvyZYwwAAABQ"]
[Fri Apr 03 06:26:29.890961 2026] [:error] [pid 22672:tid 22730] [client 4.232.187.184:50466] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "ac7tFazrgXkFSOK0fvqXZgAAAEs"]
[Fri Apr 03 06:26:30.998345 2026] [:error] [pid 22673:tid 22767] [client 4.232.187.184:44018] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "ac7tFu-GlVDWdWxxwJCcVwAAAJU"]
[Fri Apr 03 06:26:32.109652 2026] [:error] [pid 22671:tid 22715] [client 4.232.187.184:43766] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ac7tGCRuUnMW7r8hvyZYygAAABg"]
[Fri Apr 03 06:26:33.518865 2026] [:error] [pid 58590:tid 58609] [client 4.232.187.184:40190] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ac7tGUze_aEPDM9xEE3kCQAAARE"]
[Fri Apr 03 06:26:34.376776 2026] [:error] [pid 58590:tid 58601] [client 4.232.187.184:36750] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ac7tGkze_aEPDM9xEE3kDgAAAQk"]
[Fri Apr 03 06:26:35.269453 2026] [:error] [pid 22672:tid 22735] [client 4.232.187.184:37530] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ac7tG6zrgXkFSOK0fvqXbAAAAFA"]
[Fri Apr 03 06:26:36.186936 2026] [:error] [pid 22671:tid 22697] [client 4.232.187.184:59915] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "ac7tHCRuUnMW7r8hvyZY0gAAAAY"]
[Fri Apr 03 06:26:37.224005 2026] [:error] [pid 58590:tid 58601] [client 4.232.187.184:52849] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "ac7tHUze_aEPDM9xEE3kHgAAAQk"]
[Fri Apr 03 06:26:37.888872 2026] [:error] [pid 58590:tid 58604] [client 4.232.187.184:50432] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "ac7tHUze_aEPDM9xEE3kIwAAAQw"]
[Fri Apr 03 06:26:38.720439 2026] [:error] [pid 22672:tid 22730] [client 4.232.187.184:3725] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "ac7tHqzrgXkFSOK0fvqXcQAAAEs"]
[Fri Apr 03 06:26:39.363301 2026] [:error] [pid 58590:tid 58598] [client 4.232.187.184:37131] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ac7tH0ze_aEPDM9xEE3kKgAAAQY"]
[Fri Apr 03 06:26:40.073673 2026] [:error] [pid 22778:tid 22792] [client 4.232.187.184:3766] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ac7tIPS-q9hkdFqUjq-bDgAAAMc"]
[Fri Apr 03 06:26:40.852680 2026] [:error] [pid 22672:tid 22719] [client 4.232.187.184:32095] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ac7tIKzrgXkFSOK0fvqXdQAAAEA"]
[Fri Apr 03 06:26:41.787395 2026] [:error] [pid 58590:tid 58593] [client 4.232.187.184:32779] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ac7tIUze_aEPDM9xEE3kNgAAAQE"]
[Fri Apr 03 06:26:42.440225 2026] [:error] [pid 58590:tid 58603] [client 4.232.187.184:36779] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "ac7tIkze_aEPDM9xEE3kPAAAAQs"]
[Fri Apr 03 06:26:43.220797 2026] [:error] [pid 58590:tid 58608] [client 4.232.187.184:50029] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "ac7tI0ze_aEPDM9xEE3kQwAAARA"]
[Fri Apr 03 06:26:43.976187 2026] [:error] [pid 22673:tid 22761] [client 4.232.187.184:32597] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "ac7tI--GlVDWdWxxwJCcXgAAAI8"]
[Fri Apr 03 06:26:44.838404 2026] [:error] [pid 58590:tid 58597] [client 4.232.187.184:37140] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "ac7tJEze_aEPDM9xEE3kUAAAAQU"]
[Fri Apr 03 06:26:45.637131 2026] [:error] [pid 58590:tid 58612] [client 4.232.187.184:47254] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "ac7tJUze_aEPDM9xEE3kVwAAARQ"]
[Fri Apr 03 06:26:46.183986 2026] [:error] [pid 22778:tid 22803] [client 4.232.187.184:37142] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "ac7tJvS-q9hkdFqUjq-bFAAAANI"]
[Fri Apr 03 06:26:46.884318 2026] [:error] [pid 22671:tid 22712] [client 4.232.187.184:27634] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "ac7tJiRuUnMW7r8hvyZY3gAAABU"]
[Fri Apr 03 06:26:47.706861 2026] [:error] [pid 58590:tid 58594] [client 4.232.187.184:53353] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "ac7tJ0ze_aEPDM9xEE3kZAAAAQI"]
[Fri Apr 03 06:26:48.258593 2026] [:error] [pid 22672:tid 22736] [client 4.232.187.184:51559] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ac7tKKzrgXkFSOK0fvqXegAAAFE"]
[Fri Apr 03 06:26:48.764143 2026] [:error] [pid 22672:tid 22735] [client 4.232.187.184:53913] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ac7tKKzrgXkFSOK0fvqXfQAAAFA"]
[Fri Apr 03 06:26:49.288526 2026] [:error] [pid 22673:tid 22763] [client 4.232.187.184:37160] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ac7tKe-GlVDWdWxxwJCcYQAAAJE"]
[Fri Apr 03 06:26:49.958124 2026] [:error] [pid 58590:tid 58612] [client 4.232.187.184:53359] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ac7tKUze_aEPDM9xEE3kbAAAARQ"]
[Fri Apr 03 06:26:51.890918 2026] [:error] [pid 22778:tid 22808] [client 4.232.187.184:36764] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "ac7tK_S-q9hkdFqUjq-bJQAAANc"]
[Fri Apr 03 06:26:53.265824 2026] [:error] [pid 22673:tid 22761] [client 4.232.187.184:43723] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "ac7tLe-GlVDWdWxxwJCcbgAAAI8"]
[Fri Apr 03 06:26:54.203322 2026] [:error] [pid 22673:tid 22769] [client 4.232.187.184:36746] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "ac7tLu-GlVDWdWxxwJCcdQAAAJc"]
[Fri Apr 03 06:26:55.663141 2026] [:error] [pid 22671:tid 22713] [client 4.232.187.184:53903] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "ac7tLyRuUnMW7r8hvyZY4gAAABY"]
[Fri Apr 03 06:26:57.196524 2026] [:error] [pid 22778:tid 22802] [client 4.232.187.184:37158] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/te.php"] [unique_id "ac7tMfS-q9hkdFqUjq-bLwAAANE"]
[Fri Apr 03 06:26:58.402796 2026] [:error] [pid 58590:tid 58604] [client 4.232.187.184:43722] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/te.php"] [unique_id "ac7tMkze_aEPDM9xEE3khgAAAQw"]
[Fri Apr 03 06:26:59.620874 2026] [:error] [pid 22778:tid 22791] [client 4.232.187.184:31534] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/te.php"] [unique_id "ac7tM_S-q9hkdFqUjq-bNgAAAMY"]
[Fri Apr 03 06:27:01.081850 2026] [:error] [pid 58590:tid 58593] [client 4.232.187.184:4052] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/te.php"] [unique_id "ac7tNUze_aEPDM9xEE3kkgAAAQE"]
[Fri Apr 03 06:27:02.593158 2026] [:error] [pid 22673:tid 22759] [client 4.232.187.184:32826] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Apr 03 06:27:02.917535 2026] [:error] [pid 22673:tid 22757] [client 4.232.187.184:32826] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Fri Apr 03 06:27:03.153421 2026] [:error] [pid 22673:tid 22747] [client 4.232.187.184:32826] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Fri Apr 03 06:27:03.407137 2026] [:error] [pid 22673:tid 22752] [client 4.232.187.184:32826] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Fri Apr 03 06:27:03.748521 2026] [:error] [pid 22673:tid 22754] [client 4.232.187.184:32826] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Apr 03 06:27:04.226101 2026] [:error] [pid 22673:tid 22753] [client 4.232.187.184:32826] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Apr 03 06:27:04.477900 2026] [:error] [pid 22673:tid 22767] [client 4.232.187.184:32826] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Fri Apr 03 06:27:04.719745 2026] [:error] [pid 22673:tid 22749] [client 4.232.187.184:32826] File does not exist: /usr/local/apache/htdocs/suspended-page/v2.php
[Fri Apr 03 06:27:05.226948 2026] [:error] [pid 22673:tid 22768] [client 4.232.187.184:32826] File does not exist: /usr/local/apache/htdocs/suspended-page/shoha.php
[Fri Apr 03 06:27:05.522097 2026] [:error] [pid 22673:tid 22763] [client 4.232.187.184:32826] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "ac7tOe-GlVDWdWxxwJCcoAAAAJE"]
[Fri Apr 03 06:27:06.289548 2026] [:error] [pid 22672:tid 22727] [client 4.232.187.184:31506] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "ac7tOqzrgXkFSOK0fvqXhgAAAEg"]
[Fri Apr 03 06:27:07.062492 2026] [:error] [pid 58590:tid 58601] [client 4.232.187.184:27620] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "ac7tO0ze_aEPDM9xEE3ktAAAAQk"]
[Fri Apr 03 06:27:07.749365 2026] [:error] [pid 58590:tid 58610] [client 4.232.187.184:37124] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "ac7tO0ze_aEPDM9xEE3kvAAAARI"]
[Fri Apr 03 06:27:08.625026 2026] [:error] [pid 22671:tid 22705] [client 4.232.187.184:27011] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ac7tPCRuUnMW7r8hvyZY6QAAAA4"]
[Fri Apr 03 06:27:09.323290 2026] [:error] [pid 22672:tid 22740] [client 4.232.187.184:50006] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ac7tPazrgXkFSOK0fvqXjgAAAFU"]
[Fri Apr 03 06:27:09.992397 2026] [:error] [pid 58590:tid 58608] [client 4.232.187.184:32121] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ac7tPUze_aEPDM9xEE3kywAAARA"]
[Fri Apr 03 06:27:10.653618 2026] [:error] [pid 58590:tid 58605] [client 4.232.187.184:48549] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ac7tPkze_aEPDM9xEE3kzgAAAQ0"]
[Fri Apr 03 06:27:11.304552 2026] [:error] [pid 58590:tid 58604] [client 4.232.187.184:3737] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac7tP0ze_aEPDM9xEE3k0AAAAQw"]
[Fri Apr 03 06:27:11.997729 2026] [:error] [pid 58590:tid 58607] [client 4.232.187.184:48563] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac7tP0ze_aEPDM9xEE3k1wAAAQ8"]
[Fri Apr 03 06:27:12.637727 2026] [:error] [pid 22672:tid 22736] [client 4.232.187.184:32039] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac7tQKzrgXkFSOK0fvqXkwAAAFE"]
[Fri Apr 03 06:27:13.281485 2026] [:error] [pid 22672:tid 22739] [client 4.232.187.184:33206] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac7tQazrgXkFSOK0fvqXlQAAAFQ"]
[Fri Apr 03 06:27:13.990945 2026] [:error] [pid 22673:tid 22752] [client 4.232.187.184:3135] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ac7tQe-GlVDWdWxxwJCcpQAAAIY"]
[Fri Apr 03 06:27:14.510344 2026] [:error] [pid 22672:tid 22729] [client 4.232.187.184:52638] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ac7tQqzrgXkFSOK0fvqXmQAAAEo"]
[Fri Apr 03 06:27:15.244468 2026] [:error] [pid 22778:tid 22805] [client 4.232.187.184:3091] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ac7tQ_S-q9hkdFqUjq-bUwAAANQ"]
[Fri Apr 03 06:27:15.821111 2026] [:error] [pid 22778:tid 22792] [client 4.232.187.184:36264] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ac7tQ_S-q9hkdFqUjq-bVwAAAMc"]
[Fri Apr 03 06:27:16.449689 2026] [:error] [pid 22671:tid 22702] [client 4.232.187.184:36004] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ac7tRCRuUnMW7r8hvyZY8AAAAAs"]
[Fri Apr 03 06:27:17.099719 2026] [:error] [pid 22673:tid 22761] [client 4.232.187.184:39931] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ac7tRe-GlVDWdWxxwJCcrQAAAI8"]
[Fri Apr 03 06:27:17.846965 2026] [:error] [pid 22673:tid 22756] [client 4.232.187.184:53841] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ac7tRe-GlVDWdWxxwJCcsAAAAIo"]
[Fri Apr 03 06:27:18.381266 2026] [:error] [pid 22673:tid 22752] [client 4.232.187.184:49965] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ac7tRu-GlVDWdWxxwJCctQAAAIY"]
[Fri Apr 03 06:27:18.943532 2026] [:error] [pid 22671:tid 22708] [client 4.232.187.184:49703] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ac7tRiRuUnMW7r8hvyZZAAAAABE"]
[Fri Apr 03 06:27:19.483995 2026] [:error] [pid 22673:tid 22746] [client 4.232.187.184:50797] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ac7tR--GlVDWdWxxwJCczgAAAIA"]
[Fri Apr 03 06:27:20.190468 2026] [:error] [pid 22778:tid 22788] [client 4.232.187.184:30557] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ac7tSPS-q9hkdFqUjq-baAAAAMM"]
[Fri Apr 03 06:27:20.867059 2026] [:error] [pid 22672:tid 22732] [client 4.232.187.184:52623] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ac7tSKzrgXkFSOK0fvqXrAAAAE0"]
[Fri Apr 03 06:27:21.461269 2026] [:error] [pid 22672:tid 22741] [client 4.232.187.184:35825] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ac7tSazrgXkFSOK0fvqXsQAAAFY"]
[Fri Apr 03 06:27:22.322924 2026] [:error] [pid 22671:tid 22696] [client 4.232.187.184:42557] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ac7tSiRuUnMW7r8hvyZZDAAAAAU"]
[Fri Apr 03 06:27:23.241371 2026] [:error] [pid 22672:tid 22736] [client 4.232.187.184:49930] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ac7tS6zrgXkFSOK0fvqXtAAAAFE"]
[Fri Apr 03 06:27:23.812995 2026] [:error] [pid 22672:tid 22735] [client 4.232.187.184:62211] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ac7tS6zrgXkFSOK0fvqXtQAAAFA"]
[Fri Apr 03 06:27:24.524111 2026] [:error] [pid 22778:tid 22806] [client 4.232.187.184:62606] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac7tTPS-q9hkdFqUjq-begAAANU"]
[Fri Apr 03 06:27:25.197894 2026] [:error] [pid 22778:tid 22793] [client 4.232.187.184:44947] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac7tTfS-q9hkdFqUjq-bfwAAAMg"]
[Fri Apr 03 06:27:26.063544 2026] [:error] [pid 22673:tid 22769] [client 4.232.187.184:3519] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac7tTu-GlVDWdWxxwJCc2gAAAJc"]
[Fri Apr 03 06:27:27.160162 2026] [:error] [pid 58590:tid 58612] [client 4.232.187.184:28207] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac7tT0ze_aEPDM9xEE3k4gAAARQ"]
[Fri Apr 03 06:27:27.998398 2026] [:error] [pid 22671:tid 22712] [client 4.232.187.184:44946] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ac7tTyRuUnMW7r8hvyZZDgAAABU"]
[Fri Apr 03 06:27:28.661385 2026] [:error] [pid 22671:tid 22714] [client 4.232.187.184:28177] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ac7tUCRuUnMW7r8hvyZZDwAAABc"]
[Fri Apr 03 06:27:30.013931 2026] [:error] [pid 22673:tid 22763] [client 4.232.187.184:34328] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ac7tUu-GlVDWdWxxwJCc4wAAAJE"]
[Fri Apr 03 06:27:30.806429 2026] [:error] [pid 58590:tid 58595] [client 4.232.187.184:41406] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ac7tUkze_aEPDM9xEE3k6gAAAQM"]
[Fri Apr 03 06:27:31.479941 2026] [:error] [pid 22778:tid 22809] [client 4.232.187.184:37780] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zxin.php"] [unique_id "ac7tU_S-q9hkdFqUjq-bkAAAANg"]
[Fri Apr 03 06:27:32.387000 2026] [:error] [pid 58590:tid 58612] [client 4.232.187.184:43209] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zxin.php"] [unique_id "ac7tVEze_aEPDM9xEE3k8QAAARQ"]
[Fri Apr 03 06:27:33.354197 2026] [:error] [pid 22672:tid 22720] [client 4.232.187.184:60740] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zxin.php"] [unique_id "ac7tVazrgXkFSOK0fvqXxwAAAEE"]
[Fri Apr 03 06:27:34.401032 2026] [:error] [pid 22671:tid 22710] [client 4.232.187.184:3663] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zxin.php"] [unique_id "ac7tViRuUnMW7r8hvyZZEwAAABM"]
[Fri Apr 03 06:27:35.342514 2026] [:error] [pid 22673:tid 22770] [client 4.232.187.184:29009] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "ac7tV--GlVDWdWxxwJCc6AAAAJg"]
[Fri Apr 03 06:27:36.053312 2026] [:error] [pid 22672:tid 22740] [client 4.232.187.184:36490] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "ac7tWKzrgXkFSOK0fvqXyQAAAFU"]
[Fri Apr 03 06:27:37.031264 2026] [:error] [pid 22778:tid 22791] [client 4.232.187.184:60787] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "ac7tWfS-q9hkdFqUjq-bnAAAAMY"]
[Fri Apr 03 06:27:37.692051 2026] [:error] [pid 22778:tid 22806] [client 4.232.187.184:39001] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "ac7tWfS-q9hkdFqUjq-boQAAANU"]
[Fri Apr 03 06:27:38.847538 2026] [:error] [pid 22673:tid 22748] [client 4.232.187.184:37787] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/NewFile.php"] [unique_id "ac7tWu-GlVDWdWxxwJCc7AAAAII"]
[Fri Apr 03 06:27:39.495121 2026] [:error] [pid 58590:tid 58607] [client 4.232.187.184:39006] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/NewFile.php"] [unique_id "ac7tW0ze_aEPDM9xEE3k-AAAAQ8"]
[Fri Apr 03 06:27:40.191298 2026] [:error] [pid 58590:tid 58616] [client 4.232.187.184:3701] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/NewFile.php"] [unique_id "ac7tXEze_aEPDM9xEE3k-wAAARg"]
[Fri Apr 03 06:27:41.002493 2026] [:error] [pid 58590:tid 58605] [client 4.232.187.184:37769] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/NewFile.php"] [unique_id "ac7tXUze_aEPDM9xEE3lAQAAAQ0"]
[Fri Apr 03 06:27:41.647378 2026] [:error] [pid 22672:tid 22737] [client 4.232.187.184:44602] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "ac7tXazrgXkFSOK0fvqXzgAAAFI"]
[Fri Apr 03 06:27:42.604997 2026] [:error] [pid 58590:tid 58603] [client 4.232.187.184:34044] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "ac7tXkze_aEPDM9xEE3lBQAAAQs"]
[Fri Apr 03 06:27:50.908156 2026] [:error] [pid 22671:tid 22705] [client 4.232.187.184:28235] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "ac7tZiRuUnMW7r8hvyZZHgAAAA4"]
[Fri Apr 03 06:27:52.052891 2026] [:error] [pid 22671:tid 22714] [client 4.232.187.184:3535] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "ac7taCRuUnMW7r8hvyZZIAAAABc"]
[Fri Apr 03 06:28:47.695073 2026] [:error] [pid 22673:tid 22763] [client 4.232.187.184:60758] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xtt.php"] [unique_id "ac7tn--GlVDWdWxxwJCdTQAAAJE"]
[Fri Apr 03 06:28:48.642496 2026] [:error] [pid 58590:tid 58605] [client 4.232.187.184:38972] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xtt.php"] [unique_id "ac7toEze_aEPDM9xEE3mCAAAAQ0"]
[Fri Apr 03 06:28:49.760364 2026] [:error] [pid 22778:tid 22789] [client 4.232.187.184:35022] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xtt.php"] [unique_id "ac7tofS-q9hkdFqUjq-czwAAAMQ"]
[Fri Apr 03 06:28:50.624950 2026] [:error] [pid 58590:tid 58599] [client 4.232.187.184:3462] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xtt.php"] [unique_id "ac7tokze_aEPDM9xEE3mEAAAAQc"]
[Fri Apr 03 06:28:51.503581 2026] [:error] [pid 58590:tid 58604] [client 4.232.187.184:41395] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ac7to0ze_aEPDM9xEE3mFgAAAQw"]
[Fri Apr 03 06:28:52.072208 2026] [:error] [pid 22672:tid 22723] [client 4.232.187.184:49596] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ac7tpKzrgXkFSOK0fvqYFgAAAEQ"]
[Fri Apr 03 06:28:53.035804 2026] [:error] [pid 22671:tid 22699] [client 4.232.187.184:28976] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ac7tpSRuUnMW7r8hvyZZSQAAAAg"]
[Fri Apr 03 06:28:54.124136 2026] [:error] [pid 22673:tid 22751] [client 4.232.187.184:34335] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ac7tpu-GlVDWdWxxwJCdaAAAAIU"]
[Fri Apr 03 06:28:54.733834 2026] [:error] [pid 22672:tid 22733] [client 4.232.187.184:3079] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system.php"] [unique_id "ac7tpqzrgXkFSOK0fvqYGQAAAE4"]
[Fri Apr 03 06:28:55.627443 2026] [:error] [pid 58590:tid 58616] [client 4.232.187.184:35783] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system.php"] [unique_id "ac7tp0ze_aEPDM9xEE3mHQAAARg"]
[Fri Apr 03 06:28:56.546503 2026] [:error] [pid 22673:tid 22755] [client 4.232.187.184:40560] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system.php"] [unique_id "ac7tqO-GlVDWdWxxwJCdbwAAAIk"]
[Fri Apr 03 06:28:57.364540 2026] [:error] [pid 58590:tid 58602] [client 4.232.187.184:3128] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system.php"] [unique_id "ac7tqUze_aEPDM9xEE3mIQAAAQo"]
[Fri Apr 03 06:28:58.145260 2026] [:error] [pid 58590:tid 58593] [client 4.232.187.184:35801] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "ac7tqkze_aEPDM9xEE3mKgAAAQE"]
[Fri Apr 03 06:28:58.819001 2026] [:error] [pid 22778:tid 22793] [client 4.232.187.184:49947] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "ac7tqvS-q9hkdFqUjq-c1gAAAMg"]
[Fri Apr 03 06:28:59.474447 2026] [:error] [pid 58590:tid 58604] [client 4.232.187.184:52122] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "ac7tq0ze_aEPDM9xEE3mMQAAAQw"]
[Fri Apr 03 06:29:00.224622 2026] [:error] [pid 22778:tid 22797] [client 4.232.187.184:28963] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "ac7trPS-q9hkdFqUjq-c1wAAAMw"]
[Fri Apr 03 06:29:00.829601 2026] [:error] [pid 22673:tid 22756] [client 4.232.187.184:51381] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "ac7trO-GlVDWdWxxwJCdfQAAAIo"]
[Fri Apr 03 06:29:01.622522 2026] [:error] [pid 58590:tid 58602] [client 4.232.187.184:51391] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "ac7trUze_aEPDM9xEE3mOwAAAQo"]
[Fri Apr 03 06:29:02.236780 2026] [:error] [pid 22672:tid 22730] [client 4.232.187.184:53880] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "ac7trqzrgXkFSOK0fvqYJAAAAEs"]
[Fri Apr 03 06:29:03.254523 2026] [:error] [pid 22672:tid 22724] [client 4.232.187.184:49956] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "ac7tr6zrgXkFSOK0fvqYJwAAAEU"]
[Fri Apr 03 06:29:03.928615 2026] [:error] [pid 58590:tid 58611] [client 4.232.187.184:37801] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ac7tr0ze_aEPDM9xEE3mSAAAARM"]
[Fri Apr 03 06:29:04.840181 2026] [:error] [pid 58590:tid 58604] [client 4.232.187.184:40518] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ac7tsEze_aEPDM9xEE3mTQAAAQw"]
[Fri Apr 03 06:29:05.486665 2026] [:error] [pid 22778:tid 22793] [client 4.232.187.184:28965] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ac7tsfS-q9hkdFqUjq-c5gAAAMg"]
[Fri Apr 03 06:29:06.101164 2026] [:error] [pid 22778:tid 22798] [client 4.232.187.184:49922] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ac7tsvS-q9hkdFqUjq-c7AAAAM0"]
[Fri Apr 03 06:29:06.859487 2026] [:error] [pid 22672:tid 22731] [client 4.232.187.184:44536] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media.php"] [unique_id "ac7tsqzrgXkFSOK0fvqYLgAAAEw"]
[Fri Apr 03 06:29:07.573025 2026] [:error] [pid 22673:tid 22761] [client 4.232.187.184:56952] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media.php"] [unique_id "ac7ts--GlVDWdWxxwJCdhgAAAI8"]
[Fri Apr 03 06:29:08.417795 2026] [:error] [pid 22671:tid 22702] [client 4.232.187.184:63060] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media.php"] [unique_id "ac7ttCRuUnMW7r8hvyZZYgAAAAs"]
[Fri Apr 03 06:29:09.196761 2026] [:error] [pid 22672:tid 22729] [client 4.232.187.184:52150] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media.php"] [unique_id "ac7ttazrgXkFSOK0fvqYOAAAAEo"]
[Fri Apr 03 06:29:09.960892 2026] [:error] [pid 22778:tid 22805] [client 4.232.187.184:60314] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac7ttfS-q9hkdFqUjq-c8gAAANQ"]
[Fri Apr 03 06:29:10.736689 2026] [:error] [pid 22672:tid 22735] [client 4.232.187.184:44541] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac7ttqzrgXkFSOK0fvqYQQAAAFA"]
[Fri Apr 03 06:29:11.288335 2026] [:error] [pid 22672:tid 22729] [client 4.232.187.184:39601] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac7tt6zrgXkFSOK0fvqYSAAAAEo"]
[Fri Apr 03 06:29:12.498245 2026] [:error] [pid 22778:tid 22803] [client 4.232.187.184:60347] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac7tuPS-q9hkdFqUjq-c9QAAANI"]
[Fri Apr 03 06:29:13.553791 2026] [:error] [pid 58590:tid 58613] [client 4.232.187.184:3974] File does not exist: /usr/local/apache/htdocs/suspended-page/admir.php
[Fri Apr 03 06:29:13.865654 2026] [:error] [pid 58590:tid 58612] [client 4.232.187.184:3974] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Fri Apr 03 06:29:14.110069 2026] [:error] [pid 58590:tid 58607] [client 4.232.187.184:3974] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Fri Apr 03 06:29:14.812570 2026] [:error] [pid 58590:tid 58593] [client 4.232.187.184:3974] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Fri Apr 03 06:29:15.235304 2026] [:error] [pid 58590:tid 58608] [client 4.232.187.184:3974] File does not exist: /usr/local/apache/htdocs/suspended-page/bkxzo.php
[Fri Apr 03 06:29:15.555937 2026] [:error] [pid 58590:tid 58615] [client 4.232.187.184:3974] File does not exist: /usr/local/apache/htdocs/suspended-page/lo.php
[Fri Apr 03 06:29:16.117252 2026] [:error] [pid 58590:tid 58598] [client 4.232.187.184:3974] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ac7tvEze_aEPDM9xEE3maAAAAQY"]
[Fri Apr 03 06:29:17.249778 2026] [:error] [pid 22778:tid 22805] [client 4.232.187.184:56913] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ac7tvfS-q9hkdFqUjq-c-gAAANQ"]
[Fri Apr 03 06:29:18.070324 2026] [:error] [pid 22778:tid 22793] [client 4.232.187.184:37803] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ac7tvvS-q9hkdFqUjq-c-wAAAMg"]
[Fri Apr 03 06:29:19.168576 2026] [:error] [pid 22672:tid 22735] [client 4.232.187.184:54952] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ac7tv6zrgXkFSOK0fvqYWAAAAFA"]
[Fri Apr 03 06:29:20.021496 2026] [:error] [pid 58590:tid 58607] [client 4.232.187.184:40562] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "ac7twEze_aEPDM9xEE3meAAAAQ8"]
[Fri Apr 03 06:29:20.832534 2026] [:error] [pid 58590:tid 58608] [client 4.232.187.184:40564] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "ac7twEze_aEPDM9xEE3mfwAAARA"]
[Fri Apr 03 06:29:21.503297 2026] [:error] [pid 22672:tid 22739] [client 4.232.187.184:56516] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "ac7twazrgXkFSOK0fvqYXQAAAFQ"]
[Fri Apr 03 06:29:22.383081 2026] [:error] [pid 22778:tid 22785] [client 4.232.187.184:34957] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "ac7twvS-q9hkdFqUjq-dCQAAAMA"]
[Fri Apr 03 06:29:23.489553 2026] [:error] [pid 22778:tid 22808] [client 4.232.187.184:42046] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac7tw_S-q9hkdFqUjq-dEwAAANc"]
[Fri Apr 03 06:29:24.090434 2026] [:error] [pid 22778:tid 22807] [client 4.232.187.184:42038] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac7txPS-q9hkdFqUjq-dFwAAANY"]
[Fri Apr 03 06:29:24.884607 2026] [:error] [pid 22671:tid 22697] [client 4.232.187.184:42021] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac7txCRuUnMW7r8hvyZZdAAAAAY"]
[Fri Apr 03 06:29:25.718456 2026] [:error] [pid 22671:tid 22710] [client 4.232.187.184:41984] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac7txSRuUnMW7r8hvyZZdwAAABM"]
[Fri Apr 03 06:29:26.422363 2026] [:error] [pid 22673:tid 22760] [client 4.232.187.184:55346] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7txu-GlVDWdWxxwJCd1QAAAI4"]
[Fri Apr 03 06:29:27.043308 2026] [:error] [pid 22778:tid 22791] [client 4.232.187.184:63059] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7tx_S-q9hkdFqUjq-dIwAAAMY"]
[Fri Apr 03 06:29:27.705716 2026] [:error] [pid 22671:tid 22691] [client 4.232.187.184:3983] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7txyRuUnMW7r8hvyZZggAAAAA"]
[Fri Apr 03 06:29:28.260813 2026] [:error] [pid 22672:tid 22743] [client 4.232.187.184:44506] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7tyKzrgXkFSOK0fvqYbQAAAFg"]
[Fri Apr 03 06:29:29.228609 2026] [:error] [pid 22672:tid 22739] [client 4.232.187.184:42013] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/content.php"] [unique_id "ac7tyazrgXkFSOK0fvqYeQAAAFQ"]
[Fri Apr 03 06:29:29.938495 2026] [:error] [pid 58590:tid 58611] [client 4.232.187.184:41997] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/content.php"] [unique_id "ac7tyUze_aEPDM9xEE3mjwAAARM"]
[Fri Apr 03 06:29:30.464666 2026] [:error] [pid 22778:tid 22795] [client 4.232.187.184:54944] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/content.php"] [unique_id "ac7tyvS-q9hkdFqUjq-dMAAAAMo"]
[Fri Apr 03 06:29:31.017632 2026] [:error] [pid 22778:tid 22796] [client 4.232.187.184:45550] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/content.php"] [unique_id "ac7ty_S-q9hkdFqUjq-dNAAAAMs"]
[Fri Apr 03 06:29:31.842598 2026] [:error] [pid 22673:tid 22746] [client 4.232.187.184:31019] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-configs.php"] [unique_id "ac7ty--GlVDWdWxxwJCd3gAAAIA"]
[Fri Apr 03 06:29:32.718727 2026] [:error] [pid 58590:tid 58604] [client 4.232.187.184:62812] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-configs.php"] [unique_id "ac7tzEze_aEPDM9xEE3mlgAAAQw"]
[Fri Apr 03 06:29:33.465481 2026] [:error] [pid 58590:tid 58613] [client 4.232.187.184:56520] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-configs.php"] [unique_id "ac7tzUze_aEPDM9xEE3mngAAARU"]
[Fri Apr 03 06:29:34.458574 2026] [:error] [pid 22673:tid 22754] [client 4.232.187.184:45595] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-configs.php"] [unique_id "ac7tzu-GlVDWdWxxwJCd5QAAAIg"]
[Fri Apr 03 06:29:35.221603 2026] [:error] [pid 22778:tid 22804] [client 4.232.187.184:35000] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "ac7tz_S-q9hkdFqUjq-dTAAAANM"]
[Fri Apr 03 06:29:36.158430 2026] [:error] [pid 22673:tid 22748] [client 4.232.187.184:34950] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "ac7t0O-GlVDWdWxxwJCd7QAAAII"]
[Fri Apr 03 06:29:36.865947 2026] [:error] [pid 22778:tid 22809] [client 4.232.187.184:3989] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "ac7t0PS-q9hkdFqUjq-dUwAAANg"]
[Fri Apr 03 06:29:37.486138 2026] [:error] [pid 22778:tid 22797] [client 4.232.187.184:54463] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "ac7t0fS-q9hkdFqUjq-dVAAAAMw"]
[Fri Apr 03 06:29:38.224535 2026] [:error] [pid 58590:tid 58608] [client 4.232.187.184:63396] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ac7t0kze_aEPDM9xEE3mqwAAARA"]
[Fri Apr 03 06:29:38.831865 2026] [:error] [pid 58590:tid 58604] [client 4.232.187.184:55317] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ac7t0kze_aEPDM9xEE3msAAAAQw"]
[Fri Apr 03 06:29:39.544078 2026] [:error] [pid 58590:tid 58600] [client 4.232.187.184:54959] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ac7t00ze_aEPDM9xEE3muAAAAQg"]
[Fri Apr 03 06:29:40.113651 2026] [:error] [pid 58590:tid 58614] [client 4.232.187.184:53903] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ac7t1Eze_aEPDM9xEE3mvQAAARY"]
[Fri Apr 03 06:29:40.754671 2026] [:error] [pid 22673:tid 22759] [client 4.232.187.184:31087] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "ac7t1O-GlVDWdWxxwJCd-QAAAI0"]
[Fri Apr 03 06:29:41.475600 2026] [:error] [pid 22673:tid 22754] [client 4.232.187.184:34993] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "ac7t1e-GlVDWdWxxwJCd_gAAAIg"]
[Fri Apr 03 06:29:42.209382 2026] [:error] [pid 22671:tid 22702] [client 4.232.187.184:62766] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "ac7t1iRuUnMW7r8hvyZZkwAAAAs"]
[Fri Apr 03 06:29:42.969906 2026] [:error] [pid 22671:tid 22707] [client 4.232.187.184:26520] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "ac7t1iRuUnMW7r8hvyZZmAAAABA"]
[Fri Apr 03 06:29:43.605517 2026] [:error] [pid 22672:tid 22742] [client 4.232.187.184:45051] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac7t16zrgXkFSOK0fvqYlgAAAFc"]
[Fri Apr 03 06:29:44.707763 2026] [:error] [pid 58590:tid 58601] [client 4.232.187.184:45065] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac7t2Eze_aEPDM9xEE3mxAAAAQk"]
[Fri Apr 03 06:29:45.369526 2026] [:error] [pid 22673:tid 22754] [client 4.232.187.184:48692] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac7t2e-GlVDWdWxxwJCeDgAAAIg"]
[Fri Apr 03 06:29:46.301699 2026] [:error] [pid 22673:tid 22749] [client 4.232.187.184:45090] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac7t2u-GlVDWdWxxwJCeFQAAAIM"]
[Fri Apr 03 06:29:46.869361 2026] [:error] [pid 58590:tid 58605] [client 4.232.187.184:60366] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "ac7t2kze_aEPDM9xEE3myQAAAQ0"]
[Fri Apr 03 06:29:47.489925 2026] [:error] [pid 58590:tid 58596] [client 4.232.187.184:63400] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "ac7t20ze_aEPDM9xEE3mzQAAAQQ"]
[Fri Apr 03 06:29:48.047294 2026] [:error] [pid 22778:tid 22807] [client 4.232.187.184:31057] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "ac7t3PS-q9hkdFqUjq-dXAAAANY"]
[Fri Apr 03 06:29:48.786709 2026] [:error] [pid 22778:tid 22801] [client 4.232.187.184:38885] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "ac7t3PS-q9hkdFqUjq-dYQAAANA"]
[Fri Apr 03 06:29:49.669165 2026] [:error] [pid 22673:tid 22766] [client 4.232.187.184:63366] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac7t3e-GlVDWdWxxwJCeHQAAAJQ"]
[Fri Apr 03 06:29:50.468943 2026] [:error] [pid 22671:tid 22708] [client 4.232.187.184:45599] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac7t3iRuUnMW7r8hvyZZrAAAABE"]
[Fri Apr 03 06:29:51.256362 2026] [:error] [pid 22672:tid 22735] [client 4.232.187.184:55486] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac7t36zrgXkFSOK0fvqYpQAAAFA"]
[Fri Apr 03 06:29:52.289785 2026] [:error] [pid 22671:tid 22694] [client 4.232.187.184:48693] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac7t4CRuUnMW7r8hvyZZsQAAAAM"]
[Fri Apr 03 06:29:53.092311 2026] [:error] [pid 22671:tid 22704] [client 4.232.187.184:38910] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/himu.php"] [unique_id "ac7t4SRuUnMW7r8hvyZZtAAAAA0"]
[Fri Apr 03 06:29:54.024142 2026] [:error] [pid 58590:tid 58614] [client 4.232.187.184:62869] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/himu.php"] [unique_id "ac7t4kze_aEPDM9xEE3m5QAAARY"]
[Fri Apr 03 06:29:54.654958 2026] [:error] [pid 22778:tid 22805] [client 4.232.187.184:60413] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/himu.php"] [unique_id "ac7t4vS-q9hkdFqUjq-deAAAANQ"]
[Fri Apr 03 06:29:55.492111 2026] [:error] [pid 22671:tid 22714] [client 4.232.187.184:35620] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/himu.php"] [unique_id "ac7t4yRuUnMW7r8hvyZZuAAAABc"]
[Fri Apr 03 06:29:56.427070 2026] [:error] [pid 58590:tid 58595] [client 4.232.187.184:62783] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "ac7t5Eze_aEPDM9xEE3m8QAAAQM"]
[Fri Apr 03 06:29:57.498975 2026] [:error] [pid 22778:tid 22794] [client 4.232.187.184:45045] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "ac7t5fS-q9hkdFqUjq-dggAAAMk"]
[Fri Apr 03 06:29:58.912298 2026] [:error] [pid 22778:tid 22793] [client 4.232.187.184:61862] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "ac7t5vS-q9hkdFqUjq-digAAAMg"]
[Fri Apr 03 06:29:59.443124 2026] [:error] [pid 22671:tid 22693] [client 4.232.187.184:61877] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "ac7t5yRuUnMW7r8hvyZZxAAAAAI"]
[Fri Apr 03 06:30:00.138603 2026] [:error] [pid 22671:tid 22701] [client 4.232.187.184:3283] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "ac7t6CRuUnMW7r8hvyZZxgAAAAo"]
[Fri Apr 03 06:30:00.719271 2026] [:error] [pid 22778:tid 22794] [client 4.232.187.184:61833] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "ac7t6PS-q9hkdFqUjq-dnQAAAMk"]
[Fri Apr 03 06:30:01.534374 2026] [:error] [pid 22778:tid 22802] [client 4.232.187.184:50431] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "ac7t6fS-q9hkdFqUjq-dowAAANE"]
[Fri Apr 03 06:30:02.414697 2026] [:error] [pid 22671:tid 22700] [client 4.232.187.184:50401] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "ac7t6iRuUnMW7r8hvyZZ0QAAAAk"]
[Fri Apr 03 06:30:03.139900 2026] [:error] [pid 58590:tid 58600] [client 4.232.187.184:3310] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "ac7t60ze_aEPDM9xEE3m_QAAAQg"]
[Fri Apr 03 06:30:03.859131 2026] [:error] [pid 58590:tid 58611] [client 4.232.187.184:50381] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "ac7t60ze_aEPDM9xEE3m_wAAARM"]
[Fri Apr 03 06:30:04.461823 2026] [:error] [pid 22673:tid 22754] [client 4.232.187.184:35765] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "ac7t7O-GlVDWdWxxwJCeKQAAAIg"]
[Fri Apr 03 06:30:05.440423 2026] [:error] [pid 58590:tid 58597] [client 4.232.187.184:47394] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "ac7t7Uze_aEPDM9xEE3nBgAAAQU"]
[Fri Apr 03 06:30:06.099564 2026] [:error] [pid 22671:tid 22713] [client 4.232.187.184:54251] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ac7t7iRuUnMW7r8hvyZZ1QAAABY"]
[Fri Apr 03 06:30:06.699995 2026] [:error] [pid 58590:tid 58605] [client 4.232.187.184:50918] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ac7t7kze_aEPDM9xEE3nEQAAAQ0"]
[Fri Apr 03 06:30:07.461589 2026] [:error] [pid 22673:tid 22754] [client 4.232.187.184:50409] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ac7t7--GlVDWdWxxwJCeNQAAAIg"]
[Fri Apr 03 06:30:08.095224 2026] [:error] [pid 22778:tid 22805] [client 4.232.187.184:54248] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ac7t8PS-q9hkdFqUjq-dtgAAANQ"]
[Fri Apr 03 06:30:08.773103 2026] [:error] [pid 58590:tid 58609] [client 4.232.187.184:35733] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "ac7t8Eze_aEPDM9xEE3nGwAAARE"]
[Fri Apr 03 06:30:09.437608 2026] [:error] [pid 22778:tid 22788] [client 4.232.187.184:61861] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "ac7t8fS-q9hkdFqUjq-duQAAAMM"]
[Fri Apr 03 06:30:10.076081 2026] [:error] [pid 22673:tid 22746] [client 4.232.187.184:32517] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "ac7t8u-GlVDWdWxxwJCeQQAAAIA"]
[Fri Apr 03 06:30:10.666269 2026] [:error] [pid 58590:tid 58597] [client 4.232.187.184:53244] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "ac7t8kze_aEPDM9xEE3nIgAAAQU"]
[Fri Apr 03 06:30:11.304969 2026] [:error] [pid 58590:tid 58601] [client 4.232.187.184:41778] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "ac7t80ze_aEPDM9xEE3nJgAAAQk"]
[Fri Apr 03 06:30:12.057785 2026] [:error] [pid 22672:tid 22724] [client 4.232.187.184:61331] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "ac7t9KzrgXkFSOK0fvqYvQAAAEU"]
[Fri Apr 03 06:30:13.073316 2026] [:error] [pid 22778:tid 22797] [client 4.232.187.184:56303] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "ac7t9fS-q9hkdFqUjq-dwAAAAMw"]
[Fri Apr 03 06:30:13.716947 2026] [:error] [pid 58590:tid 58602] [client 4.232.187.184:62454] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "ac7t9Uze_aEPDM9xEE3nNgAAAQo"]
[Fri Apr 03 06:30:14.505485 2026] [:error] [pid 58590:tid 58611] [client 4.232.187.184:47381] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "ac7t9kze_aEPDM9xEE3nOAAAARM"]
[Fri Apr 03 06:30:15.213698 2026] [:error] [pid 58590:tid 58595] [client 4.232.187.184:54241] File does not exist: /usr/local/apache/htdocs/suspended-page/file15.php
[Fri Apr 03 06:30:15.625538 2026] [:error] [pid 58590:tid 58597] [client 4.232.187.184:54241] File does not exist: /usr/local/apache/htdocs/suspended-page/wsd.php
[Fri Apr 03 06:30:15.862303 2026] [:error] [pid 58590:tid 58594] [client 4.232.187.184:54241] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Apr 03 06:30:16.177469 2026] [:error] [pid 58590:tid 58592] [client 4.232.187.184:54241] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Fri Apr 03 06:30:16.759280 2026] [:error] [pid 58590:tid 58608] [client 4.232.187.184:54241] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Fri Apr 03 06:30:17.182106 2026] [:error] [pid 58590:tid 58611] [client 4.232.187.184:54241] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lol.php"] [unique_id "ac7t-Uze_aEPDM9xEE3nRAAAARM"]
[Fri Apr 03 06:30:18.098859 2026] [:error] [pid 22672:tid 22732] [client 4.232.187.184:38422] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lol.php"] [unique_id "ac7t-qzrgXkFSOK0fvqYygAAAE0"]
[Fri Apr 03 06:30:18.882225 2026] [:error] [pid 22778:tid 22787] [client 4.232.187.184:57399] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lol.php"] [unique_id "ac7t-vS-q9hkdFqUjq-d0QAAAMI"]
[Fri Apr 03 06:30:19.592568 2026] [:error] [pid 22673:tid 22760] [client 4.232.187.184:61832] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lol.php"] [unique_id "ac7t---GlVDWdWxxwJCeXgAAAI4"]
[Fri Apr 03 06:30:20.736645 2026] [:error] [pid 58590:tid 58612] [client 4.232.187.184:62434] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/radio.php"] [unique_id "ac7t_Eze_aEPDM9xEE3nTAAAARQ"]
[Fri Apr 03 06:30:22.688086 2026] [:error] [pid 22673:tid 22747] [client 4.232.187.184:52090] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/radio.php"] [unique_id "ac7t_u-GlVDWdWxxwJCeaAAAAIE"]
[Fri Apr 03 06:30:23.732886 2026] [:error] [pid 22671:tid 22694] [client 4.232.187.184:43196] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/radio.php"] [unique_id "ac7t_yRuUnMW7r8hvyZZ5wAAAAM"]
[Fri Apr 03 06:30:25.397976 2026] [:error] [pid 58590:tid 58594] [client 4.232.187.184:38808] [client 4.232.187.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/radio.php"] [unique_id "ac7uAUze_aEPDM9xEE3nVgAAAQI"]
[Fri Apr 03 21:54:19.473828 2026] [:error] [pid 40562:tid 40577] [client 72.146.4.48:45086] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Fri Apr 03 21:54:19.746434 2026] [:error] [pid 40562:tid 40585] [client 72.146.4.48:45086] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri Apr 03 21:54:19.991634 2026] [:error] [pid 40562:tid 40568] [client 72.146.4.48:45086] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Fri Apr 03 21:54:20.265933 2026] [:error] [pid 40562:tid 40579] [client 72.146.4.48:45086] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Fri Apr 03 21:54:20.549659 2026] [:error] [pid 40562:tid 40569] [client 72.146.4.48:45086] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Fri Apr 03 21:54:20.790973 2026] [:error] [pid 40562:tid 40572] [client 72.146.4.48:45086] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Fri Apr 03 21:54:21.363033 2026] [:error] [pid 40562:tid 40578] [client 72.146.4.48:45086] File does not exist: /usr/local/apache/htdocs/suspended-page/wolv2.php
[Fri Apr 03 21:54:21.700558 2026] [:error] [pid 40562:tid 40567] [client 72.146.4.48:45086] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Fri Apr 03 21:54:21.963382 2026] [:error] [pid 40562:tid 40566] [client 72.146.4.48:45086] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Fri Apr 03 21:54:22.202154 2026] [:error] [pid 40562:tid 40571] [client 72.146.4.48:45086] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac_GjjfFMXuP9zvqCeqSZAAAAYY"]
[Fri Apr 03 21:54:23.067943 2026] [:error] [pid 35469:tid 35483] [client 72.146.4.48:22829] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac_Gj6GvTIc8-wY3jUSyYwAAAQw"]
[Fri Apr 03 21:54:23.962074 2026] [:error] [pid 35469:tid 35478] [client 72.146.4.48:42322] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac_Gj6GvTIc8-wY3jUSyaAAAAQc"]
[Fri Apr 03 21:54:24.643323 2026] [:error] [pid 40562:tid 40586] [client 72.146.4.48:21652] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac_GkDfFMXuP9zvqCeqSZwAAAZU"]
[Fri Apr 03 21:54:28.842859 2026] [:error] [pid 33446:tid 33483] [client 72.146.4.48:42333] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "ac_GlNg3dCqFYIIdw0p_ZAAAAEY"]
[Fri Apr 03 21:54:41.026553 2026] [:error] [pid 40562:tid 40589] [client 72.146.4.48:11346] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ac_GoTfFMXuP9zvqCeqShgAAAZg"]
[Fri Apr 03 21:54:42.494946 2026] [:error] [pid 40562:tid 40565] [client 72.146.4.48:18096] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ac_GojfFMXuP9zvqCeqSlwAAAYA"]
[Fri Apr 03 21:54:43.307140 2026] [:error] [pid 55174:tid 55184] [client 72.146.4.48:18054] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ac_Go5_WKqUonPNUHYwAFQAAAcg"]
[Fri Apr 03 21:54:44.139651 2026] [:error] [pid 33446:tid 33488] [client 72.146.4.48:22904] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ac_GpNg3dCqFYIIdw0p_fwAAAEs"]
[Fri Apr 03 21:54:44.963617 2026] [:error] [pid 33446:tid 33500] [client 72.146.4.48:54951] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ac_GpNg3dCqFYIIdw0p_ggAAAFc"]
[Fri Apr 03 21:54:45.660846 2026] [:error] [pid 33446:tid 33481] [client 72.146.4.48:11335] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ac_Gpdg3dCqFYIIdw0p_hgAAAEQ"]
[Fri Apr 03 21:54:46.265030 2026] [:error] [pid 55174:tid 55176] [client 72.146.4.48:17865] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ac_Gpp_WKqUonPNUHYwAIAAAAcA"]
[Fri Apr 03 21:54:46.853278 2026] [:error] [pid 33446:tid 33482] [client 72.146.4.48:45450] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ac_Gptg3dCqFYIIdw0p_kAAAAEU"]
[Fri Apr 03 21:54:47.513161 2026] [:error] [pid 33446:tid 33500] [client 72.146.4.48:11390] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ac_Gp9g3dCqFYIIdw0p_kwAAAFc"]
[Fri Apr 03 21:54:48.325618 2026] [:error] [pid 33445:tid 33470] [client 72.146.4.48:45108] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ac_GqFlRNZ0iDVmJWM0ZLgAAABQ"]
[Fri Apr 03 21:54:49.148570 2026] [:error] [pid 55174:tid 55184] [client 72.146.4.48:6203] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ac_GqZ_WKqUonPNUHYwAJAAAAcg"]
[Fri Apr 03 21:54:50.184889 2026] [:error] [pid 33446:tid 33490] [client 72.146.4.48:14610] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ac_Gqtg3dCqFYIIdw0p_ngAAAE0"]
[Fri Apr 03 21:54:50.920150 2026] [:error] [pid 33447:tid 33519] [client 72.146.4.48:11365] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac_GqkgaPmDHz92j4lNWTQAAAI8"]
[Fri Apr 03 21:54:51.515487 2026] [:error] [pid 35469:tid 35486] [client 72.146.4.48:34242] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac_Gq6GvTIc8-wY3jUSywwAAAQ8"]
[Fri Apr 03 21:54:52.445719 2026] [:error] [pid 33542:tid 33560] [client 72.146.4.48:25017] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac_GrHwb6uB1LaGtepYB7gAAAM8"]
[Fri Apr 03 21:54:53.088746 2026] [:error] [pid 33542:tid 33556] [client 72.146.4.48:22837] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac_GrXwb6uB1LaGtepYB8QAAAMs"]
[Fri Apr 03 21:54:53.778100 2026] [:error] [pid 33542:tid 33569] [client 72.146.4.48:11331] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ac_GrXwb6uB1LaGtepYB8gAAANg"]
[Fri Apr 03 21:54:54.553014 2026] [:error] [pid 33542:tid 33561] [client 72.146.4.48:35753] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ac_Grnwb6uB1LaGtepYB9gAAANA"]
[Fri Apr 03 21:54:55.467904 2026] [:error] [pid 35469:tid 35477] [client 72.146.4.48:39378] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ac_Gr6GvTIc8-wY3jUSy2AAAAQY"]
[Fri Apr 03 21:54:56.344847 2026] [:error] [pid 33446:tid 33484] [client 72.146.4.48:35747] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ac_GsNg3dCqFYIIdw0p_qQAAAEc"]
[Fri Apr 03 21:54:57.213342 2026] [:error] [pid 35469:tid 35479] [client 72.146.4.48:44303] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ac_GsaGvTIc8-wY3jUSy4wAAAQg"]
[Fri Apr 03 21:54:57.742118 2026] [:error] [pid 35469:tid 35480] [client 72.146.4.48:14608] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ac_GsaGvTIc8-wY3jUSy6gAAAQk"]
[Fri Apr 03 21:54:58.437178 2026] [:error] [pid 35469:tid 35471] [client 72.146.4.48:18105] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ac_GsqGvTIc8-wY3jUSy7wAAAQA"]
[Fri Apr 03 21:54:59.364225 2026] [:error] [pid 40562:tid 40574] [client 72.146.4.48:18107] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ac_GszfFMXuP9zvqCeqSoQAAAYk"]
[Fri Apr 03 21:55:00.058491 2026] [:error] [pid 35469:tid 35489] [client 72.146.4.48:22887] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "ac_GtKGvTIc8-wY3jUSy9QAAARI"]
[Fri Apr 03 21:55:00.730101 2026] [:error] [pid 33446:tid 33487] [client 72.146.4.48:15982] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "ac_GtNg3dCqFYIIdw0p_sgAAAEo"]
[Fri Apr 03 21:55:01.402712 2026] [:error] [pid 40562:tid 40585] [client 72.146.4.48:45082] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "ac_GtTfFMXuP9zvqCeqSqQAAAZQ"]
[Fri Apr 03 21:55:02.330692 2026] [:error] [pid 33445:tid 33466] [client 72.146.4.48:39400] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "ac_GtllRNZ0iDVmJWM0ZPQAAABA"]
[Fri Apr 03 21:55:03.254185 2026] [:error] [pid 33445:tid 33471] [client 72.146.4.48:21686] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "ac_Gt1lRNZ0iDVmJWM0ZQgAAABU"]
[Fri Apr 03 21:55:04.136338 2026] [:error] [pid 33446:tid 33490] [client 72.146.4.48:57293] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "ac_GuNg3dCqFYIIdw0p_vwAAAE0"]
[Fri Apr 03 21:55:04.857929 2026] [:error] [pid 40562:tid 40568] [client 72.146.4.48:45771] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "ac_GuDfFMXuP9zvqCeqSsQAAAYM"]
[Fri Apr 03 21:55:05.554809 2026] [:error] [pid 35469:tid 35471] [client 72.146.4.48:22828] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "ac_GuaGvTIc8-wY3jUSzEgAAAQA"]
[Fri Apr 03 21:55:06.270190 2026] [:error] [pid 40562:tid 40588] [client 72.146.4.48:30752] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "ac_GujfFMXuP9zvqCeqSswAAAZc"]
[Fri Apr 03 21:55:07.113066 2026] [:error] [pid 40562:tid 40577] [client 72.146.4.48:11033] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "ac_GuzfFMXuP9zvqCeqStQAAAYw"]
[Fri Apr 03 21:55:08.120791 2026] [:error] [pid 33447:tid 33510] [client 72.146.4.48:23356] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "ac_GvEgaPmDHz92j4lNWcwAAAIY"]
[Fri Apr 03 21:55:08.691167 2026] [:error] [pid 40562:tid 40571] [client 72.146.4.48:39422] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "ac_GvDfFMXuP9zvqCeqSvAAAAYY"]
[Fri Apr 03 21:55:09.689574 2026] [:error] [pid 40562:tid 40568] [client 72.146.4.48:6377] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac_GvTfFMXuP9zvqCeqSwAAAAYM"]
[Fri Apr 03 21:55:10.611085 2026] [:error] [pid 55174:tid 55183] [client 72.146.4.48:6413] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac_Gvp_WKqUonPNUHYwASgAAAcc"]
[Fri Apr 03 21:55:11.438776 2026] [:error] [pid 40533:tid 40555] [client 72.146.4.48:18160] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac_Gv_bIAA8AViDmwsu18QAAAVQ"]
[Fri Apr 03 21:55:12.145341 2026] [:error] [pid 33446:tid 33478] [client 72.146.4.48:20106] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac_GwNg3dCqFYIIdw0p_1QAAAEE"]
[Fri Apr 03 21:55:13.444933 2026] [:error] [pid 35469:tid 35495] [client 72.146.4.48:26202] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ac_GwaGvTIc8-wY3jUSzHAAAARg"]
[Fri Apr 03 21:55:14.360362 2026] [:error] [pid 33446:tid 33482] [client 72.146.4.48:11065] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ac_Gwtg3dCqFYIIdw0p_5wAAAEU"]
[Fri Apr 03 21:55:15.738509 2026] [:error] [pid 35469:tid 35472] [client 72.146.4.48:6315] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ac_Gw6GvTIc8-wY3jUSzKQAAAQE"]
[Fri Apr 03 21:55:17.536933 2026] [:error] [pid 55174:tid 55200] [client 72.146.4.48:6317] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ac_GxZ_WKqUonPNUHYwAUAAAAdg"]
[Fri Apr 03 21:55:18.671927 2026] [:error] [pid 40533:tid 40550] [client 72.146.4.48:21005] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ac_GxvbIAA8AViDmwsu2AwAAAU8"]
[Fri Apr 03 21:55:20.291224 2026] [:error] [pid 33446:tid 33486] [client 72.146.4.48:25862] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ac_GyNg3dCqFYIIdw0p__gAAAEk"]
[Fri Apr 03 21:55:22.617677 2026] [:error] [pid 33446:tid 33479] [client 72.146.4.48:21048] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Apr 03 21:55:22.881837 2026] [:error] [pid 33446:tid 33486] [client 72.146.4.48:21048] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Fri Apr 03 21:55:23.161871 2026] [:error] [pid 33446:tid 33477] [client 72.146.4.48:21048] File does not exist: /usr/local/apache/htdocs/suspended-page/file32.php
[Fri Apr 03 21:55:23.522336 2026] [:error] [pid 33446:tid 33485] [client 72.146.4.48:21048] File does not exist: /usr/local/apache/htdocs/suspended-page/nope.php
[Fri Apr 03 21:55:23.828459 2026] [:error] [pid 33446:tid 33498] [client 72.146.4.48:21048] File does not exist: /usr/local/apache/htdocs/suspended-page/js.php
[Fri Apr 03 21:55:24.092269 2026] [:error] [pid 33446:tid 33477] [client 72.146.4.48:21048] [client 72.146.4.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ac_GzNg3dCqFYIIdw0qALAAAAEA"]
[Fri Apr 03 21:55:26.005752 2026] [:error] [pid 33446:tid 33487] [client 72.146.4.48:35472] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Fri Apr 03 21:55:26.314944 2026] [:error] [pid 33446:tid 33490] [client 72.146.4.48:35472] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Apr 03 21:55:26.584569 2026] [:error] [pid 33446:tid 33485] [client 72.146.4.48:35472] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Apr 03 21:55:26.969581 2026] [:error] [pid 33446:tid 33489] [client 72.146.4.48:35472] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Fri Apr 03 21:55:27.273604 2026] [:error] [pid 33446:tid 33488] [client 72.146.4.48:35472] File does not exist: /usr/local/apache/htdocs/suspended-page/wfile.php
[Fri Apr 03 21:55:27.754605 2026] [:error] [pid 33446:tid 33479] [client 72.146.4.48:35472] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Fri Apr 03 21:55:27.995202 2026] [:error] [pid 33446:tid 33483] [client 72.146.4.48:35472] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ac_Gz9g3dCqFYIIdw0qASQAAAEY"]
[Fri Apr 03 21:55:28.987716 2026] [:error] [pid 33446:tid 33484] [client 72.146.4.48:11543] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ac_G0Ng3dCqFYIIdw0qATgAAAEc"]
[Fri Apr 03 21:55:30.344184 2026] [:error] [pid 33447:tid 33506] [client 72.146.4.48:6253] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ac_G0kgaPmDHz92j4lNWmgAAAII"]
[Fri Apr 03 21:55:31.349348 2026] [:error] [pid 33542:tid 33549] [client 72.146.4.48:33775] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ac_G03wb6uB1LaGtepYCAQAAAMQ"]
[Fri Apr 03 21:55:32.586622 2026] [:error] [pid 40562:tid 40577] [client 72.146.4.48:45395] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ac_G1DfFMXuP9zvqCeqS_AAAAYw"]
[Fri Apr 03 21:55:33.426698 2026] [:error] [pid 40562:tid 40571] [client 72.146.4.48:13357] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ac_G1TfFMXuP9zvqCeqTBQAAAYY"]
[Fri Apr 03 21:55:34.264859 2026] [:error] [pid 55174:tid 55199] [client 72.146.4.48:31259] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ac_G1p_WKqUonPNUHYwAcgAAAdc"]
[Fri Apr 03 21:55:34.970166 2026] [:error] [pid 55174:tid 55198] [client 72.146.4.48:44994] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ac_G1p_WKqUonPNUHYwAcwAAAdY"]
[Fri Apr 03 21:55:36.042567 2026] [:error] [pid 35469:tid 35491] [client 72.146.4.48:17694] [client 72.146.4.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "ac_G2KGvTIc8-wY3jUSzSAAAARQ"]
[Fri Apr 03 21:55:36.871880 2026] [:error] [pid 33445:tid 33458] [client 72.146.4.48:13598] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/123.php"] [unique_id "ac_G2FlRNZ0iDVmJWM0ZYgAAAAg"]
[Fri Apr 03 21:55:37.478486 2026] [:error] [pid 35469:tid 35493] [client 72.146.4.48:13572] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/123.php"] [unique_id "ac_G2aGvTIc8-wY3jUSzUwAAARY"]
[Fri Apr 03 21:55:38.117861 2026] [:error] [pid 33445:tid 33469] [client 72.146.4.48:31242] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/123.php"] [unique_id "ac_G2llRNZ0iDVmJWM0ZZQAAABM"]
[Fri Apr 03 21:55:39.227679 2026] [:error] [pid 35469:tid 35479] [client 72.146.4.48:33723] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/123.php"] [unique_id "ac_G26GvTIc8-wY3jUSzXgAAAQg"]
[Fri Apr 03 21:55:40.436471 2026] [:error] [pid 33447:tid 33516] [client 72.146.4.48:20641] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac_G3EgaPmDHz92j4lNWqQAAAIw"]
[Fri Apr 03 21:55:41.137191 2026] [:error] [pid 55174:tid 55191] [client 72.146.4.48:33295] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac_G3Z_WKqUonPNUHYwAegAAAc8"]
[Fri Apr 03 21:55:42.583514 2026] [:error] [pid 33445:tid 33472] [client 72.146.4.48:33287] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac_G3llRNZ0iDVmJWM0ZagAAABY"]
[Fri Apr 03 21:55:43.592538 2026] [:error] [pid 35469:tid 35473] [client 72.146.4.48:36269] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac_G36GvTIc8-wY3jUSzcQAAAQI"]
[Fri Apr 03 21:55:44.522680 2026] [:error] [pid 33447:tid 33506] [client 72.146.4.48:11630] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "ac_G4EgaPmDHz92j4lNWtwAAAII"]
[Fri Apr 03 21:55:45.208761 2026] [:error] [pid 33542:tid 33568] [client 72.146.4.48:33332] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "ac_G4Xwb6uB1LaGtepYCKgAAANc"]
[Fri Apr 03 21:55:46.111701 2026] [:error] [pid 55174:tid 55197] [client 72.146.4.48:29613] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "ac_G4p_WKqUonPNUHYwAnQAAAdU"]
[Fri Apr 03 21:55:47.591550 2026] [:error] [pid 40533:tid 40551] [client 72.146.4.48:29631] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "ac_G4_bIAA8AViDmwsu2TAAAAVA"]
[Fri Apr 03 21:55:48.563338 2026] [:error] [pid 40562:tid 40584] [client 72.146.4.48:19928] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "ac_G5DfFMXuP9zvqCeqTLgAAAZM"]
[Fri Apr 03 21:55:49.174483 2026] [:error] [pid 33542:tid 33554] [client 72.146.4.48:36272] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "ac_G5Xwb6uB1LaGtepYCPAAAAMk"]
[Fri Apr 03 21:55:49.993282 2026] [:error] [pid 33445:tid 33455] [client 72.146.4.48:11087] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "ac_G5VlRNZ0iDVmJWM0ZjgAAAAU"]
[Fri Apr 03 21:55:50.944404 2026] [:error] [pid 33445:tid 33471] [client 72.146.4.48:7096] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "ac_G5llRNZ0iDVmJWM0ZmgAAABU"]
[Fri Apr 03 21:55:51.802866 2026] [:error] [pid 40562:tid 40569] [client 72.146.4.48:22375] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "ac_G5zfFMXuP9zvqCeqTNgAAAYQ"]
[Fri Apr 03 21:55:52.411099 2026] [:error] [pid 40533:tid 40552] [client 72.146.4.48:42820] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "ac_G6PbIAA8AViDmwsu2WAAAAVE"]
[Fri Apr 03 21:55:53.145947 2026] [:error] [pid 35469:tid 35488] [client 72.146.4.48:34691] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "ac_G6aGvTIc8-wY3jUSzjwAAARE"]
[Fri Apr 03 21:55:53.785641 2026] [:error] [pid 55174:tid 55181] [client 72.146.4.48:29630] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "ac_G6Z_WKqUonPNUHYwAqgAAAcU"]
[Fri Apr 03 21:55:54.597386 2026] [:error] [pid 40562:tid 40589] [client 72.146.4.48:20453] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ac_G6jfFMXuP9zvqCeqTPAAAAZg"]
[Fri Apr 03 21:55:55.405323 2026] [:error] [pid 40533:tid 40554] [client 72.146.4.48:6926] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ac_G6_bIAA8AViDmwsu2YQAAAVM"]
[Fri Apr 03 21:55:56.205992 2026] [:error] [pid 40533:tid 40548] [client 72.146.4.48:34738] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ac_G7PbIAA8AViDmwsu2ZwAAAU0"]
[Fri Apr 03 21:55:57.255482 2026] [:error] [pid 33542:tid 33552] [client 72.146.4.48:23716] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ac_G7Xwb6uB1LaGtepYCQgAAAMc"]
[Fri Apr 03 21:55:57.903806 2026] [:error] [pid 40533:tid 40537] [client 72.146.4.48:29619] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "ac_G7fbIAA8AViDmwsu2cAAAAUI"]
[Fri Apr 03 21:55:59.098441 2026] [:error] [pid 35469:tid 35492] [client 72.146.4.48:19897] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "ac_G76GvTIc8-wY3jUSzlwAAARU"]
[Fri Apr 03 21:55:59.958639 2026] [:error] [pid 40562:tid 40576] [client 72.146.4.48:29574] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "ac_G7zfFMXuP9zvqCeqTRwAAAYs"]
[Fri Apr 03 21:56:00.660452 2026] [:error] [pid 33445:tid 33460] [client 72.146.4.48:29591] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "ac_G8FlRNZ0iDVmJWM0ZtAAAAAo"]
[Fri Apr 03 21:56:01.532287 2026] [:error] [pid 40533:tid 40550] [client 72.146.4.48:19967] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ac_G8fbIAA8AViDmwsu2eAAAAU8"]
[Fri Apr 03 21:56:02.528804 2026] [:error] [pid 33542:tid 33569] [client 72.146.4.48:19590] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ac_G8nwb6uB1LaGtepYCSgAAANg"]
[Fri Apr 03 21:56:03.114361 2026] [:error] [pid 33445:tid 33457] [client 72.146.4.48:17268] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ac_G81lRNZ0iDVmJWM0ZuAAAAAc"]
[Fri Apr 03 21:56:03.716231 2026] [:error] [pid 33542:tid 33561] [client 72.146.4.48:22057] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ac_G83wb6uB1LaGtepYCTQAAANA"]
[Fri Apr 03 21:56:04.524249 2026] [:error] [pid 40562:tid 40575] [client 72.146.4.48:42874] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-x7.php"] [unique_id "ac_G9DfFMXuP9zvqCeqTTgAAAYo"]
[Fri Apr 03 21:56:05.359539 2026] [:error] [pid 33445:tid 33462] [client 72.146.4.48:20470] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-x7.php"] [unique_id "ac_G9VlRNZ0iDVmJWM0ZwQAAAAw"]
[Fri Apr 03 21:56:05.953544 2026] [:error] [pid 40533:tid 40559] [client 72.146.4.48:22093] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-x7.php"] [unique_id "ac_G9fbIAA8AViDmwsu2ggAAAVg"]
[Fri Apr 03 21:56:06.527178 2026] [:error] [pid 33445:tid 33453] [client 72.146.4.48:34706] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-x7.php"] [unique_id "ac_G9llRNZ0iDVmJWM0ZxgAAAAM"]
[Fri Apr 03 21:56:07.592721 2026] [:error] [pid 33445:tid 33472] [client 72.146.4.48:29604] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/log.php"] [unique_id "ac_G91lRNZ0iDVmJWM0ZzAAAABY"]
[Fri Apr 03 21:56:08.187288 2026] [:error] [pid 33542:tid 33561] [client 72.146.4.48:19929] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/log.php"] [unique_id "ac_G-Hwb6uB1LaGtepYCXAAAANA"]
[Fri Apr 03 21:56:09.069558 2026] [:error] [pid 33445:tid 33471] [client 72.146.4.48:6949] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/log.php"] [unique_id "ac_G-VlRNZ0iDVmJWM0Z0QAAABU"]
[Fri Apr 03 21:56:09.789506 2026] [:error] [pid 33445:tid 33473] [client 72.146.4.48:31357] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/log.php"] [unique_id "ac_G-VlRNZ0iDVmJWM0Z1AAAABc"]
[Fri Apr 03 21:56:10.513453 2026] [:error] [pid 33445:tid 33462] [client 72.146.4.48:10174] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "ac_G-llRNZ0iDVmJWM0Z2QAAAAw"]
[Fri Apr 03 21:56:11.178124 2026] [:error] [pid 33445:tid 33451] [client 72.146.4.48:26627] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "ac_G-1lRNZ0iDVmJWM0Z3AAAAAE"]
[Fri Apr 03 21:56:12.087837 2026] [:error] [pid 33446:tid 33496] [client 72.146.4.48:42855] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "ac_G_Ng3dCqFYIIdw0qAoQAAAFM"]
[Fri Apr 03 21:56:12.813549 2026] [:error] [pid 33446:tid 33493] [client 72.146.4.48:21203] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "ac_G_Ng3dCqFYIIdw0qAowAAAFA"]
[Fri Apr 03 21:56:13.475804 2026] [:error] [pid 33445:tid 33468] [client 72.146.4.48:23732] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "ac_G_VlRNZ0iDVmJWM0Z6AAAABI"]
[Fri Apr 03 21:56:14.003411 2026] [:error] [pid 35469:tid 35494] [client 72.146.4.48:23798] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "ac_G_qGvTIc8-wY3jUSzsQAAARc"]
[Fri Apr 03 21:56:14.832513 2026] [:error] [pid 33446:tid 33486] [client 72.146.4.48:10152] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "ac_G_tg3dCqFYIIdw0qApgAAAEk"]
[Fri Apr 03 21:56:15.741305 2026] [:error] [pid 35469:tid 35472] [client 72.146.4.48:23728] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "ac_G_6GvTIc8-wY3jUSzuAAAAQE"]
[Fri Apr 03 21:56:16.515024 2026] [:error] [pid 35469:tid 35475] [client 72.146.4.48:24194] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ac_HAKGvTIc8-wY3jUSzugAAAQQ"]
[Fri Apr 03 21:56:17.577790 2026] [:error] [pid 35469:tid 35485] [client 72.146.4.48:24195] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ac_HAaGvTIc8-wY3jUSzvgAAAQ4"]
[Fri Apr 03 21:56:18.346049 2026] [:error] [pid 40533:tid 40545] [client 72.146.4.48:31328] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ac_HAvbIAA8AViDmwsu2pAAAAUo"]
[Fri Apr 03 21:56:19.081408 2026] [:error] [pid 33445:tid 33474] [client 72.146.4.48:10140] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ac_HA1lRNZ0iDVmJWM0Z7AAAABg"]
[Fri Apr 03 21:56:20.107464 2026] [:error] [pid 33445:tid 33458] [client 72.146.4.48:7131] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "ac_HBFlRNZ0iDVmJWM0Z9AAAAAg"]
[Fri Apr 03 21:56:21.499289 2026] [:error] [pid 33446:tid 33495] [client 72.146.4.48:21189] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "ac_HBdg3dCqFYIIdw0qAsgAAAFI"]
[Fri Apr 03 21:56:22.359914 2026] [:error] [pid 40562:tid 40565] [client 72.146.4.48:7147] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "ac_HBjfFMXuP9zvqCeqTXwAAAYA"]
[Fri Apr 03 21:56:23.568282 2026] [:error] [pid 33445:tid 33459] [client 72.146.4.48:25543] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "ac_HB1lRNZ0iDVmJWM0Z_QAAAAk"]
[Fri Apr 03 21:56:24.806696 2026] [:error] [pid 55174:tid 55190] [client 72.146.4.48:55023] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "ac_HCJ_WKqUonPNUHYwAwQAAAc4"]
[Fri Apr 03 21:56:26.519923 2026] [:error] [pid 33445:tid 33467] [client 72.146.4.48:9891] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "ac_HCllRNZ0iDVmJWM0aEwAAABE"]
[Fri Apr 03 21:56:28.090588 2026] [:error] [pid 33445:tid 33455] [client 72.146.4.48:23685] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-gr.php
[Fri Apr 03 21:56:28.414601 2026] [:error] [pid 33445:tid 33457] [client 72.146.4.48:23685] [client 72.146.4.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ac_HDFlRNZ0iDVmJWM0aFgAAAAc"]
[Fri Apr 03 21:56:29.287263 2026] [:error] [pid 33542:tid 33562] [client 72.146.4.48:19134] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Fri Apr 03 21:56:29.617470 2026] [:error] [pid 33542:tid 33556] [client 72.146.4.48:19134] File does not exist: /usr/local/apache/htdocs/suspended-page/about3.php
[Fri Apr 03 21:56:29.896617 2026] [:error] [pid 33542:tid 33555] [client 72.146.4.48:19134] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Apr 03 21:56:30.139057 2026] [:error] [pid 33542:tid 33550] [client 72.146.4.48:19134] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Apr 03 21:56:30.395691 2026] [:error] [pid 33542:tid 33548] [client 72.146.4.48:19134] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Apr 03 21:56:30.729124 2026] [:error] [pid 33542:tid 33564] [client 72.146.4.48:19134] [client 72.146.4.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "ac_HDnwb6uB1LaGtepYChQAAANM"]
[Fri Apr 03 21:56:31.698647 2026] [:error] [pid 33445:tid 33472] [client 72.146.4.48:59150] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Fri Apr 03 21:56:32.044338 2026] [:error] [pid 33445:tid 33459] [client 72.146.4.48:59150] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Fri Apr 03 21:56:32.314912 2026] [:error] [pid 33445:tid 33470] [client 72.146.4.48:59150] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Fri Apr 03 21:56:32.808794 2026] [:error] [pid 33445:tid 33467] [client 72.146.4.48:59150] [client 72.146.4.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "ac_HEFlRNZ0iDVmJWM0aQgAAABE"]
[Fri Apr 03 21:56:33.432744 2026] [:error] [pid 40533:tid 40555] [client 72.146.4.48:25568] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ac_HEfbIAA8AViDmwsu2ygAAAVQ"]
[Fri Apr 03 21:56:33.990201 2026] [:error] [pid 33445:tid 33458] [client 72.146.4.48:10233] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ac_HEVlRNZ0iDVmJWM0aSwAAAAg"]
[Fri Apr 03 21:56:34.811151 2026] [:error] [pid 40562:tid 40573] [client 72.146.4.48:59164] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ac_HEjfFMXuP9zvqCeqTbAAAAYg"]
[Fri Apr 03 21:56:36.154965 2026] [:error] [pid 40533:tid 40552] [client 72.146.4.48:22305] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ac_HFPbIAA8AViDmwsu2zAAAAVE"]
[Fri Apr 03 21:56:37.569756 2026] [:error] [pid 33445:tid 33466] [client 72.146.4.48:13909] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "ac_HFVlRNZ0iDVmJWM0aWQAAABA"]
[Fri Apr 03 21:56:38.583783 2026] [:error] [pid 40533:tid 40538] [client 72.146.4.48:30179] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "ac_HFvbIAA8AViDmwsu20gAAAUM"]
[Fri Apr 03 21:56:42.146862 2026] [:error] [pid 33446:tid 33496] [client 72.146.4.48:57240] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "ac_HGtg3dCqFYIIdw0qAzwAAAFM"]
[Fri Apr 03 21:57:12.439251 2026] [:error] [pid 33445:tid 33460] [client 72.146.4.48:29681] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/public/filemanager.php"] [unique_id "ac_HOFlRNZ0iDVmJWM0auwAAAAo"]
[Fri Apr 03 21:57:13.029731 2026] [:error] [pid 33445:tid 33461] [client 72.146.4.48:12586] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/public/filemanager.php"] [unique_id "ac_HOVlRNZ0iDVmJWM0avwAAAAs"]
[Fri Apr 03 21:57:14.011678 2026] [:error] [pid 33445:tid 33450] [client 72.146.4.48:46376] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/public/filemanager.php"] [unique_id "ac_HOllRNZ0iDVmJWM0awgAAAAA"]
[Fri Apr 03 21:57:14.690198 2026] [:error] [pid 33446:tid 33480] [client 72.146.4.48:21112] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/public/filemanager.php"] [unique_id "ac_HOtg3dCqFYIIdw0qA_QAAAEM"]
[Fri Apr 03 21:57:15.265508 2026] [:error] [pid 33446:tid 33497] [client 72.146.4.48:37080] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac_HO9g3dCqFYIIdw0qBAAAAAFQ"]
[Fri Apr 03 21:57:16.056766 2026] [:error] [pid 40533:tid 40547] [client 72.146.4.48:23959] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac_HPPbIAA8AViDmwsu3MQAAAUw"]
[Fri Apr 03 21:57:17.117647 2026] [:error] [pid 40562:tid 40578] [client 72.146.4.48:12374] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac_HPTfFMXuP9zvqCeqTjQAAAY0"]
[Fri Apr 03 21:57:17.739891 2026] [:error] [pid 33542:tid 33555] [client 72.146.4.48:12372] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac_HPXwb6uB1LaGtepYCyQAAAMo"]
[Fri Apr 03 21:57:18.721035 2026] [:error] [pid 33542:tid 33568] [client 72.146.4.48:37109] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dlu.php"] [unique_id "ac_HPnwb6uB1LaGtepYC1QAAANc"]
[Fri Apr 03 21:57:19.431283 2026] [:error] [pid 35469:tid 35472] [client 72.146.4.48:23978] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dlu.php"] [unique_id "ac_HP6GvTIc8-wY3jUS0VQAAAQE"]
[Fri Apr 03 21:57:20.847601 2026] [:error] [pid 33446:tid 33478] [client 72.146.4.48:29654] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dlu.php"] [unique_id "ac_HQNg3dCqFYIIdw0qBAwAAAEE"]
[Fri Apr 03 21:57:21.969630 2026] [:error] [pid 33445:tid 33452] [client 72.146.4.48:27491] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dlu.php"] [unique_id "ac_HQVlRNZ0iDVmJWM0a0wAAAAI"]
[Fri Apr 03 21:57:22.710539 2026] [:error] [pid 33445:tid 33469] [client 72.146.4.48:21107] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ac_HQllRNZ0iDVmJWM0a1gAAABM"]
[Fri Apr 03 21:57:23.581153 2026] [:error] [pid 35469:tid 35488] [client 72.146.4.48:16133] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ac_HQ6GvTIc8-wY3jUS0WAAAARE"]
[Fri Apr 03 21:57:24.466786 2026] [:error] [pid 33542:tid 33559] [client 72.146.4.48:43598] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ac_HRHwb6uB1LaGtepYC5QAAAM4"]
[Fri Apr 03 21:57:25.314688 2026] [:error] [pid 33446:tid 33497] [client 72.146.4.48:21100] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ac_HRdg3dCqFYIIdw0qBBwAAAFQ"]
[Fri Apr 03 21:57:25.964128 2026] [:error] [pid 40562:tid 40583] [client 72.146.4.48:18601] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "ac_HRTfFMXuP9zvqCeqTngAAAZI"]
[Fri Apr 03 21:57:26.874316 2026] [:error] [pid 40562:tid 40588] [client 72.146.4.48:12386] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "ac_HRjfFMXuP9zvqCeqTnwAAAZc"]
[Fri Apr 03 21:57:27.798665 2026] [:error] [pid 40562:tid 40570] [client 72.146.4.48:12407] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "ac_HRzfFMXuP9zvqCeqTogAAAYU"]
[Fri Apr 03 21:57:28.809979 2026] [:error] [pid 40562:tid 40567] [client 72.146.4.48:29632] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "ac_HSDfFMXuP9zvqCeqTpQAAAYI"]
[Fri Apr 03 21:57:30.528291 2026] [:error] [pid 33542:tid 33559] [client 72.146.4.48:37081] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ac_HSnwb6uB1LaGtepYC6wAAAM4"]
[Fri Apr 03 21:57:31.216852 2026] [:error] [pid 55174:tid 55197] [client 72.146.4.48:44303] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ac_HS5_WKqUonPNUHYwA8gAAAdU"]
[Fri Apr 03 21:57:33.077171 2026] [:error] [pid 40562:tid 40589] [client 72.146.4.48:46343] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Fri Apr 03 21:57:33.400710 2026] [:error] [pid 40562:tid 40571] [client 72.146.4.48:46343] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Fri Apr 03 21:57:33.707716 2026] [:error] [pid 40562:tid 40570] [client 72.146.4.48:46343] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Fri Apr 03 21:57:33.950815 2026] [:error] [pid 40562:tid 40587] [client 72.146.4.48:46343] File does not exist: /usr/local/apache/htdocs/suspended-page/hook.php
[Fri Apr 03 21:57:34.251287 2026] [:error] [pid 40562:tid 40584] [client 72.146.4.48:46343] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Fri Apr 03 21:57:34.493568 2026] [:error] [pid 40562:tid 40572] [client 72.146.4.48:46343] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Apr 03 21:57:34.735105 2026] [:error] [pid 40562:tid 40565] [client 72.146.4.48:46343] File does not exist: /usr/local/apache/htdocs/suspended-page/v.php
[Fri Apr 03 21:57:34.986803 2026] [:error] [pid 40562:tid 40567] [client 72.146.4.48:46343] File does not exist: /usr/local/apache/htdocs/suspended-page/te.php
[Fri Apr 03 21:57:35.259017 2026] [:error] [pid 40562:tid 40582] [client 72.146.4.48:46343] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Apr 03 21:57:35.528185 2026] [:error] [pid 40562:tid 40580] [client 72.146.4.48:46343] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Fri Apr 03 21:57:35.770105 2026] [:error] [pid 40562:tid 40579] [client 72.146.4.48:46343] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Fri Apr 03 21:57:36.223777 2026] [:error] [pid 40562:tid 40566] [client 72.146.4.48:46343] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "ac_HUDfFMXuP9zvqCeqTuAAAAYE"]
[Fri Apr 03 21:57:37.168159 2026] [:error] [pid 33542:tid 33550] [client 72.146.4.48:13106] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "ac_HUXwb6uB1LaGtepYC9QAAAMU"]
[Fri Apr 03 21:57:38.528051 2026] [:error] [pid 40562:tid 40576] [client 72.146.4.48:32292] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "ac_HUjfFMXuP9zvqCeqTuQAAAYs"]
[Fri Apr 03 21:57:39.701451 2026] [:error] [pid 33446:tid 33486] [client 72.146.4.48:37809] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "ac_HU9g3dCqFYIIdw0qBFwAAAEk"]
[Fri Apr 03 21:57:40.462823 2026] [:error] [pid 33445:tid 33459] [client 72.146.4.48:10488] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "ac_HVFlRNZ0iDVmJWM0a_QAAAAk"]
[Fri Apr 03 21:57:41.661892 2026] [:error] [pid 33446:tid 33498] [client 72.146.4.48:46373] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "ac_HVdg3dCqFYIIdw0qBHAAAAFU"]
[Fri Apr 03 21:57:42.513719 2026] [:error] [pid 33445:tid 33452] [client 72.146.4.48:23972] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "ac_HVllRNZ0iDVmJWM0bBwAAAAI"]
[Fri Apr 03 21:57:43.145582 2026] [:error] [pid 33542:tid 33548] [client 72.146.4.48:12400] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "ac_HV3wb6uB1LaGtepYC_wAAAMM"]
[Fri Apr 03 21:57:43.951912 2026] [:error] [pid 33445:tid 33451] [client 72.146.4.48:23946] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/public/manager.php"] [unique_id "ac_HV1lRNZ0iDVmJWM0bCwAAAAE"]
[Fri Apr 03 21:57:44.559377 2026] [:error] [pid 55174:tid 55190] [client 72.146.4.48:18816] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/public/manager.php"] [unique_id "ac_HWJ_WKqUonPNUHYwA-gAAAc4"]
[Fri Apr 03 21:57:45.111647 2026] [:error] [pid 40533:tid 40543] [client 72.146.4.48:46369] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/public/manager.php"] [unique_id "ac_HWfbIAA8AViDmwsu3WAAAAUg"]
[Fri Apr 03 21:57:45.818878 2026] [:error] [pid 33445:tid 33452] [client 72.146.4.48:46362] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/public/manager.php"] [unique_id "ac_HWVlRNZ0iDVmJWM0bDwAAAAI"]
[Fri Apr 03 21:57:46.522002 2026] [:error] [pid 33445:tid 33463] [client 72.146.4.48:10456] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ac_HWllRNZ0iDVmJWM0bEwAAAA0"]
[Fri Apr 03 21:57:47.750639 2026] [:error] [pid 33445:tid 33465] [client 72.146.4.48:46378] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ac_HW1lRNZ0iDVmJWM0bGQAAAA8"]
[Fri Apr 03 21:57:48.608550 2026] [:error] [pid 33445:tid 33455] [client 72.146.4.48:54969] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ac_HXFlRNZ0iDVmJWM0bHgAAAAU"]
[Fri Apr 03 21:57:49.328759 2026] [:error] [pid 33445:tid 33453] [client 72.146.4.48:9823] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ac_HXVlRNZ0iDVmJWM0bIQAAAAM"]
[Fri Apr 03 21:57:50.137319 2026] [:error] [pid 33542:tid 33552] [client 72.146.4.48:15907] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "ac_HXnwb6uB1LaGtepYDBgAAAMc"]
[Fri Apr 03 21:57:50.747398 2026] [:error] [pid 33542:tid 33548] [client 72.146.4.48:17413] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "ac_HXnwb6uB1LaGtepYDCAAAAMM"]
[Fri Apr 03 21:57:51.855600 2026] [:error] [pid 33447:tid 33510] [client 72.146.4.48:9814] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "ac_HX0gaPmDHz92j4lNW_wAAAIY"]
[Fri Apr 03 21:57:52.590117 2026] [:error] [pid 33446:tid 33480] [client 72.146.4.48:10475] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "ac_HYNg3dCqFYIIdw0qBJQAAAEM"]
[Fri Apr 03 21:57:53.372207 2026] [:error] [pid 33447:tid 33508] [client 72.146.4.48:10462] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/v2.php"] [unique_id "ac_HYUgaPmDHz92j4lNXAgAAAIQ"]
[Fri Apr 03 21:57:54.042555 2026] [:error] [pid 33542:tid 33555] [client 72.146.4.48:12404] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/v2.php"] [unique_id "ac_HYnwb6uB1LaGtepYDIAAAAMo"]
[Fri Apr 03 21:57:54.865572 2026] [:error] [pid 33445:tid 33460] [client 72.146.4.48:9850] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/v2.php"] [unique_id "ac_HYllRNZ0iDVmJWM0bRAAAAAo"]
[Fri Apr 03 21:57:55.649525 2026] [:error] [pid 40533:tid 40552] [client 72.146.4.48:38859] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/v2.php"] [unique_id "ac_HY_bIAA8AViDmwsu3lwAAAVE"]
[Fri Apr 03 21:57:56.465571 2026] [:error] [pid 35469:tid 35474] [client 72.146.4.48:37823] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac_HZKGvTIc8-wY3jUS0cAAAAQM"]
[Fri Apr 03 21:57:57.334315 2026] [:error] [pid 40562:tid 40587] [client 72.146.4.48:15661] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac_HZTfFMXuP9zvqCeqTxQAAAZY"]
[Fri Apr 03 21:57:58.068001 2026] [:error] [pid 33446:tid 33479] [client 72.146.4.48:43594] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac_HZtg3dCqFYIIdw0qBKQAAAEI"]
[Fri Apr 03 21:57:58.667322 2026] [:error] [pid 40533:tid 40540] [client 72.146.4.48:18600] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac_HZvbIAA8AViDmwsu3mQAAAUU"]
[Fri Apr 03 21:57:59.240171 2026] [:error] [pid 40533:tid 40546] [client 72.146.4.48:38877] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shoha.php"] [unique_id "ac_HZ_bIAA8AViDmwsu3mwAAAUs"]
[Fri Apr 03 21:57:59.951105 2026] [:error] [pid 33542:tid 33568] [client 72.146.4.48:24797] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shoha.php"] [unique_id "ac_HZ3wb6uB1LaGtepYDKAAAANc"]
[Fri Apr 03 21:58:00.815495 2026] [:error] [pid 40533:tid 40539] [client 72.146.4.48:13083] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shoha.php"] [unique_id "ac_HaPbIAA8AViDmwsu3oAAAAUQ"]
[Fri Apr 03 21:58:01.489276 2026] [:error] [pid 55174:tid 55189] [client 72.146.4.48:23527] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shoha.php"] [unique_id "ac_HaZ_WKqUonPNUHYwA_wAAAc0"]
[Fri Apr 03 21:58:02.178383 2026] [:error] [pid 33542:tid 33563] [client 72.146.4.48:37796] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "ac_Hanwb6uB1LaGtepYDLgAAANI"]
[Fri Apr 03 21:58:02.956526 2026] [:error] [pid 35469:tid 35479] [client 72.146.4.48:39307] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "ac_HaqGvTIc8-wY3jUS0eQAAAQg"]
[Fri Apr 03 21:58:03.889347 2026] [:error] [pid 33445:tid 33450] [client 72.146.4.48:43637] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "ac_Ha1lRNZ0iDVmJWM0bVQAAAAA"]
[Fri Apr 03 21:58:05.099559 2026] [:error] [pid 33447:tid 33524] [client 72.146.4.48:17466] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "ac_HbUgaPmDHz92j4lNXCAAAAJQ"]
[Fri Apr 03 21:58:05.974781 2026] [:error] [pid 35469:tid 35477] [client 72.146.4.48:10451] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ac_HbaGvTIc8-wY3jUS0fQAAAQY"]
[Fri Apr 03 21:58:07.628116 2026] [:error] [pid 55174:tid 55190] [client 72.146.4.48:15676] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ac_Hb5_WKqUonPNUHYwBCgAAAc4"]
[Fri Apr 03 21:58:08.962854 2026] [:error] [pid 55174:tid 55183] [client 72.146.4.48:24819] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ac_HcJ_WKqUonPNUHYwBEAAAAcc"]
[Fri Apr 03 21:58:09.958250 2026] [:error] [pid 33447:tid 33509] [client 72.146.4.48:12397] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ac_HcUgaPmDHz92j4lNXEQAAAIU"]
[Fri Apr 03 21:58:10.784230 2026] [:error] [pid 40562:tid 40585] [client 72.146.4.48:13113] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac_HcjfFMXuP9zvqCeqT0gAAAZQ"]
[Fri Apr 03 21:58:11.522046 2026] [:error] [pid 55174:tid 55179] [client 72.146.4.48:15631] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac_Hc5_WKqUonPNUHYwBEQAAAcM"]
[Fri Apr 03 21:58:12.277444 2026] [:error] [pid 33445:tid 33468] [client 72.146.4.48:32288] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac_HdFlRNZ0iDVmJWM0bXwAAABI"]
[Fri Apr 03 21:58:12.975653 2026] [:error] [pid 35469:tid 35471] [client 72.146.4.48:15110] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac_HdKGvTIc8-wY3jUS0iAAAAQA"]
[Fri Apr 03 21:58:13.671398 2026] [:error] [pid 40562:tid 40589] [client 72.146.4.48:10432] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ac_HdTfFMXuP9zvqCeqT4AAAAZg"]
[Fri Apr 03 21:58:14.369326 2026] [:error] [pid 40562:tid 40582] [client 72.146.4.48:38887] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ac_HdjfFMXuP9zvqCeqT6wAAAZE"]
[Fri Apr 03 21:58:15.106527 2026] [:error] [pid 40533:tid 40537] [client 72.146.4.48:12353] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ac_Hd_bIAA8AViDmwsu3sgAAAUI"]
[Fri Apr 03 21:58:16.141626 2026] [:error] [pid 40533:tid 40544] [client 72.146.4.48:39742] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ac_HePbIAA8AViDmwsu3tAAAAUk"]
[Fri Apr 03 21:58:16.931190 2026] [:error] [pid 40533:tid 40536] [client 72.146.4.48:32294] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ac_HePbIAA8AViDmwsu3vQAAAUE"]
[Fri Apr 03 21:58:17.999976 2026] [:error] [pid 33542:tid 33551] [client 72.146.4.48:23973] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ac_HeXwb6uB1LaGtepYDOAAAAMY"]
[Fri Apr 03 21:58:19.007942 2026] [:error] [pid 33447:tid 33512] [client 72.146.4.48:43600] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ac_He0gaPmDHz92j4lNXGAAAAIg"]
[Fri Apr 03 21:58:19.739322 2026] [:error] [pid 33445:tid 33459] [client 72.146.4.48:18587] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ac_He1lRNZ0iDVmJWM0bcAAAAAk"]
[Fri Apr 03 21:58:20.370622 2026] [:error] [pid 40562:tid 40587] [client 72.146.4.48:39716] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ac_HfDfFMXuP9zvqCeqUBQAAAZY"]
[Fri Apr 03 21:58:21.125121 2026] [:error] [pid 33445:tid 33455] [client 72.146.4.48:17467] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ac_HfVlRNZ0iDVmJWM0bdQAAAAU"]
[Fri Apr 03 21:58:23.970203 2026] [:error] [pid 33542:tid 33555] [client 72.146.4.48:37790] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ac_Hf3wb6uB1LaGtepYDPQAAAMo"]
[Fri Apr 03 21:58:24.882676 2026] [:error] [pid 55174:tid 55195] [client 72.146.4.48:37772] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ac_HgJ_WKqUonPNUHYwBUQAAAdM"]
[Fri Apr 03 21:58:26.025745 2026] [:error] [pid 40533:tid 40541] [client 72.146.4.48:15113] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ac_HgvbIAA8AViDmwsu3xwAAAUY"]
[Fri Apr 03 21:58:26.915644 2026] [:error] [pid 35469:tid 35487] [client 72.146.4.48:24783] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ac_HgqGvTIc8-wY3jUS0rQAAARA"]
[Fri Apr 03 21:58:27.774780 2026] [:error] [pid 33542:tid 33563] [client 72.146.4.48:23526] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ac_Hg3wb6uB1LaGtepYDQwAAANI"]
[Fri Apr 03 21:58:28.801791 2026] [:error] [pid 40533:tid 40543] [client 72.146.4.48:18579] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ac_HhPbIAA8AViDmwsu3yQAAAUg"]
[Fri Apr 03 21:58:29.511740 2026] [:error] [pid 33447:tid 33513] [client 72.146.4.48:23987] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac_HhUgaPmDHz92j4lNXHQAAAIk"]
[Fri Apr 03 21:58:30.276661 2026] [:error] [pid 55174:tid 55196] [client 72.146.4.48:39310] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac_Hhp_WKqUonPNUHYwBWAAAAdQ"]
[Fri Apr 03 21:58:31.027415 2026] [:error] [pid 40562:tid 40589] [client 72.146.4.48:38853] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac_HhzfFMXuP9zvqCeqUGwAAAZg"]
[Fri Apr 03 21:58:31.736944 2026] [:error] [pid 40533:tid 40547] [client 72.146.4.48:43601] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ac_Hh_bIAA8AViDmwsu30QAAAUw"]
[Fri Apr 03 21:58:32.697582 2026] [:error] [pid 40533:tid 40553] [client 72.146.4.48:15111] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ac_HiPbIAA8AViDmwsu32QAAAVI"]
[Fri Apr 03 21:58:33.848552 2026] [:error] [pid 40533:tid 40557] [client 72.146.4.48:38868] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ac_HifbIAA8AViDmwsu33gAAAVY"]
[Fri Apr 03 21:58:35.052800 2026] [:error] [pid 40533:tid 40553] [client 72.146.4.48:15627] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Apr 03 21:58:35.537413 2026] [:error] [pid 40533:tid 40538] [client 72.146.4.48:15627] File does not exist: /usr/local/apache/htdocs/suspended-page/zxin.php
[Fri Apr 03 21:58:36.119137 2026] [:error] [pid 40533:tid 40556] [client 72.146.4.48:15627] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Fri Apr 03 21:58:36.362177 2026] [:error] [pid 40533:tid 40557] [client 72.146.4.48:15627] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri Apr 03 21:58:36.609774 2026] [:error] [pid 40533:tid 40542] [client 72.146.4.48:15627] File does not exist: /usr/local/apache/htdocs/suspended-page/wolv2.php
[Fri Apr 03 21:58:36.941141 2026] [:error] [pid 40533:tid 40535] [client 72.146.4.48:15627] File does not exist: /usr/local/apache/htdocs/suspended-page/geck.php
[Fri Apr 03 21:58:37.184975 2026] [:error] [pid 40533:tid 40554] [client 72.146.4.48:15627] File does not exist: /usr/local/apache/htdocs/suspended-page/xtt.php
[Fri Apr 03 21:58:37.488454 2026] [:error] [pid 40533:tid 40550] [client 72.146.4.48:15627] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Apr 03 21:58:37.765688 2026] [:error] [pid 40533:tid 40555] [client 72.146.4.48:15627] File does not exist: /usr/local/apache/htdocs/suspended-page/system.php
[Fri Apr 03 21:58:38.009248 2026] [:error] [pid 40533:tid 40541] [client 72.146.4.48:15627] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Apr 03 21:58:38.288419 2026] [:error] [pid 40533:tid 40553] [client 72.146.4.48:15627] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "ac_HjvbIAA8AViDmwsu39QAAAVI"]
[Fri Apr 03 21:58:39.203654 2026] [:error] [pid 33445:tid 33452] [client 72.146.4.48:15146] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "ac_Hj1lRNZ0iDVmJWM0bqwAAAAI"]
[Fri Apr 03 21:58:39.907406 2026] [:error] [pid 33445:tid 33458] [client 72.146.4.48:17458] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "ac_Hj1lRNZ0iDVmJWM0bswAAAAg"]
[Fri Apr 03 21:58:40.927974 2026] [:error] [pid 33445:tid 33452] [client 72.146.4.48:43606] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "ac_HkFlRNZ0iDVmJWM0btgAAAAI"]
[Fri Apr 03 21:58:41.538309 2026] [:error] [pid 40562:tid 40582] [client 72.146.4.48:14904] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ac_HkTfFMXuP9zvqCeqUJwAAAZE"]
[Fri Apr 03 21:58:42.142362 2026] [:error] [pid 33445:tid 33468] [client 72.146.4.48:39712] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ac_HkllRNZ0iDVmJWM0bvQAAABI"]
[Fri Apr 03 21:58:42.759459 2026] [:error] [pid 40533:tid 40556] [client 72.146.4.48:39683] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ac_HkvbIAA8AViDmwsu3-AAAAVU"]
[Fri Apr 03 21:58:43.387611 2026] [:error] [pid 33445:tid 33452] [client 72.146.4.48:21085] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ac_Hk1lRNZ0iDVmJWM0bwQAAAAI"]
[Fri Apr 03 21:58:44.165819 2026] [:error] [pid 33446:tid 33497] [client 72.146.4.48:43605] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/media.php"] [unique_id "ac_HlNg3dCqFYIIdw0qBZgAAAFQ"]
[Fri Apr 03 21:58:44.801929 2026] [:error] [pid 33445:tid 33468] [client 72.146.4.48:39684] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/media.php"] [unique_id "ac_HlFlRNZ0iDVmJWM0bxwAAABI"]
[Fri Apr 03 21:58:45.770489 2026] [:error] [pid 35469:tid 35491] [client 72.146.4.48:23489] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/media.php"] [unique_id "ac_HlaGvTIc8-wY3jUS0wgAAARQ"]
[Fri Apr 03 21:58:46.665851 2026] [:error] [pid 33447:tid 33522] [client 72.146.4.48:23520] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/media.php"] [unique_id "ac_HlkgaPmDHz92j4lNXLQAAAJI"]
[Fri Apr 03 21:58:47.475301 2026] [:error] [pid 40533:tid 40547] [client 72.146.4.48:12371] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac_Hl_bIAA8AViDmwsu4BwAAAUw"]
[Fri Apr 03 21:58:48.345872 2026] [:error] [pid 33445:tid 33461] [client 72.146.4.48:15919] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac_HmFlRNZ0iDVmJWM0b1QAAAAs"]
[Fri Apr 03 21:58:48.983662 2026] [:error] [pid 33445:tid 33473] [client 72.146.4.48:17465] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac_HmFlRNZ0iDVmJWM0b2QAAABc"]
[Fri Apr 03 21:58:49.721627 2026] [:error] [pid 33445:tid 33461] [client 72.146.4.48:15152] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ac_HmVlRNZ0iDVmJWM0b3wAAAAs"]
[Fri Apr 03 21:58:50.604378 2026] [:error] [pid 40562:tid 40582] [client 72.146.4.48:32307] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admir.php"] [unique_id "ac_HmjfFMXuP9zvqCeqULQAAAZE"]
[Fri Apr 03 21:58:51.182300 2026] [:error] [pid 33542:tid 33558] [client 72.146.4.48:54966] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admir.php"] [unique_id "ac_Hm3wb6uB1LaGtepYDWAAAAM0"]
[Fri Apr 03 21:58:52.041306 2026] [:error] [pid 40533:tid 40556] [client 72.146.4.48:24823] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admir.php"] [unique_id "ac_HnPbIAA8AViDmwsu4DgAAAVU"]
[Fri Apr 03 21:58:52.567692 2026] [:error] [pid 33447:tid 33508] [client 72.146.4.48:39731] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admir.php"] [unique_id "ac_HnEgaPmDHz92j4lNXNQAAAIQ"]
[Fri Apr 03 21:58:53.328099 2026] [:error] [pid 33445:tid 33453] [client 72.146.4.48:10440] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "ac_HnVlRNZ0iDVmJWM0b7gAAAAM"]
[Fri Apr 03 21:58:53.909499 2026] [:error] [pid 35469:tid 35478] [client 72.146.4.48:14878] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "ac_HnaGvTIc8-wY3jUS0xwAAAQc"]
[Fri Apr 03 21:58:54.553182 2026] [:error] [pid 33447:tid 33519] [client 72.146.4.48:32274] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "ac_HnkgaPmDHz92j4lNXOAAAAI8"]
[Fri Apr 03 21:58:55.221487 2026] [:error] [pid 33445:tid 33459] [client 72.146.4.48:12394] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "ac_Hn1lRNZ0iDVmJWM0b-AAAAAk"]
[Fri Apr 03 21:58:55.864879 2026] [:error] [pid 33445:tid 33468] [client 72.146.4.48:24475] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "ac_Hn1lRNZ0iDVmJWM0b-wAAABI"]
[Fri Apr 03 21:58:56.389010 2026] [:error] [pid 33445:tid 33461] [client 72.146.4.48:15649] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "ac_HoFlRNZ0iDVmJWM0cAAAAAAs"]
[Fri Apr 03 21:58:57.142003 2026] [:error] [pid 33542:tid 33555] [client 72.146.4.48:45455] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "ac_HoXwb6uB1LaGtepYDYAAAAMo"]
[Fri Apr 03 21:58:57.655951 2026] [:error] [pid 35469:tid 35471] [client 72.146.4.48:39693] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "ac_HoaGvTIc8-wY3jUS00wAAAQA"]
[Fri Apr 03 21:58:58.257100 2026] [:error] [pid 40533:tid 40547] [client 72.146.4.48:15657] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac_HovbIAA8AViDmwsu4FwAAAUw"]
[Fri Apr 03 21:58:58.782793 2026] [:error] [pid 40533:tid 40558] [client 72.146.4.48:18355] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac_HovbIAA8AViDmwsu4GgAAAVc"]
[Fri Apr 03 21:58:59.312183 2026] [:error] [pid 55174:tid 55195] [client 72.146.4.48:37795] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac_Ho5_WKqUonPNUHYwBZwAAAdM"]
[Fri Apr 03 21:58:59.863607 2026] [:error] [pid 33445:tid 33467] [client 72.146.4.48:45474] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac_Ho1lRNZ0iDVmJWM0cGAAAABE"]
[Fri Apr 03 21:59:00.630280 2026] [:error] [pid 33446:tid 33486] [client 72.146.4.48:18308] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cc.php"] [unique_id "ac_HpNg3dCqFYIIdw0qBcAAAAEk"]
[Fri Apr 03 21:59:01.207711 2026] [:error] [pid 40533:tid 40549] [client 72.146.4.48:17415] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cc.php"] [unique_id "ac_HpfbIAA8AViDmwsu4JAAAAU4"]
[Fri Apr 03 21:59:01.784554 2026] [:error] [pid 33542:tid 33566] [client 72.146.4.48:32304] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cc.php"] [unique_id "ac_HpXwb6uB1LaGtepYDZwAAANU"]
[Fri Apr 03 21:59:02.677495 2026] [:error] [pid 33542:tid 33569] [client 72.146.4.48:15166] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cc.php"] [unique_id "ac_Hpnwb6uB1LaGtepYDaQAAANg"]
[Fri Apr 03 21:59:03.356491 2026] [:error] [pid 33446:tid 33498] [client 72.146.4.48:6183] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "ac_Hp9g3dCqFYIIdw0qBdgAAAFU"]
[Fri Apr 03 21:59:03.982248 2026] [:error] [pid 33445:tid 33452] [client 72.146.4.48:12370] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "ac_Hp1lRNZ0iDVmJWM0cRwAAAAI"]
[Fri Apr 03 21:59:04.579714 2026] [:error] [pid 33446:tid 33477] [client 72.146.4.48:19709] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "ac_HqNg3dCqFYIIdw0qBeQAAAEA"]
[Fri Apr 03 21:59:05.277847 2026] [:error] [pid 33445:tid 33470] [client 72.146.4.48:34243] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "ac_HqVlRNZ0iDVmJWM0cWQAAABQ"]
[Fri Apr 03 21:59:05.948670 2026] [:error] [pid 40533:tid 40546] [client 72.146.4.48:23543] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "ac_HqfbIAA8AViDmwsu4KwAAAUs"]
[Fri Apr 03 21:59:06.563622 2026] [:error] [pid 40533:tid 40559] [client 72.146.4.48:10486] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "ac_HqvbIAA8AViDmwsu4LQAAAVg"]
[Fri Apr 03 21:59:07.168522 2026] [:error] [pid 35469:tid 35479] [client 72.146.4.48:24990] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "ac_Hq6GvTIc8-wY3jUS03gAAAQg"]
[Fri Apr 03 21:59:07.822963 2026] [:error] [pid 33446:tid 33499] [client 72.146.4.48:22863] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "ac_Hq9g3dCqFYIIdw0qBfAAAAFY"]
[Fri Apr 03 21:59:08.417629 2026] [:error] [pid 40533:tid 40539] [client 72.146.4.48:24772] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ac_HrPbIAA8AViDmwsu4MwAAAUQ"]
[Fri Apr 03 21:59:09.117830 2026] [:error] [pid 35469:tid 35481] [client 72.146.4.48:24786] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ac_HraGvTIc8-wY3jUS03wAAAQo"]
[Fri Apr 03 21:59:09.659397 2026] [:error] [pid 33445:tid 33468] [client 72.146.4.48:15112] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ac_HrVlRNZ0iDVmJWM0cXQAAABI"]
[Fri Apr 03 21:59:10.310884 2026] [:error] [pid 33445:tid 33460] [client 72.146.4.48:11352] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ac_HrllRNZ0iDVmJWM0cZAAAAAo"]
[Fri Apr 03 21:59:10.872045 2026] [:error] [pid 40533:tid 40548] [client 72.146.4.48:54960] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "ac_HrvbIAA8AViDmwsu4OAAAAU0"]
[Fri Apr 03 21:59:11.444616 2026] [:error] [pid 55174:tid 55178] [client 72.146.4.48:37112] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "ac_Hr5_WKqUonPNUHYwBcgAAAcI"]
[Fri Apr 03 21:59:13.827039 2026] [:error] [pid 40562:tid 40568] [client 72.146.4.48:14650] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "ac_HsTfFMXuP9zvqCeqUPwAAAYM"]
[Fri Apr 03 21:59:17.560476 2026] [:error] [pid 33446:tid 33484] [client 72.146.4.48:21665] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "ac_Htdg3dCqFYIIdw0qBgQAAAEc"]
[Fri Apr 03 21:59:21.459608 2026] [:error] [pid 33445:tid 33455] [client 72.146.4.48:21633] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac_HuVlRNZ0iDVmJWM0cigAAAAU"]
[Fri Apr 03 21:59:25.702019 2026] [:error] [pid 40562:tid 40576] [client 72.146.4.48:23334] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac_HvTfFMXuP9zvqCeqUTgAAAYs"]
[Fri Apr 03 21:59:26.881249 2026] [:error] [pid 40533:tid 40547] [client 72.146.4.48:35752] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac_HvvbIAA8AViDmwsu4TgAAAUw"]
[Fri Apr 03 21:59:27.638977 2026] [:error] [pid 40533:tid 40536] [client 72.146.4.48:6618] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac_Hv_bIAA8AViDmwsu4TwAAAUE"]
[Fri Apr 03 21:59:28.284774 2026] [:error] [pid 33445:tid 33453] [client 72.146.4.48:25952] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac_HwFlRNZ0iDVmJWM0ckwAAAAM"]
[Fri Apr 03 21:59:29.068925 2026] [:error] [pid 33445:tid 33454] [client 72.146.4.48:25944] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac_HwVlRNZ0iDVmJWM0clQAAAAQ"]
[Fri Apr 03 21:59:29.679287 2026] [:error] [pid 33447:tid 33526] [client 72.146.4.48:35774] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac_HwUgaPmDHz92j4lNXXwAAAJY"]
[Fri Apr 03 21:59:30.332048 2026] [:error] [pid 33447:tid 33524] [client 72.146.4.48:14152] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac_HwkgaPmDHz92j4lNXYAAAAJQ"]
[Fri Apr 03 21:59:31.139037 2026] [:error] [pid 33445:tid 33453] [client 72.146.4.48:6280] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/content.php"] [unique_id "ac_Hw1lRNZ0iDVmJWM0cnwAAAAM"]
[Fri Apr 03 21:59:31.909086 2026] [:error] [pid 33445:tid 33460] [client 72.146.4.48:35505] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/content.php"] [unique_id "ac_Hw1lRNZ0iDVmJWM0cpgAAAAo"]
[Fri Apr 03 21:59:32.614641 2026] [:error] [pid 33447:tid 33509] [client 72.146.4.48:44694] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/content.php"] [unique_id "ac_HxEgaPmDHz92j4lNXawAAAIU"]
[Fri Apr 03 21:59:33.328921 2026] [:error] [pid 40533:tid 40551] [client 72.146.4.48:45866] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/content.php"] [unique_id "ac_HxfbIAA8AViDmwsu4fAAAAVA"]
[Fri Apr 03 21:59:34.153529 2026] [:error] [pid 33447:tid 33513] [client 72.146.4.48:16424] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-configs.php"] [unique_id "ac_HxkgaPmDHz92j4lNXdQAAAIk"]
[Fri Apr 03 21:59:35.027554 2026] [:error] [pid 55174:tid 55183] [client 72.146.4.48:24028] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-configs.php"] [unique_id "ac_Hx5_WKqUonPNUHYwBiAAAAcc"]
[Fri Apr 03 21:59:36.173871 2026] [:error] [pid 55174:tid 55188] [client 72.146.4.48:44701] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-configs.php"] [unique_id "ac_HyJ_WKqUonPNUHYwBiQAAAcw"]
[Fri Apr 03 21:59:36.808604 2026] [:error] [pid 40562:tid 40570] [client 72.146.4.48:27230] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-configs.php"] [unique_id "ac_HyDfFMXuP9zvqCeqUaAAAAYU"]
[Fri Apr 03 21:59:37.604790 2026] [:error] [pid 40562:tid 40567] [client 72.146.4.48:44720] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "ac_HyTfFMXuP9zvqCeqUbAAAAYI"]
[Fri Apr 03 21:59:38.424438 2026] [:error] [pid 35469:tid 35477] [client 72.146.4.48:30771] File does not exist: /usr/local/apache/htdocs/suspended-page/yas.php
[Fri Apr 03 21:59:38.694665 2026] [:error] [pid 35469:tid 35488] [client 72.146.4.48:30771] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Fri Apr 03 21:59:38.952516 2026] [:error] [pid 35469:tid 35481] [client 72.146.4.48:30771] File does not exist: /usr/local/apache/htdocs/suspended-page/v3.php
[Fri Apr 03 21:59:40.991313 2026] [:error] [pid 35469:tid 35481] [client 72.146.4.48:30771] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Fri Apr 03 21:59:41.523669 2026] [:error] [pid 35469:tid 35474] [client 72.146.4.48:30771] File does not exist: /usr/local/apache/htdocs/suspended-page/himu.php
[Fri Apr 03 21:59:41.828976 2026] [:error] [pid 35469:tid 35493] [client 72.146.4.48:30771] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Fri Apr 03 21:59:42.102900 2026] [:error] [pid 35469:tid 35476] [client 72.146.4.48:30771] File does not exist: /usr/local/apache/htdocs/suspended-page/png.php
[Fri Apr 03 21:59:42.365914 2026] [:error] [pid 35469:tid 35483] [client 72.146.4.48:30771] File does not exist: /usr/local/apache/htdocs/suspended-page/mds.php
[Fri Apr 03 21:59:42.607150 2026] [:error] [pid 35469:tid 35487] [client 72.146.4.48:30771] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Fri Apr 03 21:59:42.891700 2026] [:error] [pid 35469:tid 35479] [client 72.146.4.48:30771] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "ac_HzqGvTIc8-wY3jUS1BwAAAQg"]
[Fri Apr 03 21:59:43.745757 2026] [:error] [pid 40562:tid 40576] [client 72.146.4.48:21024] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "ac_HzzfFMXuP9zvqCeqUdgAAAYs"]
[Fri Apr 03 21:59:44.540161 2026] [:error] [pid 33446:tid 33490] [client 72.146.4.48:6271] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "ac_H0Ng3dCqFYIIdw0qBmAAAAE0"]
[Fri Apr 03 21:59:45.706068 2026] [:error] [pid 40533:tid 40553] [client 72.146.4.48:6275] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "ac_H0fbIAA8AViDmwsu4mQAAAVI"]
[Fri Apr 03 21:59:47.033697 2026] [:error] [pid 33542:tid 33549] [client 72.146.4.48:17918] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "ac_H03wb6uB1LaGtepYDpQAAAMQ"]
[Fri Apr 03 21:59:48.075703 2026] [:error] [pid 33447:tid 33527] [client 72.146.4.48:27262] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "ac_H1EgaPmDHz92j4lNXgAAAAJc"]
[Fri Apr 03 21:59:49.253280 2026] [:error] [pid 40533:tid 40540] [client 72.146.4.48:35483] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "ac_H1fbIAA8AViDmwsu4qAAAAUU"]
[Fri Apr 03 21:59:50.427718 2026] [:error] [pid 33445:tid 33472] [client 72.146.4.48:27240] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "ac_H1llRNZ0iDVmJWM0cyQAAABY"]
[Fri Apr 03 21:59:51.680729 2026] [:error] [pid 40533:tid 40550] [client 72.146.4.48:36635] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "ac_H1_bIAA8AViDmwsu4swAAAU8"]
[Fri Apr 03 21:59:52.392428 2026] [:error] [pid 55174:tid 55199] [client 72.146.4.48:64943] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "ac_H2J_WKqUonPNUHYwBkwAAAdc"]
[Fri Apr 03 21:59:53.636645 2026] [:error] [pid 33445:tid 33460] [client 72.146.4.48:18389] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "ac_H2VlRNZ0iDVmJWM0c0AAAAAo"]
[Fri Apr 03 21:59:54.834378 2026] [:error] [pid 40562:tid 40573] [client 72.146.4.48:20112] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "ac_H2jfFMXuP9zvqCeqUhQAAAYg"]
[Fri Apr 03 21:59:55.662495 2026] [:error] [pid 40562:tid 40572] [client 72.146.4.48:18660] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ac_H2zfFMXuP9zvqCeqUiAAAAYc"]
[Fri Apr 03 21:59:56.527889 2026] [:error] [pid 33542:tid 33548] [client 72.146.4.48:16442] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ac_H3Hwb6uB1LaGtepYDxgAAAMM"]
[Fri Apr 03 21:59:57.406752 2026] [:error] [pid 33445:tid 33465] [client 72.146.4.48:57308] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ac_H3VlRNZ0iDVmJWM0c4QAAAA8"]
[Fri Apr 03 21:59:58.706647 2026] [:error] [pid 40562:tid 40565] [client 72.146.4.48:44698] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ac_H3jfFMXuP9zvqCeqUjAAAAYA"]
[Fri Apr 03 21:59:59.479378 2026] [:error] [pid 33542:tid 33561] [client 72.146.4.48:44696] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ac_H33wb6uB1LaGtepYDywAAANA"]
[Fri Apr 03 22:00:00.357949 2026] [:error] [pid 33542:tid 33547] [client 72.146.4.48:10650] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ac_H4Hwb6uB1LaGtepYDzwAAAMI"]
[Fri Apr 03 22:00:01.025717 2026] [:error] [pid 40562:tid 40567] [client 72.146.4.48:20149] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ac_H4TfFMXuP9zvqCeqUjwAAAYI"]
[Fri Apr 03 22:00:01.949729 2026] [:error] [pid 40533:tid 40553] [client 72.146.4.48:38825] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ac_H4fbIAA8AViDmwsu4wAAAAVI"]
[Fri Apr 03 22:00:02.795031 2026] [:error] [pid 33446:tid 33487] [client 72.146.4.48:6307] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "ac_H4tg3dCqFYIIdw0qBoQAAAEo"]
[Fri Apr 03 22:00:03.468815 2026] [:error] [pid 40533:tid 40552] [client 72.146.4.48:26414] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "ac_H4_bIAA8AViDmwsu4xwAAAVE"]
[Fri Apr 03 22:00:04.124447 2026] [:error] [pid 35469:tid 35488] [client 72.146.4.48:17174] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "ac_H5KGvTIc8-wY3jUS1GgAAARE"]
[Fri Apr 03 22:00:05.151058 2026] [:error] [pid 35469:tid 35489] [client 72.146.4.48:44672] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "ac_H5aGvTIc8-wY3jUS1GwAAARI"]
[Fri Apr 03 22:00:05.899137 2026] [:error] [pid 33447:tid 33513] [client 72.146.4.48:44674] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ac_H5UgaPmDHz92j4lNXlQAAAIk"]
[Fri Apr 03 22:00:07.058195 2026] [:error] [pid 33542:tid 33561] [client 72.146.4.48:16425] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ac_H53wb6uB1LaGtepYD1gAAANA"]
[Fri Apr 03 22:00:07.744069 2026] [:error] [pid 33446:tid 33493] [client 72.146.4.48:16396] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ac_H59g3dCqFYIIdw0qBrgAAAFA"]
[Fri Apr 03 22:00:08.448329 2026] [:error] [pid 55174:tid 55187] [client 72.146.4.48:16388] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ac_H6J_WKqUonPNUHYwBowAAAcs"]
[Fri Apr 03 22:00:09.093912 2026] [:error] [pid 40533:tid 40550] [client 72.146.4.48:35506] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lol.php"] [unique_id "ac_H6fbIAA8AViDmwsu4zgAAAU8"]
[Fri Apr 03 22:00:09.853149 2026] [:error] [pid 40562:tid 40575] [client 72.146.4.48:25865] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lol.php"] [unique_id "ac_H6TfFMXuP9zvqCeqUmAAAAYo"]
[Fri Apr 03 22:00:10.679616 2026] [:error] [pid 33542:tid 33555] [client 72.146.4.48:24022] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lol.php"] [unique_id "ac_H6nwb6uB1LaGtepYD3AAAAMo"]
[Fri Apr 03 22:00:11.423483 2026] [:error] [pid 40533:tid 40547] [client 72.146.4.48:10649] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lol.php"] [unique_id "ac_H6_bIAA8AViDmwsu41wAAAUw"]
[Fri Apr 03 22:00:12.355933 2026] [:error] [pid 33445:tid 33464] [client 72.146.4.48:10678] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/radio.php"] [unique_id "ac_H7FlRNZ0iDVmJWM0dAQAAAA4"]
[Fri Apr 03 22:00:13.151399 2026] [:error] [pid 55174:tid 55190] [client 72.146.4.48:31891] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/radio.php"] [unique_id "ac_H7Z_WKqUonPNUHYwBqAAAAc4"]
[Fri Apr 03 22:00:13.950662 2026] [:error] [pid 33445:tid 33450] [client 72.146.4.48:30756] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/radio.php"] [unique_id "ac_H7VlRNZ0iDVmJWM0dCAAAAAA"]
[Fri Apr 03 22:00:15.166588 2026] [:error] [pid 33447:tid 33527] [client 72.146.4.48:25873] [client 72.146.4.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/radio.php"] [unique_id "ac_H70gaPmDHz92j4lNXlwAAAJc"]
[Fri Apr 03 22:34:39.955314 2026] [:error] [pid 40562:tid 40584] [client 20.215.254.185:65263] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX2.php
[Fri Apr 03 22:34:40.213459 2026] [:error] [pid 40562:tid 40581] [client 20.215.254.185:65263] File does not exist: /usr/local/apache/htdocs/suspended-page/gvg1bvpsgtot1rpklCdefault.php
[Fri Apr 03 22:34:40.471788 2026] [:error] [pid 40562:tid 40566] [client 20.215.254.185:65263] File does not exist: /usr/local/apache/htdocs/suspended-page/wtiiy.php
[Fri Apr 03 22:34:40.729847 2026] [:error] [pid 40562:tid 40572] [client 20.215.254.185:65263] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Fri Apr 03 22:34:40.988386 2026] [:error] [pid 40562:tid 40578] [client 20.215.254.185:65263] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Fri Apr 03 22:34:41.247539 2026] [:error] [pid 40562:tid 40587] [client 20.215.254.185:65263] File does not exist: /usr/local/apache/htdocs/suspended-page/qiumnpor3orjwr6me3zmgqCdefault.php
[Fri Apr 03 22:34:41.505422 2026] [:error] [pid 40562:tid 40582] [client 20.215.254.185:65263] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Fri Apr 03 22:34:41.762388 2026] [:error] [pid 40562:tid 40571] [client 20.215.254.185:65263] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Fri Apr 03 22:34:42.021340 2026] [:error] [pid 40562:tid 40580] [client 20.215.254.185:65263] File does not exist: /usr/local/apache/htdocs/suspended-page/only.php
[Fri Apr 03 22:34:42.285712 2026] [:error] [pid 40562:tid 40575] [client 20.215.254.185:65263] File does not exist: /usr/local/apache/htdocs/suspended-page/t2gorhwasq4vioshtatw5eCdefault.php
[Fri Apr 03 22:34:42.540860 2026] [:error] [pid 40562:tid 40581] [client 20.215.254.185:65263] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ac_QAjfFMXuP9zvqCeqgQgAAAZA"]
[Fri Apr 03 22:34:43.053983 2026] [:error] [pid 33445:tid 33456] [client 20.215.254.185:55296] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ac_QA1lRNZ0iDVmJWM02xQAAAAY"]
[Fri Apr 03 22:34:43.565725 2026] [:error] [pid 40533:tid 40556] [client 20.215.254.185:54133] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ac_QA_bIAA8AViDmwsvKzQAAAVU"]
[Fri Apr 03 22:34:44.076567 2026] [:error] [pid 40533:tid 40539] [client 20.215.254.185:55304] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ac_QBPbIAA8AViDmwsvKzwAAAUQ"]
[Fri Apr 03 22:34:44.647608 2026] [:error] [pid 40562:tid 40587] [client 20.215.254.185:65251] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "ac_QBDfFMXuP9zvqCeqgSQAAAZY"]
[Fri Apr 03 22:34:45.159399 2026] [:error] [pid 55174:tid 55187] [client 20.215.254.185:54128] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "ac_QBZ_WKqUonPNUHYwIOAAAAcs"]
[Fri Apr 03 22:34:45.683732 2026] [:error] [pid 55174:tid 55176] [client 20.215.254.185:65156] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "ac_QBZ_WKqUonPNUHYwIOwAAAcA"]
[Fri Apr 03 22:34:46.224301 2026] [:error] [pid 55174:tid 55188] [client 20.215.254.185:65159] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "ac_QBp_WKqUonPNUHYwIPgAAAcw"]
[Fri Apr 03 22:34:46.768943 2026] [:error] [pid 33446:tid 33499] [client 20.215.254.185:55351] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "ac_QBtg3dCqFYIIdw0qLuAAAAFY"]
[Fri Apr 03 22:34:47.280408 2026] [:error] [pid 33542:tid 33569] [client 20.215.254.185:65188] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "ac_QB3wb6uB1LaGtepYTNAAAANg"]
[Fri Apr 03 22:34:47.807695 2026] [:error] [pid 40562:tid 40581] [client 20.215.254.185:65267] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "ac_QBzfFMXuP9zvqCeqgTAAAAZA"]
[Fri Apr 03 22:34:48.331216 2026] [:error] [pid 33445:tid 33474] [client 20.215.254.185:55327] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "ac_QCFlRNZ0iDVmJWM023AAAABg"]
[Fri Apr 03 22:34:48.844342 2026] [:error] [pid 35469:tid 35492] [client 20.215.254.185:55355] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "ac_QCKGvTIc8-wY3jUS9bwAAARU"]
[Fri Apr 03 22:34:49.368983 2026] [:error] [pid 40562:tid 40586] [client 20.215.254.185:54120] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "ac_QCTfFMXuP9zvqCeqgTwAAAZU"]
[Fri Apr 03 22:34:49.925874 2026] [:error] [pid 35469:tid 35480] [client 20.215.254.185:54082] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "ac_QCaGvTIc8-wY3jUS9cAAAAQk"]
[Fri Apr 03 22:34:50.469597 2026] [:error] [pid 55174:tid 55190] [client 20.215.254.185:55329] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "ac_QCp_WKqUonPNUHYwIQwAAAc4"]
[Fri Apr 03 22:34:50.980826 2026] [:error] [pid 55174:tid 55183] [client 20.215.254.185:54092] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ac_QCp_WKqUonPNUHYwIRwAAAcc"]
[Fri Apr 03 22:34:51.493042 2026] [:error] [pid 40533:tid 40551] [client 20.215.254.185:65218] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ac_QC_bIAA8AViDmwsvK0gAAAVA"]
[Fri Apr 03 22:34:52.008353 2026] [:error] [pid 33542:tid 33567] [client 20.215.254.185:54085] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ac_QDHwb6uB1LaGtepYTSQAAANY"]
[Fri Apr 03 22:34:52.518687 2026] [:error] [pid 33542:tid 33548] [client 20.215.254.185:54121] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ac_QDHwb6uB1LaGtepYTSwAAAMM"]
[Fri Apr 03 22:34:53.032628 2026] [:error] [pid 40562:tid 40567] [client 20.215.254.185:54090] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "ac_QDTfFMXuP9zvqCeqgVQAAAYI"]
[Fri Apr 03 22:34:53.544540 2026] [:error] [pid 33446:tid 33501] [client 20.215.254.185:55332] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "ac_QDdg3dCqFYIIdw0qLuwAAAFg"]
[Fri Apr 03 22:34:54.065996 2026] [:error] [pid 33542:tid 33558] [client 20.215.254.185:54098] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "ac_QDnwb6uB1LaGtepYTTwAAAM0"]
[Fri Apr 03 22:34:54.576879 2026] [:error] [pid 55174:tid 55198] [client 20.215.254.185:65242] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "ac_QDp_WKqUonPNUHYwIUgAAAdY"]
[Fri Apr 03 22:34:55.087986 2026] [:error] [pid 35469:tid 35483] [client 20.215.254.185:64715] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ac_QD6GvTIc8-wY3jUS9eAAAAQw"]
[Fri Apr 03 22:34:55.599671 2026] [:error] [pid 33542:tid 33569] [client 20.215.254.185:54088] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ac_QD3wb6uB1LaGtepYTUwAAANg"]
[Fri Apr 03 22:34:56.119077 2026] [:error] [pid 33542:tid 33554] [client 20.215.254.185:55331] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ac_QEHwb6uB1LaGtepYTVQAAAMk"]
[Fri Apr 03 22:34:56.629804 2026] [:error] [pid 55174:tid 55182] [client 20.215.254.185:65266] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ac_QEJ_WKqUonPNUHYwIUwAAAcY"]
[Fri Apr 03 22:34:57.143107 2026] [:error] [pid 33542:tid 33555] [client 20.215.254.185:54135] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "ac_QEXwb6uB1LaGtepYTWAAAAMo"]
[Fri Apr 03 22:34:57.663735 2026] [:error] [pid 33445:tid 33465] [client 20.215.254.185:55344] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "ac_QEVlRNZ0iDVmJWM028wAAAA8"]
[Fri Apr 03 22:34:58.179184 2026] [:error] [pid 40562:tid 40583] [client 20.215.254.185:65273] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "ac_QEjfFMXuP9zvqCeqgYAAAAZI"]
[Fri Apr 03 22:34:58.697835 2026] [:error] [pid 40562:tid 40575] [client 20.215.254.185:55310] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "ac_QEjfFMXuP9zvqCeqgYgAAAYo"]
[Fri Apr 03 22:34:59.214406 2026] [:error] [pid 33542:tid 33562] [client 20.215.254.185:65227] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "ac_QE3wb6uB1LaGtepYTXQAAANE"]
[Fri Apr 03 22:34:59.727437 2026] [:error] [pid 40562:tid 40588] [client 20.215.254.185:65220] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "ac_QEzfFMXuP9zvqCeqgZAAAAZc"]
[Fri Apr 03 22:35:00.241687 2026] [:error] [pid 33542:tid 33569] [client 20.215.254.185:65216] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "ac_QFHwb6uB1LaGtepYTXwAAANg"]
[Fri Apr 03 22:35:00.753780 2026] [:error] [pid 55174:tid 55180] [client 20.215.254.185:55320] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "ac_QFJ_WKqUonPNUHYwIWQAAAcQ"]
[Fri Apr 03 22:35:01.268784 2026] [:error] [pid 55174:tid 55185] [client 20.215.254.185:65161] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "ac_QFZ_WKqUonPNUHYwIWwAAAck"]
[Fri Apr 03 22:35:01.781123 2026] [:error] [pid 55174:tid 55186] [client 20.215.254.185:55299] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "ac_QFZ_WKqUonPNUHYwIXgAAAco"]
[Fri Apr 03 22:35:02.295694 2026] [:error] [pid 35469:tid 35494] [client 20.215.254.185:65167] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "ac_QFqGvTIc8-wY3jUS9gwAAARc"]
[Fri Apr 03 22:35:02.818820 2026] [:error] [pid 40533:tid 40551] [client 20.215.254.185:65275] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "ac_QFvbIAA8AViDmwsvK4QAAAVA"]
[Fri Apr 03 22:35:03.394112 2026] [:error] [pid 55174:tid 55188] [client 20.215.254.185:54102] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac_QF5_WKqUonPNUHYwIZwAAAcw"]
[Fri Apr 03 22:35:03.918455 2026] [:error] [pid 40533:tid 40537] [client 20.215.254.185:64714] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac_QF_bIAA8AViDmwsvK5gAAAUI"]
[Fri Apr 03 22:35:04.430909 2026] [:error] [pid 33542:tid 33557] [client 20.215.254.185:65221] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac_QGHwb6uB1LaGtepYTbgAAAMw"]
[Fri Apr 03 22:35:04.944212 2026] [:error] [pid 40533:tid 40548] [client 20.215.254.185:65153] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac_QGPbIAA8AViDmwsvK5wAAAU0"]
[Fri Apr 03 22:35:05.462849 2026] [:error] [pid 33445:tid 33465] [client 20.215.254.185:65223] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac_QGVlRNZ0iDVmJWM02-wAAAA8"]
[Fri Apr 03 22:35:05.975131 2026] [:error] [pid 55174:tid 55189] [client 20.215.254.185:54142] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac_QGZ_WKqUonPNUHYwIbQAAAc0"]
[Fri Apr 03 22:35:06.484944 2026] [:error] [pid 33445:tid 33469] [client 20.215.254.185:65274] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac_QGllRNZ0iDVmJWM03AQAAABM"]
[Fri Apr 03 22:35:06.996894 2026] [:error] [pid 33445:tid 33452] [client 20.215.254.185:64687] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac_QGllRNZ0iDVmJWM03BgAAAAI"]
[Fri Apr 03 22:35:07.522552 2026] [:error] [pid 33542:tid 33565] [client 20.215.254.185:54107] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "ac_QG3wb6uB1LaGtepYTdgAAANQ"]
[Fri Apr 03 22:35:08.056675 2026] [:error] [pid 33447:tid 33517] [client 20.215.254.185:54084] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "ac_QHEgaPmDHz92j4lNeVQAAAI0"]
[Fri Apr 03 22:35:08.567807 2026] [:error] [pid 33445:tid 33468] [client 20.215.254.185:55356] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "ac_QHFlRNZ0iDVmJWM03DQAAABI"]
[Fri Apr 03 22:35:09.079874 2026] [:error] [pid 33445:tid 33451] [client 20.215.254.185:65160] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "ac_QHVlRNZ0iDVmJWM03EAAAAAE"]
[Fri Apr 03 22:35:09.591159 2026] [:error] [pid 33447:tid 33528] [client 20.215.254.185:65191] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac_QHUgaPmDHz92j4lNeWwAAAJg"]
[Fri Apr 03 22:35:10.111759 2026] [:error] [pid 55174:tid 55176] [client 20.215.254.185:54132] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac_QHp_WKqUonPNUHYwIbwAAAcA"]
[Fri Apr 03 22:35:10.626914 2026] [:error] [pid 33542:tid 33565] [client 20.215.254.185:65276] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac_QHnwb6uB1LaGtepYTgAAAANQ"]
[Fri Apr 03 22:35:11.136469 2026] [:error] [pid 33542:tid 33564] [client 20.215.254.185:55337] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac_QH3wb6uB1LaGtepYTggAAANM"]
[Fri Apr 03 22:35:11.646206 2026] [:error] [pid 40533:tid 40558] [client 20.215.254.185:54127] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pass4.php"] [unique_id "ac_QH_bIAA8AViDmwsvK7gAAAVc"]
[Fri Apr 03 22:35:12.157365 2026] [:error] [pid 33542:tid 33548] [client 20.215.254.185:54112] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pass4.php"] [unique_id "ac_QIHwb6uB1LaGtepYTiAAAAMM"]
[Fri Apr 03 22:35:12.671551 2026] [:error] [pid 33542:tid 33552] [client 20.215.254.185:65234] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pass4.php"] [unique_id "ac_QIHwb6uB1LaGtepYTkAAAAMc"]
[Fri Apr 03 22:35:13.181826 2026] [:error] [pid 40562:tid 40573] [client 20.215.254.185:54137] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pass4.php"] [unique_id "ac_QITfFMXuP9zvqCeqgbgAAAYg"]
[Fri Apr 03 22:35:13.692698 2026] [:error] [pid 40533:tid 40548] [client 20.215.254.185:54118] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "ac_QIfbIAA8AViDmwsvK8gAAAU0"]
[Fri Apr 03 22:35:14.203342 2026] [:error] [pid 33445:tid 33450] [client 20.215.254.185:55357] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "ac_QIllRNZ0iDVmJWM03KgAAAAA"]
[Fri Apr 03 22:35:14.717832 2026] [:error] [pid 33542:tid 33546] [client 20.215.254.185:64719] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "ac_QInwb6uB1LaGtepYTlQAAAME"]
[Fri Apr 03 22:35:15.264514 2026] [:error] [pid 33445:tid 33468] [client 20.215.254.185:55359] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "ac_QI1lRNZ0iDVmJWM03NgAAABI"]
[Fri Apr 03 22:35:15.775501 2026] [:error] [pid 33445:tid 33469] [client 20.215.254.185:55354] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_QI1lRNZ0iDVmJWM03OgAAABM"]
[Fri Apr 03 22:35:16.285451 2026] [:error] [pid 33445:tid 33457] [client 20.215.254.185:65207] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_QJFlRNZ0iDVmJWM03PgAAAAc"]
[Fri Apr 03 22:35:16.803704 2026] [:error] [pid 33445:tid 33455] [client 20.215.254.185:65246] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_QJFlRNZ0iDVmJWM03QQAAAAU"]
[Fri Apr 03 22:35:17.314544 2026] [:error] [pid 40533:tid 40552] [client 20.215.254.185:65187] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_QJfbIAA8AViDmwsvLAQAAAVE"]
[Fri Apr 03 22:35:17.831510 2026] [:error] [pid 40533:tid 40541] [client 20.215.254.185:54087] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ac_QJfbIAA8AViDmwsvLBQAAAUY"]
[Fri Apr 03 22:35:18.347446 2026] [:error] [pid 40562:tid 40585] [client 20.215.254.185:55307] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ac_QJjfFMXuP9zvqCeqgdQAAAZQ"]
[Fri Apr 03 22:35:18.859938 2026] [:error] [pid 40533:tid 40549] [client 20.215.254.185:65255] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ac_QJvbIAA8AViDmwsvLDQAAAU4"]
[Fri Apr 03 22:35:19.370544 2026] [:error] [pid 33446:tid 33492] [client 20.215.254.185:65187] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ac_QJ9g3dCqFYIIdw0qL0QAAAE8"]
[Fri Apr 03 22:35:19.882677 2026] [:error] [pid 40533:tid 40542] [client 20.215.254.185:64658] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "ac_QJ_bIAA8AViDmwsvLEwAAAUc"]
[Fri Apr 03 22:35:20.399513 2026] [:error] [pid 40562:tid 40575] [client 20.215.254.185:54105] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "ac_QKDfFMXuP9zvqCeqgewAAAYo"]
[Fri Apr 03 22:35:20.929640 2026] [:error] [pid 35469:tid 35473] [client 20.215.254.185:65224] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "ac_QKKGvTIc8-wY3jUS9lwAAAQI"]
[Fri Apr 03 22:35:21.444286 2026] [:error] [pid 33445:tid 33458] [client 20.215.254.185:65169] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "ac_QKVlRNZ0iDVmJWM03SgAAAAg"]
[Fri Apr 03 22:35:21.967911 2026] [:error] [pid 40533:tid 40535] [client 20.215.254.185:65259] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gpt-sh.php"] [unique_id "ac_QKfbIAA8AViDmwsvLGwAAAUA"]
[Fri Apr 03 22:35:22.480740 2026] [:error] [pid 40533:tid 40539] [client 20.215.254.185:64711] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gpt-sh.php"] [unique_id "ac_QKvbIAA8AViDmwsvLHQAAAUQ"]
[Fri Apr 03 22:35:23.003066 2026] [:error] [pid 40562:tid 40577] [client 20.215.254.185:54104] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gpt-sh.php"] [unique_id "ac_QKzfFMXuP9zvqCeqgggAAAYw"]
[Fri Apr 03 22:35:23.513959 2026] [:error] [pid 40533:tid 40544] [client 20.215.254.185:55338] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gpt-sh.php"] [unique_id "ac_QK_bIAA8AViDmwsvLHgAAAUk"]
[Fri Apr 03 22:35:24.038925 2026] [:error] [pid 33445:tid 33461] [client 20.215.254.185:55328] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ac_QLFlRNZ0iDVmJWM03UgAAAAs"]
[Fri Apr 03 22:35:24.552384 2026] [:error] [pid 33446:tid 33495] [client 20.215.254.185:65248] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ac_QLNg3dCqFYIIdw0qL1AAAAFI"]
[Fri Apr 03 22:35:25.082596 2026] [:error] [pid 33445:tid 33450] [client 20.215.254.185:65164] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ac_QLVlRNZ0iDVmJWM03WQAAAAA"]
[Fri Apr 03 22:35:25.596505 2026] [:error] [pid 40562:tid 40589] [client 20.215.254.185:65250] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ac_QLTfFMXuP9zvqCeqgiAAAAZg"]
[Fri Apr 03 22:35:26.107567 2026] [:error] [pid 33446:tid 33500] [client 20.215.254.185:63967] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "ac_QLtg3dCqFYIIdw0qL3AAAAFc"]
[Fri Apr 03 22:35:26.618445 2026] [:error] [pid 40562:tid 40578] [client 20.215.254.185:64642] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "ac_QLjfFMXuP9zvqCeqgiQAAAY0"]
[Fri Apr 03 22:35:27.131674 2026] [:error] [pid 33446:tid 33492] [client 20.215.254.185:65168] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "ac_QL9g3dCqFYIIdw0qL5AAAAE8"]
[Fri Apr 03 22:35:27.641621 2026] [:error] [pid 33445:tid 33456] [client 20.215.254.185:54113] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "ac_QL1lRNZ0iDVmJWM03YwAAAAY"]
[Fri Apr 03 22:35:28.154734 2026] [:error] [pid 33446:tid 33495] [client 20.215.254.185:64723] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac_QMNg3dCqFYIIdw0qL5wAAAFI"]
[Fri Apr 03 22:35:28.670470 2026] [:error] [pid 40562:tid 40576] [client 20.215.254.185:64730] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac_QMDfFMXuP9zvqCeqgjwAAAYs"]
[Fri Apr 03 22:35:29.185441 2026] [:error] [pid 40562:tid 40574] [client 20.215.254.185:55321] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac_QMTfFMXuP9zvqCeqglQAAAYk"]
[Fri Apr 03 22:35:29.714688 2026] [:error] [pid 33445:tid 33464] [client 20.215.254.185:65172] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac_QMVlRNZ0iDVmJWM03cgAAAA4"]
[Fri Apr 03 22:35:30.230047 2026] [:error] [pid 33445:tid 33470] [client 20.215.254.185:54139] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac_QMllRNZ0iDVmJWM03dQAAABQ"]
[Fri Apr 03 22:35:30.749086 2026] [:error] [pid 33446:tid 33498] [client 20.215.254.185:65239] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac_QMtg3dCqFYIIdw0qL7QAAAFU"]
[Fri Apr 03 22:35:31.263071 2026] [:error] [pid 40533:tid 40541] [client 20.215.254.185:65235] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac_QM_bIAA8AViDmwsvLIgAAAUY"]
[Fri Apr 03 22:35:31.774587 2026] [:error] [pid 33446:tid 33484] [client 20.215.254.185:55303] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac_QM9g3dCqFYIIdw0qL8wAAAEc"]
[Fri Apr 03 22:35:32.285392 2026] [:error] [pid 40533:tid 40542] [client 20.215.254.185:64650] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac_QNPbIAA8AViDmwsvLJwAAAUc"]
[Fri Apr 03 22:35:32.826185 2026] [:error] [pid 33445:tid 33474] [client 20.215.254.185:65162] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac_QNFlRNZ0iDVmJWM03gQAAABg"]
[Fri Apr 03 22:35:33.339216 2026] [:error] [pid 40533:tid 40539] [client 20.215.254.185:65165] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac_QNfbIAA8AViDmwsvLKwAAAUQ"]
[Fri Apr 03 22:35:33.850086 2026] [:error] [pid 40533:tid 40547] [client 20.215.254.185:65193] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac_QNfbIAA8AViDmwsvLLgAAAUw"]
[Fri Apr 03 22:35:34.361170 2026] [:error] [pid 33445:tid 33472] [client 20.215.254.185:65205] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "ac_QNllRNZ0iDVmJWM03jgAAABY"]
[Fri Apr 03 22:35:34.883956 2026] [:error] [pid 33446:tid 33500] [client 20.215.254.185:65271] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "ac_QNtg3dCqFYIIdw0qL9wAAAFc"]
[Fri Apr 03 22:35:35.395720 2026] [:error] [pid 33446:tid 33483] [client 20.215.254.185:55309] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "ac_QN9g3dCqFYIIdw0qL-QAAAEY"]
[Fri Apr 03 22:35:35.933524 2026] [:error] [pid 40562:tid 40565] [client 20.215.254.185:54129] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "ac_QNzfFMXuP9zvqCeqgngAAAYA"]
[Fri Apr 03 22:35:36.444328 2026] [:error] [pid 40562:tid 40579] [client 20.215.254.185:65279] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ac_QODfFMXuP9zvqCeqgogAAAY4"]
[Fri Apr 03 22:35:36.968624 2026] [:error] [pid 40533:tid 40556] [client 20.215.254.185:65272] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ac_QOPbIAA8AViDmwsvLMQAAAVU"]
[Fri Apr 03 22:35:37.480675 2026] [:error] [pid 40533:tid 40546] [client 20.215.254.185:55302] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ac_QOfbIAA8AViDmwsvLMwAAAUs"]
[Fri Apr 03 22:35:37.991287 2026] [:error] [pid 33445:tid 33467] [client 20.215.254.185:55340] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ac_QOVlRNZ0iDVmJWM03nQAAABE"]
[Fri Apr 03 22:35:38.506578 2026] [:error] [pid 33445:tid 33473] [client 20.215.254.185:54097] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "ac_QOllRNZ0iDVmJWM03nwAAABc"]
[Fri Apr 03 22:35:39.018043 2026] [:error] [pid 33542:tid 33565] [client 20.215.254.185:64731] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "ac_QO3wb6uB1LaGtepYTsAAAANQ"]
[Fri Apr 03 22:35:39.528735 2026] [:error] [pid 33542:tid 33563] [client 20.215.254.185:55325] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "ac_QO3wb6uB1LaGtepYTswAAANI"]
[Fri Apr 03 22:35:40.049894 2026] [:error] [pid 33445:tid 33467] [client 20.215.254.185:55323] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "ac_QPFlRNZ0iDVmJWM03pwAAABE"]
[Fri Apr 03 22:35:40.570422 2026] [:error] [pid 33445:tid 33465] [client 20.215.254.185:64707] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac_QPFlRNZ0iDVmJWM03qAAAAA8"]
[Fri Apr 03 22:35:41.083619 2026] [:error] [pid 33447:tid 33512] [client 20.215.254.185:64678] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac_QPUgaPmDHz92j4lNebgAAAIg"]
[Fri Apr 03 22:35:41.600137 2026] [:error] [pid 33445:tid 33456] [client 20.215.254.185:55301] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac_QPVlRNZ0iDVmJWM03rAAAAAY"]
[Fri Apr 03 22:35:42.116530 2026] [:error] [pid 33542:tid 33557] [client 20.215.254.185:54081] File does not exist: /usr/local/apache/htdocs/suspended-page/q7lhrgzoo7ijhnkcedq2Cdefault.php
[Fri Apr 03 22:35:42.374945 2026] [:error] [pid 33542:tid 33566] [client 20.215.254.185:54081] File does not exist: /usr/local/apache/htdocs/suspended-page/0yellow.php
[Fri Apr 03 22:35:42.633740 2026] [:error] [pid 33542:tid 33565] [client 20.215.254.185:54081] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Fri Apr 03 22:35:42.892643 2026] [:error] [pid 33542:tid 33563] [client 20.215.254.185:54081] File does not exist: /usr/local/apache/htdocs/suspended-page/exhds0ucw0ju9vjgasxqCdefault.php
[Fri Apr 03 22:35:43.151517 2026] [:error] [pid 33542:tid 33568] [client 20.215.254.185:54081] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Apr 03 22:35:43.412187 2026] [:error] [pid 33542:tid 33561] [client 20.215.254.185:54081] File does not exist: /usr/local/apache/htdocs/suspended-page/mI35rZhMg1zJ1vuXdefault.php
[Fri Apr 03 22:35:43.675259 2026] [:error] [pid 33542:tid 33569] [client 20.215.254.185:54081] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Fri Apr 03 22:35:43.936486 2026] [:error] [pid 33542:tid 33556] [client 20.215.254.185:54081] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Fri Apr 03 22:35:44.196912 2026] [:error] [pid 33542:tid 33555] [client 20.215.254.185:54081] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Fri Apr 03 22:35:44.455602 2026] [:error] [pid 33542:tid 33545] [client 20.215.254.185:54081] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Fri Apr 03 22:35:44.713851 2026] [:error] [pid 33542:tid 33560] [client 20.215.254.185:54081] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Apr 03 22:35:44.969342 2026] [:error] [pid 33542:tid 33551] [client 20.215.254.185:54081] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ac_QQHwb6uB1LaGtepYTzwAAAMY"]
[Fri Apr 03 22:35:45.479375 2026] [:error] [pid 40533:tid 40552] [client 20.215.254.185:55349] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ac_QQfbIAA8AViDmwsvLPQAAAVE"]
[Fri Apr 03 22:35:45.988743 2026] [:error] [pid 33542:tid 33546] [client 20.215.254.185:55306] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ac_QQXwb6uB1LaGtepYT0gAAAME"]
[Fri Apr 03 22:35:46.498292 2026] [:error] [pid 40533:tid 40543] [client 20.215.254.185:64680] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ac_QQvbIAA8AViDmwsvLQgAAAUg"]
[Fri Apr 03 22:35:47.009541 2026] [:error] [pid 40533:tid 40545] [client 20.215.254.185:65228] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "ac_QQ_bIAA8AViDmwsvLRAAAAUo"]
[Fri Apr 03 22:35:47.534145 2026] [:error] [pid 33542:tid 33568] [client 20.215.254.185:54123] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "ac_QQ3wb6uB1LaGtepYT1gAAANc"]
[Fri Apr 03 22:35:48.044370 2026] [:error] [pid 40533:tid 40549] [client 20.215.254.185:54101] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "ac_QRPbIAA8AViDmwsvLSwAAAU4"]
[Fri Apr 03 22:35:48.564344 2026] [:error] [pid 40562:tid 40582] [client 20.215.254.185:65241] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "ac_QRDfFMXuP9zvqCeqgrwAAAZE"]
[Fri Apr 03 22:35:49.079581 2026] [:error] [pid 33446:tid 33489] [client 20.215.254.185:64766] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac_QRdg3dCqFYIIdw0qMAwAAAEw"]
[Fri Apr 03 22:35:49.589822 2026] [:error] [pid 40533:tid 40556] [client 20.215.254.185:65222] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac_QRfbIAA8AViDmwsvLTQAAAVU"]
[Fri Apr 03 22:35:50.105454 2026] [:error] [pid 33445:tid 33471] [client 20.215.254.185:54094] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac_QRllRNZ0iDVmJWM03ywAAABU"]
[Fri Apr 03 22:35:50.618673 2026] [:error] [pid 33445:tid 33452] [client 20.215.254.185:65184] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac_QRllRNZ0iDVmJWM03zwAAAAI"]
[Fri Apr 03 22:35:51.132627 2026] [:error] [pid 33445:tid 33469] [client 20.215.254.185:64659] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "ac_QR1lRNZ0iDVmJWM031QAAABM"]
[Fri Apr 03 22:35:51.646754 2026] [:error] [pid 55174:tid 55176] [client 20.215.254.185:55346] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "ac_QR5_WKqUonPNUHYwIjQAAAcA"]
[Fri Apr 03 22:35:52.159846 2026] [:error] [pid 40533:tid 40553] [client 20.215.254.185:64737] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "ac_QSPbIAA8AViDmwsvLUQAAAVI"]
[Fri Apr 03 22:35:52.676131 2026] [:error] [pid 40533:tid 40550] [client 20.215.254.185:65229] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "ac_QSPbIAA8AViDmwsvLVwAAAU8"]
[Fri Apr 03 22:35:53.186181 2026] [:error] [pid 33445:tid 33472] [client 20.215.254.185:65202] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "ac_QSVlRNZ0iDVmJWM033gAAABY"]
[Fri Apr 03 22:35:53.696871 2026] [:error] [pid 33445:tid 33455] [client 20.215.254.185:64717] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "ac_QSVlRNZ0iDVmJWM034wAAAAU"]
[Fri Apr 03 22:35:54.219162 2026] [:error] [pid 33445:tid 33459] [client 20.215.254.185:65253] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "ac_QSllRNZ0iDVmJWM036AAAAAk"]
[Fri Apr 03 22:35:54.735134 2026] [:error] [pid 33445:tid 33450] [client 20.215.254.185:65264] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "ac_QSllRNZ0iDVmJWM037gAAAAA"]
[Fri Apr 03 22:35:55.249017 2026] [:error] [pid 33445:tid 33466] [client 20.215.254.185:65236] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "ac_QS1lRNZ0iDVmJWM038gAAABA"]
[Fri Apr 03 22:35:55.760226 2026] [:error] [pid 35469:tid 35477] [client 20.215.254.185:65170] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "ac_QS6GvTIc8-wY3jUS9rAAAAQY"]
[Fri Apr 03 22:35:56.271636 2026] [:error] [pid 33447:tid 33508] [client 20.215.254.185:63995] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "ac_QTEgaPmDHz92j4lNedgAAAIQ"]
[Fri Apr 03 22:35:56.781908 2026] [:error] [pid 33542:tid 33545] [client 20.215.254.185:55339] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "ac_QTHwb6uB1LaGtepYT4QAAAMA"]
[Fri Apr 03 22:35:57.293357 2026] [:error] [pid 33447:tid 33524] [client 20.215.254.185:55335] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "ac_QTUgaPmDHz92j4lNeegAAAJQ"]
[Fri Apr 03 22:35:57.819994 2026] [:error] [pid 33445:tid 33453] [client 20.215.254.185:54115] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "ac_QTVlRNZ0iDVmJWM04AgAAAAM"]
[Fri Apr 03 22:35:58.332449 2026] [:error] [pid 33542:tid 33560] [client 20.215.254.185:55336] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "ac_QTnwb6uB1LaGtepYT4gAAAM8"]
[Fri Apr 03 22:35:58.843654 2026] [:error] [pid 40533:tid 40541] [client 20.215.254.185:54089] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "ac_QTvbIAA8AViDmwsvLagAAAUY"]
[Fri Apr 03 22:35:59.363214 2026] [:error] [pid 33542:tid 33559] [client 20.215.254.185:65260] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "ac_QT3wb6uB1LaGtepYT5AAAAM4"]
[Fri Apr 03 22:35:59.873585 2026] [:error] [pid 40562:tid 40583] [client 20.215.254.185:54140] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "ac_QTzfFMXuP9zvqCeqgtgAAAZI"]
[Fri Apr 03 22:36:00.386949 2026] [:error] [pid 33445:tid 33458] [client 20.215.254.185:55348] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "ac_QUFlRNZ0iDVmJWM04BgAAAAg"]
[Fri Apr 03 22:36:00.898686 2026] [:error] [pid 33542:tid 33549] [client 20.215.254.185:54126] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "ac_QUHwb6uB1LaGtepYT6gAAAMQ"]
[Fri Apr 03 22:36:01.413423 2026] [:error] [pid 33447:tid 33505] [client 20.215.254.185:54083] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "ac_QUUgaPmDHz92j4lNefgAAAIE"]
[Fri Apr 03 22:36:01.934645 2026] [:error] [pid 33445:tid 33451] [client 20.215.254.185:65245] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "ac_QUVlRNZ0iDVmJWM04DAAAAAE"]
[Fri Apr 03 22:36:02.453802 2026] [:error] [pid 35469:tid 35492] [client 20.215.254.185:65252] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "ac_QUqGvTIc8-wY3jUS9sQAAARU"]
[Fri Apr 03 22:36:02.983849 2026] [:error] [pid 33542:tid 33555] [client 20.215.254.185:65155] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "ac_QUnwb6uB1LaGtepYT8AAAAMo"]
[Fri Apr 03 22:36:03.513351 2026] [:error] [pid 33445:tid 33472] [client 20.215.254.185:54136] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "ac_QU1lRNZ0iDVmJWM04FAAAABY"]
[Fri Apr 03 22:36:04.023888 2026] [:error] [pid 33542:tid 33566] [client 20.215.254.185:63957] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "ac_QVHwb6uB1LaGtepYT9AAAANU"]
[Fri Apr 03 22:36:04.537446 2026] [:error] [pid 33542:tid 33552] [client 20.215.254.185:64732] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "ac_QVHwb6uB1LaGtepYT9wAAAMc"]
[Fri Apr 03 22:36:05.133439 2026] [:error] [pid 33445:tid 33474] [client 20.215.254.185:65216] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "ac_QVVlRNZ0iDVmJWM04GwAAABg"]
[Fri Apr 03 22:36:05.666072 2026] [:error] [pid 33445:tid 33472] [client 20.215.254.185:65233] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ac_QVVlRNZ0iDVmJWM04IAAAABY"]
[Fri Apr 03 22:36:06.223363 2026] [:error] [pid 40562:tid 40578] [client 20.215.254.185:64674] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ac_QVjfFMXuP9zvqCeqgvAAAAY0"]
[Fri Apr 03 22:36:06.826305 2026] [:error] [pid 40533:tid 40548] [client 20.215.254.185:55326] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ac_QVvbIAA8AViDmwsvLfAAAAU0"]
[Fri Apr 03 22:36:07.475633 2026] [:error] [pid 40533:tid 40551] [client 20.215.254.185:65154] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ac_QV_bIAA8AViDmwsvLgQAAAVA"]
[Fri Apr 03 22:36:07.989004 2026] [:error] [pid 33542:tid 33566] [client 20.215.254.185:65174] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "ac_QV3wb6uB1LaGtepYUAAAAANU"]
[Fri Apr 03 22:36:08.505149 2026] [:error] [pid 33542:tid 33565] [client 20.215.254.185:64688] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "ac_QWHwb6uB1LaGtepYUAwAAANQ"]
[Fri Apr 03 22:36:09.033649 2026] [:error] [pid 33542:tid 33563] [client 20.215.254.185:54109] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "ac_QWXwb6uB1LaGtepYUBwAAANI"]
[Fri Apr 03 22:36:09.696352 2026] [:error] [pid 40562:tid 40568] [client 20.215.254.185:65214] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "ac_QWTfFMXuP9zvqCeqgvQAAAYM"]
[Fri Apr 03 22:36:10.207566 2026] [:error] [pid 40533:tid 40544] [client 20.215.254.185:65232] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "ac_QWvbIAA8AViDmwsvLigAAAUk"]
[Fri Apr 03 22:36:10.730959 2026] [:error] [pid 33542:tid 33547] [client 20.215.254.185:65225] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "ac_QWnwb6uB1LaGtepYUEgAAAMI"]
[Fri Apr 03 22:36:11.241918 2026] [:error] [pid 40533:tid 40549] [client 20.215.254.185:55322] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "ac_QW_bIAA8AViDmwsvLjQAAAU4"]
[Fri Apr 03 22:36:11.763677 2026] [:error] [pid 33446:tid 33487] [client 20.215.254.185:65182] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "ac_QW9g3dCqFYIIdw0qMEQAAAEo"]
[Fri Apr 03 22:36:12.358159 2026] [:error] [pid 40533:tid 40550] [client 20.215.254.185:65247] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "ac_QXPbIAA8AViDmwsvLkQAAAU8"]
[Fri Apr 03 22:36:12.907946 2026] [:error] [pid 35469:tid 35494] [client 20.215.254.185:65175] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "ac_QXKGvTIc8-wY3jUS9vwAAARc"]
[Fri Apr 03 22:36:13.420522 2026] [:error] [pid 40562:tid 40577] [client 20.215.254.185:65237] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "ac_QXTfFMXuP9zvqCeqgyAAAAYw"]
[Fri Apr 03 22:36:13.939607 2026] [:error] [pid 35469:tid 35489] [client 20.215.254.185:54125] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "ac_QXaGvTIc8-wY3jUS9wgAAARI"]
[Fri Apr 03 22:36:14.451767 2026] [:error] [pid 33445:tid 33452] [client 20.215.254.185:65265] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "ac_QXllRNZ0iDVmJWM04KAAAAAI"]
[Fri Apr 03 22:36:15.026776 2026] [:error] [pid 33446:tid 33494] [client 20.215.254.185:64651] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "ac_QX9g3dCqFYIIdw0qMFAAAAFE"]
[Fri Apr 03 22:36:15.570871 2026] [:error] [pid 35469:tid 35478] [client 20.215.254.185:65157] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "ac_QX6GvTIc8-wY3jUS9xAAAAQc"]
[Fri Apr 03 22:36:16.081593 2026] [:error] [pid 40533:tid 40539] [client 20.215.254.185:65171] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "ac_QYPbIAA8AViDmwsvLmQAAAUQ"]
[Fri Apr 03 22:36:16.594172 2026] [:error] [pid 40533:tid 40548] [client 20.215.254.185:65183] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "ac_QYPbIAA8AViDmwsvLnAAAAU0"]
[Fri Apr 03 22:36:17.105411 2026] [:error] [pid 33542:tid 33549] [client 20.215.254.185:54100] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "ac_QYXwb6uB1LaGtepYUGQAAAMQ"]
[Fri Apr 03 22:36:17.615559 2026] [:error] [pid 40562:tid 40581] [client 20.215.254.185:55313] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "ac_QYTfFMXuP9zvqCeqg1AAAAZA"]
[Fri Apr 03 22:36:18.183460 2026] [:error] [pid 40562:tid 40568] [client 20.215.254.185:65270] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "ac_QYjfFMXuP9zvqCeqg1wAAAYM"]
[Fri Apr 03 22:36:18.736953 2026] [:error] [pid 33445:tid 33470] [client 20.215.254.185:54096] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "ac_QYllRNZ0iDVmJWM04MwAAABQ"]
[Fri Apr 03 22:36:19.252093 2026] [:error] [pid 40562:tid 40565] [client 20.215.254.185:65178] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "ac_QYzfFMXuP9zvqCeqg2AAAAYA"]
[Fri Apr 03 22:36:19.827038 2026] [:error] [pid 33445:tid 33460] [client 20.215.254.185:65269] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "ac_QY1lRNZ0iDVmJWM04OAAAAAo"]
[Fri Apr 03 22:36:20.422471 2026] [:error] [pid 33445:tid 33453] [client 20.215.254.185:55315] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "ac_QZFlRNZ0iDVmJWM04PAAAAAM"]
[Fri Apr 03 22:36:20.945930 2026] [:error] [pid 35469:tid 35495] [client 20.215.254.185:63901] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/green.php"] [unique_id "ac_QZKGvTIc8-wY3jUS9ygAAARg"]
[Fri Apr 03 22:36:21.494667 2026] [:error] [pid 33542:tid 33559] [client 20.215.254.185:64655] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/green.php"] [unique_id "ac_QZXwb6uB1LaGtepYUJQAAAM4"]
[Fri Apr 03 22:36:22.022496 2026] [:error] [pid 33447:tid 33522] [client 20.215.254.185:63944] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/green.php"] [unique_id "ac_QZkgaPmDHz92j4lNejgAAAJI"]
[Fri Apr 03 22:36:22.549618 2026] [:error] [pid 33445:tid 33452] [client 20.215.254.185:64699] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/green.php"] [unique_id "ac_QZllRNZ0iDVmJWM04QQAAAAI"]
[Fri Apr 03 22:36:23.064675 2026] [:error] [pid 33445:tid 33459] [client 20.215.254.185:64720] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "ac_QZ1lRNZ0iDVmJWM04RgAAAAk"]
[Fri Apr 03 22:36:23.684219 2026] [:error] [pid 33446:tid 33492] [client 20.215.254.185:64657] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "ac_QZ9g3dCqFYIIdw0qMIwAAAE8"]
[Fri Apr 03 22:36:24.197280 2026] [:error] [pid 40533:tid 40540] [client 20.215.254.185:63942] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "ac_QaPbIAA8AViDmwsvLqgAAAUU"]
[Fri Apr 03 22:36:24.717513 2026] [:error] [pid 33447:tid 33504] [client 20.215.254.185:55297] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "ac_QaEgaPmDHz92j4lNekgAAAIA"]
[Fri Apr 03 22:36:25.254063 2026] [:error] [pid 35469:tid 35483] [client 20.215.254.185:65203] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "ac_QaaGvTIc8-wY3jUS90QAAAQw"]
[Fri Apr 03 22:36:25.789616 2026] [:error] [pid 55174:tid 55198] [client 20.215.254.185:63953] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "ac_QaZ_WKqUonPNUHYwIlgAAAdY"]
[Fri Apr 03 22:36:26.302630 2026] [:error] [pid 33542:tid 33564] [client 20.215.254.185:64644] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "ac_Qanwb6uB1LaGtepYUKAAAANM"]
[Fri Apr 03 22:36:26.836941 2026] [:error] [pid 33542:tid 33561] [client 20.215.254.185:54111] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "ac_Qanwb6uB1LaGtepYUKgAAANA"]
[Fri Apr 03 22:36:27.374900 2026] [:error] [pid 33445:tid 33455] [client 20.215.254.185:55318] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "ac_Qa1lRNZ0iDVmJWM04TAAAAAU"]
[Fri Apr 03 22:36:27.905763 2026] [:error] [pid 33542:tid 33547] [client 20.215.254.185:54093] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "ac_Qa3wb6uB1LaGtepYULQAAAMI"]
[Fri Apr 03 22:36:28.419878 2026] [:error] [pid 40533:tid 40548] [client 20.215.254.185:64660] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "ac_QbPbIAA8AViDmwsvLsgAAAU0"]
[Fri Apr 03 22:36:28.984283 2026] [:error] [pid 40533:tid 40552] [client 20.215.254.185:55350] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "ac_QbPbIAA8AViDmwsvLtgAAAVE"]
[Fri Apr 03 22:36:29.494587 2026] [:error] [pid 40533:tid 40540] [client 20.215.254.185:55352] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ac_QbfbIAA8AViDmwsvLuQAAAUU"]
[Fri Apr 03 22:36:30.010281 2026] [:error] [pid 33447:tid 33517] [client 20.215.254.185:64760] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ac_QbkgaPmDHz92j4lNemwAAAI0"]
[Sat Apr 04 20:48:32.173578 2026] [:error] [pid 2458:tid 2506] [client 159.65.167.144:44876] [client 159.65.167.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "adEIoCNozic5SuWqclkbuQAAAEI"]
[Sun Apr 05 06:58:54.652446 2026] [:error] [pid 45304:tid 45350] [client 20.199.97.195:28193] File does not exist: /usr/local/apache/htdocs/suspended-page/RIP.php
[Sun Apr 05 13:04:12.153080 2026] [:error] [pid 45303:tid 45324] [client 20.199.99.25:38965] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX2.php
[Sun Apr 05 13:04:12.391800 2026] [:error] [pid 45303:tid 45326] [client 20.199.99.25:38965] File does not exist: /usr/local/apache/htdocs/suspended-page/gvg1bvpsgtot1rpklCdefault.php
[Sun Apr 05 13:04:12.647667 2026] [:error] [pid 45303:tid 45318] [client 20.199.99.25:38965] File does not exist: /usr/local/apache/htdocs/suspended-page/wtiiy.php
[Sun Apr 05 13:04:12.925207 2026] [:error] [pid 45303:tid 45320] [client 20.199.99.25:38965] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Sun Apr 05 13:04:13.163969 2026] [:error] [pid 45303:tid 45330] [client 20.199.99.25:38965] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Sun Apr 05 13:04:13.402770 2026] [:error] [pid 45303:tid 45323] [client 20.199.99.25:38965] File does not exist: /usr/local/apache/htdocs/suspended-page/qiumnpor3orjwr6me3zmgqCdefault.php
[Sun Apr 05 13:04:13.642599 2026] [:error] [pid 45303:tid 45340] [client 20.199.99.25:38965] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Sun Apr 05 13:04:13.882089 2026] [:error] [pid 45303:tid 45333] [client 20.199.99.25:38965] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Sun Apr 05 13:04:14.123275 2026] [:error] [pid 45303:tid 45339] [client 20.199.99.25:38965] File does not exist: /usr/local/apache/htdocs/suspended-page/only.php
[Sun Apr 05 13:04:14.362300 2026] [:error] [pid 45303:tid 45341] [client 20.199.99.25:38965] File does not exist: /usr/local/apache/htdocs/suspended-page/t2gorhwasq4vioshtatw5eCdefault.php
[Sun Apr 05 13:04:14.614012 2026] [:error] [pid 45303:tid 45327] [client 20.199.99.25:38965] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adHtTrboQ9eViZ4hdnkXswAAAAo"]
[Sun Apr 05 13:04:15.775425 2026] [:error] [pid 45304:tid 45347] [client 20.199.99.25:27550] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adHtTw5jnqDKKovdRkmDRQAAAEM"]
[Sun Apr 05 13:04:16.922851 2026] [:error] [pid 45303:tid 45333] [client 20.199.99.25:51170] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adHtULboQ9eViZ4hdnkXugAAABA"]
[Sun Apr 05 13:04:17.752874 2026] [:error] [pid 45409:tid 45430] [client 20.199.99.25:37512] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adHtUdHt_Oyw03gjCNjHogAAANM"]
[Sun Apr 05 13:04:18.680506 2026] [:error] [pid 45409:tid 45417] [client 20.199.99.25:55234] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "adHtUtHt_Oyw03gjCNjHpQAAAMY"]
[Sun Apr 05 13:04:19.708190 2026] [:error] [pid 45305:tid 45372] [client 20.199.99.25:47099] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "adHtU-jDQjr7aWhjflBzWAAAAIE"]
[Sun Apr 05 13:04:20.711165 2026] [:error] [pid 45409:tid 45433] [client 20.199.99.25:27555] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "adHtVNHt_Oyw03gjCNjHqgAAANY"]
[Sun Apr 05 13:04:23.063173 2026] [:error] [pid 30921:tid 30933] [client 20.199.99.25:4153] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "adHtV2FGQVn8Q0ueB24nXgAAAQo"]
[Sun Apr 05 13:04:25.043905 2026] [:error] [pid 45305:tid 45381] [client 20.199.99.25:53526] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "adHtWejDQjr7aWhjflBzaAAAAIo"]
[Sun Apr 05 13:04:31.723782 2026] [:error] [pid 30921:tid 30936] [client 20.199.99.25:4302] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "adHtX2FGQVn8Q0ueB24naAAAAQ0"]
[Sun Apr 05 13:04:35.411693 2026] [:error] [pid 45409:tid 45418] [client 20.199.99.25:33390] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "adHtY9Ht_Oyw03gjCNjH4AAAAMc"]
[Sun Apr 05 13:04:40.724316 2026] [:error] [pid 45304:tid 45362] [client 20.199.99.25:51819] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adHtaA5jnqDKKovdRkmDhAAAAFI"]
[Sun Apr 05 13:04:46.131116 2026] [:error] [pid 45305:tid 45380] [client 20.199.99.25:41874] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adHtbujDQjr7aWhjflBzdAAAAIk"]
[Sun Apr 05 13:04:48.506078 2026] [:error] [pid 45304:tid 45367] [client 20.199.99.25:51821] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adHtcA5jnqDKKovdRkmDlwAAAFc"]
[Sun Apr 05 13:04:51.644866 2026] [:error] [pid 30921:tid 30925] [client 20.199.99.25:51825] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adHtc2FGQVn8Q0ueB24nkwAAAQI"]
[Sun Apr 05 13:04:52.633356 2026] [:error] [pid 30921:tid 30943] [client 20.199.99.25:41868] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "adHtdGFGQVn8Q0ueB24nlQAAARQ"]
[Sun Apr 05 13:04:53.636602 2026] [:error] [pid 30921:tid 30932] [client 20.199.99.25:59156] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "adHtdWFGQVn8Q0ueB24nnQAAAQk"]
[Sun Apr 05 13:04:54.873999 2026] [:error] [pid 45305:tid 45395] [client 20.199.99.25:4348] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "adHtdujDQjr7aWhjflBzhwAAAJg"]
[Sun Apr 05 13:04:55.801050 2026] [:error] [pid 30921:tid 30927] [client 20.199.99.25:26922] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "adHtd2FGQVn8Q0ueB24nowAAAQQ"]
[Sun Apr 05 13:04:56.705192 2026] [:error] [pid 45304:tid 45356] [client 20.199.99.25:26942] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adHteA5jnqDKKovdRkmDoAAAAEw"]
[Sun Apr 05 13:04:57.524559 2026] [:error] [pid 45409:tid 45425] [client 20.199.99.25:33388] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adHtedHt_Oyw03gjCNjIDAAAAM4"]
[Sun Apr 05 13:04:58.287132 2026] [:error] [pid 45303:tid 45323] [client 20.199.99.25:38113] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adHterboQ9eViZ4hdnkX6wAAAAY"]
[Sun Apr 05 13:04:59.151527 2026] [:error] [pid 45303:tid 45334] [client 20.199.99.25:40277] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adHte7boQ9eViZ4hdnkX7AAAABE"]
[Sun Apr 05 13:05:00.378627 2026] [:error] [pid 45304:tid 45357] [client 20.199.99.25:63746] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "adHtfA5jnqDKKovdRkmDqQAAAE0"]
[Sun Apr 05 13:05:00.914922 2026] [:error] [pid 45303:tid 45322] [client 20.199.99.25:35071] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "adHtfLboQ9eViZ4hdnkX9AAAAAU"]
[Sun Apr 05 13:05:01.688001 2026] [:error] [pid 45303:tid 45323] [client 20.199.99.25:4531] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "adHtfbboQ9eViZ4hdnkX-QAAAAY"]
[Sun Apr 05 13:05:02.397904 2026] [:error] [pid 45409:tid 45434] [client 20.199.99.25:59138] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "adHtftHt_Oyw03gjCNjIFwAAANc"]
[Sun Apr 05 13:05:04.907001 2026] [:error] [pid 45304:tid 45347] [client 20.199.99.25:26419] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adHtgA5jnqDKKovdRkmDswAAAEM"]
[Sun Apr 05 13:05:10.404558 2026] [:error] [pid 45409:tid 45420] [client 20.199.99.25:59145] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adHthtHt_Oyw03gjCNjIKQAAAMk"]
[Sun Apr 05 13:05:13.260835 2026] [:error] [pid 45305:tid 45378] [client 20.199.99.25:40598] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adHtiejDQjr7aWhjflBzwAAAAIc"]
[Sun Apr 05 13:05:14.904165 2026] [:error] [pid 45409:tid 45423] [client 20.199.99.25:63757] File does not exist: /usr/local/apache/htdocs/suspended-page/8daf1238_1774208172.php
[Sun Apr 05 13:05:15.143072 2026] [:error] [pid 45409:tid 45416] [client 20.199.99.25:63757] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Sun Apr 05 13:05:15.385061 2026] [:error] [pid 45409:tid 45432] [client 20.199.99.25:63757] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Sun Apr 05 13:05:15.627106 2026] [:error] [pid 45409:tid 45426] [client 20.199.99.25:63757] File does not exist: /usr/local/apache/htdocs/suspended-page/lmutxdvyp7u5yksqke8ozbjgCdefault.php
[Sun Apr 05 13:05:15.895048 2026] [:error] [pid 45409:tid 45417] [client 20.199.99.25:63757] File does not exist: /usr/local/apache/htdocs/suspended-page/wziar1.php
[Sun Apr 05 13:05:17.745062 2026] [:error] [pid 45409:tid 45430] [client 20.199.99.25:63757] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Sun Apr 05 13:05:17.983357 2026] [:error] [pid 45409:tid 45431] [client 20.199.99.25:63757] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Sun Apr 05 13:05:18.511136 2026] [:error] [pid 45409:tid 45427] [client 20.199.99.25:63757] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Sun Apr 05 13:05:18.752626 2026] [:error] [pid 45409:tid 45418] [client 20.199.99.25:63757] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Sun Apr 05 13:05:18.992222 2026] [:error] [pid 45409:tid 45414] [client 20.199.99.25:63757] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sun Apr 05 13:05:19.237738 2026] [:error] [pid 45409:tid 45415] [client 20.199.99.25:63757] File does not exist: /usr/local/apache/htdocs/suspended-page/jlex.php
[Sun Apr 05 13:05:19.474154 2026] [:error] [pid 45409:tid 45413] [client 20.199.99.25:63757] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "adHtj9Ht_Oyw03gjCNjIVwAAAMI"]
[Sun Apr 05 13:05:21.585438 2026] [:error] [pid 45409:tid 45428] [client 20.199.99.25:40611] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "adHtkdHt_Oyw03gjCNjIXgAAANE"]
[Sun Apr 05 13:05:22.480764 2026] [:error] [pid 45409:tid 45421] [client 20.199.99.25:63768] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "adHtktHt_Oyw03gjCNjIYwAAAMo"]
[Sun Apr 05 13:05:24.627402 2026] [:error] [pid 45303:tid 45319] [client 20.199.99.25:40634] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "adHtlLboQ9eViZ4hdnkYEQAAAAI"]
[Sun Apr 05 13:05:26.535059 2026] [:error] [pid 45305:tid 45387] [client 20.199.99.25:59181] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "adHtlujDQjr7aWhjflBz1AAAAJA"]
[Sun Apr 05 13:05:28.199832 2026] [:error] [pid 45305:tid 45375] [client 20.199.99.25:40605] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "adHtmOjDQjr7aWhjflBz2AAAAIQ"]
[Sun Apr 05 13:05:29.715137 2026] [:error] [pid 45304:tid 45351] [client 20.199.99.25:59138] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "adHtmQ5jnqDKKovdRkmDwQAAAEc"]
[Sun Apr 05 13:05:31.793250 2026] [:error] [pid 45305:tid 45392] [client 20.199.99.25:32828] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "adHtm-jDQjr7aWhjflBz5AAAAJU"]
[Sun Apr 05 13:05:33.328073 2026] [:error] [pid 30921:tid 30941] [client 20.199.99.25:63755] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "adHtnWFGQVn8Q0ueB24nzQAAARI"]
[Sun Apr 05 13:05:35.658529 2026] [:error] [pid 45304:tid 45351] [client 20.199.99.25:32263] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "adHtnw5jnqDKKovdRkmDzwAAAEc"]
[Sun Apr 05 13:05:37.248954 2026] [:error] [pid 45304:tid 45357] [client 20.199.99.25:47122] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "adHtoQ5jnqDKKovdRkmD1AAAAE0"]
[Sun Apr 05 13:05:38.432193 2026] [:error] [pid 45304:tid 45344] [client 20.199.99.25:62193] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "adHtog5jnqDKKovdRkmD1wAAAEA"]
[Sun Apr 05 13:05:39.273955 2026] [:error] [pid 45409:tid 45414] [client 20.199.99.25:26401] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "adHto9Ht_Oyw03gjCNjIeAAAAMM"]
[Sun Apr 05 13:05:40.094020 2026] [:error] [pid 30921:tid 30942] [client 20.199.99.25:25875] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "adHtpGFGQVn8Q0ueB24n2wAAARM"]
[Sun Apr 05 13:05:41.979962 2026] [:error] [pid 45305:tid 45385] [client 20.199.99.25:43042] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "adHtpejDQjr7aWhjflBz7AAAAI4"]
[Sun Apr 05 13:05:44.062200 2026] [:error] [pid 45304:tid 45365] [client 20.199.99.25:47158] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "adHtqA5jnqDKKovdRkmD4AAAAFU"]
[Sun Apr 05 13:05:45.221494 2026] [:error] [pid 45304:tid 45361] [client 20.199.99.25:43045] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "adHtqQ5jnqDKKovdRkmD5AAAAFE"]
[Sun Apr 05 13:05:46.127129 2026] [:error] [pid 45305:tid 45377] [client 20.199.99.25:40533] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "adHtqujDQjr7aWhjflBz9gAAAIY"]
[Sun Apr 05 13:05:47.885553 2026] [:error] [pid 45409:tid 45415] [client 20.199.99.25:40549] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "adHtq9Ht_Oyw03gjCNjImgAAAMQ"]
[Sun Apr 05 13:05:49.390397 2026] [:error] [pid 45409:tid 45428] [client 20.199.99.25:43494] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "adHtrdHt_Oyw03gjCNjIoQAAANE"]
[Sun Apr 05 13:05:50.434502 2026] [:error] [pid 30921:tid 30935] [client 20.199.99.25:47107] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adHtrmFGQVn8Q0ueB24n4QAAAQw"]
[Sun Apr 05 13:05:51.451447 2026] [:error] [pid 30921:tid 30942] [client 20.199.99.25:41930] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adHtr2FGQVn8Q0ueB24n5AAAARM"]
[Sun Apr 05 13:05:52.912421 2026] [:error] [pid 45305:tid 45383] [client 20.199.99.25:47770] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adHtsOjDQjr7aWhjflB0BgAAAIw"]
[Sun Apr 05 13:05:56.230717 2026] [:error] [pid 45304:tid 45355] [client 20.199.99.25:47793] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adHttA5jnqDKKovdRkmD-AAAAEs"]
[Sun Apr 05 13:06:01.914522 2026] [:error] [pid 45305:tid 45390] [client 20.199.99.25:41947] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "adHtuejDQjr7aWhjflB0FgAAAJM"]
[Sun Apr 05 13:06:03.738865 2026] [:error] [pid 45409:tid 45418] [client 20.199.99.25:25908] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "adHtu9Ht_Oyw03gjCNjIvwAAAMc"]
[Sun Apr 05 13:06:06.016223 2026] [:error] [pid 45409:tid 45431] [client 20.199.99.25:56775] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "adHtvtHt_Oyw03gjCNjIxQAAANQ"]
[Sun Apr 05 13:06:07.060338 2026] [:error] [pid 45305:tid 45373] [client 20.199.99.25:4425] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "adHtv-jDQjr7aWhjflB0LwAAAII"]
[Sun Apr 05 13:06:07.981533 2026] [:error] [pid 30921:tid 30943] [client 20.199.99.25:40829] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adHtv2FGQVn8Q0ueB24n_AAAARQ"]
[Sun Apr 05 13:06:08.561178 2026] [:error] [pid 30921:tid 30945] [client 20.199.99.25:38816] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adHtwGFGQVn8Q0ueB24oAAAAARY"]
[Sun Apr 05 13:06:10.822563 2026] [:error] [pid 45305:tid 45376] [client 20.199.99.25:58127] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adHtwujDQjr7aWhjflB0NQAAAIU"]
[Sun Apr 05 13:06:12.041564 2026] [:error] [pid 45303:tid 45317] [client 20.199.99.25:56798] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adHtxLboQ9eViZ4hdnkYTgAAAAA"]
[Sun Apr 05 13:06:12.904736 2026] [:error] [pid 45305:tid 45388] [client 20.199.99.25:32710] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pass4.php"] [unique_id "adHtxOjDQjr7aWhjflB0QwAAAJE"]
[Sun Apr 05 13:06:14.031434 2026] [:error] [pid 45305:tid 45384] [client 20.199.99.25:25401] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pass4.php"] [unique_id "adHtxujDQjr7aWhjflB0RQAAAI0"]
[Sun Apr 05 13:06:15.281916 2026] [:error] [pid 45409:tid 45415] [client 20.199.99.25:26462] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pass4.php"] [unique_id "adHtx9Ht_Oyw03gjCNjI0gAAAMQ"]
[Sun Apr 05 13:06:16.365307 2026] [:error] [pid 45409:tid 45429] [client 20.199.99.25:58155] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pass4.php"] [unique_id "adHtyNHt_Oyw03gjCNjI1QAAANI"]
[Sun Apr 05 13:06:17.696546 2026] [:error] [pid 45409:tid 45420] [client 20.199.99.25:54253] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "adHtydHt_Oyw03gjCNjI3AAAAMk"]
[Sun Apr 05 13:06:18.553807 2026] [:error] [pid 45409:tid 45431] [client 20.199.99.25:54266] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "adHtytHt_Oyw03gjCNjI3wAAANQ"]
[Sun Apr 05 13:06:19.856075 2026] [:error] [pid 45303:tid 45335] [client 20.199.99.25:32759] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Sun Apr 05 13:06:20.095993 2026] [:error] [pid 45303:tid 45318] [client 20.199.99.25:32759] File does not exist: /usr/local/apache/htdocs/suspended-page/ibcqocdtu3eovdx2hwj7Cdefault.php
[Sun Apr 05 13:06:20.335588 2026] [:error] [pid 45303:tid 45330] [client 20.199.99.25:32759] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Sun Apr 05 13:06:20.577005 2026] [:error] [pid 45303:tid 45322] [client 20.199.99.25:32759] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Sun Apr 05 13:06:20.815999 2026] [:error] [pid 45303:tid 45331] [client 20.199.99.25:32759] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Sun Apr 05 13:06:21.200687 2026] [:error] [pid 45303:tid 45337] [client 20.199.99.25:32759] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Apr 05 13:06:21.560726 2026] [:error] [pid 45303:tid 45326] [client 20.199.99.25:32759] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sun Apr 05 13:06:21.825120 2026] [:error] [pid 45303:tid 45317] [client 20.199.99.25:32759] File does not exist: /usr/local/apache/htdocs/suspended-page/irpl4xz4fmlzm4tlvvu4h1mCdefault.php
[Sun Apr 05 13:06:22.065192 2026] [:error] [pid 45303:tid 45319] [client 20.199.99.25:32759] File does not exist: /usr/local/apache/htdocs/suspended-page/ogifomnzqnlvwh5womfjirvaCdefault.php
[Sun Apr 05 13:06:22.304738 2026] [:error] [pid 45303:tid 45329] [client 20.199.99.25:32759] File does not exist: /usr/local/apache/htdocs/suspended-page/wlld5fjtdpjmjhsds3qzmipfCdefault.php
[Sun Apr 05 13:06:22.544262 2026] [:error] [pid 45303:tid 45324] [client 20.199.99.25:32759] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Sun Apr 05 13:06:22.789663 2026] [:error] [pid 45303:tid 45333] [client 20.199.99.25:32759] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "adHtzrboQ9eViZ4hdnkYagAAABA"]
[Sun Apr 05 13:06:23.541814 2026] [:error] [pid 45304:tid 45356] [client 20.199.99.25:34024] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "adHtzw5jnqDKKovdRkmECwAAAEw"]
[Sun Apr 05 13:06:24.313011 2026] [:error] [pid 45409:tid 45431] [client 20.199.99.25:4808] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "adHt0NHt_Oyw03gjCNjI9gAAANQ"]
[Sun Apr 05 13:06:25.657773 2026] [:error] [pid 45304:tid 45361] [client 20.199.99.25:34035] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "adHt0Q5jnqDKKovdRkmEDwAAAFE"]
[Sun Apr 05 13:06:26.657714 2026] [:error] [pid 45409:tid 45418] [client 20.199.99.25:33465] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "adHt0tHt_Oyw03gjCNjI_wAAAMc"]
[Sun Apr 05 13:06:27.759500 2026] [:error] [pid 45409:tid 45413] [client 20.199.99.25:28667] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "adHt09Ht_Oyw03gjCNjJBQAAAMI"]
[Sun Apr 05 13:06:28.974283 2026] [:error] [pid 45305:tid 45374] [client 20.199.99.25:4848] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "adHt1OjDQjr7aWhjflB0XQAAAIM"]
[Sun Apr 05 13:06:30.107861 2026] [:error] [pid 45304:tid 45353] [client 20.199.99.25:57278] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "adHt1g5jnqDKKovdRkmEEwAAAEk"]
[Sun Apr 05 13:06:31.362111 2026] [:error] [pid 30921:tid 30946] [client 20.199.99.25:30757] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adHt12FGQVn8Q0ueB24oIAAAARc"]
[Sun Apr 05 13:06:33.613664 2026] [:error] [pid 45305:tid 45385] [client 20.199.99.25:4807] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adHt2ejDQjr7aWhjflB0YgAAAI4"]
[Sun Apr 05 13:06:38.433837 2026] [:error] [pid 45305:tid 45388] [client 20.199.99.25:57259] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adHt3ujDQjr7aWhjflB0cwAAAJE"]
[Sun Apr 05 13:06:41.580486 2026] [:error] [pid 45305:tid 45381] [client 20.199.99.25:54844] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adHt4ejDQjr7aWhjflB0gAAAAIo"]
[Sun Apr 05 13:06:43.951337 2026] [:error] [pid 30921:tid 30946] [client 20.199.99.25:4192] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0yellow.php"] [unique_id "adHt42FGQVn8Q0ueB24oPAAAARc"]
[Sun Apr 05 13:06:45.225936 2026] [:error] [pid 45409:tid 45418] [client 20.199.99.25:36740] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0yellow.php"] [unique_id "adHt5dHt_Oyw03gjCNjJKQAAAMc"]
[Sun Apr 05 13:06:46.558657 2026] [:error] [pid 45305:tid 45381] [client 20.199.99.25:54843] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0yellow.php"] [unique_id "adHt5ujDQjr7aWhjflB0kAAAAIo"]
[Sun Apr 05 13:06:48.355066 2026] [:error] [pid 45409:tid 45412] [client 20.199.99.25:28096] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0yellow.php"] [unique_id "adHt6NHt_Oyw03gjCNjJNwAAAME"]
[Sun Apr 05 13:06:51.152505 2026] [:error] [pid 45303:tid 45329] [client 20.199.99.25:28156] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "adHt67boQ9eViZ4hdnkYeQAAAAw"]
[Sun Apr 05 13:06:52.497012 2026] [:error] [pid 45305:tid 45377] [client 20.199.99.25:54833] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "adHt7OjDQjr7aWhjflB0pQAAAIY"]
[Sun Apr 05 13:06:54.617574 2026] [:error] [pid 30921:tid 30939] [client 20.199.99.25:58090] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "adHt7mFGQVn8Q0ueB24oUgAAARA"]
[Sun Apr 05 13:07:01.249449 2026] [:error] [pid 45305:tid 45373] [client 20.199.99.25:52370] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "adHt9ejDQjr7aWhjflB1FwAAAII"]
[Sun Apr 05 13:07:03.107452 2026] [:error] [pid 45304:tid 45364] [client 20.199.99.25:4183] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adHt9w5jnqDKKovdRkmEKAAAAFQ"]
[Sun Apr 05 13:07:04.269552 2026] [:error] [pid 45409:tid 45419] [client 20.199.99.25:52949] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adHt-NHt_Oyw03gjCNjJaQAAAMg"]
[Sun Apr 05 13:07:04.982677 2026] [:error] [pid 45304:tid 45350] [client 20.199.99.25:28612] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adHt-A5jnqDKKovdRkmELAAAAEY"]
[Sun Apr 05 13:07:07.265535 2026] [:error] [pid 45303:tid 45335] [client 20.199.99.25:57258] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adHt-7boQ9eViZ4hdnkYiwAAABI"]
[Sun Apr 05 13:07:08.354588 2026] [:error] [pid 45409:tid 45411] [client 20.199.99.25:4832] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "adHt_NHt_Oyw03gjCNjJfQAAAMA"]
[Sun Apr 05 13:07:09.325093 2026] [:error] [pid 45304:tid 45347] [client 20.199.99.25:28657] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "adHt_Q5jnqDKKovdRkmELgAAAEM"]
[Sun Apr 05 13:07:11.464708 2026] [:error] [pid 45409:tid 45426] [client 20.199.99.25:58074] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "adHt_9Ht_Oyw03gjCNjJiwAAAM8"]
[Sun Apr 05 13:07:13.613795 2026] [:error] [pid 45409:tid 45420] [client 20.199.99.25:4178] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "adHuAdHt_Oyw03gjCNjJlwAAAMk"]
[Sun Apr 05 13:07:15.670351 2026] [:error] [pid 45303:tid 45323] [client 20.199.99.25:28609] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adHuA7boQ9eViZ4hdnkYlgAAAAY"]
[Sun Apr 05 13:07:17.427471 2026] [:error] [pid 45303:tid 45327] [client 20.199.99.25:56850] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adHuBbboQ9eViZ4hdnkYmQAAAAo"]
[Sun Apr 05 13:07:25.155882 2026] [:error] [pid 45409:tid 45420] [client 20.199.99.25:51237] File does not exist: /usr/local/apache/htdocs/suspended-page/mI35rZhMg1zJ1vuXdefault.php
[Sun Apr 05 13:07:25.395115 2026] [:error] [pid 45409:tid 45419] [client 20.199.99.25:51237] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Sun Apr 05 13:07:25.651337 2026] [:error] [pid 45409:tid 45417] [client 20.199.99.25:51237] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Sun Apr 05 13:07:25.901595 2026] [:error] [pid 45409:tid 45431] [client 20.199.99.25:51237] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Sun Apr 05 13:07:26.143212 2026] [:error] [pid 45409:tid 45420] [client 20.199.99.25:51237] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Sun Apr 05 13:07:26.382151 2026] [:error] [pid 45409:tid 45419] [client 20.199.99.25:51237] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Apr 05 13:07:26.632999 2026] [:error] [pid 45409:tid 45423] [client 20.199.99.25:51237] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Apr 05 13:07:26.871780 2026] [:error] [pid 45409:tid 45432] [client 20.199.99.25:51237] File does not exist: /usr/local/apache/htdocs/suspended-page/zoper1.php
[Sun Apr 05 13:07:27.118076 2026] [:error] [pid 45409:tid 45431] [client 20.199.99.25:51237] File does not exist: /usr/local/apache/htdocs/suspended-page/5xkfgawzejgwqh9hiaznCdefault.php
[Sun Apr 05 13:07:27.359681 2026] [:error] [pid 45409:tid 45421] [client 20.199.99.25:51237] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Apr 05 13:07:27.597809 2026] [:error] [pid 45409:tid 45414] [client 20.199.99.25:51237] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Sun Apr 05 13:07:27.835738 2026] [:error] [pid 45409:tid 45423] [client 20.199.99.25:51237] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adHuD9Ht_Oyw03gjCNjJ0wAAAMw"]
[Sun Apr 05 13:07:28.586485 2026] [:error] [pid 45305:tid 45394] [client 20.199.99.25:47743] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adHuEOjDQjr7aWhjflB1TAAAAJc"]
[Sun Apr 05 13:07:29.647649 2026] [:error] [pid 45305:tid 45382] [client 20.199.99.25:34619] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adHuEejDQjr7aWhjflB1UwAAAIs"]
[Sun Apr 05 13:07:30.666702 2026] [:error] [pid 45303:tid 45323] [client 20.199.99.25:47736] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adHuErboQ9eViZ4hdnkYqgAAAAY"]
[Sun Apr 05 13:07:32.340509 2026] [:error] [pid 45305:tid 45390] [client 20.199.99.25:31835] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "adHuFOjDQjr7aWhjflB1VQAAAJM"]
[Sun Apr 05 13:07:33.373923 2026] [:error] [pid 45409:tid 45415] [client 20.199.99.25:30276] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "adHuFdHt_Oyw03gjCNjJ6AAAAMQ"]
[Sun Apr 05 13:07:34.370657 2026] [:error] [pid 45305:tid 45395] [client 20.199.99.25:56840] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "adHuFujDQjr7aWhjflB1YgAAAJg"]
[Sun Apr 05 13:07:35.083392 2026] [:error] [pid 45409:tid 45417] [client 20.199.99.25:44181] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "adHuF9Ht_Oyw03gjCNjJ8wAAAMY"]
[Sun Apr 05 13:07:35.921414 2026] [:error] [pid 45409:tid 45416] [client 20.199.99.25:35569] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "adHuF9Ht_Oyw03gjCNjJ-AAAAMU"]
[Sun Apr 05 13:07:37.266490 2026] [:error] [pid 45409:tid 45425] [client 20.199.99.25:34597] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "adHuGdHt_Oyw03gjCNjJ_QAAAM4"]
[Sun Apr 05 13:07:39.691909 2026] [:error] [pid 45305:tid 45379] [client 20.199.99.25:56891] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "adHuG-jDQjr7aWhjflB1cQAAAIg"]
[Sun Apr 05 13:07:41.583657 2026] [:error] [pid 45305:tid 45391] [client 20.199.99.25:35531] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "adHuHejDQjr7aWhjflB1gAAAAJQ"]
[Sun Apr 05 13:07:42.800856 2026] [:error] [pid 30921:tid 30934] [client 20.199.99.25:34500] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "adHuHmFGQVn8Q0ueB24olwAAAQs"]
[Sun Apr 05 13:07:43.551557 2026] [:error] [pid 45409:tid 45419] [client 20.199.99.25:62231] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "adHuH9Ht_Oyw03gjCNjKCAAAAMg"]
[Sun Apr 05 13:07:44.819726 2026] [:error] [pid 45304:tid 45344] [client 20.199.99.25:56877] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "adHuIA5jnqDKKovdRkmEPAAAAEA"]
[Sun Apr 05 13:07:46.247211 2026] [:error] [pid 45305:tid 45383] [client 20.199.99.25:32363] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "adHuIujDQjr7aWhjflB1mwAAAIw"]
[Sun Apr 05 13:07:47.725997 2026] [:error] [pid 45305:tid 45382] [client 20.199.99.25:34575] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "adHuI-jDQjr7aWhjflB1pQAAAIs"]
[Sun Apr 05 13:07:49.280142 2026] [:error] [pid 45409:tid 45428] [client 20.199.99.25:35570] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "adHuJdHt_Oyw03gjCNjKDwAAANE"]
[Sun Apr 05 13:07:50.322105 2026] [:error] [pid 30921:tid 30939] [client 20.199.99.25:56842] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "adHuJmFGQVn8Q0ueB24opAAAARA"]
[Sun Apr 05 13:07:51.046084 2026] [:error] [pid 45304:tid 45345] [client 20.199.99.25:31843] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "adHuJw5jnqDKKovdRkmERgAAAEE"]
[Sun Apr 05 13:07:52.063759 2026] [:error] [pid 45303:tid 45325] [client 20.199.99.25:56862] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "adHuKLboQ9eViZ4hdnkYuQAAAAg"]
[Sun Apr 05 13:07:53.201895 2026] [:error] [pid 45409:tid 45415] [client 20.199.99.25:32338] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "adHuKdHt_Oyw03gjCNjKFAAAAMQ"]
[Sun Apr 05 13:07:54.570705 2026] [:error] [pid 45409:tid 45423] [client 20.199.99.25:56838] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "adHuKtHt_Oyw03gjCNjKHAAAAMw"]
[Sun Apr 05 13:07:56.051161 2026] [:error] [pid 45409:tid 45427] [client 20.199.99.25:35619] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "adHuLNHt_Oyw03gjCNjKJQAAANA"]
[Sun Apr 05 13:07:58.969930 2026] [:error] [pid 45305:tid 45373] [client 20.199.99.25:48435] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "adHuLujDQjr7aWhjflB1tgAAAII"]
[Sun Apr 05 13:08:02.434191 2026] [:error] [pid 30921:tid 30928] [client 20.199.99.25:44219] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "adHuMmFGQVn8Q0ueB24osQAAAQU"]
[Sun Apr 05 13:08:10.952562 2026] [:error] [pid 45305:tid 45395] [client 20.199.99.25:52368] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "adHuOujDQjr7aWhjflB11QAAAJg"]
[Sun Apr 05 13:08:13.551181 2026] [:error] [pid 45303:tid 45318] [client 20.199.99.25:32731] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "adHuPbboQ9eViZ4hdnkY0AAAAAE"]
[Sun Apr 05 13:08:15.527575 2026] [:error] [pid 45409:tid 45425] [client 20.199.99.25:59125] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "adHuP9Ht_Oyw03gjCNjKTAAAAM4"]
[Sun Apr 05 13:08:17.029201 2026] [:error] [pid 45305:tid 45395] [client 20.199.99.25:39924] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "adHuQejDQjr7aWhjflB13QAAAJg"]
[Sun Apr 05 13:08:18.863350 2026] [:error] [pid 45409:tid 45419] [client 20.199.99.25:41959] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "adHuQtHt_Oyw03gjCNjKUAAAAMg"]
[Sun Apr 05 13:08:19.492217 2026] [:error] [pid 45304:tid 45355] [client 20.199.99.25:47781] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "adHuQw5jnqDKKovdRkmEcwAAAEs"]
[Sun Apr 05 13:08:20.810687 2026] [:error] [pid 45304:tid 45345] [client 20.199.99.25:32315] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "adHuRA5jnqDKKovdRkmEdAAAAEE"]
[Sun Apr 05 13:08:21.942737 2026] [:error] [pid 45409:tid 45414] [client 20.199.99.25:29606] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "adHuRdHt_Oyw03gjCNjKWwAAAMM"]
[Sun Apr 05 13:08:23.312004 2026] [:error] [pid 45409:tid 45431] [client 20.199.99.25:40540] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "adHuR9Ht_Oyw03gjCNjKXgAAANQ"]
[Sun Apr 05 13:08:24.037732 2026] [:error] [pid 45304:tid 45344] [client 20.199.99.25:4668] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "adHuSA5jnqDKKovdRkmEdwAAAEA"]
[Sun Apr 05 13:08:25.504920 2026] [:error] [pid 45304:tid 45346] [client 20.199.99.25:29623] [client 20.199.99.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "adHuSQ5jnqDKKovdRkmEfAAAAEI"]
[Sun Apr 05 13:08:27.442057 2026] [:error] [pid 45305:tid 45378] [client 20.199.99.25:29573] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Sun Apr 05 13:08:27.701576 2026] [:error] [pid 45305:tid 45384] [client 20.199.99.25:29573] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Sun Apr 05 13:08:27.943561 2026] [:error] [pid 45305:tid 45382] [client 20.199.99.25:29573] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Sun Apr 05 13:08:28.186090 2026] [:error] [pid 45305:tid 45386] [client 20.199.99.25:29573] File does not exist: /usr/local/apache/htdocs/suspended-page/green.php
[Sun Apr 05 13:08:28.423285 2026] [:error] [pid 45305:tid 45372] [client 20.199.99.25:29573] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Sun Apr 05 13:08:28.683397 2026] [:error] [pid 45305:tid 45391] [client 20.199.99.25:29573] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Sun Apr 05 13:08:28.947778 2026] [:error] [pid 45305:tid 45389] [client 20.199.99.25:29573] File does not exist: /usr/local/apache/htdocs/suspended-page/xsas.php
[Sun Apr 05 13:08:29.188812 2026] [:error] [pid 45305:tid 45384] [client 20.199.99.25:29573] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Sun Apr 05 13:08:29.615934 2026] [:error] [pid 45305:tid 45394] [client 20.199.99.25:29573] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Sun Apr 05 13:08:29.854982 2026] [:error] [pid 45305:tid 45373] [client 20.199.99.25:29573] File does not exist: /usr/local/apache/htdocs/suspended-page/hhxc.php
[Sun Apr 05 22:04:54.325126 2026] [:error] [pid 45409:tid 45419] [client 68.221.72.120:63794] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Sun Apr 05 22:04:54.567744 2026] [:error] [pid 45409:tid 45421] [client 68.221.72.120:63794] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun Apr 05 22:04:54.987552 2026] [:error] [pid 45409:tid 45417] [client 68.221.72.120:63794] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Sun Apr 05 22:04:55.229049 2026] [:error] [pid 45409:tid 45419] [client 68.221.72.120:63794] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Sun Apr 05 22:04:55.485637 2026] [:error] [pid 45409:tid 45423] [client 68.221.72.120:63794] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Apr 05 22:04:55.728952 2026] [:error] [pid 45409:tid 45425] [client 68.221.72.120:63794] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Sun Apr 05 22:04:57.723789 2026] [:error] [pid 45409:tid 45417] [client 68.221.72.120:63794] File does not exist: /usr/local/apache/htdocs/suspended-page/wolv2.php
[Sun Apr 05 22:04:57.971784 2026] [:error] [pid 45409:tid 45413] [client 68.221.72.120:63794] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Sun Apr 05 22:04:58.231248 2026] [:error] [pid 45409:tid 45419] [client 68.221.72.120:63794] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Sun Apr 05 22:04:58.492642 2026] [:error] [pid 45409:tid 45421] [client 68.221.72.120:63794] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adJsCtHt_Oyw03gjCNgmiwAAAMo"]
[Sun Apr 05 22:05:00.022671 2026] [:error] [pid 45305:tid 45392] [client 68.221.72.120:12516] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adJsDOjDQjr7aWhjflBsCQAAAJU"]
[Sun Apr 05 22:05:01.048516 2026] [:error] [pid 45304:tid 45348] [client 68.221.72.120:15552] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adJsDQ5jnqDKKovdRkklRQAAAEQ"]
[Sun Apr 05 22:05:01.857342 2026] [:error] [pid 30921:tid 30931] [client 68.221.72.120:57509] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adJsDWFGQVn8Q0ueB24v8gAAAQg"]
[Sun Apr 05 22:05:03.887097 2026] [:error] [pid 45303:tid 45322] [client 68.221.72.120:64358] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "adJsD7boQ9eViZ4hdnlX3QAAAAU"]
[Sun Apr 05 22:05:05.808508 2026] [:error] [pid 45303:tid 45328] [client 68.221.72.120:64437] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "adJsEbboQ9eViZ4hdnlX6QAAAAs"]
[Sun Apr 05 22:05:07.351299 2026] [:error] [pid 45303:tid 45324] [client 68.221.72.120:64978] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "adJsE7boQ9eViZ4hdnlX8AAAAAc"]
[Sun Apr 05 22:05:08.701176 2026] [:error] [pid 30921:tid 30940] [client 68.221.72.120:63751] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "adJsFGFGQVn8Q0ueB24v_AAAARE"]
[Sun Apr 05 22:05:10.910322 2026] [:error] [pid 30921:tid 30929] [client 68.221.72.120:56342] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "adJsFmFGQVn8Q0ueB24wAwAAAQY"]
[Sun Apr 05 22:05:12.134215 2026] [:error] [pid 30921:tid 30930] [client 68.221.72.120:64420] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "adJsGGFGQVn8Q0ueB24wBwAAAQc"]
[Sun Apr 05 22:05:13.833353 2026] [:error] [pid 45303:tid 45323] [client 68.221.72.120:18515] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "adJsGbboQ9eViZ4hdnlYAQAAAAY"]
[Sun Apr 05 22:05:15.662087 2026] [:error] [pid 45303:tid 45341] [client 68.221.72.120:57484] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "adJsG7boQ9eViZ4hdnlYBwAAABg"]
[Sun Apr 05 22:05:18.598333 2026] [:error] [pid 45409:tid 45422] [client 68.221.72.120:64369] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "adJsHtHt_Oyw03gjCNgmvwAAAMs"]
[Sun Apr 05 22:05:21.253573 2026] [:error] [pid 45305:tid 45380] [client 68.221.72.120:15575] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "adJsIejDQjr7aWhjflBsKwAAAIk"]
[Sun Apr 05 22:05:24.641593 2026] [:error] [pid 45303:tid 45317] [client 68.221.72.120:65084] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "adJsJLboQ9eViZ4hdnlYHQAAAAA"]
[Sun Apr 05 22:05:26.615991 2026] [:error] [pid 30921:tid 30943] [client 68.221.72.120:57474] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "adJsJmFGQVn8Q0ueB24wLQAAARQ"]
[Sun Apr 05 22:05:27.637714 2026] [:error] [pid 45409:tid 45428] [client 68.221.72.120:18514] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "adJsJ9Ht_Oyw03gjCNgmxgAAANE"]
[Sun Apr 05 22:05:28.712076 2026] [:error] [pid 45303:tid 45336] [client 68.221.72.120:56373] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "adJsKLboQ9eViZ4hdnlYLAAAABM"]
[Sun Apr 05 22:05:33.269943 2026] [:error] [pid 45305:tid 45388] [client 68.221.72.120:10521] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "adJsLejDQjr7aWhjflBsQAAAAJE"]
[Sun Apr 05 22:05:35.205990 2026] [:error] [pid 45304:tid 45359] [client 68.221.72.120:56366] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "adJsLw5jnqDKKovdRkklZwAAAE8"]
[Sun Apr 05 22:05:36.709910 2026] [:error] [pid 45409:tid 45431] [client 68.221.72.120:64399] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adJsMNHt_Oyw03gjCNgmzAAAANQ"]
[Sun Apr 05 22:05:38.693528 2026] [:error] [pid 30921:tid 30944] [client 68.221.72.120:64971] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adJsMmFGQVn8Q0ueB24wUAAAARU"]
[Sun Apr 05 22:05:39.366643 2026] [:error] [pid 45304:tid 45359] [client 68.221.72.120:10553] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adJsMw5jnqDKKovdRkklcgAAAE8"]
[Sun Apr 05 22:05:40.352080 2026] [:error] [pid 45305:tid 45383] [client 68.221.72.120:56359] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adJsNOjDQjr7aWhjflBsTwAAAIw"]
[Sun Apr 05 22:05:41.151168 2026] [:error] [pid 30921:tid 30940] [client 68.221.72.120:57528] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "adJsNWFGQVn8Q0ueB24wWAAAARE"]
[Sun Apr 05 22:05:42.163654 2026] [:error] [pid 45305:tid 45394] [client 68.221.72.120:64339] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "adJsNujDQjr7aWhjflBsVgAAAJc"]
[Sun Apr 05 22:05:43.519140 2026] [:error] [pid 45305:tid 45382] [client 68.221.72.120:15605] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "adJsN-jDQjr7aWhjflBsXAAAAIs"]
[Sun Apr 05 22:05:44.448223 2026] [:error] [pid 45304:tid 45368] [client 68.221.72.120:64447] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "adJsOA5jnqDKKovdRkkleQAAAFg"]
[Sun Apr 05 22:05:45.649491 2026] [:error] [pid 30921:tid 30928] [client 68.221.72.120:63780] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "adJsOWFGQVn8Q0ueB24wYQAAAQU"]
[Sun Apr 05 22:05:46.874269 2026] [:error] [pid 45305:tid 45389] [client 68.221.72.120:10540] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "adJsOujDQjr7aWhjflBsaQAAAJI"]
[Sun Apr 05 22:05:47.902640 2026] [:error] [pid 45304:tid 45346] [client 68.221.72.120:15566] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "adJsOw5jnqDKKovdRkklfwAAAEI"]
[Sun Apr 05 22:05:49.644817 2026] [:error] [pid 45303:tid 45340] [client 68.221.72.120:12505] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "adJsPbboQ9eViZ4hdnlYRwAAABc"]
[Sun Apr 05 22:05:51.127677 2026] [:error] [pid 45409:tid 45432] [client 68.221.72.120:63749] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "adJsP9Ht_Oyw03gjCNgm9AAAANU"]
[Sun Apr 05 22:05:52.093318 2026] [:error] [pid 45409:tid 45434] [client 68.221.72.120:56335] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "adJsQNHt_Oyw03gjCNgm9wAAANc"]
[Sun Apr 05 22:05:54.847520 2026] [:error] [pid 45303:tid 45332] [client 68.221.72.120:64414] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "adJsQrboQ9eViZ4hdnlYSgAAAA8"]
[Sun Apr 05 22:05:56.312925 2026] [:error] [pid 45409:tid 45431] [client 68.221.72.120:65059] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "adJsRNHt_Oyw03gjCNgnAwAAANQ"]
[Sun Apr 05 22:05:57.262691 2026] [:error] [pid 30921:tid 30947] [client 68.221.72.120:56383] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "adJsRWFGQVn8Q0ueB24weAAAARg"]
[Sun Apr 05 22:05:58.948963 2026] [:error] [pid 45303:tid 45335] [client 68.221.72.120:56336] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Sun Apr 05 22:05:59.191399 2026] [:error] [pid 45303:tid 45339] [client 68.221.72.120:56336] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sun Apr 05 22:05:59.685134 2026] [:error] [pid 45303:tid 45330] [client 68.221.72.120:56336] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Sun Apr 05 22:06:00.211582 2026] [:error] [pid 45303:tid 45318] [client 68.221.72.120:56336] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Apr 05 22:06:00.451634 2026] [:error] [pid 45303:tid 45320] [client 68.221.72.120:56336] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sun Apr 05 22:06:00.714211 2026] [:error] [pid 45303:tid 45328] [client 68.221.72.120:56336] File does not exist: /usr/local/apache/htdocs/suspended-page/file32.php
[Sun Apr 05 22:06:00.960186 2026] [:error] [pid 45303:tid 45332] [client 68.221.72.120:56336] File does not exist: /usr/local/apache/htdocs/suspended-page/nope.php
[Sun Apr 05 22:06:01.203338 2026] [:error] [pid 45303:tid 45338] [client 68.221.72.120:56336] File does not exist: /usr/local/apache/htdocs/suspended-page/js.php
[Sun Apr 05 22:06:01.474575 2026] [:error] [pid 45303:tid 45319] [client 68.221.72.120:56336] [client 68.221.72.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adJsSbboQ9eViZ4hdnlYYAAAAAI"]
[Sun Apr 05 22:06:02.432707 2026] [:error] [pid 45409:tid 45418] [client 68.221.72.120:65042] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Sun Apr 05 22:06:02.674864 2026] [:error] [pid 45409:tid 45411] [client 68.221.72.120:65042] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Apr 05 22:06:02.914298 2026] [:error] [pid 45409:tid 45432] [client 68.221.72.120:65042] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "adJsStHt_Oyw03gjCNgnNgAAANU"]
[Sun Apr 05 22:06:04.147676 2026] [:error] [pid 45409:tid 45419] [client 68.221.72.120:10548] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "adJsTNHt_Oyw03gjCNgnRwAAAMg"]
[Sun Apr 05 22:06:05.482567 2026] [:error] [pid 45409:tid 45422] [client 68.221.72.120:64337] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "adJsTdHt_Oyw03gjCNgnSwAAAMs"]
[Sun Apr 05 22:06:07.493634 2026] [:error] [pid 45303:tid 45339] [client 68.221.72.120:18550] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "adJsT7boQ9eViZ4hdnlYcAAAABY"]
[Sun Apr 05 22:06:08.800011 2026] [:error] [pid 45303:tid 45332] [client 68.221.72.120:18507] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "adJsULboQ9eViZ4hdnlYdgAAAA8"]
[Sun Apr 05 22:06:11.679155 2026] [:error] [pid 45305:tid 45371] [client 68.221.72.120:64423] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "adJsU-jDQjr7aWhjflBsiQAAAIA"]
[Sun Apr 05 22:06:14.670807 2026] [:error] [pid 45305:tid 45383] [client 68.221.72.120:64961] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "adJsVujDQjr7aWhjflBsmAAAAIw"]
[Sun Apr 05 22:06:17.831346 2026] [:error] [pid 30921:tid 30931] [client 68.221.72.120:18540] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "adJsWWFGQVn8Q0ueB24wngAAAQg"]
[Sun Apr 05 22:06:20.436655 2026] [:error] [pid 45409:tid 45411] [client 68.221.72.120:15561] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "adJsXNHt_Oyw03gjCNgncgAAAMA"]
[Sun Apr 05 22:06:22.275518 2026] [:error] [pid 45303:tid 45324] [client 68.221.72.120:64412] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "adJsXrboQ9eViZ4hdnlYnQAAAAc"]
[Sun Apr 05 22:06:23.670104 2026] [:error] [pid 45305:tid 45381] [client 68.221.72.120:64404] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "adJsX-jDQjr7aWhjflBsowAAAIo"]
[Sun Apr 05 22:06:25.766581 2026] [:error] [pid 45304:tid 45350] [client 68.221.72.120:65009] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "adJsYQ5jnqDKKovdRkklswAAAEY"]
[Sun Apr 05 22:06:27.617478 2026] [:error] [pid 45409:tid 45411] [client 68.221.72.120:65085] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "adJsY9Ht_Oyw03gjCNgnhQAAAMA"]
[Sun Apr 05 22:06:28.723784 2026] [:error] [pid 45409:tid 45414] [client 68.221.72.120:64393] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "adJsZNHt_Oyw03gjCNgniAAAAMM"]
[Sun Apr 05 22:06:30.134708 2026] [:error] [pid 45303:tid 45341] [client 68.221.72.120:64398] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "adJsZrboQ9eViZ4hdnlYrAAAABg"]
[Sun Apr 05 22:06:31.061275 2026] [:error] [pid 30921:tid 30935] [client 68.221.72.120:64347] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "adJsZ2FGQVn8Q0ueB24wpwAAAQw"]
[Sun Apr 05 22:06:39.422484 2026] [:error] [pid 45303:tid 45335] [client 68.221.72.120:18063] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "adJsb7boQ9eViZ4hdnlYzQAAABI"]
[Sun Apr 05 22:06:40.973162 2026] [:error] [pid 45303:tid 45336] [client 68.221.72.120:18074] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "adJscLboQ9eViZ4hdnlY1QAAABM"]
[Sun Apr 05 22:06:42.967323 2026] [:error] [pid 45303:tid 45322] [client 68.221.72.120:20395] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "adJscrboQ9eViZ4hdnlY3AAAAAU"]
[Sun Apr 05 22:06:44.669693 2026] [:error] [pid 45304:tid 45363] [client 68.221.72.120:16351] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "adJsdA5jnqDKKovdRkklygAAAFM"]
[Sun Apr 05 22:06:46.266615 2026] [:error] [pid 45304:tid 45357] [client 68.221.72.120:5040] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "adJsdg5jnqDKKovdRkklywAAAE0"]
[Sun Apr 05 22:06:48.704874 2026] [:error] [pid 45409:tid 45429] [client 68.221.72.120:11402] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "adJseNHt_Oyw03gjCNgnxAAAANI"]
[Sun Apr 05 22:06:49.271276 2026] [:error] [pid 45409:tid 45423] [client 68.221.72.120:4153] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "adJsedHt_Oyw03gjCNgnyQAAAMw"]
[Sun Apr 05 22:06:50.766241 2026] [:error] [pid 45305:tid 45393] [client 68.221.72.120:55861] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "adJseujDQjr7aWhjflBszQAAAJY"]
[Sun Apr 05 22:06:51.997841 2026] [:error] [pid 30921:tid 30935] [client 68.221.72.120:4132] [client 68.221.72.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "adJse2FGQVn8Q0ueB24wwgAAAQw"]
[Sun Apr 05 22:06:52.776419 2026] [:error] [pid 45303:tid 45339] [client 68.221.72.120:55837] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/123.php"] [unique_id "adJsfLboQ9eViZ4hdnlY_AAAABY"]
[Sun Apr 05 22:06:54.575360 2026] [:error] [pid 45303:tid 45340] [client 68.221.72.120:11405] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/123.php"] [unique_id "adJsfrboQ9eViZ4hdnlY_gAAABc"]
[Sun Apr 05 22:06:56.817333 2026] [:error] [pid 45304:tid 45359] [client 68.221.72.120:18163] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/123.php"] [unique_id "adJsgA5jnqDKKovdRkkl2AAAAE8"]
[Sun Apr 05 22:06:58.350102 2026] [:error] [pid 45409:tid 45435] [client 68.221.72.120:22553] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "adJsgtHt_Oyw03gjCNgn8QAAANg"]
[Sun Apr 05 22:07:00.462356 2026] [:error] [pid 30921:tid 30940] [client 68.221.72.120:12705] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "adJshGFGQVn8Q0ueB24wxwAAARE"]
[Sun Apr 05 22:07:01.828980 2026] [:error] [pid 45303:tid 45328] [client 68.221.72.120:12689] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "adJshbboQ9eViZ4hdnlZEgAAAAs"]
[Sun Apr 05 22:07:03.576211 2026] [:error] [pid 30921:tid 30935] [client 68.221.72.120:17340] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sun Apr 05 22:07:04.628999 2026] [:error] [pid 30921:tid 30934] [client 68.221.72.120:17340] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sun Apr 05 22:07:04.871428 2026] [:error] [pid 30921:tid 30944] [client 68.221.72.120:17340] File does not exist: /usr/local/apache/htdocs/suspended-page/33.php
[Sun Apr 05 22:07:05.113503 2026] [:error] [pid 30921:tid 30942] [client 68.221.72.120:17340] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Apr 05 22:07:05.645349 2026] [:error] [pid 30921:tid 30927] [client 68.221.72.120:17340] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sun Apr 05 22:07:06.266701 2026] [:error] [pid 30921:tid 30941] [client 68.221.72.120:17340] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-x7.php
[Sun Apr 05 22:07:06.637309 2026] [:error] [pid 30921:tid 30938] [client 68.221.72.120:17340] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Sun Apr 05 22:07:06.903082 2026] [:error] [pid 30921:tid 30935] [client 68.221.72.120:17340] File does not exist: /usr/local/apache/htdocs/suspended-page/v4.php
[Sun Apr 05 22:07:07.172725 2026] [:error] [pid 30921:tid 30926] [client 68.221.72.120:17340] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Sun Apr 05 22:07:07.412515 2026] [:error] [pid 30921:tid 30947] [client 68.221.72.120:17340] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "adJsi2FGQVn8Q0ueB24w4QAAARg"]
[Sun Apr 05 22:07:08.258207 2026] [:error] [pid 45303:tid 45320] [client 68.221.72.120:17319] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "adJsjLboQ9eViZ4hdnlZNAAAAAM"]
[Sun Apr 05 22:07:09.528832 2026] [:error] [pid 45304:tid 45359] [client 68.221.72.120:10248] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "adJsjQ5jnqDKKovdRkkl6AAAAE8"]
[Sun Apr 05 22:07:10.943394 2026] [:error] [pid 30921:tid 30928] [client 68.221.72.120:12778] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "adJsjmFGQVn8Q0ueB24w5AAAAQU"]
[Sun Apr 05 22:07:12.150813 2026] [:error] [pid 45305:tid 45384] [client 68.221.72.120:17292] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "adJskOjDQjr7aWhjflBs6gAAAI0"]
[Sun Apr 05 22:07:13.185375 2026] [:error] [pid 30921:tid 30938] [client 68.221.72.120:19286] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "adJskWFGQVn8Q0ueB24w5wAAAQ8"]
[Sun Apr 05 22:07:14.107151 2026] [:error] [pid 30921:tid 30934] [client 68.221.72.120:12996] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "adJskmFGQVn8Q0ueB24w7QAAAQs"]
[Sun Apr 05 22:07:15.156032 2026] [:error] [pid 45303:tid 45317] [client 68.221.72.120:12737] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "adJsk7boQ9eViZ4hdnlZRQAAAAA"]
[Sun Apr 05 22:07:16.030358 2026] [:error] [pid 45409:tid 45418] [client 68.221.72.120:5111] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "adJslNHt_Oyw03gjCNgoGgAAAMc"]
[Sun Apr 05 22:07:17.320387 2026] [:error] [pid 30921:tid 30924] [client 68.221.72.120:17309] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "adJslWFGQVn8Q0ueB24w7wAAAQE"]
[Sun Apr 05 22:07:18.430620 2026] [:error] [pid 45304:tid 45363] [client 68.221.72.120:12750] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "adJslg5jnqDKKovdRkkl-gAAAFM"]
[Sun Apr 05 22:07:20.370030 2026] [:error] [pid 45305:tid 45379] [client 68.221.72.120:17289] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "adJsmOjDQjr7aWhjflBs7gAAAIg"]
[Sun Apr 05 22:07:21.207304 2026] [:error] [pid 45409:tid 45423] [client 68.221.72.120:10269] [client 68.221.72.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adJsmdHt_Oyw03gjCNgoMAAAAMw"]
[Sun Apr 05 22:07:23.057509 2026] [:error] [pid 45409:tid 45428] [client 68.221.72.120:5067] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "adJsm9Ht_Oyw03gjCNgoNQAAANE"]
[Sun Apr 05 22:07:23.779951 2026] [:error] [pid 30921:tid 30941] [client 68.221.72.120:21226] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "adJsm2FGQVn8Q0ueB24xDAAAARI"]
[Sun Apr 05 22:07:24.706289 2026] [:error] [pid 30921:tid 30923] [client 68.221.72.120:19277] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "adJsnGFGQVn8Q0ueB24xDgAAAQA"]
[Sun Apr 05 22:07:25.978495 2026] [:error] [pid 45409:tid 45416] [client 68.221.72.120:21198] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "adJsndHt_Oyw03gjCNgoRQAAAMU"]
[Sun Apr 05 22:07:27.118513 2026] [:error] [pid 45305:tid 45375] [client 68.221.72.120:19303] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ext.php"] [unique_id "adJsn-jDQjr7aWhjflBs9QAAAIQ"]
[Sun Apr 05 22:07:27.885506 2026] [:error] [pid 30921:tid 30937] [client 68.221.72.120:17286] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ext.php"] [unique_id "adJsn2FGQVn8Q0ueB24xEgAAAQ4"]
[Sun Apr 05 22:07:29.318684 2026] [:error] [pid 45305:tid 45392] [client 68.221.72.120:51232] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ext.php"] [unique_id "adJsoejDQjr7aWhjflBs-AAAAJU"]
[Sun Apr 05 22:07:30.055845 2026] [:error] [pid 45409:tid 45427] [client 68.221.72.120:51221] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ext.php"] [unique_id "adJsotHt_Oyw03gjCNgoXQAAANA"]
[Sun Apr 05 22:07:31.444951 2026] [:error] [pid 45305:tid 45376] [client 68.221.72.120:13025] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about3.php"] [unique_id "adJso-jDQjr7aWhjflBtAwAAAIU"]
[Sun Apr 05 22:07:32.697207 2026] [:error] [pid 45409:tid 45419] [client 68.221.72.120:12776] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about3.php"] [unique_id "adJspNHt_Oyw03gjCNgoYwAAAMg"]
[Sun Apr 05 22:07:34.232092 2026] [:error] [pid 45303:tid 45323] [client 68.221.72.120:51211] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about3.php"] [unique_id "adJsprboQ9eViZ4hdnlZkwAAAAY"]
[Sun Apr 05 22:07:37.598017 2026] [:error] [pid 45409:tid 45435] [client 68.221.72.120:4857] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about3.php"] [unique_id "adJsqdHt_Oyw03gjCNgodwAAANg"]
[Sun Apr 05 22:07:39.801761 2026] [:error] [pid 45305:tid 45391] [client 68.221.72.120:57232] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "adJsq-jDQjr7aWhjflBtEwAAAJQ"]
[Sun Apr 05 22:07:41.732157 2026] [:error] [pid 45303:tid 45328] [client 68.221.72.120:12772] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "adJsrbboQ9eViZ4hdnlZqAAAAAs"]
[Sun Apr 05 22:07:46.198848 2026] [:error] [pid 45304:tid 45352] [client 68.221.72.120:56261] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "adJssg5jnqDKKovdRkkmJgAAAEg"]
[Sun Apr 05 22:07:49.760385 2026] [:error] [pid 30921:tid 30943] [client 68.221.72.120:56422] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "adJstWFGQVn8Q0ueB24xOAAAARQ"]
[Sun Apr 05 22:07:55.064574 2026] [:error] [pid 45409:tid 45415] [client 68.221.72.120:21777] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "adJsu9Ht_Oyw03gjCNgowAAAAMQ"]
[Sun Apr 05 22:08:01.615280 2026] [:error] [pid 30921:tid 30934] [client 68.221.72.120:4704] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "adJswWFGQVn8Q0ueB24xWQAAAQs"]
[Sun Apr 05 22:08:04.526526 2026] [:error] [pid 45303:tid 45320] [client 68.221.72.120:4709] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "adJsxLboQ9eViZ4hdnlZ6AAAAAM"]
[Sun Apr 05 22:08:07.402027 2026] [:error] [pid 45409:tid 45419] [client 68.221.72.120:56432] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sun Apr 05 22:08:07.642169 2026] [:error] [pid 45409:tid 45429] [client 68.221.72.120:56432] [client 68.221.72.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "adJsx9Ht_Oyw03gjCNgo3gAAANI"]
[Sun Apr 05 22:08:09.492375 2026] [:error] [pid 45409:tid 45412] [client 68.221.72.120:14392] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Apr 05 22:08:09.845839 2026] [:error] [pid 45409:tid 45412] [client 68.221.72.120:14392] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Sun Apr 05 22:08:10.088711 2026] [:error] [pid 45409:tid 45426] [client 68.221.72.120:14392] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Sun Apr 05 22:08:10.573196 2026] [:error] [pid 45409:tid 45429] [client 68.221.72.120:14392] [client 68.221.72.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adJsytHt_Oyw03gjCNgo_AAAANI"]
[Sun Apr 05 22:08:12.608521 2026] [:error] [pid 30921:tid 30934] [client 68.221.72.120:61703] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Sun Apr 05 22:08:12.852984 2026] [:error] [pid 30921:tid 30938] [client 68.221.72.120:61703] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sun Apr 05 22:08:13.600853 2026] [:error] [pid 30921:tid 30927] [client 68.221.72.120:61703] File does not exist: /usr/local/apache/htdocs/suspended-page/dlu.php
[Sun Apr 05 22:08:13.885735 2026] [:error] [pid 30921:tid 30942] [client 68.221.72.120:61703] File does not exist: /usr/local/apache/htdocs/suspended-page/555.php
[Sun Apr 05 22:08:14.202875 2026] [:error] [pid 30921:tid 30939] [client 68.221.72.120:61703] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "adJszmFGQVn8Q0ueB24xbwAAARA"]
[Sun Apr 05 22:08:15.459324 2026] [:error] [pid 45409:tid 45431] [client 68.221.72.120:20431] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "adJsz9Ht_Oyw03gjCNgpFgAAANQ"]
[Sun Apr 05 22:08:17.485101 2026] [:error] [pid 30921:tid 30924] [client 68.221.72.120:13821] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "adJs0WFGQVn8Q0ueB24xeAAAAQE"]
[Sun Apr 05 22:08:19.491835 2026] [:error] [pid 45303:tid 45340] [client 68.221.72.120:19987] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "adJs07boQ9eViZ4hdnlaBwAAABc"]
[Sun Apr 05 22:08:20.987512 2026] [:error] [pid 45303:tid 45326] [client 68.221.72.120:56057] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "adJs1LboQ9eViZ4hdnlaCgAAAAk"]
[Sun Apr 05 22:08:22.347959 2026] [:error] [pid 30921:tid 30929] [client 68.221.72.120:20017] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "adJs1mFGQVn8Q0ueB24xgwAAAQY"]
[Sun Apr 05 22:08:27.047597 2026] [:error] [pid 45303:tid 45337] [client 68.221.72.120:61634] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "adJs27boQ9eViZ4hdnlaEgAAABQ"]
[Sun Apr 05 22:08:29.269581 2026] [:error] [pid 45304:tid 45353] [client 68.221.72.120:20018] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "adJs3Q5jnqDKKovdRkkmXQAAAEk"]
[Sun Apr 05 22:08:31.773586 2026] [:error] [pid 30921:tid 30944] [client 68.221.72.120:61731] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "adJs32FGQVn8Q0ueB24xmgAAARU"]
[Sun Apr 05 22:08:33.418646 2026] [:error] [pid 45303:tid 45321] [client 68.221.72.120:20459] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "adJs4bboQ9eViZ4hdnlaJwAAAAQ"]
[Sun Apr 05 22:08:34.927452 2026] [:error] [pid 45303:tid 45322] [client 68.221.72.120:13823] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "adJs4rboQ9eViZ4hdnlaLwAAAAU"]
[Sun Apr 05 22:08:36.033950 2026] [:error] [pid 45409:tid 45422] [client 68.221.72.120:56310] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "adJs5NHt_Oyw03gjCNgpXgAAAMs"]
[Sun Apr 05 22:08:37.951604 2026] [:error] [pid 45409:tid 45433] [client 68.221.72.120:11518] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "adJs5dHt_Oyw03gjCNgpaQAAANY"]
[Sun Apr 05 22:08:39.563443 2026] [:error] [pid 45409:tid 45418] [client 68.221.72.120:19970] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "adJs59Ht_Oyw03gjCNgpcgAAAMc"]
[Sun Apr 05 22:08:46.888294 2026] [:error] [pid 45305:tid 45382] [client 68.221.72.120:21192] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "adJs7ujDQjr7aWhjflBtewAAAIs"]
[Sun Apr 05 22:08:53.001714 2026] [:error] [pid 45303:tid 45336] [client 68.221.72.120:4693] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "adJs9bboQ9eViZ4hdnlaWwAAABM"]
[Sun Apr 05 22:08:58.992689 2026] [:error] [pid 45303:tid 45339] [client 68.221.72.120:5070] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "adJs-rboQ9eViZ4hdnlacwAAABY"]
[Sun Apr 05 22:09:05.388852 2026] [:error] [pid 45409:tid 45414] [client 68.221.72.120:61637] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "adJtAdHt_Oyw03gjCNgp7gAAAMM"]
[Sun Apr 05 22:09:14.687259 2026] [:error] [pid 45305:tid 45371] [client 68.221.72.120:61657] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Sun Apr 05 22:09:14.929853 2026] [:error] [pid 45305:tid 45393] [client 68.221.72.120:61657] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sun Apr 05 22:09:15.172354 2026] [:error] [pid 45305:tid 45379] [client 68.221.72.120:61657] File does not exist: /usr/local/apache/htdocs/suspended-page/v.php
[Sun Apr 05 22:09:15.419400 2026] [:error] [pid 45305:tid 45389] [client 68.221.72.120:61657] File does not exist: /usr/local/apache/htdocs/suspended-page/te.php
[Sun Apr 05 22:09:15.700083 2026] [:error] [pid 45305:tid 45391] [client 68.221.72.120:61657] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Apr 05 22:09:15.965927 2026] [:error] [pid 45305:tid 45377] [client 68.221.72.120:61657] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Sun Apr 05 22:09:16.208473 2026] [:error] [pid 45305:tid 45374] [client 68.221.72.120:61657] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Sun Apr 05 22:09:16.503668 2026] [:error] [pid 45305:tid 45386] [client 68.221.72.120:61657] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Sun Apr 05 22:09:16.772398 2026] [:error] [pid 45305:tid 45375] [client 68.221.72.120:61657] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Apr 05 22:09:17.297836 2026] [:error] [pid 45305:tid 45392] [client 68.221.72.120:61657] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Apr 05 22:09:17.583476 2026] [:error] [pid 45305:tid 45373] [client 68.221.72.120:61657] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "adJtDejDQjr7aWhjflBtvgAAAII"]
[Sun Apr 05 22:09:35.376212 2026] [:error] [pid 45409:tid 45411] [client 68.221.72.120:4548] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "adJtH9Ht_Oyw03gjCNgqYgAAAMA"]
[Sun Apr 05 22:09:52.004522 2026] [:error] [pid 45409:tid 45424] [client 68.221.72.120:4845] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v2.php"] [unique_id "adJtMNHt_Oyw03gjCNgqpAAAAM0"]
[Sun Apr 05 22:10:05.852043 2026] [:error] [pid 45305:tid 45377] [client 68.221.72.120:61703] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "adJtPejDQjr7aWhjflBt6AAAAIY"]
[Sun Apr 05 22:11:12.735438 2026] [:error] [pid 45303:tid 45332] [client 68.221.72.120:21235] File does not exist: /usr/local/apache/htdocs/suspended-page/shoha.php
[Sun Apr 05 22:11:13.016179 2026] [:error] [pid 45303:tid 45318] [client 68.221.72.120:21235] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Apr 05 22:11:13.281350 2026] [:error] [pid 45303:tid 45329] [client 68.221.72.120:21235] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Apr 05 22:11:13.564827 2026] [:error] [pid 45303:tid 45335] [client 68.221.72.120:21235] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Sun Apr 05 22:11:13.853163 2026] [:error] [pid 45303:tid 45334] [client 68.221.72.120:21235] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php
[Sun Apr 05 22:11:14.095484 2026] [:error] [pid 45303:tid 45339] [client 68.221.72.120:21235] File does not exist: /usr/local/apache/htdocs/suspended-page/mo.php
[Sun Apr 05 22:11:14.374058 2026] [:error] [pid 45303:tid 45323] [client 68.221.72.120:21235] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sun Apr 05 22:11:14.639709 2026] [:error] [pid 45303:tid 45338] [client 68.221.72.120:21235] File does not exist: /usr/local/apache/htdocs/suspended-page/inde.php
[Sun Apr 05 22:11:14.926903 2026] [:error] [pid 45303:tid 45320] [client 68.221.72.120:21235] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Apr 05 22:11:15.202633 2026] [:error] [pid 45303:tid 45337] [client 68.221.72.120:21235] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Apr 05 22:11:15.501942 2026] [:error] [pid 45303:tid 45332] [client 68.221.72.120:21235] File does not exist: /usr/local/apache/htdocs/suspended-page/zxin.php
[Sun Apr 05 22:11:15.782805 2026] [:error] [pid 45303:tid 45331] [client 68.221.72.120:21235] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "adJtg7boQ9eViZ4hdnlbogAAAA4"]
[Sun Apr 05 22:12:48.788540 2026] [:error] [pid 45303:tid 45339] [client 68.221.72.120:61099] File does not exist: /usr/local/apache/htdocs/suspended-page/wolv2.php
[Sun Apr 05 22:12:50.429928 2026] [:error] [pid 45303:tid 45339] [client 68.221.72.120:61099] File does not exist: /usr/local/apache/htdocs/suspended-page/geck.php
[Sun Apr 05 22:12:50.722596 2026] [:error] [pid 45303:tid 45323] [client 68.221.72.120:61099] File does not exist: /usr/local/apache/htdocs/suspended-page/xtt.php
[Sun Apr 05 22:12:50.966858 2026] [:error] [pid 45303:tid 45338] [client 68.221.72.120:61099] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Apr 05 22:12:51.248146 2026] [:error] [pid 45303:tid 45318] [client 68.221.72.120:61099] File does not exist: /usr/local/apache/htdocs/suspended-page/system.php
[Sun Apr 05 22:12:51.508599 2026] [:error] [pid 45303:tid 45319] [client 68.221.72.120:61099] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Apr 05 22:12:51.751279 2026] [:error] [pid 45303:tid 45341] [client 68.221.72.120:61099] File does not exist: /usr/local/apache/htdocs/suspended-page/gdn.php
[Sun Apr 05 22:12:52.002132 2026] [:error] [pid 45303:tid 45337] [client 68.221.72.120:61099] File does not exist: /usr/local/apache/htdocs/suspended-page/ton.php
[Sun Apr 05 22:12:52.252694 2026] [:error] [pid 45303:tid 45321] [client 68.221.72.120:61099] File does not exist: /usr/local/apache/htdocs/suspended-page/media.php
[Sun Apr 05 22:12:52.797061 2026] [:error] [pid 45303:tid 45318] [client 68.221.72.120:61099] File does not exist: /usr/local/apache/htdocs/suspended-page/admir.php
[Sun Apr 05 22:12:53.050799 2026] [:error] [pid 45303:tid 45327] [client 68.221.72.120:61099] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "adJt5bboQ9eViZ4hdnlcxQAAAAo"]
[Sun Apr 05 22:12:56.054531 2026] [:error] [pid 30921:tid 30930] [client 68.221.72.120:4231] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "adJt6GFGQVn8Q0ueB240DQAAAQc"]
[Sun Apr 05 22:12:57.929612 2026] [:error] [pid 45304:tid 45350] [client 68.221.72.120:4285] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "adJt6Q5jnqDKKovdRkkn0wAAAEY"]
[Sun Apr 05 22:12:59.136062 2026] [:error] [pid 45303:tid 45323] [client 68.221.72.120:13717] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "adJt67boQ9eViZ4hdnlczQAAAAY"]
[Sun Apr 05 22:12:59.823793 2026] [:error] [pid 30921:tid 30936] [client 68.221.72.120:21870] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "adJt62FGQVn8Q0ueB240EwAAAQ0"]
[Sun Apr 05 22:13:00.743045 2026] [:error] [pid 45409:tid 45425] [client 68.221.72.120:60369] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "adJt7NHt_Oyw03gjCNgtcAAAAM4"]
[Sun Apr 05 22:13:01.744967 2026] [:error] [pid 45303:tid 45333] [client 68.221.72.120:4958] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "adJt7bboQ9eViZ4hdnlc0wAAABA"]
[Sun Apr 05 22:13:02.613170 2026] [:error] [pid 45305:tid 45390] [client 68.221.72.120:13727] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "adJt7ujDQjr7aWhjflBurQAAAJM"]
[Sun Apr 05 22:13:03.531270 2026] [:error] [pid 45303:tid 45320] [client 68.221.72.120:13507] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adJt77boQ9eViZ4hdnlc2QAAAAM"]
[Sun Apr 05 22:13:05.232772 2026] [:error] [pid 45305:tid 45374] [client 68.221.72.120:21841] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adJt8ejDQjr7aWhjflButQAAAIM"]
[Sun Apr 05 22:13:06.885704 2026] [:error] [pid 45303:tid 45326] [client 68.221.72.120:4941] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adJt8rboQ9eViZ4hdnlc7AAAAAk"]
[Sun Apr 05 22:13:09.612842 2026] [:error] [pid 45303:tid 45321] [client 68.221.72.120:13505] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adJt9bboQ9eViZ4hdnlc-AAAAAQ"]
[Sun Apr 05 22:13:11.958705 2026] [:error] [pid 45304:tid 45345] [client 68.221.72.120:13547] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc.php"] [unique_id "adJt9w5jnqDKKovdRkkn3AAAAEE"]
[Sun Apr 05 22:13:13.866130 2026] [:error] [pid 30921:tid 30924] [client 68.221.72.120:13550] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc.php"] [unique_id "adJt-WFGQVn8Q0ueB240HgAAAQE"]
[Sun Apr 05 22:13:14.708045 2026] [:error] [pid 45409:tid 45417] [client 68.221.72.120:59727] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc.php"] [unique_id "adJt-tHt_Oyw03gjCNgtoQAAAMY"]
[Sun Apr 05 22:13:16.360294 2026] [:error] [pid 45409:tid 45428] [client 68.221.72.120:21878] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc.php"] [unique_id "adJt_NHt_Oyw03gjCNgtrQAAANE"]
[Sun Apr 05 22:13:17.169477 2026] [:error] [pid 30921:tid 30929] [client 68.221.72.120:18868] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "adJt_WFGQVn8Q0ueB240JAAAAQY"]
[Sun Apr 05 22:13:18.900564 2026] [:error] [pid 45305:tid 45380] [client 68.221.72.120:4978] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "adJt_ujDQjr7aWhjflBuxQAAAIk"]
[Sun Apr 05 22:13:20.418051 2026] [:error] [pid 45305:tid 45374] [client 68.221.72.120:4969] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "adJuAOjDQjr7aWhjflBuyQAAAIM"]
[Sun Apr 05 22:13:21.790379 2026] [:error] [pid 45304:tid 45350] [client 68.221.72.120:4968] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "adJuAQ5jnqDKKovdRkkn6QAAAEY"]
[Sun Apr 05 22:13:22.735665 2026] [:error] [pid 30921:tid 30927] [client 68.221.72.120:61067] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "adJuAmFGQVn8Q0ueB240NgAAAQQ"]
[Sun Apr 05 22:13:24.133965 2026] [:error] [pid 45305:tid 45390] [client 68.221.72.120:21853] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "adJuBOjDQjr7aWhjflBu2gAAAJM"]
[Sun Apr 05 22:13:25.445193 2026] [:error] [pid 45409:tid 45423] [client 68.221.72.120:15967] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "adJuBdHt_Oyw03gjCNgt3AAAAMw"]
[Sun Apr 05 22:13:26.334038 2026] [:error] [pid 45409:tid 45415] [client 68.221.72.120:15974] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "adJuBtHt_Oyw03gjCNgt4gAAAMQ"]
[Sun Apr 05 22:13:27.032645 2026] [:error] [pid 45304:tid 45366] [client 68.221.72.120:4242] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "adJuBw5jnqDKKovdRkkn9AAAAFY"]
[Sun Apr 05 22:13:27.902235 2026] [:error] [pid 45303:tid 45340] [client 68.221.72.120:59780] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "adJuB7boQ9eViZ4hdnldDgAAABc"]
[Sun Apr 05 22:13:28.976059 2026] [:error] [pid 45303:tid 45330] [client 68.221.72.120:59736] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "adJuCLboQ9eViZ4hdnldEAAAAA0"]
[Sun Apr 05 22:13:30.138337 2026] [:error] [pid 45409:tid 45418] [client 68.221.72.120:13718] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "adJuCtHt_Oyw03gjCNguCwAAAMc"]
[Sun Apr 05 22:13:31.919465 2026] [:error] [pid 45305:tid 45382] [client 68.221.72.120:15945] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "adJuC-jDQjr7aWhjflBvAAAAAIs"]
[Sun Apr 05 22:13:34.440309 2026] [:error] [pid 45304:tid 45350] [client 68.221.72.120:59826] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "adJuDg5jnqDKKovdRkkoAAAAAEY"]
[Sun Apr 05 22:13:35.914698 2026] [:error] [pid 45303:tid 45326] [client 68.221.72.120:15962] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "adJuD7boQ9eViZ4hdnldHgAAAAk"]
[Sun Apr 05 22:13:37.864949 2026] [:error] [pid 45304:tid 45361] [client 68.221.72.120:59754] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "adJuEQ5jnqDKKovdRkkoBAAAAFE"]
[Sun Apr 05 22:13:39.194094 2026] [:error] [pid 45305:tid 45385] [client 68.221.72.120:59823] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adJuE-jDQjr7aWhjflBvEAAAAI4"]
[Sun Apr 05 22:13:40.903354 2026] [:error] [pid 45303:tid 45329] [client 68.221.72.120:4989] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adJuFLboQ9eViZ4hdnldKAAAAAw"]
[Sun Apr 05 22:13:42.377437 2026] [:error] [pid 45304:tid 45345] [client 68.221.72.120:61101] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adJuFg5jnqDKKovdRkkoBwAAAEE"]
[Sun Apr 05 22:13:43.662329 2026] [:error] [pid 45409:tid 45426] [client 68.221.72.120:61085] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adJuF9Ht_Oyw03gjCNguNwAAAM8"]
[Sun Apr 05 22:13:45.761826 2026] [:error] [pid 45304:tid 45363] [client 68.221.72.120:21866] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adJuGQ5jnqDKKovdRkkoDAAAAFM"]
[Sun Apr 05 22:13:49.760570 2026] [:error] [pid 45303:tid 45323] [client 68.221.72.120:13705] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adJuHbboQ9eViZ4hdnldNgAAAAY"]
[Sun Apr 05 22:13:52.063446 2026] [:error] [pid 45409:tid 45415] [client 68.221.72.120:13555] File does not exist: /usr/local/apache/htdocs/suspended-page/lmutxdvyp7u5yksqke8ozbjgCdefault.php
[Sun Apr 05 22:13:52.329494 2026] [:error] [pid 45409:tid 45414] [client 68.221.72.120:13555] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sun Apr 05 22:13:52.571893 2026] [:error] [pid 45409:tid 45411] [client 68.221.72.120:13555] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Sun Apr 05 22:13:52.814489 2026] [:error] [pid 45409:tid 45421] [client 68.221.72.120:13555] File does not exist: /usr/local/apache/htdocs/suspended-page/yas.php
[Sun Apr 05 22:13:53.059200 2026] [:error] [pid 45409:tid 45423] [client 68.221.72.120:13555] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sun Apr 05 22:13:53.301941 2026] [:error] [pid 45409:tid 45422] [client 68.221.72.120:13555] File does not exist: /usr/local/apache/htdocs/suspended-page/v3.php
[Sun Apr 05 22:13:53.787184 2026] [:error] [pid 45409:tid 45435] [client 68.221.72.120:13555] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Sun Apr 05 22:13:54.894218 2026] [:error] [pid 45409:tid 45434] [client 68.221.72.120:13555] File does not exist: /usr/local/apache/htdocs/suspended-page/himu.php
[Sun Apr 05 22:13:55.136686 2026] [:error] [pid 45409:tid 45413] [client 68.221.72.120:13555] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Sun Apr 05 22:13:55.398921 2026] [:error] [pid 45409:tid 45414] [client 68.221.72.120:13555] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "adJuI9Ht_Oyw03gjCNguYQAAAMM"]
[Sun Apr 05 22:13:57.052467 2026] [:error] [pid 45409:tid 45418] [client 68.221.72.120:61060] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "adJuJdHt_Oyw03gjCNguZwAAAMc"]
[Sun Apr 05 22:13:58.915544 2026] [:error] [pid 45409:tid 45422] [client 68.221.72.120:60410] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "adJuJtHt_Oyw03gjCNgucQAAAMs"]
[Sun Apr 05 22:13:59.677574 2026] [:error] [pid 45409:tid 45434] [client 68.221.72.120:13517] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "adJuJ9Ht_Oyw03gjCNgucwAAANc"]
[Sun Apr 05 22:14:00.761625 2026] [:error] [pid 30921:tid 30924] [client 68.221.72.120:15993] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "adJuKGFGQVn8Q0ueB240dgAAAQE"]
[Sun Apr 05 22:14:02.350879 2026] [:error] [pid 30921:tid 30934] [client 68.221.72.120:4250] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "adJuKmFGQVn8Q0ueB240eQAAAQs"]
[Sun Apr 05 22:14:03.623859 2026] [:error] [pid 30921:tid 30938] [client 68.221.72.120:4934] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "adJuK2FGQVn8Q0ueB240ewAAAQ8"]
[Sun Apr 05 22:14:04.791318 2026] [:error] [pid 45303:tid 45325] [client 68.221.72.120:59818] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "adJuLLboQ9eViZ4hdnldTQAAAAg"]
[Sun Apr 05 22:14:06.137922 2026] [:error] [pid 45409:tid 45435] [client 68.221.72.120:15940] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "adJuLtHt_Oyw03gjCNguiwAAANg"]
[Sun Apr 05 22:14:08.599720 2026] [:error] [pid 45409:tid 45423] [client 68.221.72.120:4260] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "adJuMNHt_Oyw03gjCNgulAAAAMw"]
[Sun Apr 05 22:14:10.459004 2026] [:error] [pid 45305:tid 45381] [client 68.221.72.120:59807] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "adJuMujDQjr7aWhjflBvNwAAAIo"]
[Sun Apr 05 22:14:11.890933 2026] [:error] [pid 45304:tid 45360] [client 68.221.72.120:13529] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "adJuMw5jnqDKKovdRkkoVwAAAFA"]
[Sun Apr 05 22:14:13.159550 2026] [:error] [pid 45303:tid 45335] [client 68.221.72.120:61071] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "adJuNbboQ9eViZ4hdnldWwAAABI"]
[Sun Apr 05 22:14:14.242686 2026] [:error] [pid 45409:tid 45416] [client 68.221.72.120:60411] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "adJuNtHt_Oyw03gjCNguuQAAAMU"]
[Sun Apr 05 22:14:15.811948 2026] [:error] [pid 45304:tid 45349] [client 68.221.72.120:13747] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "adJuNw5jnqDKKovdRkkoZwAAAEU"]
[Sun Apr 05 22:14:17.650521 2026] [:error] [pid 45305:tid 45376] [client 68.221.72.120:18849] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "adJuOejDQjr7aWhjflBvTgAAAIU"]
[Sun Apr 05 22:14:19.000001 2026] [:error] [pid 45304:tid 45359] [client 68.221.72.120:13521] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "adJuOg5jnqDKKovdRkkobwAAAE8"]
[Sun Apr 05 22:14:20.303997 2026] [:error] [pid 45303:tid 45335] [client 68.221.72.120:61066] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "adJuPLboQ9eViZ4hdnldZAAAABI"]
[Sun Apr 05 22:14:21.337782 2026] [:error] [pid 45305:tid 45383] [client 68.221.72.120:4282] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "adJuPejDQjr7aWhjflBvXAAAAIw"]
[Sun Apr 05 22:14:22.303976 2026] [:error] [pid 45304:tid 45347] [client 68.221.72.120:59808] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "adJuPg5jnqDKKovdRkkodgAAAEM"]
[Sun Apr 05 22:14:23.290934 2026] [:error] [pid 45305:tid 45381] [client 68.221.72.120:4983] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "adJuP-jDQjr7aWhjflBvYwAAAIo"]
[Sun Apr 05 22:14:24.150426 2026] [:error] [pid 45409:tid 45413] [client 68.221.72.120:4973] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "adJuQNHt_Oyw03gjCNgu6AAAAMI"]
[Sun Apr 05 22:14:25.273707 2026] [:error] [pid 45303:tid 45323] [client 68.221.72.120:4987] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "adJuQbboQ9eViZ4hdnldaQAAAAY"]
[Sun Apr 05 22:14:26.472186 2026] [:error] [pid 45305:tid 45376] [client 68.221.72.120:13552] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "adJuQujDQjr7aWhjflBvaAAAAIU"]
[Sun Apr 05 22:14:28.595731 2026] [:error] [pid 45409:tid 45418] [client 68.221.72.120:13543] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "adJuRNHt_Oyw03gjCNgu-wAAAMc"]
[Sun Apr 05 22:14:31.139657 2026] [:error] [pid 45409:tid 45428] [client 68.221.72.120:60386] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "adJuR9Ht_Oyw03gjCNgvDAAAANE"]
[Sun Apr 05 22:14:33.098373 2026] [:error] [pid 45305:tid 45384] [client 68.221.72.120:13516] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "adJuSejDQjr7aWhjflBvagAAAI0"]
[Sun Apr 05 22:14:34.815597 2026] [:error] [pid 45409:tid 45415] [client 68.221.72.120:59751] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "adJuStHt_Oyw03gjCNgvGQAAAMQ"]
[Sun Apr 05 22:14:36.727466 2026] [:error] [pid 45304:tid 45366] [client 68.221.72.120:15979] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "adJuTA5jnqDKKovdRkkoigAAAFY"]
[Sun Apr 05 22:14:37.545388 2026] [:error] [pid 45305:tid 45380] [client 68.221.72.120:4950] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "adJuTejDQjr7aWhjflBvewAAAIk"]
[Sun Apr 05 22:14:42.248642 2026] [:error] [pid 45303:tid 45323] [client 68.221.72.120:21827] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "adJuUrboQ9eViZ4hdnldjAAAAAY"]
[Sun Apr 05 22:14:43.129805 2026] [:error] [pid 45303:tid 45332] [client 68.221.72.120:4979] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "adJuU7boQ9eViZ4hdnldkAAAAA8"]
[Sun Apr 05 22:14:44.493716 2026] [:error] [pid 45303:tid 45324] [client 68.221.72.120:4244] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "adJuVLboQ9eViZ4hdnldkgAAAAc"]
[Sun Apr 05 22:14:46.366682 2026] [:error] [pid 30921:tid 30925] [client 68.221.72.120:4940] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "adJuVmFGQVn8Q0ueB240vgAAAQI"]
[Sun Apr 05 22:14:47.382544 2026] [:error] [pid 45409:tid 45432] [client 68.221.72.120:61107] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "adJuV9Ht_Oyw03gjCNgvXQAAANU"]
[Sun Apr 05 22:14:49.330260 2026] [:error] [pid 45409:tid 45419] [client 68.221.72.120:13512] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "adJuWdHt_Oyw03gjCNgvagAAAMg"]
[Sun Apr 05 22:14:51.097991 2026] [:error] [pid 30921:tid 30923] [client 68.221.72.120:4933] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "adJuW2FGQVn8Q0ueB240xgAAAQA"]
[Sun Apr 05 22:14:52.561877 2026] [:error] [pid 45303:tid 45339] [client 68.221.72.120:15952] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "adJuXLboQ9eViZ4hdnldngAAABY"]
[Sun Apr 05 22:14:54.016434 2026] [:error] [pid 45409:tid 45432] [client 68.221.72.120:61090] [client 68.221.72.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "adJuXtHt_Oyw03gjCNgveAAAANU"]
[Sun Apr 05 22:14:55.125327 2026] [:error] [pid 45303:tid 45324] [client 68.221.72.120:4104] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Sun Apr 05 22:14:55.370227 2026] [:error] [pid 45303:tid 45330] [client 68.221.72.120:4104] File does not exist: /usr/local/apache/htdocs/suspended-page/lol.php
[Sun Apr 05 22:14:55.626414 2026] [:error] [pid 45303:tid 45325] [client 68.221.72.120:4104] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sun Apr 05 22:19:15.974862 2026] [:error] [pid 30921:tid 30931] [client 20.19.187.50:17581] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Sun Apr 05 22:19:16.231270 2026] [:error] [pid 30921:tid 30942] [client 20.19.187.50:17581] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun Apr 05 22:19:16.542332 2026] [:error] [pid 30921:tid 30933] [client 20.19.187.50:17581] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Sun Apr 05 22:19:16.813704 2026] [:error] [pid 30921:tid 30944] [client 20.19.187.50:17581] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Sun Apr 05 22:19:17.315833 2026] [:error] [pid 30921:tid 30937] [client 20.19.187.50:17581] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Apr 05 22:19:17.554508 2026] [:error] [pid 30921:tid 30945] [client 20.19.187.50:17581] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Sun Apr 05 22:19:18.569116 2026] [:error] [pid 30921:tid 30939] [client 20.19.187.50:17581] File does not exist: /usr/local/apache/htdocs/suspended-page/wolv2.php
[Sun Apr 05 22:19:18.813440 2026] [:error] [pid 30921:tid 30941] [client 20.19.187.50:17581] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Sun Apr 05 22:19:19.079744 2026] [:error] [pid 30921:tid 30931] [client 20.19.187.50:17581] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Sun Apr 05 22:19:19.341775 2026] [:error] [pid 30921:tid 30942] [client 20.19.187.50:17581] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adJvZ2FGQVn8Q0ueB243OwAAARM"]
[Sun Apr 05 22:19:20.709206 2026] [:error] [pid 45305:tid 45372] [client 20.19.187.50:55157] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adJvaOjDQjr7aWhjflBxqgAAAIE"]
[Sun Apr 05 22:19:22.885134 2026] [:error] [pid 45409:tid 45422] [client 20.19.187.50:18346] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adJvatHt_Oyw03gjCNg0GwAAAMs"]
[Sun Apr 05 22:19:24.684751 2026] [:error] [pid 45305:tid 45379] [client 20.19.187.50:17594] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adJvbOjDQjr7aWhjflBxuwAAAIg"]
[Sun Apr 05 22:19:26.755953 2026] [:error] [pid 45409:tid 45415] [client 20.19.187.50:11738] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "adJvbtHt_Oyw03gjCNg0KgAAAMQ"]
[Sun Apr 05 22:19:28.110476 2026] [:error] [pid 45305:tid 45382] [client 20.19.187.50:2993] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "adJvcOjDQjr7aWhjflBx0AAAAIs"]
[Sun Apr 05 22:19:29.478439 2026] [:error] [pid 45303:tid 45326] [client 20.19.187.50:2946] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "adJvcbboQ9eViZ4hdnlgkAAAAAk"]
[Sun Apr 05 22:19:30.572062 2026] [:error] [pid 45304:tid 45350] [client 20.19.187.50:8480] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n.php"] [unique_id "adJvcg5jnqDKKovdRkkqSQAAAEY"]
[Sun Apr 05 22:19:31.961537 2026] [:error] [pid 45303:tid 45322] [client 20.19.187.50:20440] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "adJvc7boQ9eViZ4hdnlglQAAAAU"]
[Sun Apr 05 22:19:32.921396 2026] [:error] [pid 45303:tid 45327] [client 20.19.187.50:13278] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "adJvdLboQ9eViZ4hdnlgmgAAAAo"]
[Sun Apr 05 22:19:33.929417 2026] [:error] [pid 30921:tid 30938] [client 20.19.187.50:18323] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "adJvdWFGQVn8Q0ueB243SgAAAQ8"]
[Sun Apr 05 22:19:35.598089 2026] [:error] [pid 45304:tid 45361] [client 20.19.187.50:9085] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "adJvdw5jnqDKKovdRkkqVwAAAFE"]
[Sun Apr 05 22:19:36.862453 2026] [:error] [pid 45304:tid 45364] [client 20.19.187.50:13248] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "adJveA5jnqDKKovdRkkqXQAAAFQ"]
[Sun Apr 05 22:19:38.469840 2026] [:error] [pid 30921:tid 30936] [client 20.19.187.50:55122] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "adJvemFGQVn8Q0ueB243UgAAAQ0"]
[Sun Apr 05 22:19:41.261217 2026] [:error] [pid 30921:tid 30930] [client 20.19.187.50:12899] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "adJvfWFGQVn8Q0ueB243VwAAAQc"]
[Sun Apr 05 22:19:42.255268 2026] [:error] [pid 45409:tid 45428] [client 20.19.187.50:18325] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "adJvftHt_Oyw03gjCNg0WwAAANE"]
[Sun Apr 05 22:19:42.797733 2026] [:error] [pid 45305:tid 45379] [client 20.19.187.50:9061] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "adJvfujDQjr7aWhjflBx9AAAAIg"]
[Sun Apr 05 22:19:45.008540 2026] [:error] [pid 45305:tid 45380] [client 20.19.187.50:18362] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "adJvgejDQjr7aWhjflBx_QAAAIk"]
[Sun Apr 05 22:19:46.228707 2026] [:error] [pid 30921:tid 30923] [client 20.19.187.50:55225] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "adJvgmFGQVn8Q0ueB243ZwAAAQA"]
[Sun Apr 05 22:19:48.928655 2026] [:error] [pid 30921:tid 30924] [client 20.19.187.50:9030] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "adJvhGFGQVn8Q0ueB243fgAAAQE"]
[Sun Apr 05 22:19:52.015006 2026] [:error] [pid 45409:tid 45416] [client 20.19.187.50:13306] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adJviNHt_Oyw03gjCNg0dQAAAMU"]
[Sun Apr 05 22:19:54.933799 2026] [:error] [pid 45303:tid 45337] [client 20.19.187.50:9071] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adJvirboQ9eViZ4hdnlgwQAAABQ"]
[Sun Apr 05 22:19:57.421753 2026] [:error] [pid 45409:tid 45432] [client 20.19.187.50:55171] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adJvjdHt_Oyw03gjCNg0hwAAANU"]
[Sun Apr 05 22:19:58.145412 2026] [:error] [pid 45303:tid 45324] [client 20.19.187.50:18697] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adJvjrboQ9eViZ4hdnlgxwAAAAc"]
[Sun Apr 05 22:19:58.773655 2026] [:error] [pid 45303:tid 45328] [client 20.19.187.50:9073] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "adJvjrboQ9eViZ4hdnlgywAAAAs"]
[Sun Apr 05 22:19:59.406762 2026] [:error] [pid 45409:tid 45411] [client 20.19.187.50:18327] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "adJvj9Ht_Oyw03gjCNg0jwAAAMA"]
[Sun Apr 05 22:19:59.991883 2026] [:error] [pid 45303:tid 45325] [client 20.19.187.50:12897] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "adJvj7boQ9eViZ4hdnlg1AAAAAg"]
[Sun Apr 05 22:20:00.601272 2026] [:error] [pid 45305:tid 45384] [client 20.19.187.50:20429] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "adJvkOjDQjr7aWhjflByHQAAAI0"]
[Sun Apr 05 22:20:02.004661 2026] [:error] [pid 45409:tid 45421] [client 20.19.187.50:9330] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "adJvktHt_Oyw03gjCNg0lAAAAMo"]
[Sun Apr 05 22:20:03.004830 2026] [:error] [pid 45303:tid 45319] [client 20.19.187.50:18690] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "adJvk7boQ9eViZ4hdnlg2wAAAAI"]
[Sun Apr 05 22:20:03.850317 2026] [:error] [pid 30921:tid 30926] [client 20.19.187.50:55744] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "adJvk2FGQVn8Q0ueB243nAAAAQM"]
[Sun Apr 05 22:20:05.402439 2026] [:error] [pid 45409:tid 45431] [client 20.19.187.50:55183] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "adJvldHt_Oyw03gjCNg0owAAANQ"]
[Sun Apr 05 22:20:07.141531 2026] [:error] [pid 45409:tid 45432] [client 20.19.187.50:16915] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "adJvl9Ht_Oyw03gjCNg0qQAAANU"]
[Sun Apr 05 22:20:10.298571 2026] [:error] [pid 45304:tid 45366] [client 20.19.187.50:2406] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "adJvmg5jnqDKKovdRkkqqQAAAFY"]
[Sun Apr 05 22:20:12.494523 2026] [:error] [pid 45409:tid 45428] [client 20.19.187.50:55838] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "adJvnNHt_Oyw03gjCNg0vQAAANE"]
[Sun Apr 05 22:20:14.337641 2026] [:error] [pid 30921:tid 30923] [client 20.19.187.50:56003] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "adJvnmFGQVn8Q0ueB243swAAAQA"]
[Sun Apr 05 22:20:15.520370 2026] [:error] [pid 30921:tid 30925] [client 20.19.187.50:9293] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "adJvn2FGQVn8Q0ueB243vAAAAQI"]
[Sun Apr 05 22:20:16.497976 2026] [:error] [pid 45303:tid 45336] [client 20.19.187.50:16907] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "adJvoLboQ9eViZ4hdnlhAwAAABM"]
[Sun Apr 05 22:20:17.215926 2026] [:error] [pid 45409:tid 45431] [client 20.19.187.50:38742] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "adJvodHt_Oyw03gjCNg01AAAANQ"]
[Sun Apr 05 22:20:18.765186 2026] [:error] [pid 30921:tid 30943] [client 20.19.187.50:38533] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "adJvomFGQVn8Q0ueB243yAAAARQ"]
[Sun Apr 05 22:20:20.063521 2026] [:error] [pid 45304:tid 45345] [client 20.19.187.50:38748] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sun Apr 05 22:20:20.548525 2026] [:error] [pid 45304:tid 45355] [client 20.19.187.50:38748] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Sun Apr 05 22:20:20.787672 2026] [:error] [pid 45304:tid 45360] [client 20.19.187.50:38748] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Apr 05 22:20:21.027057 2026] [:error] [pid 45304:tid 45366] [client 20.19.187.50:38748] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sun Apr 05 22:20:21.265963 2026] [:error] [pid 45304:tid 45365] [client 20.19.187.50:38748] File does not exist: /usr/local/apache/htdocs/suspended-page/file32.php
[Sun Apr 05 22:20:21.935626 2026] [:error] [pid 45304:tid 45357] [client 20.19.187.50:38748] File does not exist: /usr/local/apache/htdocs/suspended-page/nope.php
[Sun Apr 05 22:20:22.174974 2026] [:error] [pid 45304:tid 45353] [client 20.19.187.50:38748] File does not exist: /usr/local/apache/htdocs/suspended-page/js.php
[Sun Apr 05 22:20:22.411171 2026] [:error] [pid 45304:tid 45349] [client 20.19.187.50:38748] [client 20.19.187.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adJvpg5jnqDKKovdRkkqwQAAAEU"]
[Sun Apr 05 22:20:24.096215 2026] [:error] [pid 45303:tid 45337] [client 20.19.187.50:18713] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Sun Apr 05 22:20:24.337324 2026] [:error] [pid 45303:tid 45338] [client 20.19.187.50:18713] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Apr 05 22:20:24.576570 2026] [:error] [pid 45303:tid 45318] [client 20.19.187.50:18713] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Apr 05 22:20:24.835944 2026] [:error] [pid 45303:tid 45341] [client 20.19.187.50:18713] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "adJvqLboQ9eViZ4hdnlhFgAAABg"]
[Sun Apr 05 22:20:25.810207 2026] [:error] [pid 45305:tid 45371] [client 20.19.187.50:55816] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "adJvqejDQjr7aWhjflByVAAAAIA"]
[Sun Apr 05 22:20:28.037032 2026] [:error] [pid 45303:tid 45326] [client 20.19.187.50:55819] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "adJvrLboQ9eViZ4hdnlhJwAAAAk"]
[Sun Apr 05 22:20:28.863299 2026] [:error] [pid 45409:tid 45434] [client 20.19.187.50:15866] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "adJvrNHt_Oyw03gjCNg0-AAAANc"]
[Sun Apr 05 22:20:29.975032 2026] [:error] [pid 45305:tid 45390] [client 20.19.187.50:15422] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "adJvrejDQjr7aWhjflByXQAAAJM"]
[Sun Apr 05 22:20:30.980897 2026] [:error] [pid 45409:tid 45430] [client 20.19.187.50:16933] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "adJvrtHt_Oyw03gjCNg1AgAAANM"]
[Sun Apr 05 22:20:31.823987 2026] [:error] [pid 45304:tid 45363] [client 20.19.187.50:15863] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "adJvrw5jnqDKKovdRkkq0QAAAFM"]
[Sun Apr 05 22:20:32.707854 2026] [:error] [pid 45305:tid 45372] [client 20.19.187.50:56081] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "adJvsOjDQjr7aWhjflByYgAAAIE"]
[Sun Apr 05 22:20:33.527621 2026] [:error] [pid 30921:tid 30942] [client 20.19.187.50:15363] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "adJvsWFGQVn8Q0ueB2433wAAARM"]
[Sun Apr 05 22:20:34.545007 2026] [:error] [pid 45305:tid 45389] [client 20.19.187.50:56009] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "adJvsujDQjr7aWhjflByawAAAJI"]
[Sun Apr 05 22:20:36.110479 2026] [:error] [pid 45409:tid 45417] [client 20.19.187.50:20429] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "adJvtNHt_Oyw03gjCNg1CAAAAMY"]
[Sun Apr 05 22:20:37.470811 2026] [:error] [pid 30921:tid 30942] [client 20.19.187.50:7519] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "adJvtWFGQVn8Q0ueB2436wAAARM"]
[Sun Apr 05 22:20:40.038403 2026] [:error] [pid 45303:tid 45330] [client 20.19.187.50:17631] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "adJvuLboQ9eViZ4hdnlhQgAAAA0"]
[Sun Apr 05 22:20:40.719515 2026] [:error] [pid 45409:tid 45416] [client 20.19.187.50:7945] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "adJvuNHt_Oyw03gjCNg1DwAAAMU"]
[Sun Apr 05 22:20:41.602550 2026] [:error] [pid 45305:tid 45380] [client 20.19.187.50:44012] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "adJvuejDQjr7aWhjflByggAAAIk"]
[Sun Apr 05 22:20:42.297233 2026] [:error] [pid 30921:tid 30937] [client 20.19.187.50:13638] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "adJvumFGQVn8Q0ueB243-gAAAQ4"]
[Sun Apr 05 22:20:43.203169 2026] [:error] [pid 45305:tid 45371] [client 20.19.187.50:42076] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "adJvu-jDQjr7aWhjflByhQAAAIA"]
[Sun Apr 05 22:20:44.001754 2026] [:error] [pid 45304:tid 45367] [client 20.19.187.50:10141] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "adJvvA5jnqDKKovdRkkq5wAAAFc"]
[Sun Apr 05 22:20:45.202007 2026] [:error] [pid 30921:tid 30928] [client 20.19.187.50:2838] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "adJvvWFGQVn8Q0ueB244AgAAAQU"]
[Sun Apr 05 22:20:46.059444 2026] [:error] [pid 30921:tid 30924] [client 20.19.187.50:8201] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "adJvvmFGQVn8Q0ueB244BQAAAQE"]
[Sun Apr 05 22:20:47.193469 2026] [:error] [pid 45305:tid 45384] [client 20.19.187.50:14593] [client 20.19.187.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "adJvv-jDQjr7aWhjflBykQAAAI0"]
[Sun Apr 05 22:20:47.856931 2026] [:error] [pid 45305:tid 45382] [client 20.19.187.50:43337] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/123.php"] [unique_id "adJvv-jDQjr7aWhjflBylAAAAIs"]
[Sun Apr 05 22:20:48.774717 2026] [:error] [pid 30921:tid 30923] [client 20.19.187.50:15034] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/123.php"] [unique_id "adJvwGFGQVn8Q0ueB244EAAAAQA"]
[Sun Apr 05 22:20:49.674635 2026] [:error] [pid 30921:tid 30942] [client 20.19.187.50:13638] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/123.php"] [unique_id "adJvwWFGQVn8Q0ueB244GwAAARM"]
[Sun Apr 05 22:20:50.559305 2026] [:error] [pid 30921:tid 30927] [client 20.19.187.50:16205] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/123.php"] [unique_id "adJvwmFGQVn8Q0ueB244IgAAAQQ"]
[Sun Apr 05 22:20:51.749463 2026] [:error] [pid 45303:tid 45317] [client 20.19.187.50:7506] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "adJvw7boQ9eViZ4hdnlhVAAAAAA"]
[Sun Apr 05 22:20:52.523789 2026] [:error] [pid 45303:tid 45335] [client 20.19.187.50:9491] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "adJvxLboQ9eViZ4hdnlhXgAAABI"]
[Sun Apr 05 22:20:53.180451 2026] [:error] [pid 45409:tid 45415] [client 20.19.187.50:8229] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "adJvxdHt_Oyw03gjCNg1LgAAAMQ"]
[Sun Apr 05 22:20:54.151090 2026] [:error] [pid 45305:tid 45382] [client 20.19.187.50:13577] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "adJvxujDQjr7aWhjflByoQAAAIs"]
[Sun Apr 05 22:20:55.111294 2026] [:error] [pid 45409:tid 45428] [client 20.19.187.50:2756] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "adJvx9Ht_Oyw03gjCNg1PQAAANE"]
[Sun Apr 05 22:20:56.532534 2026] [:error] [pid 45409:tid 45414] [client 20.19.187.50:56268] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "adJvyNHt_Oyw03gjCNg1TAAAAMM"]
[Sun Apr 05 22:20:58.120403 2026] [:error] [pid 45409:tid 45427] [client 20.19.187.50:2346] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "adJvytHt_Oyw03gjCNg1WwAAANA"]
[Sun Apr 05 22:20:59.367628 2026] [:error] [pid 45303:tid 45326] [client 20.19.187.50:56320] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "adJvy7boQ9eViZ4hdnlhdAAAAAk"]
[Sun Apr 05 22:21:00.678509 2026] [:error] [pid 45304:tid 45355] [client 20.19.187.50:36543] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "adJvzA5jnqDKKovdRkkq-wAAAEs"]
[Sun Apr 05 22:21:02.854674 2026] [:error] [pid 45303:tid 45322] [client 20.19.187.50:2499] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "adJvzrboQ9eViZ4hdnlhfwAAAAU"]
[Sun Apr 05 22:21:03.878167 2026] [:error] [pid 45305:tid 45371] [client 20.19.187.50:2660] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "adJvz-jDQjr7aWhjflByuwAAAIA"]
[Sun Apr 05 22:21:04.659060 2026] [:error] [pid 45305:tid 45389] [client 20.19.187.50:51926] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "adJv0OjDQjr7aWhjflByvwAAAJI"]
[Sun Apr 05 22:21:06.226129 2026] [:error] [pid 45409:tid 45414] [client 20.19.187.50:2505] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "adJv0tHt_Oyw03gjCNg1ZQAAAMM"]
[Sun Apr 05 22:21:07.780929 2026] [:error] [pid 45409:tid 45433] [client 20.19.187.50:2522] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "adJv09Ht_Oyw03gjCNg1cAAAANY"]
[Sun Apr 05 22:21:08.787709 2026] [:error] [pid 45305:tid 45390] [client 20.19.187.50:51517] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "adJv1OjDQjr7aWhjflByyAAAAJM"]
[Sun Apr 05 22:21:09.852865 2026] [:error] [pid 45303:tid 45320] [client 20.19.187.50:45365] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "adJv1bboQ9eViZ4hdnlhiwAAAAM"]
[Sun Apr 05 22:21:11.831910 2026] [:error] [pid 30921:tid 30941] [client 20.19.187.50:7431] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "adJv12FGQVn8Q0ueB244OwAAARI"]
[Sun Apr 05 22:21:13.007233 2026] [:error] [pid 45409:tid 45430] [client 20.19.187.50:13224] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "adJv2dHt_Oyw03gjCNg1jQAAANM"]
[Sun Apr 05 22:21:18.482098 2026] [:error] [pid 45303:tid 45339] [client 20.19.187.50:15467] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "adJv3rboQ9eViZ4hdnlhngAAABY"]
[Sun Apr 05 22:21:24.746562 2026] [:error] [pid 45304:tid 45367] [client 20.19.187.50:11673] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Apr 05 22:21:24.986724 2026] [:error] [pid 45304:tid 45349] [client 20.19.187.50:11673] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sun Apr 05 22:21:25.480034 2026] [:error] [pid 45304:tid 45345] [client 20.19.187.50:11673] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-x7.php
[Sun Apr 05 22:21:25.720118 2026] [:error] [pid 45304:tid 45352] [client 20.19.187.50:11673] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Sun Apr 05 22:21:27.420004 2026] [:error] [pid 45304:tid 45352] [client 20.19.187.50:11673] File does not exist: /usr/local/apache/htdocs/suspended-page/v4.php
[Sun Apr 05 22:21:27.659333 2026] [:error] [pid 45304:tid 45363] [client 20.19.187.50:11673] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Sun Apr 05 22:21:27.915500 2026] [:error] [pid 45304:tid 45365] [client 20.19.187.50:11673] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Apr 05 22:21:28.159249 2026] [:error] [pid 45304:tid 45350] [client 20.19.187.50:11673] File does not exist: /usr/local/apache/htdocs/suspended-page/an7.php
[Sun Apr 05 22:21:28.450518 2026] [:error] [pid 45304:tid 45356] [client 20.19.187.50:11673] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-gr.php
[Sun Apr 05 22:21:28.716415 2026] [:error] [pid 45304:tid 45357] [client 20.19.187.50:11673] [client 20.19.187.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adJv6A5jnqDKKovdRkkrPAAAAE0"]
[Sun Apr 05 22:21:35.977951 2026] [:error] [pid 45409:tid 45415] [client 20.19.187.50:44584] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ext.php"] [unique_id "adJv79Ht_Oyw03gjCNg1tAAAAMQ"]
[Sun Apr 05 22:21:43.683699 2026] [:error] [pid 45303:tid 45321] [client 20.19.187.50:20400] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ext.php"] [unique_id "adJv97boQ9eViZ4hdnlh_AAAAAQ"]
[Sun Apr 05 22:22:03.636427 2026] [:error] [pid 45409:tid 45423] [client 20.19.187.50:45379] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about3.php"] [unique_id "adJwC9Ht_Oyw03gjCNg2GwAAAMw"]
[Sun Apr 05 22:22:09.174037 2026] [:error] [pid 45409:tid 45431] [client 20.19.187.50:45395] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about3.php"] [unique_id "adJwEdHt_Oyw03gjCNg2OAAAANQ"]
[Sun Apr 05 22:22:12.743968 2026] [:error] [pid 45409:tid 45416] [client 20.19.187.50:2434] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "adJwFNHt_Oyw03gjCNg2RwAAAMU"]
[Sun Apr 05 22:22:17.224448 2026] [:error] [pid 45303:tid 45324] [client 20.19.187.50:8998] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "adJwGbboQ9eViZ4hdnliOQAAAAc"]
[Sun Apr 05 22:22:36.550682 2026] [:error] [pid 30921:tid 30931] [client 20.19.187.50:53284] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Apr 05 22:22:36.802116 2026] [:error] [pid 30921:tid 30940] [client 20.19.187.50:53284] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sun Apr 05 22:22:37.038622 2026] [:error] [pid 30921:tid 30924] [client 20.19.187.50:53284] [client 20.19.187.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "adJwLWFGQVn8Q0ueB2443wAAAQE"]
[Sun Apr 05 22:22:40.047459 2026] [:error] [pid 45303:tid 45327] [client 20.19.187.50:46673] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Apr 05 22:22:40.285770 2026] [:error] [pid 45303:tid 45338] [client 20.19.187.50:46673] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Sun Apr 05 22:22:40.542973 2026] [:error] [pid 45303:tid 45325] [client 20.19.187.50:46673] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Sun Apr 05 22:22:41.064028 2026] [:error] [pid 45303:tid 45336] [client 20.19.187.50:46673] [client 20.19.187.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adJwMbboQ9eViZ4hdnliewAAABM"]
[Sun Apr 05 22:22:42.980022 2026] [:error] [pid 45303:tid 45341] [client 20.19.187.50:16180] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Sun Apr 05 22:22:43.219435 2026] [:error] [pid 45303:tid 45328] [client 20.19.187.50:16180] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sun Apr 05 22:22:43.943748 2026] [:error] [pid 45303:tid 45321] [client 20.19.187.50:16180] File does not exist: /usr/local/apache/htdocs/suspended-page/dlu.php
[Sun Apr 05 22:22:44.183128 2026] [:error] [pid 45303:tid 45334] [client 20.19.187.50:16180] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "adJwNLboQ9eViZ4hdnlikwAAABE"]
[Sun Apr 05 22:22:45.444358 2026] [:error] [pid 45303:tid 45330] [client 20.19.187.50:7721] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "adJwNbboQ9eViZ4hdnlilwAAAA0"]
[Sun Apr 05 22:22:46.835488 2026] [:error] [pid 45305:tid 45392] [client 20.19.187.50:51403] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "adJwNujDQjr7aWhjflBzYQAAAJU"]
[Sun Apr 05 22:22:48.234673 2026] [:error] [pid 45304:tid 45363] [client 20.19.187.50:53308] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "adJwOA5jnqDKKovdRkkrowAAAFM"]
[Sun Apr 05 22:22:50.183445 2026] [:error] [pid 45303:tid 45330] [client 20.19.187.50:15047] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "adJwOrboQ9eViZ4hdnliqAAAAA0"]
[Sun Apr 05 22:22:51.924092 2026] [:error] [pid 45305:tid 45387] [client 20.19.187.50:46657] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "adJwO-jDQjr7aWhjflBzfAAAAJA"]
[Sun Apr 05 22:22:54.839413 2026] [:error] [pid 30921:tid 30945] [client 20.19.187.50:54461] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "adJwPmFGQVn8Q0ueB2448AAAARY"]
[Sun Apr 05 22:22:56.617709 2026] [:error] [pid 45409:tid 45424] [client 20.19.187.50:10233] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "adJwQNHt_Oyw03gjCNg23wAAAM0"]
[Sun Apr 05 22:22:59.025047 2026] [:error] [pid 45304:tid 45356] [client 20.19.187.50:48961] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "adJwQw5jnqDKKovdRkkruwAAAEw"]
[Sun Apr 05 22:23:01.562626 2026] [:error] [pid 45304:tid 45348] [client 20.19.187.50:12533] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "adJwRQ5jnqDKKovdRkkrxQAAAEQ"]
[Sun Apr 05 22:23:04.038373 2026] [:error] [pid 45303:tid 45320] [client 20.19.187.50:49017] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "adJwSLboQ9eViZ4hdnliwQAAAAM"]
[Sun Apr 05 22:23:05.153777 2026] [:error] [pid 45303:tid 45327] [client 20.19.187.50:12104] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "adJwSbboQ9eViZ4hdnliygAAAAo"]
[Sun Apr 05 22:23:06.472555 2026] [:error] [pid 45303:tid 45333] [client 20.19.187.50:48979] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "adJwSrboQ9eViZ4hdnli0QAAABA"]
[Sun Apr 05 22:23:07.651332 2026] [:error] [pid 45409:tid 45419] [client 20.19.187.50:10497] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "adJwS9Ht_Oyw03gjCNg3AAAAAMg"]
[Sun Apr 05 22:23:08.775750 2026] [:error] [pid 45304:tid 45351] [client 20.19.187.50:21341] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "adJwTA5jnqDKKovdRkkr2wAAAEc"]
[Sun Apr 05 22:23:09.639512 2026] [:error] [pid 45409:tid 45422] [client 20.19.187.50:8530] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "adJwTdHt_Oyw03gjCNg3DAAAAMs"]
[Sun Apr 05 22:23:10.411976 2026] [:error] [pid 45303:tid 45328] [client 20.19.187.50:8526] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "adJwTrboQ9eViZ4hdnli4wAAAAs"]
[Sun Apr 05 22:23:11.053496 2026] [:error] [pid 45305:tid 45385] [client 20.19.187.50:8751] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "adJwT-jDQjr7aWhjflBztAAAAI4"]
[Sun Apr 05 22:23:12.175807 2026] [:error] [pid 45305:tid 45392] [client 20.19.187.50:19216] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "adJwUOjDQjr7aWhjflBzuwAAAJU"]
[Sun Apr 05 22:23:13.381579 2026] [:error] [pid 45409:tid 45429] [client 20.19.187.50:2922] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "adJwUdHt_Oyw03gjCNg3EwAAANI"]
[Sun Apr 05 22:23:14.214191 2026] [:error] [pid 45409:tid 45411] [client 20.19.187.50:2917] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "adJwUtHt_Oyw03gjCNg3GAAAAMA"]
[Sun Apr 05 22:23:15.099925 2026] [:error] [pid 30921:tid 30924] [client 20.19.187.50:8760] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "adJwU2FGQVn8Q0ueB245AAAAAQE"]
[Sun Apr 05 22:23:15.750346 2026] [:error] [pid 45304:tid 45364] [client 20.19.187.50:34586] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "adJwUw5jnqDKKovdRkkr9AAAAFQ"]
[Sun Apr 05 22:23:16.703324 2026] [:error] [pid 45304:tid 45352] [client 20.19.187.50:8766] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "adJwVA5jnqDKKovdRkkr_AAAAEg"]
[Sun Apr 05 22:23:17.684219 2026] [:error] [pid 45303:tid 45328] [client 20.19.187.50:8519] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "adJwVbboQ9eViZ4hdnli7AAAAAs"]
[Sun Apr 05 22:23:18.709547 2026] [:error] [pid 45409:tid 45423] [client 20.19.187.50:53719] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "adJwVtHt_Oyw03gjCNg3HwAAAMw"]
[Sun Apr 05 22:23:20.266448 2026] [:error] [pid 45409:tid 45418] [client 20.19.187.50:8806] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "adJwWNHt_Oyw03gjCNg3JAAAAMc"]
[Sun Apr 05 22:23:22.084480 2026] [:error] [pid 45303:tid 45327] [client 20.19.187.50:12110] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "adJwWrboQ9eViZ4hdnli8gAAAAo"]
[Sun Apr 05 22:23:23.225030 2026] [:error] [pid 45303:tid 45340] [client 20.19.187.50:34585] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "adJwW7boQ9eViZ4hdnli9QAAABc"]
[Sun Apr 05 22:23:24.570150 2026] [:error] [pid 45303:tid 45335] [client 20.19.187.50:34564] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "adJwXLboQ9eViZ4hdnli-wAAABI"]
[Sun Apr 05 22:23:27.198554 2026] [:error] [pid 45409:tid 45415] [client 20.19.187.50:9789] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "adJwX9Ht_Oyw03gjCNg3PwAAAMQ"]
[Sun Apr 05 22:23:29.739588 2026] [:error] [pid 45409:tid 45420] [client 20.19.187.50:8777] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "adJwYdHt_Oyw03gjCNg3TgAAAMk"]
[Sun Apr 05 22:23:30.805183 2026] [:error] [pid 45303:tid 45329] [client 20.19.187.50:12055] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "adJwYrboQ9eViZ4hdnljCQAAAAw"]
[Sun Apr 05 22:23:31.827694 2026] [:error] [pid 45304:tid 45365] [client 20.19.187.50:9791] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "adJwYw5jnqDKKovdRkksIAAAAFU"]
[Sun Apr 05 22:23:33.061157 2026] [:error] [pid 45409:tid 45425] [client 20.19.187.50:19218] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "adJwZdHt_Oyw03gjCNg3XAAAAM4"]
[Sun Apr 05 22:23:34.447100 2026] [:error] [pid 45409:tid 45422] [client 20.19.187.50:8543] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "adJwZtHt_Oyw03gjCNg3YgAAAMs"]
[Sun Apr 05 22:23:35.673151 2026] [:error] [pid 45409:tid 45432] [client 20.19.187.50:8764] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/te.php"] [unique_id "adJwZ9Ht_Oyw03gjCNg3bQAAANU"]
[Sun Apr 05 22:23:36.727967 2026] [:error] [pid 30921:tid 30929] [client 20.19.187.50:34608] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/te.php"] [unique_id "adJwaGFGQVn8Q0ueB245FgAAAQY"]
[Sun Apr 05 22:23:37.963030 2026] [:error] [pid 45304:tid 45366] [client 20.19.187.50:19206] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/te.php"] [unique_id "adJwaQ5jnqDKKovdRkksMAAAAFY"]
[Sun Apr 05 22:23:40.003618 2026] [:error] [pid 45303:tid 45329] [client 20.19.187.50:2596] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/te.php"] [unique_id "adJwbLboQ9eViZ4hdnljGwAAAAw"]
[Sun Apr 05 22:23:41.321479 2026] [:error] [pid 45305:tid 45394] [client 20.19.187.50:34583] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "adJwbejDQjr7aWhjflBz3gAAAJc"]
[Sun Apr 05 22:23:42.033666 2026] [:error] [pid 45304:tid 45351] [client 20.19.187.50:8798] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "adJwbg5jnqDKKovdRkksPwAAAEc"]
[Sun Apr 05 22:23:43.150110 2026] [:error] [pid 45303:tid 45322] [client 20.19.187.50:2990] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Apr 05 22:23:43.388986 2026] [:error] [pid 45303:tid 45333] [client 20.19.187.50:2990] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Sun Apr 05 22:23:43.650457 2026] [:error] [pid 45303:tid 45331] [client 20.19.187.50:2990] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Sun Apr 05 22:23:43.888772 2026] [:error] [pid 45303:tid 45335] [client 20.19.187.50:2990] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Sun Apr 05 22:23:44.136354 2026] [:error] [pid 45303:tid 45327] [client 20.19.187.50:2990] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Apr 05 22:23:44.615413 2026] [:error] [pid 45303:tid 45328] [client 20.19.187.50:2990] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Apr 05 22:23:44.880470 2026] [:error] [pid 45303:tid 45337] [client 20.19.187.50:2990] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Sun Apr 05 22:23:45.122977 2026] [:error] [pid 45303:tid 45332] [client 20.19.187.50:2990] File does not exist: /usr/local/apache/htdocs/suspended-page/v2.php
[Sun Apr 05 22:23:45.606168 2026] [:error] [pid 45303:tid 45320] [client 20.19.187.50:2990] File does not exist: /usr/local/apache/htdocs/suspended-page/shoha.php
[Sun Apr 05 22:23:45.842434 2026] [:error] [pid 45303:tid 45318] [client 20.19.187.50:2990] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "adJwcbboQ9eViZ4hdnljRAAAAAE"]
[Sun Apr 05 22:23:47.214076 2026] [:error] [pid 45304:tid 45346] [client 20.19.187.50:10958] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "adJwcw5jnqDKKovdRkksRwAAAEI"]
[Sun Apr 05 22:23:48.408014 2026] [:error] [pid 45409:tid 45418] [client 20.19.187.50:15754] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "adJwdNHt_Oyw03gjCNg3kgAAAMc"]
[Sun Apr 05 22:23:49.304625 2026] [:error] [pid 45304:tid 45363] [client 20.19.187.50:34595] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "adJwdQ5jnqDKKovdRkksSwAAAFM"]
[Sun Apr 05 22:23:50.678436 2026] [:error] [pid 45305:tid 45391] [client 20.19.187.50:9754] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "adJwdujDQjr7aWhjflBz7QAAAJQ"]
[Sun Apr 05 22:23:51.831304 2026] [:error] [pid 30921:tid 30925] [client 20.19.187.50:2961] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "adJwd2FGQVn8Q0ueB245PAAAAQI"]
[Sun Apr 05 22:23:53.238180 2026] [:error] [pid 45409:tid 45432] [client 20.19.187.50:2889] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "adJwedHt_Oyw03gjCNg3zwAAANU"]
[Sun Apr 05 22:23:54.164111 2026] [:error] [pid 45409:tid 45426] [client 20.19.187.50:14005] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "adJwetHt_Oyw03gjCNg32gAAAM8"]
[Sun Apr 05 22:23:55.517569 2026] [:error] [pid 45303:tid 45336] [client 20.19.187.50:10995] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "adJwe7boQ9eViZ4hdnljWAAAABM"]
[Sun Apr 05 22:23:56.688545 2026] [:error] [pid 45409:tid 45435] [client 20.19.187.50:13957] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "adJwfNHt_Oyw03gjCNg35wAAANg"]
[Sun Apr 05 22:23:58.355325 2026] [:error] [pid 45409:tid 45412] [client 20.19.187.50:11355] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "adJwftHt_Oyw03gjCNg37QAAAME"]
[Sun Apr 05 22:23:59.990395 2026] [:error] [pid 30921:tid 30946] [client 20.19.187.50:19281] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "adJwf2FGQVn8Q0ueB245UwAAARc"]
[Sun Apr 05 22:24:01.453290 2026] [:error] [pid 45304:tid 45355] [client 20.19.187.50:17170] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "adJwgQ5jnqDKKovdRkksXgAAAEs"]
[Sun Apr 05 22:24:02.780609 2026] [:error] [pid 45304:tid 45346] [client 20.19.187.50:12438] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "adJwgg5jnqDKKovdRkksYgAAAEI"]
[Sun Apr 05 22:24:03.806688 2026] [:error] [pid 30921:tid 30944] [client 20.19.187.50:17538] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "adJwg2FGQVn8Q0ueB245YwAAARU"]
[Sun Apr 05 22:24:04.790504 2026] [:error] [pid 30921:tid 30938] [client 20.19.187.50:13952] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "adJwhGFGQVn8Q0ueB245awAAAQ8"]
[Sun Apr 05 22:24:05.487944 2026] [:error] [pid 30921:tid 30945] [client 20.19.187.50:10997] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "adJwhWFGQVn8Q0ueB245cAAAARY"]
[Sun Apr 05 22:24:06.890139 2026] [:error] [pid 30921:tid 30929] [client 20.19.187.50:13286] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "adJwhmFGQVn8Q0ueB245cwAAAQY"]
[Sun Apr 05 22:24:08.120149 2026] [:error] [pid 45304:tid 45349] [client 20.19.187.50:17538] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "adJwiA5jnqDKKovdRkksbwAAAEU"]
[Sun Apr 05 22:24:09.652265 2026] [:error] [pid 45409:tid 45415] [client 20.19.187.50:2970] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "adJwidHt_Oyw03gjCNg3-wAAAMQ"]
[Sun Apr 05 22:24:11.473064 2026] [:error] [pid 45409:tid 45424] [client 20.19.187.50:2201] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "adJwi9Ht_Oyw03gjCNg3_AAAAM0"]
[Sun Apr 05 22:24:12.512801 2026] [:error] [pid 45303:tid 45336] [client 20.19.187.50:13980] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "adJwjLboQ9eViZ4hdnljfAAAABM"]
[Sun Apr 05 22:24:13.675699 2026] [:error] [pid 45305:tid 45382] [client 20.19.187.50:17155] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "adJwjejDQjr7aWhjflB0FAAAAIs"]
[Sun Apr 05 22:24:15.576168 2026] [:error] [pid 45409:tid 45433] [client 20.19.187.50:13999] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "adJwj9Ht_Oyw03gjCNg4CwAAANY"]
[Sun Apr 05 22:24:17.004742 2026] [:error] [pid 45304:tid 45356] [client 20.19.187.50:18330] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "adJwkQ5jnqDKKovdRkksgAAAAEw"]
[Sun Apr 05 22:24:21.398735 2026] [:error] [pid 30921:tid 30927] [client 20.19.187.50:2381] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "adJwlWFGQVn8Q0ueB245iwAAAQQ"]
[Sun Apr 05 22:24:27.187434 2026] [:error] [pid 45304:tid 45348] [client 20.19.187.50:9078] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "adJwmw5jnqDKKovdRkksngAAAEQ"]
[Sun Apr 05 22:24:31.098569 2026] [:error] [pid 45305:tid 45389] [client 20.19.187.50:10894] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "adJwn-jDQjr7aWhjflB0HQAAAJI"]
[Sun Apr 05 22:24:32.958097 2026] [:error] [pid 45409:tid 45415] [client 20.19.187.50:2402] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "adJwoNHt_Oyw03gjCNg4OwAAAMQ"]
[Sun Apr 05 22:24:36.728951 2026] [:error] [pid 45305:tid 45384] [client 20.19.187.50:55166] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "adJwpOjDQjr7aWhjflB0LQAAAI0"]
[Sun Apr 05 22:24:38.126754 2026] [:error] [pid 30921:tid 30931] [client 20.19.187.50:55148] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "adJwpmFGQVn8Q0ueB245pgAAAQg"]
[Sun Apr 05 22:24:41.435694 2026] [:error] [pid 45303:tid 45340] [client 20.19.187.50:2431] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "adJwqbboQ9eViZ4hdnljuAAAABc"]
[Sun Apr 05 22:24:42.821852 2026] [:error] [pid 30921:tid 30923] [client 20.19.187.50:21410] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "adJwqmFGQVn8Q0ueB245tAAAAQA"]
[Sun Apr 05 22:24:44.909771 2026] [:error] [pid 30921:tid 30940] [client 20.19.187.50:9319] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "adJwrGFGQVn8Q0ueB245uwAAARE"]
[Sun Apr 05 22:24:45.759813 2026] [:error] [pid 30921:tid 30924] [client 20.19.187.50:35144] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Apr 05 22:24:45.997927 2026] [:error] [pid 30921:tid 30925] [client 20.19.187.50:35144] File does not exist: /usr/local/apache/htdocs/suspended-page/zxin.php
[Sun Apr 05 22:24:46.871316 2026] [:error] [pid 30921:tid 30945] [client 20.19.187.50:35144] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sun Apr 05 22:24:47.109568 2026] [:error] [pid 30921:tid 30940] [client 20.19.187.50:35144] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sun Apr 05 22:24:47.348352 2026] [:error] [pid 30921:tid 30947] [client 20.19.187.50:35144] File does not exist: /usr/local/apache/htdocs/suspended-page/wolv2.php
[Sun Apr 05 22:24:47.594443 2026] [:error] [pid 30921:tid 30934] [client 20.19.187.50:35144] File does not exist: /usr/local/apache/htdocs/suspended-page/geck.php
[Sun Apr 05 22:24:47.832925 2026] [:error] [pid 30921:tid 30946] [client 20.19.187.50:35144] File does not exist: /usr/local/apache/htdocs/suspended-page/xtt.php
[Sun Apr 05 22:24:48.076769 2026] [:error] [pid 30921:tid 30944] [client 20.19.187.50:35144] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Apr 05 22:24:48.528034 2026] [:error] [pid 30921:tid 30938] [client 20.19.187.50:35144] File does not exist: /usr/local/apache/htdocs/suspended-page/system.php
[Sun Apr 05 22:24:48.779561 2026] [:error] [pid 30921:tid 30928] [client 20.19.187.50:35144] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Apr 05 22:24:49.015997 2026] [:error] [pid 30921:tid 30945] [client 20.19.187.50:35144] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "adJwsWFGQVn8Q0ueB2451gAAARY"]
[Sun Apr 05 22:24:50.285183 2026] [:error] [pid 30921:tid 30943] [client 20.19.187.50:16554] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "adJwsmFGQVn8Q0ueB2451wAAARQ"]
[Sun Apr 05 22:24:51.307605 2026] [:error] [pid 30921:tid 30938] [client 20.19.187.50:17623] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "adJws2FGQVn8Q0ueB2452gAAAQ8"]
[Sun Apr 05 22:24:52.140293 2026] [:error] [pid 45304:tid 45356] [client 20.19.187.50:7514] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "adJwtA5jnqDKKovdRkksvAAAAEw"]
[Sun Apr 05 22:24:53.079683 2026] [:error] [pid 45304:tid 45358] [client 20.19.187.50:56086] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "adJwtQ5jnqDKKovdRkkswgAAAE4"]
[Sun Apr 05 22:24:53.936374 2026] [:error] [pid 45305:tid 45379] [client 20.19.187.50:36147] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "adJwtejDQjr7aWhjflB0QQAAAIg"]
[Sun Apr 05 22:24:55.163455 2026] [:error] [pid 45304:tid 45365] [client 20.19.187.50:13632] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "adJwtw5jnqDKKovdRkkszAAAAFU"]
[Sun Apr 05 22:24:56.218050 2026] [:error] [pid 45305:tid 45386] [client 20.19.187.50:56105] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "adJwuOjDQjr7aWhjflB0SgAAAI8"]
[Sun Apr 05 22:24:57.131119 2026] [:error] [pid 45303:tid 45339] [client 20.19.187.50:56067] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media.php"] [unique_id "adJwubboQ9eViZ4hdnljzwAAABY"]
[Sun Apr 05 22:24:58.185026 2026] [:error] [pid 45305:tid 45383] [client 20.19.187.50:42079] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media.php"] [unique_id "adJwuujDQjr7aWhjflB0UQAAAIw"]
[Sun Apr 05 22:24:59.559332 2026] [:error] [pid 45304:tid 45358] [client 20.19.187.50:44007] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media.php"] [unique_id "adJwuw5jnqDKKovdRkks1AAAAE4"]
[Sun Apr 05 22:25:00.489339 2026] [:error] [pid 45303:tid 45328] [client 20.19.187.50:9487] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media.php"] [unique_id "adJwvLboQ9eViZ4hdnlj4AAAAAs"]
[Sun Apr 05 22:25:01.377331 2026] [:error] [pid 45304:tid 45361] [client 20.19.187.50:7976] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adJwvQ5jnqDKKovdRkks2AAAAFE"]
[Sun Apr 05 22:25:02.730965 2026] [:error] [pid 45303:tid 45324] [client 20.19.187.50:2820] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adJwvrboQ9eViZ4hdnlj5QAAAAc"]
[Sun Apr 05 22:25:03.799943 2026] [:error] [pid 45305:tid 45386] [client 20.19.187.50:15021] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adJwv-jDQjr7aWhjflB0YAAAAI8"]
[Sun Apr 05 22:25:04.763939 2026] [:error] [pid 30921:tid 30946] [client 20.19.187.50:13679] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adJwwGFGQVn8Q0ueB2456gAAARc"]
[Sun Apr 05 22:25:06.197826 2026] [:error] [pid 45409:tid 45411] [client 20.19.187.50:42102] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admir.php"] [unique_id "adJwwtHt_Oyw03gjCNg4bwAAAMA"]
[Sun Apr 05 22:25:07.181038 2026] [:error] [pid 45305:tid 45395] [client 20.19.187.50:52546] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admir.php"] [unique_id "adJww-jDQjr7aWhjflB0ZwAAAJg"]
[Sun Apr 05 22:25:08.152437 2026] [:error] [pid 45409:tid 45418] [client 20.19.187.50:2053] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admir.php"] [unique_id "adJwxNHt_Oyw03gjCNg4cgAAAMc"]
[Sun Apr 05 22:25:09.024285 2026] [:error] [pid 30921:tid 30947] [client 20.19.187.50:56332] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admir.php"] [unique_id "adJwxWFGQVn8Q0ueB2458gAAARg"]
[Sun Apr 05 22:25:10.560434 2026] [:error] [pid 45409:tid 45426] [client 20.19.187.50:8279] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "adJwxtHt_Oyw03gjCNg4eAAAAM8"]
[Sun Apr 05 22:25:11.873445 2026] [:error] [pid 45305:tid 45390] [client 20.19.187.50:13630] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "adJwx-jDQjr7aWhjflB0dwAAAJM"]
[Sun Apr 05 22:25:14.480088 2026] [:error] [pid 30921:tid 30942] [client 20.19.187.50:8253] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "adJwymFGQVn8Q0ueB245-wAAARM"]
[Sun Apr 05 22:25:15.999727 2026] [:error] [pid 45409:tid 45429] [client 20.19.187.50:8313] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "adJwy9Ht_Oyw03gjCNg4fgAAANI"]
[Sun Apr 05 22:25:18.727139 2026] [:error] [pid 45409:tid 45415] [client 20.19.187.50:2789] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "adJwztHt_Oyw03gjCNg4fwAAAMQ"]
[Sun Apr 05 22:25:21.610745 2026] [:error] [pid 45409:tid 45416] [client 20.19.187.50:51923] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "adJw0dHt_Oyw03gjCNg4jAAAAMU"]
[Sun Apr 05 22:25:23.420964 2026] [:error] [pid 45409:tid 45426] [client 20.19.187.50:2351] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "adJw09Ht_Oyw03gjCNg4lAAAAM8"]
[Sun Apr 05 22:25:25.344241 2026] [:error] [pid 45303:tid 45320] [client 20.19.187.50:3009] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "adJw1bboQ9eViZ4hdnlkBwAAAAM"]
[Sun Apr 05 22:25:27.760299 2026] [:error] [pid 45305:tid 45373] [client 20.19.187.50:15484] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adJw1-jDQjr7aWhjflB0qAAAAII"]
[Sun Apr 05 22:25:29.828261 2026] [:error] [pid 45409:tid 45413] [client 20.19.187.50:18034] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adJw2dHt_Oyw03gjCNg4pQAAAMI"]
[Sun Apr 05 22:25:31.065650 2026] [:error] [pid 45409:tid 45412] [client 20.19.187.50:12825] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adJw29Ht_Oyw03gjCNg4sAAAAME"]
[Sun Apr 05 22:25:33.256548 2026] [:error] [pid 45409:tid 45416] [client 20.19.187.50:20087] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adJw3dHt_Oyw03gjCNg4uwAAAMU"]
[Sun Apr 05 22:25:34.291442 2026] [:error] [pid 45409:tid 45423] [client 20.19.187.50:42032] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc.php"] [unique_id "adJw3tHt_Oyw03gjCNg4wgAAAMw"]
[Sun Apr 05 22:25:35.505523 2026] [:error] [pid 45303:tid 45324] [client 20.19.187.50:45325] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc.php"] [unique_id "adJw37boQ9eViZ4hdnlkDwAAAAc"]
[Sun Apr 05 22:25:36.762642 2026] [:error] [pid 30921:tid 30937] [client 20.19.187.50:13216] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc.php"] [unique_id "adJw4GFGQVn8Q0ueB246NAAAAQ4"]
[Sun Apr 05 22:25:38.768135 2026] [:error] [pid 45303:tid 45327] [client 20.19.187.50:20079] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc.php"] [unique_id "adJw4rboQ9eViZ4hdnlkEwAAAAo"]
[Sun Apr 05 22:25:40.052317 2026] [:error] [pid 45409:tid 45426] [client 20.19.187.50:11652] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "adJw5NHt_Oyw03gjCNg44gAAAM8"]
[Sun Apr 05 22:25:41.278834 2026] [:error] [pid 30921:tid 30926] [client 20.19.187.50:56453] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "adJw5WFGQVn8Q0ueB246OgAAAQM"]
[Sun Apr 05 22:25:42.471579 2026] [:error] [pid 45409:tid 45425] [client 20.19.187.50:9805] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "adJw5tHt_Oyw03gjCNg47AAAAM4"]
[Sun Apr 05 22:25:44.846246 2026] [:error] [pid 30921:tid 30923] [client 20.19.187.50:45352] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "adJw6GFGQVn8Q0ueB246QwAAAQA"]
[Sun Apr 05 22:25:45.899324 2026] [:error] [pid 30921:tid 30935] [client 20.19.187.50:2531] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "adJw6WFGQVn8Q0ueB246SQAAAQw"]
[Sun Apr 05 22:25:47.178647 2026] [:error] [pid 45303:tid 45334] [client 20.19.187.50:42024] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "adJw67boQ9eViZ4hdnlkIQAAABE"]
[Sun Apr 05 22:25:48.222440 2026] [:error] [pid 30921:tid 30940] [client 20.19.187.50:20807] File does not exist: /usr/local/apache/htdocs/suspended-page/lo.php
[Sun Apr 05 22:25:48.461617 2026] [:error] [pid 30921:tid 30937] [client 20.19.187.50:20807] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Sun Apr 05 22:25:48.701272 2026] [:error] [pid 30921:tid 30947] [client 20.19.187.50:20807] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Sun Apr 05 22:25:49.192473 2026] [:error] [pid 30921:tid 30929] [client 20.19.187.50:20807] File does not exist: /usr/local/apache/htdocs/suspended-page/lmutxdvyp7u5yksqke8ozbjgCdefault.php
[Sun Apr 05 22:25:49.479631 2026] [:error] [pid 30921:tid 30924] [client 20.19.187.50:20807] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sun Apr 05 22:25:49.717833 2026] [:error] [pid 30921:tid 30943] [client 20.19.187.50:20807] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Sun Apr 05 22:25:49.971757 2026] [:error] [pid 30921:tid 30944] [client 20.19.187.50:20807] File does not exist: /usr/local/apache/htdocs/suspended-page/yas.php
[Sun Apr 05 22:25:50.209774 2026] [:error] [pid 30921:tid 30933] [client 20.19.187.50:20807] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sun Apr 05 22:25:50.449017 2026] [:error] [pid 30921:tid 30942] [client 20.19.187.50:20807] File does not exist: /usr/local/apache/htdocs/suspended-page/v3.php
[Sun Apr 05 22:25:50.938662 2026] [:error] [pid 30921:tid 30930] [client 20.19.187.50:20807] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "adJw7mFGQVn8Q0ueB246XwAAAQc"]
[Sun Apr 05 22:25:51.785978 2026] [:error] [pid 45304:tid 45345] [client 20.19.187.50:51468] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "adJw7w5jnqDKKovdRkktHwAAAEE"]
[Sun Apr 05 22:25:52.770683 2026] [:error] [pid 30921:tid 30929] [client 20.19.187.50:15487] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "adJw8GFGQVn8Q0ueB246ZAAAAQY"]
[Sun Apr 05 22:25:53.761406 2026] [:error] [pid 45303:tid 45327] [client 20.19.187.50:48937] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "adJw8bboQ9eViZ4hdnlkNQAAAAo"]
[Sun Apr 05 22:25:54.837794 2026] [:error] [pid 30921:tid 30947] [client 20.19.187.50:56451] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adJw8mFGQVn8Q0ueB246aAAAARg"]
[Sun Apr 05 22:25:56.255198 2026] [:error] [pid 45304:tid 45348] [client 20.19.187.50:11663] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adJw9A5jnqDKKovdRkktKwAAAEQ"]
[Sun Apr 05 22:25:57.023468 2026] [:error] [pid 30921:tid 30925] [client 20.19.187.50:56414] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adJw9WFGQVn8Q0ueB246awAAAQI"]
[Sun Apr 05 22:25:58.333023 2026] [:error] [pid 45409:tid 45418] [client 20.19.187.50:43958] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adJw9tHt_Oyw03gjCNg49AAAAMc"]
[Sun Apr 05 22:25:59.246050 2026] [:error] [pid 45409:tid 45420] [client 20.19.187.50:9233] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/himu.php"] [unique_id "adJw99Ht_Oyw03gjCNg4-QAAAMk"]
[Sun Apr 05 22:26:00.666943 2026] [:error] [pid 45304:tid 45365] [client 20.19.187.50:15460] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/himu.php"] [unique_id "adJw-A5jnqDKKovdRkktMAAAAFU"]
[Sun Apr 05 22:26:01.551657 2026] [:error] [pid 45304:tid 45357] [client 20.19.187.50:56506] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/himu.php"] [unique_id "adJw-Q5jnqDKKovdRkktNQAAAE0"]
[Sun Apr 05 22:26:02.475110 2026] [:error] [pid 45409:tid 45426] [client 20.19.187.50:43941] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/himu.php"] [unique_id "adJw-tHt_Oyw03gjCNg4_gAAAM8"]
[Sun Apr 05 22:26:03.388107 2026] [:error] [pid 30921:tid 30933] [client 20.19.187.50:19649] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "adJw-2FGQVn8Q0ueB246dwAAAQo"]
[Sun Apr 05 22:26:04.186522 2026] [:error] [pid 45305:tid 45389] [client 20.19.187.50:43932] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "adJw_OjDQjr7aWhjflB0_gAAAJI"]
[Sun Apr 05 22:26:05.156093 2026] [:error] [pid 45303:tid 45333] [client 20.19.187.50:51470] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "adJw_bboQ9eViZ4hdnlkQgAAABA"]
[Sun Apr 05 22:26:05.896227 2026] [:error] [pid 45409:tid 45425] [client 20.19.187.50:38233] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "adJw_dHt_Oyw03gjCNg5BwAAAM4"]
[Sun Apr 05 22:26:06.820045 2026] [:error] [pid 45409:tid 45418] [client 20.19.187.50:15431] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "adJw_tHt_Oyw03gjCNg5CQAAAMc"]
[Sun Apr 05 22:26:08.867755 2026] [:error] [pid 45409:tid 45435] [client 20.19.187.50:45360] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "adJxANHt_Oyw03gjCNg5GgAAANg"]
[Sun Apr 05 22:26:10.544465 2026] [:error] [pid 45303:tid 45332] [client 20.19.187.50:38234] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "adJxArboQ9eViZ4hdnlkTAAAAA8"]
[Sun Apr 05 22:26:11.478942 2026] [:error] [pid 45303:tid 45335] [client 20.19.187.50:56486] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "adJxA7boQ9eViZ4hdnlkUwAAABI"]
[Sun Apr 05 22:26:12.656202 2026] [:error] [pid 45305:tid 45387] [client 20.19.187.50:51494] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "adJxBOjDQjr7aWhjflB1MgAAAJA"]
[Sun Apr 05 22:26:13.952003 2026] [:error] [pid 45304:tid 45357] [client 20.19.187.50:15457] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "adJxBQ5jnqDKKovdRkktRwAAAE0"]
[Sun Apr 05 22:26:15.995828 2026] [:error] [pid 45409:tid 45415] [client 20.19.187.50:2543] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "adJxB9Ht_Oyw03gjCNg5KAAAAMQ"]
[Sun Apr 05 22:26:18.730685 2026] [:error] [pid 45303:tid 45335] [client 20.19.187.50:13209] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "adJxCrboQ9eViZ4hdnlkgQAAABI"]
[Sun Apr 05 22:26:19.941312 2026] [:error] [pid 45409:tid 45426] [client 20.19.187.50:56438] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "adJxC9Ht_Oyw03gjCNg5NAAAAM8"]
[Sun Apr 05 22:26:22.658092 2026] [:error] [pid 45303:tid 45323] [client 20.19.187.50:56407] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "adJxDrboQ9eViZ4hdnlkkwAAAAY"]
[Sun Apr 05 22:26:23.844619 2026] [:error] [pid 45303:tid 45324] [client 20.19.187.50:9555] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "adJxD7boQ9eViZ4hdnlknAAAAAc"]
[Sun Apr 05 22:26:25.379166 2026] [:error] [pid 45409:tid 45431] [client 20.19.187.50:15438] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "adJxEdHt_Oyw03gjCNg5QgAAANQ"]
[Sun Apr 05 22:26:26.060108 2026] [:error] [pid 30921:tid 30924] [client 20.19.187.50:20393] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "adJxEmFGQVn8Q0ueB246pwAAAQE"]
[Sun Apr 05 22:26:27.067032 2026] [:error] [pid 45303:tid 45336] [client 20.19.187.50:51500] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "adJxE7boQ9eViZ4hdnlksQAAABM"]
[Sun Apr 05 22:26:28.554230 2026] [:error] [pid 45303:tid 45317] [client 20.19.187.50:45329] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "adJxFLboQ9eViZ4hdnlkwAAAAAA"]
[Sun Apr 05 22:26:29.801142 2026] [:error] [pid 45409:tid 45416] [client 20.19.187.50:44616] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "adJxFdHt_Oyw03gjCNg5aAAAAMU"]
[Sun Apr 05 22:26:31.263131 2026] [:error] [pid 45304:tid 45359] [client 20.19.187.50:53223] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "adJxFw5jnqDKKovdRkktcwAAAE8"]
[Sun Apr 05 22:26:32.864997 2026] [:error] [pid 45409:tid 45431] [client 20.19.187.50:48956] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "adJxGNHt_Oyw03gjCNg5fgAAANQ"]
[Sun Apr 05 22:26:34.435704 2026] [:error] [pid 45304:tid 45345] [client 20.19.187.50:51461] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "adJxGg5jnqDKKovdRkktegAAAEE"]
[Sun Apr 05 22:26:35.495018 2026] [:error] [pid 45304:tid 45350] [client 20.19.187.50:20070] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-is.php"] [unique_id "adJxGw5jnqDKKovdRkktgAAAAEY"]
[Sun Apr 05 22:26:36.253988 2026] [:error] [pid 45409:tid 45429] [client 20.19.187.50:2497] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "adJxHNHt_Oyw03gjCNg5mAAAANI"]
[Sun Apr 05 22:26:37.192046 2026] [:error] [pid 45409:tid 45419] [client 20.19.187.50:45346] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "adJxHdHt_Oyw03gjCNg5nQAAAMg"]
[Sun Apr 05 22:26:38.318961 2026] [:error] [pid 30921:tid 30934] [client 20.19.187.50:2505] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "adJxHmFGQVn8Q0ueB246zAAAAQs"]
[Sun Apr 05 22:26:39.433459 2026] [:error] [pid 30921:tid 30943] [client 20.19.187.50:13220] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "adJxH2FGQVn8Q0ueB246zgAAARQ"]
[Sun Apr 05 22:26:40.100419 2026] [:error] [pid 45303:tid 45327] [client 20.19.187.50:48951] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "adJxILboQ9eViZ4hdnllJQAAAAo"]
[Sun Apr 05 22:26:43.167331 2026] [:error] [pid 45303:tid 45319] [client 20.19.187.50:51517] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "adJxI7boQ9eViZ4hdnllPgAAAAI"]
[Sun Apr 05 22:26:48.629667 2026] [:error] [pid 45303:tid 45320] [client 20.19.187.50:51510] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "adJxKLboQ9eViZ4hdnllVwAAAAM"]
[Sun Apr 05 22:27:09.114624 2026] [:error] [pid 30921:tid 30938] [client 20.19.187.50:19992] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Apr 05 22:27:09.373633 2026] [:error] [pid 30921:tid 30946] [client 20.19.187.50:19992] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sun Apr 05 22:27:09.612581 2026] [:error] [pid 30921:tid 30925] [client 20.19.187.50:19992] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Sun Apr 05 22:27:09.851244 2026] [:error] [pid 30921:tid 30944] [client 20.19.187.50:19992] File does not exist: /usr/local/apache/htdocs/suspended-page/lol.php
[Sun Apr 05 22:27:10.124055 2026] [:error] [pid 30921:tid 30924] [client 20.19.187.50:19992] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Mon Apr 06 18:24:07.138511 2026] [:error] [pid 35688:tid 35767] [client 51.103.237.230:60687] File does not exist: /usr/local/apache/htdocs/suspended-page/image.php
[Mon Apr 06 18:24:07.392128 2026] [:error] [pid 35688:tid 35755] [client 51.103.237.230:60687] File does not exist: /usr/local/apache/htdocs/suspended-page/wps.php
[Mon Apr 06 18:24:07.704144 2026] [:error] [pid 35688:tid 35759] [client 51.103.237.230:60687] File does not exist: /usr/local/apache/htdocs/suspended-page/r2.php
[Mon Apr 06 18:24:07.944179 2026] [:error] [pid 35688:tid 35771] [client 51.103.237.230:60687] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Mon Apr 06 18:24:08.209581 2026] [:error] [pid 35688:tid 35751] [client 51.103.237.230:60687] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Mon Apr 06 18:24:08.917638 2026] [:error] [pid 35688:tid 35770] [client 51.103.237.230:60687] File does not exist: /usr/local/apache/htdocs/suspended-page/006.php
[Mon Apr 06 18:24:09.166434 2026] [:error] [pid 35688:tid 35768] [client 51.103.237.230:60687] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Mon Apr 06 18:24:09.407280 2026] [:error] [pid 35688:tid 35757] [client 51.103.237.230:60687] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Mon Apr 06 18:24:09.645192 2026] [:error] [pid 35688:tid 35763] [client 51.103.237.230:60687] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Mon Apr 06 18:24:09.885625 2026] [:error] [pid 35688:tid 35754] [client 51.103.237.230:60687] File does not exist: /usr/local/apache/htdocs/suspended-page/lmutxdvyp7u5yksqke8ozbjgCdefault.php
[Mon Apr 06 18:24:10.122974 2026] [:error] [pid 35688:tid 35765] [client 51.103.237.230:60687] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adOJyuZ85qg4jLsRpQxe8AAAAI8"]
[Mon Apr 06 18:24:11.228564 2026] [:error] [pid 35688:tid 35750] [client 51.103.237.230:19310] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adOJy-Z85qg4jLsRpQxe8QAAAIA"]
[Mon Apr 06 18:24:12.142108 2026] [:error] [pid 10280:tid 10284] [client 51.103.237.230:32015] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adOJzF8QUJkf8g-BFfO-oAAAAcE"]
[Mon Apr 06 18:24:12.741765 2026] [:error] [pid 35688:tid 35760] [client 51.103.237.230:25741] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adOJzOZ85qg4jLsRpQxe_gAAAIo"]
[Mon Apr 06 18:24:13.331097 2026] [:error] [pid 9413:tid 9426] [client 51.103.237.230:19298] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adOJzXllvEK3chn01wGyTgAAAYs"]
[Mon Apr 06 18:24:13.963399 2026] [:error] [pid 10280:tid 10291] [client 51.103.237.230:34025] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adOJzV8QUJkf8g-BFfO-pQAAAcg"]
[Mon Apr 06 18:24:14.916167 2026] [:error] [pid 35686:tid 35709] [client 51.103.237.230:19282] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adOJzsMKdea6oORd2fy9igAAAA0"]
[Mon Apr 06 18:24:17.508035 2026] [:error] [pid 35687:tid 35724] [client 51.103.237.230:34036] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adOJ0Z3LtDozV0i8BitVSQAAAEE"]
[Mon Apr 06 18:24:18.482325 2026] [:error] [pid 38562:tid 38571] [client 51.103.237.230:60727] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adOJ0qeD6Ohe6wzRuy5emwAAAUY"]
[Mon Apr 06 18:24:19.735428 2026] [:error] [pid 35687:tid 35732] [client 51.103.237.230:33976] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adOJ053LtDozV0i8BitVSgAAAEk"]
[Mon Apr 06 18:24:20.885890 2026] [:error] [pid 35687:tid 35744] [client 51.103.237.230:32017] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adOJ1J3LtDozV0i8BitVTQAAAFU"]
[Mon Apr 06 18:24:22.656991 2026] [:error] [pid 9442:tid 9452] [client 51.103.237.230:15897] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adOJ1kPsNnAJTnmz6sZ4eQAAAQg"]
[Mon Apr 06 18:24:23.825187 2026] [:error] [pid 9442:tid 9466] [client 51.103.237.230:46597] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adOJ10PsNnAJTnmz6sZ4hAAAARY"]
[Mon Apr 06 18:24:24.692767 2026] [:error] [pid 35687:tid 35736] [client 51.103.237.230:15897] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adOJ2J3LtDozV0i8BitVWAAAAE0"]
[Mon Apr 06 18:24:25.657089 2026] [:error] [pid 35687:tid 35746] [client 51.103.237.230:25774] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adOJ2Z3LtDozV0i8BitVWgAAAFc"]
[Mon Apr 06 18:24:29.060867 2026] [:error] [pid 10280:tid 10285] [client 51.103.237.230:25754] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adOJ3V8QUJkf8g-BFfO-ygAAAcI"]
[Mon Apr 06 18:24:34.066186 2026] [:error] [pid 10280:tid 10294] [client 51.103.237.230:28438] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adOJ4l8QUJkf8g-BFfO-1QAAAcs"]
[Mon Apr 06 18:24:36.138471 2026] [:error] [pid 9442:tid 9460] [client 51.103.237.230:15900] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adOJ5EPsNnAJTnmz6sZ4lQAAARA"]
[Mon Apr 06 18:24:36.743475 2026] [:error] [pid 9442:tid 9449] [client 51.103.237.230:15891] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adOJ5EPsNnAJTnmz6sZ4mQAAAQU"]
[Mon Apr 06 18:24:38.604087 2026] [:error] [pid 35687:tid 35741] [client 51.103.237.230:19027] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adOJ5p3LtDozV0i8BitVbgAAAFI"]
[Mon Apr 06 18:24:39.873652 2026] [:error] [pid 9413:tid 9431] [client 51.103.237.230:15892] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "adOJ53llvEK3chn01wGycwAAAZA"]
[Mon Apr 06 18:24:40.895575 2026] [:error] [pid 38562:tid 38570] [client 51.103.237.230:29534] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "adOJ6KeD6Ohe6wzRuy5ezAAAAUU"]
[Mon Apr 06 18:24:42.197465 2026] [:error] [pid 35686:tid 35702] [client 51.103.237.230:25779] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "adOJ6sMKdea6oORd2fy9twAAAAY"]
[Mon Apr 06 18:24:42.947016 2026] [:error] [pid 10280:tid 10288] [client 51.103.237.230:46616] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "adOJ6l8QUJkf8g-BFfO_CAAAAcU"]
[Mon Apr 06 18:24:43.647792 2026] [:error] [pid 9442:tid 9460] [client 51.103.237.230:29557] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adOJ60PsNnAJTnmz6sZ4rgAAARA"]
[Mon Apr 06 18:24:44.292783 2026] [:error] [pid 9442:tid 9464] [client 51.103.237.230:19268] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adOJ7EPsNnAJTnmz6sZ4sgAAARQ"]
[Mon Apr 06 18:24:45.187456 2026] [:error] [pid 10280:tid 10295] [client 51.103.237.230:60722] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adOJ7V8QUJkf8g-BFfO_DQAAAcw"]
[Mon Apr 06 18:24:47.034211 2026] [:error] [pid 9413:tid 9434] [client 51.103.237.230:28464] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adOJ73llvEK3chn01wGyfAAAAZM"]
[Mon Apr 06 18:24:48.975496 2026] [:error] [pid 9442:tid 9462] [client 51.103.237.230:60719] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adOJ8EPsNnAJTnmz6sZ4vQAAARI"]
[Mon Apr 06 18:24:50.952170 2026] [:error] [pid 9413:tid 9421] [client 51.103.237.230:60726] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adOJ8nllvEK3chn01wGyhQAAAYY"]
[Mon Apr 06 18:24:53.624154 2026] [:error] [pid 9442:tid 9446] [client 51.103.237.230:19317] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adOJ9UPsNnAJTnmz6sZ4xwAAAQI"]
[Mon Apr 06 18:24:56.022623 2026] [:error] [pid 35688:tid 35751] [client 51.103.237.230:46601] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adOJ-OZ85qg4jLsRpQxfMAAAAIE"]
[Mon Apr 06 18:24:56.848841 2026] [:error] [pid 35687:tid 35740] [client 51.103.237.230:20928] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "adOJ-J3LtDozV0i8BitVewAAAFE"]
[Mon Apr 06 18:24:57.518859 2026] [:error] [pid 35688:tid 35763] [client 51.103.237.230:19308] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "adOJ-eZ85qg4jLsRpQxfOwAAAI0"]
[Mon Apr 06 18:24:58.240674 2026] [:error] [pid 9442:tid 9449] [client 51.103.237.230:28479] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "adOJ-kPsNnAJTnmz6sZ40QAAAQU"]
[Mon Apr 06 18:24:59.035951 2026] [:error] [pid 35688:tid 35753] [client 51.103.237.230:28440] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "adOJ--Z85qg4jLsRpQxfSQAAAIM"]
[Mon Apr 06 18:24:59.838633 2026] [:error] [pid 35786:tid 35804] [client 51.103.237.230:20951] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adOJ-2gkfCKTaLhwaKQOagAAAMs"]
[Mon Apr 06 18:25:00.596761 2026] [:error] [pid 38562:tid 38586] [client 51.103.237.230:19049] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adOJ_KeD6Ohe6wzRuy5e5wAAAVU"]
[Mon Apr 06 18:25:01.245595 2026] [:error] [pid 35786:tid 35817] [client 51.103.237.230:18949] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adOJ_WgkfCKTaLhwaKQObAAAANg"]
[Mon Apr 06 18:25:02.128862 2026] [:error] [pid 35786:tid 35805] [client 51.103.237.230:18488] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adOJ_mgkfCKTaLhwaKQObwAAAMw"]
[Mon Apr 06 18:25:02.756033 2026] [:error] [pid 9442:tid 9449] [client 51.103.237.230:33988] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adOJ_kPsNnAJTnmz6sZ44AAAAQU"]
[Mon Apr 06 18:25:03.693703 2026] [:error] [pid 38562:tid 38565] [client 51.103.237.230:1324] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adOJ_6eD6Ohe6wzRuy5e7wAAAUA"]
[Mon Apr 06 18:25:04.429001 2026] [:error] [pid 38562:tid 38584] [client 51.103.237.230:30845] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adOKAKeD6Ohe6wzRuy5e8gAAAVM"]
[Mon Apr 06 18:25:05.135106 2026] [:error] [pid 35688:tid 35766] [client 51.103.237.230:36579] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adOKAeZ85qg4jLsRpQxfVwAAAJA"]
[Mon Apr 06 18:25:05.918268 2026] [:error] [pid 9442:tid 9458] [client 51.103.237.230:15731] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adOKAUPsNnAJTnmz6sZ47gAAAQ4"]
[Mon Apr 06 18:25:06.889453 2026] [:error] [pid 9442:tid 9448] [client 51.103.237.230:19244] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adOKAkPsNnAJTnmz6sZ49AAAAQQ"]
[Mon Apr 06 18:25:08.169731 2026] [:error] [pid 35688:tid 35769] [client 51.103.237.230:45320] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adOKBOZ85qg4jLsRpQxfYgAAAJM"]
[Mon Apr 06 18:25:08.909281 2026] [:error] [pid 35687:tid 35736] [client 51.103.237.230:21733] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adOKBJ3LtDozV0i8BitVggAAAE0"]
[Mon Apr 06 18:25:09.423692 2026] [:error] [pid 35688:tid 35769] [client 51.103.237.230:21742] File does not exist: /usr/local/apache/htdocs/suspended-page/pxw8hpvyfvvpojjxvnCdefault.php
[Mon Apr 06 18:25:09.738320 2026] [:error] [pid 35688:tid 35768] [client 51.103.237.230:21742] File does not exist: /usr/local/apache/htdocs/suspended-page/r9pbhistk1lifhnjadpCdefault.php
[Mon Apr 06 18:25:09.978384 2026] [:error] [pid 35688:tid 35753] [client 51.103.237.230:21742] File does not exist: /usr/local/apache/htdocs/suspended-page/s3FiyJ2WGCnF0p1default.php
[Mon Apr 06 18:25:10.244975 2026] [:error] [pid 35688:tid 35750] [client 51.103.237.230:21742] [client 51.103.237.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "adOKBuZ85qg4jLsRpQxfdAAAAIA"]
[Mon Apr 06 18:25:11.038792 2026] [:error] [pid 35688:tid 35769] [client 51.103.237.230:16706] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Mon Apr 06 18:25:11.518761 2026] [:error] [pid 35688:tid 35753] [client 51.103.237.230:16706] File does not exist: /usr/local/apache/htdocs/suspended-page/xda.php
[Mon Apr 06 18:25:11.807705 2026] [:error] [pid 35688:tid 35773] [client 51.103.237.230:16706] File does not exist: /usr/local/apache/htdocs/suspended-page/wdone1.php
[Mon Apr 06 18:25:12.046226 2026] [:error] [pid 35688:tid 35752] [client 51.103.237.230:16706] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Mon Apr 06 18:25:12.545806 2026] [:error] [pid 35688:tid 35765] [client 51.103.237.230:16706] File does not exist: /usr/local/apache/htdocs/suspended-page/ng.php
[Mon Apr 06 18:25:12.839352 2026] [:error] [pid 35688:tid 35762] [client 51.103.237.230:16706] File does not exist: /usr/local/apache/htdocs/suspended-page/awh.php
[Mon Apr 06 18:25:13.276011 2026] [:error] [pid 35688:tid 35755] [client 51.103.237.230:16706] File does not exist: /usr/local/apache/htdocs/suspended-page/aee.php
[Mon Apr 06 18:25:13.623783 2026] [:error] [pid 35688:tid 35770] [client 51.103.237.230:16706] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adOKCeZ85qg4jLsRpQxfjAAAAJQ"]
[Mon Apr 06 18:25:14.207184 2026] [:error] [pid 10280:tid 10292] [client 51.103.237.230:20700] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adOKCl8QUJkf8g-BFfO_aQAAAck"]
[Mon Apr 06 18:25:15.380719 2026] [:error] [pid 35688:tid 35758] [client 51.103.237.230:1130] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adOKC-Z85qg4jLsRpQxfjgAAAIg"]
[Mon Apr 06 18:25:16.638388 2026] [:error] [pid 9442:tid 9457] [client 51.103.237.230:58720] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adOKDEPsNnAJTnmz6sZ5CAAAAQ0"]
[Mon Apr 06 18:25:17.592796 2026] [:error] [pid 10280:tid 10303] [client 51.103.237.230:16664] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ruabjw00.php"] [unique_id "adOKDV8QUJkf8g-BFfO_gwAAAdQ"]
[Mon Apr 06 18:25:18.393862 2026] [:error] [pid 35686:tid 35696] [client 51.103.237.230:28500] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ruabjw00.php"] [unique_id "adOKDsMKdea6oORd2fy90wAAAAA"]
[Mon Apr 06 18:25:19.582476 2026] [:error] [pid 9442:tid 9466] [client 51.103.237.230:20070] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ruabjw00.php"] [unique_id "adOKD0PsNnAJTnmz6sZ5DgAAARY"]
[Mon Apr 06 18:25:22.023174 2026] [:error] [pid 9413:tid 9423] [client 51.103.237.230:21164] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ruabjw00.php"] [unique_id "adOKEnllvEK3chn01wGyoAAAAYg"]
[Mon Apr 06 18:25:24.098568 2026] [:error] [pid 35786:tid 35794] [client 51.103.237.230:1473] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-4dvn1ew.php"] [unique_id "adOKFGgkfCKTaLhwaKQOeQAAAME"]
[Mon Apr 06 18:25:28.270299 2026] [:error] [pid 9413:tid 9422] [client 51.103.237.230:21170] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-4dvn1ew.php"] [unique_id "adOKGHllvEK3chn01wGypwAAAYc"]
[Mon Apr 06 18:25:30.708848 2026] [:error] [pid 38562:tid 38578] [client 51.103.237.230:60636] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-4dvn1ew.php"] [unique_id "adOKGqeD6Ohe6wzRuy5fGQAAAU0"]
[Mon Apr 06 18:25:32.343650 2026] [:error] [pid 10280:tid 10300] [client 51.103.237.230:23414] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-4dvn1ew.php"] [unique_id "adOKHF8QUJkf8g-BFfO_lwAAAdE"]
[Mon Apr 06 18:25:34.967124 2026] [:error] [pid 35686:tid 35709] [client 51.103.237.230:24164] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-rhvi43.php"] [unique_id "adOKHsMKdea6oORd2fy9_QAAAA0"]
[Mon Apr 06 18:25:35.844225 2026] [:error] [pid 10280:tid 10295] [client 51.103.237.230:28540] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-rhvi43.php"] [unique_id "adOKH18QUJkf8g-BFfO_ngAAAcw"]
[Mon Apr 06 18:25:37.875683 2026] [:error] [pid 35686:tid 35718] [client 51.103.237.230:18208] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-rhvi43.php"] [unique_id "adOKIcMKdea6oORd2fy-AQAAABY"]
[Mon Apr 06 18:25:41.803326 2026] [:error] [pid 10280:tid 10288] [client 51.103.237.230:60663] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-rhvi43.php"] [unique_id "adOKJV8QUJkf8g-BFfO_swAAAcU"]
[Mon Apr 06 18:25:43.743791 2026] [:error] [pid 9442:tid 9468] [client 51.103.237.230:59994] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adOKJ0PsNnAJTnmz6sZ5PAAAARg"]
[Mon Apr 06 18:25:45.219024 2026] [:error] [pid 10280:tid 10304] [client 51.103.237.230:34584] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adOKKV8QUJkf8g-BFfO_zgAAAdU"]
[Mon Apr 06 18:25:46.580411 2026] [:error] [pid 35687:tid 35738] [client 51.103.237.230:1656] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adOKKp3LtDozV0i8BitVpQAAAE8"]
[Mon Apr 06 18:25:47.830393 2026] [:error] [pid 10280:tid 10300] [client 51.103.237.230:27729] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adOKK18QUJkf8g-BFfO_1QAAAdE"]
[Mon Apr 06 18:25:48.837760 2026] [:error] [pid 9442:tid 9457] [client 51.103.237.230:34577] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/webx.php"] [unique_id "adOKLEPsNnAJTnmz6sZ5TQAAAQ0"]
[Mon Apr 06 18:25:49.580183 2026] [:error] [pid 35688:tid 35759] [client 51.103.237.230:16252] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/webx.php"] [unique_id "adOKLeZ85qg4jLsRpQxfswAAAIk"]
[Mon Apr 06 18:25:50.106705 2026] [:error] [pid 9442:tid 9461] [client 51.103.237.230:60625] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/webx.php"] [unique_id "adOKLkPsNnAJTnmz6sZ5UAAAARE"]
[Mon Apr 06 18:25:50.908127 2026] [:error] [pid 9413:tid 9425] [client 51.103.237.230:16220] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/webx.php"] [unique_id "adOKLnllvEK3chn01wGyxgAAAYo"]
[Mon Apr 06 18:25:51.758613 2026] [:error] [pid 10280:tid 10305] [client 51.103.237.230:19478] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "adOKL18QUJkf8g-BFfO_3gAAAdY"]
[Mon Apr 06 18:25:52.611089 2026] [:error] [pid 9442:tid 9462] [client 51.103.237.230:34570] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "adOKMEPsNnAJTnmz6sZ5VgAAARI"]
[Mon Apr 06 18:25:53.512519 2026] [:error] [pid 35688:tid 35759] [client 51.103.237.230:31399] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "adOKMeZ85qg4jLsRpQxfwQAAAIk"]
[Mon Apr 06 18:25:54.690350 2026] [:error] [pid 9442:tid 9468] [client 51.103.237.230:27775] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "adOKMkPsNnAJTnmz6sZ5WQAAARg"]
[Mon Apr 06 18:25:56.211285 2026] [:error] [pid 10280:tid 10300] [client 51.103.237.230:20351] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-22.php"] [unique_id "adOKNF8QUJkf8g-BFfO_5wAAAdE"]
[Mon Apr 06 18:25:57.355518 2026] [:error] [pid 38562:tid 38577] [client 51.103.237.230:19490] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-22.php"] [unique_id "adOKNaeD6Ohe6wzRuy5fOwAAAUw"]
[Mon Apr 06 18:25:58.976493 2026] [:error] [pid 38562:tid 38586] [client 51.103.237.230:34650] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-22.php"] [unique_id "adOKNqeD6Ohe6wzRuy5fQgAAAVU"]
[Mon Apr 06 18:26:00.195118 2026] [:error] [pid 10280:tid 10290] [client 51.103.237.230:19989] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-22.php"] [unique_id "adOKOF8QUJkf8g-BFfO_7gAAAcc"]
[Mon Apr 06 18:26:01.277050 2026] [:error] [pid 9442:tid 9458] [client 51.103.237.230:34687] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/villain.php"] [unique_id "adOKOUPsNnAJTnmz6sZ5YgAAAQ4"]
[Mon Apr 06 18:26:02.529871 2026] [:error] [pid 35686:tid 35713] [client 51.103.237.230:32105] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/villain.php"] [unique_id "adOKOsMKdea6oORd2fy-OwAAABE"]
[Mon Apr 06 18:26:03.590126 2026] [:error] [pid 35688:tid 35750] [client 51.103.237.230:18239] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/villain.php"] [unique_id "adOKO-Z85qg4jLsRpQxf1wAAAIA"]
[Mon Apr 06 18:26:04.088305 2026] [:error] [pid 9442:tid 9468] [client 51.103.237.230:27727] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/villain.php"] [unique_id "adOKPEPsNnAJTnmz6sZ5bgAAARg"]
[Mon Apr 06 18:26:04.691964 2026] [:error] [pid 35688:tid 35765] [client 51.103.237.230:21466] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-db.php"] [unique_id "adOKPOZ85qg4jLsRpQxf3gAAAI8"]
[Mon Apr 06 18:26:05.424531 2026] [:error] [pid 35688:tid 35767] [client 51.103.237.230:38454] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-db.php"] [unique_id "adOKPeZ85qg4jLsRpQxf4QAAAJE"]
[Mon Apr 06 18:26:06.191169 2026] [:error] [pid 35686:tid 35702] [client 51.103.237.230:18191] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-db.php"] [unique_id "adOKPsMKdea6oORd2fy-RAAAAAY"]
[Mon Apr 06 18:26:07.001191 2026] [:error] [pid 38562:tid 38583] [client 51.103.237.230:20005] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-db.php"] [unique_id "adOKP6eD6Ohe6wzRuy5fVgAAAVI"]
[Mon Apr 06 18:26:07.788587 2026] [:error] [pid 9442:tid 9446] [client 51.103.237.230:32096] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/red.php"] [unique_id "adOKP0PsNnAJTnmz6sZ5dQAAAQI"]
[Mon Apr 06 18:26:08.757600 2026] [:error] [pid 35688:tid 35752] [client 51.103.237.230:27773] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/red.php"] [unique_id "adOKQOZ85qg4jLsRpQxf5wAAAII"]
[Mon Apr 06 18:26:09.854951 2026] [:error] [pid 9442:tid 9458] [client 51.103.237.230:32118] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/red.php"] [unique_id "adOKQUPsNnAJTnmz6sZ5eQAAAQ4"]
[Mon Apr 06 18:26:11.414419 2026] [:error] [pid 38562:tid 38575] [client 51.103.237.230:18230] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/red.php"] [unique_id "adOKQ6eD6Ohe6wzRuy5fXQAAAUo"]
[Mon Apr 06 18:26:12.941826 2026] [:error] [pid 10280:tid 10299] [client 51.103.237.230:19213] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "adOKRF8QUJkf8g-BFfPABAAAAdA"]
[Mon Apr 06 18:26:14.827911 2026] [:error] [pid 35688:tid 35774] [client 51.103.237.230:18992] File does not exist: /usr/local/apache/htdocs/suspended-page/an7.php
[Mon Apr 06 18:26:15.100193 2026] [:error] [pid 35688:tid 35770] [client 51.103.237.230:18992] File does not exist: /usr/local/apache/htdocs/suspended-page/ava.php
[Mon Apr 06 18:26:15.339925 2026] [:error] [pid 35688:tid 35763] [client 51.103.237.230:18992] File does not exist: /usr/local/apache/htdocs/suspended-page/uxijj.php
[Mon Apr 06 18:26:16.601978 2026] [:error] [pid 35688:tid 35761] [client 51.103.237.230:18992] File does not exist: /usr/local/apache/htdocs/suspended-page/fs7.php
[Mon Apr 06 18:26:16.842407 2026] [:error] [pid 35688:tid 35764] [client 51.103.237.230:18992] File does not exist: /usr/local/apache/htdocs/suspended-page/tool2.php
[Mon Apr 06 18:26:17.080693 2026] [:error] [pid 35688:tid 35753] [client 51.103.237.230:18992] File does not exist: /usr/local/apache/htdocs/suspended-page/zjllx.php
[Mon Apr 06 18:26:20.576743 2026] [:error] [pid 35688:tid 35760] [client 51.103.237.230:18992] File does not exist: /usr/local/apache/htdocs/suspended-page/h2.php
[Mon Apr 06 18:26:20.815246 2026] [:error] [pid 35688:tid 35763] [client 51.103.237.230:18992] File does not exist: /usr/local/apache/htdocs/suspended-page/tiny2.php
[Mon Apr 06 18:26:21.057883 2026] [:error] [pid 35688:tid 35759] [client 51.103.237.230:18992] File does not exist: /usr/local/apache/htdocs/suspended-page/wsheet1.php
[Mon Apr 06 18:26:21.299302 2026] [:error] [pid 35688:tid 35757] [client 51.103.237.230:18992] File does not exist: /usr/local/apache/htdocs/suspended-page/dbc.php
[Mon Apr 06 18:26:21.543097 2026] [:error] [pid 35688:tid 35758] [client 51.103.237.230:18992] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Mon Apr 06 18:26:21.779170 2026] [:error] [pid 35688:tid 35753] [client 51.103.237.230:18992] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ukaa.php"] [unique_id "adOKTeZ85qg4jLsRpQxgMwAAAIM"]
[Mon Apr 06 18:26:22.992088 2026] [:error] [pid 10280:tid 10301] [client 51.103.237.230:38412] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ukaa.php"] [unique_id "adOKTl8QUJkf8g-BFfPAKgAAAdI"]
[Mon Apr 06 18:26:23.674848 2026] [:error] [pid 38562:tid 38572] [client 51.103.237.230:20303] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ukaa.php"] [unique_id "adOKT6eD6Ohe6wzRuy5feQAAAUc"]
[Mon Apr 06 18:26:24.454174 2026] [:error] [pid 9442:tid 9447] [client 51.103.237.230:19719] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ukaa.php"] [unique_id "adOKUEPsNnAJTnmz6sZ5ngAAAQM"]
[Mon Apr 06 18:26:25.092245 2026] [:error] [pid 35688:tid 35763] [client 51.103.237.230:19261] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "adOKUeZ85qg4jLsRpQxgOAAAAI0"]
[Mon Apr 06 18:26:25.996288 2026] [:error] [pid 38562:tid 38573] [client 51.103.237.230:19990] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "adOKUaeD6Ohe6wzRuy5fiQAAAUg"]
[Mon Apr 06 18:26:26.811301 2026] [:error] [pid 35688:tid 35773] [client 51.103.237.230:21472] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "adOKUuZ85qg4jLsRpQxgPQAAAJc"]
[Mon Apr 06 18:26:27.683083 2026] [:error] [pid 9442:tid 9446] [client 51.103.237.230:19248] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "adOKU0PsNnAJTnmz6sZ5pgAAAQI"]
[Mon Apr 06 18:26:28.991540 2026] [:error] [pid 35688:tid 35769] [client 51.103.237.230:38461] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "adOKVOZ85qg4jLsRpQxgTAAAAJM"]
[Mon Apr 06 18:26:30.631733 2026] [:error] [pid 9442:tid 9448] [client 51.103.237.230:19993] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "adOKVkPsNnAJTnmz6sZ5uAAAAQQ"]
[Mon Apr 06 18:26:32.619490 2026] [:error] [pid 10280:tid 10286] [client 51.103.237.230:20316] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "adOKWF8QUJkf8g-BFfPAMwAAAcM"]
[Mon Apr 06 18:26:35.612291 2026] [:error] [pid 38562:tid 38569] [client 51.103.237.230:34677] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "adOKW6eD6Ohe6wzRuy5fngAAAUQ"]
[Mon Apr 06 18:26:38.704663 2026] [:error] [pid 35786:tid 35812] [client 51.103.237.230:22191] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "adOKXmgkfCKTaLhwaKQOtAAAANM"]
[Mon Apr 06 18:26:41.281798 2026] [:error] [pid 35688:tid 35768] [client 51.103.237.230:34664] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "adOKYeZ85qg4jLsRpQxgpwAAAJI"]
[Mon Apr 06 18:26:42.691048 2026] [:error] [pid 9442:tid 9466] [client 51.103.237.230:19000] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "adOKYkPsNnAJTnmz6sZ51gAAARY"]
[Mon Apr 06 18:26:43.556351 2026] [:error] [pid 10280:tid 10306] [client 51.103.237.230:29481] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "adOKY18QUJkf8g-BFfPAOQAAAdc"]
[Mon Apr 06 18:26:44.147486 2026] [:error] [pid 35688:tid 35759] [client 51.103.237.230:29471] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "adOKZOZ85qg4jLsRpQxgvAAAAIk"]
[Mon Apr 06 18:26:44.802413 2026] [:error] [pid 35688:tid 35764] [client 51.103.237.230:1326] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "adOKZOZ85qg4jLsRpQxgxQAAAI4"]
[Mon Apr 06 18:26:45.321768 2026] [:error] [pid 35688:tid 35769] [client 51.103.237.230:22199] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "adOKZeZ85qg4jLsRpQxgywAAAJM"]
[Mon Apr 06 18:26:46.509781 2026] [:error] [pid 10280:tid 10297] [client 51.103.237.230:20650] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "adOKZl8QUJkf8g-BFfPAPgAAAc4"]
[Mon Apr 06 18:26:47.188634 2026] [:error] [pid 38562:tid 38581] [client 51.103.237.230:20017] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "adOKZ6eD6Ohe6wzRuy5frAAAAVA"]
[Mon Apr 06 18:26:47.855834 2026] [:error] [pid 10280:tid 10305] [client 51.103.237.230:19997] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "adOKZ18QUJkf8g-BFfPARwAAAdY"]
[Mon Apr 06 18:26:48.418843 2026] [:error] [pid 10280:tid 10286] [client 51.103.237.230:18964] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "adOKaF8QUJkf8g-BFfPATQAAAcM"]
[Mon Apr 06 18:26:49.084503 2026] [:error] [pid 35688:tid 35765] [client 51.103.237.230:32115] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "adOKaeZ85qg4jLsRpQxg3gAAAI8"]
[Mon Apr 06 18:26:49.649457 2026] [:error] [pid 35688:tid 35774] [client 51.103.237.230:18971] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc13.php"] [unique_id "adOKaeZ85qg4jLsRpQxg4gAAAJg"]
[Mon Apr 06 18:26:50.481810 2026] [:error] [pid 35686:tid 35719] [client 51.103.237.230:19735] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc13.php"] [unique_id "adOKasMKdea6oORd2fy-XQAAABc"]
[Mon Apr 06 18:26:51.600804 2026] [:error] [pid 38562:tid 38585] [client 51.103.237.230:20620] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc13.php"] [unique_id "adOKa6eD6Ohe6wzRuy5ftQAAAVQ"]
[Mon Apr 06 18:26:52.693487 2026] [:error] [pid 38562:tid 38575] [client 51.103.237.230:22204] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc13.php"] [unique_id "adOKbKeD6Ohe6wzRuy5fwAAAAUo"]
[Mon Apr 06 18:26:53.267897 2026] [:error] [pid 35688:tid 35766] [client 51.103.237.230:20616] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "adOKbeZ85qg4jLsRpQxg7gAAAJA"]
[Mon Apr 06 18:26:53.944822 2026] [:error] [pid 10280:tid 10297] [client 51.103.237.230:20636] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "adOKbV8QUJkf8g-BFfPAUwAAAc4"]
[Mon Apr 06 18:26:54.542030 2026] [:error] [pid 10280:tid 10293] [client 51.103.237.230:1178] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "adOKbl8QUJkf8g-BFfPAVgAAAco"]
[Mon Apr 06 18:26:55.249265 2026] [:error] [pid 9442:tid 9454] [client 51.103.237.230:19200] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "adOKb0PsNnAJTnmz6sZ59AAAAQo"]
[Mon Apr 06 18:26:56.012435 2026] [:error] [pid 10280:tid 10305] [client 51.103.237.230:38411] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccu.php"] [unique_id "adOKcF8QUJkf8g-BFfPAXQAAAdY"]
[Mon Apr 06 18:26:56.526747 2026] [:error] [pid 38562:tid 38583] [client 51.103.237.230:29466] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccu.php"] [unique_id "adOKcKeD6Ohe6wzRuy5fyAAAAVI"]
[Mon Apr 06 18:26:57.220871 2026] [:error] [pid 35686:tid 35706] [client 51.103.237.230:19970] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccu.php"] [unique_id "adOKccMKdea6oORd2fy-ZQAAAAo"]
[Mon Apr 06 18:26:57.917889 2026] [:error] [pid 35688:tid 35757] [client 51.103.237.230:34668] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccu.php"] [unique_id "adOKceZ85qg4jLsRpQxg_wAAAIc"]
[Mon Apr 06 18:26:58.842381 2026] [:error] [pid 35688:tid 35765] [client 51.103.237.230:1203] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "adOKcuZ85qg4jLsRpQxhBgAAAI8"]
[Mon Apr 06 18:26:59.953534 2026] [:error] [pid 35688:tid 35753] [client 51.103.237.230:22176] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "adOKc-Z85qg4jLsRpQxhEgAAAIM"]
[Mon Apr 06 18:27:01.177643 2026] [:error] [pid 9442:tid 9466] [client 51.103.237.230:34647] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "adOKdUPsNnAJTnmz6sZ5_AAAARY"]
[Mon Apr 06 18:27:02.266173 2026] [:error] [pid 9442:tid 9446] [client 51.103.237.230:18462] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "adOKdkPsNnAJTnmz6sZ6AgAAAQI"]
[Mon Apr 06 18:27:03.393710 2026] [:error] [pid 35688:tid 35763] [client 51.103.237.230:22403] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "adOKd-Z85qg4jLsRpQxhHwAAAI0"]
[Mon Apr 06 18:27:03.999902 2026] [:error] [pid 9413:tid 9436] [client 51.103.237.230:17235] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "adOKd3llvEK3chn01wGzAQAAAZU"]
[Mon Apr 06 18:27:04.773923 2026] [:error] [pid 35686:tid 35719] [client 51.103.237.230:21642] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "adOKeMMKdea6oORd2fy-cwAAABc"]
[Mon Apr 06 18:27:05.535206 2026] [:error] [pid 10280:tid 10302] [client 51.103.237.230:1172] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "adOKeV8QUJkf8g-BFfPAbgAAAdM"]
[Mon Apr 06 18:27:07.296447 2026] [:error] [pid 10280:tid 10288] [client 51.103.237.230:21666] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-turn.php"] [unique_id "adOKe18QUJkf8g-BFfPAdQAAAcU"]
[Mon Apr 06 18:27:09.598649 2026] [:error] [pid 10280:tid 10302] [client 51.103.237.230:17249] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-turn.php"] [unique_id "adOKfV8QUJkf8g-BFfPAegAAAdM"]
[Mon Apr 06 18:27:10.994618 2026] [:error] [pid 10280:tid 10298] [client 51.103.237.230:19739] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-turn.php"] [unique_id "adOKfl8QUJkf8g-BFfPAgwAAAc8"]
[Mon Apr 06 18:27:11.943686 2026] [:error] [pid 38562:tid 38585] [client 51.103.237.230:18540] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-turn.php"] [unique_id "adOKf6eD6Ohe6wzRuy5f1wAAAVQ"]
[Mon Apr 06 18:27:12.914688 2026] [:error] [pid 35688:tid 35762] [client 51.103.237.230:18484] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "adOKgOZ85qg4jLsRpQxhPgAAAIw"]
[Mon Apr 06 18:27:13.832411 2026] [:error] [pid 35687:tid 35731] [client 51.103.237.230:1454] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "adOKgZ3LtDozV0i8BitWBgAAAEg"]
[Mon Apr 06 18:27:15.275578 2026] [:error] [pid 35687:tid 35728] [client 51.103.237.230:40414] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "adOKg53LtDozV0i8BitWCQAAAEU"]
[Mon Apr 06 18:27:16.651347 2026] [:error] [pid 35786:tid 35800] [client 51.103.237.230:40434] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "adOKhGgkfCKTaLhwaKQOxAAAAMc"]
[Mon Apr 06 18:27:17.591591 2026] [:error] [pid 35688:tid 35769] [client 51.103.237.230:28853] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "adOKheZ85qg4jLsRpQxhTwAAAJM"]
[Mon Apr 06 18:27:18.664947 2026] [:error] [pid 35688:tid 35761] [client 51.103.237.230:18503] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "adOKhuZ85qg4jLsRpQxhWQAAAIs"]
[Mon Apr 06 18:27:19.964395 2026] [:error] [pid 38562:tid 38579] [client 51.103.237.230:22407] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "adOKh6eD6Ohe6wzRuy5f4wAAAU4"]
[Mon Apr 06 18:27:21.321179 2026] [:error] [pid 10280:tid 10302] [client 51.103.237.230:22906] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Mon Apr 06 18:27:21.560117 2026] [:error] [pid 10280:tid 10289] [client 51.103.237.230:22906] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-image.php
[Mon Apr 06 18:27:21.802537 2026] [:error] [pid 10280:tid 10299] [client 51.103.237.230:22906] File does not exist: /usr/local/apache/htdocs/suspended-page/kolda.php
[Mon Apr 06 18:27:22.341825 2026] [:error] [pid 10280:tid 10296] [client 51.103.237.230:22906] File does not exist: /usr/local/apache/htdocs/suspended-page/yussef.php
[Mon Apr 06 18:27:22.580677 2026] [:error] [pid 10280:tid 10298] [client 51.103.237.230:22906] File does not exist: /usr/local/apache/htdocs/suspended-page/ay.php
[Mon Apr 06 18:27:22.858438 2026] [:error] [pid 10280:tid 10295] [client 51.103.237.230:22906] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Mon Apr 06 18:27:23.173076 2026] [:error] [pid 10280:tid 10290] [client 51.103.237.230:22906] File does not exist: /usr/local/apache/htdocs/suspended-page/btx25.php
[Mon Apr 06 18:27:23.551483 2026] [:error] [pid 10280:tid 10306] [client 51.103.237.230:22906] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Mon Apr 06 18:27:23.789540 2026] [:error] [pid 10280:tid 10305] [client 51.103.237.230:22906] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Mon Apr 06 18:27:24.702112 2026] [:error] [pid 10280:tid 10291] [client 51.103.237.230:22906] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Mon Apr 06 18:27:24.941043 2026] [:error] [pid 10280:tid 10292] [client 51.103.237.230:22906] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Mon Apr 06 18:27:25.181782 2026] [:error] [pid 10280:tid 10287] [client 51.103.237.230:22906] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "adOKjV8QUJkf8g-BFfPAqgAAAcQ"]
[Mon Apr 06 18:27:27.872421 2026] [:error] [pid 9442:tid 9466] [client 51.103.237.230:45323] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "adOKj0PsNnAJTnmz6sZ6RgAAARY"]
[Mon Apr 06 18:27:30.582605 2026] [:error] [pid 35686:tid 35710] [client 51.103.237.230:40426] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "adOKksMKdea6oORd2fy-igAAAA4"]
[Mon Apr 06 18:27:33.151507 2026] [:error] [pid 35688:tid 35750] [client 51.103.237.230:33371] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "adOKleZ85qg4jLsRpQxhngAAAIA"]
[Mon Apr 06 18:27:35.163056 2026] [:error] [pid 38562:tid 38569] [client 51.103.237.230:22909] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "adOKl6eD6Ohe6wzRuy5f8wAAAUQ"]
[Mon Apr 06 18:27:37.712820 2026] [:error] [pid 9442:tid 9458] [client 51.103.237.230:17239] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "adOKmUPsNnAJTnmz6sZ6TwAAAQ4"]
[Mon Apr 06 18:27:40.805162 2026] [:error] [pid 9442:tid 9447] [client 51.103.237.230:33404] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "adOKnEPsNnAJTnmz6sZ6VAAAAQM"]
[Mon Apr 06 18:27:43.222047 2026] [:error] [pid 10280:tid 10284] [client 51.103.237.230:22907] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "adOKn18QUJkf8g-BFfPA3gAAAcE"]
[Mon Apr 06 18:27:44.632173 2026] [:error] [pid 38562:tid 38584] [client 51.103.237.230:35856] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xdd.php"] [unique_id "adOKoKeD6Ohe6wzRuy5gAgAAAVM"]
[Mon Apr 06 18:27:45.533523 2026] [:error] [pid 10280:tid 10289] [client 51.103.237.230:1776] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xdd.php"] [unique_id "adOKoV8QUJkf8g-BFfPA4gAAAcY"]
[Mon Apr 06 18:27:46.483938 2026] [:error] [pid 10280:tid 10302] [client 51.103.237.230:24618] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xdd.php"] [unique_id "adOKol8QUJkf8g-BFfPA5wAAAdM"]
[Mon Apr 06 18:27:46.979420 2026] [:error] [pid 10280:tid 10291] [client 51.103.237.230:39629] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xdd.php"] [unique_id "adOKol8QUJkf8g-BFfPA6QAAAcg"]
[Mon Apr 06 18:27:47.761994 2026] [:error] [pid 10280:tid 10287] [client 51.103.237.230:24638] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "adOKo18QUJkf8g-BFfPA7AAAAcQ"]
[Mon Apr 06 18:27:48.817031 2026] [:error] [pid 35786:tid 35813] [client 51.103.237.230:43265] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "adOKpGgkfCKTaLhwaKQO2gAAANQ"]
[Mon Apr 06 18:27:49.660301 2026] [:error] [pid 9442:tid 9460] [client 51.103.237.230:39119] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "adOKpUPsNnAJTnmz6sZ6bAAAARA"]
[Mon Apr 06 18:27:50.161145 2026] [:error] [pid 9413:tid 9434] [client 51.103.237.230:21386] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "adOKpnllvEK3chn01wGzKwAAAZM"]
[Mon Apr 06 18:27:50.867669 2026] [:error] [pid 35686:tid 35699] [client 51.103.237.230:1818] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "adOKpsMKdea6oORd2fy-rQAAAAM"]
[Mon Apr 06 18:27:51.541064 2026] [:error] [pid 35786:tid 35811] [client 51.103.237.230:39645] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "adOKp2gkfCKTaLhwaKQO3gAAANI"]
[Mon Apr 06 18:27:53.209430 2026] [:error] [pid 9413:tid 9424] [client 51.103.237.230:1399] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "adOKqXllvEK3chn01wGzLgAAAYk"]
[Mon Apr 06 18:27:54.305300 2026] [:error] [pid 35688:tid 35757] [client 51.103.237.230:18741] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "adOKquZ85qg4jLsRpQxh5wAAAIc"]
[Mon Apr 06 18:27:55.480581 2026] [:error] [pid 35686:tid 35698] [client 51.103.237.230:27689] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update1.php"] [unique_id "adOKq8MKdea6oORd2fy-tQAAAAI"]
[Mon Apr 06 18:27:56.314025 2026] [:error] [pid 35688:tid 35751] [client 51.103.237.230:27659] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update1.php"] [unique_id "adOKrOZ85qg4jLsRpQxh6gAAAIE"]
[Mon Apr 06 18:27:57.568618 2026] [:error] [pid 38562:tid 38574] [client 51.103.237.230:1404] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update1.php"] [unique_id "adOKraeD6Ohe6wzRuy5gFAAAAUk"]
[Mon Apr 06 18:27:58.428721 2026] [:error] [pid 38562:tid 38579] [client 51.103.237.230:39590] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update1.php"] [unique_id "adOKrqeD6Ohe6wzRuy5gFwAAAU4"]
[Mon Apr 06 18:27:59.018490 2026] [:error] [pid 35688:tid 35756] [client 51.103.237.230:1354] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "adOKr-Z85qg4jLsRpQxh9gAAAIY"]
[Mon Apr 06 18:27:59.666776 2026] [:error] [pid 38562:tid 38567] [client 51.103.237.230:1930] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "adOKr6eD6Ohe6wzRuy5gHgAAAUI"]
[Mon Apr 06 18:28:00.955390 2026] [:error] [pid 35688:tid 35756] [client 51.103.237.230:26496] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "adOKsOZ85qg4jLsRpQxiBAAAAIY"]
[Mon Apr 06 18:28:02.701908 2026] [:error] [pid 10280:tid 10303] [client 51.103.237.230:27692] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "adOKsl8QUJkf8g-BFfPBCAAAAdQ"]
[Mon Apr 06 18:28:04.458232 2026] [:error] [pid 35686:tid 35715] [client 51.103.237.230:1920] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "adOKtMMKdea6oORd2fy-vQAAABM"]
[Mon Apr 06 18:28:05.370543 2026] [:error] [pid 35687:tid 35744] [client 51.103.237.230:43386] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "adOKtZ3LtDozV0i8BitWQAAAAFU"]
[Mon Apr 06 18:28:06.516826 2026] [:error] [pid 9413:tid 9426] [client 51.103.237.230:2008] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "adOKtnllvEK3chn01wGzOQAAAYs"]
[Mon Apr 06 18:28:07.498820 2026] [:error] [pid 38562:tid 38579] [client 51.103.237.230:15936] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "adOKt6eD6Ohe6wzRuy5gMQAAAU4"]
[Mon Apr 06 18:28:08.816726 2026] [:error] [pid 35686:tid 35711] [client 51.103.237.230:43333] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new2.php"] [unique_id "adOKuMMKdea6oORd2fy-xAAAAA8"]
[Mon Apr 06 18:28:09.912191 2026] [:error] [pid 10280:tid 10284] [client 51.103.237.230:39597] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new2.php"] [unique_id "adOKuV8QUJkf8g-BFfPBHwAAAcE"]
[Mon Apr 06 18:28:10.593090 2026] [:error] [pid 35687:tid 35736] [client 51.103.237.230:1965] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new2.php"] [unique_id "adOKup3LtDozV0i8BitWRgAAAE0"]
[Mon Apr 06 18:28:11.188084 2026] [:error] [pid 9442:tid 9459] [client 51.103.237.230:21995] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new2.php"] [unique_id "adOKu0PsNnAJTnmz6sZ6hAAAAQ8"]
[Mon Apr 06 18:28:11.997022 2026] [:error] [pid 35686:tid 35697] [client 51.103.237.230:22516] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "adOKu8MKdea6oORd2fy-yQAAAAE"]
[Mon Apr 06 18:28:13.331511 2026] [:error] [pid 35686:tid 35713] [client 51.103.237.230:2022] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "adOKvcMKdea6oORd2fy-0AAAABE"]
[Mon Apr 06 18:28:14.323545 2026] [:error] [pid 35686:tid 35705] [client 51.103.237.230:60065] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "adOKvsMKdea6oORd2fy-0QAAAAk"]
[Mon Apr 06 18:28:15.064775 2026] [:error] [pid 35688:tid 35752] [client 51.103.237.230:23296] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "adOKv-Z85qg4jLsRpQxiLwAAAII"]
[Mon Apr 06 18:28:15.742708 2026] [:error] [pid 35687:tid 35731] [client 51.103.237.230:21962] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "adOKv53LtDozV0i8BitWTAAAAEg"]
[Mon Apr 06 18:28:16.826131 2026] [:error] [pid 35786:tid 35809] [client 51.103.237.230:37796] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "adOKwGgkfCKTaLhwaKQO9gAAANA"]
[Mon Apr 06 18:28:18.088067 2026] [:error] [pid 9442:tid 9468] [client 51.103.237.230:26562] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "adOKwkPsNnAJTnmz6sZ6iQAAARg"]
[Mon Apr 06 18:28:19.424329 2026] [:error] [pid 35687:tid 35736] [client 51.103.237.230:17984] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "adOKw53LtDozV0i8BitWUQAAAE0"]
[Mon Apr 06 18:28:20.257249 2026] [:error] [pid 35687:tid 35740] [client 51.103.237.230:15970] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wswer1.php"] [unique_id "adOKxJ3LtDozV0i8BitWVwAAAFE"]
[Mon Apr 06 18:28:23.033938 2026] [:error] [pid 9413:tid 9428] [client 51.103.237.230:22827] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wswer1.php"] [unique_id "adOKx3llvEK3chn01wGzRAAAAY0"]
[Mon Apr 06 18:28:24.863010 2026] [:error] [pid 9442:tid 9455] [client 51.103.237.230:19787] File does not exist: /usr/local/apache/htdocs/suspended-page/wswer1.php
[Mon Apr 06 18:28:26.210512 2026] [:error] [pid 9442:tid 9446] [client 51.103.237.230:19787] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ccv.php
[Mon Apr 06 18:28:26.468661 2026] [:error] [pid 9442:tid 9445] [client 51.103.237.230:19787] File does not exist: /usr/local/apache/htdocs/suspended-page/wo.php
[Mon Apr 06 18:28:26.706214 2026] [:error] [pid 9442:tid 9461] [client 51.103.237.230:19787] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Mon Apr 06 18:28:28.492029 2026] [:error] [pid 9442:tid 9460] [client 51.103.237.230:19787] File does not exist: /usr/local/apache/htdocs/suspended-page/floya.php
[Mon Apr 06 18:28:29.679155 2026] [:error] [pid 9442:tid 9449] [client 51.103.237.230:19787] File does not exist: /usr/local/apache/htdocs/suspended-page/wolf.php
[Mon Apr 06 18:28:29.933175 2026] [:error] [pid 9442:tid 9458] [client 51.103.237.230:19787] File does not exist: /usr/local/apache/htdocs/suspended-page/only.php
[Mon Apr 06 18:28:30.438766 2026] [:error] [pid 9442:tid 9445] [client 51.103.237.230:19787] File does not exist: /usr/local/apache/htdocs/suspended-page/vdb.php
[Mon Apr 06 18:28:30.706406 2026] [:error] [pid 9442:tid 9461] [client 51.103.237.230:19787] File does not exist: /usr/local/apache/htdocs/suspended-page/om.php
[Mon Apr 06 18:28:30.958564 2026] [:error] [pid 9442:tid 9464] [client 51.103.237.230:19787] File does not exist: /usr/local/apache/htdocs/suspended-page/ox.php
[Mon Apr 06 18:28:31.236871 2026] [:error] [pid 9442:tid 9460] [client 51.103.237.230:19787] File does not exist: /usr/local/apache/htdocs/suspended-page/htto.php
[Mon Apr 06 18:28:31.471774 2026] [:error] [pid 9442:tid 9452] [client 51.103.237.230:19787] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/h2h.php"] [unique_id "adOKz0PsNnAJTnmz6sZ6rQAAAQg"]
[Mon Apr 06 18:28:33.953754 2026] [:error] [pid 38562:tid 38572] [client 51.103.237.230:60078] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/h2h.php"] [unique_id "adOK0aeD6Ohe6wzRuy5gbQAAAUc"]
[Mon Apr 06 18:28:35.204789 2026] [:error] [pid 38562:tid 38587] [client 51.103.237.230:1950] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/h2h.php"] [unique_id "adOK06eD6Ohe6wzRuy5gdwAAAVY"]
[Mon Apr 06 18:28:36.158066 2026] [:error] [pid 9442:tid 9453] [client 51.103.237.230:22014] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/h2h.php"] [unique_id "adOK1EPsNnAJTnmz6sZ6tgAAAQk"]
[Mon Apr 06 18:28:36.759429 2026] [:error] [pid 10280:tid 10288] [client 51.103.237.230:19555] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "adOK1F8QUJkf8g-BFfPBSQAAAcU"]
[Mon Apr 06 18:28:37.307410 2026] [:error] [pid 38562:tid 38568] [client 51.103.237.230:1978] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "adOK1aeD6Ohe6wzRuy5ggQAAAUM"]
[Mon Apr 06 18:28:37.881022 2026] [:error] [pid 38562:tid 38575] [client 51.103.237.230:40345] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "adOK1aeD6Ohe6wzRuy5giAAAAUo"]
[Mon Apr 06 18:28:38.503054 2026] [:error] [pid 35786:tid 35808] [client 51.103.237.230:22511] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "adOK1mgkfCKTaLhwaKQPCAAAAM8"]
[Mon Apr 06 18:28:39.037650 2026] [:error] [pid 35686:tid 35699] [client 51.103.237.230:22810] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dichku.php"] [unique_id "adOK18MKdea6oORd2fy-5QAAAAM"]
[Mon Apr 06 18:28:39.641581 2026] [:error] [pid 35688:tid 35773] [client 51.103.237.230:15955] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dichku.php"] [unique_id "adOK1-Z85qg4jLsRpQxiUgAAAJc"]
[Mon Apr 06 18:28:40.387404 2026] [:error] [pid 35688:tid 35753] [client 51.103.237.230:22829] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dichku.php"] [unique_id "adOK2OZ85qg4jLsRpQxiVgAAAIM"]
[Mon Apr 06 18:28:40.921328 2026] [:error] [pid 10280:tid 10287] [client 51.103.237.230:19522] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dichku.php"] [unique_id "adOK2F8QUJkf8g-BFfPBTwAAAcQ"]
[Mon Apr 06 18:28:41.648626 2026] [:error] [pid 35687:tid 35743] [client 51.103.237.230:15668] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "adOK2Z3LtDozV0i8BitWdwAAAFQ"]
[Mon Apr 06 18:28:42.593270 2026] [:error] [pid 10280:tid 10297] [client 51.103.237.230:19821] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "adOK2l8QUJkf8g-BFfPBUwAAAc4"]
[Mon Apr 06 18:28:43.261892 2026] [:error] [pid 9442:tid 9455] [client 51.103.237.230:19837] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "adOK20PsNnAJTnmz6sZ6wgAAAQs"]
[Mon Apr 06 18:28:44.017147 2026] [:error] [pid 10280:tid 10305] [client 51.103.237.230:58767] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "adOK3F8QUJkf8g-BFfPBWQAAAdY"]
[Mon Apr 06 18:28:44.867556 2026] [:error] [pid 35686:tid 35715] [client 51.103.237.230:23302] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/store.php"] [unique_id "adOK3MMKdea6oORd2fy--wAAABM"]
[Mon Apr 06 18:28:45.575170 2026] [:error] [pid 10280:tid 10283] [client 51.103.237.230:40359] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/store.php"] [unique_id "adOK3V8QUJkf8g-BFfPBYwAAAcA"]
[Mon Apr 06 18:28:46.469308 2026] [:error] [pid 35686:tid 35710] [client 51.103.237.230:40360] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/store.php"] [unique_id "adOK3sMKdea6oORd2fy-_gAAAA4"]
[Mon Apr 06 18:28:47.155512 2026] [:error] [pid 38562:tid 38566] [client 51.103.237.230:1961] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/store.php"] [unique_id "adOK36eD6Ohe6wzRuy5gkgAAAUE"]
[Mon Apr 06 18:28:47.882967 2026] [:error] [pid 38562:tid 38571] [client 51.103.237.230:23306] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xenium4.php"] [unique_id "adOK36eD6Ohe6wzRuy5glgAAAUY"]
[Mon Apr 06 18:28:48.435532 2026] [:error] [pid 9442:tid 9465] [client 51.103.237.230:19539] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xenium4.php"] [unique_id "adOK4EPsNnAJTnmz6sZ6zAAAARU"]
[Mon Apr 06 18:28:49.313439 2026] [:error] [pid 35688:tid 35754] [client 51.103.237.230:22812] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xenium4.php"] [unique_id "adOK4eZ85qg4jLsRpQxiaAAAAIQ"]
[Mon Apr 06 18:28:50.202808 2026] [:error] [pid 35688:tid 35752] [client 51.103.237.230:23298] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xenium4.php"] [unique_id "adOK4uZ85qg4jLsRpQxibwAAAII"]
[Mon Apr 06 18:28:51.256925 2026] [:error] [pid 9442:tid 9453] [client 51.103.237.230:37800] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1aa.php"] [unique_id "adOK40PsNnAJTnmz6sZ60QAAAQk"]
[Mon Apr 06 18:28:51.929427 2026] [:error] [pid 10280:tid 10305] [client 51.103.237.230:15647] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1aa.php"] [unique_id "adOK418QUJkf8g-BFfPBdQAAAdY"]
[Mon Apr 06 18:28:52.456580 2026] [:error] [pid 10280:tid 10292] [client 51.103.237.230:40342] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1aa.php"] [unique_id "adOK5F8QUJkf8g-BFfPBeQAAAck"]
[Mon Apr 06 18:28:53.394845 2026] [:error] [pid 35688:tid 35769] [client 51.103.237.230:21247] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1aa.php"] [unique_id "adOK5eZ85qg4jLsRpQxigQAAAJM"]
[Mon Apr 06 18:28:54.431027 2026] [:error] [pid 35688:tid 35752] [client 51.103.237.230:37178] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpyur.php"] [unique_id "adOK5uZ85qg4jLsRpQxiiAAAAII"]
[Mon Apr 06 18:28:54.958889 2026] [:error] [pid 35688:tid 35762] [client 51.103.237.230:21208] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpyur.php"] [unique_id "adOK5uZ85qg4jLsRpQxijwAAAIw"]
[Mon Apr 06 18:28:55.783631 2026] [:error] [pid 35686:tid 35704] [client 51.103.237.230:37180] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpyur.php"] [unique_id "adOK58MKdea6oORd2fy_BQAAAAg"]
[Mon Apr 06 18:28:56.734015 2026] [:error] [pid 35686:tid 35696] [client 51.103.237.230:21990] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpyur.php"] [unique_id "adOK6MMKdea6oORd2fy_BwAAAAA"]
[Mon Apr 06 18:28:57.398670 2026] [:error] [pid 35688:tid 35757] [client 51.103.237.230:19838] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wglum.php"] [unique_id "adOK6eZ85qg4jLsRpQximwAAAIc"]
[Mon Apr 06 18:28:57.905914 2026] [:error] [pid 38562:tid 38584] [client 51.103.237.230:21973] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wglum.php"] [unique_id "adOK6aeD6Ohe6wzRuy5goQAAAVM"]
[Mon Apr 06 18:28:58.609220 2026] [:error] [pid 35686:tid 35717] [client 51.103.237.230:43328] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wglum.php"] [unique_id "adOK6sMKdea6oORd2fy_CgAAABU"]
[Mon Apr 06 18:28:59.236566 2026] [:error] [pid 35687:tid 35731] [client 51.103.237.230:23315] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wglum.php"] [unique_id "adOK653LtDozV0i8BitWhQAAAEg"]
[Mon Apr 06 18:28:59.832903 2026] [:error] [pid 38562:tid 38582] [client 51.103.237.230:15618] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "adOK66eD6Ohe6wzRuy5gqgAAAVE"]
[Mon Apr 06 18:29:00.437503 2026] [:error] [pid 35686:tid 35719] [client 51.103.237.230:60057] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "adOK7MMKdea6oORd2fy_DQAAABc"]
[Mon Apr 06 18:29:00.953144 2026] [:error] [pid 38562:tid 38569] [client 51.103.237.230:40373] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "adOK7KeD6Ohe6wzRuy5grQAAAUQ"]
[Mon Apr 06 18:29:01.502941 2026] [:error] [pid 9413:tid 9425] [client 51.103.237.230:37122] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "adOK7XllvEK3chn01wGzZQAAAYo"]
[Mon Apr 06 18:29:02.072913 2026] [:error] [pid 35686:tid 35701] [client 51.103.237.230:37814] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byp8.php"] [unique_id "adOK7sMKdea6oORd2fy_DwAAAAU"]
[Mon Apr 06 18:29:02.611583 2026] [:error] [pid 35686:tid 35703] [client 51.103.237.230:22824] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byp8.php"] [unique_id "adOK7sMKdea6oORd2fy_EQAAAAc"]
[Mon Apr 06 18:29:03.147663 2026] [:error] [pid 35686:tid 35705] [client 51.103.237.230:19527] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byp8.php"] [unique_id "adOK78MKdea6oORd2fy_FAAAAAk"]
[Mon Apr 06 18:29:03.744454 2026] [:error] [pid 10280:tid 10289] [client 51.103.237.230:15617] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byp8.php"] [unique_id "adOK718QUJkf8g-BFfPBfgAAAcY"]
[Mon Apr 06 18:29:04.572315 2026] [:error] [pid 35687:tid 35738] [client 51.103.237.230:58805] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CZoaz8QUeQEV.php"] [unique_id "adOK8J3LtDozV0i8BitWiwAAAE8"]
[Mon Apr 06 18:29:05.166010 2026] [:error] [pid 9442:tid 9451] [client 51.103.237.230:43341] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CZoaz8QUeQEV.php"] [unique_id "adOK8UPsNnAJTnmz6sZ62wAAAQc"]
[Mon Apr 06 18:29:06.165830 2026] [:error] [pid 9442:tid 9465] [client 51.103.237.230:19829] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CZoaz8QUeQEV.php"] [unique_id "adOK8kPsNnAJTnmz6sZ64gAAARU"]
[Mon Apr 06 18:29:06.993941 2026] [:error] [pid 9442:tid 9453] [client 51.103.237.230:37822] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CZoaz8QUeQEV.php"] [unique_id "adOK8kPsNnAJTnmz6sZ66wAAAQk"]
[Mon Apr 06 18:29:07.607647 2026] [:error] [pid 35687:tid 35734] [client 51.103.237.230:21952] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ttRc68YLe0tB.php"] [unique_id "adOK853LtDozV0i8BitWjwAAAEs"]
[Mon Apr 06 18:29:08.138785 2026] [:error] [pid 9413:tid 9437] [client 51.103.237.230:19816] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ttRc68YLe0tB.php"] [unique_id "adOK9HllvEK3chn01wGzbQAAAZY"]
[Mon Apr 06 18:29:08.618934 2026] [:error] [pid 35687:tid 35745] [client 51.103.237.230:19819] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ttRc68YLe0tB.php"] [unique_id "adOK9J3LtDozV0i8BitWkQAAAFY"]
[Mon Apr 06 18:29:09.402174 2026] [:error] [pid 35688:tid 35753] [client 51.103.237.230:27211] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ttRc68YLe0tB.php"] [unique_id "adOK9eZ85qg4jLsRpQxiqAAAAIM"]
[Mon Apr 06 18:29:10.072871 2026] [:error] [pid 10280:tid 10302] [client 51.103.237.230:19569] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "adOK9l8QUJkf8g-BFfPBhwAAAdM"]
[Mon Apr 06 18:29:10.913173 2026] [:error] [pid 35688:tid 35763] [client 51.103.237.230:60090] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "adOK9uZ85qg4jLsRpQxiqgAAAI0"]
[Mon Apr 06 18:29:12.087426 2026] [:error] [pid 10280:tid 10296] [client 51.103.237.230:37165] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "adOK-F8QUJkf8g-BFfPBmQAAAc0"]
[Mon Apr 06 18:29:12.913304 2026] [:error] [pid 35687:tid 35727] [client 51.103.237.230:27237] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "adOK-J3LtDozV0i8BitWmwAAAEQ"]
[Mon Apr 06 18:29:13.548049 2026] [:error] [pid 35688:tid 35755] [client 51.103.237.230:58759] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-ox9eoqdk.php"] [unique_id "adOK-eZ85qg4jLsRpQxirQAAAIU"]
[Mon Apr 06 18:29:14.647278 2026] [:error] [pid 35687:tid 35723] [client 51.103.237.230:19549] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-ox9eoqdk.php"] [unique_id "adOK-p3LtDozV0i8BitWnQAAAEA"]
[Mon Apr 06 18:29:15.536399 2026] [:error] [pid 10280:tid 10301] [client 51.103.237.230:20897] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-ox9eoqdk.php"] [unique_id "adOK-18QUJkf8g-BFfPBpAAAAdI"]
[Mon Apr 06 18:29:17.620577 2026] [:error] [pid 38562:tid 38575] [client 51.103.237.230:39040] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-ox9eoqdk.php"] [unique_id "adOK_aeD6Ohe6wzRuy5gygAAAUo"]
[Mon Apr 06 18:29:21.149040 2026] [:error] [pid 35688:tid 35765] [client 51.103.237.230:59442] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-4qtafzz.php"] [unique_id "adOLAeZ85qg4jLsRpQxitQAAAI8"]
[Mon Apr 06 18:29:24.205726 2026] [:error] [pid 9442:tid 9453] [client 51.103.237.230:17496] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-4qtafzz.php"] [unique_id "adOLBEPsNnAJTnmz6sZ6_AAAAQk"]
[Mon Apr 06 18:29:27.139349 2026] [:error] [pid 35686:tid 35719] [client 51.103.237.230:60703] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-4qtafzz.php"] [unique_id "adOLB8MKdea6oORd2fy_KAAAABc"]
[Mon Apr 06 18:29:29.152575 2026] [:error] [pid 9413:tid 9422] [client 51.103.237.230:17762] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-4qtafzz.php"] [unique_id "adOLCXllvEK3chn01wGziAAAAYc"]
[Mon Apr 06 18:29:34.065754 2026] [:error] [pid 10280:tid 10286] [client 51.103.237.230:15691] File does not exist: /usr/local/apache/htdocs/suspended-page/gilo.php
[Mon Apr 06 18:29:34.305390 2026] [:error] [pid 10280:tid 10300] [client 51.103.237.230:15691] File does not exist: /usr/local/apache/htdocs/suspended-page/ww.php
[Mon Apr 06 18:29:34.552177 2026] [:error] [pid 10280:tid 10288] [client 51.103.237.230:15691] File does not exist: /usr/local/apache/htdocs/suspended-page/x7r.php
[Mon Apr 06 18:29:34.807232 2026] [:error] [pid 10280:tid 10306] [client 51.103.237.230:15691] File does not exist: /usr/local/apache/htdocs/suspended-page/2kpf7h.php
[Mon Apr 06 18:29:35.047146 2026] [:error] [pid 10280:tid 10298] [client 51.103.237.230:15691] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-3x94erjd.php
[Mon Apr 06 18:29:35.287494 2026] [:error] [pid 10280:tid 10292] [client 51.103.237.230:15691] File does not exist: /usr/local/apache/htdocs/suspended-page/riz.php
[Mon Apr 06 18:29:35.537430 2026] [:error] [pid 10280:tid 10284] [client 51.103.237.230:15691] File does not exist: /usr/local/apache/htdocs/suspended-page/wp3.php
[Mon Apr 06 18:29:35.776709 2026] [:error] [pid 10280:tid 10291] [client 51.103.237.230:15691] File does not exist: /usr/local/apache/htdocs/suspended-page/8xyz.php
[Mon Apr 06 18:29:36.031340 2026] [:error] [pid 10280:tid 10283] [client 51.103.237.230:15691] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Mon Apr 06 18:29:36.270801 2026] [:error] [pid 10280:tid 10289] [client 51.103.237.230:15691] File does not exist: /usr/local/apache/htdocs/suspended-page/ympoo.php
[Mon Apr 06 18:29:36.510456 2026] [:error] [pid 10280:tid 10305] [client 51.103.237.230:15691] File does not exist: /usr/local/apache/htdocs/suspended-page/she.php
[Mon Apr 06 18:29:36.746493 2026] [:error] [pid 10280:tid 10285] [client 51.103.237.230:15691] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/haojj.php"] [unique_id "adOLEF8QUJkf8g-BFfPB7gAAAcI"]
[Mon Apr 06 18:29:40.077347 2026] [:error] [pid 38562:tid 38571] [client 51.103.237.230:24649] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/haojj.php"] [unique_id "adOLFKeD6Ohe6wzRuy5g5wAAAUY"]
[Mon Apr 06 18:29:41.717050 2026] [:error] [pid 38562:tid 38567] [client 51.103.237.230:20946] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/haojj.php"] [unique_id "adOLFaeD6Ohe6wzRuy5g6wAAAUI"]
[Mon Apr 06 18:29:42.335280 2026] [:error] [pid 35786:tid 35800] [client 51.103.237.230:30163] [client 51.103.237.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/haojj.php"] [unique_id "adOLFmgkfCKTaLhwaKQPJAAAAMc"]
[Mon Apr 06 22:08:29.366767 2026] [:error] [pid 38562:tid 38574] [client 103.109.244.103:55084] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Mon Apr 06 22:08:29.630217 2026] [:error] [pid 38562:tid 38569] [client 103.109.244.103:55084] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Mon Apr 06 22:08:29.905288 2026] [:error] [pid 38562:tid 38582] [client 103.109.244.103:55084] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Mon Apr 06 22:08:30.179302 2026] [:error] [pid 38562:tid 38575] [client 103.109.244.103:55084] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Mon Apr 06 22:08:30.449476 2026] [:error] [pid 38562:tid 38568] [client 103.109.244.103:55084] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Mon Apr 06 22:08:30.710960 2026] [:error] [pid 38562:tid 38579] [client 103.109.244.103:55084] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Mon Apr 06 22:08:30.969337 2026] [:error] [pid 38562:tid 38576] [client 103.109.244.103:55084] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon Apr 06 22:08:31.228508 2026] [:error] [pid 38562:tid 38565] [client 103.109.244.103:55084] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Apr 06 22:08:31.500903 2026] [:error] [pid 38562:tid 38573] [client 103.109.244.103:55084] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Mon Apr 06 22:08:32.040170 2026] [:error] [pid 38562:tid 38570] [client 103.109.244.103:55084] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Mon Apr 06 22:08:32.297522 2026] [:error] [pid 38562:tid 38577] [client 103.109.244.103:55084] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Mon Apr 06 22:08:32.563714 2026] [:error] [pid 38562:tid 38589] [client 103.109.244.103:55084] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon Apr 06 22:08:32.833480 2026] [:error] [pid 38562:tid 38585] [client 103.109.244.103:55084] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Mon Apr 06 22:08:33.118809 2026] [:error] [pid 38562:tid 38566] [client 103.109.244.103:55084] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Mon Apr 06 22:08:33.383168 2026] [:error] [pid 38562:tid 38572] [client 103.109.244.103:55084] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Mon Apr 06 22:08:33.655781 2026] [:error] [pid 38562:tid 38586] [client 103.109.244.103:55084] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Mon Apr 06 22:08:33.921779 2026] [:error] [pid 38562:tid 38582] [client 103.109.244.103:55084] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Mon Apr 06 22:08:34.183214 2026] [:error] [pid 38562:tid 38575] [client 103.109.244.103:55084] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Mon Apr 06 22:08:34.443269 2026] [:error] [pid 38562:tid 38578] [client 103.109.244.103:55084] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Mon Apr 06 22:08:38.910723 2026] [:error] [pid 38562:tid 38584] [client 103.109.244.103:55084] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adO-ZqeD6Ohe6wzRuy6qGQAAAVM"]
[Mon Apr 06 22:08:40.242855 2026] [:error] [pid 9442:tid 9448] [client 103.109.244.103:4825] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adO-aEPsNnAJTnmz6sYlBgAAAQQ"]
[Mon Apr 06 22:08:41.562943 2026] [:error] [pid 10280:tid 10301] [client 103.109.244.103:50638] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Mon Apr 06 22:08:42.342342 2026] [:error] [pid 10280:tid 10300] [client 103.109.244.103:50638] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adO-al8QUJkf8g-BFfMoXAAAAdE"]
[Mon Apr 06 22:08:43.390448 2026] [:error] [pid 38562:tid 38583] [client 103.109.244.103:39448] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Mon Apr 06 22:08:43.654380 2026] [:error] [pid 38562:tid 38578] [client 103.109.244.103:39448] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adO-a6eD6Ohe6wzRuy6qJwAAAU0"]
[Mon Apr 06 22:08:44.426985 2026] [:error] [pid 35688:tid 35756] [client 103.109.244.103:39456] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Mon Apr 06 22:08:45.739823 2026] [:error] [pid 35688:tid 35764] [client 103.109.244.103:39456] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adO-beZ85qg4jLsRpQzsZgAAAI4"]
[Mon Apr 06 22:08:46.528982 2026] [:error] [pid 35687:tid 35738] [client 103.109.244.103:39468] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adO-bp3LtDozV0i8Bit-qQAAAE8"]
[Mon Apr 06 22:08:47.044362 2026] [:error] [pid 35688:tid 35765] [client 103.109.244.103:26528] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adO-b-Z85qg4jLsRpQzsZwAAAI8"]
[Mon Apr 06 22:08:47.554862 2026] [:error] [pid 9442:tid 9451] [client 103.109.244.103:39476] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adO-b0PsNnAJTnmz6sYlNwAAAQc"]
[Mon Apr 06 22:08:48.059542 2026] [:error] [pid 35688:tid 35756] [client 103.109.244.103:60264] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adO-cOZ85qg4jLsRpQzsagAAAIY"]
[Mon Apr 06 22:08:48.579848 2026] [:error] [pid 35688:tid 35757] [client 103.109.244.103:60276] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adO-cOZ85qg4jLsRpQzsawAAAIc"]
[Mon Apr 06 22:08:49.347967 2026] [:error] [pid 38562:tid 38578] [client 103.109.244.103:60284] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adO-caeD6Ohe6wzRuy6qMAAAAU0"]
[Mon Apr 06 22:08:49.868443 2026] [:error] [pid 35686:tid 35703] [client 103.109.244.103:60286] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Mon Apr 06 22:08:50.406649 2026] [:error] [pid 35686:tid 35718] [client 103.109.244.103:60286] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "adO-csMKdea6oORd2fzuqQAAABY"]
[Mon Apr 06 22:08:51.435854 2026] [:error] [pid 9413:tid 9433] [client 103.109.244.103:20652] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adO-c3llvEK3chn01wHT-wAAAZI"]
[Mon Apr 06 22:08:52.208632 2026] [:error] [pid 35688:tid 35773] [client 103.109.244.103:60304] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adO-dOZ85qg4jLsRpQzsdAAAAJc"]
[Mon Apr 06 22:08:52.735062 2026] [:error] [pid 9442:tid 9462] [client 103.109.244.103:60318] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Mon Apr 06 22:08:52.993399 2026] [:error] [pid 9442:tid 9456] [client 103.109.244.103:60318] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adO-dEPsNnAJTnmz6sYlTwAAAQw"]
[Mon Apr 06 22:08:53.519999 2026] [:error] [pid 9442:tid 9446] [client 103.109.244.103:60324] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Mon Apr 06 22:08:54.311791 2026] [:error] [pid 9442:tid 9458] [client 103.109.244.103:60324] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Mon Apr 06 22:08:55.105580 2026] [:error] [pid 9442:tid 9454] [client 103.109.244.103:60324] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adO-d0PsNnAJTnmz6sYlZAAAAQo"]
[Mon Apr 06 22:08:55.651671 2026] [:error] [pid 9442:tid 9448] [client 103.109.244.103:60332] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Mon Apr 06 22:08:55.930778 2026] [:error] [pid 9442:tid 9446] [client 103.109.244.103:60332] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adO-d0PsNnAJTnmz6sYlbQAAAQI"]
[Mon Apr 06 22:08:56.448670 2026] [:error] [pid 35687:tid 35731] [client 103.109.244.103:60338] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Mon Apr 06 22:08:56.963192 2026] [:error] [pid 35687:tid 35730] [client 103.109.244.103:60338] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adO-eJ3LtDozV0i8Bit-sAAAAEc"]
[Mon Apr 06 22:08:58.905306 2026] [:error] [pid 1827:tid 1850] [client 103.109.244.103:60342] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adO-euVeb6S_DnjZ2xEvCgAAAhU"]
[Mon Apr 06 22:08:59.687913 2026] [:error] [pid 35688:tid 35763] [client 103.109.244.103:45650] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Mon Apr 06 22:08:59.959678 2026] [:error] [pid 35688:tid 35757] [client 103.109.244.103:45650] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Mon Apr 06 22:09:00.531150 2026] [:error] [pid 35688:tid 35752] [client 103.109.244.103:45650] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adO-fOZ85qg4jLsRpQzshwAAAII"]
[Mon Apr 06 22:09:01.318598 2026] [:error] [pid 35687:tid 35744] [client 103.109.244.103:45654] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adO-fZ3LtDozV0i8Bit-tQAAAFU"]
[Mon Apr 06 22:09:02.100268 2026] [:error] [pid 35687:tid 35731] [client 103.109.244.103:45666] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adO-fp3LtDozV0i8Bit-vAAAAEg"]
[Mon Apr 06 22:09:02.606815 2026] [:error] [pid 9442:tid 9447] [client 103.109.244.103:45668] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adO-fkPsNnAJTnmz6sYlegAAAQM"]
[Mon Apr 06 22:09:03.114971 2026] [:error] [pid 35688:tid 35763] [client 103.109.244.103:45670] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adO-f-Z85qg4jLsRpQzsjAAAAI0"]
[Mon Apr 06 22:09:04.196477 2026] [:error] [pid 10280:tid 10289] [client 103.109.244.103:45676] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Mon Apr 06 22:09:04.451331 2026] [:error] [pid 10280:tid 10298] [client 103.109.244.103:45676] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adO-gF8QUJkf8g-BFfMofgAAAc8"]
[Mon Apr 06 22:09:04.964816 2026] [:error] [pid 9442:tid 9453] [client 103.109.244.103:45684] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adO-gEPsNnAJTnmz6sYlgwAAAQk"]
[Mon Apr 06 22:09:05.476943 2026] [:error] [pid 35786:tid 35798] [client 103.109.244.103:45688] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adO-gWgkfCKTaLhwaKQqLgAAAMU"]
[Mon Apr 06 22:09:06.508155 2026] [:error] [pid 10280:tid 10296] [client 103.109.244.103:45698] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Mon Apr 06 22:09:07.024537 2026] [:error] [pid 10280:tid 10305] [client 103.109.244.103:45698] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Mon Apr 06 22:09:08.044208 2026] [:error] [pid 10280:tid 10300] [client 103.109.244.103:45698] [client 103.109.244.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adO-hF8QUJkf8g-BFfMokQAAAdE"]
[Mon Apr 06 22:09:09.396925 2026] [:error] [pid 9413:tid 9421] [client 103.109.244.103:57616] [client 103.109.244.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.109.244.103, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adO-hXllvEK3chn01wHUBwAAAYY"]
[Mon Apr 06 22:09:09.661184 2026] [:error] [pid 9413:tid 9422] [client 103.109.244.103:57616] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Mon Apr 06 22:09:16.312775 2026] [:error] [pid 1827:tid 1851] [client 188.95.54.49:57618] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Mon Apr 06 22:09:16.614268 2026] [:error] [pid 1827:tid 1844] [client 188.95.54.49:57618] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Mon Apr 06 22:09:18.077013 2026] [:error] [pid 1827:tid 1850] [client 188.95.54.49:57618] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adO-juVeb6S_DnjZ2xEvIAAAAhU"]
[Mon Apr 06 22:09:19.752841 2026] [:error] [pid 35688:tid 35760] [client 188.95.54.49:52120] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Mon Apr 06 22:09:20.045011 2026] [:error] [pid 35688:tid 35763] [client 188.95.54.49:52120] [client 188.95.54.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.95.54.49, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adO-kOZ85qg4jLsRpQzsmgAAAI0"]
[Mon Apr 06 22:09:20.635724 2026] [:error] [pid 35688:tid 35772] [client 188.95.54.49:52120] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/item.php"] [unique_id "adO-kOZ85qg4jLsRpQzsogAAAJY"]
[Mon Apr 06 22:09:26.278594 2026] [:error] [pid 35688:tid 35762] [client 188.95.54.49:52134] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Mon Apr 06 22:09:26.865545 2026] [:error] [pid 35688:tid 35773] [client 188.95.54.49:52134] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Mon Apr 06 22:09:27.445274 2026] [:error] [pid 35688:tid 35758] [client 188.95.54.49:52134] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adO-l-Z85qg4jLsRpQzsvQAAAIg"]
[Mon Apr 06 22:09:28.028588 2026] [:error] [pid 9442:tid 9450] [client 188.95.54.49:33724] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Mon Apr 06 22:09:29.671551 2026] [:error] [pid 9442:tid 9464] [client 188.95.54.49:33724] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Mon Apr 06 22:09:30.262291 2026] [:error] [pid 9442:tid 9446] [client 188.95.54.49:33724] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Mon Apr 06 22:09:31.506267 2026] [:error] [pid 9442:tid 9461] [client 188.95.54.49:33724] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Mon Apr 06 22:09:32.358631 2026] [:error] [pid 9442:tid 9462] [client 188.95.54.49:33724] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adO-nEPsNnAJTnmz6sYmFAAAARI"]
[Mon Apr 06 22:09:33.986079 2026] [:error] [pid 9413:tid 9437] [client 188.95.54.49:33728] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Mon Apr 06 22:09:34.277436 2026] [:error] [pid 9413:tid 9428] [client 188.95.54.49:33728] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Mon Apr 06 22:09:34.563021 2026] [:error] [pid 9413:tid 9420] [client 188.95.54.49:33728] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adO-nnllvEK3chn01wHUJQAAAYU"]
[Mon Apr 06 22:09:35.446392 2026] [:error] [pid 38562:tid 38579] [client 188.95.54.49:33730] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Mon Apr 06 22:09:36.871949 2026] [:error] [pid 38562:tid 38577] [client 188.95.54.49:33730] [client 188.95.54.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.95.54.49, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adO-oKeD6Ohe6wzRuy6qZgAAAUw"]
[Mon Apr 06 22:09:38.411631 2026] [:error] [pid 38562:tid 38577] [client 188.95.54.49:33730] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adO-oqeD6Ohe6wzRuy6qaQAAAUw"]
[Mon Apr 06 22:09:42.607915 2026] [:error] [pid 10280:tid 10284] [client 188.95.54.49:38438] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Mon Apr 06 22:09:44.365494 2026] [:error] [pid 10280:tid 10291] [client 188.95.54.49:38438] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Mon Apr 06 22:09:44.654485 2026] [:error] [pid 10280:tid 10293] [client 188.95.54.49:38438] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adO-qF8QUJkf8g-BFfMo0wAAAco"]
[Mon Apr 06 22:09:45.248052 2026] [:error] [pid 1827:tid 1853] [client 188.95.54.49:38450] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Mon Apr 06 22:09:46.795955 2026] [:error] [pid 1827:tid 1846] [client 188.95.54.49:38450] [client 188.95.54.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.95.54.49, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adO-quVeb6S_DnjZ2xEvVgAAAhE"]
[Mon Apr 06 22:09:47.099524 2026] [:error] [pid 1827:tid 1835] [client 188.95.54.49:38450] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Mon Apr 06 22:09:47.398304 2026] [:error] [pid 1827:tid 1851] [client 188.95.54.49:38450] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Mon Apr 06 22:09:47.693337 2026] [:error] [pid 1827:tid 1850] [client 188.95.54.49:38450] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Mon Apr 06 22:09:47.988720 2026] [:error] [pid 1827:tid 1836] [client 188.95.54.49:38450] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adO-q-Veb6S_DnjZ2xEvWwAAAgc"]
[Mon Apr 06 22:09:50.181427 2026] [:error] [pid 10280:tid 10302] [client 188.95.54.49:44678] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Mon Apr 06 22:09:52.197499 2026] [:error] [pid 10280:tid 10307] [client 188.95.54.49:44678] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adO-sF8QUJkf8g-BFfMo4wAAAdg"]
[Mon Apr 06 22:09:53.864750 2026] [:error] [pid 10280:tid 10303] [client 188.95.54.49:44682] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Mon Apr 06 22:09:54.793388 2026] [:error] [pid 10280:tid 10305] [client 188.95.54.49:44682] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adO-sl8QUJkf8g-BFfMo7AAAAdY"]
[Mon Apr 06 22:09:55.970011 2026] [:error] [pid 9442:tid 9454] [client 188.95.54.49:44684] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Mon Apr 06 22:09:57.061689 2026] [:error] [pid 9442:tid 9465] [client 188.95.54.49:44684] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adO-tUPsNnAJTnmz6sYmbQAAARU"]
[Mon Apr 06 22:09:59.055162 2026] [:error] [pid 10280:tid 10293] [client 188.95.54.49:40218] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adO-t18QUJkf8g-BFfMo_gAAAco"]
[Mon Apr 06 22:09:59.639109 2026] [:error] [pid 35688:tid 35761] [client 188.95.54.49:40232] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Mon Apr 06 22:09:59.942402 2026] [:error] [pid 35688:tid 35750] [client 188.95.54.49:40232] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Mon Apr 06 22:10:01.775909 2026] [:error] [pid 35688:tid 35772] [client 188.95.54.49:40232] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adO-ueZ85qg4jLsRpQztIwAAAJY"]
[Mon Apr 06 22:10:02.647079 2026] [:error] [pid 38562:tid 38582] [client 188.95.54.49:40246] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adO-uqeD6Ohe6wzRuy6qiAAAAVE"]
[Mon Apr 06 22:10:04.118523 2026] [:error] [pid 35786:tid 35802] [client 188.95.54.49:40260] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adO-vGgkfCKTaLhwaKQqTwAAAMk"]
[Mon Apr 06 22:10:06.536475 2026] [:error] [pid 1827:tid 1851] [client 188.95.54.49:40276] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Mon Apr 06 22:10:07.976495 2026] [:error] [pid 1827:tid 1830] [client 188.95.54.49:40276] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Mon Apr 06 22:10:08.322625 2026] [:error] [pid 1827:tid 1841] [client 188.95.54.49:40276] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adO-wOVeb6S_DnjZ2xEvgwAAAgw"]
[Mon Apr 06 22:10:08.922294 2026] [:error] [pid 35686:tid 35714] [client 188.95.54.49:33446] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Mon Apr 06 22:10:09.543610 2026] [:error] [pid 35686:tid 35717] [client 188.95.54.49:33446] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/click.php"] [unique_id "adO-wcMKdea6oORd2fzu7gAAABU"]
[Mon Apr 06 22:10:11.009485 2026] [:error] [pid 38562:tid 38582] [client 188.95.54.49:33450] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adO-w6eD6Ohe6wzRuy6qlQAAAVE"]
[Mon Apr 06 22:10:13.713106 2026] [:error] [pid 9442:tid 9461] [client 188.95.54.49:33462] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Mon Apr 06 22:10:14.600188 2026] [:error] [pid 9442:tid 9454] [client 188.95.54.49:33462] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Mon Apr 06 22:10:15.813352 2026] [:error] [pid 9442:tid 9453] [client 188.95.54.49:33462] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Mon Apr 06 22:10:17.986000 2026] [:error] [pid 9442:tid 9455] [client 188.95.54.49:33462] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adO-yUPsNnAJTnmz6sYmqgAAAQs"]
[Mon Apr 06 22:10:18.917772 2026] [:error] [pid 10280:tid 10307] [client 188.95.54.49:50700] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adO-yl8QUJkf8g-BFfMpEwAAAdg"]
[Mon Apr 06 22:10:19.522177 2026] [:error] [pid 38562:tid 38570] [client 188.95.54.49:50704] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adO-y6eD6Ohe6wzRuy6qpAAAAUU"]
[Mon Apr 06 22:10:20.470630 2026] [:error] [pid 35686:tid 35713] [client 188.95.54.49:50718] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adO-zMMKdea6oORd2fzu-wAAABE"]
[Mon Apr 06 22:10:21.044159 2026] [:error] [pid 35688:tid 35763] [client 188.95.54.49:50728] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Mon Apr 06 22:10:21.330136 2026] [:error] [pid 35688:tid 35769] [client 188.95.54.49:50728] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adO-zeZ85qg4jLsRpQztSQAAAJM"]
[Mon Apr 06 22:10:22.947085 2026] [:error] [pid 10280:tid 10292] [client 188.95.54.49:50730] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adO-zl8QUJkf8g-BFfMpGwAAAck"]
[Mon Apr 06 22:10:23.531432 2026] [:error] [pid 9442:tid 9457] [client 188.95.54.49:50740] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Mon Apr 06 22:10:24.900860 2026] [:error] [pid 9442:tid 9452] [client 188.95.54.49:50740] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adO-0EPsNnAJTnmz6sYmuAAAAQg"]
[Mon Apr 06 22:10:25.479107 2026] [:error] [pid 1827:tid 1831] [client 188.95.54.49:50752] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adO-0eVeb6S_DnjZ2xEvjQAAAgI"]
[Mon Apr 06 22:10:26.056225 2026] [:error] [pid 35686:tid 35709] [client 188.95.54.49:50756] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adO-0sMKdea6oORd2fzu_gAAAA0"]
[Mon Apr 06 22:10:26.633878 2026] [:error] [pid 10280:tid 10285] [client 188.95.54.49:50770] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adO-0l8QUJkf8g-BFfMpIwAAAcI"]
[Mon Apr 06 22:10:28.551280 2026] [:error] [pid 1827:tid 1847] [client 188.95.54.49:50776] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adO-1OVeb6S_DnjZ2xEvnwAAAhI"]
[Mon Apr 06 22:10:33.693358 2026] [:error] [pid 9442:tid 9446] [client 188.95.54.49:36892] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adO-2UPsNnAJTnmz6sYm3QAAAQI"]
[Mon Apr 06 22:10:34.277367 2026] [:error] [pid 9442:tid 9447] [client 188.95.54.49:36904] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Mon Apr 06 22:10:36.900321 2026] [:error] [pid 9442:tid 9465] [client 188.95.54.49:36904] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Mon Apr 06 22:10:37.189956 2026] [:error] [pid 9442:tid 9453] [client 188.95.54.49:36904] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adO-3UPsNnAJTnmz6sYnBAAAAQk"]
[Mon Apr 06 22:10:39.115213 2026] [:error] [pid 35686:tid 35704] [client 188.95.54.49:51304] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Mon Apr 06 22:10:40.199945 2026] [:error] [pid 35686:tid 35715] [client 188.95.54.49:51304] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Mon Apr 06 22:10:43.407949 2026] [:error] [pid 35686:tid 35712] [client 188.95.54.49:51304] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "adO-48MKdea6oORd2fzvHwAAABA"]
[Mon Apr 06 22:10:45.683645 2026] [:error] [pid 35786:tid 35815] [client 188.95.54.49:51308] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adO-5WgkfCKTaLhwaKQqXAAAANY"]
[Mon Apr 06 22:10:47.263320 2026] [:error] [pid 35786:tid 35804] [client 188.95.54.49:51320] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adO-52gkfCKTaLhwaKQqYQAAAMs"]
[Mon Apr 06 22:10:53.646544 2026] [:error] [pid 35686:tid 35699] [client 188.95.54.49:43504] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adO-7cMKdea6oORd2fzvLQAAAAM"]
[Mon Apr 06 22:10:55.607903 2026] [:error] [pid 9442:tid 9459] [client 188.95.54.49:43518] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Mon Apr 06 22:10:55.901844 2026] [:error] [pid 9442:tid 9453] [client 188.95.54.49:43518] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Mon Apr 06 22:10:56.195788 2026] [:error] [pid 9442:tid 9448] [client 188.95.54.49:43518] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Mon Apr 06 22:10:56.487200 2026] [:error] [pid 9442:tid 9446] [client 188.95.54.49:43518] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Mon Apr 06 22:10:59.774980 2026] [:error] [pid 9442:tid 9462] [client 188.95.54.49:43518] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "adO-80PsNnAJTnmz6sYnPwAAARI"]
[Mon Apr 06 22:11:00.353500 2026] [:error] [pid 9442:tid 9456] [client 188.95.54.49:52140] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "adO-9EPsNnAJTnmz6sYnQgAAAQw"]
[Mon Apr 06 22:11:00.943728 2026] [:error] [pid 10280:tid 10289] [client 188.95.54.49:52146] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "adO-9F8QUJkf8g-BFfMpSwAAAcY"]
[Mon Apr 06 22:11:03.204434 2026] [:error] [pid 38562:tid 38579] [client 188.95.54.49:52154] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "adO-96eD6Ohe6wzRuy6qyQAAAU4"]
[Mon Apr 06 22:11:04.578439 2026] [:error] [pid 9442:tid 9456] [client 188.95.54.49:52162] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "adO--EPsNnAJTnmz6sYnZAAAAQw"]
[Mon Apr 06 22:11:05.152692 2026] [:error] [pid 35688:tid 35751] [client 188.95.54.49:52174] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "adO--eZ85qg4jLsRpQztiAAAAIE"]
[Mon Apr 06 22:11:06.035191 2026] [:error] [pid 35688:tid 35752] [client 188.95.54.49:52178] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "adO--uZ85qg4jLsRpQztjQAAAII"]
[Mon Apr 06 22:11:06.619466 2026] [:error] [pid 35686:tid 35710] [client 188.95.54.49:52184] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "adO--sMKdea6oORd2fzvMwAAAA4"]
[Mon Apr 06 22:11:07.194215 2026] [:error] [pid 35686:tid 35698] [client 188.95.54.49:52196] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "adO--8MKdea6oORd2fzvNgAAAAI"]
[Mon Apr 06 22:11:08.701085 2026] [:error] [pid 38562:tid 38570] [client 188.95.54.49:35972] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "adO-_KeD6Ohe6wzRuy6qzQAAAUU"]
[Mon Apr 06 22:11:10.658723 2026] [:error] [pid 35686:tid 35705] [client 188.95.54.49:35982] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "adO-_sMKdea6oORd2fzvOgAAAAk"]
[Mon Apr 06 22:11:12.160385 2026] [:error] [pid 35688:tid 35767] [client 188.95.54.49:16946] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "adO_AOZ85qg4jLsRpQztlwAAAJE"]
[Mon Apr 06 22:11:14.717092 2026] [:error] [pid 9442:tid 9448] [client 188.95.54.49:36000] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Mon Apr 06 22:11:15.301469 2026] [:error] [pid 9442:tid 9468] [client 188.95.54.49:36000] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "adO_A0PsNnAJTnmz6sYniAAAARg"]
[Mon Apr 06 22:11:17.826532 2026] [:error] [pid 10280:tid 10294] [client 188.95.54.49:36008] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "adO_BV8QUJkf8g-BFfMpgQAAAcs"]
[Mon Apr 06 22:11:19.816080 2026] [:error] [pid 35686:tid 35712] [client 188.95.54.49:38982] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Mon Apr 06 22:11:20.109715 2026] [:error] [pid 35686:tid 35711] [client 188.95.54.49:38982] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "adO_CMMKdea6oORd2fzvRwAAAA8"]
[Mon Apr 06 22:11:20.991454 2026] [:error] [pid 9442:tid 9444] [client 188.95.54.49:38990] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Mon Apr 06 22:11:21.286390 2026] [:error] [pid 9442:tid 9458] [client 188.95.54.49:38990] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Mon Apr 06 22:11:21.580288 2026] [:error] [pid 9442:tid 9453] [client 188.95.54.49:38990] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Mon Apr 06 22:11:21.873445 2026] [:error] [pid 9442:tid 9460] [client 188.95.54.49:38990] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "adO_CUPsNnAJTnmz6sYnngAAARA"]
[Mon Apr 06 22:11:23.271093 2026] [:error] [pid 1827:tid 1843] [client 188.95.54.49:38994] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Mon Apr 06 22:11:24.410876 2026] [:error] [pid 1827:tid 1847] [client 188.95.54.49:38994] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "adO_DOVeb6S_DnjZ2xEv3gAAAhI"]
[Mon Apr 06 22:11:26.199534 2026] [:error] [pid 1827:tid 1829] [client 188.95.54.49:38998] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon Apr 06 22:11:26.490322 2026] [:error] [pid 1827:tid 1837] [client 188.95.54.49:38998] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Mon Apr 06 22:11:28.853894 2026] [:error] [pid 1827:tid 1849] [client 188.95.54.49:38998] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Mon Apr 06 22:11:31.523883 2026] [:error] [pid 1827:tid 1843] [client 188.95.54.49:38998] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Mon Apr 06 22:11:31.814780 2026] [:error] [pid 1827:tid 1838] [client 188.95.54.49:38998] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Mon Apr 06 22:11:33.289973 2026] [:error] [pid 1827:tid 1839] [client 188.95.54.49:38998] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Mon Apr 06 22:11:34.922778 2026] [:error] [pid 1827:tid 1832] [client 188.95.54.49:38998] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Mon Apr 06 22:11:35.211132 2026] [:error] [pid 1827:tid 1829] [client 188.95.54.49:38998] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adO_F-Veb6S_DnjZ2xEv9QAAAgA"]
[Mon Apr 06 22:11:36.581502 2026] [:error] [pid 35688:tid 35762] [client 188.95.54.49:33012] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "adO_GOZ85qg4jLsRpQzt1wAAAIw"]
[Mon Apr 06 22:11:37.165245 2026] [:error] [pid 38562:tid 38569] [client 188.95.54.49:33018] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Mon Apr 06 22:11:37.453672 2026] [:error] [pid 38562:tid 38568] [client 188.95.54.49:33018] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "adO_GaeD6Ohe6wzRuy6q5gAAAUM"]
[Mon Apr 06 22:11:39.354044 2026] [:error] [pid 10280:tid 10300] [client 188.95.54.49:55414] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Mon Apr 06 22:11:42.021924 2026] [:error] [pid 10280:tid 10307] [client 188.95.54.49:55414] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adO_Hl8QUJkf8g-BFfMpvgAAAdg"]
[Mon Apr 06 22:11:43.680900 2026] [:error] [pid 9442:tid 9446] [client 188.95.54.49:55422] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adO_H0PsNnAJTnmz6sYoFAAAAQI"]
[Mon Apr 06 22:11:45.433460 2026] [:error] [pid 35688:tid 35756] [client 188.95.54.49:55424] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adO_IeZ85qg4jLsRpQzuFQAAAIY"]
[Mon Apr 06 22:11:47.036333 2026] [:error] [pid 35686:tid 35704] [client 188.95.54.49:55440] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "adO_I8MKdea6oORd2fzvXQAAAAg"]
[Mon Apr 06 22:11:50.085282 2026] [:error] [pid 9442:tid 9450] [client 188.95.54.49:55446] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Mon Apr 06 22:11:51.297805 2026] [:error] [pid 9442:tid 9454] [client 188.95.54.49:55446] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "adO_J0PsNnAJTnmz6sYoWAAAAQo"]
[Mon Apr 06 22:11:53.013448 2026] [:error] [pid 9442:tid 9464] [client 188.95.54.49:47318] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Mon Apr 06 22:11:53.603986 2026] [:error] [pid 9442:tid 9461] [client 188.95.54.49:47318] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/function.php"] [unique_id "adO_KUPsNnAJTnmz6sYodQAAARE"]
[Mon Apr 06 22:11:54.183554 2026] [:error] [pid 9442:tid 9464] [client 188.95.54.49:47330] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "adO_KkPsNnAJTnmz6sYofAAAARQ"]
[Mon Apr 06 22:11:55.072590 2026] [:error] [pid 38562:tid 38567] [client 188.95.54.49:47344] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Mon Apr 06 22:11:55.364148 2026] [:error] [pid 38562:tid 38571] [client 188.95.54.49:47344] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "adO_K6eD6Ohe6wzRuy6q8AAAAUY"]
[Mon Apr 06 22:11:55.957860 2026] [:error] [pid 35688:tid 35764] [client 188.95.54.49:47356] [client 188.95.54.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adO_K-Z85qg4jLsRpQzuKwAAAI4"]
[Mon Apr 06 22:13:26.604667 2026] [autoindex:error] [pid 9442:tid 9459] [client 188.95.54.49:34684] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 07 05:28:30.070769 2026] [:error] [pid 12948:tid 12961] [client 216.81.248.197:55170] [client 216.81.248.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "adQlfsbeSPAN8LvMqsb4ZQAAAQo"]
[Tue Apr 07 18:34:20.382822 2026] [:error] [pid 37597:tid 37658] [client 13.200.242.16:38686] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "adTdrA6uAY0QAy-8EEIYVQAAAFg"]
[Tue Apr 07 18:34:21.012907 2026] [:error] [pid 37596:tid 37616] [client 13.200.242.16:38742] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "adTdrapaAOZHEjRWjP2M-AAAAAo"]
[Tue Apr 07 18:34:21.638413 2026] [:error] [pid 37596:tid 37623] [client 13.200.242.16:41004] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "adTdrapaAOZHEjRWjP2M-QAAABE"]
[Tue Apr 07 18:34:22.265302 2026] [:error] [pid 59660:tid 59662] [client 13.200.242.16:41054] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.staging"] [unique_id "adTdrjp3-oiX2o5bTsz9ZwAAAcA"]
[Tue Apr 07 18:34:22.895225 2026] [:error] [pid 59660:tid 59675] [client 13.200.242.16:41106] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.development"] [unique_id "adTdrjp3-oiX2o5bTsz9aAAAAc0"]
[Tue Apr 07 23:47:53.763953 2026] [:error] [pid 37719:tid 37733] [client 91.224.92.127:61339] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Apr 07 23:47:55.335496 2026] [:error] [pid 59804:tid 59815] [client 91.224.92.127:59594] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Apr 07 23:47:58.046007 2026] [:error] [pid 37598:tid 37664] [client 91.224.92.127:61045] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Apr 07 23:47:59.774307 2026] [:error] [pid 59660:tid 59675] [client 91.224.92.127:61116] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Apr 08 06:08:43.081959 2026] [:error] [pid 47627:tid 47714] [client 20.107.189.116:37527] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Wed Apr 08 06:08:43.338937 2026] [:error] [pid 47627:tid 47701] [client 20.107.189.116:37527] File does not exist: /usr/local/apache/htdocs/suspended-page/bogles.php
[Wed Apr 08 06:08:43.848172 2026] [:error] [pid 47627:tid 47711] [client 20.107.189.116:37527] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Wed Apr 08 06:08:44.102504 2026] [:error] [pid 47627:tid 47712] [client 20.107.189.116:37527] File does not exist: /usr/local/apache/htdocs/suspended-page/co.php
[Wed Apr 08 06:08:44.356883 2026] [:error] [pid 47627:tid 47723] [client 20.107.189.116:37527] File does not exist: /usr/local/apache/htdocs/suspended-page/database.php
[Wed Apr 08 06:08:44.866440 2026] [:error] [pid 47627:tid 47704] [client 20.107.189.116:37527] File does not exist: /usr/local/apache/htdocs/suspended-page/x123.php
[Wed Apr 08 06:08:45.123302 2026] [:error] [pid 47627:tid 47705] [client 20.107.189.116:37527] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Apr 08 07:40:55.857348 2026] [:error] [pid 47627:tid 47717] [client 195.86.27.13:46298] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Wed Apr 08 07:40:55.947969 2026] [:error] [pid 47627:tid 47705] [client 195.86.27.13:46298] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Wed Apr 08 07:40:56.038705 2026] [:error] [pid 47627:tid 47716] [client 195.86.27.13:46298] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Wed Apr 08 07:40:56.129372 2026] [:error] [pid 47627:tid 47707] [client 195.86.27.13:46298] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Wed Apr 08 07:40:56.220279 2026] [:error] [pid 47627:tid 47700] [client 195.86.27.13:46298] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Wed Apr 08 07:40:56.311070 2026] [:error] [pid 47627:tid 47721] [client 195.86.27.13:46298] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Apr 08 07:40:56.402661 2026] [:error] [pid 47627:tid 47699] [client 195.86.27.13:46298] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Apr 08 07:40:56.504416 2026] [:error] [pid 47627:tid 47711] [client 195.86.27.13:46298] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Wed Apr 08 07:40:56.691612 2026] [:error] [pid 47627:tid 47712] [client 195.86.27.13:46298] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Wed Apr 08 07:40:56.784180 2026] [:error] [pid 47627:tid 47706] [client 195.86.27.13:46298] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Wed Apr 08 07:40:56.875747 2026] [:error] [pid 47627:tid 47701] [client 195.86.27.13:46298] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Apr 08 07:40:58.490291 2026] [:error] [pid 47627:tid 47701] [client 195.86.27.13:46298] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Wed Apr 08 07:40:58.580952 2026] [:error] [pid 47627:tid 47709] [client 195.86.27.13:46298] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Wed Apr 08 07:40:58.671117 2026] [:error] [pid 47627:tid 47720] [client 195.86.27.13:46298] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Wed Apr 08 07:40:58.761446 2026] [:error] [pid 47627:tid 47703] [client 195.86.27.13:46298] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Wed Apr 08 07:40:58.854705 2026] [:error] [pid 47627:tid 47702] [client 195.86.27.13:46298] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Wed Apr 08 07:40:58.944865 2026] [:error] [pid 47627:tid 47717] [client 195.86.27.13:46298] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Wed Apr 08 07:40:59.036609 2026] [:error] [pid 47627:tid 47705] [client 195.86.27.13:46298] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Wed Apr 08 07:41:00.332566 2026] [:error] [pid 47627:tid 47720] [client 195.86.27.13:46298] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adWWDHOljf1Quv_kDjnOzQAAAJU"]
[Wed Apr 08 07:41:00.801902 2026] [:error] [pid 47732:tid 47753] [client 195.86.27.13:46306] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adWWDIm4N5QW9Mh7G12F6gAAANM"]
[Wed Apr 08 07:41:01.261299 2026] [:error] [pid 47732:tid 47735] [client 195.86.27.13:46320] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Wed Apr 08 07:41:02.923476 2026] [:error] [pid 47732:tid 47738] [client 195.86.27.13:46320] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adWWDom4N5QW9Mh7G12F-gAAAMQ"]
[Wed Apr 08 07:41:03.286184 2026] [:error] [pid 47626:tid 47692] [client 195.86.27.13:46334] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed Apr 08 07:41:03.373136 2026] [:error] [pid 47626:tid 47668] [client 195.86.27.13:46334] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adWWD6jWI8TWtHx2sdYptQAAAEA"]
[Wed Apr 08 07:41:03.649305 2026] [:error] [pid 47625:tid 47645] [client 195.86.27.13:46348] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Wed Apr 08 07:41:04.106347 2026] [:error] [pid 47625:tid 47643] [client 195.86.27.13:46348] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adWWECVuHyNWzZlE8PAddQAAAAk"]
[Wed Apr 08 07:41:04.374003 2026] [:error] [pid 47625:tid 47644] [client 195.86.27.13:47199] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adWWECVuHyNWzZlE8PAdeAAAAAo"]
[Wed Apr 08 07:41:04.553093 2026] [:error] [pid 47732:tid 47752] [client 195.86.27.13:46368] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adWWEIm4N5QW9Mh7G12F_AAAANI"]
[Wed Apr 08 07:41:04.729812 2026] [:error] [pid 47626:tid 47686] [client 195.86.27.13:46380] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adWWEKjWI8TWtHx2sdYptgAAAFI"]
[Wed Apr 08 07:41:04.904297 2026] [:error] [pid 16630:tid 16638] [client 195.86.27.13:46396] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adWWECjfVAkPG-jgJEoAugAAAQY"]
[Wed Apr 08 07:41:05.078427 2026] [:error] [pid 16630:tid 16644] [client 195.86.27.13:46410] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adWWESjfVAkPG-jgJEoAuwAAAQw"]
[Wed Apr 08 07:41:05.342130 2026] [:error] [pid 16630:tid 16651] [client 195.86.27.13:46418] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adWWESjfVAkPG-jgJEoAvwAAARM"]
[Wed Apr 08 07:41:05.522354 2026] [:error] [pid 16630:tid 16633] [client 195.86.27.13:46430] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Wed Apr 08 07:41:05.703520 2026] [:error] [pid 16630:tid 16636] [client 195.86.27.13:46430] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "adWWESjfVAkPG-jgJEoAwgAAAQQ"]
[Wed Apr 08 07:41:06.066627 2026] [:error] [pid 16630:tid 16647] [client 195.86.27.13:59734] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adWWEijfVAkPG-jgJEoAyAAAAQ8"]
[Wed Apr 08 07:41:07.825036 2026] [:error] [pid 16630:tid 16638] [client 195.86.27.13:59746] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adWWEyjfVAkPG-jgJEoA0gAAAQY"]
[Wed Apr 08 07:41:08.001749 2026] [:error] [pid 16630:tid 16632] [client 195.86.27.13:59756] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Wed Apr 08 07:41:08.089595 2026] [:error] [pid 16630:tid 16640] [client 195.86.27.13:59756] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adWWFCjfVAkPG-jgJEoA1QAAAQg"]
[Wed Apr 08 07:41:08.267886 2026] [:error] [pid 16630:tid 16643] [client 195.86.27.13:59768] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Wed Apr 08 07:41:08.537326 2026] [:error] [pid 16630:tid 16637] [client 195.86.27.13:59768] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Wed Apr 08 07:41:08.803508 2026] [:error] [pid 16630:tid 16633] [client 195.86.27.13:59768] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adWWFCjfVAkPG-jgJEoA5AAAAQE"]
[Wed Apr 08 07:41:08.978722 2026] [:error] [pid 16630:tid 16654] [client 195.86.27.13:59784] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Wed Apr 08 07:41:09.064831 2026] [:error] [pid 16630:tid 16643] [client 195.86.27.13:59784] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adWWFSjfVAkPG-jgJEoA5wAAAQs"]
[Wed Apr 08 07:41:09.241786 2026] [:error] [pid 47625:tid 47642] [client 195.86.27.13:59796] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Wed Apr 08 07:41:09.421624 2026] [:error] [pid 47625:tid 47658] [client 195.86.27.13:59796] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adWWFSVuHyNWzZlE8PAdfgAAABg"]
[Wed Apr 08 07:41:09.687480 2026] [:error] [pid 16630:tid 16646] [client 195.86.27.13:59808] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adWWFSjfVAkPG-jgJEoA6wAAAQ4"]
[Wed Apr 08 07:41:09.954348 2026] [:error] [pid 47732:tid 47742] [client 195.86.27.13:59814] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Wed Apr 08 07:41:10.048081 2026] [:error] [pid 47732:tid 47754] [client 195.86.27.13:59814] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Wed Apr 08 07:41:10.225546 2026] [:error] [pid 47732:tid 47749] [client 195.86.27.13:59814] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adWWFom4N5QW9Mh7G12GCQAAAM8"]
[Wed Apr 08 07:41:10.505925 2026] [:error] [pid 16630:tid 16634] [client 195.86.27.13:59822] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adWWFijfVAkPG-jgJEoA8AAAAQI"]
[Wed Apr 08 07:41:10.769515 2026] [:error] [pid 47732:tid 47744] [client 195.86.27.13:59838] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adWWFom4N5QW9Mh7G12GDAAAAMo"]
[Wed Apr 08 07:41:10.942526 2026] [:error] [pid 47732:tid 47753] [client 195.86.27.13:59846] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adWWFom4N5QW9Mh7G12GDQAAANM"]
[Wed Apr 08 07:41:11.115407 2026] [:error] [pid 47625:tid 47638] [client 195.86.27.13:59860] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adWWFyVuHyNWzZlE8PAdggAAAAQ"]
[Wed Apr 08 07:41:11.479957 2026] [:error] [pid 16630:tid 16655] [client 195.86.27.13:59868] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Wed Apr 08 07:41:11.570457 2026] [:error] [pid 16630:tid 16648] [client 195.86.27.13:59868] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adWWFyjfVAkPG-jgJEoA-AAAARA"]
[Wed Apr 08 07:41:11.745647 2026] [:error] [pid 16630:tid 16656] [client 195.86.27.13:59880] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adWWFyjfVAkPG-jgJEoA-QAAARg"]
[Wed Apr 08 07:41:11.924002 2026] [:error] [pid 16630:tid 16640] [client 195.86.27.13:59890] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adWWFyjfVAkPG-jgJEoA-wAAAQg"]
[Wed Apr 08 07:41:12.281696 2026] [:error] [pid 16630:tid 16636] [client 195.86.27.13:59894] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Wed Apr 08 07:41:12.461834 2026] [:error] [pid 16630:tid 16650] [client 195.86.27.13:59894] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Wed Apr 08 07:41:12.824102 2026] [:error] [pid 16630:tid 16640] [client 195.86.27.13:59894] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adWWGCjfVAkPG-jgJEoBBwAAAQg"]
[Wed Apr 08 07:41:13.268048 2026] [:error] [pid 16630:tid 16650] [client 195.86.27.13:59904] [client 195.86.27.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.86.27.13, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adWWGSjfVAkPG-jgJEoBDgAAARI"]
[Wed Apr 08 07:41:13.363634 2026] [:error] [pid 16630:tid 16645] [client 195.86.27.13:59904] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Wed Apr 08 07:41:13.812484 2026] [:error] [pid 16630:tid 16638] [client 195.86.27.13:59904] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Wed Apr 08 07:41:13.902329 2026] [:error] [pid 16630:tid 16632] [client 195.86.27.13:59904] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Wed Apr 08 07:41:14.351444 2026] [:error] [pid 16630:tid 16649] [client 195.86.27.13:59904] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adWWGijfVAkPG-jgJEoBGwAAARE"]
[Wed Apr 08 07:41:14.619418 2026] [:error] [pid 47627:tid 47717] [client 195.86.27.13:59916] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Wed Apr 08 07:41:14.707845 2026] [:error] [pid 47627:tid 47704] [client 195.86.27.13:59916] [client 195.86.27.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.86.27.13, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adWWGnOljf1Quv_kDjnO3wAAAIU"]
[Wed Apr 08 07:41:14.893576 2026] [:error] [pid 47627:tid 47716] [client 195.86.27.13:59916] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/item.php"] [unique_id "adWWGnOljf1Quv_kDjnO4QAAAJE"]
[Wed Apr 08 07:41:15.436925 2026] [:error] [pid 47732:tid 47737] [client 195.86.27.13:59924] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Wed Apr 08 07:41:15.616907 2026] [:error] [pid 47732:tid 47739] [client 195.86.27.13:59924] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Wed Apr 08 07:41:15.795645 2026] [:error] [pid 47732:tid 47750] [client 195.86.27.13:59924] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adWWG4m4N5QW9Mh7G12GGQAAANA"]
[Wed Apr 08 07:41:15.972676 2026] [:error] [pid 16630:tid 16653] [client 195.86.27.13:58542] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed Apr 08 07:41:16.246226 2026] [:error] [pid 16630:tid 16633] [client 195.86.27.13:58542] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Wed Apr 08 07:41:16.427785 2026] [:error] [pid 16630:tid 16638] [client 195.86.27.13:58542] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Wed Apr 08 07:41:16.611320 2026] [:error] [pid 16630:tid 16634] [client 195.86.27.13:58542] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Wed Apr 08 07:41:16.699208 2026] [:error] [pid 16630:tid 16651] [client 195.86.27.13:58542] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adWWHCjfVAkPG-jgJEoBKAAAARM"]
[Wed Apr 08 07:41:16.887167 2026] [:error] [pid 47732:tid 47753] [client 195.86.27.13:58548] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Wed Apr 08 07:41:16.981562 2026] [:error] [pid 47732:tid 47740] [client 195.86.27.13:58548] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Wed Apr 08 07:41:17.070568 2026] [:error] [pid 47732:tid 47747] [client 195.86.27.13:58548] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adWWHYm4N5QW9Mh7G12GHQAAAM0"]
[Wed Apr 08 07:41:17.337518 2026] [:error] [pid 47627:tid 47719] [client 195.86.27.13:58564] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Wed Apr 08 07:41:17.528202 2026] [:error] [pid 47627:tid 47718] [client 195.86.27.13:58564] [client 195.86.27.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.86.27.13, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adWWHXOljf1Quv_kDjnO6wAAAJM"]
[Wed Apr 08 07:41:17.619943 2026] [:error] [pid 47627:tid 47709] [client 195.86.27.13:58564] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adWWHXOljf1Quv_kDjnO7AAAAIo"]
[Wed Apr 08 07:41:18.824973 2026] [:error] [pid 47627:tid 47710] [client 195.86.27.13:58578] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Wed Apr 08 07:41:19.367533 2026] [:error] [pid 47627:tid 47703] [client 195.86.27.13:58578] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Wed Apr 08 07:41:19.454329 2026] [:error] [pid 47627:tid 47709] [client 195.86.27.13:58578] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adWWH3Oljf1Quv_kDjnPAAAAAIo"]
[Wed Apr 08 07:41:19.636629 2026] [:error] [pid 47732:tid 47752] [client 195.86.27.13:58592] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Wed Apr 08 07:41:19.903956 2026] [:error] [pid 47732:tid 47749] [client 195.86.27.13:58592] [client 195.86.27.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.86.27.13, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adWWH4m4N5QW9Mh7G12GJQAAAM8"]
[Wed Apr 08 07:41:19.997530 2026] [:error] [pid 47732:tid 47739] [client 195.86.27.13:58592] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Wed Apr 08 07:41:20.086725 2026] [:error] [pid 47732:tid 47748] [client 195.86.27.13:58592] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Wed Apr 08 07:41:20.177938 2026] [:error] [pid 47732:tid 47750] [client 195.86.27.13:58592] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Wed Apr 08 07:41:20.265060 2026] [:error] [pid 47732:tid 47743] [client 195.86.27.13:58592] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adWWIIm4N5QW9Mh7G12GKQAAAMk"]
[Wed Apr 08 07:41:20.440824 2026] [:error] [pid 47625:tid 47657] [client 195.86.27.13:58608] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Wed Apr 08 07:41:20.527870 2026] [:error] [pid 47625:tid 47640] [client 195.86.27.13:58608] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adWWICVuHyNWzZlE8PAdjAAAAAY"]
[Wed Apr 08 07:41:20.794461 2026] [:error] [pid 47732:tid 47753] [client 195.86.27.13:58616] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Wed Apr 08 07:41:20.881945 2026] [:error] [pid 47732:tid 47740] [client 195.86.27.13:58616] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adWWIIm4N5QW9Mh7G12GLQAAAMY"]
[Wed Apr 08 07:41:21.245469 2026] [:error] [pid 47625:tid 47644] [client 195.86.27.13:58622] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Wed Apr 08 07:41:22.863559 2026] [:error] [pid 47625:tid 47644] [client 195.86.27.13:58622] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adWWIiVuHyNWzZlE8PAdkgAAAAo"]
[Wed Apr 08 07:41:23.036460 2026] [:error] [pid 16630:tid 16633] [client 195.86.27.13:58632] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adWWIyjfVAkPG-jgJEoBNwAAAQE"]
[Wed Apr 08 07:41:23.214160 2026] [:error] [pid 16630:tid 16632] [client 195.86.27.13:58646] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Wed Apr 08 07:41:23.305328 2026] [:error] [pid 16630:tid 16655] [client 195.86.27.13:58646] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Wed Apr 08 07:41:23.671217 2026] [:error] [pid 16630:tid 16634] [client 195.86.27.13:58646] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adWWIyjfVAkPG-jgJEoBQQAAAQI"]
[Wed Apr 08 07:41:23.935577 2026] [:error] [pid 16630:tid 16653] [client 195.86.27.13:58660] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adWWIyjfVAkPG-jgJEoBQwAAARU"]
[Wed Apr 08 07:41:24.380427 2026] [:error] [pid 16630:tid 16641] [client 195.86.27.13:58672] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adWWJCjfVAkPG-jgJEoBSwAAAQk"]
[Wed Apr 08 07:41:24.556145 2026] [:error] [pid 16630:tid 16647] [client 195.86.27.13:58682] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Wed Apr 08 07:41:24.740350 2026] [:error] [pid 16630:tid 16632] [client 195.86.27.13:58682] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Wed Apr 08 07:41:24.827327 2026] [:error] [pid 16630:tid 16655] [client 195.86.27.13:58682] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adWWJCjfVAkPG-jgJEoBUwAAARc"]
[Wed Apr 08 07:41:25.003963 2026] [:error] [pid 16630:tid 16652] [client 195.86.27.13:58694] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Wed Apr 08 07:41:25.182426 2026] [:error] [pid 16630:tid 16638] [client 195.86.27.13:58694] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/click.php"] [unique_id "adWWJSjfVAkPG-jgJEoBWgAAAQY"]
[Wed Apr 08 07:41:25.629391 2026] [:error] [pid 47732:tid 47758] [client 195.86.27.13:58706] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adWWJYm4N5QW9Mh7G12GOAAAANg"]
[Wed Apr 08 07:41:25.899359 2026] [:error] [pid 16630:tid 16644] [client 195.86.27.13:40710] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed Apr 08 07:41:26.178045 2026] [:error] [pid 16630:tid 16650] [client 195.86.27.13:40710] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Wed Apr 08 07:41:26.359797 2026] [:error] [pid 16630:tid 16638] [client 195.86.27.13:40710] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Wed Apr 08 07:41:26.446797 2026] [:error] [pid 16630:tid 16644] [client 195.86.27.13:40710] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adWWJijfVAkPG-jgJEoBaQAAAQw"]
[Wed Apr 08 07:41:26.621074 2026] [:error] [pid 47732:tid 47740] [client 195.86.27.13:40714] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adWWJom4N5QW9Mh7G12GOQAAAMY"]
[Wed Apr 08 07:41:26.800147 2026] [:error] [pid 47732:tid 47746] [client 195.86.27.13:40724] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adWWJom4N5QW9Mh7G12GOwAAAMw"]
[Wed Apr 08 07:41:26.974022 2026] [:error] [pid 47732:tid 47735] [client 195.86.27.13:40736] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adWWJom4N5QW9Mh7G12GPAAAAME"]
[Wed Apr 08 07:41:27.161868 2026] [:error] [pid 47732:tid 47737] [client 195.86.27.13:40746] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Wed Apr 08 07:41:27.249463 2026] [:error] [pid 47732:tid 47744] [client 195.86.27.13:40746] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adWWJ4m4N5QW9Mh7G12GQAAAAMo"]
[Wed Apr 08 07:41:27.421575 2026] [:error] [pid 47627:tid 47723] [client 195.86.27.13:40758] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adWWJ3Oljf1Quv_kDjnPCgAAAJg"]
[Wed Apr 08 07:41:27.598014 2026] [:error] [pid 47732:tid 47738] [client 195.86.27.13:40764] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Wed Apr 08 07:41:27.775852 2026] [:error] [pid 47732:tid 47753] [client 195.86.27.13:40764] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adWWJ4m4N5QW9Mh7G12GRgAAANM"]
[Wed Apr 08 07:41:27.948441 2026] [:error] [pid 16630:tid 16648] [client 195.86.27.13:40774] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adWWJyjfVAkPG-jgJEoBbwAAARA"]
[Wed Apr 08 07:41:28.121101 2026] [:error] [pid 16630:tid 16653] [client 195.86.27.13:40778] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adWWKCjfVAkPG-jgJEoBcAAAARU"]
[Wed Apr 08 07:41:28.294153 2026] [:error] [pid 47732:tid 47751] [client 195.86.27.13:40784] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adWWKIm4N5QW9Mh7G12GSgAAANE"]
[Wed Apr 08 07:41:28.558865 2026] [:error] [pid 47627:tid 47709] [client 195.86.27.13:40792] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adWWKHOljf1Quv_kDjnPDQAAAIo"]
[Wed Apr 08 07:41:28.910534 2026] [:error] [pid 47732:tid 47748] [client 195.86.27.13:40802] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adWWKIm4N5QW9Mh7G12GTgAAAM4"]
[Wed Apr 08 07:41:29.087318 2026] [:error] [pid 16630:tid 16654] [client 195.86.27.13:40814] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Wed Apr 08 07:41:29.359610 2026] [:error] [pid 16630:tid 16650] [client 195.86.27.13:40814] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Wed Apr 08 07:41:29.446143 2026] [:error] [pid 16630:tid 16646] [client 195.86.27.13:40814] [client 195.86.27.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adWWKSjfVAkPG-jgJEoBfwAAAQ4"]
[Wed Apr 08 07:41:29.713398 2026] [:error] [pid 16630:tid 16655] [client 144.48.38.20:40818] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Wed Apr 08 07:41:29.801447 2026] [:error] [pid 16630:tid 16645] [client 144.48.38.20:40818] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Wed Apr 08 07:41:30.255776 2026] [:error] [pid 16630:tid 16641] [client 144.48.38.20:40818] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "adWWKijfVAkPG-jgJEoBjAAAAQk"]
[Wed Apr 08 07:41:30.703285 2026] [:error] [pid 47732:tid 47756] [client 144.48.38.20:40832] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adWWKom4N5QW9Mh7G12GXAAAANY"]
[Wed Apr 08 07:41:30.875637 2026] [:error] [pid 47732:tid 47758] [client 144.48.38.20:40842] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adWWKom4N5QW9Mh7G12GXgAAANg"]
[Wed Apr 08 07:41:31.414583 2026] [:error] [pid 16630:tid 16650] [client 144.48.38.20:40844] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adWWKyjfVAkPG-jgJEoBkwAAARI"]
[Wed Apr 08 07:41:31.773532 2026] [:error] [pid 16630:tid 16646] [client 144.48.38.20:40852] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Wed Apr 08 07:41:31.862897 2026] [:error] [pid 16630:tid 16634] [client 144.48.38.20:40852] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Wed Apr 08 07:41:31.952980 2026] [:error] [pid 16630:tid 16638] [client 144.48.38.20:40852] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Wed Apr 08 07:41:32.051794 2026] [:error] [pid 16630:tid 16654] [client 144.48.38.20:40852] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Wed Apr 08 07:41:32.501124 2026] [:error] [pid 16630:tid 16633] [client 144.48.38.20:40852] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "adWWLCjfVAkPG-jgJEoBowAAAQE"]
[Wed Apr 08 07:41:32.673360 2026] [:error] [pid 47625:tid 47648] [client 144.48.38.20:40868] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "adWWLCVuHyNWzZlE8PAdkwAAAA4"]
[Wed Apr 08 07:41:32.847499 2026] [:error] [pid 47626:tid 47691] [client 144.48.38.20:40870] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "adWWLKjWI8TWtHx2sdYp0QAAAFc"]
[Wed Apr 08 07:41:33.019997 2026] [:error] [pid 47626:tid 47690] [client 144.48.38.20:40876] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "adWWLajWI8TWtHx2sdYp0gAAAFY"]
[Wed Apr 08 07:41:33.192424 2026] [:error] [pid 47626:tid 47669] [client 144.48.38.20:40890] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "adWWLajWI8TWtHx2sdYp0wAAAEE"]
[Wed Apr 08 07:41:33.365628 2026] [:error] [pid 16630:tid 16638] [client 144.48.38.20:40894] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "adWWLSjfVAkPG-jgJEoBpgAAAQY"]
[Wed Apr 08 07:41:33.629346 2026] [:error] [pid 47625:tid 47656] [client 144.48.38.20:40904] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "adWWLSVuHyNWzZlE8PAdlQAAABY"]
[Wed Apr 08 07:41:33.802487 2026] [:error] [pid 47626:tid 47692] [client 144.48.38.20:40920] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "adWWLajWI8TWtHx2sdYp1AAAAFg"]
[Wed Apr 08 07:41:33.975261 2026] [:error] [pid 47627:tid 47716] [client 144.48.38.20:40934] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "adWWLXOljf1Quv_kDjnPDwAAAJE"]
[Wed Apr 08 07:41:34.149251 2026] [:error] [pid 47625:tid 47640] [client 144.48.38.20:40944] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "adWWLiVuHyNWzZlE8PAdmAAAAAY"]
[Wed Apr 08 07:41:34.506308 2026] [:error] [pid 47625:tid 47647] [client 144.48.38.20:40946] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "adWWLiVuHyNWzZlE8PAdmwAAAA0"]
[Wed Apr 08 07:41:34.772339 2026] [:error] [pid 47732:tid 47737] [client 144.48.38.20:40952] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "adWWLom4N5QW9Mh7G12GbQAAAMM"]
[Wed Apr 08 07:41:34.948708 2026] [:error] [pid 16630:tid 16650] [client 144.48.38.20:40966] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Wed Apr 08 07:41:35.125101 2026] [:error] [pid 16630:tid 16647] [client 144.48.38.20:40966] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "adWWLyjfVAkPG-jgJEoBrQAAAQ8"]
[Wed Apr 08 07:41:35.484776 2026] [:error] [pid 16630:tid 16634] [client 144.48.38.20:40970] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "adWWLyjfVAkPG-jgJEoBsQAAAQI"]
[Wed Apr 08 07:41:35.844043 2026] [:error] [pid 47627:tid 47719] [client 144.48.38.20:40982] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Wed Apr 08 07:41:35.931363 2026] [:error] [pid 47627:tid 47714] [client 144.48.38.20:40982] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "adWWL3Oljf1Quv_kDjnPFwAAAI8"]
[Wed Apr 08 07:41:36.203298 2026] [:error] [pid 47732:tid 47754] [client 144.48.38.20:34956] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Wed Apr 08 07:41:36.297122 2026] [:error] [pid 47732:tid 47738] [client 144.48.38.20:34956] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Wed Apr 08 07:41:36.389864 2026] [:error] [pid 47732:tid 47752] [client 144.48.38.20:34956] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Wed Apr 08 07:41:36.476179 2026] [:error] [pid 47732:tid 47753] [client 144.48.38.20:34956] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "adWWMIm4N5QW9Mh7G12GfAAAANM"]
[Wed Apr 08 07:41:36.660332 2026] [:error] [pid 47627:tid 47707] [client 144.48.38.20:34960] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Wed Apr 08 07:41:36.748282 2026] [:error] [pid 47627:tid 47722] [client 144.48.38.20:34960] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "adWWMHOljf1Quv_kDjnPGgAAAJc"]
[Wed Apr 08 07:41:37.109137 2026] [:error] [pid 47627:tid 47701] [client 144.48.38.20:34972] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Apr 08 07:41:38.753084 2026] [:error] [pid 47627:tid 47701] [client 144.48.38.20:34972] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Wed Apr 08 07:41:38.842961 2026] [:error] [pid 47627:tid 47716] [client 144.48.38.20:34972] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Wed Apr 08 07:41:39.293189 2026] [:error] [pid 47627:tid 47721] [client 144.48.38.20:34972] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Wed Apr 08 07:41:39.384061 2026] [:error] [pid 47627:tid 47717] [client 144.48.38.20:34972] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Wed Apr 08 07:41:39.564639 2026] [:error] [pid 47627:tid 47723] [client 144.48.38.20:34972] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Wed Apr 08 07:41:39.837853 2026] [:error] [pid 47627:tid 47700] [client 144.48.38.20:34972] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Wed Apr 08 07:41:39.924597 2026] [:error] [pid 47627:tid 47706] [client 144.48.38.20:34972] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adWWM3Oljf1Quv_kDjnPMwAAAIc"]
[Wed Apr 08 07:41:40.097213 2026] [:error] [pid 16630:tid 16640] [client 144.48.38.20:34974] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "adWWNCjfVAkPG-jgJEoBvwAAAQg"]
[Wed Apr 08 07:41:40.273733 2026] [:error] [pid 47732:tid 47740] [client 144.48.38.20:34976] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Wed Apr 08 07:41:40.360722 2026] [:error] [pid 47732:tid 47737] [client 144.48.38.20:34976] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "adWWNIm4N5QW9Mh7G12GjQAAAMM"]
[Wed Apr 08 07:41:40.627072 2026] [:error] [pid 16630:tid 16633] [client 144.48.38.20:34978] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Wed Apr 08 07:41:40.713916 2026] [:error] [pid 16630:tid 16655] [client 144.48.38.20:34978] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adWWNCjfVAkPG-jgJEoBwgAAARc"]
[Wed Apr 08 07:41:40.893387 2026] [:error] [pid 47625:tid 47648] [client 144.48.38.20:34994] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adWWNCVuHyNWzZlE8PAdoQAAAA4"]
[Wed Apr 08 07:41:41.432140 2026] [:error] [pid 47625:tid 47640] [client 144.48.38.20:35010] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adWWNSVuHyNWzZlE8PAdpwAAAAY"]
[Wed Apr 08 07:41:41.606059 2026] [:error] [pid 47625:tid 47653] [client 144.48.38.20:35014] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "adWWNSVuHyNWzZlE8PAdqAAAABM"]
[Wed Apr 08 07:41:42.053902 2026] [:error] [pid 47627:tid 47721] [client 144.48.38.20:35022] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Wed Apr 08 07:41:42.231416 2026] [:error] [pid 47627:tid 47699] [client 144.48.38.20:35022] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "adWWNnOljf1Quv_kDjnPPQAAAIA"]
[Wed Apr 08 07:41:42.502000 2026] [:error] [pid 16630:tid 16654] [client 144.48.38.20:35024] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Wed Apr 08 07:41:42.680650 2026] [:error] [pid 16630:tid 16650] [client 144.48.38.20:35024] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/function.php"] [unique_id "adWWNijfVAkPG-jgJEoBzAAAARI"]
[Wed Apr 08 07:41:42.854164 2026] [:error] [pid 47627:tid 47706] [client 144.48.38.20:35038] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "adWWNnOljf1Quv_kDjnPQAAAAIc"]
[Wed Apr 08 07:41:43.123641 2026] [:error] [pid 47627:tid 47703] [client 144.48.38.20:35044] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Wed Apr 08 07:41:43.212973 2026] [:error] [pid 47627:tid 47707] [client 144.48.38.20:35044] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "adWWN3Oljf1Quv_kDjnPQwAAAIg"]
[Wed Apr 08 07:41:43.385218 2026] [:error] [pid 16630:tid 16636] [client 144.48.38.20:35048] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adWWNyjfVAkPG-jgJEoBzgAAAQQ"]
[Wed Apr 08 07:41:43.757517 2026] [:error] [pid 47627:tid 47711] [client 144.48.38.20:35054] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Wed Apr 08 07:41:43.847124 2026] [:error] [pid 47627:tid 47720] [client 144.48.38.20:35054] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Wed Apr 08 07:41:44.027177 2026] [:error] [pid 47627:tid 47721] [client 144.48.38.20:35054] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Wed Apr 08 07:41:44.207182 2026] [:error] [pid 47627:tid 47710] [client 144.48.38.20:35054] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "adWWOHOljf1Quv_kDjnPTQAAAIs"]
[Wed Apr 08 07:41:44.381121 2026] [:error] [pid 16630:tid 16638] [client 144.48.38.20:35056] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "adWWOCjfVAkPG-jgJEoB0wAAAQY"]
[Wed Apr 08 07:41:44.828428 2026] [:error] [pid 16630:tid 16634] [client 144.48.38.20:35068] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Wed Apr 08 07:41:44.915738 2026] [:error] [pid 16630:tid 16643] [client 144.48.38.20:35068] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/index.php"] [unique_id "adWWOCjfVAkPG-jgJEoB2AAAAQs"]
[Wed Apr 08 07:41:45.088217 2026] [:error] [pid 47625:tid 47658] [client 144.48.38.20:35082] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "adWWOSVuHyNWzZlE8PAdqwAAABg"]
[Wed Apr 08 07:41:45.261784 2026] [:error] [pid 16630:tid 16644] [client 144.48.38.20:35092] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "adWWOSjfVAkPG-jgJEoB2gAAAQw"]
[Wed Apr 08 07:41:45.803006 2026] [:error] [pid 16630:tid 16645] [client 144.48.38.20:35104] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Wed Apr 08 07:41:45.890467 2026] [:error] [pid 16630:tid 16650] [client 144.48.38.20:35104] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "adWWOSjfVAkPG-jgJEoB4wAAARI"]
[Wed Apr 08 07:41:46.158433 2026] [:error] [pid 47732:tid 47742] [client 144.48.38.20:52692] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "adWWOom4N5QW9Mh7G12GngAAAMg"]
[Wed Apr 08 07:41:46.336406 2026] [:error] [pid 47732:tid 47741] [client 144.48.38.20:52698] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Wed Apr 08 07:41:46.428007 2026] [:error] [pid 47732:tid 47738] [client 144.48.38.20:52698] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Wed Apr 08 07:41:46.618119 2026] [:error] [pid 47732:tid 47736] [client 144.48.38.20:52698] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Wed Apr 08 07:41:46.980395 2026] [:error] [pid 47732:tid 47746] [client 144.48.38.20:52698] [client 144.48.38.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.48.38.20, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js/wp-login.php"] [unique_id "adWWOom4N5QW9Mh7G12GqAAAAMw"]
[Wed Apr 08 07:41:47.165326 2026] [:error] [pid 47732:tid 47748] [client 144.48.38.20:52698] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Wed Apr 08 07:41:47.259122 2026] [:error] [pid 47732:tid 47754] [client 144.48.38.20:52698] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Wed Apr 08 07:41:47.365157 2026] [:error] [pid 47732:tid 47757] [client 144.48.38.20:52698] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Wed Apr 08 07:41:47.544921 2026] [:error] [pid 47732:tid 47739] [client 144.48.38.20:52698] [client 144.48.38.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.48.38.20, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "adWWO4m4N5QW9Mh7G12GrgAAAMU"]
[Wed Apr 08 07:41:47.820043 2026] [:error] [pid 47732:tid 47753] [client 144.48.38.20:52698] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Wed Apr 08 07:41:47.912457 2026] [:error] [pid 47732:tid 47744] [client 144.48.38.20:52698] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Wed Apr 08 07:41:48.105100 2026] [:error] [pid 47732:tid 47747] [client 144.48.38.20:52698] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Wed Apr 08 07:41:48.290833 2026] [:error] [pid 47732:tid 47746] [client 144.48.38.20:52698] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Wed Apr 08 07:41:48.563949 2026] [:error] [pid 47732:tid 47750] [client 144.48.38.20:52698] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Wed Apr 08 07:41:49.213823 2026] [:error] [pid 47732:tid 47742] [client 144.48.38.20:52698] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Wed Apr 08 07:41:49.305197 2026] [:error] [pid 47732:tid 47756] [client 144.48.38.20:52698] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Wed Apr 08 07:41:49.765196 2026] [:error] [pid 47732:tid 47745] [client 144.48.38.20:52698] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Wed Apr 08 07:41:49.949825 2026] [:error] [pid 47732:tid 47748] [client 144.48.38.20:52698] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adWWPYm4N5QW9Mh7G12G0QAAAM4"]
[Wed Apr 08 07:41:50.317934 2026] [:error] [pid 16630:tid 16653] [client 144.48.38.20:52702] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Wed Apr 08 07:41:50.405371 2026] [:error] [pid 16630:tid 16656] [client 144.48.38.20:52702] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "adWWPijfVAkPG-jgJEoB9gAAARg"]
[Wed Apr 08 07:41:50.671847 2026] [:error] [pid 16630:tid 16646] [client 144.48.38.20:52704] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Wed Apr 08 07:41:50.760528 2026] [:error] [pid 16630:tid 16638] [client 144.48.38.20:52704] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "adWWPijfVAkPG-jgJEoB-gAAAQY"]
[Wed Apr 08 07:41:51.118815 2026] [:error] [pid 47732:tid 47734] [client 144.48.38.20:52720] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Wed Apr 08 07:41:51.298977 2026] [:error] [pid 47732:tid 47749] [client 144.48.38.20:52720] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Wed Apr 08 07:41:51.478843 2026] [:error] [pid 47732:tid 47742] [client 144.48.38.20:52720] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Wed Apr 08 07:41:51.571219 2026] [:error] [pid 47732:tid 47741] [client 144.48.38.20:52720] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Wed Apr 08 07:41:51.749165 2026] [:error] [pid 47732:tid 47755] [client 144.48.38.20:52720] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "adWWP4m4N5QW9Mh7G12G3QAAANU"]
[Wed Apr 08 07:41:51.926370 2026] [:error] [pid 47732:tid 47752] [client 144.48.38.20:52722] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Wed Apr 08 07:41:52.019882 2026] [:error] [pid 47732:tid 47747] [client 144.48.38.20:52722] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Wed Apr 08 07:41:52.106975 2026] [:error] [pid 47732:tid 47750] [client 144.48.38.20:52722] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "adWWQIm4N5QW9Mh7G12G4wAAANA"]
[Wed Apr 08 07:41:52.373786 2026] [:error] [pid 47626:tid 47688] [client 144.48.38.20:52728] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adWWQKjWI8TWtHx2sdYp_AAAAFQ"]
[Wed Apr 08 07:41:52.649186 2026] [:error] [pid 47627:tid 47705] [client 144.48.38.20:52744] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Wed Apr 08 07:41:52.925489 2026] [:error] [pid 47627:tid 47704] [client 144.48.38.20:52744] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Wed Apr 08 07:41:53.014684 2026] [:error] [pid 47627:tid 47721] [client 144.48.38.20:52744] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Wed Apr 08 07:41:53.101872 2026] [:error] [pid 47627:tid 47710] [client 144.48.38.20:52744] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "adWWQXOljf1Quv_kDjnPWQAAAIs"]
[Wed Apr 08 07:41:53.275107 2026] [:error] [pid 47732:tid 47742] [client 144.48.38.20:52760] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "adWWQYm4N5QW9Mh7G12G6AAAAMg"]
[Wed Apr 08 07:41:53.908379 2026] [:error] [pid 47626:tid 47675] [client 144.48.38.20:52772] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Wed Apr 08 07:41:54.089167 2026] [:error] [pid 47626:tid 47686] [client 144.48.38.20:52772] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "adWWQqjWI8TWtHx2sdYqCwAAAFI"]
[Wed Apr 08 07:41:54.355027 2026] [:error] [pid 47732:tid 47754] [client 144.48.38.20:52776] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "adWWQom4N5QW9Mh7G12G7QAAANQ"]
[Wed Apr 08 07:41:54.622002 2026] [:error] [pid 47732:tid 47756] [client 144.48.38.20:52780] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Wed Apr 08 07:41:54.711816 2026] [:error] [pid 47732:tid 47758] [client 144.48.38.20:52780] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Wed Apr 08 07:41:54.798597 2026] [:error] [pid 47732:tid 47741] [client 144.48.38.20:52780] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "adWWQom4N5QW9Mh7G12G8wAAAMc"]
[Wed Apr 08 07:41:55.065971 2026] [:error] [pid 47625:tid 47644] [client 144.48.38.20:52792] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Wed Apr 08 07:41:55.156698 2026] [:error] [pid 47625:tid 47635] [client 144.48.38.20:52792] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Wed Apr 08 07:41:55.336821 2026] [:error] [pid 47625:tid 47640] [client 144.48.38.20:52792] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Wed Apr 08 07:41:55.606048 2026] [:error] [pid 47625:tid 47653] [client 144.48.38.20:52792] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "adWWQyVuHyNWzZlE8PAdswAAABM"]
[Wed Apr 08 07:41:55.781727 2026] [:error] [pid 47732:tid 47747] [client 144.48.38.20:38684] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Wed Apr 08 07:41:56.049310 2026] [:error] [pid 47732:tid 47735] [client 144.48.38.20:38684] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "adWWRIm4N5QW9Mh7G12G_AAAAME"]
[Wed Apr 08 07:41:56.317710 2026] [:error] [pid 47627:tid 47716] [client 144.48.38.20:38694] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Wed Apr 08 07:41:56.589799 2026] [:error] [pid 47627:tid 47722] [client 144.48.38.20:38694] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Wed Apr 08 07:41:56.683846 2026] [:error] [pid 47627:tid 47707] [client 144.48.38.20:38694] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Wed Apr 08 07:41:56.862378 2026] [:error] [pid 47627:tid 47703] [client 144.48.38.20:38694] [client 144.48.38.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.48.38.20, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "adWWRHOljf1Quv_kDjnPYgAAAIQ"]
[Wed Apr 08 07:41:57.321432 2026] [:error] [pid 47627:tid 47709] [client 144.48.38.20:38694] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "adWWRXOljf1Quv_kDjnPaAAAAIo"]
[Wed Apr 08 07:41:57.498316 2026] [:error] [pid 47626:tid 47685] [client 144.48.38.20:38706] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Wed Apr 08 07:41:57.589811 2026] [:error] [pid 47626:tid 47680] [client 144.48.38.20:38706] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "adWWRajWI8TWtHx2sdYqFAAAAEw"]
[Wed Apr 08 07:41:57.773121 2026] [:error] [pid 47627:tid 47704] [client 144.48.38.20:38716] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Wed Apr 08 07:41:57.954390 2026] [:error] [pid 47627:tid 47712] [client 144.48.38.20:38716] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Wed Apr 08 07:41:58.132048 2026] [:error] [pid 47627:tid 47717] [client 144.48.38.20:38716] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "adWWRnOljf1Quv_kDjnPbQAAAJI"]
[Wed Apr 08 07:41:58.404748 2026] [:error] [pid 47627:tid 47700] [client 144.48.38.20:38720] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Wed Apr 08 07:41:58.494885 2026] [:error] [pid 47627:tid 47706] [client 144.48.38.20:38720] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Wed Apr 08 07:41:58.588036 2026] [:error] [pid 47627:tid 47722] [client 144.48.38.20:38720] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "adWWRnOljf1Quv_kDjnPcgAAAJc"]
[Wed Apr 08 07:41:58.760855 2026] [:error] [pid 47732:tid 47743] [client 144.48.38.20:38722] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "adWWRom4N5QW9Mh7G12HAQAAAMk"]
[Wed Apr 08 07:41:58.936525 2026] [:error] [pid 47625:tid 47638] [client 144.48.38.20:38736] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Wed Apr 08 07:41:59.028648 2026] [:error] [pid 47625:tid 47637] [client 144.48.38.20:38736] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Wed Apr 08 07:41:59.207416 2026] [:error] [pid 47625:tid 47648] [client 144.48.38.20:38736] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "adWWRyVuHyNWzZlE8PAduwAAAA4"]
[Wed Apr 08 07:41:59.388373 2026] [:error] [pid 47732:tid 47755] [client 144.48.38.20:38738] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Wed Apr 08 07:41:59.570094 2026] [:error] [pid 47732:tid 47752] [client 144.48.38.20:38738] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Wed Apr 08 07:41:59.658098 2026] [:error] [pid 47732:tid 47753] [client 144.48.38.20:38738] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "adWWR4m4N5QW9Mh7G12HBgAAANM"]
[Wed Apr 08 07:41:59.920850 2026] [:error] [pid 47732:tid 47744] [client 144.48.38.20:38740] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/db.php"] [unique_id "adWWR4m4N5QW9Mh7G12HCAAAAMo"]
[Wed Apr 08 07:42:00.094109 2026] [:error] [pid 47732:tid 47740] [client 144.48.38.20:38744] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "adWWSIm4N5QW9Mh7G12HCwAAAMY"]
[Wed Apr 08 07:42:00.270184 2026] [:error] [pid 47625:tid 47656] [client 144.48.38.20:38754] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "adWWSCVuHyNWzZlE8PAdvQAAABY"]
[Wed Apr 08 07:42:00.446024 2026] [:error] [pid 47625:tid 47639] [client 144.48.38.20:38762] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "adWWSCVuHyNWzZlE8PAdvgAAAAU"]
[Wed Apr 08 07:42:00.624323 2026] [:error] [pid 47732:tid 47734] [client 144.48.38.20:38772] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "adWWSIm4N5QW9Mh7G12HDAAAAMA"]
[Wed Apr 08 07:42:00.797722 2026] [:error] [pid 47732:tid 47751] [client 144.48.38.20:38788] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "adWWSIm4N5QW9Mh7G12HDQAAANE"]
[Wed Apr 08 07:42:01.156709 2026] [:error] [pid 16630:tid 16638] [client 144.48.38.20:38792] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "adWWSSjfVAkPG-jgJEoCAQAAAQY"]
[Wed Apr 08 07:42:01.333766 2026] [:error] [pid 47625:tid 47636] [client 144.48.38.20:38796] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "adWWSSVuHyNWzZlE8PAdwAAAAAI"]
[Wed Apr 08 07:42:01.511581 2026] [:error] [pid 47626:tid 47681] [client 144.48.38.20:38798] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "adWWSajWI8TWtHx2sdYqHgAAAE0"]
[Wed Apr 08 07:42:01.690898 2026] [:error] [pid 47625:tid 47642] [client 144.48.38.20:38802] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "adWWSSVuHyNWzZlE8PAdwQAAAAg"]
[Wed Apr 08 07:42:01.869370 2026] [:error] [pid 47626:tid 47685] [client 144.48.38.20:38818] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "adWWSajWI8TWtHx2sdYqIAAAAFE"]
[Wed Apr 08 07:42:02.044026 2026] [:error] [pid 47732:tid 47744] [client 144.48.38.20:38834] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Wed Apr 08 07:42:02.311780 2026] [:error] [pid 47732:tid 47740] [client 144.48.38.20:38834] [client 144.48.38.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.48.38.20, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "adWWSom4N5QW9Mh7G12HFwAAAMY"]
[Wed Apr 08 07:42:04.148046 2026] [:error] [pid 47732:tid 47739] [client 144.48.38.20:38834] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "adWWTIm4N5QW9Mh7G12HIwAAAMU"]
[Wed Apr 08 07:42:04.519024 2026] [:error] [pid 47627:tid 47712] [client 144.48.38.20:38846] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Wed Apr 08 07:42:04.609775 2026] [:error] [pid 47627:tid 47723] [client 144.48.38.20:38846] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Wed Apr 08 07:42:04.972981 2026] [:error] [pid 47627:tid 47699] [client 144.48.38.20:38846] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Wed Apr 08 07:42:05.063044 2026] [:error] [pid 47627:tid 47706] [client 144.48.38.20:38846] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Wed Apr 08 07:42:05.427155 2026] [:error] [pid 47627:tid 47718] [client 144.48.38.20:38846] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Wed Apr 08 07:42:05.518418 2026] [:error] [pid 47627:tid 47703] [client 144.48.38.20:38846] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Wed Apr 08 07:42:05.609028 2026] [:error] [pid 47627:tid 47713] [client 144.48.38.20:38846] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Wed Apr 08 07:42:05.698894 2026] [:error] [pid 47627:tid 47719] [client 144.48.38.20:38846] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Wed Apr 08 07:42:05.786095 2026] [:error] [pid 47627:tid 47702] [client 144.48.38.20:38846] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "adWWTXOljf1Quv_kDjnPiAAAAIM"]
[Wed Apr 08 07:42:05.959503 2026] [:error] [pid 47625:tid 47637] [client 144.48.38.20:48194] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "adWWTSVuHyNWzZlE8PAdxgAAAAM"]
[Wed Apr 08 07:42:06.131620 2026] [:error] [pid 47627:tid 47723] [client 144.48.38.20:48210] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "adWWTnOljf1Quv_kDjnPigAAAJg"]
[Wed Apr 08 07:42:06.398569 2026] [:error] [pid 47625:tid 47657] [client 144.48.38.20:48222] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Wed Apr 08 07:42:06.488937 2026] [:error] [pid 47625:tid 47639] [client 144.48.38.20:48222] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Wed Apr 08 07:42:06.671022 2026] [:error] [pid 47625:tid 47643] [client 144.48.38.20:48222] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Wed Apr 08 07:42:06.852018 2026] [:error] [pid 47625:tid 47642] [client 144.48.38.20:48222] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "adWWTiVuHyNWzZlE8PAd0AAAAAg"]
[Wed Apr 08 07:42:07.024761 2026] [:error] [pid 47627:tid 47699] [client 144.48.38.20:48226] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "adWWT3Oljf1Quv_kDjnPjAAAAIA"]
[Wed Apr 08 07:42:07.196154 2026] [:error] [pid 16630:tid 16646] [client 144.48.38.20:48236] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "adWWTyjfVAkPG-jgJEoCDQAAAQ4"]
[Wed Apr 08 07:42:07.748782 2026] [:error] [pid 47627:tid 47719] [client 144.48.38.20:48240] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "adWWT3Oljf1Quv_kDjnPkwAAAJQ"]
[Wed Apr 08 07:42:08.016710 2026] [:error] [pid 47625:tid 47647] [client 144.48.38.20:48252] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "adWWUCVuHyNWzZlE8PAd0gAAAA0"]
[Wed Apr 08 07:42:08.372731 2026] [:error] [pid 16630:tid 16655] [client 144.48.38.20:48268] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "adWWUCjfVAkPG-jgJEoCFgAAARc"]
[Wed Apr 08 07:42:09.542104 2026] [:error] [pid 16630:tid 16635] [client 144.48.38.20:48274] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "adWWUSjfVAkPG-jgJEoCJwAAAQM"]
[Wed Apr 08 07:42:09.717423 2026] [:error] [pid 47627:tid 47721] [client 144.48.38.20:48286] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Wed Apr 08 07:42:09.804965 2026] [:error] [pid 47627:tid 47712] [client 144.48.38.20:48286] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/about.php"] [unique_id "adWWUXOljf1Quv_kDjnPlgAAAI0"]
[Wed Apr 08 07:42:10.162433 2026] [:error] [pid 47732:tid 47750] [client 144.48.38.20:48296] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Wed Apr 08 07:42:10.440935 2026] [:error] [pid 47732:tid 47747] [client 144.48.38.20:48296] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Wed Apr 08 07:42:10.528803 2026] [:error] [pid 47732:tid 47735] [client 144.48.38.20:48296] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "adWWUom4N5QW9Mh7G12HLAAAAME"]
[Wed Apr 08 07:42:10.884232 2026] [:error] [pid 47626:tid 47679] [client 144.48.38.20:48300] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "adWWUqjWI8TWtHx2sdYqNgAAAEs"]
[Wed Apr 08 07:42:11.421633 2026] [:error] [pid 47625:tid 47634] [client 144.48.38.20:48308] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "adWWUyVuHyNWzZlE8PAd2gAAAAA"]
[Wed Apr 08 07:42:11.959910 2026] [:error] [pid 47625:tid 47652] [client 144.48.38.20:48318] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "adWWUyVuHyNWzZlE8PAd3wAAABI"]
[Wed Apr 08 07:42:12.227485 2026] [:error] [pid 47625:tid 47649] [client 144.48.38.20:48332] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Wed Apr 08 07:42:12.314508 2026] [:error] [pid 47625:tid 47638] [client 144.48.38.20:48332] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "adWWVCVuHyNWzZlE8PAd4gAAAAQ"]
[Wed Apr 08 07:42:12.487444 2026] [:error] [pid 47625:tid 47648] [client 144.48.38.20:48338] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "adWWVCVuHyNWzZlE8PAd5AAAAA4"]
[Wed Apr 08 07:42:13.118907 2026] [:error] [pid 47732:tid 47736] [client 144.48.38.20:48340] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "adWWVYm4N5QW9Mh7G12HNgAAAMI"]
[Wed Apr 08 07:42:13.296125 2026] [:error] [pid 47732:tid 47739] [client 144.48.38.20:48356] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Wed Apr 08 07:42:13.658393 2026] [:error] [pid 47732:tid 47754] [client 144.48.38.20:48356] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Wed Apr 08 07:42:13.745355 2026] [:error] [pid 47732:tid 47742] [client 144.48.38.20:48356] [client 144.48.38.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "adWWVYm4N5QW9Mh7G12HPQAAAMg"]
[Wed Apr 08 07:42:14.011557 2026] [:error] [pid 47732:tid 47745] [client 144.48.38.20:48364] [client 144.48.38.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php"] [unique_id "adWWVom4N5QW9Mh7G12HPwAAAMs"]
[Wed Apr 08 07:42:14.184635 2026] [:error] [pid 47627:tid 47702] [client 144.48.38.20:48368] [client 144.48.38.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php"] [unique_id "adWWVnOljf1Quv_kDjnPoAAAAIM"]
[Wed Apr 08 07:42:14.357990 2026] [:error] [pid 47625:tid 47636] [client 144.48.38.20:48374] [client 144.48.38.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php"] [unique_id "adWWViVuHyNWzZlE8PAd6AAAAAI"]
[Wed Apr 08 07:42:14.532082 2026] [:error] [pid 47627:tid 47717] [client 144.48.38.20:48376] [client 144.48.38.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php"] [unique_id "adWWVnOljf1Quv_kDjnPowAAAJI"]
[Wed Apr 08 07:42:14.704369 2026] [:error] [pid 47627:tid 47721] [client 144.48.38.20:48382] [client 144.48.38.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php"] [unique_id "adWWVnOljf1Quv_kDjnPpAAAAJY"]
[Wed Apr 08 07:42:17.236847 2026] [:error] [pid 47732:tid 47750] [client 144.48.38.20:48392] [client 144.48.38.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/"] [unique_id "adWWWYm4N5QW9Mh7G12HZAAAANA"]
[Wed Apr 08 07:42:17.410640 2026] [:error] [pid 47626:tid 47679] [client 144.48.38.20:60548] [client 144.48.38.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/"] [unique_id "adWWWajWI8TWtHx2sdYqRQAAAEs"]
[Wed Apr 08 07:42:17.587208 2026] [:error] [pid 47732:tid 47749] [client 144.48.38.20:60554] [client 144.48.38.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/"] [unique_id "adWWWYm4N5QW9Mh7G12HZgAAAM8"]
[Wed Apr 08 07:42:17.760996 2026] [:error] [pid 47732:tid 47734] [client 144.48.38.20:60570] [client 144.48.38.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/"] [unique_id "adWWWYm4N5QW9Mh7G12HZwAAAMA"]
[Wed Apr 08 07:42:17.932918 2026] [:error] [pid 47626:tid 47671] [client 144.48.38.20:60574] [client 144.48.38.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/"] [unique_id "adWWWajWI8TWtHx2sdYqRwAAAEM"]
[Wed Apr 08 10:03:52.522053 2026] [:error] [pid 47625:tid 47642] [client 20.215.49.238:41723] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Wed Apr 08 10:03:52.780416 2026] [:error] [pid 47625:tid 47639] [client 20.215.49.238:41723] File does not exist: /usr/local/apache/htdocs/suspended-page/bogles.php
[Wed Apr 08 10:03:53.300972 2026] [:error] [pid 47625:tid 47635] [client 20.215.49.238:41723] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Wed Apr 08 10:03:53.559115 2026] [:error] [pid 47625:tid 47640] [client 20.215.49.238:41723] File does not exist: /usr/local/apache/htdocs/suspended-page/co.php
[Wed Apr 08 10:03:53.819399 2026] [:error] [pid 47625:tid 47644] [client 20.215.49.238:41723] File does not exist: /usr/local/apache/htdocs/suspended-page/database.php
[Wed Apr 08 10:03:54.338368 2026] [:error] [pid 47625:tid 47656] [client 20.215.49.238:41723] File does not exist: /usr/local/apache/htdocs/suspended-page/x123.php
[Wed Apr 08 10:03:54.619165 2026] [:error] [pid 47625:tid 47643] [client 20.215.49.238:41723] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Apr 08 20:20:46.721669 2026] [:error] [pid 64066:tid 64083] [client 91.230.225.19:32331] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Wed Apr 08 20:20:46.997187 2026] [:error] [pid 64066:tid 64077] [client 91.230.225.19:32331] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Wed Apr 08 20:20:47.292018 2026] [:error] [pid 64066:tid 64074] [client 91.230.225.19:32331] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Wed Apr 08 20:20:47.633083 2026] [:error] [pid 64066:tid 64069] [client 91.230.225.19:32331] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Wed Apr 08 20:20:47.995421 2026] [:error] [pid 64066:tid 64091] [client 91.230.225.19:32331] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Wed Apr 08 20:20:48.292148 2026] [:error] [pid 64066:tid 64080] [client 91.230.225.19:32331] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Apr 08 20:20:48.579344 2026] [:error] [pid 64066:tid 64076] [client 91.230.225.19:32331] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Apr 08 20:20:48.944006 2026] [:error] [pid 64066:tid 64082] [client 91.230.225.19:32331] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Wed Apr 08 20:20:49.643877 2026] [:error] [pid 64066:tid 64086] [client 91.230.225.19:32331] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Wed Apr 08 20:20:50.128075 2026] [:error] [pid 64066:tid 64088] [client 91.230.225.19:32331] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Wed Apr 08 20:20:50.402958 2026] [:error] [pid 64066:tid 64083] [client 91.230.225.19:32331] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Apr 08 20:20:50.699426 2026] [:error] [pid 64066:tid 64074] [client 91.230.225.19:32331] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Wed Apr 08 20:20:51.395147 2026] [:error] [pid 64066:tid 64074] [client 91.230.225.19:32331] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Wed Apr 08 20:20:51.760623 2026] [:error] [pid 64066:tid 64080] [client 91.230.225.19:32331] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Wed Apr 08 20:20:52.132212 2026] [:error] [pid 64066:tid 64082] [client 91.230.225.19:32331] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Wed Apr 08 20:20:52.474387 2026] [:error] [pid 64066:tid 64075] [client 91.230.225.19:32331] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Wed Apr 08 20:20:52.814931 2026] [:error] [pid 64066:tid 64073] [client 91.230.225.19:32331] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Wed Apr 08 20:20:53.102020 2026] [:error] [pid 64066:tid 64081] [client 91.230.225.19:32331] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Wed Apr 08 20:20:57.698824 2026] [:error] [pid 64066:tid 64078] [client 91.230.225.19:32331] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adZIKVR3WucJgr2vZGY1tAAAAUk"]
[Wed Apr 08 20:20:59.848185 2026] [:error] [pid 12490:tid 12495] [client 91.230.225.10:55865] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adZIK21Fea4F4fbumr35zwAAAMM"]
[Wed Apr 08 20:21:01.875543 2026] [:error] [pid 7047:tid 7050] [client 91.230.225.201:54551] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Wed Apr 08 20:21:02.833403 2026] [:error] [pid 7047:tid 7064] [client 91.230.225.201:54551] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adZILuNh3oGO3pKiCzwDvwAAAY8"]
[Wed Apr 08 20:21:04.148079 2026] [:error] [pid 7047:tid 7068] [client 91.230.225.18:46931] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed Apr 08 20:21:04.441501 2026] [:error] [pid 7047:tid 7060] [client 91.230.225.18:46931] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adZIMONh3oGO3pKiCzwDzQAAAYs"]
[Wed Apr 08 20:21:05.376458 2026] [:error] [pid 7189:tid 7214] [client 91.230.225.12:32873] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Wed Apr 08 20:21:06.851594 2026] [:error] [pid 7189:tid 7211] [client 91.230.225.12:32873] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adZIMhaBqhBSu0L37lrI_gAAAdQ"]
[Wed Apr 08 20:21:08.175919 2026] [:error] [pid 7047:tid 7071] [client 91.230.225.203:51555] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adZINONh3oGO3pKiCzwD9AAAAZY"]
[Wed Apr 08 20:21:08.831495 2026] [:error] [pid 7047:tid 7071] [client 91.230.225.23:50385] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adZINONh3oGO3pKiCzwD_gAAAZY"]
[Wed Apr 08 20:21:09.419366 2026] [:error] [pid 12453:tid 12471] [client 91.230.225.206:44905] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adZINRjtW7S6XsLPvrQcYgAAAJA"]
[Wed Apr 08 20:21:09.987791 2026] [:error] [pid 12453:tid 12470] [client 91.230.225.206:25799] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adZINRjtW7S6XsLPvrQcYwAAAI8"]
[Wed Apr 08 20:21:10.577864 2026] [:error] [pid 12453:tid 12464] [client 185.92.25.113:41899] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adZINhjtW7S6XsLPvrQcaAAAAIk"]
[Wed Apr 08 20:21:11.512350 2026] [:error] [pid 7189:tid 7203] [client 185.192.71.30:23905] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adZINxaBqhBSu0L37lrJCAAAAcw"]
[Wed Apr 08 20:21:12.095853 2026] [:error] [pid 7047:tid 7068] [client 185.192.71.30:31539] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Wed Apr 08 20:21:12.821173 2026] [:error] [pid 7047:tid 7059] [client 185.192.71.30:31539] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "adZIOONh3oGO3pKiCzwEFwAAAYo"]
[Wed Apr 08 20:21:14.139571 2026] [:error] [pid 7047:tid 7058] [client 91.230.225.207:60081] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adZIOuNh3oGO3pKiCzwEIAAAAYk"]
[Wed Apr 08 20:21:15.004185 2026] [:error] [pid 7189:tid 7206] [client 91.230.225.11:54899] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adZIOxaBqhBSu0L37lrJCgAAAc8"]
[Wed Apr 08 20:21:15.622965 2026] [:error] [pid 12453:tid 12471] [client 91.230.225.202:46357] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Wed Apr 08 20:21:15.945363 2026] [:error] [pid 12453:tid 12475] [client 91.230.225.202:46357] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adZIOxjtW7S6XsLPvrQcdAAAAJQ"]
[Wed Apr 08 20:21:16.681788 2026] [:error] [pid 7047:tid 7063] [client 185.192.71.33:23265] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Wed Apr 08 20:21:17.658321 2026] [:error] [pid 7047:tid 7061] [client 185.192.71.33:23265] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Wed Apr 08 20:21:18.591873 2026] [:error] [pid 7047:tid 7067] [client 185.192.71.33:23265] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adZIPuNh3oGO3pKiCzwENgAAAZI"]
[Wed Apr 08 20:21:19.174175 2026] [:error] [pid 12453:tid 12459] [client 91.230.225.13:36723] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Wed Apr 08 20:21:19.524040 2026] [:error] [pid 12453:tid 12468] [client 91.230.225.13:36723] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adZIPxjtW7S6XsLPvrQcfQAAAI0"]
[Wed Apr 08 20:21:20.108865 2026] [:error] [pid 7047:tid 7071] [client 185.192.71.28:28523] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Wed Apr 08 20:21:20.732313 2026] [:error] [pid 7047:tid 7054] [client 185.192.71.28:28523] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adZIQONh3oGO3pKiCzwEPQAAAYU"]
[Wed Apr 08 20:21:21.568957 2026] [:error] [pid 7047:tid 7053] [client 91.230.225.203:58733] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adZIQeNh3oGO3pKiCzwERQAAAYQ"]
[Wed Apr 08 20:21:22.553403 2026] [:error] [pid 7047:tid 7056] [client 91.230.225.198:49407] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Wed Apr 08 20:21:22.855884 2026] [:error] [pid 7047:tid 7055] [client 91.230.225.198:49407] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Wed Apr 08 20:21:23.474353 2026] [:error] [pid 7047:tid 7066] [client 91.230.225.198:49407] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adZIQ-Nh3oGO3pKiCzwEZgAAAZE"]
[Wed Apr 08 20:21:24.310345 2026] [:error] [pid 7047:tid 7054] [client 185.92.25.114:48211] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adZIRONh3oGO3pKiCzwEdQAAAYU"]
[Wed Apr 08 20:21:25.198883 2026] [:error] [pid 12453:tid 12479] [client 185.92.25.113:36365] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adZIRRjtW7S6XsLPvrQcowAAAJg"]
[Wed Apr 08 20:21:25.753445 2026] [:error] [pid 7047:tid 7064] [client 185.192.71.35:27019] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adZIReNh3oGO3pKiCzwEiAAAAY8"]
[Wed Apr 08 20:21:26.378041 2026] [:error] [pid 7047:tid 7067] [client 91.230.225.22:37125] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adZIRuNh3oGO3pKiCzwEkAAAAZI"]
[Wed Apr 08 20:21:28.183410 2026] [:error] [pid 12453:tid 12475] [client 91.230.225.204:26625] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Wed Apr 08 20:21:28.485459 2026] [:error] [pid 12453:tid 12464] [client 91.230.225.204:26625] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adZISBjtW7S6XsLPvrQcswAAAIk"]
[Wed Apr 08 20:21:29.061985 2026] [:error] [pid 7047:tid 7063] [client 185.192.71.34:52115] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adZISeNh3oGO3pKiCzwEmwAAAY4"]
[Wed Apr 08 20:21:29.618035 2026] [:error] [pid 64066:tid 64087] [client 91.230.225.22:44681] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adZISVR3WucJgr2vZGY1zgAAAVI"]
[Wed Apr 08 20:21:30.814456 2026] [:error] [pid 7047:tid 7063] [client 185.192.71.27:40605] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Wed Apr 08 20:21:31.412058 2026] [:error] [pid 7047:tid 7049] [client 185.192.71.27:40605] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Wed Apr 08 20:21:32.576550 2026] [:error] [pid 7047:tid 7055] [client 185.192.71.27:40605] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adZITONh3oGO3pKiCzwErwAAAYY"]
[Wed Apr 08 20:21:34.488841 2026] [:error] [pid 7047:tid 7053] [client 91.230.225.18:20287] [client 91.230.225.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.18, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adZITuNh3oGO3pKiCzwEwQAAAYQ"]
[Wed Apr 08 20:21:34.782769 2026] [:error] [pid 7047:tid 7059] [client 91.230.225.18:20287] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Wed Apr 08 20:21:36.525725 2026] [:error] [pid 7047:tid 7054] [client 91.230.225.18:20287] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Wed Apr 08 20:21:36.802967 2026] [:error] [pid 7047:tid 7070] [client 91.230.225.18:20287] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Wed Apr 08 20:21:38.340720 2026] [:error] [pid 7047:tid 7053] [client 91.230.225.18:20287] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adZIUuNh3oGO3pKiCzwE0QAAAYQ"]
[Wed Apr 08 20:21:39.186918 2026] [:error] [pid 7189:tid 7207] [client 91.230.225.201:57949] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Wed Apr 08 20:21:39.462642 2026] [:error] [pid 7189:tid 7196] [client 91.230.225.201:57949] [client 91.230.225.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.201, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adZIUxaBqhBSu0L37lrJPQAAAcU"]
[Wed Apr 08 20:21:40.034483 2026] [:error] [pid 7189:tid 7204] [client 91.230.225.201:57949] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/item.php"] [unique_id "adZIVBaBqhBSu0L37lrJQAAAAc0"]
[Wed Apr 08 20:21:42.208824 2026] [:error] [pid 7189:tid 7211] [client 185.192.71.29:58777] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Wed Apr 08 20:21:42.772933 2026] [:error] [pid 7189:tid 7197] [client 185.192.71.29:58777] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Wed Apr 08 20:21:43.438959 2026] [:error] [pid 7189:tid 7195] [client 185.192.71.29:58777] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adZIVxaBqhBSu0L37lrJWgAAAcQ"]
[Wed Apr 08 20:21:44.016319 2026] [:error] [pid 7189:tid 7207] [client 91.230.225.17:25991] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed Apr 08 20:21:44.924339 2026] [:error] [pid 7189:tid 7210] [client 91.230.225.17:25991] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Wed Apr 08 20:21:45.522765 2026] [:error] [pid 7189:tid 7192] [client 91.230.225.17:25991] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Wed Apr 08 20:21:46.172648 2026] [:error] [pid 7189:tid 7211] [client 91.230.225.17:25991] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Wed Apr 08 20:21:46.460430 2026] [:error] [pid 7189:tid 7207] [client 91.230.225.17:25991] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adZIWhaBqhBSu0L37lrJagAAAdA"]
[Wed Apr 08 20:21:47.154271 2026] [:error] [pid 7047:tid 7066] [client 91.230.225.23:48079] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Wed Apr 08 20:21:47.508388 2026] [:error] [pid 7047:tid 7059] [client 91.230.225.23:48079] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Wed Apr 08 20:21:47.828522 2026] [:error] [pid 7047:tid 7056] [client 91.230.225.23:48079] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adZIW-Nh3oGO3pKiCzwE7gAAAYc"]
[Wed Apr 08 20:21:49.982530 2026] [:error] [pid 7047:tid 7072] [client 185.192.71.38:20063] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Wed Apr 08 20:21:50.570107 2026] [:error] [pid 7047:tid 7070] [client 185.192.71.38:20063] [client 185.192.71.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.38, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adZIXuNh3oGO3pKiCzwE_QAAAZU"]
[Wed Apr 08 20:21:50.854523 2026] [:error] [pid 7047:tid 7053] [client 185.192.71.38:20063] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adZIXuNh3oGO3pKiCzwE_gAAAYQ"]
[Wed Apr 08 20:21:54.761366 2026] [:error] [pid 12453:tid 12466] [client 91.230.225.12:63919] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Wed Apr 08 20:21:56.535014 2026] [:error] [pid 12453:tid 12465] [client 91.230.225.12:63919] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Wed Apr 08 20:21:56.824758 2026] [:error] [pid 12453:tid 12472] [client 91.230.225.12:63919] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adZIZBjtW7S6XsLPvrQc-wAAAJE"]
[Wed Apr 08 20:21:57.434830 2026] [:error] [pid 7047:tid 7063] [client 91.230.225.199:53331] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Wed Apr 08 20:21:58.301666 2026] [:error] [pid 7047:tid 7054] [client 91.230.225.199:53331] [client 91.230.225.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.199, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adZIZuNh3oGO3pKiCzwFFwAAAYU"]
[Wed Apr 08 20:22:00.454067 2026] [:error] [pid 7047:tid 7062] [client 91.230.225.199:53331] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Wed Apr 08 20:22:01.096091 2026] [:error] [pid 7047:tid 7069] [client 91.230.225.199:53331] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Wed Apr 08 20:22:02.074837 2026] [:error] [pid 7047:tid 7055] [client 91.230.225.199:53331] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Wed Apr 08 20:22:03.461051 2026] [:error] [pid 7047:tid 7053] [client 91.230.225.199:53331] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adZIa-Nh3oGO3pKiCzwFHgAAAYQ"]
[Wed Apr 08 20:22:04.660992 2026] [:error] [pid 12386:tid 12433] [client 91.230.225.200:32635] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Wed Apr 08 20:22:06.374427 2026] [:error] [pid 12386:tid 12439] [client 91.230.225.200:32635] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adZIbhLhhLtqHi2gK7UUOgAAARc"]
[Wed Apr 08 20:22:09.404412 2026] [:error] [pid 12453:tid 12460] [client 91.230.225.206:37177] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Wed Apr 08 20:22:09.674991 2026] [:error] [pid 12453:tid 12458] [client 91.230.225.206:37177] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adZIcRjtW7S6XsLPvrQdDgAAAIM"]
[Wed Apr 08 20:22:11.586718 2026] [:error] [pid 7189:tid 7202] [client 185.192.71.36:21541] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Wed Apr 08 20:22:11.970898 2026] [:error] [pid 7189:tid 7210] [client 185.192.71.36:21541] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adZIcxaBqhBSu0L37lrJigAAAdM"]
[Wed Apr 08 20:22:12.528601 2026] [:error] [pid 7047:tid 7067] [client 91.230.225.24:55521] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adZIdONh3oGO3pKiCzwFJQAAAZI"]
[Wed Apr 08 20:22:13.152972 2026] [:error] [pid 7047:tid 7062] [client 185.192.71.34:58877] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Wed Apr 08 20:22:13.502124 2026] [:error] [pid 7047:tid 7052] [client 185.192.71.34:58877] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Wed Apr 08 20:22:14.695484 2026] [:error] [pid 7047:tid 7068] [client 185.192.71.34:58877] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adZIduNh3oGO3pKiCzwFQAAAAZM"]
[Wed Apr 08 20:22:15.683574 2026] [:error] [pid 12453:tid 12479] [client 185.192.71.34:60901] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adZIdxjtW7S6XsLPvrQdEgAAAJg"]
[Wed Apr 08 20:22:17.477394 2026] [:error] [pid 7047:tid 7057] [client 185.192.71.27:36445] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adZIeeNh3oGO3pKiCzwFWAAAAYg"]
[Wed Apr 08 20:22:18.496158 2026] [:error] [pid 12453:tid 12475] [client 91.230.225.204:61877] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Wed Apr 08 20:22:19.067540 2026] [:error] [pid 12453:tid 12476] [client 91.230.225.204:61877] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Wed Apr 08 20:22:19.350749 2026] [:error] [pid 12453:tid 12469] [client 91.230.225.204:61877] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adZIexjtW7S6XsLPvrQdIgAAAI4"]
[Wed Apr 08 20:22:19.906924 2026] [:error] [pid 12453:tid 12458] [client 91.230.225.199:37853] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Wed Apr 08 20:22:20.474551 2026] [:error] [pid 12453:tid 12467] [client 91.230.225.199:37853] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/click.php"] [unique_id "adZIfBjtW7S6XsLPvrQdKAAAAIw"]
[Wed Apr 08 20:22:21.903134 2026] [:error] [pid 7047:tid 7067] [client 185.192.71.38:53571] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adZIfeNh3oGO3pKiCzwFYAAAAZI"]
[Wed Apr 08 20:22:22.862408 2026] [:error] [pid 7047:tid 7057] [client 185.192.71.29:29061] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed Apr 08 20:22:23.765813 2026] [:error] [pid 7047:tid 7072] [client 185.192.71.29:29061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Wed Apr 08 20:22:24.330111 2026] [:error] [pid 7047:tid 7059] [client 185.192.71.29:29061] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Wed Apr 08 20:22:24.610617 2026] [:error] [pid 7047:tid 7055] [client 185.192.71.29:29061] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adZIgONh3oGO3pKiCzwFdAAAAYY"]
[Wed Apr 08 20:22:25.649458 2026] [:error] [pid 64066:tid 64069] [client 185.192.71.32:25201] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adZIgVR3WucJgr2vZGY2AQAAAUA"]
[Wed Apr 08 20:22:26.669953 2026] [:error] [pid 12385:tid 12393] [client 91.230.225.198:65307] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adZIgiAjtvRQEkLosq2afAAAAAQ"]
[Wed Apr 08 20:22:27.736881 2026] [:error] [pid 12386:tid 12438] [client 91.230.225.10:47329] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adZIgxLhhLtqHi2gK7UUSgAAARY"]
[Wed Apr 08 20:22:28.308009 2026] [:error] [pid 12453:tid 12476] [client 91.230.225.16:43351] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Wed Apr 08 20:22:28.594439 2026] [:error] [pid 12453:tid 12458] [client 91.230.225.16:43351] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adZIhBjtW7S6XsLPvrQdNQAAAIM"]
[Wed Apr 08 20:22:29.153543 2026] [:error] [pid 7047:tid 7057] [client 185.192.71.38:59615] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adZIheNh3oGO3pKiCzwFeQAAAYg"]
[Wed Apr 08 20:22:29.905819 2026] [:error] [pid 12385:tid 12405] [client 185.192.71.28:34301] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Wed Apr 08 20:22:30.596302 2026] [:error] [pid 12385:tid 12408] [client 185.192.71.28:34301] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adZIhiAjtvRQEkLosq2ahAAAABM"]
[Wed Apr 08 20:22:31.154584 2026] [:error] [pid 12453:tid 12471] [client 185.192.71.24:36367] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adZIhxjtW7S6XsLPvrQdPAAAAJA"]
[Wed Apr 08 20:22:31.705304 2026] [:error] [pid 12453:tid 12466] [client 91.230.225.202:25277] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adZIhxjtW7S6XsLPvrQdPQAAAIs"]
[Wed Apr 08 20:22:32.244858 2026] [:error] [pid 64066:tid 64069] [client 91.230.225.198:42591] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adZIiFR3WucJgr2vZGY2CQAAAUA"]
[Wed Apr 08 20:22:33.127267 2026] [:error] [pid 12490:tid 12507] [client 91.230.225.207:20277] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adZIiW1Fea4F4fbumr35_gAAAM8"]
[Wed Apr 08 20:22:34.292950 2026] [:error] [pid 12453:tid 12461] [client 91.230.225.196:49269] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adZIihjtW7S6XsLPvrQdTQAAAIY"]
[Wed Apr 08 20:22:34.857881 2026] [:error] [pid 12453:tid 12473] [client 185.192.71.37:31653] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Wed Apr 08 20:22:35.762268 2026] [:error] [pid 12453:tid 12469] [client 185.192.71.37:31653] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Wed Apr 08 20:22:36.044712 2026] [:error] [pid 12453:tid 12474] [client 185.192.71.37:31653] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adZIjBjtW7S6XsLPvrQdVwAAAJM"]
[Wed Apr 08 20:22:37.403887 2026] [:error] [pid 12453:tid 12466] [client 185.192.71.26:20211] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Wed Apr 08 20:22:37.707299 2026] [:error] [pid 12453:tid 12475] [client 185.192.71.26:20211] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Wed Apr 08 20:22:39.467522 2026] [:error] [pid 12453:tid 12475] [client 185.192.71.26:20211] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "adZIjxjtW7S6XsLPvrQdaQAAAJQ"]
[Wed Apr 08 20:22:41.188090 2026] [:error] [pid 12490:tid 12511] [client 91.230.225.15:38487] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adZIkW1Fea4F4fbumr36CgAAANM"]
[Wed Apr 08 20:22:41.881987 2026] [:error] [pid 7047:tid 7052] [client 185.192.71.28:53655] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adZIkeNh3oGO3pKiCzwFhgAAAYM"]
[Wed Apr 08 20:22:43.673391 2026] [:error] [pid 12453:tid 12456] [client 185.192.71.40:32423] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adZIkxjtW7S6XsLPvrQdlQAAAIE"]
[Wed Apr 08 20:22:44.888114 2026] [:error] [pid 12453:tid 12469] [client 185.192.71.29:20661] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Wed Apr 08 20:22:45.198478 2026] [:error] [pid 12453:tid 12464] [client 185.192.71.29:20661] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Wed Apr 08 20:22:45.496959 2026] [:error] [pid 12453:tid 12473] [client 185.192.71.29:20661] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Wed Apr 08 20:22:45.784492 2026] [:error] [pid 12453:tid 12471] [client 185.192.71.29:20661] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Wed Apr 08 20:22:47.235952 2026] [:error] [pid 12453:tid 12462] [client 185.192.71.29:20661] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "adZIlxjtW7S6XsLPvrQdrQAAAIc"]
[Wed Apr 08 20:22:48.376894 2026] [:error] [pid 64066:tid 64078] [client 91.230.225.206:49821] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "adZImFR3WucJgr2vZGY2FAAAAUk"]
[Wed Apr 08 20:22:49.157347 2026] [:error] [pid 64066:tid 64087] [client 185.92.25.114:35061] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "adZImVR3WucJgr2vZGY2GQAAAVI"]
[Wed Apr 08 20:22:50.079813 2026] [:error] [pid 7047:tid 7055] [client 185.192.71.25:22889] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "adZImuNh3oGO3pKiCzwFlQAAAYY"]
[Wed Apr 08 20:22:51.181842 2026] [:error] [pid 35642:tid 35645] [client 185.192.71.30:55217] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "adZImw-CqryxdEs5DN9VVAAAAEE"]
[Wed Apr 08 20:22:51.917791 2026] [:error] [pid 7189:tid 7208] [client 91.230.225.197:38837] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "adZImxaBqhBSu0L37lrJqgAAAdE"]
[Wed Apr 08 20:22:53.428119 2026] [:error] [pid 12453:tid 12465] [client 185.192.71.28:62027] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "adZInRjtW7S6XsLPvrQduQAAAIo"]
[Wed Apr 08 20:22:54.495822 2026] [:error] [pid 7047:tid 7064] [client 185.192.71.33:58889] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "adZInuNh3oGO3pKiCzwFpgAAAY8"]
[Wed Apr 08 20:22:55.042586 2026] [:error] [pid 7047:tid 7068] [client 91.230.225.17:35881] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "adZIn-Nh3oGO3pKiCzwFqgAAAZM"]
[Wed Apr 08 20:22:55.847378 2026] [:error] [pid 7047:tid 7055] [client 185.192.71.33:64735] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "adZIn-Nh3oGO3pKiCzwFsQAAAYY"]
[Wed Apr 08 20:22:56.999643 2026] [:error] [pid 12386:tid 12432] [client 185.192.71.37:59271] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "adZIoBLhhLtqHi2gK7UUVQAAARA"]
[Wed Apr 08 20:22:57.876811 2026] [:error] [pid 35642:tid 35649] [client 91.230.225.23:27491] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "adZIoQ-CqryxdEs5DN9VXgAAAEU"]
[Wed Apr 08 20:22:58.446933 2026] [:error] [pid 64066:tid 64078] [client 91.230.225.21:39801] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Wed Apr 08 20:22:59.008126 2026] [:error] [pid 64066:tid 64072] [client 91.230.225.21:39801] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "adZIo1R3WucJgr2vZGY2IgAAAUM"]
[Wed Apr 08 20:23:00.549791 2026] [:error] [pid 12453:tid 12473] [client 91.230.225.22:53805] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "adZIpBjtW7S6XsLPvrQdxwAAAJI"]
[Wed Apr 08 20:23:01.771362 2026] [:error] [pid 7189:tid 7196] [client 185.192.71.21:26245] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Wed Apr 08 20:23:03.198310 2026] [:error] [pid 7189:tid 7196] [client 185.192.71.21:26245] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "adZIpxaBqhBSu0L37lrJwAAAAcU"]
[Wed Apr 08 20:23:04.073527 2026] [:error] [pid 7047:tid 7072] [client 185.192.71.37:39545] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Wed Apr 08 20:23:04.847692 2026] [:error] [pid 7047:tid 7066] [client 185.192.71.37:39545] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Wed Apr 08 20:23:05.146165 2026] [:error] [pid 7047:tid 7058] [client 185.192.71.37:39545] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Wed Apr 08 20:23:05.440427 2026] [:error] [pid 7047:tid 7054] [client 185.192.71.37:39545] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "adZIqeNh3oGO3pKiCzwFxwAAAYU"]
[Wed Apr 08 20:23:06.020902 2026] [:error] [pid 12386:tid 12425] [client 91.230.225.12:42321] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Wed Apr 08 20:23:06.337755 2026] [:error] [pid 12386:tid 12424] [client 91.230.225.12:42321] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "adZIqhLhhLtqHi2gK7UUXgAAAQg"]
[Wed Apr 08 20:23:07.458841 2026] [:error] [pid 12453:tid 12468] [client 91.230.225.14:47809] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Apr 08 20:23:07.747060 2026] [:error] [pid 12453:tid 12462] [client 91.230.225.14:47809] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Wed Apr 08 20:23:08.052603 2026] [:error] [pid 12453:tid 12459] [client 91.230.225.14:47809] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Wed Apr 08 20:23:09.492402 2026] [:error] [pid 12453:tid 12465] [client 91.230.225.14:47809] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Wed Apr 08 20:23:09.787455 2026] [:error] [pid 12453:tid 12469] [client 91.230.225.14:47809] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Wed Apr 08 20:23:10.377730 2026] [:error] [pid 12453:tid 12468] [client 91.230.225.14:47809] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Wed Apr 08 20:23:11.213986 2026] [:error] [pid 12453:tid 12473] [client 91.230.225.14:47809] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Wed Apr 08 20:23:11.489659 2026] [:error] [pid 12453:tid 12475] [client 91.230.225.14:47809] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adZIrxjtW7S6XsLPvrQd8wAAAJQ"]
[Wed Apr 08 20:23:12.051859 2026] [:error] [pid 7047:tid 7056] [client 185.192.71.27:35845] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "adZIsONh3oGO3pKiCzwF4AAAAYc"]
[Wed Apr 08 20:23:12.628350 2026] [:error] [pid 64066:tid 64071] [client 185.192.71.29:33707] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Wed Apr 08 20:23:13.621562 2026] [:error] [pid 64066:tid 64071] [client 185.192.71.29:33707] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "adZIsVR3WucJgr2vZGY2PAAAAUI"]
[Wed Apr 08 20:23:14.476989 2026] [:error] [pid 12386:tid 12432] [client 91.230.225.14:47995] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Wed Apr 08 20:23:14.792550 2026] [:error] [pid 12386:tid 12418] [client 91.230.225.14:47995] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adZIshLhhLtqHi2gK7UUYgAAAQI"]
[Wed Apr 08 20:23:15.361508 2026] [:error] [pid 12490:tid 12509] [client 91.230.225.195:43277] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adZIs21Fea4F4fbumr36NQAAANE"]
[Wed Apr 08 20:23:17.201680 2026] [:error] [pid 12490:tid 12505] [client 185.192.71.27:50785] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adZItW1Fea4F4fbumr36PQAAAM0"]
[Wed Apr 08 20:23:17.768804 2026] [:error] [pid 7047:tid 7064] [client 91.230.225.197:62901] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "adZIteNh3oGO3pKiCzwF-gAAAY8"]
[Wed Apr 08 20:23:19.230075 2026] [:error] [pid 12385:tid 12392] [client 91.230.225.203:56343] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Wed Apr 08 20:23:19.877170 2026] [:error] [pid 12385:tid 12412] [client 91.230.225.203:56343] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "adZItyAjtvRQEkLosq2aswAAABc"]
[Wed Apr 08 20:23:20.746380 2026] [:error] [pid 7047:tid 7060] [client 91.230.225.199:25035] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Wed Apr 08 20:23:21.306077 2026] [:error] [pid 7047:tid 7061] [client 91.230.225.199:25035] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/function.php"] [unique_id "adZIueNh3oGO3pKiCzwGAgAAAYw"]
[Wed Apr 08 20:23:21.863703 2026] [:error] [pid 35642:tid 35659] [client 185.192.71.35:37195] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "adZIuQ-CqryxdEs5DN9VegAAAE8"]
[Wed Apr 08 20:23:22.799607 2026] [:error] [pid 12385:tid 12405] [client 91.230.225.199:36807] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Wed Apr 08 20:23:23.082044 2026] [:error] [pid 12385:tid 12406] [client 91.230.225.199:36807] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "adZIuyAjtvRQEkLosq2auQAAABE"]
[Wed Apr 08 20:23:23.657148 2026] [:error] [pid 35642:tid 35658] [client 185.192.71.32:36409] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adZIuw-CqryxdEs5DN9VfwAAAE4"]
[Wed Apr 08 20:23:24.936168 2026] [:error] [pid 7047:tid 7070] [client 91.230.225.23:46483] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Wed Apr 08 20:23:25.221744 2026] [:error] [pid 7047:tid 7054] [client 91.230.225.23:46483] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Wed Apr 08 20:23:25.925728 2026] [:error] [pid 7047:tid 7055] [client 91.230.225.23:46483] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Wed Apr 08 20:23:26.715194 2026] [:error] [pid 7047:tid 7059] [client 91.230.225.23:46483] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "adZIvuNh3oGO3pKiCzwGFgAAAYo"]
[Wed Apr 08 20:23:27.284858 2026] [:error] [pid 12386:tid 12424] [client 91.230.225.202:59451] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "adZIvxLhhLtqHi2gK7UUawAAAQg"]
[Wed Apr 08 20:23:28.926005 2026] [:error] [pid 7189:tid 7204] [client 91.230.225.18:54197] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Wed Apr 08 20:23:29.198325 2026] [:error] [pid 7189:tid 7193] [client 91.230.225.18:54197] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/index.php"] [unique_id "adZIwRaBqhBSu0L37lrJ3AAAAcI"]
[Wed Apr 08 20:23:29.767144 2026] [:error] [pid 7189:tid 7210] [client 91.230.225.24:21211] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "adZIwRaBqhBSu0L37lrJ4AAAAdM"]
[Wed Apr 08 20:23:30.309532 2026] [:error] [pid 12386:tid 12422] [client 91.230.225.207:61519] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "adZIwhLhhLtqHi2gK7UUdgAAAQY"]
[Wed Apr 08 20:23:32.031699 2026] [:error] [pid 12490:tid 12508] [client 91.230.225.21:22643] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Wed Apr 08 20:23:32.325962 2026] [:error] [pid 12490:tid 12507] [client 91.230.225.21:22643] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "adZIxG1Fea4F4fbumr36SAAAAM8"]
[Wed Apr 08 20:23:33.243955 2026] [:error] [pid 64066:tid 64077] [client 91.230.225.209:27075] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "adZIxVR3WucJgr2vZGY2UAAAAUg"]
[Wed Apr 08 20:23:33.826768 2026] [:error] [pid 64066:tid 64081] [client 91.230.225.196:45131] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Wed Apr 08 20:23:34.125211 2026] [:error] [pid 64066:tid 64084] [client 91.230.225.196:45131] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Wed Apr 08 20:23:34.695818 2026] [:error] [pid 64066:tid 64090] [client 91.230.225.196:45131] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Wed Apr 08 20:23:35.896716 2026] [:error] [pid 64066:tid 64079] [client 91.230.225.196:45131] [client 91.230.225.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.196, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js/wp-login.php"] [unique_id "adZIx1R3WucJgr2vZGY2XAAAAUo"]
[Wed Apr 08 20:23:36.464538 2026] [:error] [pid 64066:tid 64071] [client 91.230.225.196:45131] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Wed Apr 08 20:23:36.761966 2026] [:error] [pid 64066:tid 64091] [client 91.230.225.196:45131] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Wed Apr 08 20:23:37.063113 2026] [:error] [pid 64066:tid 64089] [client 91.230.225.196:45131] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Wed Apr 08 20:23:37.650636 2026] [:error] [pid 64066:tid 64084] [client 91.230.225.196:45131] [client 91.230.225.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.196, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "adZIyVR3WucJgr2vZGY2ZwAAAU8"]
[Wed Apr 08 20:23:38.540353 2026] [:error] [pid 64066:tid 64076] [client 91.230.225.196:45131] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Wed Apr 08 20:23:38.843629 2026] [:error] [pid 64066:tid 64083] [client 91.230.225.196:45131] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Wed Apr 08 20:23:39.413102 2026] [:error] [pid 64066:tid 64079] [client 91.230.225.196:45131] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Wed Apr 08 20:23:39.995641 2026] [:error] [pid 64066:tid 64071] [client 91.230.225.196:45131] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Wed Apr 08 20:23:40.891108 2026] [:error] [pid 64066:tid 64069] [client 91.230.225.196:45131] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Wed Apr 08 20:23:42.926785 2026] [:error] [pid 64066:tid 64070] [client 91.230.225.196:45131] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Wed Apr 08 20:23:43.210936 2026] [:error] [pid 64066:tid 64085] [client 91.230.225.196:45131] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Wed Apr 08 20:23:46.113393 2026] [:error] [pid 64066:tid 64076] [client 91.230.225.196:45131] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Wed Apr 08 20:23:46.721332 2026] [:error] [pid 64066:tid 64079] [client 91.230.225.196:45131] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adZI0lR3WucJgr2vZGY2gwAAAUo"]
[Wed Apr 08 20:23:48.142974 2026] [:error] [pid 12386:tid 12417] [client 91.230.225.195:42747] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Wed Apr 08 20:23:48.458208 2026] [:error] [pid 12386:tid 12425] [client 91.230.225.195:42747] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "adZI1BLhhLtqHi2gK7UUfgAAAQk"]
[Wed Apr 08 20:23:49.328362 2026] [:error] [pid 7189:tid 7211] [client 91.230.225.203:47745] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Wed Apr 08 20:23:49.603057 2026] [:error] [pid 7189:tid 7193] [client 91.230.225.203:47745] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "adZI1RaBqhBSu0L37lrJ8wAAAcI"]
[Wed Apr 08 20:23:50.783963 2026] [:error] [pid 12490:tid 12502] [client 91.230.225.206:61639] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Wed Apr 08 20:23:51.348807 2026] [:error] [pid 12490:tid 12500] [client 91.230.225.206:61639] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Wed Apr 08 20:23:51.906529 2026] [:error] [pid 12490:tid 12513] [client 91.230.225.206:61639] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Wed Apr 08 20:23:53.350832 2026] [:error] [pid 12490:tid 12513] [client 91.230.225.206:61639] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Wed Apr 08 20:23:53.993276 2026] [:error] [pid 12490:tid 12492] [client 91.230.225.206:61639] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "adZI2W1Fea4F4fbumr36YgAAAMA"]
[Wed Apr 08 20:23:54.594937 2026] [:error] [pid 7189:tid 7194] [client 91.230.225.205:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Wed Apr 08 20:23:54.866863 2026] [:error] [pid 7189:tid 7195] [client 91.230.225.205:65459] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Wed Apr 08 20:23:55.157110 2026] [:error] [pid 7189:tid 7191] [client 91.230.225.205:65459] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "adZI2xaBqhBSu0L37lrJ-wAAAcA"]
[Wed Apr 08 20:23:56.022066 2026] [:error] [pid 7047:tid 7060] [client 185.192.71.25:58653] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adZI3ONh3oGO3pKiCzwGPgAAAYs"]
[Wed Apr 08 20:23:56.848142 2026] [:error] [pid 7047:tid 7055] [client 185.192.71.40:64839] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Wed Apr 08 20:23:57.802840 2026] [:error] [pid 7047:tid 7065] [client 185.192.71.40:64839] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Wed Apr 08 20:23:58.239444 2026] [:error] [pid 7047:tid 7062] [client 185.192.71.40:64839] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Wed Apr 08 20:23:58.517819 2026] [:error] [pid 7047:tid 7053] [client 185.192.71.40:64839] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "adZI3uNh3oGO3pKiCzwGSwAAAYQ"]
[Wed Apr 08 20:24:00.740586 2026] [:error] [pid 35642:tid 35662] [client 185.192.71.21:36001] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "adZI4A-CqryxdEs5DN9VkwAAAFI"]
[Wed Apr 08 20:24:03.087150 2026] [:error] [pid 12453:tid 12465] [client 91.230.225.14:26865] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Wed Apr 08 20:24:04.216657 2026] [:error] [pid 12453:tid 12471] [client 91.230.225.14:26865] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "adZI5BjtW7S6XsLPvrQeLAAAAJA"]
[Wed Apr 08 20:24:05.192868 2026] [:error] [pid 12386:tid 12427] [client 91.230.225.16:57279] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "adZI5RLhhLtqHi2gK7UUiAAAAQs"]
[Wed Apr 08 20:24:06.140164 2026] [:error] [pid 12453:tid 12467] [client 185.192.71.34:64695] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Wed Apr 08 20:24:06.421051 2026] [:error] [pid 12453:tid 12476] [client 185.192.71.34:64695] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Wed Apr 08 20:24:06.698865 2026] [:error] [pid 12453:tid 12455] [client 185.192.71.34:64695] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "adZI5hjtW7S6XsLPvrQeMQAAAIA"]
[Wed Apr 08 20:24:07.566569 2026] [:error] [pid 7189:tid 7204] [client 91.230.225.10:51981] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Wed Apr 08 20:24:07.925995 2026] [:error] [pid 7189:tid 7193] [client 91.230.225.10:51981] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Wed Apr 08 20:24:08.662611 2026] [:error] [pid 7189:tid 7202] [client 91.230.225.10:51981] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Wed Apr 08 20:24:09.490081 2026] [:error] [pid 7189:tid 7196] [client 91.230.225.10:51981] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "adZI6RaBqhBSu0L37lrKFQAAAcU"]
[Wed Apr 08 20:24:10.163774 2026] [:error] [pid 7189:tid 7201] [client 185.192.71.32:42675] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Wed Apr 08 20:24:11.070777 2026] [:error] [pid 7189:tid 7198] [client 185.192.71.32:42675] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "adZI6xaBqhBSu0L37lrKGQAAAcc"]
[Wed Apr 08 20:24:12.008770 2026] [:error] [pid 12453:tid 12459] [client 185.192.71.36:58307] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Wed Apr 08 20:24:12.969591 2026] [:error] [pid 12453:tid 12456] [client 185.192.71.36:58307] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Wed Apr 08 20:24:13.282123 2026] [:error] [pid 12453:tid 12468] [client 185.192.71.36:58307] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Wed Apr 08 20:24:14.052574 2026] [:error] [pid 12453:tid 12472] [client 185.192.71.36:58307] [client 185.192.71.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.36, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "adZI7hjtW7S6XsLPvrQeSwAAAJE"]
[Wed Apr 08 20:24:16.683992 2026] [:error] [pid 12453:tid 12462] [client 185.192.71.36:58307] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "adZI8BjtW7S6XsLPvrQeVQAAAIc"]
[Wed Apr 08 20:24:17.262307 2026] [:error] [pid 64066:tid 64069] [client 91.230.225.197:32485] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Wed Apr 08 20:24:17.687755 2026] [:error] [pid 64066:tid 64093] [client 91.230.225.197:32485] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "adZI8VR3WucJgr2vZGY2ngAAAVg"]
[Wed Apr 08 20:24:18.236008 2026] [:error] [pid 35642:tid 35650] [client 91.230.225.203:46481] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Wed Apr 08 20:24:18.799511 2026] [:error] [pid 35642:tid 35666] [client 91.230.225.203:46481] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Wed Apr 08 20:24:19.488215 2026] [:error] [pid 35642:tid 35647] [client 91.230.225.203:46481] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "adZI8w-CqryxdEs5DN9VngAAAEM"]
[Wed Apr 08 20:24:20.385058 2026] [:error] [pid 35642:tid 35645] [client 91.230.225.19:39751] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Wed Apr 08 20:24:20.664788 2026] [:error] [pid 35642:tid 35656] [client 91.230.225.19:39751] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Wed Apr 08 20:24:20.937888 2026] [:error] [pid 35642:tid 35654] [client 91.230.225.19:39751] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "adZI9A-CqryxdEs5DN9VowAAAEo"]
[Wed Apr 08 20:24:21.498577 2026] [:error] [pid 12453:tid 12463] [client 185.192.71.22:44373] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "adZI9RjtW7S6XsLPvrQeXwAAAIg"]
[Wed Apr 08 20:24:22.066733 2026] [:error] [pid 12386:tid 12434] [client 91.230.225.19:49183] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Wed Apr 08 20:24:23.626806 2026] [:error] [pid 12386:tid 12434] [client 91.230.225.19:49183] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Wed Apr 08 20:24:24.202214 2026] [:error] [pid 12386:tid 12417] [client 91.230.225.19:49183] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "adZI-BLhhLtqHi2gK7UUqwAAAQE"]
[Wed Apr 08 20:24:24.765458 2026] [:error] [pid 64066:tid 64087] [client 185.192.71.26:21927] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Wed Apr 08 20:24:25.356023 2026] [:error] [pid 64066:tid 64092] [client 185.192.71.26:21927] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Wed Apr 08 20:24:25.635863 2026] [:error] [pid 64066:tid 64093] [client 185.192.71.26:21927] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "adZI-VR3WucJgr2vZGY2qgAAAVg"]
[Wed Apr 08 20:24:26.459987 2026] [:error] [pid 12453:tid 12463] [client 185.92.25.114:59835] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/db.php"] [unique_id "adZI-hjtW7S6XsLPvrQeZwAAAIg"]
[Wed Apr 08 20:24:27.027924 2026] [:error] [pid 12453:tid 12475] [client 91.230.225.23:63005] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "adZI-xjtW7S6XsLPvrQeawAAAJQ"]
[Wed Apr 08 20:24:27.583327 2026] [:error] [pid 12453:tid 12458] [client 91.230.225.17:56439] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "adZI-xjtW7S6XsLPvrQebQAAAIM"]
[Wed Apr 08 20:24:28.138349 2026] [:error] [pid 7047:tid 7049] [client 185.192.71.22:52887] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "adZI_ONh3oGO3pKiCzwGXQAAAYA"]
[Wed Apr 08 20:24:28.681196 2026] [:error] [pid 7047:tid 7059] [client 185.192.71.40:45819] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "adZI_ONh3oGO3pKiCzwGXwAAAYo"]
[Wed Apr 08 20:24:29.214776 2026] [:error] [pid 7047:tid 7050] [client 91.230.225.209:60285] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "adZI_eNh3oGO3pKiCzwGYwAAAYE"]
[Wed Apr 08 20:24:30.315059 2026] [:error] [pid 12490:tid 12496] [client 185.192.71.22:22957] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "adZI_m1Fea4F4fbumr36cwAAAMQ"]
[Wed Apr 08 20:24:30.878721 2026] [:error] [pid 7047:tid 7059] [client 185.192.71.30:33067] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "adZI_uNh3oGO3pKiCzwGbQAAAYo"]
[Wed Apr 08 20:24:31.433435 2026] [:error] [pid 7047:tid 7054] [client 91.230.225.11:20967] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "adZI_-Nh3oGO3pKiCzwGcAAAAYU"]
[Wed Apr 08 20:24:32.013482 2026] [:error] [pid 7189:tid 7215] [client 91.230.225.200:27621] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "adZJABaBqhBSu0L37lrKJgAAAdg"]
[Wed Apr 08 20:24:32.732543 2026] [:error] [pid 12385:tid 12392] [client 91.230.225.24:26959] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "adZJACAjtvRQEkLosq2a3wAAAAM"]
[Wed Apr 08 20:24:33.291657 2026] [:error] [pid 64066:tid 64069] [client 91.230.225.13:62915] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Wed Apr 08 20:24:34.156785 2026] [:error] [pid 64066:tid 64086] [client 91.230.225.13:62915] [client 91.230.225.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.13, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "adZJAlR3WucJgr2vZGY2tAAAAVE"]
[Wed Apr 08 20:24:35.626745 2026] [:error] [pid 64066:tid 64079] [client 91.230.225.13:62915] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "adZJA1R3WucJgr2vZGY2vAAAAUo"]
[Wed Apr 08 20:24:36.758122 2026] [:error] [pid 35642:tid 35649] [client 185.192.71.22:33039] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Wed Apr 08 20:24:37.036583 2026] [:error] [pid 35642:tid 35663] [client 185.192.71.22:33039] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Wed Apr 08 20:24:38.452016 2026] [:error] [pid 35642:tid 35668] [client 185.192.71.22:33039] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Wed Apr 08 20:24:38.729327 2026] [:error] [pid 35642:tid 35654] [client 185.192.71.22:33039] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Wed Apr 08 20:24:39.975747 2026] [:error] [pid 35642:tid 35661] [client 185.192.71.22:33039] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Wed Apr 08 20:24:40.261185 2026] [:error] [pid 35642:tid 35648] [client 185.192.71.22:33039] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Wed Apr 08 20:24:40.551777 2026] [:error] [pid 35642:tid 35644] [client 185.192.71.22:33039] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Wed Apr 08 20:24:40.842645 2026] [:error] [pid 35642:tid 35665] [client 185.192.71.22:33039] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Wed Apr 08 20:24:41.151152 2026] [:error] [pid 35642:tid 35660] [client 185.192.71.22:33039] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "adZJCQ-CqryxdEs5DN9VvAAAAFA"]
[Wed Apr 08 20:24:41.718251 2026] [:error] [pid 64066:tid 64072] [client 91.230.225.195:30495] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "adZJCVR3WucJgr2vZGY2wwAAAUM"]
[Wed Apr 08 20:24:42.380812 2026] [:error] [pid 12490:tid 12499] [client 185.192.71.32:62183] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "adZJCm1Fea4F4fbumr36eAAAAMc"]
[Wed Apr 08 20:24:43.245551 2026] [:error] [pid 12490:tid 12494] [client 185.192.71.28:60895] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Wed Apr 08 20:24:43.727787 2026] [:error] [pid 12490:tid 12503] [client 185.192.71.28:60895] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Wed Apr 08 20:24:44.305598 2026] [:error] [pid 12490:tid 12495] [client 185.192.71.28:60895] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Wed Apr 08 20:24:44.920967 2026] [:error] [pid 12490:tid 12514] [client 185.192.71.28:60895] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "adZJDG1Fea4F4fbumr36iAAAANY"]
[Wed Apr 08 20:24:45.962342 2026] [:error] [pid 12490:tid 12492] [client 91.230.225.11:63191] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "adZJDW1Fea4F4fbumr36jgAAAMA"]
[Wed Apr 08 20:24:46.804161 2026] [:error] [pid 64066:tid 64087] [client 91.230.225.24:29827] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "adZJDlR3WucJgr2vZGY2xwAAAVI"]
[Wed Apr 08 20:24:48.516894 2026] [:error] [pid 12490:tid 12502] [client 91.230.225.196:63141] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "adZJEG1Fea4F4fbumr36mQAAAMo"]
[Wed Apr 08 20:24:49.454211 2026] [:error] [pid 12453:tid 12471] [client 185.192.71.26:23903] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "adZJERjtW7S6XsLPvrQeewAAAJA"]
[Wed Apr 08 20:24:51.507354 2026] [:error] [pid 12490:tid 12503] [client 91.230.225.206:57965] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "adZJE21Fea4F4fbumr36nQAAAMs"]
[Wed Apr 08 20:24:55.464020 2026] [:error] [pid 12453:tid 12462] [client 91.230.225.19:38695] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "adZJFxjtW7S6XsLPvrQekwAAAIc"]
[Wed Apr 08 20:24:56.124408 2026] [:error] [pid 12386:tid 12422] [client 91.230.225.10:47269] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Wed Apr 08 20:24:56.415953 2026] [:error] [pid 12386:tid 12437] [client 91.230.225.10:47269] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/about.php"] [unique_id "adZJGBLhhLtqHi2gK7UUzAAAARU"]
[Wed Apr 08 20:24:57.678679 2026] [:error] [pid 64066:tid 64083] [client 91.230.225.200:55087] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Wed Apr 08 20:24:58.566411 2026] [:error] [pid 64066:tid 64091] [client 91.230.225.200:55087] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Wed Apr 08 20:24:58.849152 2026] [:error] [pid 64066:tid 64074] [client 91.230.225.200:55087] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "adZJGlR3WucJgr2vZGY24wAAAUU"]
[Wed Apr 08 20:25:00.024536 2026] [:error] [pid 64066:tid 64082] [client 91.230.225.203:27023] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "adZJHFR3WucJgr2vZGY26gAAAU0"]
[Wed Apr 08 20:25:02.299860 2026] [:error] [pid 12453:tid 12473] [client 185.192.71.24:46201] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "adZJHhjtW7S6XsLPvrQesQAAAJI"]
[Wed Apr 08 20:25:04.136575 2026] [:error] [pid 35642:tid 35658] [client 185.192.71.21:34073] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "adZJIA-CqryxdEs5DN9V1wAAAE4"]
[Wed Apr 08 20:25:05.045527 2026] [:error] [pid 7189:tid 7204] [client 185.192.71.36:47653] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Wed Apr 08 20:25:05.403290 2026] [:error] [pid 7189:tid 7200] [client 185.192.71.36:47653] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "adZJIRaBqhBSu0L37lrKRAAAAck"]
[Wed Apr 08 20:25:05.959767 2026] [:error] [pid 12385:tid 12404] [client 91.230.225.204:54395] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "adZJISAjtvRQEkLosq2a5QAAAA8"]
[Wed Apr 08 20:25:08.068825 2026] [:error] [pid 35642:tid 35663] [client 185.192.71.31:52405] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "adZJJA-CqryxdEs5DN9V4gAAAFM"]
[Wed Apr 08 20:25:09.001889 2026] [:error] [pid 12386:tid 12433] [client 185.192.71.38:42885] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Wed Apr 08 20:25:10.254514 2026] [:error] [pid 12386:tid 12425] [client 185.192.71.38:42885] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Wed Apr 08 20:25:10.543525 2026] [:error] [pid 12386:tid 12431] [client 185.192.71.38:42885] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "adZJJhLhhLtqHi2gK7UU4gAAAQ8"]
[Wed Apr 08 20:25:12.048017 2026] [:error] [pid 7047:tid 7062] [client 185.192.71.23:32059] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Wed Apr 08 20:25:12.677979 2026] [:error] [pid 7047:tid 7052] [client 185.192.71.23:32059] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adZJKONh3oGO3pKiCzwGiQAAAYM"]
[Wed Apr 08 20:25:13.420292 2026] [:error] [pid 12453:tid 12476] [client 91.230.225.19:49357] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "adZJKRjtW7S6XsLPvrQevgAAAJU"]
[Wed Apr 08 20:25:15.860857 2026] [:error] [pid 12490:tid 12495] [client 185.192.71.34:30141] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "adZJK21Fea4F4fbumr36sgAAAMM"]
[Wed Apr 08 20:25:16.958525 2026] [:error] [pid 64066:tid 64082] [client 185.92.25.114:21889] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "adZJLFR3WucJgr2vZGY2-wAAAU0"]
[Wed Apr 08 20:25:17.614479 2026] [:error] [pid 7047:tid 7064] [client 91.230.225.204:49667] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "adZJLeNh3oGO3pKiCzwGlgAAAY8"]
[Wed Apr 08 20:25:18.466279 2026] [:error] [pid 7047:tid 7068] [client 185.192.71.24:27507] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_SpaceTn.php
[Wed Apr 08 20:25:19.914421 2026] [:error] [pid 7047:tid 7057] [client 185.192.71.24:27507] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "adZJL-Nh3oGO3pKiCzwGqAAAAYg"]
[Wed Apr 08 20:25:21.061573 2026] [:error] [pid 7047:tid 7061] [client 185.192.71.29:21243] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "adZJMeNh3oGO3pKiCzwGrAAAAYw"]
[Wed Apr 08 20:25:21.643405 2026] [:error] [pid 12490:tid 12494] [client 185.192.71.24:59683] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "adZJMW1Fea4F4fbumr36ugAAAMI"]
[Wed Apr 08 20:25:22.482552 2026] [:error] [pid 12490:tid 12507] [client 91.230.225.205:52331] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Wed Apr 08 20:25:22.752602 2026] [:error] [pid 12490:tid 12503] [client 91.230.225.205:52331] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "adZJMm1Fea4F4fbumr36vQAAAMs"]
[Wed Apr 08 20:25:23.602649 2026] [:error] [pid 7189:tid 7204] [client 91.230.225.12:50181] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "adZJMxaBqhBSu0L37lrKVQAAAc0"]
[Wed Apr 08 20:25:25.700854 2026] [:error] [pid 12453:tid 12456] [client 91.230.225.10:42501] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "adZJNRjtW7S6XsLPvrQe1gAAAIE"]
[Wed Apr 08 20:25:26.546208 2026] [:error] [pid 12490:tid 12513] [client 91.230.225.20:22407] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Wed Apr 08 20:25:26.827557 2026] [:error] [pid 12490:tid 12499] [client 91.230.225.20:22407] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "adZJNm1Fea4F4fbumr36wwAAAMc"]
[Wed Apr 08 20:25:27.976450 2026] [:error] [pid 12385:tid 12395] [client 91.230.225.14:28317] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "adZJNyAjtvRQEkLosq2a7AAAAAY"]
[Wed Apr 08 20:25:28.825533 2026] [:error] [pid 7047:tid 7053] [client 185.192.71.37:57159] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/as.php"] [unique_id "adZJOONh3oGO3pKiCzwGzAAAAYQ"]
[Wed Apr 08 20:25:29.830407 2026] [:error] [pid 12490:tid 12498] [client 91.230.225.197:32383] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "adZJOW1Fea4F4fbumr36yAAAAMY"]
[Wed Apr 08 20:25:30.382812 2026] [:error] [pid 12453:tid 12479] [client 185.192.71.22:56009] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/install.php"] [unique_id "adZJOhjtW7S6XsLPvrQe1wAAAJg"]
[Wed Apr 08 20:25:31.010995 2026] [:error] [pid 64066:tid 64083] [client 185.192.71.28:30493] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "adZJO1R3WucJgr2vZGY3CAAAAU4"]
[Wed Apr 08 20:25:33.393147 2026] [:error] [pid 12453:tid 12458] [client 91.230.225.20:49073] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "adZJPRjtW7S6XsLPvrQe4gAAAIM"]
[Wed Apr 08 20:25:35.917686 2026] [:error] [pid 64066:tid 64077] [client 91.230.225.205:22167] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "adZJP1R3WucJgr2vZGY3DQAAAUg"]
[Wed Apr 08 20:25:36.763300 2026] [:error] [pid 64066:tid 64076] [client 185.192.71.38:61755] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Wed Apr 08 20:25:37.049136 2026] [:error] [pid 64066:tid 64086] [client 185.192.71.38:61755] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "adZJQVR3WucJgr2vZGY3FAAAAVE"]
[Wed Apr 08 20:25:39.215496 2026] [:error] [pid 64066:tid 64069] [client 185.192.71.37:64427] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "adZJQ1R3WucJgr2vZGY3GwAAAUA"]
[Wed Apr 08 20:25:39.769001 2026] [:error] [pid 7047:tid 7061] [client 91.230.225.209:20387] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Wed Apr 08 20:25:43.943331 2026] [:error] [pid 7047:tid 7057] [client 91.230.225.209:20387] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "adZJR-Nh3oGO3pKiCzwG4QAAAYg"]
[Wed Apr 08 20:25:46.002082 2026] [:error] [pid 35642:tid 35667] [client 91.230.225.199:42305] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "adZJSg-CqryxdEs5DN9V8AAAAFc"]
[Wed Apr 08 20:25:46.826874 2026] [:error] [pid 7047:tid 7068] [client 185.92.25.113:27093] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "adZJSuNh3oGO3pKiCzwG5wAAAZM"]
[Wed Apr 08 20:25:47.984310 2026] [:error] [pid 12453:tid 12461] [client 91.230.225.11:32531] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "adZJSxjtW7S6XsLPvrQe9QAAAIY"]
[Wed Apr 08 20:25:50.936324 2026] [:error] [pid 12386:tid 12431] [client 91.230.225.203:39489] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "adZJThLhhLtqHi2gK7UU_wAAAQ8"]
[Wed Apr 08 20:25:51.655294 2026] [:error] [pid 7189:tid 7199] [client 185.192.71.35:62881] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "adZJTxaBqhBSu0L37lrKfQAAAcg"]
[Wed Apr 08 20:25:53.104998 2026] [:error] [pid 12453:tid 12458] [client 185.192.71.31:31727] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "adZJURjtW7S6XsLPvrQfBAAAAIM"]
[Wed Apr 08 20:25:53.692168 2026] [:error] [pid 7189:tid 7208] [client 91.230.225.12:59939] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adZJURaBqhBSu0L37lrKgwAAAdE"]
[Wed Apr 08 20:25:54.858542 2026] [:error] [pid 7189:tid 7214] [client 185.192.71.24:62901] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "adZJUhaBqhBSu0L37lrKhwAAAdc"]
[Wed Apr 08 20:25:55.427321 2026] [:error] [pid 7047:tid 7057] [client 185.192.71.26:54017] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "adZJU-Nh3oGO3pKiCzwG-AAAAYg"]
[Wed Apr 08 20:25:55.974741 2026] [:error] [pid 35642:tid 35651] [client 91.230.225.15:43941] [client 91.230.225.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.15, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "adZJUw-CqryxdEs5DN9V9wAAAEc"]
[Wed Apr 08 20:25:55.978282 2026] [:error] [pid 35642:tid 35651] [client 91.230.225.15:43941] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Wed Apr 08 20:25:56.255585 2026] [:error] [pid 35642:tid 35652] [client 91.230.225.15:43941] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "adZJVA-CqryxdEs5DN9V-AAAAEg"]
[Wed Apr 08 20:25:57.223574 2026] [:error] [pid 12490:tid 12505] [client 91.230.225.23:22641] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Wed Apr 08 20:25:57.505823 2026] [:error] [pid 12490:tid 12515] [client 91.230.225.23:22641] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "adZJVW1Fea4F4fbumr363AAAANc"]
[Wed Apr 08 20:25:58.048565 2026] [:error] [pid 64066:tid 64075] [client 185.92.25.114:39087] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/network.php"] [unique_id "adZJVlR3WucJgr2vZGY3NwAAAUY"]
[Wed Apr 08 20:25:58.735902 2026] [:error] [pid 12385:tid 12390] [client 185.192.71.26:61189] File does not exist: /usr/local/apache/htdocs/suspended-page/page.php
[Wed Apr 08 20:26:00.894488 2026] [:error] [pid 12385:tid 12393] [client 185.192.71.26:61189] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "adZJWCAjtvRQEkLosq2bAgAAAAQ"]
[Wed Apr 08 20:26:01.441708 2026] [:error] [pid 12453:tid 12468] [client 185.192.71.23:21213] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "adZJWRjtW7S6XsLPvrQfEgAAAI0"]
[Wed Apr 08 20:26:02.637376 2026] [:error] [pid 12453:tid 12472] [client 185.192.71.40:44101] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "adZJWhjtW7S6XsLPvrQfGwAAAJE"]
[Wed Apr 08 20:26:03.195152 2026] [:error] [pid 12453:tid 12467] [client 91.230.225.23:23017] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "adZJWxjtW7S6XsLPvrQfHQAAAIw"]
[Wed Apr 08 20:26:03.792915 2026] [:error] [pid 12453:tid 12479] [client 185.92.25.113:40809] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Wed Apr 08 20:26:04.089328 2026] [:error] [pid 12453:tid 12470] [client 185.92.25.113:40809] [client 185.92.25.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.92.25.113, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "adZJXBjtW7S6XsLPvrQfHwAAAI8"]
[Wed Apr 08 20:26:04.689041 2026] [:error] [pid 12453:tid 12461] [client 185.92.25.113:40809] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "adZJXBjtW7S6XsLPvrQfIwAAAIY"]
[Wed Apr 08 20:26:06.221289 2026] [:error] [pid 12490:tid 12515] [client 91.230.225.205:56727] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "adZJXm1Fea4F4fbumr365gAAANc"]
[Wed Apr 08 20:26:07.019445 2026] [:error] [pid 7047:tid 7069] [client 91.230.225.200:30713] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Wed Apr 08 20:26:07.291358 2026] [:error] [pid 7047:tid 7066] [client 91.230.225.200:30713] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "adZJX-Nh3oGO3pKiCzwHBwAAAZE"]
[Wed Apr 08 20:26:08.154632 2026] [:error] [pid 12490:tid 12508] [client 91.230.225.206:42077] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "adZJYG1Fea4F4fbumr366AAAANA"]
[Wed Apr 08 20:26:08.712015 2026] [:error] [pid 7189:tid 7196] [client 91.230.225.206:25385] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Wed Apr 08 20:26:09.681479 2026] [:error] [pid 7189:tid 7214] [client 91.230.225.206:25385] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "adZJYRaBqhBSu0L37lrKjwAAAdc"]
[Wed Apr 08 20:26:10.905702 2026] [:error] [pid 7189:tid 7192] [client 91.230.225.19:40565] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adZJYhaBqhBSu0L37lrKkwAAAcE"]
[Wed Apr 08 20:26:11.783839 2026] [:error] [pid 12385:tid 12402] [client 185.192.71.28:43753] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Wed Apr 08 20:26:12.350143 2026] [:error] [pid 12385:tid 12407] [client 185.192.71.28:43753] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Wed Apr 08 20:26:12.913019 2026] [:error] [pid 12385:tid 12399] [client 185.192.71.28:43753] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "adZJZCAjtvRQEkLosq2bCQAAAAo"]
[Wed Apr 08 20:26:13.848222 2026] [:error] [pid 12453:tid 12478] [client 91.230.225.206:57041] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "adZJZRjtW7S6XsLPvrQfMQAAAJc"]
[Wed Apr 08 20:26:14.732214 2026] [:error] [pid 35642:tid 35652] [client 91.230.225.16:46725] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/count.php"] [unique_id "adZJZg-CqryxdEs5DN9WAQAAAEg"]
[Wed Apr 08 20:26:15.311674 2026] [:error] [pid 12453:tid 12479] [client 185.192.71.39:62363] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-error_log.php
[Wed Apr 08 20:26:17.095536 2026] [:error] [pid 12453:tid 12455] [client 185.192.71.39:62363] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "adZJaRjtW7S6XsLPvrQfPwAAAIA"]
[Wed Apr 08 20:26:19.907463 2026] [:error] [pid 12453:tid 12473] [client 91.230.225.14:20145] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||windfcau.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/images/stories/themes.php"] [unique_id "adZJaxjtW7S6XsLPvrQfQwAAAJI"]
[Wed Apr 08 20:26:20.193778 2026] [:error] [pid 12453:tid 12457] [client 91.230.225.14:20145] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "adZJbBjtW7S6XsLPvrQfRAAAAII"]
[Wed Apr 08 20:26:28.618523 2026] [:error] [pid 12453:tid 12465] [client 91.230.225.10:46665] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "adZJdBjtW7S6XsLPvrQfTwAAAIo"]
[Wed Apr 08 20:26:29.195140 2026] [:error] [pid 7189:tid 7205] [client 91.230.225.196:38557] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "adZJdRaBqhBSu0L37lrKnQAAAc4"]
[Wed Apr 08 20:26:30.312870 2026] [:error] [pid 7189:tid 7209] [client 91.230.225.17:26297] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Wed Apr 08 20:26:31.430957 2026] [:error] [pid 7189:tid 7206] [client 91.230.225.17:26297] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "adZJdxaBqhBSu0L37lrKqQAAAc8"]
[Wed Apr 08 20:26:32.563337 2026] [:error] [pid 64066:tid 64070] [client 91.230.225.21:28161] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "adZJeFR3WucJgr2vZGY3XAAAAUE"]
[Wed Apr 08 20:26:33.387366 2026] [:error] [pid 7189:tid 7196] [client 91.230.225.195:21491] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "adZJeRaBqhBSu0L37lrKrwAAAcU"]
[Wed Apr 08 20:26:33.962479 2026] [:error] [pid 35642:tid 35654] [client 91.230.225.24:59299] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Wed Apr 08 20:26:35.433200 2026] [:error] [pid 35642:tid 35657] [client 91.230.225.24:59299] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "adZJew-CqryxdEs5DN9WEQAAAE0"]
[Wed Apr 08 20:26:36.125249 2026] [:error] [pid 12453:tid 12461] [client 185.192.71.39:41401] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/colour.php"] [unique_id "adZJfBjtW7S6XsLPvrQfXAAAAIY"]
[Wed Apr 08 20:26:36.777277 2026] [:error] [pid 12453:tid 12479] [client 91.230.225.12:38601] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Wed Apr 08 20:26:37.055825 2026] [:error] [pid 12453:tid 12460] [client 91.230.225.12:38601] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "adZJfRjtW7S6XsLPvrQfZAAAAIU"]
[Wed Apr 08 20:26:37.656895 2026] [:error] [pid 7047:tid 7057] [client 91.230.225.195:52349] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "adZJfeNh3oGO3pKiCzwHKwAAAYg"]
[Wed Apr 08 20:26:38.786375 2026] [:error] [pid 12385:tid 12394] [client 185.192.71.38:62755] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "adZJfiAjtvRQEkLosq2bEwAAAAU"]
[Wed Apr 08 20:26:39.916824 2026] [:error] [pid 7047:tid 7049] [client 91.230.225.12:26903] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "adZJf-Nh3oGO3pKiCzwHNQAAAYA"]
[Wed Apr 08 20:26:40.456751 2026] [:error] [pid 12385:tid 12399] [client 185.192.71.35:62841] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "adZJgCAjtvRQEkLosq2bFQAAAAo"]
[Wed Apr 08 20:26:42.245067 2026] [:error] [pid 64066:tid 64076] [client 185.192.71.25:58071] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "adZJglR3WucJgr2vZGY3bQAAAUc"]
[Wed Apr 08 20:26:43.353911 2026] [:error] [pid 7047:tid 7068] [client 91.230.225.14:29091] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "adZJg-Nh3oGO3pKiCzwHQgAAAZM"]
[Wed Apr 08 20:26:44.056088 2026] [:error] [pid 12490:tid 12516] [client 185.192.71.29:52871] File does not exist: /usr/local/apache/htdocs/suspended-page/testt.php
[Wed Apr 08 20:26:44.906423 2026] [:error] [pid 12490:tid 12509] [client 185.192.71.29:52871] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "adZJhG1Fea4F4fbumr37HgAAANE"]
[Wed Apr 08 20:26:45.791736 2026] [:error] [pid 12490:tid 12499] [client 91.230.225.200:62937] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "adZJhW1Fea4F4fbumr37HwAAAMc"]
[Wed Apr 08 20:26:46.387334 2026] [:error] [pid 7047:tid 7050] [client 91.230.225.21:48267] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "adZJhuNh3oGO3pKiCzwHSAAAAYE"]
[Wed Apr 08 20:26:46.950605 2026] [:error] [pid 7047:tid 7064] [client 185.192.71.36:54953] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Wed Apr 08 20:26:47.516067 2026] [:error] [pid 7047:tid 7056] [client 185.192.71.36:54953] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "adZJh-Nh3oGO3pKiCzwHUQAAAYc"]
[Wed Apr 08 20:26:48.088036 2026] [:error] [pid 7189:tid 7212] [client 91.230.225.195:48585] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php
[Wed Apr 08 20:26:48.787544 2026] [:error] [pid 7189:tid 7197] [client 91.230.225.195:48585] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "adZJiBaBqhBSu0L37lrKzgAAAcY"]
[Wed Apr 08 20:26:49.354071 2026] [:error] [pid 7047:tid 7062] [client 185.192.71.24:53625] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "adZJieNh3oGO3pKiCzwHVgAAAY0"]
[Wed Apr 08 20:26:50.435085 2026] [:error] [pid 12453:tid 12473] [client 185.192.71.24:24861] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "adZJihjtW7S6XsLPvrQfiQAAAJI"]
[Wed Apr 08 20:26:50.992847 2026] [:error] [pid 12453:tid 12466] [client 185.192.71.33:56563] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "adZJihjtW7S6XsLPvrQfjAAAAIs"]
[Wed Apr 08 20:26:52.108119 2026] [:error] [pid 64066:tid 64088] [client 91.230.225.15:59821] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "adZJjFR3WucJgr2vZGY3egAAAVM"]
[Wed Apr 08 20:26:53.091949 2026] [:error] [pid 12453:tid 12458] [client 91.230.225.199:26399] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "adZJjRjtW7S6XsLPvrQfkAAAAIM"]
[Wed Apr 08 20:26:54.721984 2026] [:error] [pid 64066:tid 64074] [client 185.192.71.29:26939] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "adZJjlR3WucJgr2vZGY3fgAAAUU"]
[Wed Apr 08 20:26:55.401778 2026] [:error] [pid 12453:tid 12471] [client 91.230.225.22:63517] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "adZJjxjtW7S6XsLPvrQfmgAAAJA"]
[Wed Apr 08 20:26:56.616172 2026] [:error] [pid 12385:tid 12401] [client 91.230.225.13:46773] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "adZJkCAjtvRQEkLosq2bIwAAAAw"]
[Wed Apr 08 20:26:57.732749 2026] [:error] [pid 64066:tid 64092] [client 91.230.225.195:60845] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "adZJkVR3WucJgr2vZGY3jQAAAVc"]
[Wed Apr 08 20:26:59.706056 2026] [:error] [pid 12386:tid 12420] [client 91.230.225.201:49041] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "adZJkxLhhLtqHi2gK7UVLwAAAQQ"]
[Wed Apr 08 20:27:00.569049 2026] [:error] [pid 35642:tid 35658] [client 91.230.225.196:54167] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "adZJlA-CqryxdEs5DN9WHgAAAE4"]
[Wed Apr 08 20:27:01.779335 2026] [:error] [pid 7189:tid 7209] [client 185.192.71.27:24171] File does not exist: /usr/local/apache/htdocs/suspended-page/media-new.php
[Wed Apr 08 20:27:03.208572 2026] [:error] [pid 7189:tid 7199] [client 185.192.71.27:24171] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "adZJlxaBqhBSu0L37lrK3AAAAcg"]
[Wed Apr 08 20:27:03.767435 2026] [:error] [pid 12385:tid 12404] [client 185.192.71.23:37449] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "adZJlyAjtvRQEkLosq2bNAAAAA8"]
[Wed Apr 08 20:27:04.694985 2026] [:error] [pid 12385:tid 12406] [client 91.230.225.14:23387] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Wed Apr 08 20:27:04.969555 2026] [:error] [pid 12385:tid 12408] [client 91.230.225.14:23387] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "adZJmCAjtvRQEkLosq2bOQAAABM"]
[Wed Apr 08 20:27:08.129901 2026] [:error] [pid 12453:tid 12457] [client 185.192.71.26:24457] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "adZJnBjtW7S6XsLPvrQfwAAAAII"]
[Wed Apr 08 20:27:09.417143 2026] [:error] [pid 7189:tid 7213] [client 185.192.71.29:56987] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfus.php
[Wed Apr 08 20:27:09.710944 2026] [:error] [pid 7189:tid 7209] [client 185.192.71.29:56987] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "adZJnRaBqhBSu0L37lrK7QAAAdI"]
[Wed Apr 08 20:27:11.768476 2026] [:error] [pid 12490:tid 12495] [client 185.192.71.26:55621] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "adZJn21Fea4F4fbumr37LgAAAMM"]
[Wed Apr 08 20:27:12.933889 2026] [:error] [pid 64066:tid 64070] [client 91.230.225.11:25727] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Wed Apr 08 20:27:13.233086 2026] [:error] [pid 64066:tid 64083] [client 91.230.225.11:25727] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "adZJoVR3WucJgr2vZGY3owAAAU4"]
[Wed Apr 08 20:27:14.938395 2026] [:error] [pid 7189:tid 7210] [client 91.230.225.197:23195] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "adZJohaBqhBSu0L37lrK9AAAAdM"]
[Wed Apr 08 20:27:19.321988 2026] [:error] [pid 7047:tid 7073] [client 185.192.71.25:21499] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Wed Apr 08 20:27:19.639989 2026] [:error] [pid 7047:tid 7053] [client 185.192.71.25:21499] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "adZJp-Nh3oGO3pKiCzwHdgAAAYQ"]
[Wed Apr 08 20:27:21.725012 2026] [:error] [pid 7189:tid 7195] [client 185.192.71.27:28507] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "adZJqRaBqhBSu0L37lrLDgAAAcQ"]
[Wed Apr 08 20:27:24.086346 2026] [:error] [pid 12490:tid 12504] [client 185.192.71.21:40439] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mah.php
[Wed Apr 08 20:27:24.388508 2026] [:error] [pid 12490:tid 12495] [client 185.192.71.21:40439] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "adZJrG1Fea4F4fbumr37QAAAAMM"]
[Wed Apr 08 20:27:25.656746 2026] [:error] [pid 12385:tid 12397] [client 91.230.225.14:64299] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "adZJrSAjtvRQEkLosq2bQQAAAAg"]
[Wed Apr 08 20:27:31.069868 2026] [:error] [pid 12453:tid 12455] [client 185.192.71.30:29667] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-users.php
[Wed Apr 08 20:27:32.011161 2026] [:error] [pid 12453:tid 12472] [client 185.192.71.30:29667] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "adZJtBjtW7S6XsLPvrQgDQAAAJE"]
[Wed Apr 08 20:27:37.354121 2026] [:error] [pid 12490:tid 12499] [client 185.192.71.37:38333] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "adZJuW1Fea4F4fbumr37VQAAAMc"]
[Wed Apr 08 20:27:40.893017 2026] [:error] [pid 35642:tid 35667] [client 91.230.225.199:39851] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "adZJvA-CqryxdEs5DN9WXgAAAFc"]
[Wed Apr 08 20:27:41.435896 2026] [:error] [pid 64066:tid 64086] [client 185.192.71.21:58877] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "adZJvVR3WucJgr2vZGY3sAAAAVE"]
[Wed Apr 08 20:27:42.340758 2026] [:error] [pid 35642:tid 35656] [client 185.192.71.32:46253] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/log.php"] [unique_id "adZJvg-CqryxdEs5DN9WZAAAAEw"]
[Wed Apr 08 20:27:42.919761 2026] [:error] [pid 12490:tid 12495] [client 185.192.71.32:23419] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "adZJvm1Fea4F4fbumr37WQAAAMM"]
[Wed Apr 08 20:27:43.479000 2026] [:error] [pid 35642:tid 35652] [client 185.192.71.36:39319] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "adZJvw-CqryxdEs5DN9WZgAAAEg"]
[Wed Apr 08 20:27:44.083920 2026] [:error] [pid 7047:tid 7068] [client 185.192.71.25:46109] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/aw.php"] [unique_id "adZJwONh3oGO3pKiCzwHjAAAAZM"]
[Wed Apr 08 20:27:45.760048 2026] [:error] [pid 12385:tid 12394] [client 91.230.225.22:46331] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "adZJwSAjtvRQEkLosq2bYAAAAAU"]
[Wed Apr 08 20:27:46.494559 2026] [:error] [pid 7047:tid 7053] [client 91.230.225.204:52483] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "adZJwuNh3oGO3pKiCzwHkQAAAYQ"]
[Wed Apr 08 20:27:47.331137 2026] [:error] [pid 64066:tid 64079] [client 185.192.71.40:53319] File does not exist: /usr/local/apache/htdocs/suspended-page/top.php
[Wed Apr 08 20:27:47.607823 2026] [:error] [pid 64066:tid 64076] [client 185.192.71.40:53319] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "adZJw1R3WucJgr2vZGY3tAAAAUc"]
[Wed Apr 08 20:27:48.159912 2026] [:error] [pid 12386:tid 12427] [client 185.192.71.29:27777] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "adZJxBLhhLtqHi2gK7UVOAAAAQs"]
[Wed Apr 08 20:27:49.508412 2026] [:error] [pid 7047:tid 7069] [client 185.192.71.31:56047] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "adZJxeNh3oGO3pKiCzwHnAAAAZQ"]
[Wed Apr 08 20:27:50.086657 2026] [:error] [pid 7047:tid 7058] [client 91.230.225.195:38313] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "adZJxuNh3oGO3pKiCzwHngAAAYk"]
[Wed Apr 08 20:27:52.663925 2026] [:error] [pid 12386:tid 12433] [client 91.230.225.207:29049] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "adZJyBLhhLtqHi2gK7UVRAAAARE"]
[Wed Apr 08 20:27:53.308953 2026] [:error] [pid 12453:tid 12465] [client 91.230.225.208:55693] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "adZJyRjtW7S6XsLPvrQgMAAAAIo"]
[Wed Apr 08 20:27:55.538844 2026] [:error] [pid 12386:tid 12440] [client 91.230.225.209:57959] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/file.php"] [unique_id "adZJyxLhhLtqHi2gK7UVSQAAARg"]
[Wed Apr 08 20:27:56.360747 2026] [:error] [pid 64066:tid 64078] [client 185.192.71.39:45961] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "adZJzFR3WucJgr2vZGY3xAAAAUk"]
[Wed Apr 08 20:27:57.379568 2026] [:error] [pid 64066:tid 64084] [client 185.192.71.24:25491] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/load.php"] [unique_id "adZJzVR3WucJgr2vZGY3ygAAAU8"]
[Wed Apr 08 20:27:58.057537 2026] [:error] [pid 12385:tid 12399] [client 91.230.225.13:62417] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "adZJziAjtvRQEkLosq2bbgAAAAo"]
[Wed Apr 08 20:27:58.652747 2026] [:error] [pid 12385:tid 12403] [client 91.230.225.12:23927] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "adZJziAjtvRQEkLosq2bcQAAAA4"]
[Wed Apr 08 20:28:00.038172 2026] [:error] [pid 7047:tid 7065] [client 185.192.71.37:46855] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "adZJ0ONh3oGO3pKiCzwHsgAAAZA"]
[Wed Apr 08 20:28:00.638981 2026] [:error] [pid 12490:tid 12514] [client 185.192.71.34:37965] File does not exist: /usr/local/apache/htdocs/suspended-page/setup-config.php
[Wed Apr 08 20:28:00.969956 2026] [:error] [pid 12490:tid 12499] [client 185.192.71.34:37965] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "adZJ0G1Fea4F4fbumr37YgAAAMc"]
[Wed Apr 08 20:28:01.823943 2026] [:error] [pid 7189:tid 7212] [client 91.230.225.201:55223] File does not exist: /usr/local/apache/htdocs/suspended-page/type.php
[Wed Apr 08 20:28:02.100987 2026] [:error] [pid 7189:tid 7200] [client 91.230.225.201:55223] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "adZJ0haBqhBSu0L37lrLKwAAAck"]
[Wed Apr 08 20:28:03.719787 2026] [:error] [pid 7047:tid 7058] [client 185.192.71.39:53813] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "adZJ0-Nh3oGO3pKiCzwHxAAAAYk"]
[Wed Apr 08 20:28:04.285109 2026] [:error] [pid 12490:tid 12495] [client 91.230.225.16:53723] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "adZJ1G1Fea4F4fbumr37awAAAMM"]
[Wed Apr 08 20:28:06.326719 2026] [:error] [pid 35642:tid 35647] [client 91.230.225.12:32925] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Wed Apr 08 20:28:07.538073 2026] [:error] [pid 35642:tid 35659] [client 91.230.225.12:32925] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "adZJ1w-CqryxdEs5DN9WjQAAAE8"]
[Wed Apr 08 20:28:08.416248 2026] [:error] [pid 7189:tid 7199] [client 91.230.225.196:24629] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "adZJ2BaBqhBSu0L37lrLMQAAAcg"]
[Wed Apr 08 20:28:09.521575 2026] [:error] [pid 7047:tid 7057] [client 91.230.225.201:61799] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "adZJ2eNh3oGO3pKiCzwH2AAAAYg"]
[Wed Apr 08 20:28:10.165908 2026] [:error] [pid 7189:tid 7192] [client 185.192.71.21:23461] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "adZJ2haBqhBSu0L37lrLMwAAAcE"]
[Wed Apr 08 20:28:10.711786 2026] [:error] [pid 12453:tid 12478] [client 185.192.71.36:30179] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "adZJ2hjtW7S6XsLPvrQgUQAAAJc"]
[Wed Apr 08 20:28:12.122322 2026] [:error] [pid 12453:tid 12456] [client 185.192.71.28:41941] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "adZJ3BjtW7S6XsLPvrQgXAAAAIE"]
[Wed Apr 08 20:28:14.787435 2026] [:error] [pid 7047:tid 7050] [client 185.192.71.36:45341] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ms-pie.php"] [unique_id "adZJ3uNh3oGO3pKiCzwH7gAAAYE"]
[Wed Apr 08 20:28:16.520580 2026] [:error] [pid 7047:tid 7064] [client 185.192.71.39:61457] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "adZJ4ONh3oGO3pKiCzwH_gAAAY8"]
[Wed Apr 08 20:28:17.657543 2026] [:error] [pid 7047:tid 7055] [client 185.192.71.21:20081] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/nav-menu.php"] [unique_id "adZJ4eNh3oGO3pKiCzwICgAAAYY"]
[Wed Apr 08 20:28:18.241964 2026] [:error] [pid 64066:tid 64080] [client 91.230.225.209:43635] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/user.php"] [unique_id "adZJ4lR3WucJgr2vZGY32gAAAUs"]
[Wed Apr 08 20:28:21.853321 2026] [:error] [pid 12453:tid 12473] [client 185.192.71.37:33405] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "adZJ5RjtW7S6XsLPvrQgoAAAAJI"]
[Wed Apr 08 20:28:22.498441 2026] [:error] [pid 7189:tid 7191] [client 91.230.225.200:36505] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "adZJ5haBqhBSu0L37lrLRAAAAcA"]
[Wed Apr 08 20:28:23.051571 2026] [:error] [pid 7189:tid 7192] [client 185.192.71.34:62457] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "adZJ5xaBqhBSu0L37lrLSAAAAcE"]
[Wed Apr 08 20:28:23.982812 2026] [:error] [pid 12385:tid 12399] [client 185.192.71.37:64479] [client 185.192.71.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.37, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "adZJ5yAjtvRQEkLosq2beQAAAAo"]
[Wed Apr 08 20:28:24.546173 2026] [:error] [pid 12385:tid 12409] [client 185.192.71.37:64479] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "adZJ6CAjtvRQEkLosq2bewAAABQ"]
[Wed Apr 08 20:28:25.107588 2026] [:error] [pid 35642:tid 35652] [client 91.230.225.196:42367] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "adZJ6Q-CqryxdEs5DN9WmAAAAEg"]
[Wed Apr 08 20:28:25.649489 2026] [:error] [pid 35642:tid 35654] [client 91.230.225.208:25593] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "adZJ6Q-CqryxdEs5DN9WnAAAAEo"]
[Wed Apr 08 20:28:27.942709 2026] [:error] [pid 12453:tid 12457] [client 185.192.71.32:53537] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "adZJ6xjtW7S6XsLPvrQgvAAAAII"]
[Wed Apr 08 20:28:30.533555 2026] [:error] [pid 12490:tid 12501] [client 91.230.225.15:64479] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "adZJ7m1Fea4F4fbumr37lgAAAMk"]
[Wed Apr 08 20:28:31.660571 2026] [:error] [pid 7189:tid 7193] [client 91.230.225.13:46659] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "adZJ7xaBqhBSu0L37lrLbAAAAcI"]
[Wed Apr 08 20:28:35.541948 2026] [:error] [pid 12490:tid 12511] [client 91.230.225.198:37769] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "adZJ821Fea4F4fbumr37qwAAANM"]
[Wed Apr 08 20:28:36.125673 2026] [:error] [pid 7047:tid 7050] [client 91.230.225.24:31487] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "adZJ9ONh3oGO3pKiCzwISwAAAYE"]
[Wed Apr 08 20:28:36.690674 2026] [:error] [pid 7047:tid 7070] [client 185.192.71.22:56975] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "adZJ9ONh3oGO3pKiCzwITwAAAZU"]
[Wed Apr 08 20:28:37.229650 2026] [:error] [pid 35642:tid 35646] [client 91.230.225.195:31557] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "adZJ9Q-CqryxdEs5DN9WtAAAAEI"]
[Wed Apr 08 20:28:39.923917 2026] [:error] [pid 7189:tid 7207] [client 91.230.225.202:41247] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "adZJ9xaBqhBSu0L37lrLewAAAdA"]
[Wed Apr 08 20:28:40.483949 2026] [:error] [pid 64066:tid 64084] [client 91.230.225.10:44521] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "adZJ-FR3WucJgr2vZGY36gAAAU8"]
[Wed Apr 08 20:28:42.438598 2026] [:error] [pid 64066:tid 64074] [client 185.192.71.30:52681] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "adZJ-lR3WucJgr2vZGY3-QAAAUU"]
[Wed Apr 08 20:28:44.268519 2026] [:error] [pid 12385:tid 12393] [client 185.192.71.40:41577] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "adZJ_CAjtvRQEkLosq2bgQAAAAQ"]
[Wed Apr 08 20:28:44.851731 2026] [:error] [pid 12453:tid 12457] [client 185.192.71.35:21279] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "adZJ_BjtW7S6XsLPvrQg3wAAAII"]
[Wed Apr 08 20:29:11.240384 2026] [autoindex:error] [pid 12386:tid 12430] [client 91.230.225.22:43945] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 02:55:54.629042 2026] [:error] [pid 22056:tid 22081] [client 158.158.121.169:45818] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Thu Apr 09 19:00:30.145444 2026] [:error] [pid 24516:tid 24560] [client 20.223.235.239:6050] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Thu Apr 09 22:46:59.305951 2026] [:error] [pid 20837:tid 20844] [client 158.158.97.185:34908] [client 158.158.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ade74_SL71FHZkjrGzMOTwAAAYU"]
[Thu Apr 09 22:47:01.012991 2026] [:error] [pid 24624:tid 24636] [client 158.158.97.185:25269] [client 158.158.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ade75e4Jn-WvK1ZBTvjzzAAAAMo"]
[Thu Apr 09 22:47:02.243607 2026] [:error] [pid 63331:tid 63356] [client 158.158.97.185:53189] [client 158.158.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ade75ibKfIYuVjWbE4WXlQAAAdc"]
[Thu Apr 09 22:47:03.644028 2026] [:error] [pid 18477:tid 18491] [client 158.158.97.185:34901] [client 158.158.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ade758De826HlFeoLPKrwAAAAUw"]
[Thu Apr 09 22:51:19.513831 2026] [:error] [pid 63331:tid 63338] [client 20.251.195.197:65045] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Thu Apr 09 22:51:19.776856 2026] [:error] [pid 63331:tid 63341] [client 20.251.195.197:65045] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Thu Apr 09 22:51:20.039894 2026] [:error] [pid 63331:tid 63346] [client 20.251.195.197:65045] File does not exist: /usr/local/apache/htdocs/suspended-page/ga.php
[Thu Apr 09 22:51:20.309031 2026] [:error] [pid 63331:tid 63357] [client 20.251.195.197:65045] File does not exist: /usr/local/apache/htdocs/suspended-page/less.php
[Thu Apr 09 22:51:20.572367 2026] [:error] [pid 63331:tid 63339] [client 20.251.195.197:65045] File does not exist: /usr/local/apache/htdocs/suspended-page/x3x.php
[Thu Apr 09 22:51:20.833542 2026] [:error] [pid 63331:tid 63335] [client 20.251.195.197:65045] [client 20.251.195.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Ipv6.php"] [unique_id "ade86CbKfIYuVjWbE4WbIQAAAcI"]
[Thu Apr 09 22:51:21.374246 2026] [:error] [pid 24515:tid 24533] [client 20.251.195.197:65052] File does not exist: /usr/local/apache/htdocs/suspended-page/state.php
[Thu Apr 09 22:51:21.638879 2026] [:error] [pid 24515:tid 24531] [client 20.251.195.197:65052] File does not exist: /usr/local/apache/htdocs/suspended-page/xozx.php
[Thu Apr 09 22:51:21.901759 2026] [:error] [pid 24515:tid 24525] [client 20.251.195.197:65052] File does not exist: /usr/local/apache/htdocs/suspended-page/1100.php
[Thu Apr 09 22:51:22.165518 2026] [:error] [pid 24515:tid 24526] [client 20.251.195.197:65052] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Thu Apr 09 22:51:22.429518 2026] [:error] [pid 24515:tid 24537] [client 20.251.195.197:65052] File does not exist: /usr/local/apache/htdocs/suspended-page/97.php
[Thu Apr 09 22:51:22.689397 2026] [:error] [pid 24515:tid 24541] [client 20.251.195.197:65052] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Ipv6.php"] [unique_id "ade86q1OMnvM2fMnB1PwaQAAABY"]
[Thu Apr 09 22:51:23.355791 2026] [:error] [pid 18477:tid 18503] [client 20.251.195.197:65090] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Ipv6.php"] [unique_id "ade868De826HlFeoLPKtNQAAAVg"]
[Thu Apr 09 22:51:24.015488 2026] [:error] [pid 24515:tid 24543] [client 20.251.195.197:65031] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Ipv6.php"] [unique_id "ade87K1OMnvM2fMnB1PwcAAAABg"]
[Thu Apr 09 22:51:24.733243 2026] [:error] [pid 24515:tid 24537] [client 20.251.195.197:65089] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Ipv6.php"] [unique_id "ade87K1OMnvM2fMnB1PwdQAAABI"]
[Thu Apr 09 22:51:25.439886 2026] [:error] [pid 24927:tid 24946] [client 20.251.195.197:65076] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "ade87TXObuzEuw8mNJs3CgAAARA"]
[Thu Apr 09 22:51:26.048872 2026] [:error] [pid 18477:tid 18492] [client 20.251.195.197:65096] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "ade87sDe826HlFeoLPKtPAAAAU0"]
[Thu Apr 09 22:51:26.649252 2026] [:error] [pid 24516:tid 24571] [client 20.251.195.197:65074] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "ade87thW7vSS-UkeWCU_JwAAAFg"]
[Thu Apr 09 22:51:27.261667 2026] [:error] [pid 24927:tid 24934] [client 20.251.195.197:65026] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "ade87zXObuzEuw8mNJs3EQAAAQQ"]
[Thu Apr 09 22:51:27.988640 2026] [:error] [pid 24624:tid 24629] [client 20.251.195.197:65149] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "ade87-4Jn-WvK1ZBTvj1twAAAMM"]
[Thu Apr 09 22:51:28.538300 2026] [:error] [pid 24515:tid 24522] [client 20.251.195.197:65057] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "ade88K1OMnvM2fMnB1PwdwAAAAM"]
[Thu Apr 09 22:51:29.095359 2026] [:error] [pid 63331:tid 63349] [client 20.251.195.197:65139] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "ade88SbKfIYuVjWbE4WbJQAAAdA"]
[Thu Apr 09 22:51:29.782119 2026] [:error] [pid 20837:tid 20854] [client 20.251.195.197:64452] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "ade88fSL71FHZkjrGzMQZwAAAY8"]
[Thu Apr 09 22:51:30.555454 2026] [:error] [pid 20837:tid 20863] [client 20.251.195.197:64480] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ade88vSL71FHZkjrGzMQbgAAAZg"]
[Thu Apr 09 22:51:31.332529 2026] [:error] [pid 24624:tid 24637] [client 20.251.195.197:65117] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ade88-4Jn-WvK1ZBTvj1xgAAAMs"]
[Thu Apr 09 22:51:31.983155 2026] [:error] [pid 24624:tid 24645] [client 20.251.195.197:65055] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ade88-4Jn-WvK1ZBTvj1yAAAANM"]
[Thu Apr 09 22:51:32.577375 2026] [:error] [pid 20837:tid 20840] [client 20.251.195.197:65144] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ade89PSL71FHZkjrGzMQcgAAAYE"]
[Thu Apr 09 22:51:33.327319 2026] [:error] [pid 20837:tid 20839] [client 20.251.195.197:65051] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "ade89fSL71FHZkjrGzMQdQAAAYA"]
[Thu Apr 09 22:51:34.015877 2026] [:error] [pid 18477:tid 18485] [client 20.251.195.197:64397] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "ade89sDe826HlFeoLPKtQQAAAUY"]
[Thu Apr 09 22:51:34.628390 2026] [:error] [pid 24515:tid 24537] [client 20.251.195.197:65036] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "ade89q1OMnvM2fMnB1PwfQAAABI"]
[Thu Apr 09 22:51:35.377322 2026] [:error] [pid 63331:tid 63345] [client 20.251.195.197:65050] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "ade89ybKfIYuVjWbE4WbMwAAAcw"]
[Thu Apr 09 22:51:36.010688 2026] [:error] [pid 24515:tid 24523] [client 20.251.195.197:65037] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "ade8-K1OMnvM2fMnB1PwgwAAAAQ"]
[Thu Apr 09 22:51:36.599580 2026] [:error] [pid 24515:tid 24530] [client 20.251.195.197:65029] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "ade8-K1OMnvM2fMnB1PwiAAAAAs"]
[Thu Apr 09 22:51:37.265584 2026] [:error] [pid 24515:tid 24537] [client 20.251.195.197:65103] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "ade8-a1OMnvM2fMnB1PwkwAAABI"]
[Thu Apr 09 22:51:37.998721 2026] [:error] [pid 20837:tid 20849] [client 20.251.195.197:65058] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "ade8-fSL71FHZkjrGzMQfAAAAYo"]
[Thu Apr 09 22:51:38.724623 2026] [:error] [pid 63331:tid 63338] [client 20.251.195.197:65053] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "ade8-ibKfIYuVjWbE4WbOgAAAcU"]
[Thu Apr 09 22:51:39.310036 2026] [:error] [pid 20837:tid 20851] [client 20.251.195.197:65101] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "ade8-_SL71FHZkjrGzMQfwAAAYw"]
[Thu Apr 09 22:51:40.050534 2026] [:error] [pid 24515:tid 24542] [client 20.251.195.197:65104] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "ade8_K1OMnvM2fMnB1PwlwAAABc"]
[Thu Apr 09 22:51:40.813670 2026] [:error] [pid 24517:tid 24598] [client 20.251.195.197:65137] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "ade8_HboYEn2ZFM_PS-KqQAAAJg"]
[Thu Apr 09 22:51:41.513101 2026] [:error] [pid 63331:tid 63354] [client 20.251.195.197:65093] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "ade8_SbKfIYuVjWbE4WbSgAAAdU"]
[Thu Apr 09 22:51:42.229493 2026] [:error] [pid 18477:tid 18488] [client 20.251.195.197:64454] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "ade8_sDe826HlFeoLPKtSQAAAUk"]
[Thu Apr 09 22:51:43.029105 2026] [:error] [pid 24515:tid 24529] [client 20.251.195.197:65150] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "ade8_61OMnvM2fMnB1PwnQAAAAo"]
[Thu Apr 09 22:51:43.804050 2026] [:error] [pid 24516:tid 24564] [client 20.251.195.197:65133] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "ade8_9hW7vSS-UkeWCU_PwAAAFE"]
[Thu Apr 09 22:51:44.525444 2026] [:error] [pid 20837:tid 20861] [client 20.251.195.197:65085] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ade9APSL71FHZkjrGzMQgQAAAZY"]
[Thu Apr 09 22:51:45.319250 2026] [:error] [pid 20837:tid 20856] [client 20.251.195.197:65138] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ade9AfSL71FHZkjrGzMQhQAAAZE"]
[Thu Apr 09 22:51:45.903554 2026] [:error] [pid 24927:tid 24931] [client 20.251.195.197:65073] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ade9ATXObuzEuw8mNJs3IgAAAQE"]
[Thu Apr 09 22:51:46.597561 2026] [:error] [pid 24515:tid 24528] [client 20.251.195.197:64496] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ade9Aq1OMnvM2fMnB1PwsAAAAAk"]
[Thu Apr 09 22:51:47.228860 2026] [:error] [pid 24515:tid 24523] [client 20.251.195.197:65067] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wswer1.php"] [unique_id "ade9A61OMnvM2fMnB1PwsgAAAAQ"]
[Thu Apr 09 22:51:47.802979 2026] [:error] [pid 24515:tid 24531] [client 20.251.195.197:65024] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wswer1.php"] [unique_id "ade9A61OMnvM2fMnB1PwuwAAAAw"]
[Thu Apr 09 22:51:48.375745 2026] [:error] [pid 24515:tid 24520] [client 20.251.195.197:64457] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wswer1.php"] [unique_id "ade9BK1OMnvM2fMnB1PwvgAAAAE"]
[Thu Apr 09 22:51:48.925707 2026] [:error] [pid 63331:tid 63337] [client 20.251.195.197:65044] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wswer1.php"] [unique_id "ade9BCbKfIYuVjWbE4WbWQAAAcQ"]
[Thu Apr 09 22:51:49.544086 2026] [:error] [pid 20837:tid 20845] [client 20.251.195.197:65087] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "ade9BfSL71FHZkjrGzMQjAAAAYY"]
[Thu Apr 09 22:51:50.286937 2026] [:error] [pid 18477:tid 18503] [client 20.251.195.197:64488] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "ade9BsDe826HlFeoLPKtUgAAAVg"]
[Thu Apr 09 22:51:50.819585 2026] [:error] [pid 63331:tid 63334] [client 20.251.195.197:64405] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "ade9BibKfIYuVjWbE4WbXwAAAcE"]
[Thu Apr 09 22:51:51.498214 2026] [:error] [pid 63331:tid 63342] [client 20.251.195.197:65151] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "ade9BybKfIYuVjWbE4WbYQAAAck"]
[Thu Apr 09 22:51:52.073525 2026] [:error] [pid 18477:tid 18491] [client 20.251.195.197:65064] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "ade9CMDe826HlFeoLPKtUwAAAUw"]
[Thu Apr 09 22:51:52.671319 2026] [:error] [pid 63331:tid 63344] [client 20.251.195.197:65063] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "ade9CCbKfIYuVjWbE4WbaAAAAcs"]
[Thu Apr 09 22:51:53.327141 2026] [:error] [pid 24517:tid 24597] [client 20.251.195.197:65034] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "ade9CXboYEn2ZFM_PS-KsgAAAJc"]
[Thu Apr 09 22:51:53.868770 2026] [:error] [pid 20837:tid 20840] [client 20.251.195.197:64391] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "ade9CfSL71FHZkjrGzMQkAAAAYE"]
[Thu Apr 09 22:51:54.435965 2026] [:error] [pid 24515:tid 24529] [client 20.251.195.197:65114] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "ade9Cq1OMnvM2fMnB1Pw4gAAAAo"]
[Thu Apr 09 22:51:55.135630 2026] [:error] [pid 24517:tid 24591] [client 20.251.195.197:64412] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "ade9C3boYEn2ZFM_PS-KswAAAJE"]
[Thu Apr 09 22:51:55.725382 2026] [:error] [pid 24515:tid 24523] [client 20.251.195.197:65113] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "ade9C61OMnvM2fMnB1Pw_QAAAAQ"]
[Thu Apr 09 22:51:56.338044 2026] [:error] [pid 20837:tid 20847] [client 20.251.195.197:65068] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "ade9DPSL71FHZkjrGzMQmQAAAYg"]
[Thu Apr 09 22:51:56.864964 2026] [:error] [pid 24516:tid 24557] [client 20.251.195.197:65033] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "ade9DNhW7vSS-UkeWCU_RQAAAEo"]
[Thu Apr 09 22:51:57.411127 2026] [:error] [pid 24516:tid 24571] [client 20.251.195.197:65097] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "ade9DdhW7vSS-UkeWCU_RgAAAFg"]
[Thu Apr 09 22:51:57.989040 2026] [:error] [pid 20837:tid 20849] [client 20.251.195.197:65028] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "ade9DfSL71FHZkjrGzMQnwAAAYo"]
[Thu Apr 09 22:51:58.572522 2026] [:error] [pid 24517:tid 24592] [client 20.251.195.197:65125] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "ade9DnboYEn2ZFM_PS-KxAAAAJI"]
[Thu Apr 09 22:51:59.103952 2026] [:error] [pid 24515:tid 24543] [client 20.251.195.197:65084] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "ade9D61OMnvM2fMnB1PxLAAAABg"]
[Thu Apr 09 22:51:59.642621 2026] [:error] [pid 63331:tid 63334] [client 20.251.195.197:64467] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "ade9DybKfIYuVjWbE4WbiAAAAcE"]
[Thu Apr 09 22:52:00.171205 2026] [:error] [pid 20837:tid 20839] [client 20.251.195.197:65035] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "ade9EPSL71FHZkjrGzMQpQAAAYA"]
[Thu Apr 09 22:52:00.696180 2026] [:error] [pid 20837:tid 20842] [client 20.251.195.197:64492] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "ade9EPSL71FHZkjrGzMQpgAAAYM"]
[Thu Apr 09 22:52:01.228609 2026] [:error] [pid 24927:tid 24953] [client 20.251.195.197:65038] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-turn.php"] [unique_id "ade9ETXObuzEuw8mNJs3MwAAARc"]
[Thu Apr 09 22:52:01.751187 2026] [:error] [pid 24624:tid 24638] [client 20.251.195.197:65047] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-turn.php"] [unique_id "ade9Ee4Jn-WvK1ZBTvj1-wAAAMw"]
[Thu Apr 09 22:52:02.285901 2026] [:error] [pid 63331:tid 63353] [client 20.251.195.197:65146] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-turn.php"] [unique_id "ade9EibKfIYuVjWbE4WbkgAAAdQ"]
[Thu Apr 09 22:52:02.808606 2026] [:error] [pid 20837:tid 20857] [client 20.251.195.197:64481] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-turn.php"] [unique_id "ade9EvSL71FHZkjrGzMQqgAAAZI"]
[Thu Apr 09 22:52:03.332809 2026] [:error] [pid 24624:tid 24641] [client 20.251.195.197:65066] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kolda.php"] [unique_id "ade9E-4Jn-WvK1ZBTvj1_QAAAM8"]
[Thu Apr 09 22:52:03.851832 2026] [:error] [pid 20837:tid 20853] [client 20.251.195.197:65134] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kolda.php"] [unique_id "ade9E_SL71FHZkjrGzMQrAAAAY4"]
[Thu Apr 09 22:52:04.384268 2026] [:error] [pid 24624:tid 24643] [client 20.251.195.197:64509] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kolda.php"] [unique_id "ade9FO4Jn-WvK1ZBTvj2AAAAANE"]
[Thu Apr 09 22:52:04.915730 2026] [:error] [pid 24624:tid 24636] [client 20.251.195.197:65043] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kolda.php"] [unique_id "ade9FO4Jn-WvK1ZBTvj2AgAAAMo"]
[Thu Apr 09 22:52:05.458353 2026] [:error] [pid 24515:tid 24532] [client 20.251.195.197:64461] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "ade9Fa1OMnvM2fMnB1PxOgAAAA0"]
[Thu Apr 09 22:52:05.987662 2026] [:error] [pid 18477:tid 18498] [client 20.251.195.197:64389] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "ade9FcDe826HlFeoLPKtWwAAAVM"]
[Thu Apr 09 22:52:06.519826 2026] [:error] [pid 24515:tid 24535] [client 20.251.195.197:64464] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "ade9Fq1OMnvM2fMnB1PxQAAAABA"]
[Thu Apr 09 22:52:07.044729 2026] [:error] [pid 24515:tid 24523] [client 20.251.195.197:65062] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "ade9F61OMnvM2fMnB1PxQwAAAAQ"]
[Thu Apr 09 22:52:07.597373 2026] [:error] [pid 24515:tid 24537] [client 20.251.195.197:65118] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/red.php"] [unique_id "ade9F61OMnvM2fMnB1PxRgAAABI"]
[Thu Apr 09 22:52:08.129016 2026] [:error] [pid 24927:tid 24948] [client 20.251.195.197:65147] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/red.php"] [unique_id "ade9GDXObuzEuw8mNJs3OAAAARI"]
[Thu Apr 09 22:52:08.647397 2026] [:error] [pid 24516:tid 24564] [client 20.251.195.197:65032] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/red.php"] [unique_id "ade9GNhW7vSS-UkeWCU_SgAAAFE"]
[Thu Apr 09 22:52:09.172913 2026] [:error] [pid 63331:tid 63349] [client 20.251.195.197:65027] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/red.php"] [unique_id "ade9GSbKfIYuVjWbE4WblAAAAdA"]
[Thu Apr 09 22:52:09.767549 2026] [:error] [pid 18477:tid 18499] [client 20.251.195.197:65141] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "ade9GcDe826HlFeoLPKtXQAAAVQ"]
[Thu Apr 09 22:52:10.295667 2026] [:error] [pid 20837:tid 20841] [client 20.251.195.197:64463] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "ade9GvSL71FHZkjrGzMQtgAAAYI"]
[Thu Apr 09 22:52:10.924778 2026] [:error] [pid 24515:tid 24538] [client 20.251.195.197:64448] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "ade9Gq1OMnvM2fMnB1PxUAAAABM"]
[Thu Apr 09 22:52:11.563779 2026] [:error] [pid 24515:tid 24530] [client 20.251.195.197:64387] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "ade9G61OMnvM2fMnB1PxUgAAAAs"]
[Thu Apr 09 22:52:12.154541 2026] [:error] [pid 63331:tid 63343] [client 20.251.195.197:64498] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ade9HCbKfIYuVjWbE4WbmwAAAco"]
[Thu Apr 09 22:52:12.681813 2026] [:error] [pid 20837:tid 20843] [client 20.251.195.197:64470] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ade9HPSL71FHZkjrGzMQuQAAAYQ"]
[Thu Apr 09 22:52:13.245036 2026] [:error] [pid 20837:tid 20857] [client 20.251.195.197:65075] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ade9HfSL71FHZkjrGzMQvAAAAZI"]
[Thu Apr 09 22:52:13.777986 2026] [:error] [pid 24927:tid 24949] [client 20.251.195.197:65078] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ade9HTXObuzEuw8mNJs3PwAAARM"]
[Thu Apr 09 22:52:14.373774 2026] [:error] [pid 63331:tid 63333] [client 20.251.195.197:65082] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "ade9HibKfIYuVjWbE4WbsQAAAcA"]
[Thu Apr 09 22:52:14.932123 2026] [:error] [pid 63331:tid 63348] [client 20.251.195.197:65059] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "ade9HibKfIYuVjWbE4WbtAAAAc8"]
[Thu Apr 09 22:52:15.485223 2026] [:error] [pid 24624:tid 24637] [client 20.251.195.197:65126] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "ade9H-4Jn-WvK1ZBTvj2BAAAAMs"]
[Thu Apr 09 22:52:16.071461 2026] [:error] [pid 24516:tid 24563] [client 20.251.195.197:65111] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "ade9INhW7vSS-UkeWCU_TgAAAFA"]
[Thu Apr 09 22:52:16.635951 2026] [:error] [pid 24624:tid 24648] [client 20.251.195.197:65128] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "ade9IO4Jn-WvK1ZBTvj2BgAAANY"]
[Thu Apr 09 22:52:17.170917 2026] [:error] [pid 20837:tid 20852] [client 20.251.195.197:65025] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "ade9IfSL71FHZkjrGzMQxAAAAY0"]
[Thu Apr 09 22:52:17.699185 2026] [:error] [pid 20837:tid 20842] [client 20.251.195.197:65099] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "ade9IfSL71FHZkjrGzMQxgAAAYM"]
[Thu Apr 09 22:52:18.219989 2026] [:error] [pid 63331:tid 63337] [client 20.251.195.197:64510] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "ade9IibKfIYuVjWbE4WbtgAAAcQ"]
[Thu Apr 09 22:52:18.757144 2026] [:error] [pid 20837:tid 20860] [client 20.251.195.197:65121] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "ade9IvSL71FHZkjrGzMQygAAAZU"]
[Thu Apr 09 22:52:19.279377 2026] [:error] [pid 24516:tid 24556] [client 20.251.195.197:64465] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "ade9I9hW7vSS-UkeWCU_VQAAAEk"]
[Thu Apr 09 22:52:19.829041 2026] [:error] [pid 18477:tid 18497] [client 20.251.195.197:64403] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "ade9I8De826HlFeoLPKtZgAAAVI"]
[Thu Apr 09 22:52:20.362647 2026] [:error] [pid 18477:tid 18489] [client 20.251.195.197:64415] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "ade9JMDe826HlFeoLPKtZwAAAUo"]
[Thu Apr 09 22:52:20.940571 2026] [:error] [pid 24515:tid 24541] [client 20.251.195.197:65083] [client 20.251.195.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ade9JK1OMnvM2fMnB1PxgQAAABY"]
[Thu Apr 09 22:52:21.489173 2026] [:error] [pid 63331:tid 63351] [client 20.251.195.197:64499] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "ade9JSbKfIYuVjWbE4WbvAAAAdI"]
[Thu Apr 09 22:52:22.016757 2026] [:error] [pid 63331:tid 63333] [client 20.251.195.197:65127] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Thu Apr 09 22:52:22.285100 2026] [:error] [pid 63331:tid 63335] [client 20.251.195.197:65127] File does not exist: /usr/local/apache/htdocs/suspended-page/myy.php
[Thu Apr 09 22:52:22.546736 2026] [:error] [pid 63331:tid 63348] [client 20.251.195.197:65127] [client 20.251.195.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "ade9JibKfIYuVjWbE4WbwgAAAc8"]
[Thu Apr 09 22:52:23.107001 2026] [:error] [pid 63331:tid 63352] [client 20.251.195.197:65081] File does not exist: /usr/local/apache/htdocs/suspended-page/wdone1.php
[Thu Apr 09 22:52:23.373326 2026] [:error] [pid 63331:tid 63354] [client 20.251.195.197:65081] File does not exist: /usr/local/apache/htdocs/suspended-page/xff.php
[Thu Apr 09 22:52:23.636617 2026] [:error] [pid 63331:tid 63337] [client 20.251.195.197:65081] File does not exist: /usr/local/apache/htdocs/suspended-page/wsheet1.php
[Thu Apr 09 22:52:23.907754 2026] [:error] [pid 63331:tid 63353] [client 20.251.195.197:65081] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Thu Apr 09 22:52:24.172398 2026] [:error] [pid 63331:tid 63349] [client 20.251.195.197:65081] File does not exist: /usr/local/apache/htdocs/suspended-page/wps.php
[Thu Apr 09 22:52:24.437836 2026] [:error] [pid 63331:tid 63339] [client 20.251.195.197:65081] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Thu Apr 09 22:52:24.701140 2026] [:error] [pid 63331:tid 63335] [client 20.251.195.197:65081] File does not exist: /usr/local/apache/htdocs/suspended-page/ggb.php
[Thu Apr 09 22:52:24.969181 2026] [:error] [pid 63331:tid 63340] [client 20.251.195.197:65081] File does not exist: /usr/local/apache/htdocs/suspended-page/tiny2.php
[Thu Apr 09 22:52:25.238493 2026] [:error] [pid 63331:tid 63345] [client 20.251.195.197:65081] File does not exist: /usr/local/apache/htdocs/suspended-page/ava.php
[Thu Apr 09 22:52:25.499296 2026] [:error] [pid 63331:tid 63343] [client 20.251.195.197:65081] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/awh.php"] [unique_id "ade9KSbKfIYuVjWbE4Wb1QAAAco"]
[Thu Apr 09 22:52:26.085927 2026] [:error] [pid 24927:tid 24948] [client 20.251.195.197:65119] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/awh.php"] [unique_id "ade9KjXObuzEuw8mNJs3SwAAARI"]
[Thu Apr 09 22:52:26.678578 2026] [:error] [pid 63331:tid 63337] [client 20.251.195.197:65102] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/awh.php"] [unique_id "ade9KibKfIYuVjWbE4Wb2AAAAcQ"]
[Thu Apr 09 22:52:27.345814 2026] [:error] [pid 63331:tid 63350] [client 20.251.195.197:64484] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/awh.php"] [unique_id "ade9KybKfIYuVjWbE4Wb2QAAAdE"]
[Thu Apr 09 22:52:28.024567 2026] [:error] [pid 24624:tid 24645] [client 20.251.195.197:65136] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r2.php"] [unique_id "ade9LO4Jn-WvK1ZBTvj2GwAAANM"]
[Thu Apr 09 22:52:28.649589 2026] [:error] [pid 24515:tid 24521] [client 20.251.195.197:65095] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r2.php"] [unique_id "ade9LK1OMnvM2fMnB1PxjAAAAAI"]
[Thu Apr 09 22:52:29.188052 2026] [:error] [pid 20837:tid 20861] [client 20.251.195.197:64474] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r2.php"] [unique_id "ade9LfSL71FHZkjrGzMQzQAAAZY"]
[Thu Apr 09 22:52:29.758566 2026] [:error] [pid 20837:tid 20839] [client 20.251.195.197:64450] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r2.php"] [unique_id "ade9LfSL71FHZkjrGzMQzwAAAYA"]
[Thu Apr 09 22:52:30.306759 2026] [:error] [pid 63331:tid 63339] [client 20.251.195.197:65110] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ade9LibKfIYuVjWbE4Wb3AAAAcY"]
[Thu Apr 09 22:52:30.886928 2026] [:error] [pid 24624:tid 24644] [client 20.251.195.197:64416] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ade9Lu4Jn-WvK1ZBTvj2IAAAANI"]
[Thu Apr 09 22:52:31.479626 2026] [:error] [pid 24624:tid 24640] [client 20.251.195.197:65049] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ade9L-4Jn-WvK1ZBTvj2IQAAAM4"]
[Thu Apr 09 22:52:32.003966 2026] [:error] [pid 24515:tid 24522] [client 20.251.195.197:65080] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ade9MK1OMnvM2fMnB1PxlAAAAAM"]
[Thu Apr 09 22:52:32.540927 2026] [:error] [pid 63331:tid 63337] [client 20.251.195.197:64508] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "ade9MCbKfIYuVjWbE4Wb5wAAAcQ"]
[Thu Apr 09 22:52:33.144662 2026] [:error] [pid 63331:tid 63357] [client 20.251.195.197:65106] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "ade9MSbKfIYuVjWbE4Wb7gAAAdg"]
[Thu Apr 09 22:52:33.672429 2026] [:error] [pid 20837:tid 20860] [client 20.251.195.197:63750] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "ade9MfSL71FHZkjrGzMQ1AAAAZU"]
[Thu Apr 09 22:52:34.274760 2026] [:error] [pid 24624:tid 24626] [client 20.251.195.197:64425] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "ade9Mu4Jn-WvK1ZBTvj2JQAAAMA"]
[Thu Apr 09 22:52:34.808402 2026] [:error] [pid 24624:tid 24630] [client 20.251.195.197:65086] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp-image.php"] [unique_id "ade9Mu4Jn-WvK1ZBTvj2JgAAAMQ"]
[Thu Apr 09 22:52:35.341986 2026] [:error] [pid 63331:tid 63351] [client 20.251.195.197:64505] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp-image.php"] [unique_id "ade9MybKfIYuVjWbE4WcAAAAAdI"]
[Thu Apr 09 22:52:35.912937 2026] [:error] [pid 20837:tid 20856] [client 20.251.195.197:64392] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp-image.php"] [unique_id "ade9M_SL71FHZkjrGzMQ1QAAAZE"]
[Thu Apr 09 22:52:36.491498 2026] [:error] [pid 24516:tid 24561] [client 20.251.195.197:65140] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp-image.php"] [unique_id "ade9NNhW7vSS-UkeWCU_YQAAAE4"]
[Thu Apr 09 22:52:37.155180 2026] [:error] [pid 20837:tid 20853] [client 20.251.195.197:65060] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/riz.php"] [unique_id "ade9NfSL71FHZkjrGzMQ1wAAAY4"]
[Thu Apr 09 22:52:37.695658 2026] [:error] [pid 18477:tid 18495] [client 20.251.195.197:64477] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/riz.php"] [unique_id "ade9NcDe826HlFeoLPKtagAAAVA"]
[Thu Apr 09 22:52:38.252307 2026] [:error] [pid 20837:tid 20854] [client 20.251.195.197:64384] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/riz.php"] [unique_id "ade9NvSL71FHZkjrGzMQ2wAAAY8"]
[Thu Apr 09 22:52:38.917919 2026] [:error] [pid 63331:tid 63348] [client 20.251.195.197:63822] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/riz.php"] [unique_id "ade9NibKfIYuVjWbE4WcAwAAAc8"]
[Thu Apr 09 22:52:39.500042 2026] [:error] [pid 24515:tid 24533] [client 20.251.195.197:64407] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "ade9N61OMnvM2fMnB1PxpgAAAA4"]
[Thu Apr 09 22:52:40.063404 2026] [:error] [pid 63331:tid 63341] [client 20.251.195.197:64460] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "ade9OCbKfIYuVjWbE4WcDAAAAcg"]
[Thu Apr 09 22:52:40.635367 2026] [:error] [pid 24624:tid 24639] [client 20.251.195.197:64487] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "ade9OO4Jn-WvK1ZBTvj2KwAAAM0"]
[Thu Apr 09 22:52:41.227399 2026] [:error] [pid 63331:tid 63356] [client 20.251.195.197:64386] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "ade9OSbKfIYuVjWbE4WcEwAAAdc"]
[Thu Apr 09 22:52:41.779802 2026] [:error] [pid 20837:tid 20842] [client 20.251.195.197:64494] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/om.php"] [unique_id "ade9OfSL71FHZkjrGzMQ4wAAAYM"]
[Thu Apr 09 22:52:42.316944 2026] [:error] [pid 24927:tid 24952] [client 20.251.195.197:64486] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/om.php"] [unique_id "ade9OjXObuzEuw8mNJs3XQAAARY"]
[Thu Apr 09 22:52:42.864634 2026] [:error] [pid 20837:tid 20841] [client 20.251.195.197:64409] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/om.php"] [unique_id "ade9OvSL71FHZkjrGzMQ5AAAAYI"]
[Thu Apr 09 22:52:43.424802 2026] [:error] [pid 24515:tid 24530] [client 20.251.195.197:65088] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/om.php"] [unique_id "ade9O61OMnvM2fMnB1PxrAAAAAs"]
[Thu Apr 09 22:52:43.953599 2026] [:error] [pid 24515:tid 24542] [client 20.251.195.197:65061] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "ade9O61OMnvM2fMnB1PxsAAAABc"]
[Thu Apr 09 22:52:44.481478 2026] [:error] [pid 24515:tid 24522] [client 20.251.195.197:64455] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "ade9PK1OMnvM2fMnB1PxsgAAAAM"]
[Thu Apr 09 22:52:45.086191 2026] [:error] [pid 24515:tid 24533] [client 20.251.195.197:65040] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "ade9Pa1OMnvM2fMnB1PxtQAAAA4"]
[Thu Apr 09 22:52:45.681348 2026] [:error] [pid 24624:tid 24645] [client 20.251.195.197:64473] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "ade9Pe4Jn-WvK1ZBTvj2OAAAANM"]
[Thu Apr 09 22:52:46.338386 2026] [:error] [pid 24516:tid 24559] [client 20.251.195.197:64500] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ade9PthW7vSS-UkeWCU_ZQAAAEw"]
[Thu Apr 09 22:52:46.879345 2026] [:error] [pid 24516:tid 24558] [client 20.251.195.197:64411] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ade9PthW7vSS-UkeWCU_ZwAAAEs"]
[Thu Apr 09 22:52:47.434719 2026] [:error] [pid 24624:tid 24629] [client 20.251.195.197:65091] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ade9P-4Jn-WvK1ZBTvj2PwAAAMM"]
[Thu Apr 09 22:52:48.038813 2026] [:error] [pid 24515:tid 24539] [client 20.251.195.197:64410] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ade9QK1OMnvM2fMnB1PxyQAAABQ"]
[Thu Apr 09 22:52:48.592139 2026] [:error] [pid 24516:tid 24560] [client 20.251.195.197:65142] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "ade9QNhW7vSS-UkeWCU_awAAAE0"]
[Thu Apr 09 22:52:49.112804 2026] [:error] [pid 24516:tid 24563] [client 20.251.195.197:65079] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "ade9QdhW7vSS-UkeWCU_bQAAAFA"]
[Thu Apr 09 22:52:49.633503 2026] [:error] [pid 24927:tid 24932] [client 20.251.195.197:64404] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "ade9QTXObuzEuw8mNJs3aAAAAQI"]
[Thu Apr 09 22:52:50.165508 2026] [:error] [pid 24624:tid 24646] [client 20.251.195.197:64419] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "ade9Qu4Jn-WvK1ZBTvj2SAAAANQ"]
[Thu Apr 09 22:52:50.687840 2026] [:error] [pid 20837:tid 20845] [client 20.251.195.197:64423] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wolf.php"] [unique_id "ade9QvSL71FHZkjrGzMQ6gAAAYY"]
[Thu Apr 09 22:52:51.208767 2026] [:error] [pid 20837:tid 20840] [client 20.251.195.197:64497] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wolf.php"] [unique_id "ade9Q_SL71FHZkjrGzMQ8AAAAYE"]
[Thu Apr 09 22:52:51.729417 2026] [:error] [pid 20837:tid 20844] [client 20.251.195.197:64471] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wolf.php"] [unique_id "ade9Q_SL71FHZkjrGzMQ9QAAAYU"]
[Thu Apr 09 22:52:52.262184 2026] [:error] [pid 24624:tid 24628] [client 20.251.195.197:65041] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wolf.php"] [unique_id "ade9RO4Jn-WvK1ZBTvj2VAAAAMI"]
[Thu Apr 09 22:52:52.803311 2026] [:error] [pid 24624:tid 24635] [client 20.251.195.197:64453] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "ade9RO4Jn-WvK1ZBTvj2WAAAAMk"]
[Thu Apr 09 22:52:53.339602 2026] [:error] [pid 20837:tid 20846] [client 20.251.195.197:64429] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "ade9RfSL71FHZkjrGzMQ_gAAAYc"]
[Thu Apr 09 22:52:53.873483 2026] [:error] [pid 24624:tid 24632] [client 20.251.195.197:63809] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "ade9Re4Jn-WvK1ZBTvj2YQAAAMY"]
[Thu Apr 09 22:52:54.398553 2026] [:error] [pid 24927:tid 24945] [client 20.251.195.197:65131] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "ade9RjXObuzEuw8mNJs3bAAAAQ8"]
[Thu Apr 09 22:52:54.916428 2026] [:error] [pid 24517:tid 24582] [client 20.251.195.197:64491] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "ade9RnboYEn2ZFM_PS-K6wAAAIg"]
[Thu Apr 09 22:52:55.473355 2026] [:error] [pid 24927:tid 24938] [client 20.251.195.197:65065] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "ade9RzXObuzEuw8mNJs3bgAAAQg"]
[Thu Apr 09 22:52:56.076901 2026] [:error] [pid 24624:tid 24637] [client 20.251.195.197:63861] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "ade9SO4Jn-WvK1ZBTvj2cgAAAMs"]
[Thu Apr 09 22:52:56.607326 2026] [:error] [pid 24516:tid 24555] [client 20.251.195.197:64458] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "ade9SNhW7vSS-UkeWCU_dgAAAEg"]
[Thu Apr 09 22:52:57.133880 2026] [:error] [pid 24624:tid 24643] [client 20.251.195.197:65072] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "ade9Se4Jn-WvK1ZBTvj2eQAAANE"]
[Thu Apr 09 22:52:57.671087 2026] [:error] [pid 24624:tid 24635] [client 20.251.195.197:63831] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "ade9Se4Jn-WvK1ZBTvj2fAAAAMk"]
[Thu Apr 09 22:52:58.235214 2026] [:error] [pid 24624:tid 24627] [client 20.251.195.197:64490] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "ade9Su4Jn-WvK1ZBTvj2fQAAAME"]
[Thu Apr 09 22:52:58.776819 2026] [:error] [pid 24624:tid 24633] [client 20.251.195.197:64506] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "ade9Su4Jn-WvK1ZBTvj2fgAAAMc"]
[Thu Apr 09 22:52:59.324424 2026] [:error] [pid 24515:tid 24524] [client 20.251.195.197:65145] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "ade9S61OMnvM2fMnB1PxzgAAAAU"]
[Thu Apr 09 22:52:59.861813 2026] [:error] [pid 24927:tid 24954] [client 20.251.195.197:64485] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "ade9SzXObuzEuw8mNJs3dQAAARg"]
[Thu Apr 09 22:53:00.447159 2026] [:error] [pid 24517:tid 24592] [client 20.251.195.197:64408] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "ade9THboYEn2ZFM_PS-K7gAAAJI"]
[Thu Apr 09 22:53:00.988867 2026] [:error] [pid 24516:tid 24565] [client 20.251.195.197:65129] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "ade9TNhW7vSS-UkeWCU_egAAAFI"]
[Thu Apr 09 22:53:01.598963 2026] [:error] [pid 18477:tid 18481] [client 20.251.195.197:65147] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ade9TcDe826HlFeoLPKtgAAAAUI"]
[Thu Apr 09 22:53:02.138519 2026] [:error] [pid 24624:tid 24629] [client 20.251.195.197:64439] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ade9Tu4Jn-WvK1ZBTvj2hAAAAMM"]
[Thu Apr 09 22:53:02.661500 2026] [:error] [pid 18477:tid 18491] [client 20.251.195.197:63867] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ade9TsDe826HlFeoLPKthQAAAUw"]
[Thu Apr 09 22:53:03.194527 2026] [:error] [pid 24927:tid 24942] [client 20.251.195.197:64479] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ade9TzXObuzEuw8mNJs3dgAAAQw"]
[Thu Apr 09 22:53:03.760932 2026] [:error] [pid 24624:tid 24626] [client 20.251.195.197:63833] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/image.php"] [unique_id "ade9T-4Jn-WvK1ZBTvj2hQAAAMA"]
[Thu Apr 09 22:53:04.280123 2026] [:error] [pid 24624:tid 24644] [client 20.251.195.197:63808] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/image.php"] [unique_id "ade9UO4Jn-WvK1ZBTvj2hwAAANI"]
[Thu Apr 09 22:53:04.832741 2026] [:error] [pid 24515:tid 24525] [client 20.251.195.197:65056] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/image.php"] [unique_id "ade9UK1OMnvM2fMnB1Px2AAAAAY"]
[Thu Apr 09 22:53:05.355524 2026] [:error] [pid 24515:tid 24538] [client 20.251.195.197:65123] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/image.php"] [unique_id "ade9Ua1OMnvM2fMnB1Px2gAAABM"]
[Thu Apr 09 22:53:05.891554 2026] [:error] [pid 24927:tid 24949] [client 20.251.195.197:65098] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ade9UTXObuzEuw8mNJs3egAAARM"]
[Thu Apr 09 22:53:06.442899 2026] [:error] [pid 24927:tid 24946] [client 20.251.195.197:64483] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ade9UjXObuzEuw8mNJs3fAAAARA"]
[Thu Apr 09 22:53:06.970914 2026] [:error] [pid 24624:tid 24630] [client 20.251.195.197:64417] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ade9Uu4Jn-WvK1ZBTvj2iwAAAMQ"]
[Thu Apr 09 22:53:07.511090 2026] [:error] [pid 63331:tid 63341] [client 20.251.195.197:65122] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ade9UybKfIYuVjWbE4WcIwAAAcg"]
[Thu Apr 09 22:53:08.039470 2026] [:error] [pid 63331:tid 63347] [client 20.251.195.197:64449] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ade9VCbKfIYuVjWbE4WcKAAAAc4"]
[Thu Apr 09 22:53:08.559968 2026] [:error] [pid 24927:tid 24934] [client 20.251.195.197:65108] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ade9VDXObuzEuw8mNJs3fgAAAQQ"]
[Thu Apr 09 22:53:09.083826 2026] [:error] [pid 24927:tid 24931] [client 20.251.195.197:65092] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ade9VTXObuzEuw8mNJs3fwAAAQE"]
[Thu Apr 09 22:53:09.629418 2026] [:error] [pid 18477:tid 18490] [client 20.251.195.197:64426] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ade9VcDe826HlFeoLPKtkAAAAUs"]
[Thu Apr 09 22:53:10.196454 2026] [:error] [pid 24517:tid 24589] [client 20.251.195.197:64468] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "ade9VnboYEn2ZFM_PS-K9QAAAI8"]
[Thu Apr 09 22:53:10.733362 2026] [:error] [pid 20837:tid 20857] [client 20.251.195.197:63840] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "ade9VvSL71FHZkjrGzMRBAAAAZI"]
[Thu Apr 09 22:53:11.268049 2026] [:error] [pid 63331:tid 63352] [client 20.251.195.197:64394] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "ade9VybKfIYuVjWbE4WcKgAAAdM"]
[Thu Apr 09 22:53:11.800475 2026] [:error] [pid 24517:tid 24594] [client 20.251.195.197:65046] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "ade9V3boYEn2ZFM_PS-K9gAAAJQ"]
[Thu Apr 09 22:53:12.336827 2026] [:error] [pid 24624:tid 24638] [client 20.251.195.197:63825] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ade9WO4Jn-WvK1ZBTvj2jgAAAMw"]
[Thu Apr 09 22:53:12.864963 2026] [:error] [pid 24516:tid 24563] [client 20.251.195.197:65112] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ade9WNhW7vSS-UkeWCU_iAAAAFA"]
[Thu Apr 09 22:53:13.404933 2026] [:error] [pid 24516:tid 24549] [client 20.251.195.197:63824] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ade9WdhW7vSS-UkeWCU_jgAAAEI"]
[Thu Apr 09 22:53:13.921711 2026] [:error] [pid 63331:tid 63350] [client 20.251.195.197:63851] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ade9WSbKfIYuVjWbE4WcLAAAAdE"]
[Thu Apr 09 22:53:14.439706 2026] [:error] [pid 63331:tid 63344] [client 20.251.195.197:63843] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "ade9WibKfIYuVjWbE4WcLgAAAcs"]
[Thu Apr 09 22:53:14.998703 2026] [:error] [pid 24515:tid 24522] [client 20.251.195.197:64421] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "ade9Wq1OMnvM2fMnB1Px7QAAAAM"]
[Thu Apr 09 22:53:15.533044 2026] [:error] [pid 24624:tid 24642] [client 20.251.195.197:64493] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "ade9W-4Jn-WvK1ZBTvj2kgAAANA"]
[Thu Apr 09 22:53:16.059516 2026] [:error] [pid 24927:tid 24938] [client 20.251.195.197:64476] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "ade9XDXObuzEuw8mNJs3jgAAAQg"]
[Thu Apr 09 22:53:16.580957 2026] [:error] [pid 24624:tid 24647] [client 20.251.195.197:63754] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ade9XO4Jn-WvK1ZBTvj2lwAAANU"]
[Thu Apr 09 22:53:17.104866 2026] [:error] [pid 24927:tid 24954] [client 20.251.195.197:63839] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ade9XTXObuzEuw8mNJs3lwAAARg"]
[Thu Apr 09 22:53:17.627350 2026] [:error] [pid 63331:tid 63356] [client 20.251.195.197:64462] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ade9XSbKfIYuVjWbE4WcNgAAAdc"]
[Thu Apr 09 22:53:18.145971 2026] [:error] [pid 24515:tid 24520] [client 20.251.195.197:65054] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ade9Xq1OMnvM2fMnB1Px_AAAAAE"]
[Thu Apr 09 22:53:18.690003 2026] [:error] [pid 63331:tid 63343] [client 20.251.195.197:63826] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "ade9XibKfIYuVjWbE4WcOgAAAco"]
[Thu Apr 09 22:53:19.213095 2026] [:error] [pid 20837:tid 20855] [client 20.251.195.197:64418] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "ade9X_SL71FHZkjrGzMRGwAAAZA"]
[Thu Apr 09 22:53:19.747706 2026] [:error] [pid 20837:tid 20860] [client 20.251.195.197:64445] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "ade9X_SL71FHZkjrGzMRHAAAAZU"]
[Thu Apr 09 22:53:20.289573 2026] [:error] [pid 63331:tid 63350] [client 20.251.195.197:64424] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "ade9YCbKfIYuVjWbE4WcPQAAAdE"]
[Thu Apr 09 22:53:20.820132 2026] [:error] [pid 18477:tid 18483] [client 20.251.195.197:65116] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1aa.php"] [unique_id "ade9YMDe826HlFeoLPKtmQAAAUQ"]
[Thu Apr 09 22:53:21.356488 2026] [:error] [pid 20837:tid 20839] [client 20.251.195.197:65143] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1aa.php"] [unique_id "ade9YfSL71FHZkjrGzMRIgAAAYA"]
[Thu Apr 09 22:53:21.897026 2026] [:error] [pid 20837:tid 20861] [client 20.251.195.197:64388] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1aa.php"] [unique_id "ade9YfSL71FHZkjrGzMRIwAAAZY"]
[Thu Apr 09 22:53:22.417185 2026] [:error] [pid 63331:tid 63338] [client 20.251.195.197:65070] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1aa.php"] [unique_id "ade9YibKfIYuVjWbE4WcQAAAAcU"]
[Thu Apr 09 22:53:23.016794 2026] [:error] [pid 63331:tid 63341] [client 20.251.195.197:65105] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ade9YybKfIYuVjWbE4WcQgAAAcg"]
[Thu Apr 09 22:53:23.541024 2026] [:error] [pid 24515:tid 24532] [client 20.251.195.197:64456] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ade9Y61OMnvM2fMnB1PyBAAAAA0"]
[Thu Apr 09 22:53:24.094380 2026] [:error] [pid 63331:tid 63356] [client 20.251.195.197:63841] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ade9ZCbKfIYuVjWbE4WcSAAAAdc"]
[Thu Apr 09 22:53:24.618743 2026] [:error] [pid 24927:tid 24953] [client 20.251.195.197:63813] [client 20.251.195.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ade9ZDXObuzEuw8mNJs3oQAAARc"]
[Thu Apr 09 22:53:25.161790 2026] [:error] [pid 24515:tid 24530] [client 20.251.195.197:65107] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Thu Apr 09 22:53:25.423250 2026] [:error] [pid 24515:tid 24543] [client 20.251.195.197:65107] File does not exist: /usr/local/apache/htdocs/suspended-page/n3yUmQ6Q9xwQ8ocdefault.php
[Thu Apr 09 22:53:25.685945 2026] [:error] [pid 24515:tid 24522] [client 20.251.195.197:65107] File does not exist: /usr/local/apache/htdocs/suspended-page/lmutxdvyp7u5yksqke8ozbjgCdefault.php
[Fri Apr 10 00:11:29.264869 2026] [:error] [pid 20837:tid 20859] [client 4.223.166.35:25337] File does not exist: /usr/local/apache/htdocs/suspended-page/shadow-bot.php
[Fri Apr 10 00:11:29.531401 2026] [:error] [pid 20837:tid 20851] [client 4.223.166.35:25337] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Fri Apr 10 00:11:29.796621 2026] [:error] [pid 20837:tid 20852] [client 4.223.166.35:25337] File does not exist: /usr/local/apache/htdocs/suspended-page/file59.php
[Fri Apr 10 00:11:30.064042 2026] [:error] [pid 20837:tid 20843] [client 4.223.166.35:25337] File does not exist: /usr/local/apache/htdocs/suspended-page/file21.php
[Fri Apr 10 00:11:30.339854 2026] [:error] [pid 20837:tid 20855] [client 4.223.166.35:25337] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Fri Apr 10 00:11:30.605029 2026] [:error] [pid 20837:tid 20846] [client 4.223.166.35:25337] File does not exist: /usr/local/apache/htdocs/suspended-page/bypltspd.php
[Fri Apr 10 06:41:23.890942 2026] [:error] [pid 12576:tid 12671] [client 4.204.215.156:13266] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file/chosen.php"] [unique_id "adgrEwZp1JUS4li1Qnu4agAAAJY"]
[Fri Apr 10 06:41:54.371373 2026] [:error] [pid 12685:tid 12706] [client 4.204.215.156:13252] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css/chosen.php"] [unique_id "adgrMs8f5ssYShsynaqAzAAAANM"]
[Fri Apr 10 06:41:58.375530 2026] [:error] [pid 59218:tid 59241] [client 4.204.215.156:13298] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css/chosen.php"] [unique_id "adgrNojSO_Wp4VS3Qe_0DQAAAZU"]
[Fri Apr 10 06:42:01.303200 2026] [:error] [pid 12574:tid 12615] [client 4.204.215.156:13269] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css/chosen.php"] [unique_id "adgrOXw-1tvJISKJyrTb2QAAABU"]
[Fri Apr 10 06:42:06.816204 2026] [:error] [pid 59098:tid 59113] [client 4.204.215.156:13304] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css/chosen.php"] [unique_id "adgrPiZshs05JVy8bJ4Z6QAAAQw"]
[Fri Apr 10 06:42:10.088938 2026] [:error] [pid 12685:tid 12702] [client 4.204.215.156:13256] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "adgrQs8f5ssYShsynaqA1AAAAM8"]
[Fri Apr 10 06:42:12.291501 2026] [:error] [pid 12685:tid 12696] [client 4.204.215.156:13186] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "adgrRM8f5ssYShsynaqA1wAAAMk"]
[Fri Apr 10 06:42:20.341600 2026] [:error] [pid 12575:tid 12638] [client 4.204.215.156:13185] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "adgrTCjFTOT5X6zsPClRyQAAAFA"]
[Fri Apr 10 06:42:24.916306 2026] [:error] [pid 59218:tid 59232] [client 4.204.215.156:13287] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Apr 10 06:42:31.269600 2026] [:error] [pid 59144:tid 59153] [client 4.204.215.156:13274] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Apr 10 06:42:32.744450 2026] [:error] [pid 59144:tid 59161] [client 4.204.215.156:13274] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Fri Apr 10 06:42:33.233596 2026] [:error] [pid 59144:tid 59168] [client 4.204.215.156:13274] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Fri Apr 10 06:42:33.450144 2026] [:error] [pid 59144:tid 59156] [client 4.204.215.156:13274] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Fri Apr 10 06:42:33.655213 2026] [:error] [pid 59144:tid 59147] [client 4.204.215.156:13274] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byp.php"] [unique_id "adgrWRta6MlufQo3_orxugAAAUE"]
[Fri Apr 10 06:42:46.030321 2026] [:error] [pid 59218:tid 59233] [client 4.204.215.156:13197] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byp.php"] [unique_id "adgrZojSO_Wp4VS3Qe_0IgAAAY0"]
[Fri Apr 10 06:42:47.937026 2026] [:error] [pid 12575:tid 12645] [client 4.204.215.156:13265] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byp.php"] [unique_id "adgrZyjFTOT5X6zsPClRzAAAAFc"]
[Fri Apr 10 06:42:50.762164 2026] [:error] [pid 12685:tid 12704] [client 4.204.215.156:13223] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "adgras8f5ssYShsynaqBMgAAANE"]
[Fri Apr 10 06:42:58.887724 2026] [:error] [pid 12685:tid 12693] [client 4.204.215.156:13251] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "adgrcs8f5ssYShsynaqBWAAAAMY"]
[Fri Apr 10 06:43:04.425086 2026] [:error] [pid 12685:tid 12711] [client 4.204.215.156:13189] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "adgreM8f5ssYShsynaqBYAAAANg"]
[Fri Apr 10 06:43:07.386488 2026] [:error] [pid 12576:tid 12650] [client 4.204.215.156:13285] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php/wp-includes/admin.php"] [unique_id "adgrewZp1JUS4li1Qnu4gAAAAIE"]
[Fri Apr 10 06:43:16.362614 2026] [:error] [pid 12574:tid 12597] [client 4.204.215.156:13192] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php/wp-includes/admin.php"] [unique_id "adgrhHw-1tvJISKJyrTb6gAAAAM"]
[Fri Apr 10 06:43:19.088743 2026] [:error] [pid 59144:tid 59164] [client 4.204.215.156:13203] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php/wp-includes/admin.php"] [unique_id "adgrhxta6MlufQo3_orxyAAAAVI"]
[Fri Apr 10 06:43:33.551384 2026] [:error] [pid 12576:tid 12662] [client 4.204.215.156:13286] File does not exist: /usr/local/apache/htdocs/suspended-page/bootstrap.php
[Fri Apr 10 06:43:33.763477 2026] [:error] [pid 12576:tid 12661] [client 4.204.215.156:13286] File does not exist: /usr/local/apache/htdocs/suspended-page/config-backup.php
[Fri Apr 10 06:43:33.992437 2026] [:error] [pid 12576:tid 12672] [client 4.204.215.156:13286] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Apr 10 06:43:34.202519 2026] [:error] [pid 12576:tid 12665] [client 4.204.215.156:13286] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Fri Apr 10 06:43:35.218816 2026] [:error] [pid 12576:tid 12655] [client 4.204.215.156:13286] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Fri Apr 10 06:43:35.446390 2026] [:error] [pid 12576:tid 12673] [client 4.204.215.156:13286] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Fri Apr 10 06:43:36.091606 2026] [:error] [pid 12576:tid 12658] [client 4.204.215.156:13286] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/privacy.php"] [unique_id "adgrmAZp1JUS4li1Qnu4kQAAAIk"]
[Fri Apr 10 06:43:39.898761 2026] [:error] [pid 12685:tid 12708] [client 4.204.215.156:13260] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/privacy.php"] [unique_id "adgrm88f5ssYShsynaqBbQAAANU"]
[Fri Apr 10 06:44:06.307057 2026] [:error] [pid 12685:tid 12706] [client 4.204.215.156:13254] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "adgrts8f5ssYShsynaqBegAAANM"]
[Fri Apr 10 06:44:11.394928 2026] [:error] [pid 59218:tid 59228] [client 4.204.215.156:13268] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "adgru4jSO_Wp4VS3Qe_0UAAAAYg"]
[Fri Apr 10 06:44:12.888809 2026] [:error] [pid 59286:tid 59297] [client 4.204.215.156:13259] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "adgrvG1gMezN4JEr-RWwggAAAck"]
[Fri Apr 10 06:44:16.366773 2026] [:error] [pid 12576:tid 12662] [client 4.204.215.156:13302] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "adgrwAZp1JUS4li1Qnu4lAAAAI0"]
[Fri Apr 10 06:44:17.571007 2026] [:error] [pid 12574:tid 12614] [client 4.204.215.156:13255] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-conffg.php"] [unique_id "adgrwXw-1tvJISKJyrTb8AAAABQ"]
[Fri Apr 10 06:44:22.992684 2026] [:error] [pid 12574:tid 12610] [client 4.204.215.156:13292] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-conffg.php"] [unique_id "adgrxnw-1tvJISKJyrTb8gAAABA"]
[Fri Apr 10 06:44:27.593795 2026] [:error] [pid 12685:tid 12699] [client 4.204.215.156:13263] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-conffg.php"] [unique_id "adgry88f5ssYShsynaqBkwAAAMw"]
[Fri Apr 10 06:44:29.797751 2026] [:error] [pid 59098:tid 59103] [client 4.204.215.156:13211] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-conffg.php"] [unique_id "adgrzSZshs05JVy8bJ4Z_wAAAQI"]
[Fri Apr 10 06:44:33.871468 2026] [:error] [pid 12685:tid 12705] [client 4.204.215.156:13262] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-settings.php"] [unique_id "adgr0c8f5ssYShsynaqBmQAAANI"]
[Fri Apr 10 06:44:44.433208 2026] [:error] [pid 12576:tid 12651] [client 4.204.215.156:13282] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-settings.php
[Fri Apr 10 06:44:44.644073 2026] [:error] [pid 12576:tid 12652] [client 4.204.215.156:13282] File does not exist: /usr/local/apache/htdocs/suspended-page/bb.php
[Fri Apr 10 06:44:44.872560 2026] [:error] [pid 12576:tid 12655] [client 4.204.215.156:13282] File does not exist: /usr/local/apache/htdocs/suspended-page/lf.php
[Fri Apr 10 06:44:45.098354 2026] [:error] [pid 12576:tid 12673] [client 4.204.215.156:13282] File does not exist: /usr/local/apache/htdocs/suspended-page/WSO.php
[Fri Apr 10 06:44:46.991665 2026] [:error] [pid 12576:tid 12663] [client 4.204.215.156:13282] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Fri Apr 10 06:44:47.225040 2026] [:error] [pid 12576:tid 12668] [client 4.204.215.156:13282] File does not exist: /usr/local/apache/htdocs/suspended-page/hello.php
[Fri Apr 10 06:44:47.434835 2026] [:error] [pid 12576:tid 12671] [client 4.204.215.156:13282] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Fri Apr 10 06:44:47.648683 2026] [:error] [pid 12576:tid 12653] [client 4.204.215.156:13282] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/if.php"] [unique_id "adgr3wZp1JUS4li1Qnu4ngAAAIQ"]
[Fri Apr 10 06:44:53.537071 2026] [:error] [pid 12685:tid 12696] [client 4.204.215.156:13290] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/if.php"] [unique_id "adgr5c8f5ssYShsynaqBsgAAAMk"]
[Fri Apr 10 06:44:55.608990 2026] [:error] [pid 59144:tid 59146] [client 4.204.215.156:13204] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/if.php"] [unique_id "adgr5xta6MlufQo3_orx6AAAAUA"]
[Fri Apr 10 06:44:57.318799 2026] [:error] [pid 12574:tid 12603] [client 4.204.215.156:13284] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/if.php"] [unique_id "adgr6Xw-1tvJISKJyrTb9AAAAAk"]
[Fri Apr 10 06:44:59.129750 2026] [:error] [pid 12685:tid 12690] [client 4.204.215.156:13299] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kk.php"] [unique_id "adgr688f5ssYShsynaqBwgAAAMM"]
[Fri Apr 10 06:45:04.108518 2026] [:error] [pid 59218:tid 59237] [client 4.204.215.156:13202] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kk.php"] [unique_id "adgr8IjSO_Wp4VS3Qe_0XwAAAZE"]
[Fri Apr 10 06:45:13.752005 2026] [:error] [pid 59218:tid 59231] [client 4.204.215.156:13276] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kk.php"] [unique_id "adgr-YjSO_Wp4VS3Qe_0aQAAAYs"]
[Fri Apr 10 06:45:15.654029 2026] [:error] [pid 12575:tid 12643] [client 4.204.215.156:13190] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mrjn.php"] [unique_id "adgr-yjFTOT5X6zsPClR4AAAAFU"]
[Fri Apr 10 06:45:22.685743 2026] [:error] [pid 12685:tid 12705] [client 4.204.215.156:13193] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mrjn.php"] [unique_id "adgsAs8f5ssYShsynaqB2AAAANI"]
[Fri Apr 10 06:45:24.187515 2026] [:error] [pid 59098:tid 59121] [client 4.204.215.156:13200] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mrjn.php"] [unique_id "adgsBCZshs05JVy8bJ4aDAAAARQ"]
[Fri Apr 10 06:45:27.283980 2026] [:error] [pid 12685:tid 12698] [client 4.204.215.156:13300] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mrjn.php"] [unique_id "adgsB88f5ssYShsynaqB4AAAAMs"]
[Fri Apr 10 06:45:28.793957 2026] [:error] [pid 12685:tid 12700] [client 4.204.215.156:13249] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kn.php"] [unique_id "adgsCM8f5ssYShsynaqB4gAAAM0"]
[Fri Apr 10 06:45:31.465311 2026] [:error] [pid 59218:tid 59226] [client 4.204.215.156:13250] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kn.php"] [unique_id "adgsC4jSO_Wp4VS3Qe_0egAAAYY"]
[Fri Apr 10 06:45:34.223981 2026] [:error] [pid 59098:tid 59105] [client 4.204.215.156:13294] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kn.php"] [unique_id "adgsDiZshs05JVy8bJ4aDwAAAQQ"]
[Fri Apr 10 06:45:38.131033 2026] [:error] [pid 12574:tid 12604] [client 4.204.215.156:13138] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kn.php"] [unique_id "adgsEnw-1tvJISKJyrTb_wAAAAo"]
[Fri Apr 10 06:45:48.349669 2026] [:error] [pid 12576:tid 12662] [client 4.204.215.156:13201] File does not exist: /usr/local/apache/htdocs/suspended-page/3301.php
[Fri Apr 10 06:45:48.559273 2026] [:error] [pid 12576:tid 12661] [client 4.204.215.156:13201] File does not exist: /usr/local/apache/htdocs/suspended-page/leaf.php
[Fri Apr 10 06:45:48.768855 2026] [:error] [pid 12576:tid 12672] [client 4.204.215.156:13201] File does not exist: /usr/local/apache/htdocs/suspended-page/alex.php
[Fri Apr 10 06:45:49.000163 2026] [:error] [pid 12576:tid 12651] [client 4.204.215.156:13201] File does not exist: /usr/local/apache/htdocs/suspended-page/mailer.php
[Fri Apr 10 06:45:49.227471 2026] [:error] [pid 12576:tid 12652] [client 4.204.215.156:13201] File does not exist: /usr/local/apache/htdocs/suspended-page/anone.php
[Fri Apr 10 06:45:49.454056 2026] [:error] [pid 12576:tid 12665] [client 4.204.215.156:13201] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configer.php
[Fri Apr 10 06:45:49.664071 2026] [:error] [pid 12576:tid 12655] [client 4.204.215.156:13201] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ad.php
[Fri Apr 10 06:45:49.885482 2026] [:error] [pid 12576:tid 12673] [client 4.204.215.156:13201] File does not exist: /usr/local/apache/htdocs/suspended-page/send.php
[Fri Apr 10 06:45:50.094710 2026] [:error] [pid 12576:tid 12657] [client 4.204.215.156:13201] File does not exist: /usr/local/apache/htdocs/suspended-page/3.php
[Fri Apr 10 06:45:50.312093 2026] [:error] [pid 12576:tid 12663] [client 4.204.215.156:13201] File does not exist: /usr/local/apache/htdocs/suspended-page/.wp-cache.php
[Fri Apr 10 06:45:50.518187 2026] [:error] [pid 12576:tid 12668] [client 4.204.215.156:13201] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sendmail.php"] [unique_id "adgsHgZp1JUS4li1Qnu4uwAAAJM"]
[Fri Apr 10 06:45:52.797598 2026] [:error] [pid 12685:tid 12694] [client 4.204.215.156:13281] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sendmail.php"] [unique_id "adgsIM8f5ssYShsynaqB7AAAAMc"]
[Fri Apr 10 06:45:54.672455 2026] [:error] [pid 12685:tid 12699] [client 4.204.215.156:13125] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sendmail.php"] [unique_id "adgsIs8f5ssYShsynaqB7wAAAMw"]
[Fri Apr 10 06:45:57.074213 2026] [:error] [pid 12685:tid 12705] [client 4.204.215.156:13213] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sendmail.php"] [unique_id "adgsJc8f5ssYShsynaqB8AAAANI"]
[Fri Apr 10 06:46:01.642938 2026] [:error] [pid 59144:tid 59166] [client 4.204.215.156:13270] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rahma.php"] [unique_id "adgsKRta6MlufQo3_oryDwAAAVQ"]
[Fri Apr 10 06:46:08.028064 2026] [:error] [pid 59098:tid 59121] [client 4.204.215.156:13207] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rahma.php"] [unique_id "adgsMCZshs05JVy8bJ4aFwAAARQ"]
[Fri Apr 10 06:46:10.054372 2026] [:error] [pid 59286:tid 59290] [client 4.204.215.156:13231] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rahma.php"] [unique_id "adgsMm1gMezN4JEr-RWwrgAAAcI"]
[Fri Apr 10 06:46:13.234515 2026] [:error] [pid 59286:tid 59291] [client 4.204.215.156:13266] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nasgor.php"] [unique_id "adgsNW1gMezN4JEr-RWwsgAAAcM"]
[Fri Apr 10 06:46:14.863194 2026] [:error] [pid 12685:tid 12707] [client 4.204.215.156:13210] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nasgor.php"] [unique_id "adgsNs8f5ssYShsynaqB-AAAANQ"]
[Fri Apr 10 06:46:16.661330 2026] [:error] [pid 12685:tid 12706] [client 4.204.215.156:13277] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nasgor.php"] [unique_id "adgsOM8f5ssYShsynaqB_AAAANM"]
[Fri Apr 10 06:46:18.792111 2026] [:error] [pid 59144:tid 59152] [client 4.204.215.156:13275] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nasgor.php"] [unique_id "adgsOhta6MlufQo3_oryFAAAAUY"]
[Fri Apr 10 06:46:22.261123 2026] [:error] [pid 12685:tid 12698] [client 4.204.215.156:13137] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-confirm.php"] [unique_id "adgsPs8f5ssYShsynaqCBAAAAMs"]
[Fri Apr 10 06:46:29.415932 2026] [:error] [pid 59286:tid 59308] [client 4.204.215.156:13309] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-confirm.php"] [unique_id "adgsRW1gMezN4JEr-RWwuwAAAdQ"]
[Fri Apr 10 06:46:42.618195 2026] [:error] [pid 12685:tid 12693] [client 4.204.215.156:13264] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa123.php"] [unique_id "adgsUs8f5ssYShsynaqCHgAAAMY"]
[Fri Apr 10 06:46:47.021750 2026] [:error] [pid 12685:tid 12698] [client 4.204.215.156:13298] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa123.php"] [unique_id "adgsV88f5ssYShsynaqCJwAAAMs"]
[Fri Apr 10 06:46:56.443201 2026] [:error] [pid 59218:tid 59225] [client 4.204.215.156:13188] File does not exist: /usr/local/apache/htdocs/suspended-page/upload.php
[Fri Apr 10 06:46:56.651802 2026] [:error] [pid 59218:tid 59229] [client 4.204.215.156:13188] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Fri Apr 10 06:46:56.880736 2026] [:error] [pid 59218:tid 59230] [client 4.204.215.156:13188] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-one.php
[Fri Apr 10 06:46:57.595002 2026] [:error] [pid 59218:tid 59244] [client 4.204.215.156:13188] File does not exist: /usr/local/apache/htdocs/suspended-page/alexus.php
[Fri Apr 10 06:46:57.829044 2026] [:error] [pid 59218:tid 59231] [client 4.204.215.156:13188] File does not exist: /usr/local/apache/htdocs/suspended-page/wso1337.php
[Fri Apr 10 06:46:58.048795 2026] [:error] [pid 59218:tid 59232] [client 4.204.215.156:13188] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Fri Apr 10 06:46:58.260355 2026] [:error] [pid 59218:tid 59226] [client 4.204.215.156:13188] File does not exist: /usr/local/apache/htdocs/suspended-page/it.php
[Fri Apr 10 06:46:58.482674 2026] [:error] [pid 59218:tid 59224] [client 4.204.215.156:13188] [client 4.204.215.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/niil.php"] [unique_id "adgsYojSO_Wp4VS3Qe_0-gAAAYQ"]
[Fri Apr 10 06:47:03.029078 2026] [:error] [pid 59286:tid 59305] [client 4.204.215.156:13225] [client 4.204.215.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519-items.php"] [unique_id "adgsZ21gMezN4JEr-RWw4AAAAdE"]
[Fri Apr 10 06:47:06.388103 2026] [:error] [pid 59286:tid 59300] [client 4.204.215.156:13239] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kiss.php"] [unique_id "adgsam1gMezN4JEr-RWw9AAAAcw"]
[Fri Apr 10 06:47:12.328992 2026] [:error] [pid 12575:tid 12632] [client 4.204.215.156:13217] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kiss.php"] [unique_id "adgscCjFTOT5X6zsPClR8QAAAEo"]
[Fri Apr 10 06:47:26.253417 2026] [:error] [pid 59218:tid 59225] [client 4.204.215.156:13296] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0.php"] [unique_id "adgsfojSO_Wp4VS3Qe_1BAAAAYU"]
[Fri Apr 10 06:47:30.092054 2026] [:error] [pid 12685:tid 12707] [client 4.204.215.156:13253] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0.php"] [unique_id "adgsgs8f5ssYShsynaqCQAAAANQ"]
[Fri Apr 10 06:47:32.635802 2026] [:error] [pid 12576:tid 12649] [client 4.204.215.156:13132] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0.php"] [unique_id "adgshAZp1JUS4li1Qnu42QAAAIA"]
[Fri Apr 10 06:47:34.418571 2026] [:error] [pid 59144:tid 59157] [client 4.204.215.156:13303] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0.php"] [unique_id "adgshhta6MlufQo3_ory1wAAAUs"]
[Fri Apr 10 06:47:38.954911 2026] [:error] [pid 59218:tid 59238] [client 4.204.215.156:13297] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/owl.php"] [unique_id "adgsiojSO_Wp4VS3Qe_1CQAAAZI"]
[Fri Apr 10 06:47:44.143736 2026] [:error] [pid 59218:tid 59237] [client 4.204.215.156:13189] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/owl.php"] [unique_id "adgskIjSO_Wp4VS3Qe_1DAAAAZE"]
[Fri Apr 10 06:47:47.481448 2026] [:error] [pid 59286:tid 59289] [client 4.204.215.156:13187] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/owl.php"] [unique_id "adgsk21gMezN4JEr-RWxBwAAAcE"]
[Fri Apr 10 06:47:52.521352 2026] [:error] [pid 59098:tid 59125] [client 4.204.215.156:13278] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vuln.php"] [unique_id "adgsmCZshs05JVy8bJ4aVgAAARg"]
[Fri Apr 10 06:47:56.219503 2026] [:error] [pid 12575:tid 12627] [client 4.204.215.156:13122] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vuln.php"] [unique_id "adgsnCjFTOT5X6zsPClR-QAAAEU"]
[Fri Apr 10 06:48:04.854889 2026] [:error] [pid 59098:tid 59111] [client 4.204.215.156:13186] File does not exist: /usr/local/apache/htdocs/suspended-page/vuln.php
[Fri Apr 10 06:48:05.089874 2026] [:error] [pid 59098:tid 59110] [client 4.204.215.156:13186] File does not exist: /usr/local/apache/htdocs/suspended-page/ohayo.php
[Fri Apr 10 06:48:05.300201 2026] [:error] [pid 59098:tid 59119] [client 4.204.215.156:13186] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Fri Apr 10 06:48:05.530817 2026] [:error] [pid 59098:tid 59123] [client 4.204.215.156:13186] File does not exist: /usr/local/apache/htdocs/suspended-page/cms.php
[Fri Apr 10 06:48:05.743109 2026] [:error] [pid 59098:tid 59120] [client 4.204.215.156:13186] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads.php
[Fri Apr 10 06:48:05.954020 2026] [:error] [pid 59098:tid 59115] [client 4.204.215.156:13186] File does not exist: /usr/local/apache/htdocs/suspended-page/Gel.php
[Fri Apr 10 06:48:06.175533 2026] [:error] [pid 59098:tid 59117] [client 4.204.215.156:13186] File does not exist: /usr/local/apache/htdocs/suspended-page/41.php
[Fri Apr 10 06:48:06.413700 2026] [:error] [pid 59098:tid 59103] [client 4.204.215.156:13186] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/4price.php"] [unique_id "adgspiZshs05JVy8bJ4abQAAAQI"]
[Fri Apr 10 06:48:17.527335 2026] [:error] [pid 12574:tid 12599] [client 4.204.215.156:13237] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/4price.php"] [unique_id "adgssXw-1tvJISKJyrTcIwAAAAU"]
[Fri Apr 10 06:48:25.225672 2026] [:error] [pid 12576:tid 12656] [client 4.204.215.156:13219] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/MARIJUANA.php"] [unique_id "adgsuQZp1JUS4li1Qnu4-gAAAIc"]
[Fri Apr 10 06:48:28.354283 2026] [:error] [pid 12576:tid 12664] [client 4.204.215.156:13251] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/MARIJUANA.php"] [unique_id "adgsvAZp1JUS4li1Qnu4_gAAAI8"]
[Fri Apr 10 06:48:31.012586 2026] [:error] [pid 12685:tid 12697] [client 4.204.215.156:13287] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/MARIJUANA.php"] [unique_id "adgsv88f5ssYShsynaqCWAAAAMo"]
[Fri Apr 10 06:48:42.125095 2026] [:error] [pid 59098:tid 59125] [client 4.204.215.156:13140] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.fk.php"] [unique_id "adgsyiZshs05JVy8bJ4acwAAARg"]
[Fri Apr 10 06:48:43.948330 2026] [:error] [pid 59218:tid 59222] [client 4.204.215.156:13244] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.fk.php"] [unique_id "adgsy4jSO_Wp4VS3Qe_1JgAAAYI"]
[Fri Apr 10 06:48:46.266957 2026] [:error] [pid 12685:tid 12691] [client 4.204.215.156:13265] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.fk.php"] [unique_id "adgszs8f5ssYShsynaqCagAAAMQ"]
[Fri Apr 10 06:48:48.058560 2026] [:error] [pid 59098:tid 59101] [client 4.204.215.156:13289] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.fk.php"] [unique_id "adgs0CZshs05JVy8bJ4adQAAAQA"]
[Fri Apr 10 06:48:48.950619 2026] [:error] [pid 59218:tid 59240] [client 4.204.215.156:13260] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/XxX.php"] [unique_id "adgs0IjSO_Wp4VS3Qe_1KwAAAZQ"]
[Fri Apr 10 06:48:51.930147 2026] [:error] [pid 59286:tid 59293] [client 4.204.215.156:13145] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/XxX.php"] [unique_id "adgs021gMezN4JEr-RWxFwAAAcU"]
[Fri Apr 10 06:48:54.254913 2026] [:error] [pid 12575:tid 12641] [client 4.204.215.156:13218] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/XxX.php"] [unique_id "adgs1ijFTOT5X6zsPClSCgAAAFM"]
[Fri Apr 10 06:48:56.836963 2026] [:error] [pid 59144:tid 59147] [client 4.204.215.156:13305] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/XxX.php"] [unique_id "adgs2Bta6MlufQo3_orzAgAAAUE"]
[Fri Apr 10 06:49:02.889572 2026] [:error] [pid 59286:tid 59303] [client 4.204.215.156:13243] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alexuse.php"] [unique_id "adgs3m1gMezN4JEr-RWxHAAAAc8"]
[Fri Apr 10 06:49:11.294205 2026] [:error] [pid 59286:tid 59307] [client 4.204.215.156:13211] File does not exist: /usr/local/apache/htdocs/suspended-page/alexuse.php
[Fri Apr 10 06:49:11.504749 2026] [:error] [pid 59286:tid 59288] [client 4.204.215.156:13211] File does not exist: /usr/local/apache/htdocs/suspended-page/Sendemail.php
[Fri Apr 10 06:49:11.713681 2026] [:error] [pid 59286:tid 59294] [client 4.204.215.156:13211] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Fri Apr 10 06:49:11.934943 2026] [:error] [pid 59286:tid 59292] [client 4.204.215.156:13211] File does not exist: /usr/local/apache/htdocs/suspended-page/olu.php
[Fri Apr 10 06:49:12.146860 2026] [:error] [pid 59286:tid 59301] [client 4.204.215.156:13211] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Fri Apr 10 06:49:14.385416 2026] [:error] [pid 59286:tid 59302] [client 4.204.215.156:13211] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Fri Apr 10 06:49:14.615181 2026] [:error] [pid 59286:tid 59311] [client 4.204.215.156:13211] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adgs6m1gMezN4JEr-RWxKwAAAdc"]
[Fri Apr 10 06:49:16.776680 2026] [:error] [pid 12685:tid 12688] [client 4.204.215.156:13255] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adgs7M8f5ssYShsynaqCdwAAAME"]
[Fri Apr 10 06:49:21.826478 2026] [:error] [pid 59144:tid 59164] [client 4.204.215.156:13236] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adgs8Rta6MlufQo3_orzCAAAAVI"]
[Fri Apr 10 06:49:25.977004 2026] [:error] [pid 59218:tid 59230] [client 4.204.215.156:13286] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adgs9YjSO_Wp4VS3Qe_1LwAAAYo"]
[Fri Apr 10 06:49:29.779300 2026] [:error] [pid 12575:tid 12635] [client 4.204.215.156:13232] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sad/about.php"] [unique_id "adgs-SjFTOT5X6zsPClSEAAAAE0"]
[Fri Apr 10 06:49:34.510347 2026] [:error] [pid 12575:tid 12642] [client 4.204.215.156:13308] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sad/about.php"] [unique_id "adgs_ijFTOT5X6zsPClSEwAAAFQ"]
[Fri Apr 10 06:49:36.076580 2026] [:error] [pid 12685:tid 12706] [client 4.204.215.156:13299] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sad/about.php"] [unique_id "adgtAM8f5ssYShsynaqCfQAAANM"]
[Fri Apr 10 06:49:38.126430 2026] [:error] [pid 59286:tid 59309] [client 4.204.215.156:13272] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sad/about.php"] [unique_id "adgtAm1gMezN4JEr-RWxMwAAAdU"]
[Fri Apr 10 06:49:41.508592 2026] [:error] [pid 12685:tid 12705] [client 4.204.215.156:13292] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "adgtBc8f5ssYShsynaqChAAAANI"]
[Fri Apr 10 06:49:42.058785 2026] [:error] [pid 59218:tid 59222] [client 4.204.215.156:13290] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "adgtBojSO_Wp4VS3Qe_1NQAAAYI"]
[Fri Apr 10 06:49:44.245586 2026] [:error] [pid 12574:tid 12599] [client 4.204.215.156:13192] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "adgtCHw-1tvJISKJyrTcQQAAAAU"]
[Fri Apr 10 06:49:46.830649 2026] [:error] [pid 12574:tid 12618] [client 4.204.215.156:13283] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "adgtCnw-1tvJISKJyrTcQwAAABg"]
[Fri Apr 10 06:49:49.428687 2026] [:error] [pid 12685:tid 12697] [client 4.204.215.156:13279] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goat.php"] [unique_id "adgtDc8f5ssYShsynaqCjAAAAMo"]
[Fri Apr 10 06:49:52.103751 2026] [:error] [pid 59218:tid 59242] [client 4.204.215.156:13141] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goat.php"] [unique_id "adgtEIjSO_Wp4VS3Qe_1OQAAAZY"]
[Fri Apr 10 06:49:55.275044 2026] [:error] [pid 12575:tid 12644] [client 4.204.215.156:13257] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goat.php"] [unique_id "adgtEyjFTOT5X6zsPClSGwAAAFY"]
[Fri Apr 10 06:49:58.358932 2026] [:error] [pid 12685:tid 12696] [client 4.204.215.156:13221] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goat.php"] [unique_id "adgtFs8f5ssYShsynaqCogAAAMk"]
[Fri Apr 10 06:50:02.460781 2026] [:error] [pid 12685:tid 12694] [client 4.204.215.156:13233] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alexusmailer%202.0.php"] [unique_id "adgtGs8f5ssYShsynaqCpAAAAMc"]
[Fri Apr 10 06:50:05.118162 2026] [:error] [pid 12685:tid 12687] [client 4.204.215.156:13197] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alexusmailer%202.0.php"] [unique_id "adgtHc8f5ssYShsynaqCrwAAAMA"]
[Fri Apr 10 06:50:08.417123 2026] [:error] [pid 12685:tid 12695] [client 4.204.215.156:13258] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alexusmailer%202.0.php"] [unique_id "adgtIM8f5ssYShsynaqCtAAAAMg"]
[Fri Apr 10 06:50:09.919095 2026] [:error] [pid 12685:tid 12693] [client 4.204.215.156:13301] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alexusmailer%202.0.php"] [unique_id "adgtIc8f5ssYShsynaqCuQAAAMY"]
[Fri Apr 10 06:50:13.371764 2026] [:error] [pid 59286:tid 59311] [client 4.204.215.156:13196] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rss.php"] [unique_id "adgtJW1gMezN4JEr-RWxTwAAAdc"]
[Fri Apr 10 06:50:16.981281 2026] [:error] [pid 59144:tid 59146] [client 4.204.215.156:13208] File does not exist: /usr/local/apache/htdocs/suspended-page/rss.php
[Fri Apr 10 06:50:17.190582 2026] [:error] [pid 59144:tid 59170] [client 4.204.215.156:13208] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Fri Apr 10 06:50:17.412115 2026] [:error] [pid 59144:tid 59158] [client 4.204.215.156:13208] File does not exist: /usr/local/apache/htdocs/suspended-page/wso2.php
[Fri Apr 10 06:50:17.626799 2026] [:error] [pid 59144:tid 59168] [client 4.204.215.156:13208] File does not exist: /usr/local/apache/htdocs/suspended-page/wso1.php
[Fri Apr 10 06:50:17.854289 2026] [:error] [pid 59144:tid 59153] [client 4.204.215.156:13208] File does not exist: /usr/local/apache/htdocs/suspended-page/olux.php
[Fri Apr 10 06:50:18.064049 2026] [:error] [pid 59144:tid 59161] [client 4.204.215.156:13208] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Fri Apr 10 06:50:18.275750 2026] [:error] [pid 59144:tid 59159] [client 4.204.215.156:13208] File does not exist: /usr/local/apache/htdocs/suspended-page/xl.php
[Fri Apr 10 06:50:18.507265 2026] [:error] [pid 59144:tid 59147] [client 4.204.215.156:13208] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-confiig.php
[Fri Apr 10 06:50:18.716284 2026] [:error] [pid 59144:tid 59150] [client 4.204.215.156:13208] File does not exist: /usr/local/apache/htdocs/suspended-page/file-manager.php
[Fri Apr 10 06:50:18.922743 2026] [:error] [pid 59144:tid 59154] [client 4.204.215.156:13208] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uploader.php"] [unique_id "adgtKhta6MlufQo3_orzFQAAAUg"]
[Fri Apr 10 06:50:21.995686 2026] [:error] [pid 12685:tid 12711] [client 4.204.215.156:13273] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uploader.php"] [unique_id "adgtLc8f5ssYShsynaqC1QAAANg"]
[Fri Apr 10 06:50:25.019642 2026] [:error] [pid 12685:tid 12692] [client 4.204.215.156:13200] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uploader.php"] [unique_id "adgtMc8f5ssYShsynaqC3AAAAMU"]
[Fri Apr 10 06:50:27.280884 2026] [:error] [pid 12685:tid 12704] [client 4.204.215.156:13193] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uploader.php"] [unique_id "adgtM88f5ssYShsynaqC4AAAANE"]
[Fri Apr 10 06:50:31.902399 2026] [:error] [pid 12685:tid 12692] [client 4.204.215.156:13234] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/leafmailer.php"] [unique_id "adgtN88f5ssYShsynaqC7gAAAMU"]
[Fri Apr 10 06:50:35.850574 2026] [:error] [pid 59098:tid 59105] [client 4.204.215.156:13270] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/leafmailer.php"] [unique_id "adgtOyZshs05JVy8bJ4alwAAAQQ"]
[Fri Apr 10 06:50:42.270430 2026] [:error] [pid 12574:tid 12597] [client 4.204.215.156:13285] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/leafmailer.php"] [unique_id "adgtQnw-1tvJISKJyrTcfAAAAAM"]
[Fri Apr 10 22:36:15.647803 2026] [:error] [pid 62769:tid 62780] [client 20.203.232.30:58791] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adkK38WsSnfLoB8ifjCJSAAAAkk"]
[Fri Apr 10 22:36:16.116747 2026] [:error] [pid 62769:tid 62777] [client 20.203.232.30:58815] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adkK4MWsSnfLoB8ifjCJSwAAAkY"]
[Fri Apr 10 22:36:16.585062 2026] [:error] [pid 62710:tid 62734] [client 20.203.232.30:59479] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adkK4OME7qrf5xEWWJsvbAAAAhU"]
[Fri Apr 10 22:36:17.079016 2026] [:error] [pid 13189:tid 13215] [client 20.203.232.30:58804] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adkK4ZAxiJKPums3eBDiiwAAAFc"]
[Fri Apr 10 23:43:02.983681 2026] [:error] [pid 62819:tid 62839] [client 34.24.114.196:55220] [client 34.24.114.196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "adkahvU20EyPf7NlsleIOAAAApE"]
[Sat Apr 11 03:04:08.243517 2026] [:error] [pid 21568:tid 21581] [client 20.250.31.31:19774] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Apr 11 03:28:13.061914 2026] [:error] [pid 21706:tid 21711] [client 164.68.120.90:40910] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/employment"] [unique_id "adlPTSGQ1M5d8fQSsLEJ9QAAAAM"]
[Sat Apr 11 03:28:34.296339 2026] [:error] [pid 21570:tid 21691] [client 164.68.120.90:44760] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/employment/"] [unique_id "adlPYjKs5t9xRSNL6cn3LQAAAFE"]
[Sat Apr 11 03:28:51.747631 2026] [:error] [pid 55451:tid 55463] [client 164.68.120.90:41804] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/join-us"] [unique_id "adlPc3ApxuyB7yCS5RlT6gAAAMo"]
[Sat Apr 11 03:29:41.474818 2026] [:error] [pid 21706:tid 21714] [client 164.68.120.90:46658] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vacancies"] [unique_id "adlPpSGQ1M5d8fQSsLELkAAAAAY"]
[Sat Apr 11 03:30:06.926972 2026] [:error] [pid 55451:tid 55462] [client 164.68.120.90:40354] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vacancies/"] [unique_id "adlPvnApxuyB7yCS5RlUswAAAMk"]
[Sat Apr 11 03:31:37.907560 2026] [:error] [pid 21568:tid 21596] [client 164.68.120.90:47726] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/positions-vacant/"] [unique_id "adlQGYiz5v_ljZxkpR8C-wAAARg"]
[Sat Apr 11 03:32:29.481478 2026] [:error] [pid 55451:tid 55465] [client 164.68.120.90:47276] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about-us"] [unique_id "adlQTXApxuyB7yCS5RlWeAAAAMw"]
[Sat Apr 11 03:32:51.840185 2026] [:error] [pid 21568:tid 21576] [client 164.68.120.90:50578] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/contact"] [unique_id "adlQY4iz5v_ljZxkpR8DoAAAAQQ"]
[Sat Apr 11 03:33:12.953743 2026] [:error] [pid 21568:tid 21573] [client 164.68.120.90:34312] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/contact-us"] [unique_id "adlQeIiz5v_ljZxkpR8DzgAAAQE"]
[Sat Apr 11 03:34:24.341087 2026] [:error] [pid 21568:tid 21582] [client 164.68.120.90:60426] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/terms-and-conditions"] [unique_id "adlQwIiz5v_ljZxkpR8EggAAAQo"]
[Sat Apr 11 03:34:42.518165 2026] [:error] [pid 21568:tid 21579] [client 164.68.120.90:39438] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/legal"] [unique_id "adlQ0oiz5v_ljZxkpR8EvgAAAQc"]
[Sat Apr 11 07:07:32.569886 2026] [:error] [pid 15244:tid 15250] [client 20.234.0.30:55450] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Apr 11 09:04:52.935521 2026] [:error] [pid 13721:tid 13745] [client 52.143.152.19:11007] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-942.php
[Sat Apr 11 09:04:53.174724 2026] [:error] [pid 13721:tid 13738] [client 52.143.152.19:11007] File does not exist: /usr/local/apache/htdocs/suspended-page/4GrJSiwkF3A.php
[Sat Apr 11 09:04:53.413407 2026] [:error] [pid 13721:tid 13735] [client 52.143.152.19:11007] File does not exist: /usr/local/apache/htdocs/suspended-page/SS72_kKKjT.php
[Sat Apr 11 09:04:53.728862 2026] [:error] [pid 13721:tid 13736] [client 52.143.152.19:11007] File does not exist: /usr/local/apache/htdocs/suspended-page/wkogn.php
[Sat Apr 11 09:04:53.967539 2026] [:error] [pid 13721:tid 13730] [client 52.143.152.19:11007] File does not exist: /usr/local/apache/htdocs/suspended-page/hwjtry0zd1fzeakcuzn8Cdefault.php
[Sat Apr 11 09:04:54.205141 2026] [:error] [pid 13721:tid 13737] [client 52.143.152.19:11007] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Sat Apr 11 09:04:54.445472 2026] [:error] [pid 13721:tid 13748] [client 52.143.152.19:11007] File does not exist: /usr/local/apache/htdocs/suspended-page/oLEzRVqmJJPFSucdefault.php
[Sat Apr 11 09:04:54.743492 2026] [:error] [pid 13721:tid 13727] [client 52.143.152.19:11007] File does not exist: /usr/local/apache/htdocs/suspended-page/wwdgl.php
[Sat Apr 11 09:04:54.983417 2026] [:error] [pid 13721:tid 13733] [client 52.143.152.19:11007] File does not exist: /usr/local/apache/htdocs/suspended-page/3akp.php
[Sat Apr 11 09:04:55.221347 2026] [:error] [pid 13721:tid 13744] [client 52.143.152.19:11007] File does not exist: /usr/local/apache/htdocs/suspended-page/HLA-dd.php
[Sat Apr 11 09:04:55.470326 2026] [:error] [pid 13721:tid 13737] [client 52.143.152.19:11007] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "admeNwtCFIRABSMvNE7EZgAAAA0"]
[Sat Apr 11 09:04:56.038449 2026] [:error] [pid 13721:tid 13734] [client 52.143.152.19:49070] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "admeOAtCFIRABSMvNE7EaAAAAAo"]
[Sat Apr 11 09:04:56.560986 2026] [:error] [pid 13721:tid 13735] [client 52.143.152.19:10970] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "admeOAtCFIRABSMvNE7EbQAAAAs"]
[Sat Apr 11 09:04:57.038388 2026] [:error] [pid 13633:tid 13655] [client 52.143.152.19:49032] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "admeOWaKDA-4b93MwJx9oAAAARI"]
[Sat Apr 11 09:04:57.532577 2026] [:error] [pid 13721:tid 13724] [client 52.143.152.19:49045] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cdn3.php"] [unique_id "admeOQtCFIRABSMvNE7EcgAAAAA"]
[Sat Apr 11 09:04:58.039608 2026] [:error] [pid 13721:tid 13728] [client 52.143.152.19:44938] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cdn3.php"] [unique_id "admeOgtCFIRABSMvNE7EdQAAAAQ"]
[Sat Apr 11 09:04:58.511345 2026] [:error] [pid 13635:tid 13703] [client 52.143.152.19:10999] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cdn3.php"] [unique_id "admeOsCZeuwIgRXgWykFaAAAAYs"]
[Sat Apr 11 09:04:59.699028 2026] [:error] [pid 13721:tid 13726] [client 52.143.152.19:49067] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cdn3.php"] [unique_id "admeOwtCFIRABSMvNE7EhwAAAAI"]
[Sat Apr 11 09:05:00.215882 2026] [:error] [pid 13634:tid 13675] [client 52.143.152.19:44969] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "admePHaB01qKsmKvEg84SwAAAUo"]
[Sat Apr 11 09:05:00.730673 2026] [:error] [pid 13635:tid 13716] [client 52.143.152.19:10955] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "admePMCZeuwIgRXgWykFhgAAAZg"]
[Sat Apr 11 09:05:01.215027 2026] [:error] [pid 13633:tid 13659] [client 52.143.152.19:49034] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "admePWaKDA-4b93MwJx9qQAAARY"]
[Sat Apr 11 09:05:01.705775 2026] [:error] [pid 13635:tid 13702] [client 52.143.152.19:49052] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "admePcCZeuwIgRXgWykFigAAAYo"]
[Sat Apr 11 09:05:02.173913 2026] [:error] [pid 13635:tid 13701] [client 52.143.152.19:11006] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "admePsCZeuwIgRXgWykFkgAAAYk"]
[Sat Apr 11 09:05:02.719084 2026] [:error] [pid 13634:tid 13677] [client 52.143.152.19:10964] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "admePnaB01qKsmKvEg84UQAAAUw"]
[Sat Apr 11 09:05:03.197593 2026] [:error] [pid 13634:tid 13689] [client 52.143.152.19:44931] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "admeP3aB01qKsmKvEg84VQAAAVc"]
[Sat Apr 11 09:05:03.670774 2026] [:error] [pid 13633:tid 13649] [client 52.143.152.19:10958] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "admeP2aKDA-4b93MwJx9tAAAAQw"]
[Sat Apr 11 09:05:04.147339 2026] [:error] [pid 13721:tid 13725] [client 52.143.152.19:44979] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "admeQAtCFIRABSMvNE7EkAAAAAE"]
[Sat Apr 11 09:05:04.729680 2026] [:error] [pid 13721:tid 13735] [client 52.143.152.19:10956] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "admeQAtCFIRABSMvNE7EkgAAAAs"]
[Sat Apr 11 09:05:05.230404 2026] [:error] [pid 13635:tid 13695] [client 52.143.152.19:44962] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "admeQcCZeuwIgRXgWykFnQAAAYM"]
[Sat Apr 11 09:05:05.786167 2026] [:error] [pid 13721:tid 13724] [client 52.143.152.19:44943] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "admeQQtCFIRABSMvNE7ElQAAAAA"]
[Sat Apr 11 09:05:06.284554 2026] [:error] [pid 13635:tid 13696] [client 52.143.152.19:44929] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "admeQsCZeuwIgRXgWykFowAAAYQ"]
[Sat Apr 11 09:05:06.798605 2026] [:error] [pid 13721:tid 13739] [client 52.143.152.19:44980] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "admeQgtCFIRABSMvNE7EoAAAAA8"]
[Sat Apr 11 09:05:07.401360 2026] [:error] [pid 13721:tid 13737] [client 52.143.152.19:49085] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "admeQwtCFIRABSMvNE7EpAAAAA0"]
[Sat Apr 11 09:05:08.022916 2026] [:error] [pid 13633:tid 13657] [client 52.143.152.19:49076] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "admeRGaKDA-4b93MwJx9uAAAARQ"]
[Sat Apr 11 09:05:08.500003 2026] [:error] [pid 13635:tid 13709] [client 52.143.152.19:49071] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "admeRMCZeuwIgRXgWykFqwAAAZE"]
[Sat Apr 11 09:05:09.140190 2026] [:error] [pid 13721:tid 13729] [client 52.143.152.19:44987] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "admeRQtCFIRABSMvNE7EpwAAAAU"]
[Sat Apr 11 09:05:10.115365 2026] [:error] [pid 13634:tid 13677] [client 52.143.152.19:44968] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "admeRnaB01qKsmKvEg84ZQAAAUw"]
[Sat Apr 11 09:05:10.647868 2026] [:error] [pid 13633:tid 13643] [client 52.143.152.19:49715] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "admeRmaKDA-4b93MwJx9vAAAAQY"]
[Sat Apr 11 09:05:11.171270 2026] [:error] [pid 13721:tid 13736] [client 52.143.152.19:49028] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "admeRwtCFIRABSMvNE7ErAAAAAw"]
[Sat Apr 11 09:05:11.817013 2026] [:error] [pid 13721:tid 13729] [client 52.143.152.19:49026] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "admeRwtCFIRABSMvNE7EsAAAAAU"]
[Sat Apr 11 09:05:12.588287 2026] [:error] [pid 13634:tid 13669] [client 52.143.152.19:44988] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "admeSHaB01qKsmKvEg84ZwAAAUQ"]
[Sat Apr 11 09:05:13.127184 2026] [:error] [pid 13721:tid 13725] [client 52.143.152.19:44947] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "admeSQtCFIRABSMvNE7EtgAAAAE"]
[Sat Apr 11 09:05:13.690443 2026] [:error] [pid 13721:tid 13744] [client 52.143.152.19:49044] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "admeSQtCFIRABSMvNE7EuAAAABQ"]
[Sat Apr 11 09:05:14.192098 2026] [:error] [pid 13721:tid 13724] [client 52.143.152.19:49062] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "admeSgtCFIRABSMvNE7EvQAAAAA"]
[Sat Apr 11 09:05:14.929565 2026] [:error] [pid 13721:tid 13746] [client 52.143.152.19:44933] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "admeSgtCFIRABSMvNE7EwwAAABY"]
[Sat Apr 11 09:05:15.657858 2026] [:error] [pid 13721:tid 13744] [client 52.143.152.19:10973] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "admeSwtCFIRABSMvNE7ExgAAABQ"]
[Sat Apr 11 09:05:16.191315 2026] [:error] [pid 13635:tid 13694] [client 52.143.152.19:49061] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "admeTMCZeuwIgRXgWykFyAAAAYI"]
[Sat Apr 11 09:05:16.695173 2026] [:error] [pid 13633:tid 13652] [client 52.143.152.19:44982] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "admeTGaKDA-4b93MwJx9wgAAAQ8"]
[Sat Apr 11 09:05:17.425088 2026] [:error] [pid 13721:tid 13740] [client 52.143.152.19:49068] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "admeTQtCFIRABSMvNE7EywAAABA"]
[Sat Apr 11 09:05:17.963769 2026] [:error] [pid 13721:tid 13730] [client 52.143.152.19:49680] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "admeTQtCFIRABSMvNE7EzgAAAAY"]
[Sat Apr 11 09:05:18.503699 2026] [:error] [pid 13635:tid 13703] [client 52.143.152.19:10953] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blqjs.php"] [unique_id "admeTsCZeuwIgRXgWykF0gAAAYs"]
[Sat Apr 11 09:05:19.091683 2026] [:error] [pid 13635:tid 13697] [client 52.143.152.19:49066] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blqjs.php"] [unique_id "admeT8CZeuwIgRXgWykF1QAAAYU"]
[Sat Apr 11 09:05:19.606526 2026] [:error] [pid 13635:tid 13715] [client 52.143.152.19:44981] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blqjs.php"] [unique_id "admeT8CZeuwIgRXgWykF1wAAAZc"]
[Sat Apr 11 09:05:20.135562 2026] [:error] [pid 13634:tid 13669] [client 52.143.152.19:10976] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blqjs.php"] [unique_id "admeUHaB01qKsmKvEg84dgAAAUQ"]
[Sat Apr 11 09:05:20.802584 2026] [:error] [pid 13635:tid 13711] [client 52.143.152.19:10979] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "admeUMCZeuwIgRXgWykF2gAAAZM"]
[Sat Apr 11 09:05:21.333793 2026] [:error] [pid 13721:tid 13740] [client 52.143.152.19:44934] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "admeUQtCFIRABSMvNE7E0wAAABA"]
[Sat Apr 11 09:05:21.809814 2026] [:error] [pid 13633:tid 13661] [client 52.143.152.19:10972] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "admeUWaKDA-4b93MwJx9zgAAARg"]
[Sat Apr 11 09:05:22.319183 2026] [:error] [pid 13633:tid 13647] [client 52.143.152.19:10965] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "admeUmaKDA-4b93MwJx9zwAAAQo"]
[Sat Apr 11 09:05:22.867330 2026] [:error] [pid 13721:tid 13739] [client 52.143.152.19:10997] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fetch.php"] [unique_id "admeUgtCFIRABSMvNE7E2AAAAA8"]
[Sat Apr 11 09:05:23.389532 2026] [:error] [pid 13721:tid 13742] [client 52.143.152.19:54594] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fetch.php"] [unique_id "admeUwtCFIRABSMvNE7E3AAAABI"]
[Sat Apr 11 09:05:23.884795 2026] [:error] [pid 13721:tid 13740] [client 52.143.152.19:10981] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fetch.php"] [unique_id "admeUwtCFIRABSMvNE7E4QAAABA"]
[Sat Apr 11 09:05:24.488693 2026] [:error] [pid 13634:tid 13685] [client 52.143.152.19:44976] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fetch.php"] [unique_id "admeVHaB01qKsmKvEg84jgAAAVQ"]
[Sat Apr 11 09:05:25.061470 2026] [:error] [pid 13633:tid 13645] [client 52.143.152.19:49049] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "admeVWaKDA-4b93MwJx90wAAAQg"]
[Sat Apr 11 09:05:25.740230 2026] [:error] [pid 13635:tid 13695] [client 52.143.152.19:49024] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "admeVcCZeuwIgRXgWykF4AAAAYM"]
[Sat Apr 11 09:05:26.212056 2026] [:error] [pid 13721:tid 13740] [client 52.143.152.19:44956] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "admeVgtCFIRABSMvNE7E7QAAABA"]
[Sat Apr 11 09:05:26.744194 2026] [:error] [pid 13635:tid 13711] [client 52.143.152.19:49671] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "admeVsCZeuwIgRXgWykF4gAAAZM"]
[Sat Apr 11 09:05:27.344426 2026] [:error] [pid 13721:tid 13746] [client 52.143.152.19:54655] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "admeVwtCFIRABSMvNE7E8wAAABY"]
[Sat Apr 11 09:05:27.904034 2026] [:error] [pid 13633:tid 13642] [client 52.143.152.19:10989] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "admeV2aKDA-4b93MwJx91gAAAQU"]
[Sat Apr 11 09:05:28.402750 2026] [:error] [pid 13635:tid 13709] [client 52.143.152.19:44990] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "admeWMCZeuwIgRXgWykF5wAAAZE"]
[Sat Apr 11 09:05:28.949951 2026] [:error] [pid 13721:tid 13732] [client 52.143.152.19:10985] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "admeWAtCFIRABSMvNE7E9gAAAAg"]
[Sat Apr 11 09:05:29.420020 2026] [:error] [pid 13635:tid 13694] [client 52.143.152.19:11005] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oircv.php"] [unique_id "admeWcCZeuwIgRXgWykF6wAAAYI"]
[Sat Apr 11 09:05:29.996231 2026] [:error] [pid 13635:tid 13702] [client 52.143.152.19:10998] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oircv.php"] [unique_id "admeWcCZeuwIgRXgWykF7QAAAYo"]
[Sat Apr 11 09:05:30.467090 2026] [:error] [pid 13721:tid 13736] [client 52.143.152.19:44963] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oircv.php"] [unique_id "admeWgtCFIRABSMvNE7E-QAAAAw"]
[Sat Apr 11 09:05:31.068033 2026] [:error] [pid 13721:tid 13734] [client 52.143.152.19:10973] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oircv.php"] [unique_id "admeWwtCFIRABSMvNE7E_gAAAAo"]
[Sat Apr 11 09:05:31.595525 2026] [:error] [pid 13633:tid 13650] [client 52.143.152.19:10969] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blnux.php"] [unique_id "admeW2aKDA-4b93MwJx94wAAAQ0"]
[Sat Apr 11 09:05:32.065862 2026] [:error] [pid 13634:tid 13682] [client 52.143.152.19:49069] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blnux.php"] [unique_id "admeXHaB01qKsmKvEg84sAAAAVE"]
[Sat Apr 11 09:05:32.658104 2026] [:error] [pid 13721:tid 13732] [client 52.143.152.19:49725] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blnux.php"] [unique_id "admeXAtCFIRABSMvNE7FBQAAAAg"]
[Sat Apr 11 09:05:33.156846 2026] [:error] [pid 13633:tid 13647] [client 52.143.152.19:49673] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blnux.php"] [unique_id "admeXWaKDA-4b93MwJx95wAAAQo"]
[Sat Apr 11 09:05:33.723527 2026] [:error] [pid 13721:tid 13748] [client 52.143.152.19:10945] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "admeXQtCFIRABSMvNE7FCwAAABg"]
[Sat Apr 11 09:05:34.187616 2026] [:error] [pid 13721:tid 13728] [client 52.143.152.19:49686] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "admeXgtCFIRABSMvNE7FEAAAAAQ"]
[Sat Apr 11 09:05:34.655144 2026] [:error] [pid 13634:tid 13673] [client 52.143.152.19:44955] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "admeXnaB01qKsmKvEg84vwAAAUg"]
[Sat Apr 11 09:05:35.175811 2026] [:error] [pid 13635:tid 13711] [client 52.143.152.19:49679] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "admeX8CZeuwIgRXgWykF8AAAAZM"]
[Sat Apr 11 09:05:35.713984 2026] [:error] [pid 13634:tid 13670] [client 52.143.152.19:49054] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Spow_SRw.php"] [unique_id "admeX3aB01qKsmKvEg84yQAAAUU"]
[Sat Apr 11 09:05:37.740486 2026] [:error] [pid 13633:tid 13653] [client 52.143.152.19:10974] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Spow_SRw.php"] [unique_id "admeYWaKDA-4b93MwJx98wAAARA"]
[Sat Apr 11 09:05:40.687851 2026] [:error] [pid 13635:tid 13702] [client 52.143.152.19:54603] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Spow_SRw.php"] [unique_id "admeZMCZeuwIgRXgWykF9gAAAYo"]
[Sat Apr 11 09:05:41.610501 2026] [:error] [pid 13633:tid 13644] [client 52.143.152.19:49043] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Spow_SRw.php"] [unique_id "admeZWaKDA-4b93MwJx9_AAAAQc"]
[Sat Apr 11 09:05:42.118027 2026] [:error] [pid 13633:tid 13638] [client 52.143.152.19:54595] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albrt.php"] [unique_id "admeZmaKDA-4b93MwJx9_QAAAQE"]
[Sat Apr 11 09:05:42.627423 2026] [:error] [pid 13635:tid 13691] [client 52.143.152.19:54600] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albrt.php"] [unique_id "admeZsCZeuwIgRXgWykF_AAAAYA"]
[Sat Apr 11 09:05:43.100845 2026] [:error] [pid 13721:tid 13733] [client 52.143.152.19:44949] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albrt.php"] [unique_id "admeZwtCFIRABSMvNE7FJQAAAAk"]
[Sat Apr 11 09:05:43.615157 2026] [:error] [pid 13721:tid 13738] [client 52.143.152.19:49058] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albrt.php"] [unique_id "admeZwtCFIRABSMvNE7FKAAAAA4"]
[Sat Apr 11 09:05:44.093171 2026] [:error] [pid 13721:tid 13727] [client 52.143.152.19:49689] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxivicLhot.php"] [unique_id "admeaAtCFIRABSMvNE7FKwAAAAM"]
[Sat Apr 11 09:05:44.689765 2026] [:error] [pid 13721:tid 13736] [client 52.143.152.19:49668] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxivicLhot.php"] [unique_id "admeaAtCFIRABSMvNE7FLQAAAAw"]
[Sat Apr 11 09:05:45.281054 2026] [:error] [pid 13634:tid 13665] [client 52.143.152.19:10880] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxivicLhot.php"] [unique_id "admeaXaB01qKsmKvEg846wAAAUA"]
[Sat Apr 11 09:05:45.749290 2026] [:error] [pid 13721:tid 13737] [client 52.143.152.19:49041] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxivicLhot.php"] [unique_id "admeaQtCFIRABSMvNE7FMgAAAA0"]
[Sat Apr 11 09:05:46.284108 2026] [:error] [pid 13721:tid 13733] [client 52.143.152.19:10992] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "admeagtCFIRABSMvNE7FNQAAAAk"]
[Sat Apr 11 09:05:46.835907 2026] [:error] [pid 13634:tid 13673] [client 52.143.152.19:44954] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "admeanaB01qKsmKvEg848gAAAUg"]
[Sat Apr 11 09:05:47.358869 2026] [:error] [pid 13634:tid 13683] [client 52.143.152.19:49726] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "admea3aB01qKsmKvEg849gAAAVI"]
[Sat Apr 11 09:05:48.008659 2026] [:error] [pid 13634:tid 13689] [client 52.143.152.19:10984] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "admebHaB01qKsmKvEg84-QAAAVc"]
[Sat Apr 11 09:05:48.574828 2026] [:error] [pid 13634:tid 13665] [client 52.143.152.19:44948] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acc.php"] [unique_id "admebHaB01qKsmKvEg84_AAAAUA"]
[Sat Apr 11 09:05:49.069690 2026] [:error] [pid 13635:tid 13704] [client 52.143.152.19:49040] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acc.php"] [unique_id "admebcCZeuwIgRXgWykGBwAAAYw"]
[Sat Apr 11 09:05:49.699069 2026] [:error] [pid 13633:tid 13654] [client 52.143.152.19:44944] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acc.php"] [unique_id "admebWaKDA-4b93MwJx-BwAAARE"]
[Sat Apr 11 09:05:50.164422 2026] [:error] [pid 13721:tid 13729] [client 52.143.152.19:44989] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acc.php"] [unique_id "admebgtCFIRABSMvNE7FOwAAAAU"]
[Sat Apr 11 09:05:50.628522 2026] [:error] [pid 13721:tid 13747] [client 52.143.152.19:49030] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wxeyc.php"] [unique_id "admebgtCFIRABSMvNE7FPwAAABc"]
[Sat Apr 11 09:05:51.163768 2026] [:error] [pid 13635:tid 13698] [client 52.143.152.19:44937] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wxeyc.php"] [unique_id "admeb8CZeuwIgRXgWykGDgAAAYY"]
[Sat Apr 11 09:05:51.633786 2026] [:error] [pid 13721:tid 13743] [client 52.143.152.19:49038] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wxeyc.php"] [unique_id "admebwtCFIRABSMvNE7FQwAAABM"]
[Sat Apr 11 09:05:52.117155 2026] [:error] [pid 13635:tid 13699] [client 52.143.152.19:49727] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wxeyc.php"] [unique_id "admecMCZeuwIgRXgWykGFwAAAYc"]
[Sat Apr 11 09:05:52.708787 2026] [:error] [pid 13633:tid 13645] [client 52.143.152.19:49037] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "admecGaKDA-4b93MwJx-CwAAAQg"]
[Sat Apr 11 09:05:53.231095 2026] [:error] [pid 13634:tid 13670] [client 52.143.152.19:44946] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "admecXaB01qKsmKvEg85BAAAAUU"]
[Sat Apr 11 09:05:53.703313 2026] [:error] [pid 13721:tid 13733] [client 52.143.152.19:49075] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "admecQtCFIRABSMvNE7FRwAAAAk"]
[Sat Apr 11 09:05:54.251418 2026] [:error] [pid 13721:tid 13739] [client 52.143.152.19:49064] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "admecgtCFIRABSMvNE7FSAAAAA8"]
[Sat Apr 11 09:05:54.729731 2026] [:error] [pid 13635:tid 13707] [client 52.143.152.19:49681] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "admecsCZeuwIgRXgWykGLAAAAY8"]
[Sat Apr 11 09:05:55.439675 2026] [:error] [pid 13635:tid 13716] [client 52.143.152.19:49669] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Sat Apr 11 09:05:55.791764 2026] [:error] [pid 13635:tid 13696] [client 52.143.152.19:49669] File does not exist: /usr/local/apache/htdocs/suspended-page/fyflv.php
[Sat Apr 11 09:05:56.027803 2026] [:error] [pid 13635:tid 13701] [client 52.143.152.19:49669] File does not exist: /usr/local/apache/htdocs/suspended-page/tymi.php
[Sat Apr 11 09:05:56.315040 2026] [:error] [pid 13635:tid 13691] [client 52.143.152.19:49669] File does not exist: /usr/local/apache/htdocs/suspended-page/sde.php
[Sat Apr 11 09:05:56.605034 2026] [:error] [pid 13635:tid 13695] [client 52.143.152.19:49669] File does not exist: /usr/local/apache/htdocs/suspended-page/wpb.php
[Sat Apr 11 09:05:56.853976 2026] [:error] [pid 13635:tid 13703] [client 52.143.152.19:49669] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Sat Apr 11 09:05:57.149681 2026] [:error] [pid 13635:tid 13715] [client 52.143.152.19:49669] File does not exist: /usr/local/apache/htdocs/suspended-page/9EaklzMysJ.php
[Sat Apr 11 09:05:57.385162 2026] [:error] [pid 13635:tid 13697] [client 52.143.152.19:49669] File does not exist: /usr/local/apache/htdocs/suspended-page/wpxl.php
[Sat Apr 11 09:05:57.708169 2026] [:error] [pid 13635:tid 13694] [client 52.143.152.19:49669] File does not exist: /usr/local/apache/htdocs/suspended-page/s3FiyJ2WGCnF0p1default.php
[Sat Apr 11 09:05:57.944440 2026] [:error] [pid 13635:tid 13709] [client 52.143.152.19:49669] File does not exist: /usr/local/apache/htdocs/suspended-page/bfil.php
[Sat Apr 11 09:05:58.181524 2026] [:error] [pid 13635:tid 13700] [client 52.143.152.19:49669] File does not exist: /usr/local/apache/htdocs/suspended-page/lb.php
[Sat Apr 11 09:05:58.419567 2026] [:error] [pid 13635:tid 13712] [client 52.143.152.19:49669] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "admedsCZeuwIgRXgWykGPAAAAZQ"]
[Sat Apr 11 09:05:58.947088 2026] [:error] [pid 13633:tid 13638] [client 52.143.152.19:49055] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "admedmaKDA-4b93MwJx-EgAAAQE"]
[Sat Apr 11 09:05:59.467230 2026] [:error] [pid 13633:tid 13647] [client 52.143.152.19:10971] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "admed2aKDA-4b93MwJx-FwAAAQo"]
[Sat Apr 11 09:05:59.986843 2026] [:error] [pid 13634:tid 13688] [client 52.143.152.19:10911] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "admed3aB01qKsmKvEg85FgAAAVY"]
[Sat Apr 11 09:06:00.482862 2026] [:error] [pid 13634:tid 13676] [client 52.143.152.19:44966] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "admeeHaB01qKsmKvEg85GQAAAUs"]
[Sat Apr 11 09:06:01.034809 2026] [:error] [pid 13633:tid 13644] [client 52.143.152.19:44964] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "admeeWaKDA-4b93MwJx-IAAAAQc"]
[Sat Apr 11 09:06:01.615195 2026] [:error] [pid 13633:tid 13651] [client 52.143.152.19:10996] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "admeeWaKDA-4b93MwJx-JAAAAQ4"]
[Sat Apr 11 09:06:02.126136 2026] [:error] [pid 13634:tid 13690] [client 52.143.152.19:10963] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "admeenaB01qKsmKvEg85HwAAAVg"]
[Sat Apr 11 09:06:02.847927 2026] [:error] [pid 13634:tid 13665] [client 52.143.152.19:44953] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "admeenaB01qKsmKvEg85JwAAAUA"]
[Sat Apr 11 09:06:03.318052 2026] [:error] [pid 13635:tid 13702] [client 52.143.152.19:49698] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "admee8CZeuwIgRXgWykGPQAAAYo"]
[Sat Apr 11 09:06:03.865874 2026] [:error] [pid 13635:tid 13703] [client 52.143.152.19:49035] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "admee8CZeuwIgRXgWykGPwAAAYs"]
[Sat Apr 11 09:06:04.431998 2026] [:error] [pid 13634:tid 13674] [client 52.143.152.19:49683] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "admefHaB01qKsmKvEg85LAAAAUk"]
[Sat Apr 11 09:06:04.926895 2026] [:error] [pid 13635:tid 13714] [client 52.143.152.19:54596] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/iindv.php"] [unique_id "admefMCZeuwIgRXgWykGRgAAAZY"]
[Sat Apr 11 09:06:05.446439 2026] [:error] [pid 13635:tid 13711] [client 52.143.152.19:49677] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/iindv.php"] [unique_id "admefcCZeuwIgRXgWykGRwAAAZM"]
[Sat Apr 11 09:06:05.977415 2026] [:error] [pid 13721:tid 13746] [client 52.143.152.19:10988] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/iindv.php"] [unique_id "admefQtCFIRABSMvNE7FYgAAABY"]
[Sat Apr 11 09:06:06.495087 2026] [:error] [pid 13633:tid 13652] [client 52.143.152.19:44984] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/iindv.php"] [unique_id "admefmaKDA-4b93MwJx-KgAAAQ8"]
[Sat Apr 11 09:06:07.052385 2026] [:error] [pid 13721:tid 13737] [client 52.143.152.19:44961] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "admefwtCFIRABSMvNE7FZgAAAA0"]
[Sat Apr 11 09:06:07.520658 2026] [:error] [pid 13635:tid 13701] [client 52.143.152.19:54613] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "admef8CZeuwIgRXgWykGTQAAAYk"]
[Sat Apr 11 09:06:07.996724 2026] [:error] [pid 13634:tid 13674] [client 52.143.152.19:44945] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "admef3aB01qKsmKvEg85NAAAAUk"]
[Sat Apr 11 09:06:08.496847 2026] [:error] [pid 13633:tid 13645] [client 52.143.152.19:54651] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "admegGaKDA-4b93MwJx-LAAAAQg"]
[Sat Apr 11 09:06:08.976602 2026] [:error] [pid 13721:tid 13735] [client 52.143.152.19:49719] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "admegAtCFIRABSMvNE7FawAAAAs"]
[Sat Apr 11 09:06:09.511873 2026] [:error] [pid 13633:tid 13656] [client 52.143.152.19:10982] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "admegWaKDA-4b93MwJx-LgAAARM"]
[Sat Apr 11 09:06:09.980282 2026] [:error] [pid 13633:tid 13658] [client 52.143.152.19:10978] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "admegWaKDA-4b93MwJx-MAAAARU"]
[Sat Apr 11 09:06:10.446760 2026] [:error] [pid 13634:tid 13668] [client 52.143.152.19:10902] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "admegnaB01qKsmKvEg85PQAAAUM"]
[Sat Apr 11 09:06:10.948784 2026] [:error] [pid 13634:tid 13671] [client 52.143.152.19:49700] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "admegnaB01qKsmKvEg85QQAAAUY"]
[Sat Apr 11 09:06:11.415705 2026] [:error] [pid 13721:tid 13747] [client 52.143.152.19:10990] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "admegwtCFIRABSMvNE7FbwAAABc"]
[Sat Apr 11 09:06:11.882289 2026] [:error] [pid 13634:tid 13678] [client 52.143.152.19:10923] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "admeg3aB01qKsmKvEg85RgAAAU0"]
[Sat Apr 11 09:06:12.418996 2026] [:error] [pid 13633:tid 13638] [client 52.143.152.19:49057] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "admehGaKDA-4b93MwJx-NQAAAQE"]
[Sat Apr 11 09:06:12.893352 2026] [:error] [pid 13634:tid 13686] [client 52.143.152.19:49082] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "admehHaB01qKsmKvEg85RwAAAVU"]
[Sat Apr 11 09:06:13.363983 2026] [:error] [pid 13634:tid 13665] [client 52.143.152.19:10919] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "admehXaB01qKsmKvEg85SAAAAUA"]
[Sat Apr 11 09:06:13.829030 2026] [:error] [pid 13634:tid 13668] [client 52.143.152.19:49688] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "admehXaB01qKsmKvEg85SQAAAUM"]
[Sat Apr 11 09:06:14.313171 2026] [:error] [pid 13721:tid 13744] [client 52.143.152.19:49687] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "admehgtCFIRABSMvNE7FcQAAABQ"]
[Sat Apr 11 09:06:14.797020 2026] [:error] [pid 13633:tid 13640] [client 52.143.152.19:49063] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "admehmaKDA-4b93MwJx-OAAAAQM"]
[Sat Apr 11 09:06:15.305028 2026] [:error] [pid 13634:tid 13689] [client 52.143.152.19:49708] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "admeh3aB01qKsmKvEg85TwAAAVc"]
[Sat Apr 11 09:06:15.819638 2026] [:error] [pid 13635:tid 13713] [client 52.143.152.19:49716] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "admeh8CZeuwIgRXgWykGXwAAAZU"]
[Sat Apr 11 09:06:16.287979 2026] [:error] [pid 13635:tid 13695] [client 52.143.152.19:44930] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "admeiMCZeuwIgRXgWykGYQAAAYM"]
[Sat Apr 11 09:06:16.757661 2026] [:error] [pid 13635:tid 13715] [client 52.143.152.19:54604] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "admeiMCZeuwIgRXgWykGZAAAAZc"]
[Sat Apr 11 09:06:17.287412 2026] [:error] [pid 13635:tid 13714] [client 52.143.152.19:49667] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "admeicCZeuwIgRXgWykGZgAAAZY"]
[Sat Apr 11 09:06:17.798206 2026] [:error] [pid 13635:tid 13704] [client 52.143.152.19:54608] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "admeicCZeuwIgRXgWykGawAAAYw"]
[Sat Apr 11 09:06:18.278374 2026] [:error] [pid 13635:tid 13694] [client 52.143.152.19:54616] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "admeisCZeuwIgRXgWykGbQAAAYI"]
[Sat Apr 11 09:06:18.827894 2026] [:error] [pid 13635:tid 13701] [client 52.143.152.19:44950] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxiviLDIot.php"] [unique_id "admeisCZeuwIgRXgWykGbwAAAYk"]
[Sat Apr 11 09:06:19.350564 2026] [:error] [pid 13721:tid 13741] [client 52.143.152.19:10986] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxiviLDIot.php"] [unique_id "admeiwtCFIRABSMvNE7FeQAAABE"]
[Sat Apr 11 09:06:19.818613 2026] [:error] [pid 13635:tid 13704] [client 52.143.152.19:10994] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxiviLDIot.php"] [unique_id "admei8CZeuwIgRXgWykGdAAAAYw"]
[Sat Apr 11 09:06:20.366838 2026] [:error] [pid 13721:tid 13748] [client 52.143.152.19:54647] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxiviLDIot.php"] [unique_id "admejAtCFIRABSMvNE7FfgAAABg"]
[Sat Apr 11 09:06:20.873710 2026] [:error] [pid 13635:tid 13716] [client 52.143.152.19:49073] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hanyatersenyum.php"] [unique_id "admejMCZeuwIgRXgWykGdwAAAZg"]
[Sat Apr 11 09:06:21.468990 2026] [:error] [pid 13635:tid 13713] [client 52.143.152.19:10886] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hanyatersenyum.php"] [unique_id "admejcCZeuwIgRXgWykGegAAAZU"]
[Sat Apr 11 09:06:21.959891 2026] [:error] [pid 13721:tid 13746] [client 52.143.152.19:49072] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hanyatersenyum.php"] [unique_id "admejQtCFIRABSMvNE7FhwAAABY"]
[Sat Apr 11 09:06:22.446512 2026] [:error] [pid 13634:tid 13668] [client 52.143.152.19:54628] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hanyatersenyum.php"] [unique_id "admejnaB01qKsmKvEg85WgAAAUM"]
[Sat Apr 11 09:06:22.929928 2026] [:error] [pid 13634:tid 13669] [client 52.143.152.19:49707] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "admejnaB01qKsmKvEg85WwAAAUQ"]
[Sat Apr 11 09:06:23.427660 2026] [:error] [pid 13721:tid 13735] [client 52.143.152.19:10896] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "admejwtCFIRABSMvNE7FjgAAAAs"]
[Sat Apr 11 09:06:23.900204 2026] [:error] [pid 13635:tid 13691] [client 52.143.152.19:49664] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "admej8CZeuwIgRXgWykGfgAAAYA"]
[Sat Apr 11 09:06:24.543366 2026] [:error] [pid 13721:tid 13745] [client 52.143.152.19:49693] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "admekAtCFIRABSMvNE7FkgAAABU"]
[Sat Apr 11 09:06:25.050744 2026] [:error] [pid 13721:tid 13731] [client 52.143.152.19:49670] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/upll22.php"] [unique_id "admekQtCFIRABSMvNE7FlQAAAAc"]
[Sat Apr 11 09:06:25.528428 2026] [:error] [pid 13635:tid 13701] [client 52.143.152.19:49672] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/upll22.php"] [unique_id "admekcCZeuwIgRXgWykGgQAAAYk"]
[Sat Apr 11 09:06:25.999490 2026] [:error] [pid 13635:tid 13697] [client 52.143.152.19:44958] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/upll22.php"] [unique_id "admekcCZeuwIgRXgWykGhAAAAYU"]
[Sat Apr 11 09:06:26.525355 2026] [:error] [pid 13721:tid 13726] [client 52.143.152.19:49666] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/upll22.php"] [unique_id "admekgtCFIRABSMvNE7FnAAAAAI"]
[Sat Apr 11 09:06:27.000703 2026] [:error] [pid 13635:tid 13708] [client 52.143.152.19:11003] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "admeksCZeuwIgRXgWykGiQAAAZA"]
[Sat Apr 11 09:06:27.484583 2026] [:error] [pid 13721:tid 13729] [client 52.143.152.19:44991] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "admekwtCFIRABSMvNE7FoQAAAAU"]
[Sat Apr 11 09:06:27.984392 2026] [:error] [pid 13721:tid 13738] [client 52.143.152.19:10991] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "admekwtCFIRABSMvNE7FpQAAAA4"]
[Sat Apr 11 09:06:28.531229 2026] [:error] [pid 13721:tid 13731] [client 52.143.152.19:10948] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "admelAtCFIRABSMvNE7FqgAAAAc"]
[Sat Apr 11 09:06:29.001056 2026] [:error] [pid 13635:tid 13712] [client 52.143.152.19:44970] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "admelMCZeuwIgRXgWykGjQAAAZQ"]
[Sat Apr 11 09:06:29.476778 2026] [:error] [pid 13721:tid 13735] [client 52.143.152.19:11004] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "admelQtCFIRABSMvNE7FsQAAAAs"]
[Sat Apr 11 09:06:29.942123 2026] [:error] [pid 13721:tid 13742] [client 52.143.152.19:44965] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "admelQtCFIRABSMvNE7FswAAABI"]
[Sat Apr 11 09:06:30.420581 2026] [:error] [pid 13721:tid 13730] [client 52.143.152.19:11000] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "admelgtCFIRABSMvNE7FtgAAAAY"]
[Sat Apr 11 09:06:30.939999 2026] [:error] [pid 13635:tid 13710] [client 52.143.152.19:54620] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "admelsCZeuwIgRXgWykGkAAAAZI"]
[Sat Apr 11 09:06:31.408936 2026] [:error] [pid 13634:tid 13678] [client 52.143.152.19:10938] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "admel3aB01qKsmKvEg85YQAAAU0"]
[Sat Apr 11 09:06:31.883983 2026] [:error] [pid 13721:tid 13743] [client 52.143.152.19:49056] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "admelwtCFIRABSMvNE7FuwAAABM"]
[Sat Apr 11 09:06:32.421786 2026] [:error] [pid 13721:tid 13726] [client 52.143.152.19:10947] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "admemAtCFIRABSMvNE7FvgAAAAI"]
[Sat Apr 11 09:06:32.950958 2026] [:error] [pid 13633:tid 13645] [client 52.143.152.19:44957] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "admemGaKDA-4b93MwJx-QgAAAQg"]
[Sat Apr 11 09:06:33.500678 2026] [:error] [pid 13721:tid 13735] [client 52.143.152.19:44952] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "admemQtCFIRABSMvNE7FwwAAAAs"]
[Sat Apr 11 09:06:34.120613 2026] [:error] [pid 13633:tid 13660] [client 52.143.152.19:49709] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "admemmaKDA-4b93MwJx-QwAAARc"]
[Sat Apr 11 09:06:34.623692 2026] [:error] [pid 13635:tid 13704] [client 52.143.152.19:49074] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "admemsCZeuwIgRXgWykGmQAAAYw"]
[Sat Apr 11 09:06:35.098859 2026] [:error] [pid 13721:tid 13735] [client 52.143.152.19:49723] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "admemwtCFIRABSMvNE7FygAAAAs"]
[Sat Apr 11 09:06:35.606813 2026] [:error] [pid 13633:tid 13656] [client 52.143.152.19:49050] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "admem2aKDA-4b93MwJx-RQAAARM"]
[Sat Apr 11 09:06:36.095484 2026] [:error] [pid 13721:tid 13748] [client 52.143.152.19:49684] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "admenAtCFIRABSMvNE7FzAAAABg"]
[Sat Apr 11 09:06:36.591891 2026] [:error] [pid 13721:tid 13733] [client 52.143.152.19:49682] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "admenAtCFIRABSMvNE7FzgAAAAk"]
[Sat Apr 11 09:06:37.065561 2026] [:error] [pid 13721:tid 13728] [client 52.143.152.19:10499] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "admenQtCFIRABSMvNE7F0gAAAAQ"]
[Sat Apr 11 09:06:37.635947 2026] [:error] [pid 13634:tid 13675] [client 52.143.152.19:54618] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "admenXaB01qKsmKvEg85aQAAAUo"]
[Sat Apr 11 09:06:38.161276 2026] [:error] [pid 13634:tid 13678] [client 52.143.152.19:49722] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "admennaB01qKsmKvEg85awAAAU0"]
[Sat Apr 11 09:06:38.654364 2026] [:error] [pid 13634:tid 13669] [client 52.143.152.19:49083] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "admennaB01qKsmKvEg85bQAAAUQ"]
[Sat Apr 11 09:06:39.185565 2026] [:error] [pid 13633:tid 13638] [client 52.143.152.19:49718] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "admen2aKDA-4b93MwJx-SQAAAQE"]
[Sat Apr 11 09:06:39.661924 2026] [:error] [pid 13635:tid 13704] [client 52.143.152.19:10960] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "admen8CZeuwIgRXgWykGpAAAAYw"]
[Sat Apr 11 09:06:40.271011 2026] [:error] [pid 13634:tid 13666] [client 52.143.152.19:49721] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "admeoHaB01qKsmKvEg85cgAAAUE"]
[Sat Apr 11 09:06:41.018163 2026] [:error] [pid 13635:tid 13700] [client 52.143.152.19:44975] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "admeocCZeuwIgRXgWykGpgAAAYg"]
[Sat Apr 11 09:06:41.832216 2026] [:error] [pid 13633:tid 13661] [client 52.143.152.19:49717] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "admeoWaKDA-4b93MwJx-TQAAARg"]
[Sat Apr 11 09:06:42.342375 2026] [:error] [pid 13635:tid 13701] [client 52.143.152.19:10961] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "admeosCZeuwIgRXgWykGqwAAAYk"]
[Sat Apr 11 09:06:42.810695 2026] [:error] [pid 13721:tid 13747] [client 52.143.152.19:49060] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "admeogtCFIRABSMvNE7F1gAAABc"]
[Sat Apr 11 09:06:43.339051 2026] [:error] [pid 13634:tid 13666] [client 52.143.152.19:10887] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "admeo3aB01qKsmKvEg85ewAAAUE"]
[Sat Apr 11 09:06:43.848807 2026] [:error] [pid 13633:tid 13657] [client 52.143.152.19:49048] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "admeo2aKDA-4b93MwJx-UAAAARQ"]
[Sat Apr 11 09:06:44.374390 2026] [:error] [pid 13635:tid 13697] [client 52.143.152.19:11001] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "admepMCZeuwIgRXgWykGrAAAAYU"]
[Sat Apr 11 09:06:45.077017 2026] [:error] [pid 13721:tid 13744] [client 52.143.152.19:49691] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "admepQtCFIRABSMvNE7F4QAAABQ"]
[Sat Apr 11 09:06:45.559472 2026] [:error] [pid 13633:tid 13661] [client 52.143.152.19:10944] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "admepWaKDA-4b93MwJx-VgAAARg"]
[Sat Apr 11 09:06:46.063709 2026] [:error] [pid 13634:tid 13670] [client 52.143.152.19:10892] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "admepnaB01qKsmKvEg85fwAAAUU"]
[Sat Apr 11 09:06:46.625540 2026] [:error] [pid 13721:tid 13729] [client 52.143.152.19:49711] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "admepgtCFIRABSMvNE7F5wAAAAU"]
[Sat Apr 11 09:06:47.360060 2026] [:error] [pid 13721:tid 13743] [client 52.143.152.19:10987] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "admepwtCFIRABSMvNE7F7AAAABM"]
[Sat Apr 11 09:06:47.999933 2026] [:error] [pid 13635:tid 13696] [client 52.143.152.19:49676] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "admep8CZeuwIgRXgWykGsAAAAYQ"]
[Sat Apr 11 09:06:48.694602 2026] [:error] [pid 13634:tid 13686] [client 52.143.152.19:49078] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "admeqHaB01qKsmKvEg85hgAAAVU"]
[Sat Apr 11 09:06:49.228320 2026] [:error] [pid 13721:tid 13738] [client 52.143.152.19:49694] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "admeqQtCFIRABSMvNE7F8QAAAA4"]
[Sat Apr 11 09:06:49.790677 2026] [:error] [pid 13635:tid 13714] [client 52.143.152.19:54609] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "admeqcCZeuwIgRXgWykGsgAAAZY"]
[Sat Apr 11 09:06:50.267454 2026] [:error] [pid 13721:tid 13743] [client 52.143.152.19:10980] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "admeqgtCFIRABSMvNE7F8gAAABM"]
[Sat Apr 11 09:06:50.789585 2026] [:error] [pid 13634:tid 13684] [client 52.143.152.19:49724] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "admeqnaB01qKsmKvEg85jgAAAVM"]
[Sat Apr 11 09:06:51.276052 2026] [:error] [pid 13633:tid 13646] [client 52.143.152.19:49031] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "admeq2aKDA-4b93MwJx-XwAAAQk"]
[Sat Apr 11 09:06:51.747298 2026] [:error] [pid 13633:tid 13660] [client 52.143.152.19:54645] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "admeq2aKDA-4b93MwJx-YgAAARc"]
[Sat Apr 11 09:06:52.255957 2026] [:error] [pid 13634:tid 13665] [client 52.143.152.19:54626] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "admerHaB01qKsmKvEg85kwAAAUA"]
[Sat Apr 11 09:06:52.834647 2026] [:error] [pid 13633:tid 13642] [client 52.143.152.19:54597] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "admerGaKDA-4b93MwJx-ZwAAAQU"]
[Sat Apr 11 09:06:53.337122 2026] [:error] [pid 13721:tid 13731] [client 52.143.152.19:54643] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "admerQtCFIRABSMvNE7F-AAAAAc"]
[Sat Apr 11 09:06:53.951269 2026] [:error] [pid 13635:tid 13715] [client 52.143.152.19:10917] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "admercCZeuwIgRXgWykGwQAAAZc"]
[Sat Apr 11 09:06:54.417426 2026] [:error] [pid 13635:tid 13708] [client 52.143.152.19:49081] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "admersCZeuwIgRXgWykGxQAAAZA"]
[Sat Apr 11 09:06:54.954978 2026] [:error] [pid 13635:tid 13711] [client 52.143.152.19:44971] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "admersCZeuwIgRXgWykGyAAAAZM"]
[Sat Apr 11 09:06:55.530424 2026] [:error] [pid 13633:tid 13646] [client 52.143.152.19:10894] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "admer2aKDA-4b93MwJx-aQAAAQk"]
[Sat Apr 11 09:06:56.262158 2026] [:error] [pid 13635:tid 13697] [client 52.143.152.19:54631] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "admesMCZeuwIgRXgWykGzgAAAYU"]
[Sat Apr 11 09:06:56.744742 2026] [:error] [pid 13634:tid 13673] [client 52.143.152.19:49678] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "admesHaB01qKsmKvEg85mQAAAUg"]
[Sat Apr 11 09:06:57.211300 2026] [:error] [pid 13721:tid 13732] [client 52.143.152.19:10993] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "admesQtCFIRABSMvNE7GAwAAAAg"]
[Sat Apr 11 09:06:57.805959 2026] [:error] [pid 13635:tid 13693] [client 52.143.152.19:49047] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "admescCZeuwIgRXgWykG0gAAAYE"]
[Sat Apr 11 09:06:58.279215 2026] [:error] [pid 13633:tid 13645] [client 52.143.152.19:10939] File does not exist: /usr/local/apache/htdocs/suspended-page/wtiiy.php
[Sat Apr 11 09:06:58.514289 2026] [:error] [pid 13633:tid 13643] [client 52.143.152.19:10939] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sat Apr 11 09:06:58.748737 2026] [:error] [pid 13633:tid 13648] [client 52.143.152.19:10939] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Sat Apr 11 09:06:58.983347 2026] [:error] [pid 13633:tid 13653] [client 52.143.152.19:10939] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Sat Apr 11 09:06:59.464463 2026] [:error] [pid 13633:tid 13649] [client 52.143.152.19:10939] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sat Apr 11 09:06:59.699542 2026] [:error] [pid 13633:tid 13646] [client 52.143.152.19:10939] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sat Apr 11 09:06:59.968863 2026] [:error] [pid 13633:tid 13646] [client 52.143.152.19:10939] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Sat Apr 11 09:07:00.241221 2026] [:error] [pid 13633:tid 13655] [client 52.143.152.19:10939] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Sat Apr 11 09:07:00.476374 2026] [:error] [pid 13633:tid 13650] [client 52.143.152.19:10939] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sat Apr 11 09:07:00.711420 2026] [:error] [pid 13633:tid 13658] [client 52.143.152.19:10939] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Sat Apr 11 09:07:00.942604 2026] [:error] [pid 13633:tid 13660] [client 52.143.152.19:10939] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "admetGaKDA-4b93MwJx-hwAAARc"]
[Sat Apr 11 09:07:01.415497 2026] [:error] [pid 13634:tid 13666] [client 52.143.152.19:49712] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "admetXaB01qKsmKvEg85qAAAAUE"]
[Sat Apr 11 09:07:01.894130 2026] [:error] [pid 13635:tid 13691] [client 52.143.152.19:44978] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "admetcCZeuwIgRXgWykG1wAAAYA"]
[Sat Apr 11 09:07:02.447494 2026] [:error] [pid 13721:tid 13740] [client 52.143.152.19:10977] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "admetgtCFIRABSMvNE7GEwAAABA"]
[Sat Apr 11 09:07:02.946551 2026] [:error] [pid 13635:tid 13699] [client 52.143.152.19:49714] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "admetsCZeuwIgRXgWykG3AAAAYc"]
[Sat Apr 11 09:07:03.428405 2026] [:error] [pid 13634:tid 13678] [client 52.143.152.19:10967] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "admet3aB01qKsmKvEg85rAAAAU0"]
[Sat Apr 11 09:07:03.915568 2026] [:error] [pid 13635:tid 13715] [client 52.143.152.19:44940] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "admet8CZeuwIgRXgWykG4AAAAZc"]
[Sat Apr 11 09:07:04.485273 2026] [:error] [pid 13721:tid 13724] [client 52.143.152.19:44941] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "admeuAtCFIRABSMvNE7GGwAAAAA"]
[Sat Apr 11 09:07:04.969316 2026] [:error] [pid 13635:tid 13699] [client 52.143.152.19:54627] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "admeuMCZeuwIgRXgWykG6AAAAYc"]
[Sat Apr 11 09:07:05.464448 2026] [:error] [pid 13721:tid 13743] [client 52.143.152.19:44942] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "admeuQtCFIRABSMvNE7GHAAAABM"]
[Sat Apr 11 09:07:05.958625 2026] [:error] [pid 13633:tid 13657] [client 52.143.152.19:10957] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "admeuWaKDA-4b93MwJx-jAAAARQ"]
[Sat Apr 11 09:07:06.428296 2026] [:error] [pid 13634:tid 13685] [client 52.143.152.19:49059] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "admeunaB01qKsmKvEg85tQAAAVQ"]
[Sat Apr 11 09:07:06.952394 2026] [:error] [pid 13721:tid 13732] [client 52.143.152.19:49685] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "admeugtCFIRABSMvNE7GIQAAAAg"]
[Sat Apr 11 09:07:07.430661 2026] [:error] [pid 13721:tid 13735] [client 52.143.152.19:10609] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "admeuwtCFIRABSMvNE7GJQAAAAs"]
[Sat Apr 11 09:07:07.894253 2026] [:error] [pid 13721:tid 13737] [client 52.143.152.19:54630] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "admeuwtCFIRABSMvNE7GKgAAAA0"]
[Sat Apr 11 09:07:08.365667 2026] [:error] [pid 13635:tid 13707] [client 52.143.152.19:10909] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "admevMCZeuwIgRXgWykG7gAAAY8"]
[Sat Apr 11 09:07:08.844799 2026] [:error] [pid 13721:tid 13743] [client 52.143.152.19:44972] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "admevAtCFIRABSMvNE7GMAAAABM"]
[Sat Apr 11 09:07:09.338509 2026] [:error] [pid 13635:tid 13707] [client 52.143.152.19:49053] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "admevcCZeuwIgRXgWykG-AAAAY8"]
[Sat Apr 11 09:07:09.882014 2026] [:error] [pid 13635:tid 13693] [client 52.143.152.19:10900] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "admevcCZeuwIgRXgWykG_gAAAYE"]
[Sat Apr 11 09:07:10.370133 2026] [:error] [pid 13633:tid 13651] [client 52.143.152.19:49027] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "admevmaKDA-4b93MwJx-kgAAAQ4"]
[Sat Apr 11 09:07:10.981307 2026] [:error] [pid 13721:tid 13727] [client 52.143.152.19:54607] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "admevgtCFIRABSMvNE7GOAAAAAM"]
[Sat Apr 11 09:07:11.449072 2026] [:error] [pid 13721:tid 13737] [client 52.143.152.19:10984] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "admevwtCFIRABSMvNE7GPAAAAA0"]
[Sat Apr 11 09:07:11.935850 2026] [:error] [pid 13721:tid 13748] [client 52.143.152.19:10910] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "admevwtCFIRABSMvNE7GQQAAABg"]
[Sat Apr 11 09:07:12.458821 2026] [:error] [pid 13721:tid 13734] [client 52.143.152.19:49077] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "admewAtCFIRABSMvNE7GSQAAAAo"]
[Sat Apr 11 09:07:13.030893 2026] [:error] [pid 13721:tid 13747] [client 52.143.152.19:44965] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "admewQtCFIRABSMvNE7GTgAAABc"]
[Sat Apr 11 09:07:13.551846 2026] [:error] [pid 13721:tid 13729] [client 52.143.152.19:54629] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "admewQtCFIRABSMvNE7GUwAAAAU"]
[Sat Apr 11 09:07:14.016988 2026] [:error] [pid 13633:tid 13650] [client 52.143.152.19:10578] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "admewmaKDA-4b93MwJx-mQAAAQ0"]
[Sat Apr 11 09:07:14.512658 2026] [:error] [pid 13634:tid 13668] [client 52.143.152.19:10898] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "admewnaB01qKsmKvEg85vwAAAUM"]
[Sat Apr 11 09:07:15.002862 2026] [:error] [pid 13635:tid 13709] [client 52.143.152.19:10904] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "admew8CZeuwIgRXgWykHDAAAAZE"]
[Sat Apr 11 09:07:15.573522 2026] [:error] [pid 13634:tid 13688] [client 52.143.152.19:54602] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "admew3aB01qKsmKvEg85wgAAAVY"]
[Sat Apr 11 09:07:16.086882 2026] [:error] [pid 13634:tid 13686] [client 52.143.152.19:10934] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "admexHaB01qKsmKvEg85xQAAAVU"]
[Sat Apr 11 09:07:16.674152 2026] [:error] [pid 13634:tid 13677] [client 52.143.152.19:49704] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "admexHaB01qKsmKvEg85yQAAAUw"]
[Sat Apr 11 09:07:17.183480 2026] [:error] [pid 13633:tid 13646] [client 52.143.152.19:44986] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "admexWaKDA-4b93MwJx-pwAAAQk"]
[Sat Apr 11 09:07:17.775778 2026] [:error] [pid 13633:tid 13643] [client 52.143.152.19:44985] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "admexWaKDA-4b93MwJx-qwAAAQY"]
[Sat Apr 11 09:07:18.259556 2026] [:error] [pid 13721:tid 13737] [client 52.143.152.19:54615] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "admexgtCFIRABSMvNE7GXQAAAA0"]
[Sat Apr 11 09:07:18.770550 2026] [:error] [pid 13721:tid 13748] [client 52.143.152.19:10941] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "admexgtCFIRABSMvNE7GYwAAABg"]
[Sat Apr 11 09:07:19.245961 2026] [:error] [pid 13721:tid 13738] [client 52.143.152.19:10940] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "admexwtCFIRABSMvNE7GZgAAAA4"]
[Sat Apr 11 09:07:19.865380 2026] [:error] [pid 13633:tid 13654] [client 52.143.152.19:44960] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "admex2aKDA-4b93MwJx-sQAAARE"]
[Sat Apr 11 09:07:20.352967 2026] [:error] [pid 13721:tid 13726] [client 52.143.152.19:10905] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "admeyAtCFIRABSMvNE7GagAAAAI"]
[Sat Apr 11 09:07:20.913626 2026] [:error] [pid 13634:tid 13672] [client 52.143.152.19:49702] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "admeyHaB01qKsmKvEg852AAAAUc"]
[Sat Apr 11 09:07:21.417713 2026] [:error] [pid 13721:tid 13748] [client 52.143.152.19:54601] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "admeyQtCFIRABSMvNE7GbQAAABg"]
[Sat Apr 11 09:07:21.902917 2026] [:error] [pid 13633:tid 13654] [client 52.143.152.19:54605] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "admeyWaKDA-4b93MwJx-vAAAARE"]
[Sat Apr 11 09:07:22.435874 2026] [:error] [pid 13633:tid 13646] [client 52.143.152.19:49029] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "admeymaKDA-4b93MwJx-vgAAAQk"]
[Sat Apr 11 09:07:22.912637 2026] [:error] [pid 13634:tid 13690] [client 52.143.152.19:54652] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "admeynaB01qKsmKvEg853wAAAVg"]
[Sat Apr 11 09:07:23.391493 2026] [:error] [pid 13721:tid 13743] [client 52.143.152.19:54635] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "admeywtCFIRABSMvNE7GcAAAABM"]
[Sat Apr 11 09:07:23.925061 2026] [:error] [pid 13634:tid 13680] [client 52.143.152.19:10891] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "admey3aB01qKsmKvEg854gAAAU8"]
[Sat Apr 11 09:07:24.392860 2026] [:error] [pid 13721:tid 13726] [client 52.143.152.19:49703] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "admezAtCFIRABSMvNE7GdgAAAAI"]
[Sat Apr 11 09:07:24.859941 2026] [:error] [pid 13721:tid 13737] [client 52.143.152.19:49042] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "admezAtCFIRABSMvNE7GeQAAAA0"]
[Sat Apr 11 09:07:25.326853 2026] [:error] [pid 13635:tid 13708] [client 52.143.152.19:54649] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "admezcCZeuwIgRXgWykHHwAAAZA"]
[Sat Apr 11 09:07:25.803677 2026] [:error] [pid 13721:tid 13743] [client 52.143.152.19:10884] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "admezQtCFIRABSMvNE7GfQAAABM"]
[Sat Apr 11 09:07:26.281954 2026] [:error] [pid 13721:tid 13739] [client 52.143.152.19:10885] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "admezgtCFIRABSMvNE7GgAAAAA8"]
[Sat Apr 11 09:07:26.753657 2026] [:error] [pid 13721:tid 13748] [client 52.143.152.19:10574] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "admezgtCFIRABSMvNE7GiAAAABg"]
[Sat Apr 11 09:07:27.274931 2026] [:error] [pid 13635:tid 13696] [client 52.143.152.19:10914] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "admez8CZeuwIgRXgWykHKwAAAYQ"]
[Sat Apr 11 09:07:27.773281 2026] [:error] [pid 13633:tid 13639] [client 52.143.152.19:49087] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "admez2aKDA-4b93MwJx-xwAAAQI"]
[Sat Apr 11 09:07:28.308846 2026] [:error] [pid 13635:tid 13693] [client 52.143.152.19:44936] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "adme0MCZeuwIgRXgWykHMgAAAYE"]
[Sat Apr 11 09:07:28.782680 2026] [:error] [pid 13633:tid 13661] [client 52.143.152.19:54639] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "adme0GaKDA-4b93MwJx-0AAAARg"]
[Sat Apr 11 09:07:29.369522 2026] [:error] [pid 13721:tid 13725] [client 52.143.152.19:54641] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adme0QtCFIRABSMvNE7GjAAAAAE"]
[Sat Apr 11 09:07:29.843694 2026] [:error] [pid 13635:tid 13699] [client 52.143.152.19:49086] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adme0cCZeuwIgRXgWykHNgAAAYc"]
[Sat Apr 11 09:07:30.390744 2026] [:error] [pid 13635:tid 13712] [client 52.143.152.19:10560] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adme0sCZeuwIgRXgWykHOgAAAZQ"]
[Sat Apr 11 09:07:30.861599 2026] [:error] [pid 13634:tid 13685] [client 52.143.152.19:10899] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adme0naB01qKsmKvEg859gAAAVQ"]
[Sat Apr 11 09:07:31.338600 2026] [:error] [pid 13634:tid 13690] [client 52.143.152.19:10912] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "adme03aB01qKsmKvEg85-wAAAVg"]
[Sat Apr 11 09:07:31.845446 2026] [:error] [pid 13635:tid 13709] [client 52.143.152.19:10995] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "adme08CZeuwIgRXgWykHRAAAAZE"]
[Sat Apr 11 09:07:32.315030 2026] [:error] [pid 13635:tid 13702] [client 52.143.152.19:10950] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "adme1MCZeuwIgRXgWykHSAAAAYo"]
[Sat Apr 11 09:07:32.868352 2026] [:error] [pid 13721:tid 13725] [client 52.143.152.19:49701] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "adme1AtCFIRABSMvNE7GlQAAAAE"]
[Sat Apr 11 09:07:33.368540 2026] [:error] [pid 13721:tid 13738] [client 52.143.152.19:11160] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adme1QtCFIRABSMvNE7GmgAAAA4"]
[Sat Apr 11 09:07:33.890157 2026] [:error] [pid 13635:tid 13712] [client 52.143.152.19:10513] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adme1cCZeuwIgRXgWykHUAAAAZQ"]
[Sat Apr 11 09:07:34.360356 2026] [:error] [pid 13635:tid 13697] [client 52.143.152.19:10568] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adme1sCZeuwIgRXgWykHUwAAAYU"]
[Sat Apr 11 09:07:34.835809 2026] [:error] [pid 13635:tid 13716] [client 52.143.152.19:10888] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adme1sCZeuwIgRXgWykHVgAAAZg"]
[Sat Apr 11 09:07:35.350549 2026] [:error] [pid 13634:tid 13670] [client 52.143.152.19:49079] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "adme13aB01qKsmKvEg86CQAAAUU"]
[Sat Apr 11 09:07:35.818863 2026] [:error] [pid 13634:tid 13667] [client 52.143.152.19:10569] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "adme13aB01qKsmKvEg86DgAAAUI"]
[Sat Apr 11 09:07:36.291566 2026] [:error] [pid 13721:tid 13738] [client 52.143.152.19:10966] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "adme2AtCFIRABSMvNE7GpQAAAA4"]
[Sat Apr 11 09:07:36.782387 2026] [:error] [pid 13635:tid 13706] [client 52.143.152.19:10983] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "adme2MCZeuwIgRXgWykHXgAAAY4"]
[Sat Apr 11 09:07:37.483140 2026] [:error] [pid 13635:tid 13711] [client 52.143.152.19:54610] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adme2cCZeuwIgRXgWykHZAAAAZM"]
[Sat Apr 11 09:07:37.993070 2026] [:error] [pid 13633:tid 13638] [client 52.143.152.19:10929] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adme2WaKDA-4b93MwJx-2QAAAQE"]
[Sat Apr 11 09:07:38.643843 2026] [:error] [pid 13635:tid 13694] [client 52.143.152.19:54644] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adme2sCZeuwIgRXgWykHaAAAAYI"]
[Sat Apr 11 09:07:39.116492 2026] [:error] [pid 13633:tid 13653] [client 52.143.152.19:44928] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adme22aKDA-4b93MwJx-4AAAARA"]
[Sat Apr 11 09:07:39.687954 2026] [:error] [pid 13634:tid 13689] [client 52.143.152.19:11158] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "adme23aB01qKsmKvEg86GAAAAVc"]
[Sat Apr 11 09:07:40.339810 2026] [:error] [pid 13633:tid 13646] [client 52.143.152.19:11151] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "adme3GaKDA-4b93MwJx-5gAAAQk"]
[Sat Apr 11 09:07:40.910567 2026] [:error] [pid 13634:tid 13665] [client 52.143.152.19:10566] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "adme3HaB01qKsmKvEg86HwAAAUA"]
[Sat Apr 11 09:07:42.657173 2026] [:error] [pid 13721:tid 13729] [client 52.143.152.19:10593] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "adme3gtCFIRABSMvNE7GwAAAAAU"]
[Sat Apr 11 09:08:04.171972 2026] [:error] [pid 18016:tid 18039] [client 52.143.152.19:49675] File does not exist: /usr/local/apache/htdocs/suspended-page/zoper1.php
[Sat Apr 11 09:08:04.474585 2026] [:error] [pid 18016:tid 18023] [client 52.143.152.19:49675] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sat Apr 11 09:08:04.751878 2026] [:error] [pid 18016:tid 18022] [client 52.143.152.19:49675] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Sat Apr 11 09:08:04.987011 2026] [:error] [pid 18016:tid 18035] [client 52.143.152.19:49675] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sat Apr 11 09:08:05.221942 2026] [:error] [pid 18016:tid 18040] [client 52.143.152.19:49675] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Sat Apr 11 09:08:05.461282 2026] [:error] [pid 18016:tid 18042] [client 52.143.152.19:49675] File does not exist: /usr/local/apache/htdocs/suspended-page/new3.php
[Sat Apr 11 09:08:05.763395 2026] [:error] [pid 18016:tid 18039] [client 52.143.152.19:49675] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Sat Apr 11 09:08:05.999771 2026] [:error] [pid 18016:tid 18023] [client 52.143.152.19:49675] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Sat Apr 11 09:08:06.234314 2026] [:error] [pid 18016:tid 18018] [client 52.143.152.19:49675] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Sat Apr 11 09:08:06.499345 2026] [:error] [pid 18016:tid 18029] [client 52.143.152.19:49675] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Sat Apr 11 09:08:06.754249 2026] [:error] [pid 18016:tid 18041] [client 52.143.152.19:49675] File does not exist: /usr/local/apache/htdocs/suspended-page/jlex.php
[Sat Apr 11 09:08:06.991502 2026] [:error] [pid 18016:tid 18042] [client 52.143.152.19:49675] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "adme9ucxaCYZQ49a1dm1xgAAAFg"]
[Sat Apr 11 09:08:07.528165 2026] [:error] [pid 17921:tid 17996] [client 52.143.152.19:11154] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "adme91BsNecLQSPLg3DxpQAAAZA"]
[Sat Apr 11 09:08:08.017146 2026] [:error] [pid 17921:tid 17993] [client 52.143.152.19:54592] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "adme-FBsNecLQSPLg3DxpwAAAY0"]
[Sat Apr 11 09:08:08.505641 2026] [:error] [pid 17919:tid 17937] [client 52.143.152.19:44973] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "adme-A4Th_c8TGOTho7kAwAAAQ0"]
[Sat Apr 11 09:08:09.073059 2026] [:error] [pid 17919:tid 17943] [client 52.143.152.19:10946] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp/jp.php"] [unique_id "adme-Q4Th_c8TGOTho7kBQAAARM"]
[Sat Apr 11 09:08:09.714776 2026] [:error] [pid 17920:tid 17957] [client 52.143.152.19:49033] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp/jp.php"] [unique_id "adme-T5Lc1p-Aqpat3lrQwAAAUQ"]
[Sat Apr 11 09:08:10.185607 2026] [:error] [pid 18016:tid 18037] [client 52.143.152.19:49710] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp/jp.php"] [unique_id "adme-ucxaCYZQ49a1dm10wAAAFM"]
[Sat Apr 11 09:08:10.673389 2026] [:error] [pid 17920:tid 17956] [client 52.143.152.19:54632] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp/jp.php"] [unique_id "adme-j5Lc1p-Aqpat3lrRgAAAUM"]
[Sat Apr 11 09:08:11.142332 2026] [:error] [pid 17921:tid 17998] [client 52.143.152.19:10920] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "adme-1BsNecLQSPLg3DxtQAAAZI"]
[Sat Apr 11 09:08:11.641704 2026] [:error] [pid 17921:tid 17984] [client 52.143.152.19:49692] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "adme-1BsNecLQSPLg3DxuAAAAYQ"]
[Sat Apr 11 09:08:12.173507 2026] [:error] [pid 18016:tid 18019] [client 52.143.152.19:10617] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "adme_OcxaCYZQ49a1dm13QAAAEE"]
[Sat Apr 11 09:08:12.782963 2026] [:error] [pid 17919:tid 17925] [client 52.143.152.19:10913] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "adme_A4Th_c8TGOTho7kHQAAAQE"]
[Sat Apr 11 09:08:13.445343 2026] [:error] [pid 18016:tid 18028] [client 52.143.152.19:10586] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "adme_ecxaCYZQ49a1dm15wAAAEo"]
[Sat Apr 11 09:08:14.011968 2026] [:error] [pid 17919:tid 17928] [client 52.143.152.19:10584] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "adme_g4Th_c8TGOTho7kJQAAAQQ"]
[Sat Apr 11 09:08:14.780695 2026] [:error] [pid 17921:tid 17983] [client 52.143.152.19:54606] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "adme_lBsNecLQSPLg3DxwQAAAYM"]
[Sat Apr 11 09:08:15.300705 2026] [:error] [pid 17920:tid 17955] [client 52.143.152.19:10563] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "adme_z5Lc1p-Aqpat3lrVwAAAUI"]
[Sat Apr 11 09:08:15.819974 2026] [:error] [pid 17920:tid 17977] [client 52.143.152.19:54621] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "adme_z5Lc1p-Aqpat3lrWgAAAVg"]
[Sat Apr 11 09:08:16.397072 2026] [:error] [pid 17919:tid 17937] [client 52.143.152.19:54614] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "admfAA4Th_c8TGOTho7kOQAAAQ0"]
[Sat Apr 11 09:08:16.925634 2026] [:error] [pid 18016:tid 18036] [client 52.143.152.19:49697] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "admfAOcxaCYZQ49a1dm16wAAAFI"]
[Sat Apr 11 09:08:17.413065 2026] [:error] [pid 17921:tid 17992] [client 52.143.152.19:11179] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "admfAVBsNecLQSPLg3DxygAAAYw"]
[Sat Apr 11 09:08:17.982513 2026] [:error] [pid 17921:tid 17984] [client 52.143.152.19:49065] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "admfAVBsNecLQSPLg3DxzwAAAYQ"]
[Sat Apr 11 09:08:18.457173 2026] [:error] [pid 17921:tid 17988] [client 52.143.152.19:10579] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "admfAlBsNecLQSPLg3Dx0gAAAYg"]
[Sat Apr 11 09:08:19.007517 2026] [:error] [pid 18016:tid 18031] [client 52.143.152.19:10931] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "admfA-cxaCYZQ49a1dm17gAAAE0"]
[Sat Apr 11 09:08:19.493440 2026] [:error] [pid 18016:tid 18022] [client 52.143.152.19:10890] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "admfA-cxaCYZQ49a1dm18QAAAEQ"]
[Sat Apr 11 09:08:19.978303 2026] [:error] [pid 17921:tid 17994] [client 52.143.152.19:10922] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "admfA1BsNecLQSPLg3Dx1gAAAY4"]
[Sat Apr 11 09:08:20.664971 2026] [:error] [pid 17920:tid 17959] [client 52.143.152.19:11146] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "admfBD5Lc1p-Aqpat3lrYwAAAUY"]
[Sat Apr 11 09:08:21.139270 2026] [:error] [pid 18016:tid 18042] [client 52.143.152.19:10506] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "admfBecxaCYZQ49a1dm19wAAAFg"]
[Sat Apr 11 09:08:21.654614 2026] [:error] [pid 17921:tid 17989] [client 52.143.152.19:10612] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "admfBVBsNecLQSPLg3Dx2wAAAYk"]
[Sat Apr 11 09:08:22.132712 2026] [:error] [pid 18016:tid 18021] [client 52.143.152.19:11173] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "admfBucxaCYZQ49a1dm1-QAAAEM"]
[Sat Apr 11 09:08:22.683012 2026] [:error] [pid 18016:tid 18029] [client 52.143.152.19:10951] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "admfBucxaCYZQ49a1dm1-wAAAEs"]
[Sat Apr 11 09:08:23.151145 2026] [:error] [pid 17920:tid 17962] [client 52.143.152.19:10925] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "admfBz5Lc1p-Aqpat3lrbQAAAUk"]
[Sat Apr 11 09:08:23.632858 2026] [:error] [pid 18016:tid 18018] [client 52.143.152.19:10577] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "admfB-cxaCYZQ49a1dm1_wAAAEA"]
[Sun Apr 12 01:24:37.170300 2026] [:error] [pid 34152:tid 34177] [client 20.220.11.224:25472] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Apr 12 01:24:37.379423 2026] [:error] [pid 34152:tid 34160] [client 20.220.11.224:25472] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Sun Apr 12 01:24:37.794747 2026] [:error] [pid 34152:tid 34170] [client 20.220.11.224:25472] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/install.php"] [unique_id "adqD1YFtE4RhFslT1Dq6EQAAABA"]
[Sun Apr 12 01:24:41.546411 2026] [:error] [pid 34152:tid 34167] [client 20.220.11.224:25491] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/install.php"] [unique_id "adqD2YFtE4RhFslT1Dq6FwAAAA0"]
[Sun Apr 12 01:24:48.551970 2026] [:error] [pid 34152:tid 34158] [client 20.220.11.224:25592] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/install.php"] [unique_id "adqD4IFtE4RhFslT1Dq6LAAAAAQ"]
[Sun Apr 12 01:24:51.272494 2026] [:error] [pid 45064:tid 45095] [client 20.220.11.224:25583] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/install.php"] [unique_id "adqD45cHBvLyJ6EUhUr7eQAAAUM"]
[Sun Apr 12 01:24:53.035858 2026] [:error] [pid 34152:tid 34162] [client 20.220.11.224:25492] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adqD5YFtE4RhFslT1Dq6OgAAAAg"]
[Sun Apr 12 01:24:56.930907 2026] [:error] [pid 34152:tid 34165] [client 20.220.11.224:25560] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adqD6IFtE4RhFslT1Dq6SAAAAAs"]
[Sun Apr 12 01:25:01.330674 2026] [:error] [pid 45064:tid 45111] [client 20.220.11.224:25598] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adqD7ZcHBvLyJ6EUhUr7iAAAAVI"]
[Sun Apr 12 01:25:03.497392 2026] [:error] [pid 34152:tid 34168] [client 20.220.11.224:25483] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adqD74FtE4RhFslT1Dq6bQAAAA4"]
[Sun Apr 12 01:25:12.751888 2026] [:error] [pid 45064:tid 45117] [client 20.220.11.224:25585] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/atomlib.php"] [unique_id "adqD-JcHBvLyJ6EUhUr7qAAAAVg"]
[Sun Apr 12 01:25:17.290347 2026] [:error] [pid 34152:tid 34169] [client 20.220.11.224:25574] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/atomlib.php"] [unique_id "adqD_YFtE4RhFslT1Dq6oQAAAA8"]
[Sun Apr 12 01:25:19.974549 2026] [:error] [pid 44698:tid 44721] [client 20.220.11.224:25542] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adqD_xgoH9UWd-U3D55eDAAAAJI"]
[Sun Apr 12 01:25:24.017441 2026] [:error] [pid 45064:tid 45111] [client 20.220.11.224:25478] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adqEBJcHBvLyJ6EUhUr70QAAAVI"]
[Sun Apr 12 01:25:59.992096 2026] [:error] [pid 44698:tid 44727] [client 20.220.11.224:25570] File does not exist: /usr/local/apache/htdocs/suspended-page/mailer.php
[Sun Apr 12 01:26:00.485347 2026] [:error] [pid 44698:tid 44717] [client 20.220.11.224:25570] File does not exist: /usr/local/apache/htdocs/suspended-page/sendmail.php
[Sun Apr 12 01:26:00.695709 2026] [:error] [pid 44698:tid 44713] [client 20.220.11.224:25570] File does not exist: /usr/local/apache/htdocs/suspended-page/send.php
[Sun Apr 12 01:26:00.906914 2026] [:error] [pid 44698:tid 44707] [client 20.220.11.224:25570] File does not exist: /usr/local/apache/htdocs/suspended-page/Sendemail.php
[Sun Apr 12 01:26:01.118647 2026] [:error] [pid 44698:tid 44718] [client 20.220.11.224:25570] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Sun Apr 12 01:26:01.351867 2026] [:error] [pid 44698:tid 44710] [client 20.220.11.224:25570] File does not exist: /usr/local/apache/htdocs/suspended-page/rss.php
[Sun Apr 12 01:26:01.559364 2026] [:error] [pid 44698:tid 44715] [client 20.220.11.224:25570] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/it.php"] [unique_id "adqEKRgoH9UWd-U3D55efAAAAIw"]
[Sun Apr 12 01:26:07.034046 2026] [:error] [pid 36938:tid 36940] [client 20.220.11.224:25554] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/it.php"] [unique_id "adqEL4SWpa_VL1JPU6zYowAAAYA"]
[Sun Apr 12 01:26:14.738533 2026] [:error] [pid 44701:tid 44790] [client 20.220.11.224:25580] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/it.php"] [unique_id "adqENhGZAP4MrlxEPFc02gAAAE8"]
[Sun Apr 12 01:26:28.818161 2026] [:error] [pid 36909:tid 36924] [client 20.220.11.224:25474] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wso.php"] [unique_id "adqEREGk5GhxTCzHUOoT9wAAAQ0"]
[Sun Apr 12 01:26:30.988394 2026] [:error] [pid 44698:tid 44714] [client 20.220.11.224:25575] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wso.php"] [unique_id "adqERhgoH9UWd-U3D55engAAAIs"]
[Sun Apr 12 01:26:33.574205 2026] [:error] [pid 44700:tid 44766] [client 20.220.11.224:25595] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wso1.php"] [unique_id "adqESWryPgh_uW4QPCljbQAAANY"]
[Sun Apr 12 01:26:43.614601 2026] [:error] [pid 44701:tid 44793] [client 20.220.11.224:25495] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wso1.php"] [unique_id "adqEUxGZAP4MrlxEPFc1PQAAAFI"]
[Sun Apr 12 01:26:49.544146 2026] [:error] [pid 44698:tid 44717] [client 20.220.11.224:25553] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wso2.php"] [unique_id "adqEWRgoH9UWd-U3D55eywAAAI4"]
[Sun Apr 12 01:26:51.636993 2026] [:error] [pid 44701:tid 44790] [client 20.220.11.224:25579] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wso2.php"] [unique_id "adqEWxGZAP4MrlxEPFc1WQAAAE8"]
[Sun Apr 12 01:26:58.828998 2026] [:error] [pid 34152:tid 34172] [client 20.220.11.224:25555] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wso2.php"] [unique_id "adqEYoFtE4RhFslT1Dq7QwAAABI"]
[Sun Apr 12 01:27:00.834580 2026] [:error] [pid 44698:tid 44722] [client 20.220.11.224:25508] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wso2.php"] [unique_id "adqEZBgoH9UWd-U3D55e4wAAAJM"]
[Sun Apr 12 01:27:03.632263 2026] [:error] [pid 36909:tid 36921] [client 20.220.11.224:25562] File does not exist: /usr/local/apache/htdocs/suspended-page/wso1337.php
[Sun Apr 12 01:27:03.842698 2026] [:error] [pid 36909:tid 36934] [client 20.220.11.224:25562] File does not exist: /usr/local/apache/htdocs/suspended-page/WSO.php
[Sun Apr 12 01:27:04.071142 2026] [:error] [pid 36909:tid 36924] [client 20.220.11.224:25562] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sun Apr 12 01:27:04.312149 2026] [:error] [pid 36909:tid 36917] [client 20.220.11.224:25562] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa123.php
[Sun Apr 12 01:27:04.520967 2026] [:error] [pid 36909:tid 36933] [client 20.220.11.224:25562] File does not exist: /usr/local/apache/htdocs/suspended-page/alex.php
[Sun Apr 12 01:27:04.733753 2026] [:error] [pid 36909:tid 36918] [client 20.220.11.224:25562] File does not exist: /usr/local/apache/htdocs/suspended-page/alexus.php
[Sun Apr 12 01:27:04.945340 2026] [:error] [pid 36909:tid 36931] [client 20.220.11.224:25562] File does not exist: /usr/local/apache/htdocs/suspended-page/alexuse.php
[Sun Apr 12 01:27:05.155365 2026] [:error] [pid 36909:tid 36913] [client 20.220.11.224:25562] File does not exist: /usr/local/apache/htdocs/suspended-page/alexusmailer 2.0.php
[Sun Apr 12 01:27:05.381455 2026] [:error] [pid 36909:tid 36915] [client 20.220.11.224:25562] File does not exist: /usr/local/apache/htdocs/suspended-page/leaf.php
[Sun Apr 12 01:27:05.590100 2026] [:error] [pid 36909:tid 36926] [client 20.220.11.224:25562] File does not exist: /usr/local/apache/htdocs/suspended-page/leafmailer.php
[Sun Apr 12 01:27:05.799640 2026] [:error] [pid 36909:tid 36925] [client 20.220.11.224:25562] File does not exist: /usr/local/apache/htdocs/suspended-page/kiss.php
[Sun Apr 12 01:27:06.022387 2026] [:error] [pid 36909:tid 36922] [client 20.220.11.224:25562] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/owl.php"] [unique_id "adqEakGk5GhxTCzHUOoUUAAAAQs"]
[Sun Apr 12 01:27:08.781240 2026] [:error] [pid 44701:tid 44792] [client 20.220.11.224:25572] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/owl.php"] [unique_id "adqEbBGZAP4MrlxEPFc1mAAAAFE"]
[Sun Apr 12 01:27:14.118831 2026] [:error] [pid 36938:tid 36961] [client 20.220.11.224:25544] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/owl.php"] [unique_id "adqEcoSWpa_VL1JPU6zZDQAAAZU"]
[Sun Apr 12 01:27:23.852004 2026] [:error] [pid 44701:tid 44775] [client 20.220.11.224:25584] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bypass.php"] [unique_id "adqEexGZAP4MrlxEPFc14wAAAEM"]
[Sun Apr 12 01:27:44.925398 2026] [:error] [pid 34152:tid 34161] [client 20.220.11.224:25588] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byp.php"] [unique_id "adqEkIFtE4RhFslT1Dq74gAAAAc"]
[Sun Apr 12 01:27:47.784749 2026] [:error] [pid 34152:tid 34171] [client 20.220.11.224:25596] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byp.php"] [unique_id "adqEk4FtE4RhFslT1Dq75QAAABE"]
[Sun Apr 12 01:27:49.691319 2026] [:error] [pid 36909:tid 36926] [client 20.220.11.224:25597] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byp.php"] [unique_id "adqElUGk5GhxTCzHUOoUiAAAAQ8"]
[Sun Apr 12 01:27:50.917851 2026] [:error] [pid 44701:tid 44791] [client 20.220.11.224:25581] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byp.php"] [unique_id "adqElhGZAP4MrlxEPFc2KAAAAFA"]
[Sun Apr 12 01:27:52.745866 2026] [:error] [pid 44701:tid 44783] [client 20.220.11.224:25476] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uploader.php"] [unique_id "adqEmBGZAP4MrlxEPFc2LgAAAEo"]
[Sun Apr 12 01:27:54.145228 2026] [:error] [pid 44701:tid 44794] [client 20.220.11.224:25561] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uploader.php"] [unique_id "adqEmhGZAP4MrlxEPFc2LwAAAFM"]
[Sun Apr 12 01:27:55.786239 2026] [:error] [pid 36938:tid 36947] [client 20.220.11.224:25578] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uploader.php"] [unique_id "adqEm4SWpa_VL1JPU6zZgwAAAYc"]
[Sun Apr 12 01:28:04.634735 2026] [:error] [pid 44700:tid 44765] [client 20.220.11.224:25411] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uploader.php"] [unique_id "adqEpGryPgh_uW4QPClj1AAAANU"]
[Sun Apr 12 01:28:12.033621 2026] [:error] [pid 45064:tid 45094] [client 20.220.11.224:25565] File does not exist: /usr/local/apache/htdocs/suspended-page/upload.php
[Sun Apr 12 01:28:12.244601 2026] [:error] [pid 45064:tid 45098] [client 20.220.11.224:25565] File does not exist: /usr/local/apache/htdocs/suspended-page/file-manager.php
[Sun Apr 12 01:28:12.457452 2026] [:error] [pid 45064:tid 45097] [client 20.220.11.224:25565] File does not exist: /usr/local/apache/htdocs/suspended-page/vuln.php
[Sun Apr 12 01:28:12.670061 2026] [:error] [pid 45064:tid 45101] [client 20.220.11.224:25565] File does not exist: /usr/local/apache/htdocs/suspended-page/gel.php
[Sun Apr 12 01:28:12.900662 2026] [:error] [pid 45064:tid 45110] [client 20.220.11.224:25565] File does not exist: /usr/local/apache/htdocs/suspended-page/Gel.php
[Sun Apr 12 01:28:13.124119 2026] [:error] [pid 45064:tid 45114] [client 20.220.11.224:25565] File does not exist: /usr/local/apache/htdocs/suspended-page/olux.php
[Sun Apr 12 01:28:13.343582 2026] [:error] [pid 45064:tid 45105] [client 20.220.11.224:25565] File does not exist: /usr/local/apache/htdocs/suspended-page/olu.php
[Sun Apr 12 01:28:13.553732 2026] [:error] [pid 45064:tid 45113] [client 20.220.11.224:25565] File does not exist: /usr/local/apache/htdocs/suspended-page/anone.php
[Sun Apr 12 01:28:13.767602 2026] [:error] [pid 45064:tid 45107] [client 20.220.11.224:25565] File does not exist: /usr/local/apache/htdocs/suspended-page/nasgor.php
[Sun Apr 12 01:28:13.977741 2026] [:error] [pid 45064:tid 45109] [client 20.220.11.224:25565] File does not exist: /usr/local/apache/htdocs/suspended-page/rahma.php
[Sun Apr 12 01:28:14.201089 2026] [:error] [pid 45064:tid 45112] [client 20.220.11.224:25565] File does not exist: /usr/local/apache/htdocs/suspended-page/mrjn.php
[Sun Apr 12 01:28:14.413761 2026] [:error] [pid 45064:tid 45096] [client 20.220.11.224:25565] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-configer.php"] [unique_id "adqErpcHBvLyJ6EUhUr8qgAAAUQ"]
[Sun Apr 12 01:28:15.585315 2026] [:error] [pid 36909:tid 36920] [client 20.220.11.224:25577] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-configer.php"] [unique_id "adqEr0Gk5GhxTCzHUOoUqQAAAQk"]
[Sun Apr 12 01:28:17.422027 2026] [:error] [pid 44701:tid 44787] [client 20.220.11.224:25549] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-configer.php"] [unique_id "adqEsRGZAP4MrlxEPFc2TwAAAE0"]
[Sun Apr 12 01:28:19.022875 2026] [:error] [pid 44701:tid 44791] [client 20.220.11.224:25477] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-configer.php"] [unique_id "adqEsxGZAP4MrlxEPFc2UgAAAFA"]
[Sun Apr 12 01:28:24.336484 2026] [:error] [pid 44701:tid 44779] [client 20.220.11.224:25494] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-conffg.php"] [unique_id "adqEuBGZAP4MrlxEPFc2ZgAAAEc"]
[Sun Apr 12 01:28:32.826692 2026] [:error] [pid 44700:tid 44760] [client 20.220.11.224:25548] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-conffg.php"] [unique_id "adqEwGryPgh_uW4QPClkCwAAANA"]
[Sun Apr 12 01:28:39.873028 2026] [:error] [pid 36909:tid 36920] [client 20.220.11.224:25409] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-confiig.php"] [unique_id "adqEx0Gk5GhxTCzHUOoU2wAAAQk"]
[Sun Apr 12 01:28:45.715771 2026] [:error] [pid 44701:tid 44782] [client 20.220.11.224:25472] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-confiig.php"] [unique_id "adqEzRGZAP4MrlxEPFc2sAAAAEk"]
[Sun Apr 12 01:28:48.006516 2026] [:error] [pid 44698:tid 44705] [client 20.220.11.224:25493] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-confiig.php"] [unique_id "adqE0BgoH9UWd-U3D55fTAAAAII"]
[Sun Apr 12 01:28:51.353317 2026] [:error] [pid 44701:tid 44779] [client 20.220.11.224:25546] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-confiig.php"] [unique_id "adqE0xGZAP4MrlxEPFc2ygAAAEc"]
[Sun Apr 12 01:28:53.873769 2026] [:error] [pid 44701:tid 44795] [client 20.220.11.224:25593] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-settings.php"] [unique_id "adqE1RGZAP4MrlxEPFc23AAAAFQ"]
[Sun Apr 12 01:29:04.484509 2026] [:error] [pid 44701:tid 44774] [client 20.220.11.224:25492] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-settings.php"] [unique_id "adqE4BGZAP4MrlxEPFc3HQAAAEI"]
[Sun Apr 12 01:29:08.751672 2026] [:error] [pid 45064:tid 45108] [client 20.220.11.224:25484] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-confirm.php"] [unique_id "adqE5JcHBvLyJ6EUhUr82AAAAU8"]
[Sun Apr 12 01:29:10.572114 2026] [:error] [pid 36938:tid 36940] [client 20.220.11.224:25473] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-confirm.php"] [unique_id "adqE5oSWpa_VL1JPU6zacAAAAYA"]
[Sun Apr 12 01:29:12.796696 2026] [:error] [pid 36938:tid 36959] [client 20.220.11.224:25551] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-confirm.php"] [unique_id "adqE6ISWpa_VL1JPU6zafgAAAZM"]
[Sun Apr 12 01:29:14.699884 2026] [:error] [pid 36938:tid 36941] [client 20.220.11.224:25559] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-confirm.php
[Sun Apr 12 01:29:14.909650 2026] [:error] [pid 36938:tid 36960] [client 20.220.11.224:25559] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-one.php
[Sun Apr 12 01:29:15.119284 2026] [:error] [pid 36938:tid 36944] [client 20.220.11.224:25559] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ad.php
[Sun Apr 12 01:29:15.347911 2026] [:error] [pid 36938:tid 36951] [client 20.220.11.224:25559] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Sun Apr 12 01:29:15.758386 2026] [:error] [pid 36938:tid 36961] [client 20.220.11.224:25559] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Sun Apr 12 01:29:15.968359 2026] [:error] [pid 36938:tid 36962] [client 20.220.11.224:25559] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads.php
[Sun Apr 12 01:29:17.991908 2026] [:error] [pid 36938:tid 36958] [client 20.220.11.224:25559] File does not exist: /usr/local/apache/htdocs/suspended-page/bb.php
[Sun Apr 12 01:29:18.224095 2026] [:error] [pid 36938:tid 36956] [client 20.220.11.224:25559] File does not exist: /usr/local/apache/htdocs/suspended-page/lf.php
[Sun Apr 12 01:29:20.047923 2026] [:error] [pid 36938:tid 36941] [client 20.220.11.224:25559] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Sun Apr 12 01:29:20.257866 2026] [:error] [pid 36938:tid 36951] [client 20.220.11.224:25559] File does not exist: /usr/local/apache/htdocs/suspended-page/hello.php
[Sun Apr 12 01:29:20.488566 2026] [:error] [pid 36938:tid 36943] [client 20.220.11.224:25559] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Sun Apr 12 01:29:20.812110 2026] [:error] [pid 36938:tid 36948] [client 20.220.11.224:25559] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/if.php"] [unique_id "adqE8ISWpa_VL1JPU6zalgAAAYg"]
[Sun Apr 12 01:29:22.210441 2026] [:error] [pid 36909:tid 36925] [client 20.220.11.224:25503] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/if.php"] [unique_id "adqE8kGk5GhxTCzHUOoVFgAAAQ4"]
[Sun Apr 12 01:29:24.070219 2026] [:error] [pid 44701:tid 44777] [client 20.220.11.224:25498] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/if.php"] [unique_id "adqE9BGZAP4MrlxEPFc3YgAAAEU"]
[Sun Apr 12 01:29:26.172042 2026] [:error] [pid 36909:tid 36924] [client 20.220.11.224:25552] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/if.php"] [unique_id "adqE9kGk5GhxTCzHUOoVKgAAAQ0"]
[Sun Apr 12 01:29:28.532767 2026] [:error] [pid 36938:tid 36961] [client 20.220.11.224:25418] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kk.php"] [unique_id "adqE-ISWpa_VL1JPU6zapgAAAZU"]
[Sun Apr 12 01:29:31.009645 2026] [:error] [pid 36938:tid 36958] [client 20.220.11.224:25475] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kk.php"] [unique_id "adqE-4SWpa_VL1JPU6zargAAAZI"]
[Sun Apr 12 01:29:32.921795 2026] [:error] [pid 44700:tid 44748] [client 20.220.11.224:25568] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kk.php"] [unique_id "adqE_GryPgh_uW4QPClkPAAAAMQ"]
[Sun Apr 12 01:29:39.649666 2026] [:error] [pid 36938:tid 36959] [client 20.220.11.224:25417] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kk.php"] [unique_id "adqFA4SWpa_VL1JPU6zazQAAAZM"]
[Sun Apr 12 01:29:56.190867 2026] [:error] [pid 36909:tid 36934] [client 20.220.11.224:25478] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kn.php"] [unique_id "adqFFEGk5GhxTCzHUOoVVAAAARc"]
[Sun Apr 12 01:29:58.335311 2026] [:error] [pid 36909:tid 36918] [client 20.220.11.224:25502] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3301.php"] [unique_id "adqFFkGk5GhxTCzHUOoVYwAAAQc"]
[Sun Apr 12 01:30:00.377544 2026] [:error] [pid 34152:tid 34159] [client 20.220.11.224:25449] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3301.php"] [unique_id "adqFGIFtE4RhFslT1Dq8lQAAAAU"]
[Sun Apr 12 01:30:03.575706 2026] [:error] [pid 36909:tid 36913] [client 20.220.11.224:25558] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3301.php"] [unique_id "adqFG0Gk5GhxTCzHUOoVcwAAAQI"]
[Sun Apr 12 01:30:09.876272 2026] [:error] [pid 36938:tid 36963] [client 20.220.11.224:25592] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3301.php"] [unique_id "adqFIYSWpa_VL1JPU6zbBAAAAZc"]
[Sun Apr 12 01:30:12.031301 2026] [:error] [pid 45064:tid 45096] [client 20.220.11.224:25531] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "adqFJJcHBvLyJ6EUhUr9BQAAAUQ"]
[Sun Apr 12 01:30:16.890115 2026] [:error] [pid 44700:tid 44765] [client 20.220.11.224:25486] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "adqFKGryPgh_uW4QPClkYQAAANU"]
[Sun Apr 12 01:30:25.016824 2026] [:error] [pid 36938:tid 36957] [client 20.220.11.224:25510] File does not exist: /usr/local/apache/htdocs/suspended-page/3.php
[Sun Apr 12 01:30:25.251720 2026] [:error] [pid 36938:tid 36958] [client 20.220.11.224:25510] File does not exist: /usr/local/apache/htdocs/suspended-page/.wp-cache.php
[Sun Apr 12 01:30:25.458081 2026] [:error] [pid 36938:tid 36949] [client 20.220.11.224:25510] [client 20.220.11.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/niil.php"] [unique_id "adqFMYSWpa_VL1JPU6zbGQAAAYk"]
[Sun Apr 12 01:30:30.271027 2026] [:error] [pid 45064:tid 45096] [client 20.220.11.224:25566] [client 20.220.11.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519-items.php"] [unique_id "adqFNpcHBvLyJ6EUhUr9EwAAAUQ"]
[Sun Apr 12 01:30:35.203609 2026] [:error] [pid 44700:tid 44747] [client 20.220.11.224:25545] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Sun Apr 12 01:30:35.416293 2026] [:error] [pid 44700:tid 44755] [client 20.220.11.224:25545] File does not exist: /usr/local/apache/htdocs/suspended-page/ohayo.php
[Sun Apr 12 01:30:35.648824 2026] [:error] [pid 44700:tid 44760] [client 20.220.11.224:25545] File does not exist: /usr/local/apache/htdocs/suspended-page/cms.php
[Sun Apr 12 01:30:35.860285 2026] [:error] [pid 44700:tid 44748] [client 20.220.11.224:25545] File does not exist: /usr/local/apache/htdocs/suspended-page/41.php
[Sun Apr 12 01:30:36.122125 2026] [:error] [pid 44700:tid 44766] [client 20.220.11.224:25545] File does not exist: /usr/local/apache/htdocs/suspended-page/4price.php
[Sun Apr 12 01:30:36.352807 2026] [:error] [pid 44700:tid 44744] [client 20.220.11.224:25545] File does not exist: /usr/local/apache/htdocs/suspended-page/MARIJUANA.php
[Sun Apr 12 01:30:36.563598 2026] [:error] [pid 44700:tid 44762] [client 20.220.11.224:25545] File does not exist: /usr/local/apache/htdocs/suspended-page/.fk.php
[Sun Apr 12 01:30:37.108618 2026] [:error] [pid 44700:tid 44759] [client 20.220.11.224:25545] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Sun Apr 12 01:30:39.123731 2026] [:error] [pid 44700:tid 44757] [client 20.220.11.224:25545] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sun Apr 12 01:30:39.333848 2026] [:error] [pid 44700:tid 44760] [client 20.220.11.224:25545] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "adqFP2ryPgh_uW4QPClkggAAANA"]
[Sun Apr 12 01:30:42.457890 2026] [:error] [pid 34152:tid 34169] [client 20.220.11.224:25514] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "adqFQoFtE4RhFslT1Dq82AAAAA8"]
[Sun Apr 12 01:30:46.659674 2026] [:error] [pid 36909:tid 36917] [client 20.220.11.224:25528] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "adqFRkGk5GhxTCzHUOoVmAAAAQY"]
[Sun Apr 12 01:30:51.292607 2026] [:error] [pid 36909:tid 36915] [client 20.220.11.224:25586] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "adqFS0Gk5GhxTCzHUOoVowAAAQQ"]
[Sun Apr 12 01:30:54.759316 2026] [:error] [pid 44701:tid 44793] [client 20.220.11.224:25599] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "adqFThGZAP4MrlxEPFc4DwAAAFI"]
[Sun Apr 12 01:31:08.807759 2026] [:error] [pid 34152:tid 34176] [client 20.220.11.224:25491] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sad/about.php"] [unique_id "adqFXIFtE4RhFslT1Dq88AAAABY"]
[Sun Apr 12 01:31:16.755590 2026] [:error] [pid 36938:tid 36956] [client 20.220.11.224:25481] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sad/about.php"] [unique_id "adqFZISWpa_VL1JPU6zbdAAAAZA"]
[Sun Apr 12 01:31:17.935636 2026] [:error] [pid 45064:tid 45101] [client 20.220.11.224:25542] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sad/about.php"] [unique_id "adqFZZcHBvLyJ6EUhUr9RgAAAUg"]
[Sun Apr 12 01:31:20.952932 2026] [:error] [pid 44701:tid 44785] [client 20.220.11.224:25571] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sad/about.php"] [unique_id "adqFaBGZAP4MrlxEPFc4VQAAAEs"]
[Sun Apr 12 01:31:23.911331 2026] [:error] [pid 44700:tid 44744] [client 20.220.11.224:25554] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "adqFa2ryPgh_uW4QPClkrwAAAMA"]
[Sun Apr 12 01:31:24.829894 2026] [:error] [pid 44698:tid 44707] [client 20.220.11.224:25595] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "adqFbBgoH9UWd-U3D55f6gAAAIQ"]
[Sun Apr 12 01:31:29.312803 2026] [:error] [pid 36938:tid 36955] [client 20.220.11.224:25489] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "adqFcYSWpa_VL1JPU6zbiQAAAY8"]
[Sun Apr 12 01:31:35.595807 2026] [:error] [pid 36909:tid 36922] [client 20.220.11.224:25589] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "adqFd0Gk5GhxTCzHUOoWAQAAAQs"]
[Sun Apr 12 01:31:39.100300 2026] [:error] [pid 36909:tid 36924] [client 20.220.11.224:25582] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Sun Apr 12 01:31:39.438341 2026] [:error] [pid 36909:tid 36912] [client 20.220.11.224:25582] File does not exist: /usr/local/apache/htdocs/suspended-page/xl.php
[Sun Apr 12 01:31:42.037206 2026] [:error] [pid 36909:tid 36912] [client 20.220.11.224:25582] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adqFfkGk5GhxTCzHUOoWMAAAAQE"]
[Sun Apr 12 01:31:43.809502 2026] [:error] [pid 44700:tid 44745] [client 20.220.11.224:25572] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adqFf2ryPgh_uW4QPClkywAAAME"]
[Sun Apr 12 01:31:46.011152 2026] [:error] [pid 34152:tid 34163] [client 20.220.11.224:25573] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adqFgoFtE4RhFslT1Dq9JwAAAAk"]
[Sun Apr 12 01:31:48.848211 2026] [:error] [pid 44701:tid 44790] [client 20.220.11.224:25436] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adqFhBGZAP4MrlxEPFc4iQAAAE8"]
[Sun Apr 12 01:31:53.208415 2026] [:error] [pid 36909:tid 36915] [client 20.220.11.224:25535] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa%22"] [unique_id "adqFiUGk5GhxTCzHUOoWQQAAAQQ"]
[Sun Apr 12 01:32:01.104066 2026] [:error] [pid 36938:tid 36955] [client 20.220.11.224:25587] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa%22"] [unique_id "adqFkYSWpa_VL1JPU6zbzAAAAY8"]
[Sun Apr 12 01:32:13.074124 2026] [:error] [pid 36938:tid 36952] [client 20.220.11.224:25594] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adqFnYSWpa_VL1JPU6zb2wAAAYw"]
[Sun Apr 12 01:32:16.433154 2026] [:error] [pid 44698:tid 44714] [client 20.220.11.224:25500] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adqFoBgoH9UWd-U3D55gCgAAAIs"]
[Sun Apr 12 01:32:19.220475 2026] [:error] [pid 44701:tid 44796] [client 20.220.11.224:25580] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adqFoxGZAP4MrlxEPFc4qgAAAFU"]
[Sun Apr 12 01:32:26.251965 2026] [:error] [pid 44701:tid 44779] [client 20.220.11.224:25419] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adqFqhGZAP4MrlxEPFc4vAAAAEc"]
[Sun Apr 12 01:32:30.558157 2026] [:error] [pid 44701:tid 44796] [client 20.220.11.224:25541] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adqFrhGZAP4MrlxEPFc44wAAAFU"]
[Sun Apr 12 01:32:35.769642 2026] [:error] [pid 44698:tid 44723] [client 20.220.11.224:25575] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adqFsxgoH9UWd-U3D55gGAAAAJQ"]
[Sun Apr 12 01:32:39.512399 2026] [:error] [pid 44701:tid 44786] [client 20.220.11.224:25495] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/date.php"] [unique_id "adqFtxGZAP4MrlxEPFc45gAAAEw"]
[Sun Apr 12 01:32:49.535607 2026] [:error] [pid 34152:tid 34160] [client 20.220.11.224:25550] File does not exist: /usr/local/apache/htdocs/suspended-page/date.php
[Sun Apr 12 01:32:49.752382 2026] [:error] [pid 34152:tid 34175] [client 20.220.11.224:25550] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sun Apr 12 01:32:49.969753 2026] [:error] [pid 34152:tid 34171] [client 20.220.11.224:25550] File does not exist: /usr/local/apache/htdocs/suspended-page/pomo.php
[Sun Apr 12 01:32:51.524831 2026] [:error] [pid 34152:tid 34176] [client 20.220.11.224:25550] [client 20.220.11.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/pomo.php"] [unique_id "adqFw4FtE4RhFslT1Dq9dQAAABY"]
[Sun Apr 12 05:27:01.079176 2026] [:error] [pid 60280:tid 60301] [client 172.213.241.51:63412] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Sun Apr 12 05:27:01.311749 2026] [:error] [pid 60280:tid 60305] [client 172.213.241.51:63412] File does not exist: /usr/local/apache/htdocs/suspended-page/sl.php
[Sun Apr 12 05:27:01.543857 2026] [:error] [pid 60280:tid 60302] [client 172.213.241.51:63412] File does not exist: /usr/local/apache/htdocs/suspended-page/flox.php
[Sun Apr 12 05:27:01.779367 2026] [:error] [pid 60280:tid 60300] [client 172.213.241.51:63412] File does not exist: /usr/local/apache/htdocs/suspended-page/mff.php
[Sun Apr 12 05:27:02.012512 2026] [:error] [pid 60280:tid 60283] [client 172.213.241.51:63412] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Sun Apr 12 05:27:02.244059 2026] [:error] [pid 60280:tid 60303] [client 172.213.241.51:63412] File does not exist: /usr/local/apache/htdocs/suspended-page/filemanger2.php
[Sun Apr 12 05:27:02.475977 2026] [:error] [pid 60280:tid 60282] [client 172.213.241.51:63412] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Sun Apr 12 05:27:02.707272 2026] [:error] [pid 60280:tid 60301] [client 172.213.241.51:63412] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-vn1.php
[Sun Apr 12 05:27:02.941393 2026] [:error] [pid 60280:tid 60305] [client 172.213.241.51:63412] File does not exist: /usr/local/apache/htdocs/suspended-page/ewp.php
[Sun Apr 12 05:27:03.174482 2026] [:error] [pid 60280:tid 60304] [client 172.213.241.51:63412] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Sun Apr 12 05:27:03.403472 2026] [:error] [pid 60280:tid 60295] [client 172.213.241.51:63412] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "adq8p3BlLnDOYuIykkjaDwAAAc0"]
[Sun Apr 12 05:27:03.863081 2026] [:error] [pid 25328:tid 25375] [client 172.213.241.51:65477] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "adq8p8xUaQZxT-e0YsDYXgAAAEk"]
[Sun Apr 12 05:27:04.331694 2026] [:error] [pid 60280:tid 60299] [client 172.213.241.51:65524] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "adq8qHBlLnDOYuIykkjaEwAAAdE"]
[Sun Apr 12 05:27:04.792063 2026] [:error] [pid 60280:tid 60302] [client 172.213.241.51:63388] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "adq8qHBlLnDOYuIykkjaFQAAAdQ"]
[Sun Apr 12 05:27:05.253313 2026] [:error] [pid 26600:tid 26644] [client 172.213.241.51:65527] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "adq8qe1YwAZiXhQKLYpz1AAAAY8"]
[Sun Apr 12 05:27:05.713268 2026] [:error] [pid 26600:tid 26640] [client 172.213.241.51:63371] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "adq8qe1YwAZiXhQKLYpz2AAAAYs"]
[Sun Apr 12 05:27:06.187082 2026] [:error] [pid 26567:tid 26588] [client 172.213.241.51:63398] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "adq8qnhRpg6ptWFyFx36GQAAARM"]
[Sun Apr 12 05:27:06.648129 2026] [:error] [pid 25328:tid 25379] [client 172.213.241.51:65504] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "adq8qsxUaQZxT-e0YsDYZAAAAEs"]
[Sun Apr 12 05:27:07.112315 2026] [:error] [pid 26599:tid 26605] [client 172.213.241.51:63297] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "adq8q3G89LXoQbk_rwA3uAAAAUM"]
[Sun Apr 12 05:27:07.573070 2026] [:error] [pid 25328:tid 25368] [client 172.213.241.51:62768] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "adq8q8xUaQZxT-e0YsDYaAAAAEQ"]
[Sun Apr 12 05:27:08.036454 2026] [:error] [pid 25327:tid 25356] [client 172.213.241.51:63361] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "adq8rC6h2tZEVJo9JFI_ZQAAABQ"]
[Sun Apr 12 05:27:08.503799 2026] [:error] [pid 25329:tid 25404] [client 172.213.241.51:65513] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "adq8rGdcIYsS8Iyaj10sfgAAAJA"]
[Sun Apr 12 05:27:08.962845 2026] [:error] [pid 25328:tid 25365] [client 172.213.241.51:63421] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "adq8rMxUaQZxT-e0YsDYagAAAEE"]
[Sun Apr 12 05:27:09.419165 2026] [:error] [pid 25329:tid 25407] [client 172.213.241.51:63382] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "adq8rWdcIYsS8Iyaj10sfwAAAJI"]
[Sun Apr 12 05:27:09.875502 2026] [:error] [pid 25327:tid 25336] [client 172.213.241.51:63409] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "adq8rS6h2tZEVJo9JFI_ZwAAAAA"]
[Sun Apr 12 05:27:10.341768 2026] [:error] [pid 26600:tid 26646] [client 172.213.241.51:65502] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "adq8ru1YwAZiXhQKLYpz3gAAAZE"]
[Sun Apr 12 05:27:10.809046 2026] [:error] [pid 25328:tid 25398] [client 172.213.241.51:63396] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "adq8rsxUaQZxT-e0YsDYbwAAAFQ"]
[Sun Apr 12 05:27:11.280526 2026] [:error] [pid 25328:tid 25385] [client 172.213.241.51:63365] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "adq8r8xUaQZxT-e0YsDYcwAAAE4"]
[Sun Apr 12 05:27:11.738706 2026] [:error] [pid 25437:tid 25444] [client 172.213.241.51:63375] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "adq8r3f97wYZje1ep_NPEAAAAMU"]
[Sun Apr 12 05:27:12.212519 2026] [:error] [pid 25328:tid 25369] [client 172.213.241.51:63399] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "adq8sMxUaQZxT-e0YsDYewAAAEU"]
[Sun Apr 12 05:27:12.671489 2026] [:error] [pid 25328:tid 25405] [client 172.213.241.51:63372] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "adq8sMxUaQZxT-e0YsDYfwAAAFc"]
[Sun Apr 12 05:27:13.141955 2026] [:error] [pid 25327:tid 25339] [client 172.213.241.51:65498] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "adq8sS6h2tZEVJo9JFI_aAAAAAM"]
[Sun Apr 12 05:27:13.614420 2026] [:error] [pid 26567:tid 26585] [client 172.213.241.51:63298] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "adq8sXhRpg6ptWFyFx36JgAAARA"]
[Sun Apr 12 05:27:14.078125 2026] [:error] [pid 25328:tid 25379] [client 172.213.241.51:63406] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "adq8ssxUaQZxT-e0YsDYhAAAAEs"]
[Sun Apr 12 05:27:14.558743 2026] [:error] [pid 25327:tid 25347] [client 172.213.241.51:63416] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "adq8si6h2tZEVJo9JFI_bQAAAAs"]
[Sun Apr 12 05:27:15.036982 2026] [:error] [pid 25437:tid 25453] [client 172.213.241.51:65499] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "adq8s3f97wYZje1ep_NPEQAAAM4"]
[Sun Apr 12 05:27:15.513334 2026] [:error] [pid 25328:tid 25377] [client 172.213.241.51:63393] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "adq8s8xUaQZxT-e0YsDYjgAAAEo"]
[Sun Apr 12 05:27:15.985158 2026] [:error] [pid 26599:tid 26603] [client 172.213.241.51:63362] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "adq8s3G89LXoQbk_rwA3vQAAAUE"]
[Sun Apr 12 05:27:16.452824 2026] [:error] [pid 25437:tid 25450] [client 172.213.241.51:65492] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/water.php"] [unique_id "adq8tHf97wYZje1ep_NPEgAAAMs"]
[Sun Apr 12 05:27:16.917393 2026] [:error] [pid 26567:tid 26572] [client 172.213.241.51:63333] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/water.php"] [unique_id "adq8tHhRpg6ptWFyFx36LwAAAQM"]
[Sun Apr 12 05:27:17.378518 2026] [:error] [pid 25437:tid 25439] [client 172.213.241.51:65509] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/water.php"] [unique_id "adq8tXf97wYZje1ep_NPEwAAAMA"]
[Sun Apr 12 05:27:17.837900 2026] [:error] [pid 25437:tid 25443] [client 172.213.241.51:62749] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/water.php"] [unique_id "adq8tXf97wYZje1ep_NPFQAAAMQ"]
[Sun Apr 12 05:27:18.302859 2026] [:error] [pid 26600:tid 26632] [client 172.213.241.51:63387] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "adq8tu1YwAZiXhQKLYpz4gAAAYM"]
[Sun Apr 12 05:27:18.761313 2026] [:error] [pid 25437:tid 25459] [client 172.213.241.51:63408] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "adq8tnf97wYZje1ep_NPGgAAANQ"]
[Sun Apr 12 05:27:19.219854 2026] [:error] [pid 25437:tid 25458] [client 172.213.241.51:63379] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "adq8t3f97wYZje1ep_NPHAAAANM"]
[Sun Apr 12 05:27:19.677288 2026] [:error] [pid 25437:tid 25456] [client 172.213.241.51:65503] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "adq8t3f97wYZje1ep_NPHgAAANE"]
[Sun Apr 12 05:27:20.134828 2026] [:error] [pid 60280:tid 60306] [client 172.213.241.51:63391] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "adq8uHBlLnDOYuIykkjaHQAAAdg"]
[Sun Apr 12 05:27:20.593717 2026] [:error] [pid 25437:tid 25461] [client 172.213.241.51:63400] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "adq8uHf97wYZje1ep_NPHwAAANY"]
[Sun Apr 12 05:27:21.053062 2026] [:error] [pid 60280:tid 60291] [client 172.213.241.51:63322] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "adq8uXBlLnDOYuIykkjaIwAAAck"]
[Sun Apr 12 05:27:21.517601 2026] [:error] [pid 26600:tid 26644] [client 172.213.241.51:65472] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "adq8ue1YwAZiXhQKLYpz4wAAAY8"]
[Sun Apr 12 05:27:21.974810 2026] [:error] [pid 26600:tid 26634] [client 172.213.241.51:63348] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "adq8ue1YwAZiXhQKLYpz5AAAAYU"]
[Sun Apr 12 05:27:22.432688 2026] [:error] [pid 26600:tid 26652] [client 172.213.241.51:63407] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "adq8uu1YwAZiXhQKLYpz5gAAAZc"]
[Sun Apr 12 05:27:22.892250 2026] [:error] [pid 26600:tid 26637] [client 172.213.241.51:63347] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "adq8uu1YwAZiXhQKLYpz6QAAAYg"]
[Sun Apr 12 05:27:23.359814 2026] [:error] [pid 25328:tid 25396] [client 172.213.241.51:65490] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "adq8u8xUaQZxT-e0YsDYlAAAAFM"]
[Sun Apr 12 05:27:23.845344 2026] [:error] [pid 26600:tid 26648] [client 172.213.241.51:63343] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "adq8u-1YwAZiXhQKLYpz7AAAAZM"]
[Sun Apr 12 05:27:24.315972 2026] [:error] [pid 60280:tid 60306] [client 172.213.241.51:65511] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "adq8vHBlLnDOYuIykkjaMQAAAdg"]
[Sun Apr 12 05:27:24.777462 2026] [:error] [pid 60280:tid 60301] [client 172.213.241.51:63370] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "adq8vHBlLnDOYuIykkjaMwAAAdM"]
[Sun Apr 12 05:27:25.237310 2026] [:error] [pid 60280:tid 60305] [client 172.213.241.51:62727] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "adq8vXBlLnDOYuIykkjaNQAAAdc"]
[Sun Apr 12 05:27:25.696571 2026] [:error] [pid 25328:tid 25368] [client 172.213.241.51:65489] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "adq8vcxUaQZxT-e0YsDYlwAAAEQ"]
[Sun Apr 12 05:27:26.156531 2026] [:error] [pid 60280:tid 60288] [client 172.213.241.51:65516] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "adq8vnBlLnDOYuIykkjaOgAAAcY"]
[Sun Apr 12 05:27:26.626897 2026] [:error] [pid 60280:tid 60303] [client 172.213.241.51:65519] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "adq8vnBlLnDOYuIykkjaQAAAAdU"]
[Sun Apr 12 05:27:27.088300 2026] [:error] [pid 60280:tid 60304] [client 172.213.241.51:63403] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "adq8v3BlLnDOYuIykkjaQgAAAdY"]
[Sun Apr 12 05:27:27.554550 2026] [:error] [pid 26599:tid 26608] [client 172.213.241.51:62730] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oij98gy.php"] [unique_id "adq8v3G89LXoQbk_rwA3yAAAAUY"]
[Sun Apr 12 05:27:28.014440 2026] [:error] [pid 26567:tid 26572] [client 172.213.241.51:63411] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oij98gy.php"] [unique_id "adq8wHhRpg6ptWFyFx36QQAAAQM"]
[Sun Apr 12 05:27:28.475679 2026] [:error] [pid 26567:tid 26574] [client 172.213.241.51:63385] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oij98gy.php"] [unique_id "adq8wHhRpg6ptWFyFx36QwAAAQU"]
[Sun Apr 12 05:27:28.933339 2026] [:error] [pid 26600:tid 26647] [client 172.213.241.51:62769] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oij98gy.php"] [unique_id "adq8wO1YwAZiXhQKLYpz7wAAAZI"]
[Sun Apr 12 05:27:29.392533 2026] [:error] [pid 60280:tid 60302] [client 172.213.241.51:65522] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "adq8wXBlLnDOYuIykkjaTgAAAdQ"]
[Sun Apr 12 05:27:29.850294 2026] [:error] [pid 60280:tid 60297] [client 172.213.241.51:65496] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "adq8wXBlLnDOYuIykkjaUAAAAc8"]
[Sun Apr 12 05:27:30.345620 2026] [:error] [pid 60280:tid 60301] [client 172.213.241.51:65514] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "adq8wnBlLnDOYuIykkjaVAAAAdM"]
[Sun Apr 12 05:27:30.806871 2026] [:error] [pid 60280:tid 60287] [client 172.213.241.51:65526] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "adq8wnBlLnDOYuIykkjaWQAAAcU"]
[Sun Apr 12 05:27:31.280821 2026] [:error] [pid 25437:tid 25443] [client 172.213.241.51:63314] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/turkshell.php"] [unique_id "adq8w3f97wYZje1ep_NPIQAAAMQ"]
[Sun Apr 12 05:27:31.738956 2026] [:error] [pid 25327:tid 25341] [client 172.213.241.51:63369] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/turkshell.php"] [unique_id "adq8wy6h2tZEVJo9JFI_dgAAAAU"]
[Sun Apr 12 05:27:32.202547 2026] [:error] [pid 60280:tid 60289] [client 172.213.241.51:65494] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/turkshell.php"] [unique_id "adq8xHBlLnDOYuIykkjaYQAAAcc"]
[Sun Apr 12 05:27:32.665825 2026] [:error] [pid 60280:tid 60296] [client 172.213.241.51:63378] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/turkshell.php"] [unique_id "adq8xHBlLnDOYuIykkjaZQAAAc4"]
[Sun Apr 12 05:27:33.122290 2026] [:error] [pid 60280:tid 60291] [client 172.213.241.51:65508] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "adq8xXBlLnDOYuIykkjaagAAAck"]
[Sun Apr 12 05:27:33.584018 2026] [:error] [pid 60280:tid 60289] [client 172.213.241.51:63332] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "adq8xXBlLnDOYuIykkjabgAAAcc"]
[Sun Apr 12 05:27:34.044896 2026] [:error] [pid 25328:tid 25398] [client 172.213.241.51:63300] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "adq8xsxUaQZxT-e0YsDYnQAAAFQ"]
[Sun Apr 12 05:27:34.520977 2026] [:error] [pid 25328:tid 25380] [client 172.213.241.51:63309] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "adq8xsxUaQZxT-e0YsDYngAAAEw"]
[Sun Apr 12 05:27:34.990334 2026] [:error] [pid 26599:tid 26614] [client 172.213.241.51:65523] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "adq8xnG89LXoQbk_rwA3ygAAAUw"]
[Sun Apr 12 05:27:35.457802 2026] [:error] [pid 25329:tid 25402] [client 172.213.241.51:62744] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "adq8x2dcIYsS8Iyaj10siQAAAI8"]
[Sun Apr 12 05:27:35.937802 2026] [:error] [pid 26600:tid 26650] [client 172.213.241.51:63389] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "adq8x-1YwAZiXhQKLYpz8QAAAZU"]
[Sun Apr 12 05:27:36.403496 2026] [:error] [pid 25328:tid 25377] [client 172.213.241.51:63331] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "adq8yMxUaQZxT-e0YsDYpAAAAEo"]
[Sun Apr 12 05:27:36.861599 2026] [:error] [pid 25328:tid 25396] [client 172.213.241.51:63419] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "adq8yMxUaQZxT-e0YsDYpQAAAFM"]
[Sun Apr 12 05:27:37.319882 2026] [:error] [pid 25437:tid 25441] [client 172.213.241.51:65491] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "adq8yXf97wYZje1ep_NPJQAAAMI"]
[Sun Apr 12 05:27:37.779492 2026] [:error] [pid 26567:tid 26577] [client 172.213.241.51:63392] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "adq8yXhRpg6ptWFyFx36RgAAAQg"]
[Sun Apr 12 05:27:38.236667 2026] [:error] [pid 25437:tid 25451] [client 172.213.241.51:62755] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "adq8ynf97wYZje1ep_NPKAAAAMw"]
[Sun Apr 12 05:27:38.696896 2026] [:error] [pid 26600:tid 26639] [client 172.213.241.51:65520] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "adq8yu1YwAZiXhQKLYpz_QAAAYo"]
[Sun Apr 12 05:27:39.159951 2026] [:error] [pid 60280:tid 60300] [client 172.213.241.51:63310] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "adq8y3BlLnDOYuIykkjacgAAAdI"]
[Sun Apr 12 05:27:39.620157 2026] [:error] [pid 60280:tid 60302] [client 172.213.241.51:63307] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "adq8y3BlLnDOYuIykkjadwAAAdQ"]
[Sun Apr 12 05:27:40.087698 2026] [:error] [pid 60280:tid 60306] [client 172.213.241.51:65495] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "adq8zHBlLnDOYuIykkjaewAAAdg"]
[Sun Apr 12 05:27:40.546824 2026] [:error] [pid 25437:tid 25449] [client 172.213.241.51:63402] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "adq8zHf97wYZje1ep_NPKQAAAMo"]
[Sun Apr 12 05:27:41.002937 2026] [:error] [pid 25437:tid 25455] [client 172.213.241.51:65501] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "adq8zXf97wYZje1ep_NPKgAAANA"]
[Sun Apr 12 05:27:41.487550 2026] [:error] [pid 25328:tid 25372] [client 172.213.241.51:63410] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "adq8zcxUaQZxT-e0YsDYqgAAAEc"]
[Sun Apr 12 05:27:41.949591 2026] [:error] [pid 60280:tid 60284] [client 172.213.241.51:63363] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "adq8zXBlLnDOYuIykkjaggAAAcI"]
[Sun Apr 12 05:27:42.412190 2026] [:error] [pid 26600:tid 26648] [client 172.213.241.51:63414] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "adq8zu1YwAZiXhQKLYp0GAAAAZM"]
[Sun Apr 12 05:27:42.871397 2026] [:error] [pid 25328:tid 25398] [client 172.213.241.51:63404] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "adq8zsxUaQZxT-e0YsDYsAAAAFQ"]
[Sun Apr 12 05:27:43.335265 2026] [:error] [pid 26567:tid 26580] [client 172.213.241.51:63325] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "adq8z3hRpg6ptWFyFx36TgAAAQs"]
[Sun Apr 12 05:27:43.797675 2026] [:error] [pid 60280:tid 60285] [client 172.213.241.51:65483] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "adq8z3BlLnDOYuIykkjahAAAAcM"]
[Sun Apr 12 05:27:44.258313 2026] [:error] [pid 60280:tid 60306] [client 172.213.241.51:65506] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "adq80HBlLnDOYuIykkjahgAAAdg"]
[Sun Apr 12 05:27:44.717815 2026] [:error] [pid 60280:tid 60282] [client 172.213.241.51:65493] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "adq80HBlLnDOYuIykkjaigAAAcA"]
[Sun Apr 12 05:27:45.177568 2026] [:error] [pid 25437:tid 25463] [client 172.213.241.51:63394] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "adq80Xf97wYZje1ep_NPLAAAANg"]
[Sun Apr 12 05:27:45.638315 2026] [:error] [pid 25437:tid 25456] [client 172.213.241.51:65487] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "adq80Xf97wYZje1ep_NPLQAAANE"]
[Sun Apr 12 05:27:46.101981 2026] [:error] [pid 25327:tid 25342] [client 172.213.241.51:62775] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "adq80i6h2tZEVJo9JFI_ewAAAAY"]
[Sun Apr 12 05:27:46.563720 2026] [:error] [pid 26567:tid 26588] [client 172.213.241.51:62728] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "adq80nhRpg6ptWFyFx36UQAAARM"]
[Sun Apr 12 05:27:47.033477 2026] [:error] [pid 26599:tid 26626] [client 172.213.241.51:63317] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "adq803G89LXoQbk_rwA3zQAAAVg"]
[Sun Apr 12 05:27:47.504486 2026] [:error] [pid 60280:tid 60284] [client 172.213.241.51:63366] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "adq803BlLnDOYuIykkjakAAAAcI"]
[Sun Apr 12 05:27:47.965347 2026] [:error] [pid 60280:tid 60305] [client 172.213.241.51:62743] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "adq803BlLnDOYuIykkjakgAAAdc"]
[Sun Apr 12 05:27:48.424028 2026] [:error] [pid 60280:tid 60296] [client 172.213.241.51:63296] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "adq81HBlLnDOYuIykkjamAAAAc4"]
[Sun Apr 12 05:27:48.881822 2026] [:error] [pid 60280:tid 60282] [client 172.213.241.51:63304] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "adq81HBlLnDOYuIykkjamgAAAcA"]
[Sun Apr 12 05:27:49.342253 2026] [:error] [pid 25328:tid 25387] [client 172.213.241.51:62736] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "adq81cxUaQZxT-e0YsDYtQAAAE8"]
[Sun Apr 12 05:27:49.802628 2026] [:error] [pid 26600:tid 26642] [client 172.213.241.51:63364] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "adq81e1YwAZiXhQKLYp0OAAAAY0"]
[Sun Apr 12 05:27:50.264537 2026] [:error] [pid 60280:tid 60304] [client 172.213.241.51:63305] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "adq81nBlLnDOYuIykkjanAAAAdY"]
[Sun Apr 12 05:27:50.722685 2026] [:error] [pid 60280:tid 60291] [client 172.213.241.51:63415] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "adq81nBlLnDOYuIykkjanQAAAck"]
[Sun Apr 12 05:27:51.191056 2026] [:error] [pid 26600:tid 26629] [client 172.213.241.51:65521] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "adq81-1YwAZiXhQKLYp0QQAAAYA"]
[Sun Apr 12 05:27:51.658662 2026] [:error] [pid 26600:tid 26635] [client 172.213.241.51:63345] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "adq81-1YwAZiXhQKLYp0RQAAAYY"]
[Sun Apr 12 05:27:52.127592 2026] [:error] [pid 60280:tid 60289] [client 172.213.241.51:62771] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "adq82HBlLnDOYuIykkjangAAAcc"]
[Sun Apr 12 05:27:52.592638 2026] [:error] [pid 26567:tid 26574] [client 172.213.241.51:63323] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "adq82HhRpg6ptWFyFx36UwAAAQU"]
[Sun Apr 12 05:27:53.054377 2026] [:error] [pid 26567:tid 26577] [client 172.213.241.51:63377] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "adq82XhRpg6ptWFyFx36VwAAAQg"]
[Sun Apr 12 05:27:53.512555 2026] [:error] [pid 25327:tid 25338] [client 172.213.241.51:65486] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "adq82S6h2tZEVJo9JFI_hwAAAAI"]
[Sun Apr 12 05:27:53.971229 2026] [:error] [pid 25328:tid 25366] [client 172.213.241.51:63390] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "adq82cxUaQZxT-e0YsDYvgAAAEI"]
[Sun Apr 12 05:27:54.432660 2026] [:error] [pid 26599:tid 26616] [client 172.213.241.51:63417] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "adq82nG89LXoQbk_rwA3zwAAAU4"]
[Sun Apr 12 05:27:54.890048 2026] [:error] [pid 25328:tid 25370] [client 172.213.241.51:63334] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "adq82sxUaQZxT-e0YsDYwAAAAEY"]
[Sun Apr 12 05:27:55.351543 2026] [:error] [pid 60280:tid 60285] [client 172.213.241.51:65505] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.mopj.php"] [unique_id "adq823BlLnDOYuIykkjapgAAAcM"]
[Sun Apr 12 05:27:55.811602 2026] [:error] [pid 26599:tid 26604] [client 172.213.241.51:63383] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.mopj.php"] [unique_id "adq823G89LXoQbk_rwA30gAAAUI"]
[Sun Apr 12 05:27:56.277839 2026] [:error] [pid 60280:tid 60283] [client 172.213.241.51:62723] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.mopj.php"] [unique_id "adq83HBlLnDOYuIykkjapwAAAcE"]
[Sun Apr 12 05:27:56.738299 2026] [:error] [pid 60280:tid 60290] [client 172.213.241.51:63319] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.mopj.php"] [unique_id "adq83HBlLnDOYuIykkjaqAAAAcg"]
[Sun Apr 12 05:27:57.212283 2026] [:error] [pid 26599:tid 26622] [client 172.213.241.51:63350] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "adq83XG89LXoQbk_rwA30wAAAVQ"]
[Sun Apr 12 05:27:57.674249 2026] [:error] [pid 25329:tid 25411] [client 172.213.241.51:63308] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "adq83WdcIYsS8Iyaj10sjQAAAJQ"]
[Sun Apr 12 05:27:58.135402 2026] [:error] [pid 60280:tid 60286] [client 172.213.241.51:62751] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "adq83nBlLnDOYuIykkjarwAAAcQ"]
[Sun Apr 12 05:27:58.598780 2026] [:error] [pid 25437:tid 25463] [client 172.213.241.51:65484] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "adq83nf97wYZje1ep_NPPAAAANg"]
[Sun Apr 12 05:27:59.055106 2026] [:error] [pid 60280:tid 60306] [client 172.213.241.51:65500] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nano.php"] [unique_id "adq833BlLnDOYuIykkjaswAAAdg"]
[Sun Apr 12 05:27:59.525407 2026] [:error] [pid 60280:tid 60303] [client 172.213.241.51:65510] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nano.php"] [unique_id "adq833BlLnDOYuIykkjatQAAAdU"]
[Sun Apr 12 05:27:59.986884 2026] [:error] [pid 60280:tid 60282] [client 172.213.241.51:62733] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nano.php"] [unique_id "adq833BlLnDOYuIykkjauAAAAcA"]
[Sun Apr 12 05:28:00.558544 2026] [:error] [pid 26599:tid 26608] [client 172.213.241.51:65480] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nano.php"] [unique_id "adq84HG89LXoQbk_rwA32AAAAUY"]
[Sun Apr 12 05:28:01.413330 2026] [:error] [pid 25328:tid 25387] [client 172.213.241.51:63349] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35_S.php"] [unique_id "adq84cxUaQZxT-e0YsDYxgAAAE8"]
[Sun Apr 12 05:28:02.202892 2026] [:error] [pid 26600:tid 26631] [client 172.213.241.51:63357] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35_S.php"] [unique_id "adq84u1YwAZiXhQKLYp0hAAAAYI"]
[Sun Apr 12 05:28:03.091960 2026] [:error] [pid 26567:tid 26584] [client 172.213.241.51:63418] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_S.php
[Sun Apr 12 05:28:03.324525 2026] [:error] [pid 26567:tid 26579] [client 172.213.241.51:63418] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Sun Apr 12 05:28:03.556837 2026] [:error] [pid 26567:tid 26588] [client 172.213.241.51:63418] File does not exist: /usr/local/apache/htdocs/suspended-page/111.php
[Sun Apr 12 05:28:03.793829 2026] [:error] [pid 26567:tid 26586] [client 172.213.241.51:63418] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Sun Apr 12 05:28:04.036476 2026] [:error] [pid 26567:tid 26589] [client 172.213.241.51:63418] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Sun Apr 12 05:28:04.281790 2026] [:error] [pid 26567:tid 26574] [client 172.213.241.51:63418] File does not exist: /usr/local/apache/htdocs/suspended-page/byrgo.php
[Sun Apr 12 05:28:04.513817 2026] [:error] [pid 26567:tid 26593] [client 172.213.241.51:63418] File does not exist: /usr/local/apache/htdocs/suspended-page/xwpg.php
[Sun Apr 12 05:28:04.746089 2026] [:error] [pid 26567:tid 26587] [client 172.213.241.51:63418] File does not exist: /usr/local/apache/htdocs/suspended-page/ass.php
[Sun Apr 12 05:28:04.980995 2026] [:error] [pid 26567:tid 26577] [client 172.213.241.51:63418] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Apr 12 05:28:05.213320 2026] [:error] [pid 26567:tid 26591] [client 172.213.241.51:63418] File does not exist: /usr/local/apache/htdocs/suspended-page/no18.php
[Sun Apr 12 05:28:05.447408 2026] [:error] [pid 26567:tid 26570] [client 172.213.241.51:63418] File does not exist: /usr/local/apache/htdocs/suspended-page/fine.php
[Sun Apr 12 05:28:05.676590 2026] [:error] [pid 26567:tid 26583] [client 172.213.241.51:63418] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zample.php"] [unique_id "adq85XhRpg6ptWFyFx36bwAAAQ4"]
[Sun Apr 12 05:28:06.140942 2026] [:error] [pid 25328:tid 25398] [client 172.213.241.51:62756] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zample.php"] [unique_id "adq85sxUaQZxT-e0YsDYzAAAAFQ"]
[Sun Apr 12 05:28:06.613700 2026] [:error] [pid 25328:tid 25375] [client 172.213.241.51:63401] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zample.php"] [unique_id "adq85sxUaQZxT-e0YsDYzwAAAEk"]
[Sun Apr 12 05:28:07.074866 2026] [:error] [pid 25328:tid 25405] [client 172.213.241.51:65512] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zample.php"] [unique_id "adq858xUaQZxT-e0YsDY0gAAAFc"]
[Sun Apr 12 05:28:07.534456 2026] [:error] [pid 60280:tid 60303] [client 172.213.241.51:63321] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "adq853BlLnDOYuIykkjawAAAAdU"]
[Sun Apr 12 05:28:07.993008 2026] [:error] [pid 60280:tid 60290] [client 172.213.241.51:62731] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "adq853BlLnDOYuIykkjawgAAAcg"]
[Sun Apr 12 05:28:08.453427 2026] [:error] [pid 60280:tid 60282] [client 172.213.241.51:63340] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "adq86HBlLnDOYuIykkjaxAAAAcA"]
[Sun Apr 12 05:28:08.909831 2026] [:error] [pid 25329:tid 25382] [client 172.213.241.51:62720] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "adq86GdcIYsS8Iyaj10sjwAAAIQ"]
[Sun Apr 12 05:28:09.369448 2026] [:error] [pid 25329:tid 25393] [client 172.213.241.51:63351] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "adq86WdcIYsS8Iyaj10skQAAAIo"]
[Sun Apr 12 05:28:09.827872 2026] [:error] [pid 26600:tid 26629] [client 172.213.241.51:63405] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "adq86e1YwAZiXhQKLYp0lAAAAYA"]
[Sun Apr 12 05:28:10.293393 2026] [:error] [pid 60280:tid 60286] [client 172.213.241.51:63367] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "adq86nBlLnDOYuIykkjayAAAAcQ"]
[Sun Apr 12 05:28:10.753818 2026] [:error] [pid 60280:tid 60296] [client 172.213.241.51:63301] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "adq86nBlLnDOYuIykkjazQAAAc4"]
[Sun Apr 12 05:28:11.216854 2026] [:error] [pid 25329:tid 25404] [client 172.213.241.51:63302] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "adq862dcIYsS8Iyaj10smAAAAJA"]
[Sun Apr 12 05:28:11.693249 2026] [:error] [pid 60280:tid 60306] [client 172.213.241.51:62662] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "adq863BlLnDOYuIykkja0AAAAdg"]
[Sun Apr 12 05:28:12.153617 2026] [:error] [pid 60280:tid 60304] [client 172.213.241.51:62776] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "adq87HBlLnDOYuIykkja1AAAAdY"]
[Sun Apr 12 05:28:12.612947 2026] [:error] [pid 60280:tid 60291] [client 172.213.241.51:62762] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "adq87HBlLnDOYuIykkja1gAAAck"]
[Sun Apr 12 05:28:13.071870 2026] [:error] [pid 60280:tid 60297] [client 172.213.241.51:63299] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "adq87XBlLnDOYuIykkja2AAAAc8"]
[Sun Apr 12 05:28:13.527875 2026] [:error] [pid 25328:tid 25385] [client 172.213.241.51:62746] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "adq87cxUaQZxT-e0YsDY4AAAAE4"]
[Sun Apr 12 05:28:13.984342 2026] [:error] [pid 26599:tid 26606] [client 172.213.241.51:62763] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "adq87XG89LXoQbk_rwA4DwAAAUQ"]
[Sun Apr 12 05:28:14.448654 2026] [:error] [pid 26600:tid 26647] [client 172.213.241.51:62656] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "adq87u1YwAZiXhQKLYp0mAAAAZI"]
[Sun Apr 12 05:28:14.909534 2026] [:error] [pid 26567:tid 26590] [client 172.213.241.51:63373] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "adq87nhRpg6ptWFyFx36cAAAARU"]
[Sun Apr 12 05:28:15.381017 2026] [:error] [pid 25437:tid 25441] [client 172.213.241.51:63381] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "adq873f97wYZje1ep_NPSAAAAMI"]
[Sun Apr 12 05:28:15.843123 2026] [:error] [pid 25329:tid 25414] [client 172.213.241.51:63337] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "adq872dcIYsS8Iyaj10smgAAAJc"]
[Sun Apr 12 05:28:16.308450 2026] [:error] [pid 26600:tid 26633] [client 172.213.241.51:65473] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "adq88O1YwAZiXhQKLYp0pAAAAYQ"]
[Sun Apr 12 05:28:16.770571 2026] [:error] [pid 26600:tid 26653] [client 172.213.241.51:62667] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "adq88O1YwAZiXhQKLYp0pgAAAZg"]
[Sun Apr 12 05:28:17.228908 2026] [:error] [pid 26567:tid 26580] [client 172.213.241.51:62747] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "adq88XhRpg6ptWFyFx36cwAAAQs"]
[Sun Apr 12 05:28:17.689771 2026] [:error] [pid 26567:tid 26578] [client 172.213.241.51:63336] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "adq88XhRpg6ptWFyFx36dAAAAQk"]
[Sun Apr 12 05:28:18.146339 2026] [:error] [pid 25437:tid 25448] [client 172.213.241.51:62703] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "adq88nf97wYZje1ep_NPSQAAAMk"]
[Sun Apr 12 05:28:18.616715 2026] [:error] [pid 26600:tid 26641] [client 172.213.241.51:62721] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "adq88u1YwAZiXhQKLYp0rAAAAYw"]
[Sun Apr 12 05:28:19.078837 2026] [:error] [pid 26599:tid 26607] [client 172.213.241.51:62692] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "adq883G89LXoQbk_rwA4GAAAAUU"]
[Sun Apr 12 05:28:19.539320 2026] [:error] [pid 26600:tid 26634] [client 172.213.241.51:62698] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "adq88-1YwAZiXhQKLYp0sQAAAYU"]
[Sun Apr 12 05:28:19.998492 2026] [:error] [pid 60280:tid 60283] [client 172.213.241.51:65475] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "adq883BlLnDOYuIykkja4QAAAcE"]
[Sun Apr 12 05:28:20.459637 2026] [:error] [pid 26567:tid 26572] [client 172.213.241.51:62761] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "adq89HhRpg6ptWFyFx36eQAAAQM"]
[Sun Apr 12 05:28:20.924846 2026] [:error] [pid 25328:tid 25405] [client 172.213.241.51:62729] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "adq89MxUaQZxT-e0YsDY7QAAAFc"]
[Sun Apr 12 05:28:21.383891 2026] [:error] [pid 25329:tid 25399] [client 172.213.241.51:63380] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "adq89WdcIYsS8Iyaj10smwAAAI0"]
[Sun Apr 12 05:28:21.843671 2026] [:error] [pid 25328:tid 25373] [client 172.213.241.51:63338] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "adq89cxUaQZxT-e0YsDY8QAAAEg"]
[Sun Apr 12 05:28:22.306042 2026] [:error] [pid 25328:tid 25368] [client 172.213.241.51:62772] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "adq89sxUaQZxT-e0YsDY9QAAAEQ"]
[Sun Apr 12 05:28:22.760922 2026] [:error] [pid 25328:tid 25367] [client 172.213.241.51:62705] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "adq89sxUaQZxT-e0YsDY9gAAAEM"]
[Sun Apr 12 05:28:23.219551 2026] [:error] [pid 60280:tid 60286] [client 172.213.241.51:62671] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "adq893BlLnDOYuIykkja5gAAAcQ"]
[Sun Apr 12 05:28:23.683009 2026] [:error] [pid 60280:tid 60296] [client 172.213.241.51:63330] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "adq893BlLnDOYuIykkja6gAAAc4"]
[Sun Apr 12 05:28:24.140554 2026] [:error] [pid 25328:tid 25391] [client 172.213.241.51:62699] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "adq8-MxUaQZxT-e0YsDY-wAAAFE"]
[Sun Apr 12 05:28:24.597803 2026] [:error] [pid 26599:tid 26621] [client 172.213.241.51:63423] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "adq8-HG89LXoQbk_rwA4GwAAAVM"]
[Sun Apr 12 05:28:25.068201 2026] [:error] [pid 26600:tid 26635] [client 172.213.241.51:63355] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "adq8-e1YwAZiXhQKLYp0tQAAAYY"]
[Sun Apr 12 05:28:25.529052 2026] [:error] [pid 25328:tid 25408] [client 172.213.241.51:65505] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "adq8-cxUaQZxT-e0YsDY_AAAAFg"]
[Sun Apr 12 05:28:25.988763 2026] [:error] [pid 26600:tid 26641] [client 172.213.241.51:62695] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "adq8-e1YwAZiXhQKLYp0twAAAYw"]
[Sun Apr 12 05:28:26.447817 2026] [:error] [pid 26600:tid 26652] [client 172.213.241.51:63311] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "adq8-u1YwAZiXhQKLYp0uAAAAZc"]
[Sun Apr 12 05:28:26.909510 2026] [:error] [pid 26599:tid 26620] [client 172.213.241.51:63386] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "adq8-nG89LXoQbk_rwA4HgAAAVI"]
[Sun Apr 12 05:28:27.369606 2026] [:error] [pid 26600:tid 26634] [client 172.213.241.51:62760] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "adq8--1YwAZiXhQKLYp0uwAAAYU"]
[Sun Apr 12 05:28:27.837374 2026] [:error] [pid 26600:tid 26643] [client 172.213.241.51:63346] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "adq8--1YwAZiXhQKLYp0vQAAAY4"]
[Sun Apr 12 05:28:28.298057 2026] [:error] [pid 26600:tid 26629] [client 172.213.241.51:65488] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "adq8_O1YwAZiXhQKLYp0wAAAAYA"]
[Sun Apr 12 05:28:28.757197 2026] [:error] [pid 25327:tid 25338] [client 172.213.241.51:63397] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "adq8_C6h2tZEVJo9JFI_mQAAAAI"]
[Sun Apr 12 05:28:29.215902 2026] [:error] [pid 25329:tid 25382] [client 172.213.241.51:63318] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "adq8_WdcIYsS8Iyaj10snAAAAIQ"]
[Sun Apr 12 05:28:29.674894 2026] [:error] [pid 26567:tid 26588] [client 172.213.241.51:62702] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "adq8_XhRpg6ptWFyFx36hwAAARM"]
[Sun Apr 12 05:28:30.137562 2026] [:error] [pid 26599:tid 26606] [client 172.213.241.51:63413] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "adq8_nG89LXoQbk_rwA4IAAAAUQ"]
[Sun Apr 12 05:28:30.598148 2026] [:error] [pid 26599:tid 26609] [client 172.213.241.51:62783] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "adq8_nG89LXoQbk_rwA4IwAAAUc"]
[Sun Apr 12 05:28:31.057862 2026] [:error] [pid 25328:tid 25396] [client 172.213.241.51:63340] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "adq8_8xUaQZxT-e0YsDZAgAAAFM"]
[Sun Apr 12 05:28:31.513026 2026] [:error] [pid 26600:tid 26653] [client 172.213.241.51:63356] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "adq8_-1YwAZiXhQKLYp0xAAAAZg"]
[Sun Apr 12 05:28:31.973432 2026] [:error] [pid 60280:tid 60305] [client 172.213.241.51:63327] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "adq8_3BlLnDOYuIykkja-QAAAdc"]
[Sun Apr 12 05:28:32.433854 2026] [:error] [pid 60280:tid 60303] [client 172.213.241.51:62759] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "adq9AHBlLnDOYuIykkja_AAAAdU"]
[Sun Apr 12 05:28:32.894802 2026] [:error] [pid 25437:tid 25453] [client 172.213.241.51:63306] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "adq9AHf97wYZje1ep_NPTwAAAM4"]
[Sun Apr 12 05:28:33.349672 2026] [:error] [pid 60280:tid 60290] [client 172.213.241.51:63359] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "adq9AXBlLnDOYuIykkjbAQAAAcg"]
[Sun Apr 12 05:28:33.804654 2026] [:error] [pid 60280:tid 60298] [client 172.213.241.51:62696] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "adq9AXBlLnDOYuIykkjbBAAAAdA"]
[Sun Apr 12 05:28:34.262830 2026] [:error] [pid 60280:tid 60295] [client 172.213.241.51:62111] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "adq9AnBlLnDOYuIykkjbBgAAAc0"]
[Sun Apr 12 05:28:34.727419 2026] [:error] [pid 25329:tid 25381] [client 172.213.241.51:62081] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "adq9AmdcIYsS8Iyaj10soQAAAIM"]
[Sun Apr 12 05:28:35.186625 2026] [:error] [pid 26599:tid 26616] [client 172.213.241.51:63368] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "adq9A3G89LXoQbk_rwA4KAAAAU4"]
[Sun Apr 12 05:28:35.645319 2026] [:error] [pid 60280:tid 60282] [client 172.213.241.51:62725] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "adq9A3BlLnDOYuIykkjbDQAAAcA"]
[Sun Apr 12 05:28:36.101861 2026] [:error] [pid 26599:tid 26625] [client 172.213.241.51:63342] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "adq9BHG89LXoQbk_rwA4KgAAAVc"]
[Sun Apr 12 05:28:36.561717 2026] [:error] [pid 25328:tid 25389] [client 172.213.241.51:62777] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "adq9BMxUaQZxT-e0YsDZDwAAAFA"]
[Sun Apr 12 05:28:37.019141 2026] [:error] [pid 25328:tid 25387] [client 172.213.241.51:65507] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "adq9BcxUaQZxT-e0YsDZEgAAAE8"]
[Sun Apr 12 05:28:37.477075 2026] [:error] [pid 25328:tid 25370] [client 172.213.241.51:62750] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "adq9BcxUaQZxT-e0YsDZFwAAAEY"]
[Sun Apr 12 05:28:37.934262 2026] [:error] [pid 60280:tid 60291] [client 172.213.241.51:63374] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "adq9BXBlLnDOYuIykkjbEAAAAck"]
[Sun Apr 12 05:28:38.392900 2026] [:error] [pid 60280:tid 60293] [client 172.213.241.51:62087] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "adq9BnBlLnDOYuIykkjbEwAAAcs"]
[Sun Apr 12 05:28:38.849360 2026] [:error] [pid 60280:tid 60285] [client 172.213.241.51:62090] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "adq9BnBlLnDOYuIykkjbFQAAAcM"]
[Sun Apr 12 05:28:39.307033 2026] [:error] [pid 60280:tid 60289] [client 172.213.241.51:63326] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "adq9B3BlLnDOYuIykkjbFgAAAcc"]
[Sun Apr 12 05:28:39.767394 2026] [:error] [pid 25329:tid 25400] [client 172.213.241.51:62780] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "adq9B2dcIYsS8Iyaj10sowAAAI4"]
[Sun Apr 12 05:28:40.228392 2026] [:error] [pid 25329:tid 25412] [client 172.213.241.51:63328] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "adq9CGdcIYsS8Iyaj10spgAAAJU"]
[Sun Apr 12 05:28:40.687544 2026] [:error] [pid 25329:tid 25415] [client 172.213.241.51:62778] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "adq9CGdcIYsS8Iyaj10spwAAAJg"]
[Sun Apr 12 05:28:41.145531 2026] [:error] [pid 25329:tid 25374] [client 172.213.241.51:63341] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "adq9CWdcIYsS8Iyaj10sqQAAAIA"]
[Sun Apr 12 05:28:41.604836 2026] [:error] [pid 26567:tid 26583] [client 172.213.241.51:65485] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "adq9CXhRpg6ptWFyFx36jwAAAQ4"]
[Sun Apr 12 05:28:42.062707 2026] [:error] [pid 25329:tid 25414] [client 172.213.241.51:62737] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "adq9CmdcIYsS8Iyaj10srAAAAJc"]
[Sun Apr 12 05:28:42.521615 2026] [:error] [pid 25329:tid 25382] [client 172.213.241.51:62139] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "adq9CmdcIYsS8Iyaj10srQAAAIQ"]
[Sun Apr 12 05:28:42.984078 2026] [:error] [pid 60280:tid 60282] [client 172.213.241.51:62779] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "adq9CnBlLnDOYuIykkjbGQAAAcA"]
[Sun Apr 12 05:28:43.449716 2026] [:error] [pid 26567:tid 26580] [client 172.213.241.51:62732] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "adq9C3hRpg6ptWFyFx36kwAAAQs"]
[Sun Apr 12 05:28:43.905789 2026] [:error] [pid 25437:tid 25441] [client 172.213.241.51:62700] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "adq9C3f97wYZje1ep_NPVQAAAMI"]
[Sun Apr 12 05:28:44.370667 2026] [:error] [pid 26600:tid 26643] [client 172.213.241.51:63335] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "adq9DO1YwAZiXhQKLYp0yQAAAY4"]
[Sun Apr 12 05:28:44.829210 2026] [:error] [pid 60280:tid 60300] [client 172.213.241.51:63339] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "adq9DHBlLnDOYuIykkjbHQAAAdI"]
[Sun Apr 12 05:28:45.289544 2026] [:error] [pid 60280:tid 60298] [client 172.213.241.51:65515] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "adq9DXBlLnDOYuIykkjbIAAAAdA"]
[Sun Apr 12 05:28:45.751103 2026] [:error] [pid 25329:tid 25378] [client 172.213.241.51:62734] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "adq9DWdcIYsS8Iyaj10ssgAAAII"]
[Sun Apr 12 05:28:46.214498 2026] [:error] [pid 60280:tid 60284] [client 172.213.241.51:62671] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "adq9DnBlLnDOYuIykkjbIwAAAcI"]
[Sun Apr 12 05:28:46.682844 2026] [:error] [pid 60280:tid 60289] [client 172.213.241.51:62685] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "adq9DnBlLnDOYuIykkjbKAAAAcc"]
[Sun Apr 12 05:28:47.139053 2026] [:error] [pid 26567:tid 26584] [client 172.213.241.51:5324] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "adq9D3hRpg6ptWFyFx36lQAAAQ8"]
[Sun Apr 12 05:28:47.596973 2026] [:error] [pid 60280:tid 60302] [client 172.213.241.51:62712] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "adq9D3BlLnDOYuIykkjbKgAAAdQ"]
[Sun Apr 12 05:28:48.052363 2026] [:error] [pid 26600:tid 26645] [client 172.213.241.51:65517] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adq9EO1YwAZiXhQKLYp0ygAAAZA"]
[Sun Apr 12 05:28:48.510848 2026] [:error] [pid 25437:tid 25463] [client 172.213.241.51:63384] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adq9EHf97wYZje1ep_NPXQAAANg"]
[Sun Apr 12 05:28:48.975288 2026] [:error] [pid 25328:tid 25369] [client 172.213.241.51:62083] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adq9EMxUaQZxT-e0YsDZHgAAAEU"]
[Sun Apr 12 05:28:49.435011 2026] [:error] [pid 60280:tid 60292] [client 172.213.241.51:62722] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adq9EXBlLnDOYuIykkjbLgAAAco"]
[Sun Apr 12 05:28:49.893481 2026] [:error] [pid 25329:tid 25402] [client 172.213.241.51:62738] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless4.php"] [unique_id "adq9EWdcIYsS8Iyaj10stAAAAI8"]
[Sun Apr 12 05:28:50.350513 2026] [:error] [pid 26600:tid 26629] [client 172.213.241.51:63376] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless4.php"] [unique_id "adq9Eu1YwAZiXhQKLYp0ywAAAYA"]
[Sun Apr 12 05:28:50.808753 2026] [:error] [pid 26600:tid 26632] [client 172.213.241.51:62106] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless4.php"] [unique_id "adq9Eu1YwAZiXhQKLYp0zwAAAYM"]
[Sun Apr 12 05:28:51.268480 2026] [:error] [pid 25328:tid 25377] [client 172.213.241.51:62038] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless4.php"] [unique_id "adq9E8xUaQZxT-e0YsDZHwAAAEo"]
[Sun Apr 12 05:28:51.728442 2026] [:error] [pid 26599:tid 26617] [client 172.213.241.51:62672] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "adq9E3G89LXoQbk_rwA4PgAAAU8"]
[Sun Apr 12 05:28:52.201177 2026] [:error] [pid 26599:tid 26609] [client 172.213.241.51:62735] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "adq9FHG89LXoQbk_rwA4PwAAAUc"]
[Sun Apr 12 05:28:52.763451 2026] [:error] [pid 26599:tid 26612] [client 172.213.241.51:62758] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "adq9FHG89LXoQbk_rwA4QAAAAUo"]
[Sun Apr 12 05:28:53.221976 2026] [:error] [pid 25328:tid 25391] [client 172.213.241.51:65518] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "adq9FcxUaQZxT-e0YsDZIgAAAFE"]
[Sun Apr 12 05:28:53.687654 2026] [:error] [pid 25328:tid 25380] [client 172.213.241.51:62680] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "adq9FcxUaQZxT-e0YsDZIwAAAEw"]
[Sun Apr 12 05:28:54.147474 2026] [:error] [pid 26600:tid 26650] [client 172.213.241.51:62109] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "adq9Fu1YwAZiXhQKLYp00wAAAZU"]
[Sun Apr 12 05:28:54.609314 2026] [:error] [pid 60280:tid 60287] [client 172.213.241.51:65474] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "adq9FnBlLnDOYuIykkjbOAAAAcU"]
[Sun Apr 12 05:28:55.069946 2026] [:error] [pid 25327:tid 25354] [client 172.213.241.51:5335] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "adq9Fy6h2tZEVJo9JFI_owAAABI"]
[Sun Apr 12 05:28:55.527656 2026] [:error] [pid 25328:tid 25383] [client 172.213.241.51:62767] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "adq9F8xUaQZxT-e0YsDZJQAAAE0"]
[Sun Apr 12 05:28:55.984794 2026] [:error] [pid 60280:tid 60303] [client 172.213.241.51:65479] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "adq9F3BlLnDOYuIykkjbPAAAAdU"]
[Sun Apr 12 05:28:56.455540 2026] [:error] [pid 26567:tid 26577] [client 172.213.241.51:65478] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "adq9GHhRpg6ptWFyFx36mgAAAQg"]
[Sun Apr 12 05:28:56.915253 2026] [:error] [pid 60280:tid 60288] [client 172.213.241.51:62752] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "adq9GHBlLnDOYuIykkjbQgAAAcY"]
[Sun Apr 12 05:28:57.376127 2026] [:error] [pid 60280:tid 60287] [client 172.213.241.51:62665] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "adq9GXBlLnDOYuIykkjbRQAAAcU"]
[Sun Apr 12 05:28:57.839409 2026] [:error] [pid 26600:tid 26651] [client 172.213.241.51:63352] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "adq9Ge1YwAZiXhQKLYp01gAAAZY"]
[Sun Apr 12 05:28:58.299078 2026] [:error] [pid 25328:tid 25375] [client 172.213.241.51:63336] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "adq9GsxUaQZxT-e0YsDZKgAAAEk"]
[Sun Apr 12 05:28:58.758955 2026] [:error] [pid 26600:tid 26652] [client 172.213.241.51:63324] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "adq9Gu1YwAZiXhQKLYp01wAAAZc"]
[Sun Apr 12 05:28:59.219418 2026] [:error] [pid 25328:tid 25369] [client 172.213.241.51:62694] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "adq9G8xUaQZxT-e0YsDZLwAAAEU"]
[Sun Apr 12 05:28:59.680283 2026] [:error] [pid 25328:tid 25380] [client 172.213.241.51:62679] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "adq9G8xUaQZxT-e0YsDZMgAAAEw"]
[Sun Apr 12 05:29:00.144739 2026] [:error] [pid 25328:tid 25373] [client 172.213.241.51:62676] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "adq9HMxUaQZxT-e0YsDZNgAAAEg"]
[Sun Apr 12 05:29:00.605536 2026] [:error] [pid 25328:tid 25375] [client 172.213.241.51:62679] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "adq9HMxUaQZxT-e0YsDZNwAAAEk"]
[Sun Apr 12 05:29:01.065836 2026] [:error] [pid 25328:tid 25403] [client 172.213.241.51:62668] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adq9HcxUaQZxT-e0YsDZOQAAAFY"]
[Sun Apr 12 05:29:01.524148 2026] [:error] [pid 25437:tid 25451] [client 172.213.241.51:62745] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adq9HXf97wYZje1ep_NPaQAAAMw"]
[Sun Apr 12 05:29:01.983662 2026] [:error] [pid 60280:tid 60305] [client 172.213.241.51:63313] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adq9HXBlLnDOYuIykkjbWQAAAdc"]
[Sun Apr 12 05:29:02.452281 2026] [:error] [pid 60280:tid 60298] [client 172.213.241.51:62754] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adq9HnBlLnDOYuIykkjbWwAAAdA"]
[Sun Apr 12 05:29:02.915289 2026] [:error] [pid 25329:tid 25404] [client 172.213.241.51:5358] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adq9HmdcIYsS8Iyaj10suAAAAJA"]
[Sun Apr 12 05:29:03.373003 2026] [:error] [pid 25327:tid 25345] [client 172.213.241.51:62082] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adq9Hy6h2tZEVJo9JFI_qQAAAAk"]
[Sun Apr 12 05:29:03.830487 2026] [:error] [pid 25329:tid 25407] [client 172.213.241.51:62708] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adq9H2dcIYsS8Iyaj10suQAAAJI"]
[Sun Apr 12 05:29:04.295779 2026] [:error] [pid 60280:tid 60288] [client 172.213.241.51:62757] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adq9IHBlLnDOYuIykkjbYAAAAcY"]
[Sun Apr 12 05:29:04.757366 2026] [:error] [pid 26600:tid 26639] [client 172.213.241.51:62764] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "adq9IO1YwAZiXhQKLYp04QAAAYo"]
[Sun Apr 12 05:29:05.218312 2026] [:error] [pid 25437:tid 25450] [client 172.213.241.51:62766] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-update.php
[Sun Apr 12 05:29:05.450749 2026] [:error] [pid 25437:tid 25447] [client 172.213.241.51:62766] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Sun Apr 12 05:29:06.986646 2026] [:error] [pid 25437:tid 25447] [client 172.213.241.51:62766] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Apr 12 05:29:07.687856 2026] [:error] [pid 25437:tid 25440] [client 172.213.241.51:62766] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun Apr 12 05:29:07.920625 2026] [:error] [pid 25437:tid 25448] [client 172.213.241.51:62766] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Apr 12 05:29:08.152742 2026] [:error] [pid 25437:tid 25455] [client 172.213.241.51:62766] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Apr 12 05:29:08.385111 2026] [:error] [pid 25437:tid 25462] [client 172.213.241.51:62766] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun Apr 12 05:29:08.617414 2026] [:error] [pid 25437:tid 25458] [client 172.213.241.51:62766] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sun Apr 12 05:29:09.079403 2026] [:error] [pid 25437:tid 25442] [client 172.213.241.51:62766] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "adq9JXf97wYZje1ep_NPfgAAAMM"]
[Sun Apr 12 05:29:09.539694 2026] [:error] [pid 60280:tid 60296] [client 172.213.241.51:5334] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "adq9JXBlLnDOYuIykkjbbQAAAc4"]
[Sun Apr 12 05:29:09.997539 2026] [:error] [pid 60280:tid 60291] [client 172.213.241.51:62092] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "adq9JXBlLnDOYuIykkjbbgAAAck"]
[Sun Apr 12 05:29:10.458059 2026] [:error] [pid 25327:tid 25357] [client 172.213.241.51:62681] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "adq9Ji6h2tZEVJo9JFI_rQAAABU"]
[Sun Apr 12 05:29:10.925279 2026] [:error] [pid 60280:tid 60292] [client 172.213.241.51:62739] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "adq9JnBlLnDOYuIykkjbbwAAAco"]
[Sun Apr 12 05:29:11.387345 2026] [:error] [pid 60280:tid 60304] [client 172.213.241.51:62080] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "adq9J3BlLnDOYuIykkjbcQAAAdY"]
[Sun Apr 12 05:29:11.851082 2026] [:error] [pid 60280:tid 60290] [client 172.213.241.51:62121] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "adq9J3BlLnDOYuIykkjbdAAAAcg"]
[Sun Apr 12 05:29:12.340587 2026] [:error] [pid 60280:tid 60282] [client 172.213.241.51:62085] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "adq9KHBlLnDOYuIykkjbdgAAAcA"]
[Sun Apr 12 05:29:12.810727 2026] [:error] [pid 60280:tid 60305] [client 172.213.241.51:5321] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "adq9KHBlLnDOYuIykkjbegAAAdc"]
[Sun Apr 12 05:29:13.296870 2026] [:error] [pid 25328:tid 25368] [client 172.213.241.51:62130] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "adq9KcxUaQZxT-e0YsDZQgAAAEQ"]
[Sun Apr 12 05:29:13.776994 2026] [:error] [pid 60280:tid 60288] [client 172.213.241.51:62686] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "adq9KXBlLnDOYuIykkjbgAAAAcY"]
[Sun Apr 12 05:29:14.236289 2026] [:error] [pid 25327:tid 25347] [client 172.213.241.51:62689] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "adq9Ki6h2tZEVJo9JFI_sgAAAAs"]
[Sun Apr 12 05:29:14.699128 2026] [:error] [pid 60280:tid 60294] [client 172.213.241.51:62110] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "adq9KnBlLnDOYuIykkjbiAAAAcw"]
[Sun Apr 12 05:29:15.160301 2026] [:error] [pid 60280:tid 60299] [client 172.213.241.51:62127] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "adq9K3BlLnDOYuIykkjbiwAAAdE"]
[Sun Apr 12 05:29:15.631303 2026] [:error] [pid 25437:tid 25456] [client 172.213.241.51:62741] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "adq9K3f97wYZje1ep_NPhAAAANE"]
[Sun Apr 12 05:29:16.091170 2026] [:error] [pid 26567:tid 26578] [client 172.213.241.51:62726] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "adq9LHhRpg6ptWFyFx36ogAAAQk"]
[Sun Apr 12 05:29:16.570434 2026] [:error] [pid 25437:tid 25460] [client 172.213.241.51:62765] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "adq9LHf97wYZje1ep_NPhgAAANU"]
[Sun Apr 12 05:29:17.029299 2026] [:error] [pid 60280:tid 60289] [client 172.213.241.51:62140] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "adq9LXBlLnDOYuIykkjbkwAAAcc"]
[Sun Apr 12 05:29:17.501787 2026] [:error] [pid 60280:tid 60285] [client 172.213.241.51:62713] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "adq9LXBlLnDOYuIykkjblwAAAcM"]
[Sun Apr 12 05:29:17.962819 2026] [:error] [pid 25328:tid 25403] [client 172.213.241.51:62108] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "adq9LcxUaQZxT-e0YsDZRgAAAFY"]
[Sun Apr 12 05:29:18.428682 2026] [:error] [pid 26600:tid 26642] [client 172.213.241.51:62102] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "adq9Lu1YwAZiXhQKLYp07wAAAY0"]
[Sun Apr 12 05:29:18.907207 2026] [:error] [pid 25329:tid 25378] [client 172.213.241.51:62716] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "adq9LmdcIYsS8Iyaj10swAAAAII"]
[Sun Apr 12 05:29:19.367085 2026] [:error] [pid 60280:tid 60282] [client 172.213.241.51:62718] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "adq9L3BlLnDOYuIykkjbpgAAAcA"]
[Sun Apr 12 05:29:19.850830 2026] [:error] [pid 25328:tid 25370] [client 172.213.241.51:62674] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "adq9L8xUaQZxT-e0YsDZTAAAAEY"]
[Sun Apr 12 05:29:20.311958 2026] [:error] [pid 25328:tid 25383] [client 172.213.241.51:62724] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "adq9MMxUaQZxT-e0YsDZTQAAAE0"]
[Sun Apr 12 05:29:20.824487 2026] [:error] [pid 26567:tid 26579] [client 172.213.241.51:62693] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "adq9MHhRpg6ptWFyFx36pwAAAQo"]
[Sun Apr 12 05:29:21.287042 2026] [:error] [pid 25327:tid 25358] [client 172.213.241.51:62753] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "adq9MS6h2tZEVJo9JFI_swAAABY"]
[Sun Apr 12 05:29:21.763383 2026] [:error] [pid 26600:tid 26638] [client 172.213.241.51:62666] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "adq9Me1YwAZiXhQKLYp08gAAAYk"]
[Sun Apr 12 05:29:22.228838 2026] [:error] [pid 60280:tid 60299] [client 172.213.241.51:62095] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adq9MnBlLnDOYuIykkjbqQAAAdE"]
[Sun Apr 12 05:29:22.691461 2026] [:error] [pid 26600:tid 26653] [client 172.213.241.51:63312] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adq9Mu1YwAZiXhQKLYp09AAAAZg"]
[Sun Apr 12 05:29:23.151984 2026] [:error] [pid 26600:tid 26633] [client 172.213.241.51:62687] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adq9M-1YwAZiXhQKLYp0-QAAAYQ"]
[Sun Apr 12 05:29:23.609761 2026] [:error] [pid 26599:tid 26614] [client 172.213.241.51:62126] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adq9M3G89LXoQbk_rwA4TwAAAUw"]
[Sun Apr 12 05:29:24.070964 2026] [:error] [pid 26600:tid 26637] [client 172.213.241.51:62774] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "adq9NO1YwAZiXhQKLYp1AgAAAYg"]
[Sun Apr 12 05:29:24.530339 2026] [:error] [pid 25328:tid 25375] [client 172.213.241.51:62684] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "adq9NMxUaQZxT-e0YsDZUgAAAEk"]
[Sun Apr 12 05:29:24.991758 2026] [:error] [pid 25328:tid 25394] [client 172.213.241.51:62688] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "adq9NMxUaQZxT-e0YsDZVAAAAFI"]
[Sun Apr 12 05:29:25.451889 2026] [:error] [pid 60280:tid 60302] [client 172.213.241.51:65497] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "adq9NXBlLnDOYuIykkjbrgAAAdQ"]
[Sun Apr 12 05:29:25.914868 2026] [:error] [pid 60280:tid 60288] [client 172.213.241.51:62143] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adq9NXBlLnDOYuIykkjbsQAAAcY"]
[Sun Apr 12 05:29:26.379458 2026] [:error] [pid 25437:tid 25460] [client 172.213.241.51:62669] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adq9Nnf97wYZje1ep_NPlAAAANU"]
[Sun Apr 12 05:29:26.848496 2026] [:error] [pid 25328:tid 25380] [client 172.213.241.51:62100] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adq9NsxUaQZxT-e0YsDZVgAAAEw"]
[Sun Apr 12 05:29:27.308870 2026] [:error] [pid 25328:tid 25396] [client 172.213.241.51:63420] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adq9N8xUaQZxT-e0YsDZWAAAAFM"]
[Sun Apr 12 05:29:27.767566 2026] [:error] [pid 26567:tid 26591] [client 172.213.241.51:62742] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "adq9N3hRpg6ptWFyFx36rQAAARY"]
[Sun Apr 12 05:29:28.230490 2026] [:error] [pid 26567:tid 26570] [client 172.213.241.51:63344] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "adq9OHhRpg6ptWFyFx36rwAAAQE"]
[Sun Apr 12 05:29:28.690762 2026] [:error] [pid 25437:tid 25445] [client 172.213.241.51:5327] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "adq9OHf97wYZje1ep_NPmQAAAMY"]
[Sun Apr 12 05:29:29.149088 2026] [:error] [pid 60280:tid 60297] [client 172.213.241.51:5318] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "adq9OXBlLnDOYuIykkjbvwAAAc8"]
[Sun Apr 12 05:29:29.610209 2026] [:error] [pid 25328:tid 25408] [client 172.213.241.51:62089] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "adq9OcxUaQZxT-e0YsDZWwAAAFg"]
[Sun Apr 12 05:29:30.072941 2026] [:error] [pid 60280:tid 60303] [client 172.213.241.51:5339] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "adq9OnBlLnDOYuIykkjbxQAAAdU"]
[Sun Apr 12 05:29:30.536627 2026] [:error] [pid 60280:tid 60285] [client 172.213.241.51:5360] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "adq9OnBlLnDOYuIykkjbyAAAAcM"]
[Sun Apr 12 05:29:30.995266 2026] [:error] [pid 60280:tid 60306] [client 172.213.241.51:63315] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "adq9OnBlLnDOYuIykkjbyQAAAdg"]
[Sun Apr 12 05:29:31.459243 2026] [:error] [pid 25327:tid 25360] [client 172.213.241.51:63320] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adq9Oy6h2tZEVJo9JFI_tQAAABg"]
[Sun Apr 12 05:29:31.925955 2026] [:error] [pid 26600:tid 26649] [client 172.213.241.51:65476] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adq9O-1YwAZiXhQKLYp1CgAAAZQ"]
[Sun Apr 12 05:29:32.384961 2026] [:error] [pid 60280:tid 60297] [client 172.213.241.51:5326] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adq9PHBlLnDOYuIykkjb0wAAAc8"]
[Sun Apr 12 05:29:32.844081 2026] [:error] [pid 60280:tid 60287] [client 172.213.241.51:62707] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adq9PHBlLnDOYuIykkjb1wAAAcU"]
[Sun Apr 12 05:29:33.303347 2026] [:error] [pid 60280:tid 60299] [client 172.213.241.51:62660] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "adq9PXBlLnDOYuIykkjb3wAAAdE"]
[Sun Apr 12 05:29:33.762275 2026] [:error] [pid 60280:tid 60297] [client 172.213.241.51:62135] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "adq9PXBlLnDOYuIykkjb4wAAAc8"]
[Sun Apr 12 05:29:34.221357 2026] [:error] [pid 26600:tid 26631] [client 172.213.241.51:62748] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "adq9Pu1YwAZiXhQKLYp1DAAAAYI"]
[Sun Apr 12 05:29:34.680584 2026] [:error] [pid 25328:tid 25365] [client 172.213.241.51:62715] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "adq9PsxUaQZxT-e0YsDZYQAAAEE"]
[Sun Apr 12 05:29:35.136421 2026] [:error] [pid 60280:tid 60306] [client 172.213.241.51:62093] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adq9P3BlLnDOYuIykkjb6wAAAdg"]
[Sun Apr 12 05:29:35.593479 2026] [:error] [pid 26600:tid 26639] [client 172.213.241.51:62021] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adq9P-1YwAZiXhQKLYp1DgAAAYo"]
[Sun Apr 12 05:29:36.049437 2026] [:error] [pid 26600:tid 26648] [client 172.213.241.51:62706] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adq9QO1YwAZiXhQKLYp1DwAAAZM"]
[Sun Apr 12 05:29:36.508653 2026] [:error] [pid 26600:tid 26632] [client 172.213.241.51:5350] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adq9QO1YwAZiXhQKLYp1EgAAAYM"]
[Sun Apr 12 05:29:36.967142 2026] [:error] [pid 25328:tid 25394] [client 172.213.241.51:62770] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "adq9QMxUaQZxT-e0YsDZZgAAAFI"]
[Sun Apr 12 05:29:37.426970 2026] [:error] [pid 25329:tid 25395] [client 172.213.241.51:5325] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "adq9QWdcIYsS8Iyaj10sygAAAIs"]
[Sun Apr 12 05:29:37.885105 2026] [:error] [pid 25437:tid 25444] [client 172.213.241.51:5316] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "adq9QXf97wYZje1ep_NPpwAAAMU"]
[Sun Apr 12 05:29:38.344570 2026] [:error] [pid 25329:tid 25414] [client 172.213.241.51:5319] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "adq9QmdcIYsS8Iyaj10sywAAAJc"]
[Sun Apr 12 05:29:38.801947 2026] [:error] [pid 25328:tid 25369] [client 172.213.241.51:63329] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "adq9QsxUaQZxT-e0YsDZagAAAEU"]
[Sun Apr 12 05:29:39.257996 2026] [:error] [pid 26567:tid 26575] [client 172.213.241.51:62781] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "adq9Q3hRpg6ptWFyFx36vAAAAQY"]
[Sun Apr 12 05:29:39.712916 2026] [:error] [pid 25328:tid 25387] [client 172.213.241.51:62101] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "adq9Q8xUaQZxT-e0YsDZawAAAE8"]
[Sun Apr 12 05:29:40.169920 2026] [:error] [pid 60280:tid 60294] [client 172.213.241.51:65481] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "adq9RHBlLnDOYuIykkjb8wAAAcw"]
[Sun Apr 12 05:29:40.630041 2026] [:error] [pid 60280:tid 60288] [client 172.213.241.51:62661] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "adq9RHBlLnDOYuIykkjb9wAAAcY"]
[Sun Apr 12 05:29:41.089568 2026] [:error] [pid 25328:tid 25408] [client 172.213.241.51:62657] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "adq9RcxUaQZxT-e0YsDZbwAAAFg"]
[Sun Apr 12 05:29:41.548551 2026] [:error] [pid 60280:tid 60284] [client 172.213.241.51:63422] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "adq9RXBlLnDOYuIykkjb-QAAAcI"]
[Sun Apr 12 05:29:42.007098 2026] [:error] [pid 60280:tid 60304] [client 172.213.241.51:63354] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "adq9RnBlLnDOYuIykkjb_gAAAdY"]
[Sun Apr 12 05:29:42.465409 2026] [:error] [pid 26599:tid 26622] [client 172.213.241.51:62107] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "adq9RnG89LXoQbk_rwA4XAAAAVQ"]
[Sun Apr 12 05:29:42.924136 2026] [:error] [pid 26600:tid 26647] [client 172.213.241.51:5366] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "adq9Ru1YwAZiXhQKLYp1FwAAAZI"]
[Sun Apr 12 05:29:43.387774 2026] [:error] [pid 25329:tid 25402] [client 172.213.241.51:63360] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "adq9R2dcIYsS8Iyaj10s1AAAAI8"]
[Sun Apr 12 05:29:43.846045 2026] [:error] [pid 25328:tid 25368] [client 172.213.241.51:63316] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "adq9R8xUaQZxT-e0YsDZcgAAAEQ"]
[Sun Apr 12 05:29:44.303308 2026] [:error] [pid 60280:tid 60300] [client 172.213.241.51:5368] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "adq9SHBlLnDOYuIykkjcAAAAAdI"]
[Sun Apr 12 05:29:44.761888 2026] [:error] [pid 60280:tid 60295] [client 172.213.241.51:5312] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "adq9SHBlLnDOYuIykkjcAwAAAc0"]
[Sun Apr 12 05:29:45.222396 2026] [:error] [pid 60280:tid 60301] [client 172.213.241.51:5364] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "adq9SXBlLnDOYuIykkjcCAAAAdM"]
[Sun Apr 12 05:29:45.679496 2026] [:error] [pid 60280:tid 60306] [client 172.213.241.51:5338] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "adq9SXBlLnDOYuIykkjcCwAAAdg"]
[Sun Apr 12 05:29:46.139820 2026] [:error] [pid 60280:tid 60305] [client 172.213.241.51:62682] [client 172.213.241.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adq9SnBlLnDOYuIykkjcEQAAAdc"]
[Sun Apr 12 05:29:46.600161 2026] [:error] [pid 25437:tid 25447] [client 172.213.241.51:62673] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "adq9Snf97wYZje1ep_NPqgAAAMg"]
[Sun Apr 12 05:29:47.057043 2026] [:error] [pid 25437:tid 25443] [client 172.213.241.51:62027] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "adq9S3f97wYZje1ep_NPqwAAAMQ"]
[Sun Apr 12 05:29:47.515767 2026] [:error] [pid 26600:tid 26639] [client 172.213.241.51:62137] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "adq9S-1YwAZiXhQKLYp1HQAAAYo"]
[Sun Apr 12 05:29:47.973630 2026] [:error] [pid 25327:tid 25359] [client 172.213.241.51:62125] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adq9Sy6h2tZEVJo9JFI_vQAAABc"]
[Sun Apr 12 05:29:48.430090 2026] [:error] [pid 26600:tid 26632] [client 172.213.241.51:62691] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adq9TO1YwAZiXhQKLYp1IgAAAYM"]
[Sun Apr 12 05:29:48.890270 2026] [:error] [pid 25329:tid 25382] [client 172.213.241.51:62658] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adq9TGdcIYsS8Iyaj10s2wAAAIQ"]
[Sun Apr 12 05:29:49.351733 2026] [:error] [pid 25327:tid 25350] [client 172.213.241.51:62026] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adq9TS6h2tZEVJo9JFI_vwAAAA4"]
[Sun Apr 12 05:29:49.811261 2026] [:error] [pid 25437:tid 25441] [client 172.213.241.51:62099] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adq9TXf97wYZje1ep_NPsgAAAMI"]
[Sun Apr 12 05:29:50.273695 2026] [:error] [pid 25327:tid 25338] [client 172.213.241.51:5329] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adq9Ti6h2tZEVJo9JFI_wwAAAAI"]
[Sun Apr 12 05:29:50.734457 2026] [:error] [pid 25327:tid 25354] [client 172.213.241.51:62122] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adq9Ti6h2tZEVJo9JFI_xQAAABI"]
[Sun Apr 12 05:29:51.193354 2026] [:error] [pid 25327:tid 25346] [client 172.213.241.51:5348] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adq9Ty6h2tZEVJo9JFI_xgAAAAo"]
[Sun Apr 12 05:29:51.651714 2026] [:error] [pid 60280:tid 60301] [client 172.213.241.51:62714] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/prv8.php"] [unique_id "adq9T3BlLnDOYuIykkjcFQAAAdM"]
[Sun Apr 12 05:29:52.111110 2026] [:error] [pid 25329:tid 25388] [client 172.213.241.51:63303] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/prv8.php"] [unique_id "adq9UGdcIYsS8Iyaj10s5gAAAIc"]
[Sun Apr 12 05:29:52.570346 2026] [:error] [pid 25329:tid 25415] [client 172.213.241.51:5347] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/prv8.php"] [unique_id "adq9UGdcIYsS8Iyaj10s5wAAAJg"]
[Sun Apr 12 05:29:53.029579 2026] [:error] [pid 25327:tid 25358] [client 172.213.241.51:62091] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/prv8.php"] [unique_id "adq9US6h2tZEVJo9JFI_yAAAABY"]
[Sun Apr 12 05:29:53.496931 2026] [:error] [pid 26567:tid 26579] [client 172.213.241.51:62044] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "adq9UXhRpg6ptWFyFx36-gAAAQo"]
[Sun Apr 12 05:29:53.957795 2026] [:error] [pid 25329:tid 25390] [client 172.213.241.51:62064] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "adq9UWdcIYsS8Iyaj10s7QAAAIg"]
[Sun Apr 12 05:29:54.417731 2026] [:error] [pid 26599:tid 26609] [client 172.213.241.51:65476] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "adq9UnG89LXoQbk_rwA4ZwAAAUc"]
[Sun Apr 12 05:29:54.875421 2026] [:error] [pid 26567:tid 26572] [client 172.213.241.51:62128] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "adq9UnhRpg6ptWFyFx36_AAAAQM"]
[Sun Apr 12 05:29:55.330349 2026] [:error] [pid 60280:tid 60306] [client 172.213.241.51:62659] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "adq9U3BlLnDOYuIykkjcFwAAAdg"]
[Sun Apr 12 05:29:55.788766 2026] [:error] [pid 26600:tid 26633] [client 172.213.241.51:65525] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "adq9U-1YwAZiXhQKLYp1LAAAAYQ"]
[Sun Apr 12 05:29:56.252349 2026] [:error] [pid 60280:tid 60302] [client 172.213.241.51:62701] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "adq9VHBlLnDOYuIykkjcGwAAAdQ"]
[Sun Apr 12 05:29:56.707694 2026] [:error] [pid 25328:tid 25380] [client 172.213.241.51:62120] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "adq9VMxUaQZxT-e0YsDZeQAAAEw"]
[Sun Apr 12 05:29:57.166246 2026] [:error] [pid 25328:tid 25369] [client 172.213.241.51:62740] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "adq9VcxUaQZxT-e0YsDZewAAAEU"]
[Sun Apr 12 05:29:57.623909 2026] [:error] [pid 25329:tid 25388] [client 172.213.241.51:63395] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "adq9VWdcIYsS8Iyaj10s8wAAAIc"]
[Sun Apr 12 05:29:58.083339 2026] [:error] [pid 60280:tid 60283] [client 172.213.241.51:62045] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "adq9VnBlLnDOYuIykkjcHwAAAcE"]
[Sun Apr 12 05:29:58.538649 2026] [:error] [pid 25328:tid 25391] [client 172.213.241.51:62068] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "adq9VsxUaQZxT-e0YsDZgQAAAFE"]
[Sun Apr 12 05:29:58.996903 2026] [:error] [pid 25328:tid 25365] [client 172.213.241.51:5341] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "adq9VsxUaQZxT-e0YsDZhAAAAEE"]
[Sun Apr 12 05:29:59.456074 2026] [:error] [pid 25327:tid 25348] [client 172.213.241.51:63303] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "adq9Vy6h2tZEVJo9JFI_0AAAAAw"]
[Sun Apr 12 05:29:59.926107 2026] [:error] [pid 25328:tid 25370] [client 172.213.241.51:62710] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "adq9V8xUaQZxT-e0YsDZiQAAAEY"]
[Sun Apr 12 05:30:00.395113 2026] [:error] [pid 26600:tid 26649] [client 172.213.241.51:62067] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "adq9WO1YwAZiXhQKLYp1LwAAAZQ"]
[Sun Apr 12 05:30:00.862193 2026] [:error] [pid 25329:tid 25392] [client 172.213.241.51:62032] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "adq9WGdcIYsS8Iyaj10s9gAAAIk"]
[Sun Apr 12 05:30:01.326427 2026] [:error] [pid 26600:tid 26637] [client 172.213.241.51:5351] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "adq9We1YwAZiXhQKLYp1MgAAAYg"]
[Sun Apr 12 05:30:01.787499 2026] [:error] [pid 25329:tid 25382] [client 172.213.241.51:65509] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "adq9WWdcIYsS8Iyaj10s9wAAAIQ"]
[Sun Apr 12 05:30:02.260329 2026] [:error] [pid 26599:tid 26610] [client 172.213.241.51:62690] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "adq9WnG89LXoQbk_rwA4cAAAAUg"]
[Sun Apr 12 05:30:02.719484 2026] [:error] [pid 25328:tid 25366] [client 172.213.241.51:62675] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "adq9WsxUaQZxT-e0YsDZmgAAAEI"]
[Sun Apr 12 05:30:03.177404 2026] [:error] [pid 25329:tid 25399] [client 172.213.241.51:65504] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "adq9W2dcIYsS8Iyaj10s-AAAAI0"]
[Sun Apr 12 05:30:03.655669 2026] [:error] [pid 60280:tid 60287] [client 172.213.241.51:63353] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "adq9W3BlLnDOYuIykkjcKQAAAcU"]
[Sun Apr 12 05:30:04.120875 2026] [:error] [pid 60280:tid 60302] [client 172.213.241.51:5342] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "adq9XHBlLnDOYuIykkjcKwAAAdQ"]
[Sun Apr 12 05:30:04.596802 2026] [:error] [pid 60280:tid 60285] [client 172.213.241.51:62123] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "adq9XHBlLnDOYuIykkjcLwAAAcM"]
[Sun Apr 12 05:30:05.068283 2026] [:error] [pid 60280:tid 60294] [client 172.213.241.51:62709] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "adq9XXBlLnDOYuIykkjcMQAAAcw"]
[Sun Apr 12 05:30:05.539109 2026] [:error] [pid 25328:tid 25364] [client 172.213.241.51:62704] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "adq9XcxUaQZxT-e0YsDZnwAAAEA"]
[Sun Apr 12 05:30:05.997757 2026] [:error] [pid 26599:tid 26623] [client 172.213.241.51:62084] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "adq9XXG89LXoQbk_rwA4cgAAAVU"]
[Sun Apr 12 05:30:06.474531 2026] [:error] [pid 60280:tid 60290] [client 172.213.241.51:62016] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "adq9XnBlLnDOYuIykkjcNgAAAcg"]
[Sun Apr 12 05:30:06.932176 2026] [:error] [pid 26600:tid 26630] [client 172.213.241.51:62124] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "adq9Xu1YwAZiXhQKLYp1PQAAAYE"]
[Sun Apr 12 05:30:07.393743 2026] [:error] [pid 26600:tid 26649] [client 172.213.241.51:62088] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "adq9X-1YwAZiXhQKLYp1PgAAAZQ"]
[Sun Apr 12 05:30:07.853346 2026] [:error] [pid 60280:tid 60302] [client 172.213.241.51:62683] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "adq9X3BlLnDOYuIykkjcOQAAAdQ"]
[Sun Apr 12 05:30:08.623624 2026] [:error] [pid 26600:tid 26648] [client 172.213.241.51:5337] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php
[Sun Apr 12 05:30:08.855972 2026] [:error] [pid 26600:tid 26637] [client 172.213.241.51:5337] File does not exist: /usr/local/apache/htdocs/suspended-page/alfashell.php
[Sun Apr 12 05:30:09.087893 2026] [:error] [pid 26600:tid 26631] [client 172.213.241.51:5337] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Sun Apr 12 05:30:09.321295 2026] [:error] [pid 26600:tid 26642] [client 172.213.241.51:5337] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Sun Apr 12 05:30:09.553608 2026] [:error] [pid 26600:tid 26646] [client 172.213.241.51:5337] File does not exist: /usr/local/apache/htdocs/suspended-page/file48.php
[Sun Apr 12 05:30:09.785975 2026] [:error] [pid 26600:tid 26635] [client 172.213.241.51:5337] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Sun Apr 12 05:30:10.251939 2026] [:error] [pid 26600:tid 26647] [client 172.213.241.51:5337] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Apr 12 05:30:10.483769 2026] [:error] [pid 26600:tid 26652] [client 172.213.241.51:5337] File does not exist: /usr/local/apache/htdocs/suspended-page/ew.php
[Sun Apr 12 05:30:10.716523 2026] [:error] [pid 26600:tid 26650] [client 172.213.241.51:5337] File does not exist: /usr/local/apache/htdocs/suspended-page/file21.php
[Sun Apr 12 05:30:10.945403 2026] [:error] [pid 26600:tid 26640] [client 172.213.241.51:5337] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "adq9Yu1YwAZiXhQKLYp1TQAAAYs"]
[Sun Apr 12 05:30:11.412528 2026] [:error] [pid 26600:tid 26653] [client 172.213.241.51:5346] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "adq9Y-1YwAZiXhQKLYp1TwAAAZg"]
[Sun Apr 12 05:30:11.887517 2026] [:error] [pid 25329:tid 25397] [client 172.213.241.51:5363] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "adq9Y2dcIYsS8Iyaj10s_AAAAIw"]
[Sun Apr 12 05:30:12.343869 2026] [:error] [pid 26600:tid 26633] [client 172.213.241.51:6088] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "adq9ZO1YwAZiXhQKLYp1UQAAAYQ"]
[Sun Apr 12 05:30:12.804091 2026] [:error] [pid 25328:tid 25365] [client 172.213.241.51:5361] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "adq9ZMxUaQZxT-e0YsDZrAAAAEE"]
[Sun Apr 12 05:30:13.262013 2026] [:error] [pid 26600:tid 26634] [client 172.213.241.51:6085] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "adq9Ze1YwAZiXhQKLYp1UwAAAYU"]
[Sun Apr 12 05:30:13.722377 2026] [:error] [pid 26600:tid 26639] [client 172.213.241.51:62049] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "adq9Ze1YwAZiXhQKLYp1VQAAAYo"]
[Sun Apr 12 05:30:14.183909 2026] [:error] [pid 26567:tid 26591] [client 172.213.241.51:5330] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "adq9ZnhRpg6ptWFyFx37AwAAARY"]
[Sun Apr 12 05:30:14.644450 2026] [:error] [pid 26600:tid 26651] [client 172.213.241.51:62033] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "adq9Zu1YwAZiXhQKLYp1VgAAAZY"]
[Sun Apr 12 05:30:15.106410 2026] [:error] [pid 60280:tid 60292] [client 172.213.241.51:62670] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "adq9Z3BlLnDOYuIykkjcPQAAAco"]
[Sun Apr 12 05:30:15.562563 2026] [:error] [pid 25437:tid 25451] [client 172.213.241.51:5333] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "adq9Z3f97wYZje1ep_NP1QAAAMw"]
[Sun Apr 12 05:30:16.023585 2026] [:error] [pid 26567:tid 26593] [client 172.213.241.51:5369] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "adq9aHhRpg6ptWFyFx37DAAAARg"]
[Sun Apr 12 05:30:16.479286 2026] [:error] [pid 25328:tid 25403] [client 172.213.241.51:62086] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "adq9aMxUaQZxT-e0YsDZsAAAAFY"]
[Sun Apr 12 05:30:16.935043 2026] [:error] [pid 25328:tid 25377] [client 172.213.241.51:62103] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "adq9aMxUaQZxT-e0YsDZsQAAAEo"]
[Sun Apr 12 05:30:17.394166 2026] [:error] [pid 25328:tid 25369] [client 172.213.241.51:62118] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "adq9acxUaQZxT-e0YsDZtAAAAEU"]
[Sun Apr 12 05:30:17.847982 2026] [:error] [pid 25327:tid 25338] [client 172.213.241.51:5315] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "adq9aS6h2tZEVJo9JFI_5AAAAAI"]
[Sun Apr 12 05:30:18.306952 2026] [:error] [pid 60280:tid 60285] [client 172.213.241.51:62136] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "adq9anBlLnDOYuIykkjcQAAAAcM"]
[Sun Apr 12 05:30:18.767953 2026] [:error] [pid 25329:tid 25415] [client 172.213.241.51:5314] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "adq9amdcIYsS8Iyaj10tBAAAAJg"]
[Sun Apr 12 05:30:19.227751 2026] [:error] [pid 26600:tid 26635] [client 172.213.241.51:62697] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "adq9a-1YwAZiXhQKLYp1XgAAAYY"]
[Sun Apr 12 05:30:19.692629 2026] [:error] [pid 25328:tid 25408] [client 172.213.241.51:5345] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "adq9a8xUaQZxT-e0YsDZtwAAAFg"]
[Sun Apr 12 05:30:20.151504 2026] [:error] [pid 25437:tid 25453] [client 172.213.241.51:5353] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adq9bHf97wYZje1ep_NP2gAAAM4"]
[Sun Apr 12 05:30:20.613576 2026] [:error] [pid 25328:tid 25383] [client 172.213.241.51:62029] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adq9bMxUaQZxT-e0YsDZvQAAAE0"]
[Sun Apr 12 05:30:21.075182 2026] [:error] [pid 26600:tid 26640] [client 172.213.241.51:62066] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adq9be1YwAZiXhQKLYp1YAAAAYs"]
[Sun Apr 12 05:30:21.537496 2026] [:error] [pid 25328:tid 25367] [client 172.213.241.51:62097] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adq9bcxUaQZxT-e0YsDZwQAAAEM"]
[Sun Apr 12 05:30:21.995505 2026] [:error] [pid 26567:tid 26582] [client 172.213.241.51:62098] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "adq9bXhRpg6ptWFyFx37EgAAAQ0"]
[Sun Apr 12 05:30:22.454179 2026] [:error] [pid 26599:tid 26610] [client 172.213.241.51:5352] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "adq9bnG89LXoQbk_rwA4fgAAAUg"]
[Sun Apr 12 05:30:22.913247 2026] [:error] [pid 25437:tid 25447] [client 172.213.241.51:62133] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "adq9bnf97wYZje1ep_NP3AAAAMg"]
[Sun Apr 12 05:30:23.372246 2026] [:error] [pid 25327:tid 25342] [client 172.213.241.51:62024] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "adq9by6h2tZEVJo9JFI_-AAAAAY"]
[Sun Apr 12 05:30:23.832424 2026] [:error] [pid 25328:tid 25368] [client 172.213.241.51:5336] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "adq9b8xUaQZxT-e0YsDZxAAAAEQ"]
[Sun Apr 12 05:30:24.292254 2026] [:error] [pid 25328:tid 25366] [client 172.213.241.51:62048] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "adq9cMxUaQZxT-e0YsDZxgAAAEI"]
[Sun Apr 12 05:30:24.749971 2026] [:error] [pid 26600:tid 26637] [client 172.213.241.51:5320] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "adq9cO1YwAZiXhQKLYp1ZwAAAYg"]
[Sun Apr 12 05:30:25.217977 2026] [:error] [pid 25437:tid 25448] [client 172.213.241.51:62072] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "adq9cXf97wYZje1ep_NP4QAAAMk"]
[Sun Apr 12 05:30:25.685988 2026] [:error] [pid 26600:tid 26647] [client 172.213.241.51:62114] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "adq9ce1YwAZiXhQKLYp1bAAAAZI"]
[Sun Apr 12 05:30:26.154150 2026] [:error] [pid 26599:tid 26617] [client 172.213.241.51:62073] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "adq9cnG89LXoQbk_rwA4ggAAAU8"]
[Sun Apr 12 05:30:26.626823 2026] [:error] [pid 25327:tid 25347] [client 172.213.241.51:62022] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "adq9ci6h2tZEVJo9JFI_-QAAAAs"]
[Sun Apr 12 05:30:27.095802 2026] [:error] [pid 26599:tid 26624] [client 172.213.241.51:5349] [client 172.213.241.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "adq9c3G89LXoQbk_rwA4gwAAAVY"]
[Sun Apr 12 08:24:17.929401 2026] [:error] [pid 25327:tid 25344] [client 20.223.145.95:29672] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adrmMS6h2tZEVJo9JFJoMQAAAAg"]
[Sun Apr 12 08:24:19.679575 2026] [:error] [pid 26599:tid 26612] [client 20.223.145.95:29558] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adrmM3G89LXoQbk_rwBzUAAAAUo"]
[Sun Apr 12 08:24:21.205648 2026] [:error] [pid 26600:tid 26644] [client 20.223.145.95:32226] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adrmNe1YwAZiXhQKLYqdQgAAAY8"]
[Sun Apr 12 08:24:24.410539 2026] [:error] [pid 25328:tid 25377] [client 20.223.145.95:40769] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adrmOMxUaQZxT-e0YsAjeQAAAEo"]
[Sun Apr 12 21:07:40.409850 2026] [:error] [pid 25327:tid 25351] [client 4.232.92.101:44089] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sun Apr 12 21:07:40.644305 2026] [:error] [pid 25327:tid 25357] [client 4.232.92.101:44089] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Sun Apr 12 21:07:41.189712 2026] [:error] [pid 25327:tid 25355] [client 4.232.92.101:44089] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sun Apr 12 21:07:41.423095 2026] [:error] [pid 25327:tid 25350] [client 4.232.92.101:44089] File does not exist: /usr/local/apache/htdocs/suspended-page/mifta.php
[Sun Apr 12 21:07:41.748268 2026] [:error] [pid 25327:tid 25353] [client 4.232.92.101:44089] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Sun Apr 12 21:07:41.980498 2026] [:error] [pid 25327:tid 25354] [client 4.232.92.101:44089] File does not exist: /usr/local/apache/htdocs/suspended-page/packsin1.php
[Sun Apr 12 21:07:42.213310 2026] [:error] [pid 25327:tid 25358] [client 4.232.92.101:44089] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Sun Apr 12 21:07:42.446817 2026] [:error] [pid 25327:tid 25344] [client 4.232.92.101:44089] File does not exist: /usr/local/apache/htdocs/suspended-page/son1.php
[Sun Apr 12 21:07:42.685186 2026] [:error] [pid 25327:tid 25352] [client 4.232.92.101:44089] [client 4.232.92.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aduZHi6h2tZEVJo9JFLsegAAABA"]
[Sun Apr 12 21:07:44.022832 2026] [:error] [pid 60280:tid 60305] [client 4.232.92.101:44943] File does not exist: /usr/local/apache/htdocs/suspended-page/aboute.php
[Sun Apr 12 21:07:44.256767 2026] [:error] [pid 60280:tid 60301] [client 4.232.92.101:44943] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Sun Apr 12 21:07:44.533562 2026] [:error] [pid 60280:tid 60282] [client 4.232.92.101:44943] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aduZIHBlLnDOYuIykkjLJwAAAcA"]
[Sun Apr 12 21:07:45.761748 2026] [:error] [pid 60280:tid 60303] [client 4.232.92.101:27994] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aduZIXBlLnDOYuIykkjLMQAAAdU"]
[Sun Apr 12 21:07:46.841610 2026] [:error] [pid 25328:tid 25396] [client 4.232.92.101:27978] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aduZIsxUaQZxT-e0YsBZawAAAFM"]
[Sun Apr 12 21:07:47.886263 2026] [:error] [pid 25329:tid 25400] [client 4.232.92.101:23898] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aduZI2dcIYsS8Iyaj13AHAAAAI4"]
[Sun Apr 12 21:07:49.187772 2026] [:error] [pid 26600:tid 26647] [client 4.232.92.101:36930] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aduZJe1YwAZiXhQKLYpXnwAAAZI"]
[Sun Apr 12 21:07:50.975135 2026] [:error] [pid 25437:tid 25442] [client 4.232.92.101:29414] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aduZJnf97wYZje1ep_NsIAAAAMM"]
[Sun Apr 12 21:07:51.798279 2026] [:error] [pid 25437:tid 25440] [client 4.232.92.101:27987] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aduZJ3f97wYZje1ep_NsJQAAAME"]
[Sun Apr 12 21:07:53.067708 2026] [:error] [pid 26599:tid 26620] [client 4.232.92.101:40324] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aduZKXG89LXoQbk_rwDfcwAAAVI"]
[Sun Apr 12 21:07:55.690954 2026] [:error] [pid 25328:tid 25370] [client 4.232.92.101:3356] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aduZK8xUaQZxT-e0YsBZeQAAAEY"]
[Sun Apr 12 21:07:58.041353 2026] [:error] [pid 25328:tid 25368] [client 4.232.92.101:3549] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aduZLsxUaQZxT-e0YsBZfwAAAEQ"]
[Sun Apr 12 21:08:03.418766 2026] [:error] [pid 25328:tid 25405] [client 4.232.92.101:3377] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aduZM8xUaQZxT-e0YsBZiwAAAFc"]
[Sun Apr 12 21:08:07.387940 2026] [:error] [pid 60280:tid 60303] [client 4.232.92.101:23298] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aduZN3BlLnDOYuIykkjLVQAAAdU"]
[Sun Apr 12 21:08:09.679730 2026] [:error] [pid 60280:tid 60300] [client 4.232.92.101:27984] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aduZOXBlLnDOYuIykkjLYwAAAdI"]
[Sun Apr 12 21:08:12.150045 2026] [:error] [pid 60280:tid 60293] [client 4.232.92.101:43414] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aduZPHBlLnDOYuIykkjLZwAAAcs"]
[Sun Apr 12 21:08:14.515909 2026] [:error] [pid 26599:tid 26608] [client 4.232.92.101:29390] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aduZPnG89LXoQbk_rwDfgAAAAUY"]
[Sun Apr 12 21:08:15.943521 2026] [:error] [pid 25437:tid 25454] [client 4.232.92.101:40381] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aduZP3f97wYZje1ep_NsNAAAAM8"]
[Sun Apr 12 21:08:17.025834 2026] [:error] [pid 60280:tid 60286] [client 4.232.92.101:44093] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aduZQXBlLnDOYuIykkjLcQAAAcQ"]
[Sun Apr 12 21:08:19.386092 2026] [:error] [pid 25328:tid 25367] [client 4.232.92.101:31195] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aduZQ8xUaQZxT-e0YsBZrwAAAEM"]
[Sun Apr 12 21:08:22.175815 2026] [:error] [pid 25328:tid 25369] [client 4.232.92.101:40342] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aduZRsxUaQZxT-e0YsBZtAAAAEU"]
[Sun Apr 12 21:08:24.152590 2026] [:error] [pid 60280:tid 60286] [client 4.232.92.101:31317] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aduZSHBlLnDOYuIykkjLgAAAAcQ"]
[Sun Apr 12 21:08:25.813776 2026] [:error] [pid 25328:tid 25377] [client 4.232.92.101:29824] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aduZScxUaQZxT-e0YsBZuAAAAEo"]
[Sun Apr 12 21:08:28.452022 2026] [:error] [pid 60280:tid 60289] [client 4.232.92.101:30228] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aduZTHBlLnDOYuIykkjLhQAAAcc"]
[Sun Apr 12 21:08:29.318957 2026] [:error] [pid 26600:tid 26639] [client 4.232.92.101:23290] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aduZTe1YwAZiXhQKLYpXuwAAAYo"]
[Sun Apr 12 21:08:30.078591 2026] [:error] [pid 25437:tid 25451] [client 4.232.92.101:29375] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aduZTnf97wYZje1ep_NsQQAAAMw"]
[Sun Apr 12 21:08:30.782814 2026] [:error] [pid 25437:tid 25440] [client 4.232.92.101:32246] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aduZTnf97wYZje1ep_NsRgAAAME"]
[Sun Apr 12 21:08:31.537274 2026] [:error] [pid 26600:tid 26629] [client 4.232.92.101:32243] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aduZT-1YwAZiXhQKLYpXvQAAAYA"]
[Sun Apr 12 21:08:32.963728 2026] [:error] [pid 25328:tid 25401] [client 4.232.92.101:32224] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aduZUMxUaQZxT-e0YsBZxQAAAFU"]
[Sun Apr 12 21:08:34.222976 2026] [:error] [pid 25328:tid 25387] [client 4.232.92.101:29826] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aduZUsxUaQZxT-e0YsBZyQAAAE8"]
[Sun Apr 12 21:08:34.964863 2026] [:error] [pid 25328:tid 25380] [client 4.232.92.101:32216] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aduZUsxUaQZxT-e0YsBZzQAAAEw"]
[Sun Apr 12 21:08:35.683167 2026] [:error] [pid 25329:tid 25413] [client 4.232.92.101:30438] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aduZU2dcIYsS8Iyaj13AKQAAAJY"]
[Sun Apr 12 21:08:36.294505 2026] [:error] [pid 25329:tid 25397] [client 4.232.92.101:30410] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aduZVGdcIYsS8Iyaj13AKgAAAIw"]
[Sun Apr 12 21:08:37.078466 2026] [:error] [pid 60280:tid 60290] [client 4.232.92.101:44082] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aduZVXBlLnDOYuIykkjLiAAAAcg"]
[Sun Apr 12 21:08:37.735779 2026] [:error] [pid 25437:tid 25456] [client 4.232.92.101:29345] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aduZVXf97wYZje1ep_NsVQAAANE"]
[Sun Apr 12 21:08:38.734620 2026] [:error] [pid 60280:tid 60302] [client 4.232.92.101:44034] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aduZVnBlLnDOYuIykkjLjgAAAdQ"]
[Sun Apr 12 21:08:39.713400 2026] [:error] [pid 26600:tid 26640] [client 4.232.92.101:23325] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aduZV-1YwAZiXhQKLYpXwwAAAYs"]
[Sun Apr 12 21:08:40.774934 2026] [:error] [pid 26567:tid 26581] [client 4.232.92.101:31198] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aduZWHhRpg6ptWFyFx3GxAAAAQw"]
[Sun Apr 12 21:08:41.552638 2026] [:error] [pid 60280:tid 60284] [client 4.232.92.101:31202] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aduZWXBlLnDOYuIykkjLkQAAAcI"]
[Sun Apr 12 21:08:42.384128 2026] [:error] [pid 26600:tid 26652] [client 4.232.92.101:29333] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aduZWu1YwAZiXhQKLYpXxwAAAZc"]
[Sun Apr 12 21:08:42.963756 2026] [:error] [pid 25327:tid 25358] [client 4.232.92.101:3760] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aduZWi6h2tZEVJo9JFLslgAAABY"]
[Sun Apr 12 21:08:43.642443 2026] [:error] [pid 25327:tid 25356] [client 4.232.92.101:23618] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aduZWy6h2tZEVJo9JFLsmAAAABQ"]
[Sun Apr 12 21:08:45.569338 2026] [:error] [pid 25327:tid 25360] [client 4.232.92.101:32211] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sun Apr 12 21:08:45.805918 2026] [:error] [pid 25327:tid 25354] [client 4.232.92.101:32211] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Sun Apr 12 21:08:46.362720 2026] [:error] [pid 25327:tid 25336] [client 4.232.92.101:32211] [client 4.232.92.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "aduZXi6h2tZEVJo9JFLsqgAAAAA"]
[Sun Apr 12 21:08:48.212627 2026] [:error] [pid 26600:tid 26632] [client 4.232.92.101:30433] File does not exist: /usr/local/apache/htdocs/suspended-page/eFpU3yHnriNNLtvdefault.php
[Sun Apr 12 21:08:48.452888 2026] [:error] [pid 26600:tid 26629] [client 4.232.92.101:30433] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-image.php
[Sun Apr 12 21:08:48.707325 2026] [:error] [pid 26600:tid 26631] [client 4.232.92.101:30433] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sun Apr 12 21:08:48.939014 2026] [:error] [pid 26600:tid 26650] [client 4.232.92.101:30433] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Sun Apr 12 21:08:49.175623 2026] [:error] [pid 26600:tid 26650] [client 4.232.92.101:30433] File does not exist: /usr/local/apache/htdocs/suspended-page/footer.php
[Sun Apr 12 21:08:49.407338 2026] [:error] [pid 26600:tid 26643] [client 4.232.92.101:30433] File does not exist: /usr/local/apache/htdocs/suspended-page/img.php
[Sun Apr 12 21:08:49.639060 2026] [:error] [pid 26600:tid 26642] [client 4.232.92.101:30433] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Sun Apr 12 21:08:49.867982 2026] [:error] [pid 26600:tid 26640] [client 4.232.92.101:30433] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aduZYe1YwAZiXhQKLYpX4QAAAYs"]
[Sun Apr 12 21:08:51.789057 2026] [:error] [pid 25328:tid 25375] [client 4.232.92.101:25349] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aduZY8xUaQZxT-e0YsBZ6AAAAEk"]
[Sun Apr 12 21:08:53.314253 2026] [:error] [pid 25437:tid 25449] [client 4.232.92.101:25360] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aduZZXf97wYZje1ep_NsXQAAAMo"]
[Sun Apr 12 21:08:55.189825 2026] [:error] [pid 60280:tid 60292] [client 4.232.92.101:40563] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aduZZ3BlLnDOYuIykkjLpgAAAco"]
[Sun Apr 12 21:08:57.489648 2026] [:error] [pid 25328:tid 25394] [client 4.232.92.101:31396] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aduZacxUaQZxT-e0YsBZ9QAAAFI"]
[Sun Apr 12 21:09:01.483489 2026] [:error] [pid 25437:tid 25448] [client 4.232.92.101:36698] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aduZbXf97wYZje1ep_NsaAAAAMk"]
[Sun Apr 12 21:09:04.940533 2026] [:error] [pid 25328:tid 25372] [client 4.232.92.101:29269] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aduZcMxUaQZxT-e0YsBaEwAAAEc"]
[Sun Apr 12 21:09:07.725197 2026] [:error] [pid 25328:tid 25373] [client 4.232.92.101:40538] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aduZc8xUaQZxT-e0YsBaGAAAAEg"]
[Sun Apr 12 21:09:09.370905 2026] [:error] [pid 26600:tid 26637] [client 4.232.92.101:50543] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aduZde1YwAZiXhQKLYpX6gAAAYg"]
[Sun Apr 12 21:09:10.914557 2026] [:error] [pid 25437:tid 25450] [client 4.232.92.101:50517] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aduZdnf97wYZje1ep_NsbgAAAMs"]
[Sun Apr 12 21:09:11.736354 2026] [:error] [pid 25437:tid 25462] [client 4.232.92.101:29271] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aduZd3f97wYZje1ep_NsbwAAANc"]
[Sun Apr 12 21:09:12.579276 2026] [:error] [pid 60280:tid 60304] [client 4.232.92.101:3206] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aduZeHBlLnDOYuIykkjLxgAAAdY"]
[Sun Apr 12 21:09:13.290481 2026] [:error] [pid 25437:tid 25453] [client 4.232.92.101:25591] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "aduZeXf97wYZje1ep_NscQAAAM4"]
[Sun Apr 12 21:09:13.882975 2026] [:error] [pid 26600:tid 26634] [client 4.232.92.101:25550] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "aduZee1YwAZiXhQKLYpX8AAAAYU"]
[Sun Apr 12 21:09:14.503556 2026] [:error] [pid 25328:tid 25391] [client 4.232.92.101:24969] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "aduZesxUaQZxT-e0YsBaHwAAAFE"]
[Sun Apr 12 21:09:15.380778 2026] [:error] [pid 25328:tid 25389] [client 4.232.92.101:36725] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "aduZe8xUaQZxT-e0YsBaIwAAAFA"]
[Sun Apr 12 21:09:16.073550 2026] [:error] [pid 26567:tid 26589] [client 4.232.92.101:3951] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aduZfHhRpg6ptWFyFx3G2AAAARQ"]
[Sun Apr 12 21:09:17.074686 2026] [:error] [pid 25328:tid 25368] [client 4.232.92.101:25546] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aduZfcxUaQZxT-e0YsBaLQAAAEQ"]
[Sun Apr 12 21:09:18.295419 2026] [:error] [pid 60280:tid 60300] [client 4.232.92.101:43481] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aduZfnBlLnDOYuIykkjL2QAAAdI"]
[Sun Apr 12 21:09:19.276315 2026] [:error] [pid 26600:tid 26645] [client 4.232.92.101:25538] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aduZf-1YwAZiXhQKLYpX-gAAAZA"]
[Sun Apr 12 21:09:20.809083 2026] [:error] [pid 25329:tid 25402] [client 4.232.92.101:29252] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aduZgGdcIYsS8Iyaj13AOwAAAI8"]
[Sun Apr 12 21:09:23.061222 2026] [:error] [pid 25437:tid 25461] [client 4.232.92.101:38004] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aduZg3f97wYZje1ep_NsggAAANY"]
[Sun Apr 12 21:09:24.065501 2026] [:error] [pid 25437:tid 25440] [client 4.232.92.101:52114] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aduZhHf97wYZje1ep_NshwAAAME"]
[Sun Apr 12 21:09:25.531672 2026] [:error] [pid 26567:tid 26590] [client 4.232.92.101:43456] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aduZhXhRpg6ptWFyFx3G3AAAARU"]
[Sun Apr 12 21:09:26.505637 2026] [:error] [pid 25328:tid 25367] [client 4.232.92.101:38852] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aduZhsxUaQZxT-e0YsBaRAAAAEM"]
[Sun Apr 12 21:09:27.583482 2026] [:error] [pid 25437:tid 25443] [client 4.232.92.101:23974] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aduZh3f97wYZje1ep_NsiwAAAMQ"]
[Sun Apr 12 21:09:28.806446 2026] [:error] [pid 60280:tid 60288] [client 4.232.92.101:22881] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aduZiHBlLnDOYuIykkjL6QAAAcY"]
[Sun Apr 12 21:09:29.943896 2026] [:error] [pid 60280:tid 60290] [client 4.232.92.101:24511] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aduZiXBlLnDOYuIykkjL8AAAAcg"]
[Sun Apr 12 21:09:31.466913 2026] [:error] [pid 26599:tid 26613] [client 4.232.92.101:24199] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aduZi3G89LXoQbk_rwDfsAAAAUs"]
[Sun Apr 12 21:09:33.039395 2026] [:error] [pid 60280:tid 60290] [client 4.232.92.101:46946] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aduZjXBlLnDOYuIykkjMCgAAAcg"]
[Sun Apr 12 21:09:34.853618 2026] [:error] [pid 60280:tid 60288] [client 4.232.92.101:45055] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aduZjnBlLnDOYuIykkjMEAAAAcY"]
[Sun Apr 12 21:09:36.380548 2026] [:error] [pid 60280:tid 60302] [client 4.232.92.101:30169] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aduZkHBlLnDOYuIykkjMFwAAAdQ"]
[Sun Apr 12 21:09:39.409405 2026] [:error] [pid 25437:tid 25458] [client 4.232.92.101:46975] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "aduZk3f97wYZje1ep_NslwAAANM"]
[Sun Apr 12 21:09:40.299967 2026] [:error] [pid 60280:tid 60294] [client 4.232.92.101:3142] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "aduZlHBlLnDOYuIykkjMNwAAAcw"]
[Sun Apr 12 21:09:41.175344 2026] [:error] [pid 26567:tid 26576] [client 4.232.92.101:30994] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "aduZlXhRpg6ptWFyFx3G4QAAAQc"]
[Sun Apr 12 21:09:42.158607 2026] [:error] [pid 26600:tid 26636] [client 4.232.92.101:45046] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "aduZlu1YwAZiXhQKLYpYBwAAAYc"]
[Sun Apr 12 21:09:43.589806 2026] [:error] [pid 25437:tid 25442] [client 4.232.92.101:45021] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "aduZl3f97wYZje1ep_NsmwAAAMM"]
[Sun Apr 12 21:09:45.122820 2026] [:error] [pid 25437:tid 25463] [client 4.232.92.101:26118] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "aduZmXf97wYZje1ep_NsnAAAANg"]
[Sun Apr 12 21:09:47.306372 2026] [:error] [pid 60280:tid 60286] [client 4.232.92.101:26126] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "aduZm3BlLnDOYuIykkjMSAAAAcQ"]
[Sun Apr 12 21:09:49.156009 2026] [:error] [pid 60280:tid 60297] [client 4.232.92.101:28955] File does not exist: /usr/local/apache/htdocs/suspended-page/less.php
[Sun Apr 12 21:09:49.387925 2026] [:error] [pid 60280:tid 60305] [client 4.232.92.101:28955] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Sun Apr 12 21:09:49.619735 2026] [:error] [pid 60280:tid 60292] [client 4.232.92.101:28955] File does not exist: /usr/local/apache/htdocs/suspended-page/maxro.php
[Sun Apr 12 21:09:49.852387 2026] [:error] [pid 60280:tid 60291] [client 4.232.92.101:28955] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Apr 12 21:09:50.091266 2026] [:error] [pid 60280:tid 60290] [client 4.232.92.101:28955] File does not exist: /usr/local/apache/htdocs/suspended-page/1s7y8wt9dz.php
[Sun Apr 12 21:09:50.360035 2026] [:error] [pid 60280:tid 60294] [client 4.232.92.101:28955] File does not exist: /usr/local/apache/htdocs/suspended-page/bdktk.php
[Sun Apr 12 21:09:50.601149 2026] [:error] [pid 60280:tid 60287] [client 4.232.92.101:28955] File does not exist: /usr/local/apache/htdocs/suspended-page/v5.php
[Sun Apr 12 21:09:50.842767 2026] [:error] [pid 60280:tid 60300] [client 4.232.92.101:28955] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Sun Apr 12 21:09:51.086216 2026] [:error] [pid 60280:tid 60282] [client 4.232.92.101:28955] File does not exist: /usr/local/apache/htdocs/suspended-page/ws87.php
[Sun Apr 12 21:09:51.319153 2026] [:error] [pid 60280:tid 60284] [client 4.232.92.101:28955] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Sun Apr 12 21:09:51.562070 2026] [:error] [pid 60280:tid 60297] [client 4.232.92.101:28955] File does not exist: /usr/local/apache/htdocs/suspended-page/r2.php
[Sun Apr 12 21:09:51.827125 2026] [:error] [pid 60280:tid 60306] [client 4.232.92.101:28955] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aduZn3BlLnDOYuIykkjMZgAAAdg"]
[Sun Apr 12 21:09:53.868710 2026] [:error] [pid 26567:tid 26575] [client 4.232.92.101:41910] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aduZoXhRpg6ptWFyFx3G6AAAAQY"]
[Sun Apr 12 21:09:56.254617 2026] [:error] [pid 26567:tid 26579] [client 4.232.92.101:45436] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aduZpHhRpg6ptWFyFx3G7AAAAQo"]
[Sun Apr 12 21:09:57.014341 2026] [:error] [pid 26599:tid 26619] [client 4.232.92.101:41829] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aduZpXG89LXoQbk_rwDftwAAAVE"]
[Sun Apr 12 21:09:57.585104 2026] [:error] [pid 26599:tid 26614] [client 4.232.92.101:27121] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aduZpXG89LXoQbk_rwDfuwAAAUw"]
[Sun Apr 12 21:09:58.225208 2026] [:error] [pid 60280:tid 60289] [client 4.232.92.101:41862] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aduZpnBlLnDOYuIykkjMbQAAAcc"]
[Sun Apr 12 21:09:59.157466 2026] [:error] [pid 25437:tid 25449] [client 4.232.92.101:45422] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aduZp3f97wYZje1ep_NspwAAAMo"]
[Sun Apr 12 21:09:59.845410 2026] [:error] [pid 26567:tid 26592] [client 4.232.92.101:43747] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aduZp3hRpg6ptWFyFx3G7gAAARc"]
[Sun Apr 12 21:10:00.355294 2026] [:error] [pid 25329:tid 25374] [client 4.232.92.101:27115] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "aduZqGdcIYsS8Iyaj13ARAAAAIA"]
[Sun Apr 12 21:10:01.110106 2026] [:error] [pid 26600:tid 26647] [client 4.232.92.101:50563] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "aduZqe1YwAZiXhQKLYpYEwAAAZI"]
[Sun Apr 12 21:10:01.669144 2026] [:error] [pid 26600:tid 26652] [client 4.232.92.101:50651] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "aduZqe1YwAZiXhQKLYpYFQAAAZc"]
[Sun Apr 12 21:10:02.283527 2026] [:error] [pid 25329:tid 25386] [client 4.232.92.101:27088] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "aduZqmdcIYsS8Iyaj13ARwAAAIY"]
[Sun Apr 12 21:10:03.039405 2026] [:error] [pid 26600:tid 26648] [client 4.232.92.101:24749] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "aduZq-1YwAZiXhQKLYpYFwAAAZM"]
[Sun Apr 12 21:10:03.771516 2026] [:error] [pid 26599:tid 26608] [client 4.232.92.101:43735] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "aduZq3G89LXoQbk_rwDfwQAAAUY"]
[Sun Apr 12 21:10:04.412840 2026] [:error] [pid 25437:tid 25455] [client 4.232.92.101:22323] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "aduZrHf97wYZje1ep_NsqwAAANA"]
[Sun Apr 12 21:10:05.208194 2026] [:error] [pid 25437:tid 25447] [client 4.232.92.101:31566] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "aduZrXf97wYZje1ep_NsrQAAAMg"]
[Sun Apr 12 21:10:06.057282 2026] [:error] [pid 25437:tid 25440] [client 4.232.92.101:24754] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aduZrnf97wYZje1ep_NsrgAAAME"]
[Sun Apr 12 21:10:06.988556 2026] [:error] [pid 25329:tid 25393] [client 4.232.92.101:50630] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aduZrmdcIYsS8Iyaj13ATAAAAIo"]
[Sun Apr 12 21:10:07.679569 2026] [:error] [pid 25437:tid 25462] [client 4.232.92.101:50580] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aduZr3f97wYZje1ep_NssAAAANc"]
[Sun Apr 12 21:10:08.484868 2026] [:error] [pid 25437:tid 25450] [client 4.232.92.101:50570] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aduZsHf97wYZje1ep_NsswAAAMs"]
[Sun Apr 12 21:10:09.132107 2026] [:error] [pid 25437:tid 25441] [client 4.232.92.101:50662] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aduZsXf97wYZje1ep_NstQAAAMI"]
[Sun Apr 12 21:10:09.881533 2026] [:error] [pid 26599:tid 26603] [client 4.232.92.101:22277] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aduZsXG89LXoQbk_rwDfwgAAAUE"]
[Sun Apr 12 21:10:11.259902 2026] [:error] [pid 25437:tid 25455] [client 4.232.92.101:41835] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aduZs3f97wYZje1ep_NsuAAAANA"]
[Sun Apr 12 21:10:12.225736 2026] [:error] [pid 60280:tid 60286] [client 4.232.92.101:26613] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aduZtHBlLnDOYuIykkjMcwAAAcQ"]
[Sun Apr 12 21:10:14.235245 2026] [:error] [pid 25329:tid 25381] [client 4.232.92.101:43770] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gz.php"] [unique_id "aduZtmdcIYsS8Iyaj13ATwAAAIM"]
[Sun Apr 12 21:10:16.016498 2026] [:error] [pid 60280:tid 60303] [client 4.232.92.101:3422] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gz.php"] [unique_id "aduZuHBlLnDOYuIykkjMswAAAdU"]
[Sun Apr 12 21:10:17.239334 2026] [:error] [pid 25328:tid 25367] [client 4.232.92.101:22291] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gz.php"] [unique_id "aduZucxUaQZxT-e0YsBaswAAAEM"]
[Sun Apr 12 21:10:19.038767 2026] [:error] [pid 25437:tid 25448] [client 4.232.92.101:26612] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gz.php"] [unique_id "aduZu3f97wYZje1ep_Ns9AAAAMk"]
[Sun Apr 12 21:10:19.884340 2026] [:error] [pid 25327:tid 25345] [client 4.232.92.101:43724] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "aduZuy6h2tZEVJo9JFLtBAAAAAk"]
[Sun Apr 12 21:10:20.646682 2026] [:error] [pid 26567:tid 26591] [client 4.232.92.101:22465] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "aduZvHhRpg6ptWFyFx3G-wAAARY"]
[Sun Apr 12 21:10:21.383897 2026] [:error] [pid 25329:tid 25393] [client 4.232.92.101:22506] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "aduZvWdcIYsS8Iyaj13AVQAAAIo"]
[Sun Apr 12 21:10:22.005508 2026] [:error] [pid 25329:tid 25395] [client 4.232.92.101:30952] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "aduZvmdcIYsS8Iyaj13AVgAAAIs"]
[Sun Apr 12 21:10:22.816310 2026] [:error] [pid 25328:tid 25379] [client 4.232.92.101:50683] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/areak1.php"] [unique_id "aduZvsxUaQZxT-e0YsBa5QAAAEs"]
[Sun Apr 12 21:10:23.410161 2026] [:error] [pid 25329:tid 25404] [client 4.232.92.101:41632] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/areak1.php"] [unique_id "aduZv2dcIYsS8Iyaj13AVwAAAJA"]
[Sun Apr 12 21:10:24.187829 2026] [:error] [pid 26567:tid 26589] [client 4.232.92.101:41639] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/areak1.php"] [unique_id "aduZwHhRpg6ptWFyFx3G_QAAARQ"]
[Sun Apr 12 21:10:24.750417 2026] [:error] [pid 60280:tid 60287] [client 4.232.92.101:31260] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/areak1.php"] [unique_id "aduZwHBlLnDOYuIykkjMyAAAAcU"]
[Sun Apr 12 21:10:25.750587 2026] [:error] [pid 25327:tid 25338] [client 4.232.92.101:43343] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "aduZwS6h2tZEVJo9JFLtBwAAAAI"]
[Sun Apr 12 21:10:27.201909 2026] [:error] [pid 25327:tid 25346] [client 4.232.92.101:41659] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "aduZwy6h2tZEVJo9JFLtCAAAAAo"]
[Sun Apr 12 21:10:28.213632 2026] [:error] [pid 25327:tid 25351] [client 4.232.92.101:22481] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "aduZxC6h2tZEVJo9JFLtCgAAAA8"]
[Sun Apr 12 21:10:29.525784 2026] [:error] [pid 25328:tid 25380] [client 4.232.92.101:3681] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "aduZxcxUaQZxT-e0YsBa6AAAAEw"]
[Sun Apr 12 21:10:31.689276 2026] [:error] [pid 60280:tid 60284] [client 4.232.92.101:50669] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aduZx3BlLnDOYuIykkjM0wAAAcI"]
[Sun Apr 12 21:10:33.970366 2026] [:error] [pid 25328:tid 25401] [client 4.232.92.101:26603] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aduZycxUaQZxT-e0YsBa8QAAAFU"]
[Sun Apr 12 21:10:35.783610 2026] [:error] [pid 25437:tid 25454] [client 4.232.92.101:3695] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aduZy3f97wYZje1ep_NtBgAAAM8"]
[Sun Apr 12 21:10:38.445855 2026] [:error] [pid 25327:tid 25347] [client 4.232.92.101:30960] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aduZzi6h2tZEVJo9JFLtDgAAAAs"]
[Sun Apr 12 21:10:42.889651 2026] [:error] [pid 60280:tid 60289] [client 4.232.92.101:22525] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "aduZ0nBlLnDOYuIykkjM2QAAAcc"]
[Sun Apr 12 21:10:44.954441 2026] [:error] [pid 25327:tid 25345] [client 4.232.92.101:41617] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "aduZ1C6h2tZEVJo9JFLtGAAAAAk"]
[Sun Apr 12 21:10:48.625294 2026] [:error] [pid 60280:tid 60293] [client 4.232.92.101:23690] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "aduZ2HBlLnDOYuIykkjM5wAAAcs"]
[Sun Apr 12 21:10:49.748655 2026] [:error] [pid 60280:tid 60288] [client 4.232.92.101:35579] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "aduZ2XBlLnDOYuIykkjM6QAAAcY"]
[Sun Apr 12 21:10:50.993686 2026] [:error] [pid 60280:tid 60284] [client 4.232.92.101:35546] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "aduZ2nBlLnDOYuIykkjM7wAAAcI"]
[Sun Apr 12 21:10:52.456560 2026] [:error] [pid 60280:tid 60295] [client 4.232.92.101:23714] File does not exist: /usr/local/apache/htdocs/suspended-page/xozx.php
[Sun Apr 12 21:10:53.344726 2026] [:error] [pid 60280:tid 60295] [client 4.232.92.101:23714] File does not exist: /usr/local/apache/htdocs/suspended-page/1100.php
[Sun Apr 12 21:10:53.600546 2026] [:error] [pid 60280:tid 60287] [client 4.232.92.101:23714] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Sun Apr 12 21:10:53.840148 2026] [:error] [pid 60280:tid 60304] [client 4.232.92.101:23714] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sun Apr 12 21:10:54.076674 2026] [:error] [pid 60280:tid 60298] [client 4.232.92.101:23714] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kz.php
[Sun Apr 12 21:10:54.327162 2026] [:error] [pid 60280:tid 60303] [client 4.232.92.101:23714] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-lo.php
[Sun Apr 12 21:10:54.560985 2026] [:error] [pid 60280:tid 60305] [client 4.232.92.101:23714] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Sun Apr 12 21:10:55.059306 2026] [:error] [pid 60280:tid 60282] [client 4.232.92.101:23714] File does not exist: /usr/local/apache/htdocs/suspended-page/Ipv6.php
[Sun Apr 12 21:10:55.292713 2026] [:error] [pid 60280:tid 60286] [client 4.232.92.101:23714] File does not exist: /usr/local/apache/htdocs/suspended-page/file-gertdxz.php
[Sun Apr 12 21:10:55.525877 2026] [:error] [pid 60280:tid 60300] [client 4.232.92.101:23714] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Sun Apr 12 21:10:55.759581 2026] [:error] [pid 60280:tid 60292] [client 4.232.92.101:23714] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Sun Apr 12 21:10:55.998683 2026] [:error] [pid 60280:tid 60288] [client 4.232.92.101:23714] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wglum1.php"] [unique_id "aduZ33BlLnDOYuIykkjNBQAAAcY"]
[Sun Apr 12 21:10:56.973435 2026] [:error] [pid 25328:tid 25380] [client 4.232.92.101:28039] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wglum1.php"] [unique_id "aduZ4MxUaQZxT-e0YsBbGAAAAEw"]
[Sun Apr 12 21:10:58.229104 2026] [:error] [pid 25328:tid 25389] [client 4.232.92.101:29461] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wglum1.php"] [unique_id "aduZ4sxUaQZxT-e0YsBbHAAAAFA"]
[Sun Apr 12 21:10:59.036153 2026] [:error] [pid 25328:tid 25373] [client 4.232.92.101:30686] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wglum1.php"] [unique_id "aduZ48xUaQZxT-e0YsBbHgAAAEg"]
[Sun Apr 12 21:11:00.200591 2026] [:error] [pid 25328:tid 25380] [client 4.232.92.101:3867] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "aduZ5MxUaQZxT-e0YsBbIwAAAEw"]
[Sun Apr 12 21:11:01.430803 2026] [:error] [pid 25437:tid 25462] [client 4.232.92.101:37337] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "aduZ5Xf97wYZje1ep_NtHQAAANc"]
[Sun Apr 12 21:11:01.969157 2026] [:error] [pid 25437:tid 25447] [client 4.232.92.101:3847] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "aduZ5Xf97wYZje1ep_NtHwAAAMg"]
[Sun Apr 12 21:11:02.528991 2026] [:error] [pid 25437:tid 25450] [client 4.232.92.101:3798] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "aduZ5nf97wYZje1ep_NtIQAAAMs"]
[Sun Apr 12 21:11:03.158920 2026] [:error] [pid 26599:tid 26611] [client 4.232.92.101:3838] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xper.php"] [unique_id "aduZ53G89LXoQbk_rwDf2AAAAUk"]
[Sun Apr 12 21:11:04.425538 2026] [:error] [pid 26567:tid 26587] [client 4.232.92.101:39375] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xper.php"] [unique_id "aduZ6HhRpg6ptWFyFx3HFQAAARI"]
[Sun Apr 12 21:11:05.293261 2026] [:error] [pid 25329:tid 25395] [client 4.232.92.101:39395] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xper.php"] [unique_id "aduZ6WdcIYsS8Iyaj13AYAAAAIs"]
[Sun Apr 12 21:11:06.052926 2026] [:error] [pid 25437:tid 25448] [client 4.232.92.101:26407] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xper.php"] [unique_id "aduZ6nf97wYZje1ep_NtKwAAAMk"]
[Sun Apr 12 21:11:07.025625 2026] [:error] [pid 25437:tid 25443] [client 4.232.92.101:3270] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wxpass.php"] [unique_id "aduZ63f97wYZje1ep_NtLQAAAMQ"]
[Sun Apr 12 21:11:09.512034 2026] [:error] [pid 26567:tid 26576] [client 4.232.92.101:52398] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wxpass.php"] [unique_id "aduZ7XhRpg6ptWFyFx3HHQAAAQc"]
[Sun Apr 12 21:11:12.104831 2026] [:error] [pid 60280:tid 60292] [client 4.232.92.101:43034] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wxpass.php"] [unique_id "aduZ8HBlLnDOYuIykkjNFAAAAco"]
[Sun Apr 12 21:11:13.362331 2026] [:error] [pid 60280:tid 60293] [client 4.232.92.101:4018] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wxpass.php"] [unique_id "aduZ8XBlLnDOYuIykkjNHgAAAcs"]
[Sun Apr 12 21:11:16.095807 2026] [:error] [pid 25329:tid 25382] [client 4.232.92.101:40972] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aduZ9GdcIYsS8Iyaj13AbAAAAIQ"]
[Sun Apr 12 21:11:18.123704 2026] [:error] [pid 25328:tid 25408] [client 4.232.92.101:45667] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aduZ9sxUaQZxT-e0YsBbOwAAAFg"]
[Sun Apr 12 21:11:22.540473 2026] [:error] [pid 25437:tid 25448] [client 4.232.92.101:45608] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aduZ-nf97wYZje1ep_NtOgAAAMk"]
[Sun Apr 12 21:11:25.045359 2026] [:error] [pid 25437:tid 25459] [client 4.232.92.101:45583] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aduZ_Xf97wYZje1ep_NtPQAAANQ"]
[Sun Apr 12 21:11:28.272516 2026] [:error] [pid 26600:tid 26643] [client 4.232.92.101:38522] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aduaAO1YwAZiXhQKLYpYZgAAAY4"]
[Sun Apr 12 21:11:29.988800 2026] [:error] [pid 60280:tid 60298] [client 4.232.92.101:45664] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aduaAXBlLnDOYuIykkjNcQAAAdA"]
[Sun Apr 12 21:11:32.332158 2026] [:error] [pid 26567:tid 26580] [client 4.232.92.101:24175] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aduaBHhRpg6ptWFyFx3HLQAAAQs"]
[Sun Apr 12 21:11:33.579997 2026] [:error] [pid 25328:tid 25375] [client 4.232.92.101:32294] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aduaBcxUaQZxT-e0YsBbXQAAAEk"]
[Sun Apr 12 21:11:35.362299 2026] [:error] [pid 60280:tid 60295] [client 4.232.92.101:45214] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x3x.php"] [unique_id "aduaB3BlLnDOYuIykkjNdAAAAc0"]
[Sun Apr 12 21:11:36.533121 2026] [:error] [pid 25328:tid 25369] [client 4.232.92.101:32946] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x3x.php"] [unique_id "aduaCMxUaQZxT-e0YsBbZQAAAEU"]
[Sun Apr 12 21:11:37.444613 2026] [:error] [pid 25328:tid 25375] [client 4.232.92.101:44154] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x3x.php"] [unique_id "aduaCcxUaQZxT-e0YsBbZgAAAEk"]
[Sun Apr 12 21:11:38.824619 2026] [:error] [pid 60280:tid 60302] [client 4.232.92.101:32935] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x3x.php"] [unique_id "aduaCnBlLnDOYuIykkjNdwAAAdQ"]
[Sun Apr 12 21:11:39.645132 2026] [:error] [pid 60280:tid 60300] [client 4.232.92.101:45692] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "aduaC3BlLnDOYuIykkjNfAAAAdI"]
[Sun Apr 12 21:11:40.290924 2026] [:error] [pid 60280:tid 60296] [client 4.232.92.101:40962] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "aduaDHBlLnDOYuIykkjNggAAAc4"]
[Sun Apr 12 21:11:40.954241 2026] [:error] [pid 25328:tid 25408] [client 4.232.92.101:40988] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "aduaDMxUaQZxT-e0YsBbbQAAAFg"]
[Sun Apr 12 21:11:42.076493 2026] [:error] [pid 25329:tid 25397] [client 4.232.92.101:29778] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "aduaDmdcIYsS8Iyaj13AfAAAAIw"]
[Sun Apr 12 21:11:43.129908 2026] [:error] [pid 25328:tid 25372] [client 4.232.92.101:26404] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/global.php"] [unique_id "aduaD8xUaQZxT-e0YsBbbwAAAEc"]
[Sun Apr 12 21:11:44.196726 2026] [:error] [pid 60280:tid 60304] [client 4.232.92.101:45610] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/global.php"] [unique_id "aduaEHBlLnDOYuIykkjNiQAAAdY"]
[Sun Apr 12 21:11:45.372629 2026] [:error] [pid 60280:tid 60303] [client 4.232.92.101:39740] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/global.php"] [unique_id "aduaEXBlLnDOYuIykkjNiwAAAdU"]
[Sun Apr 12 21:11:46.686100 2026] [:error] [pid 25328:tid 25367] [client 4.232.92.101:22555] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/global.php"] [unique_id "aduaEsxUaQZxT-e0YsBbdgAAAEM"]
[Sun Apr 12 21:11:47.831700 2026] [:error] [pid 25328:tid 25389] [client 4.232.92.101:40094] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aduaE8xUaQZxT-e0YsBbegAAAFA"]
[Sun Apr 12 21:11:49.952280 2026] [:error] [pid 25327:tid 25354] [client 4.232.92.101:3314] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aduaFS6h2tZEVJo9JFLtcAAAABI"]
[Sun Apr 12 21:11:51.355959 2026] [:error] [pid 60280:tid 60294] [client 4.232.92.101:39690] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aduaF3BlLnDOYuIykkjNkAAAAcw"]
[Sun Apr 12 21:11:52.379929 2026] [:error] [pid 25328:tid 25364] [client 4.232.92.101:48901] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aduaGMxUaQZxT-e0YsBbhAAAAEA"]
[Sun Apr 12 21:11:53.197718 2026] [:error] [pid 60280:tid 60301] [client 4.232.92.101:43050] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aduaGXBlLnDOYuIykkjNnQAAAdM"]
[Sun Apr 12 21:11:54.444921 2026] [:error] [pid 26599:tid 26625] [client 4.232.92.101:39389] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aduaGnG89LXoQbk_rwDgBAAAAVc"]
[Sun Apr 12 21:11:55.548024 2026] [:error] [pid 26599:tid 26620] [client 4.232.92.101:24427] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Sun Apr 12 21:11:55.823684 2026] [:error] [pid 26599:tid 26622] [client 4.232.92.101:24427] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Sun Apr 12 21:11:56.057205 2026] [:error] [pid 26599:tid 26618] [client 4.232.92.101:24427] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-block.php
[Sun Apr 12 21:11:56.288163 2026] [:error] [pid 26599:tid 26603] [client 4.232.92.101:24427] [client 4.232.92.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aduaHHG89LXoQbk_rwDgCwAAAUE"]
[Sun Apr 12 21:11:56.877665 2026] [:error] [pid 25328:tid 25401] [client 4.232.92.101:34838] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Sun Apr 12 21:11:57.117774 2026] [:error] [pid 25328:tid 25377] [client 4.232.92.101:34838] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Sun Apr 12 21:11:57.497791 2026] [:error] [pid 25328:tid 25385] [client 4.232.92.101:34838] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Sun Apr 12 21:11:57.731983 2026] [:error] [pid 25328:tid 25394] [client 4.232.92.101:34838] File does not exist: /usr/local/apache/htdocs/suspended-page/ws57.php
[Sun Apr 12 21:11:57.967350 2026] [:error] [pid 25328:tid 25379] [client 4.232.92.101:34838] File does not exist: /usr/local/apache/htdocs/suspended-page/ws61.php
[Sun Apr 12 21:11:58.206055 2026] [:error] [pid 25328:tid 25396] [client 4.232.92.101:34838] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Sun Apr 12 21:11:58.439798 2026] [:error] [pid 25328:tid 25391] [client 4.232.92.101:34838] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Sun Apr 12 21:11:58.673979 2026] [:error] [pid 25328:tid 25380] [client 4.232.92.101:34838] File does not exist: /usr/local/apache/htdocs/suspended-page/xynz.php
[Sun Apr 12 21:11:59.090087 2026] [:error] [pid 25328:tid 25364] [client 4.232.92.101:34838] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-01ul.php"] [unique_id "aduaH8xUaQZxT-e0YsBbkAAAAEA"]
[Sun Apr 12 21:12:00.385507 2026] [:error] [pid 60280:tid 60295] [client 4.232.92.101:24405] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-01ul.php"] [unique_id "aduaIHBlLnDOYuIykkjNpQAAAc0"]
[Sun Apr 12 21:12:01.372780 2026] [:error] [pid 25327:tid 25348] [client 4.232.92.101:44378] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-01ul.php"] [unique_id "aduaIS6h2tZEVJo9JFLtcQAAAAw"]
[Sun Apr 12 21:12:01.948693 2026] [:error] [pid 26599:tid 26624] [client 4.232.92.101:35610] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-01ul.php"] [unique_id "aduaIXG89LXoQbk_rwDgEQAAAVY"]
[Sun Apr 12 21:12:02.549208 2026] [:error] [pid 25329:tid 25404] [client 4.232.92.101:33441] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e7.php"] [unique_id "aduaImdcIYsS8Iyaj13ApQAAAJA"]
[Sun Apr 12 21:12:03.080019 2026] [:error] [pid 25437:tid 25440] [client 4.232.92.101:38930] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e7.php"] [unique_id "aduaI3f97wYZje1ep_NtWAAAAME"]
[Sun Apr 12 21:12:03.883199 2026] [:error] [pid 25328:tid 25403] [client 4.232.92.101:35575] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e7.php"] [unique_id "aduaI8xUaQZxT-e0YsBbkQAAAFY"]
[Sun Apr 12 21:12:04.698652 2026] [:error] [pid 26600:tid 26637] [client 4.232.92.101:26312] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e7.php"] [unique_id "aduaJO1YwAZiXhQKLYpYegAAAYg"]
[Sun Apr 12 21:12:05.382576 2026] [:error] [pid 25329:tid 25413] [client 4.232.92.101:29447] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "aduaJWdcIYsS8Iyaj13AqQAAAJY"]
[Sun Apr 12 21:12:06.165823 2026] [:error] [pid 25327:tid 25339] [client 4.232.92.101:31258] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "aduaJi6h2tZEVJo9JFLtdAAAAAM"]
[Sun Apr 12 21:12:06.924837 2026] [:error] [pid 60280:tid 60288] [client 4.232.92.101:39151] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "aduaJnBlLnDOYuIykkjNrQAAAcY"]
[Sun Apr 12 21:12:07.547289 2026] [:error] [pid 60280:tid 60295] [client 4.232.92.101:39445] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "aduaJ3BlLnDOYuIykkjNsgAAAc0"]
[Sun Apr 12 21:12:09.424724 2026] [:error] [pid 25437:tid 25439] [client 4.232.92.101:45392] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "aduaKXf97wYZje1ep_NtYQAAAMA"]
[Sun Apr 12 21:12:11.474154 2026] [:error] [pid 25328:tid 25385] [client 4.232.92.101:3136] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "aduaK8xUaQZxT-e0YsBblgAAAE4"]
[Sun Apr 12 21:12:12.875823 2026] [:error] [pid 25437:tid 25445] [client 4.232.92.101:30175] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "aduaLHf97wYZje1ep_NtZwAAAMY"]
[Sun Apr 12 21:12:15.149179 2026] [:error] [pid 26600:tid 26649] [client 4.232.92.101:24192] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "aduaL-1YwAZiXhQKLYpYfwAAAZQ"]
[Sun Apr 12 21:12:17.604278 2026] [:error] [pid 26567:tid 26575] [client 4.232.92.101:43516] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aduaMXhRpg6ptWFyFx3HUQAAAQY"]
[Sun Apr 12 21:12:18.967667 2026] [:error] [pid 25327:tid 25342] [client 4.232.92.101:36732] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aduaMi6h2tZEVJo9JFLteQAAAAY"]
[Sun Apr 12 21:12:23.704260 2026] [:error] [pid 60280:tid 60291] [client 4.232.92.101:40001] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aduaN3BlLnDOYuIykkjNugAAAck"]
[Sun Apr 12 21:12:29.951437 2026] [:error] [pid 60280:tid 60302] [client 4.232.92.101:3547] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aduaPXBlLnDOYuIykkjN1wAAAdQ"]
[Sun Apr 12 21:12:33.994570 2026] [:error] [pid 26600:tid 26639] [client 4.232.92.101:27191] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aduaQe1YwAZiXhQKLYpYkAAAAYo"]
[Sun Apr 12 21:12:36.023379 2026] [:error] [pid 26599:tid 26621] [client 4.232.92.101:39679] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aduaRHG89LXoQbk_rwDgIwAAAVM"]
[Sun Apr 12 21:12:36.537429 2026] [:error] [pid 25437:tid 25459] [client 4.232.92.101:44046] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aduaRHf97wYZje1ep_NtbwAAANQ"]
[Sun Apr 12 21:12:38.473664 2026] [:error] [pid 60280:tid 60295] [client 4.232.92.101:3560] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aduaRnBlLnDOYuIykkjN8AAAAc0"]
[Sun Apr 12 21:12:40.464133 2026] [:error] [pid 25329:tid 25393] [client 4.232.92.101:28470] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aduaSGdcIYsS8Iyaj13AsAAAAIo"]
[Sun Apr 12 21:12:41.484138 2026] [:error] [pid 60280:tid 60285] [client 4.232.92.101:43434] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aduaSXBlLnDOYuIykkjOAQAAAcM"]
[Sun Apr 12 21:12:42.472168 2026] [:error] [pid 26600:tid 26635] [client 4.232.92.101:41357] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aduaSu1YwAZiXhQKLYpYlAAAAYY"]
[Sun Apr 12 21:12:43.797945 2026] [:error] [pid 25328:tid 25365] [client 4.232.92.101:39638] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aduaS8xUaQZxT-e0YsBbtwAAAEE"]
[Sun Apr 12 21:12:44.568365 2026] [:error] [pid 25328:tid 25398] [client 4.232.92.101:44576] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "aduaTMxUaQZxT-e0YsBbvQAAAFQ"]
[Sun Apr 12 21:12:45.783306 2026] [:error] [pid 25328:tid 25405] [client 4.232.92.101:31544] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "aduaTcxUaQZxT-e0YsBbxAAAAFc"]
[Sun Apr 12 21:12:46.632134 2026] [:error] [pid 26600:tid 26647] [client 4.232.92.101:4042] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "aduaTu1YwAZiXhQKLYpYmgAAAZI"]
[Sun Apr 12 21:12:47.458685 2026] [:error] [pid 26600:tid 26644] [client 4.232.92.101:31503] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "aduaT-1YwAZiXhQKLYpYnQAAAY8"]
[Sun Apr 12 21:12:48.304156 2026] [:error] [pid 26600:tid 26650] [client 4.232.92.101:39675] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "aduaUO1YwAZiXhQKLYpYoQAAAZU"]
[Sun Apr 12 21:12:49.797763 2026] [:error] [pid 25328:tid 25405] [client 4.232.92.101:34787] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "aduaUcxUaQZxT-e0YsBbzAAAAFc"]
[Sun Apr 12 21:12:50.450154 2026] [:error] [pid 25437:tid 25456] [client 4.232.92.101:29396] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "aduaUnf97wYZje1ep_NteAAAANE"]
[Sun Apr 12 21:12:51.320473 2026] [:error] [pid 26599:tid 26621] [client 4.232.92.101:27994] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "aduaU3G89LXoQbk_rwDgMAAAAVM"]
[Sun Apr 12 21:12:52.020674 2026] [:error] [pid 26599:tid 26612] [client 4.232.92.101:28010] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aduaVHG89LXoQbk_rwDgNgAAAUo"]
[Sun Apr 12 21:12:53.035046 2026] [:error] [pid 26599:tid 26606] [client 4.232.92.101:27192] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aduaVXG89LXoQbk_rwDgOgAAAUQ"]
[Sun Apr 12 21:12:54.029843 2026] [:error] [pid 25329:tid 25415] [client 4.232.92.101:29385] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aduaVmdcIYsS8Iyaj13AuAAAAJg"]
[Sun Apr 12 21:12:57.275057 2026] [:error] [pid 25329:tid 25413] [client 4.232.92.101:43406] [client 4.232.92.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aduaWWdcIYsS8Iyaj13AwQAAAJY"]
[Sun Apr 12 21:12:59.634879 2026] [:error] [pid 25329:tid 25390] [client 4.232.92.101:44601] File does not exist: /usr/local/apache/htdocs/suspended-page/curl.php
[Sun Apr 12 21:12:59.874442 2026] [:error] [pid 25329:tid 25376] [client 4.232.92.101:44601] File does not exist: /usr/local/apache/htdocs/suspended-page/sallu.php
[Sun Apr 12 21:13:00.108406 2026] [:error] [pid 25329:tid 25415] [client 4.232.92.101:44601] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Sun Apr 12 21:13:00.343310 2026] [:error] [pid 25329:tid 25378] [client 4.232.92.101:44601] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Apr 12 21:13:00.577746 2026] [:error] [pid 25329:tid 25407] [client 4.232.92.101:44601] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sun Apr 12 21:13:00.834721 2026] [:error] [pid 25329:tid 25399] [client 4.232.92.101:44601] File does not exist: /usr/local/apache/htdocs/suspended-page/goods_260325043000.php
[Sun Apr 12 21:13:01.112346 2026] [:error] [pid 25329:tid 25400] [client 4.232.92.101:44601] File does not exist: /usr/local/apache/htdocs/suspended-page/goods_260401065719.php
[Mon Apr 13 07:22:15.984763 2026] [:error] [pid 33942:tid 33986] [client 20.151.248.149:61462] File does not exist: /usr/local/apache/htdocs/suspended-page/ssh3ll.php
[Mon Apr 13 07:22:16.212040 2026] [:error] [pid 33942:tid 33980] [client 20.151.248.149:61462] File does not exist: /usr/local/apache/htdocs/suspended-page/kma.php
[Mon Apr 13 07:22:16.420948 2026] [:error] [pid 33942:tid 33994] [client 20.151.248.149:61462] File does not exist: /usr/local/apache/htdocs/suspended-page/mjq.php
[Mon Apr 13 07:22:16.629674 2026] [:error] [pid 33942:tid 33997] [client 20.151.248.149:61462] File does not exist: /usr/local/apache/htdocs/suspended-page/wpls.php
[Mon Apr 13 07:22:16.838019 2026] [:error] [pid 33942:tid 33995] [client 20.151.248.149:61462] File does not exist: /usr/local/apache/htdocs/suspended-page/i6z19N.php
[Mon Apr 13 07:22:17.048646 2026] [:error] [pid 33942:tid 34003] [client 20.151.248.149:61462] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Mon Apr 13 10:20:14.519233 2026] [:error] [pid 63406:tid 63415] [client 20.104.245.70:58007] File does not exist: /usr/local/apache/htdocs/suspended-page/ssh3ll.php
[Mon Apr 13 10:20:14.728768 2026] [:error] [pid 63406:tid 63412] [client 20.104.245.70:58007] File does not exist: /usr/local/apache/htdocs/suspended-page/kma.php
[Mon Apr 13 10:20:14.939353 2026] [:error] [pid 63406:tid 63416] [client 20.104.245.70:58007] File does not exist: /usr/local/apache/htdocs/suspended-page/mjq.php
[Mon Apr 13 10:20:15.145109 2026] [:error] [pid 63406:tid 63427] [client 20.104.245.70:58007] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpls.php"] [unique_id "adxS37HZEIkQ0Zmgp5pLowAAANA"]
[Mon Apr 13 10:20:15.605153 2026] [:error] [pid 63406:tid 63422] [client 20.104.245.70:58014] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpls.php"] [unique_id "adxS37HZEIkQ0Zmgp5pLpgAAAMs"]
[Mon Apr 13 10:20:16.115459 2026] [:error] [pid 7228:tid 7250] [client 20.104.245.70:58058] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpls.php"] [unique_id "adxS4AEnn1dQrOSHHNVSaAAAARQ"]
[Mon Apr 13 10:20:16.623542 2026] [:error] [pid 63311:tid 63385] [client 20.104.245.70:58083] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpls.php"] [unique_id "adxS4KHjrGN1MqBCVFlbOQAAAI4"]
[Mon Apr 13 10:20:17.140301 2026] [:error] [pid 7228:tid 7252] [client 20.104.245.70:58060] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/i6z19N.php"] [unique_id "adxS4QEnn1dQrOSHHNVScQAAARY"]
[Mon Apr 13 10:20:17.662008 2026] [:error] [pid 7228:tid 7240] [client 20.104.245.70:58077] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/i6z19N.php"] [unique_id "adxS4QEnn1dQrOSHHNVSdAAAAQo"]
[Mon Apr 13 10:20:18.129865 2026] [:error] [pid 7228:tid 7245] [client 20.104.245.70:58094] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/i6z19N.php"] [unique_id "adxS4gEnn1dQrOSHHNVSfAAAAQ8"]
[Mon Apr 13 10:20:18.598523 2026] [:error] [pid 63406:tid 63429] [client 20.104.245.70:57998] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/i6z19N.php"] [unique_id "adxS4rHZEIkQ0Zmgp5pLswAAANI"]
[Mon Apr 13 10:20:19.069611 2026] [:error] [pid 63406:tid 63412] [client 20.104.245.70:58111] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "adxS47HZEIkQ0Zmgp5pLtgAAAME"]
[Mon Apr 13 10:20:19.541936 2026] [:error] [pid 63311:tid 63379] [client 20.104.245.70:58109] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "adxS46HjrGN1MqBCVFlbPQAAAIg"]
[Mon Apr 13 10:20:20.107747 2026] [:error] [pid 63406:tid 63423] [client 20.104.245.70:58056] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "adxS5LHZEIkQ0Zmgp5pLvwAAAMw"]
[Mon Apr 13 10:20:20.626478 2026] [:error] [pid 63406:tid 63412] [client 20.104.245.70:58104] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "adxS5LHZEIkQ0Zmgp5pLxAAAAME"]
[Mon Apr 13 11:32:51.880130 2026] [:error] [pid 63309:tid 63332] [client 172.213.152.246:21510] File does not exist: /usr/local/apache/htdocs/suspended-page/ssh3ll.php
[Mon Apr 13 11:32:52.111311 2026] [:error] [pid 63309:tid 63330] [client 172.213.152.246:21510] File does not exist: /usr/local/apache/htdocs/suspended-page/kma.php
[Mon Apr 13 11:32:52.343983 2026] [:error] [pid 63309:tid 63327] [client 172.213.152.246:21510] File does not exist: /usr/local/apache/htdocs/suspended-page/mjq.php
[Mon Apr 13 11:32:52.575462 2026] [:error] [pid 63309:tid 63320] [client 172.213.152.246:21510] File does not exist: /usr/local/apache/htdocs/suspended-page/wpls.php
[Mon Apr 13 11:32:52.808337 2026] [:error] [pid 63309:tid 63328] [client 172.213.152.246:21510] File does not exist: /usr/local/apache/htdocs/suspended-page/i6z19N.php
[Mon Apr 13 11:32:53.039844 2026] [:error] [pid 63309:tid 63313] [client 172.213.152.246:21510] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Mon Apr 13 19:06:28.485784 2026] [:error] [pid 57183:tid 57204] [client 74.248.132.51:46846] File does not exist: /usr/local/apache/htdocs/suspended-page/tymi.php
[Mon Apr 13 19:06:28.742929 2026] [:error] [pid 57183:tid 57185] [client 74.248.132.51:46846] File does not exist: /usr/local/apache/htdocs/suspended-page/4GrJSiwkF3A.php
[Mon Apr 13 19:06:29.467432 2026] [:error] [pid 57183:tid 57198] [client 74.248.132.51:46846] File does not exist: /usr/local/apache/htdocs/suspended-page/SS72_kKKjT.php
[Mon Apr 13 19:06:29.723130 2026] [:error] [pid 57183:tid 57206] [client 74.248.132.51:46846] File does not exist: /usr/local/apache/htdocs/suspended-page/wkogn.php
[Mon Apr 13 19:06:29.979013 2026] [:error] [pid 57183:tid 57187] [client 74.248.132.51:46846] File does not exist: /usr/local/apache/htdocs/suspended-page/hwjtry0zd1fzeakcuzn8Cdefault.php
[Mon Apr 13 19:06:30.268479 2026] [:error] [pid 57183:tid 57209] [client 74.248.132.51:46846] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Mon Apr 13 19:06:30.523843 2026] [:error] [pid 57183:tid 57203] [client 74.248.132.51:46846] File does not exist: /usr/local/apache/htdocs/suspended-page/oLEzRVqmJJPFSucdefault.php
[Mon Apr 13 19:06:30.780423 2026] [:error] [pid 57183:tid 57191] [client 74.248.132.51:46846] File does not exist: /usr/local/apache/htdocs/suspended-page/wwdgl.php
[Mon Apr 13 19:06:31.037160 2026] [:error] [pid 57183:tid 57201] [client 74.248.132.51:46846] File does not exist: /usr/local/apache/htdocs/suspended-page/3akp.php
[Mon Apr 13 19:06:31.326415 2026] [:error] [pid 57183:tid 57189] [client 74.248.132.51:46846] File does not exist: /usr/local/apache/htdocs/suspended-page/HLA-dd.php
[Mon Apr 13 19:06:31.588405 2026] [:error] [pid 57183:tid 57195] [client 74.248.132.51:46846] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adzONzDO3t8R5NaxzYQNWwAAAUo"]
[Mon Apr 13 19:06:32.903543 2026] [:error] [pid 63406:tid 63429] [client 74.248.132.51:7788] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adzOOLHZEIkQ0Zmgp5ps0AAAANI"]
[Mon Apr 13 19:06:36.617562 2026] [:error] [pid 63311:tid 63394] [client 74.248.132.51:57806] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adzOPKHjrGN1MqBCVFnrZQAAAJc"]
[Mon Apr 13 19:06:37.787714 2026] [:error] [pid 63406:tid 63411] [client 74.248.132.51:50114] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adzOPbHZEIkQ0Zmgp5ps2wAAAMA"]
[Mon Apr 13 19:06:39.492088 2026] [:error] [pid 63406:tid 63435] [client 74.248.132.51:48186] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cdn3.php"] [unique_id "adzOP7HZEIkQ0Zmgp5ps4QAAANg"]
[Mon Apr 13 19:06:40.919752 2026] [:error] [pid 63406:tid 63419] [client 74.248.132.51:53309] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cdn3.php"] [unique_id "adzOQLHZEIkQ0Zmgp5ps5wAAAMg"]
[Mon Apr 13 19:06:42.149465 2026] [:error] [pid 63406:tid 63429] [client 74.248.132.51:53272] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cdn3.php"] [unique_id "adzOQrHZEIkQ0Zmgp5ps7AAAANI"]
[Mon Apr 13 19:06:44.839935 2026] [:error] [pid 63311:tid 63382] [client 74.248.132.51:7216] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cdn3.php"] [unique_id "adzORKHjrGN1MqBCVFnraAAAAIs"]
[Mon Apr 13 19:06:46.076548 2026] [:error] [pid 7228:tid 7250] [client 74.248.132.51:50124] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adzORgEnn1dQrOSHHNV5NgAAARQ"]
[Mon Apr 13 19:06:47.232673 2026] [:error] [pid 9314:tid 9316] [client 74.248.132.51:48579] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adzOR2_r4W8fX2GWyGT0zQAAAYA"]
[Mon Apr 13 19:06:48.677069 2026] [:error] [pid 63309:tid 63314] [client 74.248.132.51:7193] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adzOSEpIKZ10weXpf0UYbAAAAAE"]
[Mon Apr 13 19:06:50.668704 2026] [:error] [pid 63309:tid 63324] [client 74.248.132.51:49117] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adzOSkpIKZ10weXpf0UYcAAAAAs"]
[Mon Apr 13 19:06:51.494690 2026] [:error] [pid 9314:tid 9327] [client 74.248.132.51:7394] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "adzOS2_r4W8fX2GWyGT01QAAAYs"]
[Mon Apr 13 19:06:57.262112 2026] [:error] [pid 63406:tid 63434] [client 74.248.132.51:48134] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "adzOUbHZEIkQ0Zmgp5ptDQAAANc"]
[Mon Apr 13 19:06:59.564592 2026] [:error] [pid 63406:tid 63435] [client 74.248.132.51:48146] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "adzOU7HZEIkQ0Zmgp5ptFgAAANg"]
[Mon Apr 13 19:07:02.082277 2026] [:error] [pid 57183:tid 57201] [client 74.248.132.51:54672] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "adzOVjDO3t8R5NaxzYQNogAAAVA"]
[Mon Apr 13 19:07:04.181875 2026] [:error] [pid 63406:tid 63413] [client 74.248.132.51:50607] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "adzOWLHZEIkQ0Zmgp5ptHgAAAMI"]
[Mon Apr 13 19:07:05.592677 2026] [:error] [pid 9314:tid 9330] [client 74.248.132.51:7475] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "adzOWW_r4W8fX2GWyGT03gAAAY4"]
[Mon Apr 13 19:07:08.251798 2026] [:error] [pid 57183:tid 57209] [client 74.248.132.51:54660] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "adzOXDDO3t8R5NaxzYQNsAAAAVg"]
[Mon Apr 13 19:07:11.868560 2026] [:error] [pid 9314:tid 9326] [client 74.248.132.51:7881] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "adzOX2_r4W8fX2GWyGT05AAAAYo"]
[Mon Apr 13 19:07:20.936659 2026] [:error] [pid 9314:tid 9325] [client 74.248.132.51:61976] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "adzOaG_r4W8fX2GWyGT07gAAAYk"]
[Mon Apr 13 19:07:23.541172 2026] [:error] [pid 63309:tid 63327] [client 74.248.132.51:57758] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "adzOa0pIKZ10weXpf0UYewAAAA4"]
[Mon Apr 13 19:07:25.632647 2026] [:error] [pid 57183:tid 57191] [client 74.248.132.51:49679] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "adzObTDO3t8R5NaxzYQNvgAAAUY"]
[Mon Apr 13 19:07:27.678856 2026] [:error] [pid 57183:tid 57207] [client 74.248.132.51:7476] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "adzObzDO3t8R5NaxzYQNwAAAAVY"]
[Mon Apr 13 19:07:28.598089 2026] [:error] [pid 63310:tid 63353] [client 74.248.132.51:59773] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "adzOcHoXpRU5ztmwPjJGlAAAAEk"]
[Mon Apr 13 19:07:30.509518 2026] [:error] [pid 63309:tid 63314] [client 74.248.132.51:54680] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "adzOckpIKZ10weXpf0UYgwAAAAE"]
[Mon Apr 13 19:07:31.556518 2026] [:error] [pid 63406:tid 63435] [client 74.248.132.51:7587] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Mon Apr 13 19:07:31.812028 2026] [:error] [pid 63406:tid 63426] [client 74.248.132.51:7587] File does not exist: /usr/local/apache/htdocs/suspended-page/ylzed0twj8l9drdbchc1oocfCdefault.php
[Mon Apr 13 19:07:32.067730 2026] [:error] [pid 63406:tid 63417] [client 74.248.132.51:7587] File does not exist: /usr/local/apache/htdocs/suspended-page/RIP.php
[Mon Apr 13 19:07:32.323797 2026] [:error] [pid 63406:tid 63418] [client 74.248.132.51:7587] File does not exist: /usr/local/apache/htdocs/suspended-page/no18.php
[Mon Apr 13 19:07:32.579467 2026] [:error] [pid 63406:tid 63415] [client 74.248.132.51:7587] File does not exist: /usr/local/apache/htdocs/suspended-page/blqjs.php
[Mon Apr 13 19:07:33.202422 2026] [:error] [pid 63406:tid 63430] [client 74.248.132.51:7587] File does not exist: /usr/local/apache/htdocs/suspended-page/sk25_1.php
[Mon Apr 13 19:07:33.458072 2026] [:error] [pid 63406:tid 63434] [client 74.248.132.51:7587] File does not exist: /usr/local/apache/htdocs/suspended-page/fetch.php
[Mon Apr 13 19:07:34.118689 2026] [:error] [pid 63406:tid 63431] [client 74.248.132.51:7587] File does not exist: /usr/local/apache/htdocs/suspended-page/eFpU3yHnriNNLtvdefault.php
[Mon Apr 13 19:07:34.376878 2026] [:error] [pid 63406:tid 63425] [client 74.248.132.51:7587] File does not exist: /usr/local/apache/htdocs/suspended-page/2nzyHnOkEg.php
[Mon Apr 13 19:07:34.632928 2026] [:error] [pid 63406:tid 63419] [client 74.248.132.51:7587] File does not exist: /usr/local/apache/htdocs/suspended-page/oircv.php
[Mon Apr 13 19:07:34.889150 2026] [:error] [pid 63406:tid 63420] [client 74.248.132.51:7587] File does not exist: /usr/local/apache/htdocs/suspended-page/blnux.php
[Mon Apr 13 19:07:35.143353 2026] [:error] [pid 63406:tid 63416] [client 74.248.132.51:7587] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adzOd7HZEIkQ0Zmgp5ptWwAAAMU"]
[Mon Apr 13 19:07:37.356293 2026] [:error] [pid 9314:tid 9324] [client 74.248.132.51:57756] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adzOeW_r4W8fX2GWyGT0_AAAAYg"]
[Mon Apr 13 19:07:39.029755 2026] [:error] [pid 7228:tid 7236] [client 74.248.132.51:7562] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adzOewEnn1dQrOSHHNV5TAAAAQY"]
[Mon Apr 13 19:07:41.481469 2026] [:error] [pid 63310:tid 63368] [client 74.248.132.51:52913] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adzOfXoXpRU5ztmwPjJGmQAAAFg"]
[Mon Apr 13 19:07:42.904699 2026] [:error] [pid 63310:tid 63367] [client 74.248.132.51:52873] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Spow_SRw.php"] [unique_id "adzOfnoXpRU5ztmwPjJGmwAAAFc"]
[Mon Apr 13 19:07:43.721701 2026] [:error] [pid 63311:tid 63390] [client 74.248.132.51:61987] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Spow_SRw.php"] [unique_id "adzOf6HjrGN1MqBCVFnrjAAAAJM"]
[Mon Apr 13 19:07:45.057741 2026] [:error] [pid 9314:tid 9334] [client 74.248.132.51:7440] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Spow_SRw.php"] [unique_id "adzOgW_r4W8fX2GWyGT1BwAAAZI"]
[Mon Apr 13 19:07:45.957595 2026] [:error] [pid 63311:tid 63387] [client 74.248.132.51:7607] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Spow_SRw.php"] [unique_id "adzOgaHjrGN1MqBCVFnrlAAAAJA"]
[Mon Apr 13 19:07:47.087428 2026] [:error] [pid 57183:tid 57208] [client 74.248.132.51:61511] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albrt.php"] [unique_id "adzOgzDO3t8R5NaxzYQN0AAAAVc"]
[Mon Apr 13 19:07:48.300061 2026] [:error] [pid 57183:tid 57189] [client 74.248.132.51:7576] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albrt.php"] [unique_id "adzOhDDO3t8R5NaxzYQN1QAAAUQ"]
[Mon Apr 13 19:07:49.422359 2026] [:error] [pid 57183:tid 57204] [client 74.248.132.51:62629] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albrt.php"] [unique_id "adzOhTDO3t8R5NaxzYQN2gAAAVM"]
[Mon Apr 13 19:07:50.283851 2026] [:error] [pid 63309:tid 63337] [client 74.248.132.51:61954] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albrt.php"] [unique_id "adzOhkpIKZ10weXpf0UYkgAAABg"]
[Mon Apr 13 19:07:51.145325 2026] [:error] [pid 63311:tid 63391] [client 74.248.132.51:61555] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxivicLhot.php"] [unique_id "adzOh6HjrGN1MqBCVFnrlQAAAJQ"]
[Mon Apr 13 19:07:52.001156 2026] [:error] [pid 9314:tid 9340] [client 74.248.132.51:62620] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxivicLhot.php"] [unique_id "adzOh2_r4W8fX2GWyGT1EgAAAZg"]
[Mon Apr 13 19:07:52.738896 2026] [:error] [pid 9314:tid 9316] [client 74.248.132.51:63873] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxivicLhot.php"] [unique_id "adzOiG_r4W8fX2GWyGT1FgAAAYA"]
[Mon Apr 13 19:07:53.650126 2026] [:error] [pid 9314:tid 9322] [client 74.248.132.51:50559] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxivicLhot.php"] [unique_id "adzOiW_r4W8fX2GWyGT1HQAAAYY"]
[Mon Apr 13 19:07:54.618707 2026] [:error] [pid 63406:tid 63426] [client 74.248.132.51:63878] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "adzOirHZEIkQ0Zmgp5ptZwAAAM8"]
[Mon Apr 13 19:07:55.453317 2026] [:error] [pid 57183:tid 57202] [client 74.248.132.51:50508] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "adzOizDO3t8R5NaxzYQN4gAAAVE"]
[Mon Apr 13 19:07:56.585366 2026] [:error] [pid 9314:tid 9319] [client 74.248.132.51:61512] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "adzOjG_r4W8fX2GWyGT1IgAAAYM"]
[Mon Apr 13 19:07:57.566111 2026] [:error] [pid 63310:tid 63366] [client 74.248.132.51:49722] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "adzOjXoXpRU5ztmwPjJGpgAAAFY"]
[Mon Apr 13 19:07:59.058408 2026] [:error] [pid 7228:tid 7234] [client 74.248.132.51:52916] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acc.php"] [unique_id "adzOjwEnn1dQrOSHHNV5WwAAAQQ"]
[Mon Apr 13 19:08:00.455683 2026] [:error] [pid 63310:tid 63361] [client 74.248.132.51:52918] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acc.php"] [unique_id "adzOkHoXpRU5ztmwPjJGrAAAAFE"]
[Mon Apr 13 19:08:01.628150 2026] [:error] [pid 63406:tid 63414] [client 74.248.132.51:50556] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acc.php"] [unique_id "adzOkbHZEIkQ0Zmgp5pteAAAAMM"]
[Mon Apr 13 19:08:02.933382 2026] [:error] [pid 9314:tid 9337] [client 74.248.132.51:54750] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acc.php"] [unique_id "adzOkm_r4W8fX2GWyGT1KAAAAZU"]
[Mon Apr 13 19:08:05.098181 2026] [:error] [pid 7228:tid 7247] [client 74.248.132.51:7582] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wxeyc.php"] [unique_id "adzOlQEnn1dQrOSHHNV5ZwAAARE"]
[Mon Apr 13 19:08:07.357313 2026] [:error] [pid 63309:tid 63335] [client 74.248.132.51:7572] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wxeyc.php"] [unique_id "adzOl0pIKZ10weXpf0UYlQAAABY"]
[Mon Apr 13 19:08:08.821378 2026] [:error] [pid 7228:tid 7246] [client 74.248.132.51:50496] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wxeyc.php"] [unique_id "adzOmAEnn1dQrOSHHNV5bQAAARA"]
[Mon Apr 13 19:08:09.645935 2026] [:error] [pid 57183:tid 57192] [client 74.248.132.51:50530] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wxeyc.php"] [unique_id "adzOmTDO3t8R5NaxzYQN6wAAAUc"]
[Mon Apr 13 19:08:10.549271 2026] [:error] [pid 63311:tid 63387] [client 74.248.132.51:8162] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "adzOmqHjrGN1MqBCVFnrowAAAJA"]
[Mon Apr 13 19:08:11.461400 2026] [:error] [pid 63310:tid 63351] [client 74.248.132.51:63923] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "adzOm3oXpRU5ztmwPjJGsgAAAEc"]
[Mon Apr 13 19:08:12.349255 2026] [:error] [pid 57183:tid 57209] [client 74.248.132.51:8187] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "adzOnDDO3t8R5NaxzYQN8QAAAVg"]
[Mon Apr 13 19:08:13.279243 2026] [:error] [pid 63406:tid 63423] [client 74.248.132.51:62602] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "adzOnbHZEIkQ0Zmgp5ptkAAAAMw"]
[Mon Apr 13 19:08:14.113003 2026] [:error] [pid 63406:tid 63414] [client 74.248.132.51:63927] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "adzOnrHZEIkQ0Zmgp5ptkgAAAMM"]
[Mon Apr 13 19:08:14.932355 2026] [:error] [pid 63406:tid 63425] [client 74.248.132.51:46422] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "adzOnrHZEIkQ0Zmgp5ptmAAAAM4"]
[Mon Apr 13 19:08:15.908278 2026] [:error] [pid 63311:tid 63395] [client 74.248.132.51:62596] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "adzOn6HjrGN1MqBCVFnrpwAAAJg"]
[Mon Apr 13 19:08:16.958709 2026] [:error] [pid 63309:tid 63329] [client 74.248.132.51:50507] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "adzOoEpIKZ10weXpf0UYlwAAABA"]
[Mon Apr 13 19:08:17.749562 2026] [:error] [pid 63311:tid 63391] [client 74.248.132.51:50516] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fyflv.php"] [unique_id "adzOoaHjrGN1MqBCVFnrqgAAAJQ"]
[Mon Apr 13 19:08:18.886626 2026] [:error] [pid 7228:tid 7250] [client 74.248.132.51:50503] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fyflv.php"] [unique_id "adzOogEnn1dQrOSHHNV5eQAAARQ"]
[Mon Apr 13 19:08:19.871884 2026] [:error] [pid 63311:tid 63388] [client 74.248.132.51:65236] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fyflv.php"] [unique_id "adzOo6HjrGN1MqBCVFnrrwAAAJE"]
[Mon Apr 13 19:08:21.020932 2026] [:error] [pid 9314:tid 9334] [client 74.248.132.51:50521] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fyflv.php"] [unique_id "adzOpW_r4W8fX2GWyGT1QQAAAZI"]
[Mon Apr 13 19:08:22.417795 2026] [:error] [pid 63406:tid 63430] [client 74.248.132.51:62644] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-942.php"] [unique_id "adzOprHZEIkQ0Zmgp5ptogAAANM"]
[Mon Apr 13 19:08:23.371161 2026] [:error] [pid 57183:tid 57198] [client 74.248.132.51:50541] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-942.php"] [unique_id "adzOpzDO3t8R5NaxzYQN_QAAAU0"]
[Mon Apr 13 19:08:24.447153 2026] [:error] [pid 63311:tid 63377] [client 74.248.132.51:63902] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-942.php"] [unique_id "adzOqKHjrGN1MqBCVFnrsgAAAIY"]
[Mon Apr 13 19:08:25.894589 2026] [:error] [pid 63406:tid 63429] [client 74.248.132.51:50512] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-942.php"] [unique_id "adzOqbHZEIkQ0Zmgp5ptqgAAANI"]
[Mon Apr 13 19:08:27.822894 2026] [:error] [pid 7228:tid 7241] [client 74.248.132.51:54724] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sde.php"] [unique_id "adzOqwEnn1dQrOSHHNV5fQAAAQs"]
[Mon Apr 13 19:08:30.689196 2026] [:error] [pid 63310:tid 63366] [client 74.248.132.51:63906] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sde.php"] [unique_id "adzOrnoXpRU5ztmwPjJGuQAAAFY"]
[Mon Apr 13 19:08:31.947573 2026] [:error] [pid 7228:tid 7244] [client 74.248.132.51:54762] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sde.php"] [unique_id "adzOrwEnn1dQrOSHHNV5hQAAAQ4"]
[Mon Apr 13 19:08:34.518393 2026] [:error] [pid 63406:tid 63414] [client 74.248.132.51:50550] File does not exist: /usr/local/apache/htdocs/suspended-page/sde.php
[Mon Apr 13 19:08:34.775342 2026] [:error] [pid 63406:tid 63432] [client 74.248.132.51:50550] File does not exist: /usr/local/apache/htdocs/suspended-page/wpb.php
[Mon Apr 13 19:08:35.033425 2026] [:error] [pid 63406:tid 63425] [client 74.248.132.51:50550] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Mon Apr 13 19:08:35.291597 2026] [:error] [pid 63406:tid 63413] [client 74.248.132.51:50550] File does not exist: /usr/local/apache/htdocs/suspended-page/9EaklzMysJ.php
[Mon Apr 13 19:08:35.559078 2026] [:error] [pid 63406:tid 63417] [client 74.248.132.51:50550] File does not exist: /usr/local/apache/htdocs/suspended-page/wpxl.php
[Mon Apr 13 19:08:35.846194 2026] [:error] [pid 63406:tid 63420] [client 74.248.132.51:50550] File does not exist: /usr/local/apache/htdocs/suspended-page/s3FiyJ2WGCnF0p1default.php
[Mon Apr 13 19:08:36.118975 2026] [:error] [pid 63406:tid 63418] [client 74.248.132.51:50550] File does not exist: /usr/local/apache/htdocs/suspended-page/bfil.php
[Mon Apr 13 19:08:36.380146 2026] [:error] [pid 63406:tid 63426] [client 74.248.132.51:50550] File does not exist: /usr/local/apache/htdocs/suspended-page/lb.php
[Mon Apr 13 19:08:36.640041 2026] [:error] [pid 63406:tid 63423] [client 74.248.132.51:50550] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Mon Apr 13 19:08:36.896549 2026] [:error] [pid 63406:tid 63429] [client 74.248.132.51:50550] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Mon Apr 13 19:08:37.174222 2026] [:error] [pid 63406:tid 63431] [client 74.248.132.51:50550] File does not exist: /usr/local/apache/htdocs/suspended-page/p14rAeWytPdH5hZcscCFdefault.php
[Mon Apr 13 19:08:37.427395 2026] [:error] [pid 63406:tid 63412] [client 74.248.132.51:50550] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/iindv.php"] [unique_id "adzOtbHZEIkQ0Zmgp5ptzAAAAME"]
[Mon Apr 13 19:08:42.107149 2026] [:error] [pid 9314:tid 9340] [client 74.248.132.51:60342] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/iindv.php"] [unique_id "adzOum_r4W8fX2GWyGT1UwAAAZg"]
[Mon Apr 13 19:08:45.371538 2026] [:error] [pid 63406:tid 63422] [client 74.248.132.51:8175] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/iindv.php"] [unique_id "adzOvbHZEIkQ0Zmgp5pt2gAAAMs"]
[Mon Apr 13 19:08:47.824832 2026] [:error] [pid 63309:tid 63318] [client 74.248.132.51:47183] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/iindv.php"] [unique_id "adzOv0pIKZ10weXpf0UYoQAAAAU"]
[Mon Apr 13 19:08:49.192846 2026] [:error] [pid 63309:tid 63335] [client 74.248.132.51:52975] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "adzOwUpIKZ10weXpf0UYpAAAABY"]
[Mon Apr 13 19:08:50.249493 2026] [:error] [pid 7228:tid 7250] [client 74.248.132.51:65235] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "adzOwgEnn1dQrOSHHNV5jAAAARQ"]
[Mon Apr 13 19:08:51.209605 2026] [:error] [pid 63311:tid 63374] [client 74.248.132.51:46414] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "adzOw6HjrGN1MqBCVFnrygAAAIM"]
[Mon Apr 13 19:08:52.499709 2026] [:error] [pid 63406:tid 63418] [client 74.248.132.51:62602] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "adzOxLHZEIkQ0Zmgp5pt5gAAAMc"]
[Mon Apr 13 19:08:54.595370 2026] [:error] [pid 63310:tid 63345] [client 74.248.132.51:49163] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adzOxnoXpRU5ztmwPjJGywAAAEE"]
[Mon Apr 13 19:08:56.375012 2026] [:error] [pid 63406:tid 63411] [client 74.248.132.51:60344] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adzOyLHZEIkQ0Zmgp5puCQAAAMA"]
[Mon Apr 13 19:09:00.391325 2026] [:error] [pid 57183:tid 57194] [client 74.248.132.51:52990] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adzOzDDO3t8R5NaxzYQObQAAAUk"]
[Mon Apr 13 19:09:01.510991 2026] [:error] [pid 57183:tid 57207] [client 74.248.132.51:60341] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adzOzTDO3t8R5NaxzYQObwAAAVY"]
[Mon Apr 13 19:09:03.684331 2026] [:error] [pid 63406:tid 63435] [client 74.248.132.51:46415] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adzOz7HZEIkQ0Zmgp5puGgAAANg"]
[Mon Apr 13 19:09:05.166624 2026] [:error] [pid 63406:tid 63427] [client 74.248.132.51:52974] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adzO0bHZEIkQ0Zmgp5puHAAAANA"]
[Mon Apr 13 19:09:08.297262 2026] [:error] [pid 63311:tid 63372] [client 74.248.132.51:65238] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adzO1KHjrGN1MqBCVFnr0wAAAIE"]
[Mon Apr 13 19:09:10.331164 2026] [:error] [pid 63406:tid 63412] [client 74.248.132.51:49157] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adzO1rHZEIkQ0Zmgp5puIwAAAME"]
[Mon Apr 13 19:09:11.777168 2026] [:error] [pid 9314:tid 9330] [client 74.248.132.51:46453] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "adzO12_r4W8fX2GWyGT1jgAAAY4"]
[Mon Apr 13 19:09:12.608002 2026] [:error] [pid 63310:tid 63344] [client 74.248.132.51:46401] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "adzO2HoXpRU5ztmwPjJG0QAAAEA"]
[Mon Apr 13 19:09:13.771030 2026] [:error] [pid 63406:tid 63418] [client 74.248.132.51:60340] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "adzO2bHZEIkQ0Zmgp5puKgAAAMc"]
[Mon Apr 13 19:09:14.949424 2026] [:error] [pid 9314:tid 9324] [client 74.248.132.51:65226] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "adzO2m_r4W8fX2GWyGT1lgAAAYg"]
[Mon Apr 13 19:09:16.931097 2026] [:error] [pid 57183:tid 57187] [client 74.248.132.51:47181] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adzO3DDO3t8R5NaxzYQOlAAAAUI"]
[Mon Apr 13 19:09:18.099732 2026] [:error] [pid 57183:tid 57195] [client 74.248.132.51:46457] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adzO3jDO3t8R5NaxzYQOlwAAAUo"]
[Mon Apr 13 19:09:20.362413 2026] [:error] [pid 9314:tid 9323] [client 74.248.132.51:49201] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adzO4G_r4W8fX2GWyGT1oQAAAYc"]
[Mon Apr 13 19:09:22.437198 2026] [:error] [pid 63406:tid 63429] [client 74.248.132.51:60337] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adzO4rHZEIkQ0Zmgp5puLwAAANI"]
[Mon Apr 13 19:09:23.702002 2026] [:error] [pid 63406:tid 63433] [client 74.248.132.51:64387] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "adzO47HZEIkQ0Zmgp5puNQAAANY"]
[Mon Apr 13 19:09:25.630420 2026] [:error] [pid 57183:tid 57195] [client 74.248.132.51:8180] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "adzO5TDO3t8R5NaxzYQOngAAAUo"]
[Mon Apr 13 19:09:27.769080 2026] [:error] [pid 57183:tid 57209] [client 74.248.132.51:57164] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "adzO5zDO3t8R5NaxzYQOnwAAAVg"]
[Mon Apr 13 19:09:28.770606 2026] [:error] [pid 63309:tid 63328] [client 74.248.132.51:64431] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "adzO6EpIKZ10weXpf0UYtAAAAA8"]
[Mon Apr 13 19:09:29.623184 2026] [:error] [pid 63311:tid 63378] [client 74.248.132.51:51357] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adzO6aHjrGN1MqBCVFnr4QAAAIc"]
[Mon Apr 13 19:09:30.568814 2026] [:error] [pid 63311:tid 63388] [client 74.248.132.51:64384] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adzO6qHjrGN1MqBCVFnr6QAAAJE"]
[Mon Apr 13 19:09:31.392896 2026] [:error] [pid 57183:tid 57201] [client 74.248.132.51:49155] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adzO6zDO3t8R5NaxzYQOpAAAAVA"]
[Mon Apr 13 19:09:32.315599 2026] [:error] [pid 63309:tid 63321] [client 74.248.132.51:52955] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adzO7EpIKZ10weXpf0UYtwAAAAg"]
[Mon Apr 13 19:09:33.195794 2026] [:error] [pid 57183:tid 57193] [client 74.248.132.51:57163] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adzO7TDO3t8R5NaxzYQOqAAAAUg"]
[Mon Apr 13 19:09:33.654961 2026] [:error] [pid 57183:tid 57201] [client 74.248.132.51:49155] [client 74.248.132.51] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "135.181.3.246_58fc317f575190e4eee83ef012db0cf2a46315d3"): Internal error (specific information not available) [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adzO6zDO3t8R5NaxzYQOpAAAAVA"]
[Mon Apr 13 19:09:34.698535 2026] [:error] [pid 57183:tid 57205] [client 74.248.132.51:8120] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adzO7jDO3t8R5NaxzYQOsAAAAVQ"]
[Mon Apr 13 19:09:35.938962 2026] [:error] [pid 57183:tid 57193] [client 74.248.132.51:8182] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adzO7zDO3t8R5NaxzYQOtwAAAUg"]
[Mon Apr 13 19:09:38.187449 2026] [:error] [pid 63310:tid 63352] [client 74.248.132.51:8158] File does not exist: /usr/local/apache/htdocs/suspended-page/hanyatersenyum.php
[Mon Apr 13 19:09:39.024557 2026] [:error] [pid 63310:tid 63354] [client 74.248.132.51:8158] File does not exist: /usr/local/apache/htdocs/suspended-page/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php
[Mon Apr 13 19:09:39.280543 2026] [:error] [pid 63310:tid 63347] [client 74.248.132.51:8158] File does not exist: /usr/local/apache/htdocs/suspended-page/upll22.php
[Mon Apr 13 19:09:39.536608 2026] [:error] [pid 63310:tid 63356] [client 74.248.132.51:8158] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Mon Apr 13 19:09:39.799658 2026] [:error] [pid 63310:tid 63368] [client 74.248.132.51:8158] File does not exist: /usr/local/apache/htdocs/suspended-page/byrgo.php
[Mon Apr 13 19:09:40.055967 2026] [:error] [pid 63310:tid 63355] [client 74.248.132.51:8158] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-243.php
[Mon Apr 13 19:09:40.328394 2026] [:error] [pid 63310:tid 63367] [client 74.248.132.51:8158] File does not exist: /usr/local/apache/htdocs/suspended-page/pm90apbv3v5fvgkbguyiCdefault.php
[Mon Apr 13 19:09:40.610415 2026] [:error] [pid 63310:tid 63359] [client 74.248.132.51:8158] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX1.php
[Mon Apr 13 19:09:40.866613 2026] [:error] [pid 63310:tid 63366] [client 74.248.132.51:8158] File does not exist: /usr/local/apache/htdocs/suspended-page/gvg1bvpsgtot1rpklCdefault.php
[Mon Apr 13 19:09:41.121556 2026] [:error] [pid 63310:tid 63360] [client 74.248.132.51:8158] File does not exist: /usr/local/apache/htdocs/suspended-page/6xBAm3vODE05BSzkJZRAws.php
[Mon Apr 13 19:09:41.824911 2026] [:error] [pid 63310:tid 63363] [client 74.248.132.51:8158] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Mon Apr 13 19:09:42.116953 2026] [:error] [pid 63310:tid 63346] [client 74.248.132.51:8158] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "adzO9noXpRU5ztmwPjJG8wAAAEI"]
[Mon Apr 13 19:09:43.600437 2026] [:error] [pid 9314:tid 9318] [client 74.248.132.51:52491] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "adzO92_r4W8fX2GWyGT1vwAAAYI"]
[Mon Apr 13 19:09:45.057159 2026] [:error] [pid 63309:tid 63333] [client 74.248.132.51:54381] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "adzO-UpIKZ10weXpf0UYvwAAABQ"]
[Mon Apr 13 19:09:46.161996 2026] [:error] [pid 63406:tid 63415] [client 74.248.132.51:54344] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "adzO-rHZEIkQ0Zmgp5puSQAAAMQ"]
[Mon Apr 13 19:09:47.069637 2026] [:error] [pid 63309:tid 63328] [client 74.248.132.51:51666] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adzO-0pIKZ10weXpf0UYwAAAAA8"]
[Mon Apr 13 19:09:47.888996 2026] [:error] [pid 63406:tid 63429] [client 74.248.132.51:52493] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adzO-7HZEIkQ0Zmgp5puTgAAANI"]
[Mon Apr 13 19:09:48.793331 2026] [:error] [pid 63406:tid 63416] [client 74.248.132.51:56000] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adzO_LHZEIkQ0Zmgp5puTwAAAMU"]
[Mon Apr 13 19:09:50.027947 2026] [:error] [pid 63311:tid 63390] [client 74.248.132.51:52553] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adzO_qHjrGN1MqBCVFnr8QAAAJM"]
[Mon Apr 13 19:09:50.826398 2026] [:error] [pid 63406:tid 63424] [client 74.248.132.51:55948] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "adzO_rHZEIkQ0Zmgp5puVQAAAM0"]
[Mon Apr 13 19:09:51.747536 2026] [:error] [pid 63406:tid 63414] [client 74.248.132.51:51652] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "adzO_7HZEIkQ0Zmgp5puWQAAAMM"]
[Mon Apr 13 19:09:52.836525 2026] [:error] [pid 63310:tid 63350] [client 74.248.132.51:47232] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "adzPAHoXpRU5ztmwPjJG-AAAAEY"]
[Mon Apr 13 19:09:54.107391 2026] [:error] [pid 7228:tid 7240] [client 74.248.132.51:56539] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "adzPAgEnn1dQrOSHHNV5ygAAAQo"]
[Mon Apr 13 19:09:55.207189 2026] [:error] [pid 63406:tid 63430] [client 74.248.132.51:47261] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "adzPA7HZEIkQ0Zmgp5puYgAAANM"]
[Mon Apr 13 19:09:56.695160 2026] [:error] [pid 63311:tid 63371] [client 74.248.132.51:59097] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "adzPBKHjrGN1MqBCVFnr-QAAAIA"]
[Mon Apr 13 19:10:00.617004 2026] [:error] [pid 63406:tid 63434] [client 74.248.132.51:56565] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "adzPCLHZEIkQ0Zmgp5pueAAAANc"]
[Mon Apr 13 19:10:06.257217 2026] [:error] [pid 63309:tid 63320] [client 74.248.132.51:7499] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "adzPDkpIKZ10weXpf0UYzQAAAAc"]
[Mon Apr 13 19:10:08.838676 2026] [:error] [pid 63406:tid 63432] [client 74.248.132.51:8036] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "adzPELHZEIkQ0Zmgp5pulgAAANU"]
[Mon Apr 13 19:10:12.045401 2026] [:error] [pid 9314:tid 9333] [client 74.248.132.51:7633] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "adzPFG_r4W8fX2GWyGT13QAAAZE"]
[Mon Apr 13 19:10:14.083537 2026] [:error] [pid 63406:tid 63412] [client 74.248.132.51:54338] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "adzPFrHZEIkQ0Zmgp5pupwAAAME"]
[Mon Apr 13 19:10:16.319548 2026] [:error] [pid 57183:tid 57201] [client 74.248.132.51:7620] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "adzPGDDO3t8R5NaxzYQO8QAAAVA"]
[Mon Apr 13 19:10:18.347076 2026] [:error] [pid 9314:tid 9320] [client 74.248.132.51:52499] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "adzPGm_r4W8fX2GWyGT16wAAAYQ"]
[Mon Apr 13 19:10:19.094765 2026] [:error] [pid 7228:tid 7230] [client 74.248.132.51:54393] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "adzPGwEnn1dQrOSHHNV56wAAAQA"]
[Mon Apr 13 19:10:19.978552 2026] [:error] [pid 57183:tid 57201] [client 74.248.132.51:52487] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "adzPGzDO3t8R5NaxzYQO9QAAAVA"]
[Mon Apr 13 19:10:21.116379 2026] [:error] [pid 57183:tid 57199] [client 74.248.132.51:7664] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "adzPHTDO3t8R5NaxzYQO_AAAAU4"]
[Mon Apr 13 19:10:21.939571 2026] [:error] [pid 63309:tid 63319] [client 74.248.132.51:52605] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "adzPHUpIKZ10weXpf0UY5wAAAAY"]
[Mon Apr 13 19:10:22.678559 2026] [:error] [pid 7228:tid 7245] [client 74.248.132.51:54397] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "adzPHgEnn1dQrOSHHNV57QAAAQ8"]
[Mon Apr 13 19:10:23.771067 2026] [:error] [pid 63406:tid 63435] [client 74.248.132.51:8053] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "adzPH7HZEIkQ0Zmgp5puqwAAANg"]
[Mon Apr 13 19:10:25.067192 2026] [:error] [pid 63406:tid 63430] [client 74.248.132.51:52560] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "adzPIbHZEIkQ0Zmgp5pusAAAANM"]
[Mon Apr 13 19:10:26.037502 2026] [:error] [pid 63310:tid 63368] [client 74.248.132.51:57159] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "adzPInoXpRU5ztmwPjJHLQAAAFg"]
[Mon Apr 13 19:10:26.938722 2026] [:error] [pid 7228:tid 7230] [client 74.248.132.51:57185] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "adzPIgEnn1dQrOSHHNV59QAAAQA"]
[Mon Apr 13 19:10:28.858436 2026] [:error] [pid 9314:tid 9331] [client 74.248.132.51:8007] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "adzPJG_r4W8fX2GWyGT1_gAAAY8"]
[Mon Apr 13 19:10:30.003177 2026] [:error] [pid 57183:tid 57195] [client 74.248.132.51:7640] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "adzPJjDO3t8R5NaxzYQPDgAAAUo"]
[Mon Apr 13 19:10:31.192320 2026] [:error] [pid 7228:tid 7235] [client 74.248.132.51:52598] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "adzPJwEnn1dQrOSHHNV6AAAAAQU"]
[Mon Apr 13 19:10:32.480320 2026] [:error] [pid 57183:tid 57189] [client 74.248.132.51:52554] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "adzPKDDO3t8R5NaxzYQPFwAAAUQ"]
[Mon Apr 13 19:10:34.238327 2026] [:error] [pid 63310:tid 63356] [client 74.248.132.51:54391] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "adzPKnoXpRU5ztmwPjJHNwAAAEw"]
[Mon Apr 13 19:10:39.375946 2026] [:error] [pid 63406:tid 63419] [client 74.248.132.51:52974] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "adzPL7HZEIkQ0Zmgp5puzAAAAMg"]
[Mon Apr 13 19:10:44.251537 2026] [:error] [pid 57183:tid 57191] [client 74.248.132.51:8005] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Mon Apr 13 19:10:44.513460 2026] [:error] [pid 57183:tid 57195] [client 74.248.132.51:8005] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Mon Apr 13 19:10:44.794679 2026] [:error] [pid 57183:tid 57202] [client 74.248.132.51:8005] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Mon Apr 13 19:10:45.053365 2026] [:error] [pid 57183:tid 57185] [client 74.248.132.51:8005] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Mon Apr 13 19:10:46.944779 2026] [:error] [pid 57183:tid 57207] [client 74.248.132.51:8005] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Mon Apr 13 19:10:47.201675 2026] [:error] [pid 57183:tid 57203] [client 74.248.132.51:8005] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Mon Apr 13 19:10:47.459918 2026] [:error] [pid 57183:tid 57187] [client 74.248.132.51:8005] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Mon Apr 13 19:10:47.769994 2026] [:error] [pid 57183:tid 57192] [client 74.248.132.51:8005] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Mon Apr 13 19:10:48.672887 2026] [:error] [pid 57183:tid 57200] [client 74.248.132.51:8005] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Mon Apr 13 19:10:48.938928 2026] [:error] [pid 57183:tid 57204] [client 74.248.132.51:8005] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Mon Apr 13 19:10:49.219423 2026] [:error] [pid 57183:tid 57197] [client 74.248.132.51:8005] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "adzPOTDO3t8R5NaxzYQPMwAAAUw"]
[Mon Apr 13 19:10:52.954575 2026] [:error] [pid 9314:tid 9339] [client 74.248.132.51:7520] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "adzPPG_r4W8fX2GWyGT2KAAAAZc"]
[Mon Apr 13 19:10:54.995791 2026] [:error] [pid 57183:tid 57189] [client 74.248.132.51:55940] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "adzPPjDO3t8R5NaxzYQPPgAAAUQ"]
[Mon Apr 13 19:10:56.581387 2026] [:error] [pid 57183:tid 57193] [client 74.248.132.51:8051] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "adzPQDDO3t8R5NaxzYQPQwAAAUg"]
[Mon Apr 13 19:10:57.579586 2026] [:error] [pid 57183:tid 57199] [client 74.248.132.51:52480] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "adzPQTDO3t8R5NaxzYQPSAAAAU4"]
[Mon Apr 13 19:10:58.627356 2026] [:error] [pid 57183:tid 57187] [client 74.248.132.51:8011] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "adzPQjDO3t8R5NaxzYQPSwAAAUI"]
[Mon Apr 13 19:10:59.550938 2026] [:error] [pid 63310:tid 63365] [client 74.248.132.51:52490] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "adzPQ3oXpRU5ztmwPjJHVwAAAFU"]
[Mon Apr 13 19:11:00.519884 2026] [:error] [pid 57183:tid 57200] [client 74.248.132.51:57175] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "adzPRDDO3t8R5NaxzYQPTwAAAU8"]
[Mon Apr 13 19:11:02.316127 2026] [:error] [pid 63311:tid 63379] [client 74.248.132.51:54361] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "adzPRqHjrGN1MqBCVFnsRwAAAIg"]
[Mon Apr 13 19:11:04.619059 2026] [:error] [pid 63406:tid 63435] [client 74.248.132.51:8002] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "adzPSLHZEIkQ0Zmgp5pvAgAAANg"]
[Mon Apr 13 19:11:09.140706 2026] [:error] [pid 7228:tid 7232] [client 74.248.132.51:52584] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "adzPTQEnn1dQrOSHHNV6MAAAAQI"]
[Mon Apr 13 19:11:11.084751 2026] [:error] [pid 9314:tid 9319] [client 74.248.132.51:52523] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "adzPT2_r4W8fX2GWyGT2PgAAAYM"]
[Mon Apr 13 19:11:11.962091 2026] [:error] [pid 9314:tid 9334] [client 74.248.132.51:52594] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "adzPT2_r4W8fX2GWyGT2RQAAAZI"]
[Mon Apr 13 19:11:13.113110 2026] [:error] [pid 63310:tid 63364] [client 74.248.132.51:55455] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "adzPUXoXpRU5ztmwPjJHXAAAAFQ"]
[Mon Apr 13 19:11:14.382476 2026] [:error] [pid 63406:tid 63412] [client 74.248.132.51:57215] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "adzPUrHZEIkQ0Zmgp5pvHgAAAME"]
[Mon Apr 13 19:11:15.270621 2026] [:error] [pid 57183:tid 57197] [client 74.248.132.51:55954] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "adzPUzDO3t8R5NaxzYQPZAAAAUw"]
[Mon Apr 13 19:11:17.730044 2026] [:error] [pid 57183:tid 57195] [client 74.248.132.51:7677] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "adzPVTDO3t8R5NaxzYQPZwAAAUo"]
[Mon Apr 13 19:11:20.455837 2026] [:error] [pid 63406:tid 63430] [client 74.248.132.51:55487] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "adzPWLHZEIkQ0Zmgp5pvLAAAANM"]
[Mon Apr 13 19:11:22.789350 2026] [:error] [pid 63406:tid 63421] [client 74.248.132.51:54337] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "adzPWrHZEIkQ0Zmgp5pvMQAAAMo"]
[Mon Apr 13 19:11:25.371366 2026] [:error] [pid 63406:tid 63429] [client 74.248.132.51:7622] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "adzPXbHZEIkQ0Zmgp5pvNQAAANI"]
[Mon Apr 13 19:11:27.843535 2026] [:error] [pid 63406:tid 63432] [client 74.248.132.51:52498] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "adzPX7HZEIkQ0Zmgp5pvOQAAANU"]
[Mon Apr 13 19:11:29.432655 2026] [:error] [pid 57183:tid 57191] [client 74.248.132.51:7514] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "adzPYTDO3t8R5NaxzYQPdgAAAUY"]
[Mon Apr 13 19:11:30.978811 2026] [:error] [pid 9314:tid 9320] [client 74.248.132.51:8019] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "adzPYm_r4W8fX2GWyGT2XgAAAYQ"]
[Mon Apr 13 19:11:36.101846 2026] [:error] [pid 9314:tid 9338] [client 74.248.132.51:52535] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "adzPaG_r4W8fX2GWyGT2ZwAAAZY"]
[Mon Apr 13 19:11:37.688042 2026] [:error] [pid 57183:tid 57205] [client 74.248.132.51:54363] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "adzPaTDO3t8R5NaxzYQPiAAAAVQ"]
[Mon Apr 13 19:11:40.439815 2026] [:error] [pid 63406:tid 63414] [client 74.248.132.51:52579] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "adzPbLHZEIkQ0Zmgp5pvVgAAAMM"]
[Mon Apr 13 19:11:42.975368 2026] [:error] [pid 63406:tid 63423] [client 74.248.132.51:52583] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "adzPbrHZEIkQ0Zmgp5pvYAAAAMw"]
[Mon Apr 13 19:11:44.690008 2026] [:error] [pid 9314:tid 9337] [client 74.248.132.51:55433] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "adzPcG_r4W8fX2GWyGT2bgAAAZU"]
[Mon Apr 13 19:11:46.404438 2026] [:error] [pid 9314:tid 9339] [client 74.248.132.51:8050] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "adzPcm_r4W8fX2GWyGT2cAAAAZc"]
[Mon Apr 13 19:11:47.528762 2026] [:error] [pid 7228:tid 7230] [client 74.248.132.51:55425] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "adzPcwEnn1dQrOSHHNV6ZQAAAQA"]
[Mon Apr 13 19:11:48.905734 2026] [:error] [pid 7228:tid 7244] [client 74.248.132.51:8023] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Mon Apr 13 19:11:49.511084 2026] [:error] [pid 7228:tid 7240] [client 74.248.132.51:8023] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Mon Apr 13 19:11:49.784618 2026] [:error] [pid 7228:tid 7231] [client 74.248.132.51:8023] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Mon Apr 13 19:11:50.042212 2026] [:error] [pid 7228:tid 7252] [client 74.248.132.51:8023] File does not exist: /usr/local/apache/htdocs/suspended-page/mI35rZhMg1zJ1vuXdefault.php
[Mon Apr 13 19:11:50.299448 2026] [:error] [pid 7228:tid 7251] [client 74.248.132.51:8023] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Mon Apr 13 19:11:50.557396 2026] [:error] [pid 7228:tid 7234] [client 74.248.132.51:8023] File does not exist: /usr/local/apache/htdocs/suspended-page/ogifomnzqnlvwh5womfjirvaCdefault.php
[Mon Apr 13 19:11:50.813417 2026] [:error] [pid 7228:tid 7254] [client 74.248.132.51:8023] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Mon Apr 13 19:11:51.347218 2026] [:error] [pid 7228:tid 7248] [client 74.248.132.51:8023] File does not exist: /usr/local/apache/htdocs/suspended-page/lmutxdvyp7u5yksqke8ozbjgCdefault.php
[Mon Apr 13 19:11:51.606861 2026] [:error] [pid 7228:tid 7236] [client 74.248.132.51:8023] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Mon Apr 13 19:11:51.866749 2026] [:error] [pid 7228:tid 7240] [client 74.248.132.51:8023] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Mon Apr 13 19:11:52.414267 2026] [:error] [pid 7228:tid 7239] [client 74.248.132.51:8023] File does not exist: /usr/local/apache/htdocs/suspended-page/zoper1.php
[Mon Apr 13 19:11:53.014436 2026] [:error] [pid 7228:tid 7246] [client 74.248.132.51:8023] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "adzPeQEnn1dQrOSHHNV6egAAARA"]
[Mon Apr 13 19:11:54.028397 2026] [:error] [pid 63309:tid 63335] [client 74.248.132.51:51671] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "adzPekpIKZ10weXpf0UZAgAAABY"]
[Mon Apr 13 19:11:55.145140 2026] [:error] [pid 9314:tid 9340] [client 74.248.132.51:8040] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "adzPe2_r4W8fX2GWyGT2eQAAAZg"]
[Mon Apr 13 19:11:56.136474 2026] [:error] [pid 63311:tid 63373] [client 74.248.132.51:52514] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "adzPfKHjrGN1MqBCVFnsXQAAAII"]
[Mon Apr 13 19:11:57.759801 2026] [:error] [pid 7228:tid 7230] [client 74.248.132.51:55472] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "adzPfQEnn1dQrOSHHNV6hQAAAQA"]
[Mon Apr 13 19:11:58.823945 2026] [:error] [pid 63309:tid 63336] [client 74.248.132.51:8030] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "adzPfkpIKZ10weXpf0UZBAAAABc"]
[Mon Apr 13 19:12:00.409938 2026] [:error] [pid 63309:tid 63315] [client 74.248.132.51:8044] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "adzPgEpIKZ10weXpf0UZBQAAAAI"]
[Mon Apr 13 19:12:02.629944 2026] [:error] [pid 7228:tid 7252] [client 74.248.132.51:52507] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "adzPggEnn1dQrOSHHNV6iAAAARY"]
[Mon Apr 13 19:12:05.315542 2026] [:error] [pid 9314:tid 9323] [client 74.248.132.51:55442] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "adzPhW_r4W8fX2GWyGT2hwAAAYc"]
[Mon Apr 13 19:12:07.037297 2026] [:error] [pid 63310:tid 63364] [client 74.248.132.51:55428] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "adzPh3oXpRU5ztmwPjJHiQAAAFQ"]
[Mon Apr 13 19:12:10.263716 2026] [:error] [pid 63310:tid 63363] [client 74.248.132.51:52504] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "adzPinoXpRU5ztmwPjJHkAAAAFM"]
[Mon Apr 13 19:12:11.393623 2026] [:error] [pid 57183:tid 57209] [client 74.248.132.51:8003] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "adzPizDO3t8R5NaxzYQPkwAAAVg"]
[Mon Apr 13 19:12:12.835002 2026] [:error] [pid 63310:tid 63368] [client 74.248.132.51:55950] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adzPjHoXpRU5ztmwPjJHnwAAAFg"]
[Mon Apr 13 19:12:13.769145 2026] [:error] [pid 63310:tid 63348] [client 74.248.132.51:8035] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adzPjXoXpRU5ztmwPjJHpgAAAEQ"]
[Mon Apr 13 19:12:15.284220 2026] [:error] [pid 57183:tid 57190] [client 74.248.132.51:55945] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adzPjzDO3t8R5NaxzYQPmQAAAUU"]
[Mon Apr 13 19:12:17.503985 2026] [:error] [pid 63309:tid 63335] [client 74.248.132.51:57176] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adzPkUpIKZ10weXpf0UZHgAAABY"]
[Mon Apr 13 19:12:18.465375 2026] [:error] [pid 63311:tid 63392] [client 74.248.132.51:52600] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "adzPkqHjrGN1MqBCVFnsdQAAAJU"]
[Mon Apr 13 19:12:20.010823 2026] [:error] [pid 9314:tid 9340] [client 74.248.132.51:60391] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "adzPlG_r4W8fX2GWyGT2rwAAAZg"]
[Mon Apr 13 19:12:21.048064 2026] [:error] [pid 63406:tid 63415] [client 74.248.132.51:55975] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "adzPlbHZEIkQ0Zmgp5pviAAAAMQ"]
[Mon Apr 13 19:12:21.991199 2026] [:error] [pid 9314:tid 9329] [client 74.248.132.51:57172] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "adzPlW_r4W8fX2GWyGT2sgAAAY0"]
[Mon Apr 13 19:12:22.872297 2026] [:error] [pid 9314:tid 9330] [client 74.248.132.51:55432] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "adzPlm_r4W8fX2GWyGT2swAAAY4"]
[Mon Apr 13 19:12:23.631067 2026] [:error] [pid 63406:tid 63435] [client 74.248.132.51:52519] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "adzPl7HZEIkQ0Zmgp5pvmgAAANg"]
[Mon Apr 13 19:12:24.751371 2026] [:error] [pid 63311:tid 63382] [client 74.248.132.51:55438] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "adzPmKHjrGN1MqBCVFnsgQAAAIs"]
[Mon Apr 13 19:12:25.439601 2026] [:error] [pid 63406:tid 63434] [client 74.248.132.51:57208] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "adzPmbHZEIkQ0Zmgp5pvogAAANc"]
[Mon Apr 13 19:12:26.396948 2026] [:error] [pid 63406:tid 63415] [client 74.248.132.51:55440] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "adzPmrHZEIkQ0Zmgp5pvpAAAAMQ"]
[Mon Apr 13 19:12:27.249567 2026] [:error] [pid 57183:tid 57198] [client 74.248.132.51:8057] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "adzPmzDO3t8R5NaxzYQPrwAAAU0"]
[Mon Apr 13 19:12:28.147743 2026] [:error] [pid 57183:tid 57190] [client 74.248.132.51:54368] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "adzPnDDO3t8R5NaxzYQPtQAAAUU"]
[Mon Apr 13 19:12:29.671423 2026] [:error] [pid 63406:tid 63424] [client 74.248.132.51:54383] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "adzPnbHZEIkQ0Zmgp5pvrQAAAM0"]
[Mon Apr 13 19:12:31.329526 2026] [:error] [pid 9314:tid 9325] [client 74.248.132.51:7670] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "adzPn2_r4W8fX2GWyGT2vQAAAYk"]
[Mon Apr 13 19:12:41.590077 2026] [:error] [pid 9314:tid 9333] [client 74.248.132.51:57194] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "adzPqW_r4W8fX2GWyGT24QAAAZE"]
[Mon Apr 13 19:12:43.613616 2026] [:error] [pid 7228:tid 7254] [client 74.248.132.51:8033] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "adzPqwEnn1dQrOSHHNV6rQAAARg"]
[Mon Apr 13 19:12:46.289591 2026] [:error] [pid 9314:tid 9329] [client 74.248.132.51:57177] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "adzPrm_r4W8fX2GWyGT26wAAAY0"]
[Mon Apr 13 19:12:47.352948 2026] [:error] [pid 7228:tid 7231] [client 74.248.132.51:52544] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "adzPrwEnn1dQrOSHHNV6sgAAAQE"]
[Mon Apr 13 19:12:48.036463 2026] [:error] [pid 63311:tid 63378] [client 74.248.132.51:57179] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "adzPsKHjrGN1MqBCVFnslgAAAIc"]
[Mon Apr 13 19:12:49.427733 2026] [:error] [pid 57183:tid 57199] [client 74.248.132.51:60412] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "adzPsTDO3t8R5NaxzYQP5gAAAU4"]
[Mon Apr 13 19:12:50.423770 2026] [:error] [pid 57183:tid 57207] [client 74.248.132.51:7515] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "adzPsjDO3t8R5NaxzYQP6gAAAVY"]
[Mon Apr 13 19:12:51.825612 2026] [:error] [pid 57183:tid 57198] [client 74.248.132.51:52521] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "adzPszDO3t8R5NaxzYQP8QAAAU0"]
[Mon Apr 13 19:12:53.961260 2026] [:error] [pid 57183:tid 57189] [client 74.248.132.51:52592] File does not exist: /usr/local/apache/htdocs/suspended-page/xsas.php
[Mon Apr 13 19:12:54.480125 2026] [:error] [pid 57183:tid 57202] [client 74.248.132.51:52592] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Mon Apr 13 19:12:54.735800 2026] [:error] [pid 57183:tid 57203] [client 74.248.132.51:52592] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Mon Apr 13 19:12:54.991517 2026] [:error] [pid 57183:tid 57196] [client 74.248.132.51:52592] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Mon Apr 13 19:12:55.259662 2026] [:error] [pid 57183:tid 57188] [client 74.248.132.51:52592] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Mon Apr 13 19:12:55.532437 2026] [:error] [pid 57183:tid 57195] [client 74.248.132.51:52592] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Mon Apr 13 19:12:56.456098 2026] [:error] [pid 57183:tid 57202] [client 74.248.132.51:52592] File does not exist: /usr/local/apache/htdocs/suspended-page/ibcqocdtu3eovdx2hwj7Cdefault.php
[Tue Apr 14 08:25:41.199374 2026] [:error] [pid 35630:tid 35687] [client 20.89.234.204:5545] File does not exist: /usr/local/apache/htdocs/suspended-page/xmr.php
[Tue Apr 14 08:25:41.351037 2026] [:error] [pid 35630:tid 35692] [client 20.89.234.204:5545] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Apr 14 08:25:41.474861 2026] [:error] [pid 35630:tid 35690] [client 20.89.234.204:5545] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Apr 14 08:25:41.600366 2026] [:error] [pid 35630:tid 35696] [client 20.89.234.204:5545] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Tue Apr 14 08:25:41.724574 2026] [:error] [pid 35630:tid 35705] [client 20.89.234.204:5545] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Tue Apr 14 08:25:41.848637 2026] [:error] [pid 35630:tid 35702] [client 20.89.234.204:5545] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Tue Apr 14 08:25:41.968927 2026] [:error] [pid 35630:tid 35708] [client 20.89.234.204:5545] [client 20.89.234.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/"] [unique_id "ad2JhTer0pVFxOiOauXAbwAAAJY"]
[Tue Apr 14 08:25:42.468151 2026] [:error] [pid 35629:tid 35672] [client 20.89.234.204:31380] [client 20.89.234.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/"] [unique_id "ad2JhjY8VahzC1YJBSi6YgAAAE0"]
[Tue Apr 14 08:25:42.988294 2026] [:error] [pid 37226:tid 37235] [client 20.89.234.204:31388] [client 20.89.234.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/"] [unique_id "ad2JhpOA5-IQ0IVmQCrBSwAAAUc"]
[Tue Apr 14 08:25:43.478566 2026] [:error] [pid 37226:tid 37248] [client 20.89.234.204:16012] [client 20.89.234.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/"] [unique_id "ad2Jh5OA5-IQ0IVmQCrBTQAAAVQ"]
[Tue Apr 14 09:22:02.820928 2026] [:error] [pid 4902:tid 4916] [client 216.73.216.167:9117] [client 216.73.216.167] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||www.windfcau.windfarmcoolants.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/robots.txt"] [unique_id "ad2Wuov8vJvl9lGy39gr0AAAAYw"]
[Tue Apr 14 20:47:04.815385 2026] [:error] [pid 3810:tid 3820] [client 74.248.158.124:54920] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Tue Apr 14 20:47:05.076038 2026] [:error] [pid 3810:tid 3815] [client 74.248.158.124:54920] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Tue Apr 14 20:47:05.337658 2026] [:error] [pid 3810:tid 3814] [client 74.248.158.124:54920] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Tue Apr 14 20:47:05.610417 2026] [:error] [pid 3810:tid 3828] [client 74.248.158.124:54920] File does not exist: /usr/local/apache/htdocs/suspended-page/mifta.php
[Tue Apr 14 20:47:05.879909 2026] [:error] [pid 3810:tid 3816] [client 74.248.158.124:54920] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Tue Apr 14 20:47:06.144465 2026] [:error] [pid 3810:tid 3820] [client 74.248.158.124:54920] File does not exist: /usr/local/apache/htdocs/suspended-page/packsin1.php
[Tue Apr 14 20:47:06.404865 2026] [:error] [pid 3810:tid 3814] [client 74.248.158.124:54920] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Tue Apr 14 20:47:06.663514 2026] [:error] [pid 3810:tid 3828] [client 74.248.158.124:54920] File does not exist: /usr/local/apache/htdocs/suspended-page/son1.php
[Tue Apr 14 20:47:06.919144 2026] [:error] [pid 3810:tid 3816] [client 74.248.158.124:54920] [client 74.248.158.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ad43Ssqc5XaYZhFXVGeTyQAAAYM"]
[Tue Apr 14 20:47:08.032087 2026] [:error] [pid 3778:tid 3802] [client 74.248.158.124:54803] File does not exist: /usr/local/apache/htdocs/suspended-page/aboute.php
[Tue Apr 14 20:47:09.673655 2026] [:error] [pid 3778:tid 3802] [client 74.248.158.124:54803] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Tue Apr 14 20:47:09.930488 2026] [:error] [pid 3778:tid 3783] [client 74.248.158.124:54803] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "ad43TRx5DfpNmYF_PaHdvQAAAUM"]
[Tue Apr 14 20:47:16.229963 2026] [:error] [pid 3810:tid 3836] [client 74.248.158.124:5373] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "ad43VMqc5XaYZhFXVGeT2wAAAZc"]
[Tue Apr 14 20:47:23.974789 2026] [:error] [pid 59986:tid 60026] [client 74.248.158.124:55270] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "ad43W56axKeW6bX4H7dm8AAAAEY"]
[Tue Apr 14 20:47:29.792331 2026] [:error] [pid 59986:tid 60030] [client 74.248.158.124:56403] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "ad43YZ6axKeW6bX4H7dnAAAAAEo"]
[Tue Apr 14 20:47:33.214215 2026] [:error] [pid 60074:tid 60081] [client 74.248.158.124:5434] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "ad43ZetqnEmNU9vpHCmZAgAAAMU"]
[Tue Apr 14 20:47:34.532757 2026] [:error] [pid 59985:tid 60014] [client 74.248.158.124:56396] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "ad43ZugHaxkvLE6V1klepwAAABU"]
[Tue Apr 14 20:47:37.297830 2026] [:error] [pid 3810:tid 3836] [client 74.248.158.124:55262] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "ad43acqc5XaYZhFXVGeT7wAAAZc"]
[Tue Apr 14 20:47:39.987750 2026] [:error] [pid 59985:tid 59997] [client 74.248.158.124:62493] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "ad43a-gHaxkvLE6V1klevQAAAAQ"]
[Tue Apr 14 20:47:41.643871 2026] [:error] [pid 59987:tid 60071] [client 74.248.158.124:56425] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "ad43bVWpk-Tfi6_vLKovSgAAAJg"]
[Tue Apr 14 20:47:42.502043 2026] [:error] [pid 60074:tid 60085] [client 74.248.158.124:62471] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "ad43butqnEmNU9vpHCmZCwAAAMk"]
[Tue Apr 14 20:47:46.518985 2026] [:error] [pid 3778:tid 3787] [client 74.248.158.124:56405] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "ad43chx5DfpNmYF_PaHd7AAAAUc"]
[Tue Apr 14 20:48:00.033483 2026] [:error] [pid 3810:tid 3827] [client 74.248.158.124:55287] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ad43gMqc5XaYZhFXVGeUJQAAAY4"]
[Tue Apr 14 20:48:03.134185 2026] [:error] [pid 59986:tid 60021] [client 74.248.158.124:57648] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "ad43g56axKeW6bX4H7dnQAAAAEE"]
[Tue Apr 14 20:48:08.525250 2026] [:error] [pid 60074:tid 60084] [client 74.248.158.124:55278] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "ad43iOtqnEmNU9vpHCmZMwAAAMg"]
[Tue Apr 14 20:48:12.008474 2026] [:error] [pid 59987:tid 60052] [client 74.248.158.124:5365] File does not exist: /usr/local/apache/htdocs/suspended-page/wps.php
[Tue Apr 14 20:48:12.268573 2026] [:error] [pid 59987:tid 60069] [client 74.248.158.124:5365] File does not exist: /usr/local/apache/htdocs/suspended-page/ayk.php
[Tue Apr 14 20:48:12.539328 2026] [:error] [pid 59987:tid 60064] [client 74.248.158.124:5365] File does not exist: /usr/local/apache/htdocs/suspended-page/wgift1.php
[Tue Apr 14 20:48:12.797280 2026] [:error] [pid 59987:tid 60048] [client 74.248.158.124:5365] File does not exist: /usr/local/apache/htdocs/suspended-page/ss.php
[Tue Apr 14 20:48:13.065988 2026] [:error] [pid 59987:tid 60058] [client 74.248.158.124:5365] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Tue Apr 14 20:48:13.323343 2026] [:error] [pid 59987:tid 60060] [client 74.248.158.124:5365] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Tue Apr 14 20:48:13.851596 2026] [:error] [pid 59987:tid 60057] [client 74.248.158.124:5365] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Tue Apr 14 20:48:14.118155 2026] [:error] [pid 59987:tid 60050] [client 74.248.158.124:5365] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Tue Apr 14 20:48:14.644039 2026] [:error] [pid 59987:tid 60059] [client 74.248.158.124:5365] [client 74.248.158.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "ad43jlWpk-Tfi6_vLKovcgAAAIw"]
[Tue Apr 14 20:48:17.063019 2026] [:error] [pid 60074:tid 60078] [client 74.248.158.124:57605] File does not exist: /usr/local/apache/htdocs/suspended-page/eFpU3yHnriNNLtvdefault.php
[Tue Apr 14 20:48:17.471009 2026] [:error] [pid 60074:tid 60076] [client 74.248.158.124:57605] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp-image.php"] [unique_id "ad43ketqnEmNU9vpHCmZQgAAAMA"]
[Tue Apr 14 20:48:18.987628 2026] [:error] [pid 3810:tid 3833] [client 74.248.158.124:55265] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp-image.php"] [unique_id "ad43ksqc5XaYZhFXVGeUbAAAAZQ"]
[Tue Apr 14 20:48:21.888113 2026] [:error] [pid 59985:tid 60009] [client 74.248.158.124:54419] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp-image.php"] [unique_id "ad43legHaxkvLE6V1kle2AAAABA"]
[Tue Apr 14 20:48:24.142782 2026] [:error] [pid 59986:tid 60030] [client 74.248.158.124:5395] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp-image.php"] [unique_id "ad43mJ6axKeW6bX4H7dnrwAAAEo"]
[Tue Apr 14 20:48:25.341993 2026] [:error] [pid 59986:tid 60023] [client 74.248.158.124:54865] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ad43mZ6axKeW6bX4H7dnswAAAEM"]
[Tue Apr 14 20:48:27.289583 2026] [:error] [pid 3810:tid 3819] [client 74.248.158.124:54452] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ad43m8qc5XaYZhFXVGeUewAAAYY"]
[Tue Apr 14 20:48:30.554594 2026] [:error] [pid 59986:tid 60023] [client 74.248.158.124:57655] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ad43np6axKeW6bX4H7dn0gAAAEM"]
[Tue Apr 14 20:48:34.041876 2026] [:error] [pid 3810:tid 3815] [client 74.248.158.124:54423] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ad43osqc5XaYZhFXVGeUiQAAAYI"]
[Tue Apr 14 20:48:34.812666 2026] [:error] [pid 59986:tid 60043] [client 74.248.158.124:62472] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ad43op6axKeW6bX4H7dn5wAAAFc"]
[Tue Apr 14 20:48:36.979385 2026] [:error] [pid 3810:tid 3819] [client 74.248.158.124:57611] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ad43pMqc5XaYZhFXVGeUjwAAAYY"]
[Tue Apr 14 20:48:38.014669 2026] [:error] [pid 3810:tid 3836] [client 74.248.158.124:51553] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ad43psqc5XaYZhFXVGeUkgAAAZc"]
[Tue Apr 14 20:48:39.142280 2026] [:error] [pid 60074:tid 60095] [client 74.248.158.124:54860] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ad43p-tqnEmNU9vpHCmZZAAAANM"]
[Tue Apr 14 20:48:44.061686 2026] [:error] [pid 3778:tid 3787] [client 74.248.158.124:5370] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/footer.php"] [unique_id "ad43rBx5DfpNmYF_PaHelgAAAUc"]
[Tue Apr 14 20:48:45.845968 2026] [:error] [pid 3778:tid 3794] [client 74.248.158.124:51576] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/footer.php"] [unique_id "ad43rRx5DfpNmYF_PaHenQAAAU4"]
[Tue Apr 14 20:48:52.857832 2026] [:error] [pid 3778:tid 3803] [client 74.248.158.124:51583] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/footer.php"] [unique_id "ad43tBx5DfpNmYF_PaHetQAAAVc"]
[Tue Apr 14 20:49:01.166746 2026] [:error] [pid 3810:tid 3821] [client 74.248.158.124:54428] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "ad43vcqc5XaYZhFXVGeUtAAAAYg"]
[Tue Apr 14 20:49:02.816107 2026] [:error] [pid 59985:tid 60003] [client 74.248.158.124:56832] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "ad43vugHaxkvLE6V1kle7AAAAAo"]
[Tue Apr 14 20:49:04.025594 2026] [:error] [pid 3778:tid 3782] [client 74.248.158.124:59710] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "ad43wBx5DfpNmYF_PaHezwAAAUI"]
[Tue Apr 14 20:49:05.144181 2026] [:error] [pid 3810:tid 3832] [client 74.248.158.124:50320] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "ad43wcqc5XaYZhFXVGeUuAAAAZM"]
[Tue Apr 14 20:49:07.201836 2026] [:error] [pid 22177:tid 22200] [client 74.248.158.124:50315] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "ad43w4TVeJSXHDIlEDuBCQAAARU"]
[Tue Apr 14 20:49:08.537520 2026] [:error] [pid 59985:tid 60009] [client 74.248.158.124:48668] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "ad43xOgHaxkvLE6V1kle8AAAABA"]
[Tue Apr 14 20:49:10.629505 2026] [:error] [pid 22177:tid 22193] [client 74.248.158.124:46899] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "ad43xoTVeJSXHDIlEDuBCwAAAQ4"]
[Tue Apr 14 20:49:11.618136 2026] [:error] [pid 22177:tid 22195] [client 74.248.158.124:56869] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "ad43x4TVeJSXHDIlEDuBDAAAARA"]
[Tue Apr 14 20:49:14.469793 2026] [:error] [pid 59985:tid 60000] [client 74.248.158.124:64135] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ad43yugHaxkvLE6V1kle8QAAAAc"]
[Tue Apr 14 20:49:16.772926 2026] [:error] [pid 3810:tid 3817] [client 74.248.158.124:46882] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ad43zMqc5XaYZhFXVGeUywAAAYQ"]
[Tue Apr 14 20:49:19.715415 2026] [:error] [pid 3810:tid 3829] [client 74.248.158.124:52967] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Tue Apr 14 20:49:19.974772 2026] [:error] [pid 3810:tid 3830] [client 74.248.158.124:52967] File does not exist: /usr/local/apache/htdocs/suspended-page/xff.php
[Tue Apr 14 20:49:20.260310 2026] [:error] [pid 3810:tid 3836] [client 74.248.158.124:52967] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Tue Apr 14 20:49:20.684810 2026] [:error] [pid 3810:tid 3836] [client 74.248.158.124:52967] File does not exist: /usr/local/apache/htdocs/suspended-page/roksad1.php
[Tue Apr 14 20:49:20.949642 2026] [:error] [pid 3810:tid 3835] [client 74.248.158.124:52967] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Tue Apr 14 20:49:21.208275 2026] [:error] [pid 3810:tid 3822] [client 74.248.158.124:52967] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Tue Apr 14 20:49:21.490078 2026] [:error] [pid 3810:tid 3823] [client 74.248.158.124:52967] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue Apr 14 20:49:21.748034 2026] [:error] [pid 3810:tid 3821] [client 74.248.158.124:52967] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Tue Apr 14 20:49:22.007689 2026] [:error] [pid 3810:tid 3819] [client 74.248.158.124:52967] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Tue Apr 14 20:49:22.268792 2026] [:error] [pid 3810:tid 3827] [client 74.248.158.124:52967] File does not exist: /usr/local/apache/htdocs/suspended-page/less.php
[Tue Apr 14 20:49:22.528387 2026] [:error] [pid 3810:tid 3825] [client 74.248.158.124:52967] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Tue Apr 14 20:49:22.784247 2026] [:error] [pid 3810:tid 3828] [client 74.248.158.124:52967] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maxro.php"] [unique_id "ad430sqc5XaYZhFXVGeU5gAAAY8"]
[Tue Apr 14 20:49:24.520608 2026] [:error] [pid 3810:tid 3832] [client 74.248.158.124:56347] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maxro.php"] [unique_id "ad431Mqc5XaYZhFXVGeU5wAAAZM"]
[Tue Apr 14 20:49:27.515846 2026] [:error] [pid 3810:tid 3815] [client 74.248.158.124:55065] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maxro.php"] [unique_id "ad4318qc5XaYZhFXVGeU9AAAAYI"]
[Tue Apr 14 20:49:36.927925 2026] [:error] [pid 59986:tid 60038] [client 74.248.158.124:60366] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maxro.php"] [unique_id "ad434J6axKeW6bX4H7doNwAAAFI"]
[Tue Apr 14 20:49:48.989202 2026] [:error] [pid 22177:tid 22189] [client 74.248.158.124:5204] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ad437ITVeJSXHDIlEDuBMAAAAQo"]
[Tue Apr 14 20:49:49.928322 2026] [:error] [pid 59986:tid 60030] [client 74.248.158.124:62797] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ad437Z6axKeW6bX4H7doUgAAAEo"]
[Tue Apr 14 20:49:51.007877 2026] [:error] [pid 60074:tid 60080] [client 74.248.158.124:49831] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ad437-tqnEmNU9vpHCmZnwAAAMQ"]
[Tue Apr 14 20:49:56.270104 2026] [:error] [pid 60074:tid 60098] [client 74.248.158.124:5985] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "ad439OtqnEmNU9vpHCmZrAAAANY"]
[Tue Apr 14 20:50:02.029119 2026] [:error] [pid 59986:tid 60021] [client 74.248.158.124:54070] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "ad43-p6axKeW6bX4H7dofAAAAEE"]
[Tue Apr 14 20:50:04.761455 2026] [:error] [pid 3810:tid 3816] [client 74.248.158.124:5966] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "ad43_Mqc5XaYZhFXVGeVMQAAAYM"]
[Tue Apr 14 20:50:06.049838 2026] [:error] [pid 3810:tid 3835] [client 74.248.158.124:49917] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "ad43_sqc5XaYZhFXVGeVNwAAAZY"]
[Tue Apr 14 20:50:07.508524 2026] [:error] [pid 59987:tid 60049] [client 74.248.158.124:63081] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bdktk.php"] [unique_id "ad43_1Wpk-Tfi6_vLKovsQAAAII"]
[Tue Apr 14 20:50:09.708275 2026] [:error] [pid 60074:tid 60080] [client 74.248.158.124:5990] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bdktk.php"] [unique_id "ad44AetqnEmNU9vpHCmZugAAAMQ"]
[Tue Apr 14 20:50:10.453216 2026] [:error] [pid 3810:tid 3837] [client 74.248.158.124:54697] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bdktk.php"] [unique_id "ad44Asqc5XaYZhFXVGeVQAAAAZg"]
[Tue Apr 14 20:50:11.569827 2026] [:error] [pid 3810:tid 3830] [client 74.248.158.124:55958] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bdktk.php"] [unique_id "ad44A8qc5XaYZhFXVGeVSAAAAZE"]
[Tue Apr 14 20:50:13.310138 2026] [:error] [pid 60074:tid 60086] [client 74.248.158.124:5147] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "ad44BetqnEmNU9vpHCmZwwAAAMo"]
[Tue Apr 14 20:50:14.131821 2026] [:error] [pid 60074:tid 60092] [client 74.248.158.124:54045] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "ad44ButqnEmNU9vpHCmZxgAAANA"]
[Tue Apr 14 20:50:18.727403 2026] [:error] [pid 59987:tid 60054] [client 74.248.158.124:55955] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "ad44ClWpk-Tfi6_vLKovvQAAAIc"]
[Tue Apr 14 20:50:19.842616 2026] [:error] [pid 59986:tid 60028] [client 74.248.158.124:55952] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "ad44C56axKeW6bX4H7domAAAAEg"]
[Tue Apr 14 20:50:20.892205 2026] [:error] [pid 59986:tid 60021] [client 74.248.158.124:6012] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "ad44DJ6axKeW6bX4H7donQAAAEE"]
[Tue Apr 14 20:50:21.788292 2026] [:error] [pid 59986:tid 60032] [client 74.248.158.124:60305] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "ad44DZ6axKeW6bX4H7dopAAAAEw"]
[Tue Apr 14 20:50:23.117649 2026] [:error] [pid 3778:tid 3800] [client 74.248.158.124:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Tue Apr 14 20:50:23.500048 2026] [:error] [pid 3778:tid 3793] [client 74.248.158.124:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/ws87.php
[Tue Apr 14 20:50:23.758689 2026] [:error] [pid 3778:tid 3797] [client 74.248.158.124:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Tue Apr 14 20:50:24.016435 2026] [:error] [pid 3778:tid 3788] [client 74.248.158.124:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/r2.php
[Tue Apr 14 20:50:24.277249 2026] [:error] [pid 3778:tid 3792] [client 74.248.158.124:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Tue Apr 14 20:50:24.665922 2026] [:error] [pid 3778:tid 3783] [client 74.248.158.124:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/006.php
[Tue Apr 14 20:50:24.925371 2026] [:error] [pid 3778:tid 3790] [client 74.248.158.124:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Tue Apr 14 20:50:26.640030 2026] [:error] [pid 3778:tid 3790] [client 74.248.158.124:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/zogy1.php
[Tue Apr 14 20:50:26.899518 2026] [:error] [pid 3778:tid 3786] [client 74.248.158.124:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/aios-bootstrap.php
[Tue Apr 14 20:50:27.259932 2026] [:error] [pid 3778:tid 3782] [client 74.248.158.124:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Tue Apr 14 20:50:27.529285 2026] [:error] [pid 3778:tid 3791] [client 74.248.158.124:49881] File does not exist: /usr/local/apache/htdocs/suspended-page/gz.php
[Tue Apr 14 20:50:27.797749 2026] [:error] [pid 3778:tid 3798] [client 74.248.158.124:49881] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "ad44Exx5DfpNmYF_PaHfiQAAAVI"]
[Tue Apr 14 20:50:29.326538 2026] [:error] [pid 3810:tid 3830] [client 74.248.158.124:46975] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "ad44Fcqc5XaYZhFXVGeVgQAAAZE"]
[Tue Apr 14 20:50:31.472904 2026] [:error] [pid 59986:tid 60038] [client 74.248.158.124:54673] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "ad44F56axKeW6bX4H7dpJgAAAFI"]
[Tue Apr 14 20:50:33.555800 2026] [:error] [pid 3778:tid 3782] [client 74.248.158.124:54717] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "ad44GRx5DfpNmYF_PaHfzgAAAUI"]
[Tue Apr 14 20:50:35.118499 2026] [:error] [pid 59986:tid 60043] [client 74.248.158.124:5589] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/areak1.php"] [unique_id "ad44G56axKeW6bX4H7dpMAAAAFc"]
[Tue Apr 14 20:50:36.549297 2026] [:error] [pid 59986:tid 60026] [client 74.248.158.124:65362] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/areak1.php"] [unique_id "ad44HJ6axKeW6bX4H7dpNQAAAEY"]
[Tue Apr 14 20:50:38.980429 2026] [:error] [pid 59987:tid 60059] [client 74.248.158.124:65402] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/areak1.php"] [unique_id "ad44HlWpk-Tfi6_vLKowAQAAAIw"]
[Tue Apr 14 20:50:40.636763 2026] [:error] [pid 59986:tid 60042] [client 74.248.158.124:49875] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/areak1.php"] [unique_id "ad44IJ6axKeW6bX4H7dpPwAAAFY"]
[Tue Apr 14 20:50:45.552676 2026] [:error] [pid 3810:tid 3815] [client 74.248.158.124:55327] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "ad44Jcqc5XaYZhFXVGeVvgAAAYI"]
[Tue Apr 14 20:50:48.451434 2026] [:error] [pid 60074:tid 60076] [client 74.248.158.124:60317] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "ad44KOtqnEmNU9vpHCmaOwAAAMA"]
[Tue Apr 14 20:50:51.028051 2026] [:error] [pid 3810:tid 3825] [client 74.248.158.124:58854] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "ad44K8qc5XaYZhFXVGeVzgAAAYw"]
[Tue Apr 14 20:50:52.262707 2026] [:error] [pid 3810:tid 3822] [client 74.248.158.124:55312] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "ad44LMqc5XaYZhFXVGeV0wAAAYk"]
[Tue Apr 14 20:50:53.953007 2026] [:error] [pid 59987:tid 60066] [client 74.248.158.124:58824] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ad44LVWpk-Tfi6_vLKowDAAAAJM"]
[Tue Apr 14 20:50:54.747745 2026] [:error] [pid 60074:tid 60089] [client 74.248.158.124:51088] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ad44LutqnEmNU9vpHCmaQwAAAM0"]
[Tue Apr 14 20:50:56.100317 2026] [:error] [pid 3810:tid 3827] [client 74.248.158.124:52447] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ad44MMqc5XaYZhFXVGeV4AAAAY4"]
[Tue Apr 14 20:51:04.533193 2026] [:error] [pid 3810:tid 3835] [client 74.248.158.124:54679] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ad44OMqc5XaYZhFXVGeV6gAAAZY"]
[Tue Apr 14 20:51:08.849627 2026] [:error] [pid 59986:tid 60032] [client 74.248.158.124:52443] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "ad44PJ6axKeW6bX4H7dpfwAAAEw"]
[Tue Apr 14 20:51:11.174531 2026] [:error] [pid 60074:tid 60088] [client 74.248.158.124:55351] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "ad44P-tqnEmNU9vpHCmaUQAAAMw"]
[Tue Apr 14 20:51:13.131140 2026] [:error] [pid 59985:tid 59997] [client 74.248.158.124:52433] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "ad44QegHaxkvLE6V1klfZwAAAAQ"]
[Tue Apr 14 20:51:15.992002 2026] [:error] [pid 60074:tid 60076] [client 74.248.158.124:5619] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "ad44Q-tqnEmNU9vpHCmaWAAAAMA"]
[Tue Apr 14 20:51:18.023276 2026] [:error] [pid 59987:tid 60063] [client 74.248.158.124:51292] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "ad44RlWpk-Tfi6_vLKowJwAAAJA"]
[Tue Apr 14 20:51:18.882190 2026] [:error] [pid 60074:tid 60082] [client 74.248.158.124:5583] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "ad44RutqnEmNU9vpHCmaWwAAAMY"]
[Tue Apr 14 20:51:20.446582 2026] [:error] [pid 59986:tid 60020] [client 74.248.158.124:55333] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "ad44SJ6axKeW6bX4H7dpnQAAAEA"]
[Tue Apr 14 20:51:21.257496 2026] [:error] [pid 60074:tid 60087] [client 74.248.158.124:65385] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "ad44SetqnEmNU9vpHCmaXAAAAMs"]
[Tue Apr 14 20:51:21.929267 2026] [:error] [pid 59986:tid 60043] [client 74.248.158.124:65363] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "ad44SZ6axKeW6bX4H7dppQAAAFc"]
[Tue Apr 14 20:51:22.892429 2026] [:error] [pid 59987:tid 60066] [client 74.248.158.124:52418] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "ad44SlWpk-Tfi6_vLKowKAAAAJM"]
[Tue Apr 14 20:51:24.236727 2026] [:error] [pid 59987:tid 60065] [client 74.248.158.124:60301] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "ad44TFWpk-Tfi6_vLKowKQAAAJI"]
[Tue Apr 14 20:51:30.407299 2026] [:error] [pid 59986:tid 60034] [client 74.248.158.124:46948] File does not exist: /usr/local/apache/htdocs/suspended-page/1100.php
[Tue Apr 14 20:51:30.857028 2026] [:error] [pid 59986:tid 60030] [client 74.248.158.124:46948] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Tue Apr 14 20:51:31.316022 2026] [:error] [pid 59986:tid 60021] [client 74.248.158.124:46948] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Tue Apr 14 20:51:31.573991 2026] [:error] [pid 59986:tid 60027] [client 74.248.158.124:46948] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kz.php
[Tue Apr 14 20:51:31.844210 2026] [:error] [pid 59986:tid 60024] [client 74.248.158.124:46948] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-lo.php
[Tue Apr 14 20:51:32.101186 2026] [:error] [pid 59986:tid 60042] [client 74.248.158.124:46948] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Tue Apr 14 20:51:32.363166 2026] [:error] [pid 59986:tid 60034] [client 74.248.158.124:46948] File does not exist: /usr/local/apache/htdocs/suspended-page/Ipv6.php
[Tue Apr 14 20:51:32.631535 2026] [:error] [pid 59986:tid 60030] [client 74.248.158.124:46948] File does not exist: /usr/local/apache/htdocs/suspended-page/file-gertdxz.php
[Tue Apr 14 20:51:32.896331 2026] [:error] [pid 59986:tid 60038] [client 74.248.158.124:46948] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Tue Apr 14 20:51:33.155212 2026] [:error] [pid 59986:tid 60041] [client 74.248.158.124:46948] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Tue Apr 14 20:51:33.420091 2026] [:error] [pid 59986:tid 60022] [client 74.248.158.124:46948] File does not exist: /usr/local/apache/htdocs/suspended-page/wglum1.php
[Tue Apr 14 20:51:33.675460 2026] [:error] [pid 59986:tid 60027] [client 74.248.158.124:46948] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "ad44VZ6axKeW6bX4H7dp1QAAAEc"]
[Tue Apr 14 20:51:45.874148 2026] [:error] [pid 3778:tid 3793] [client 74.248.158.124:50274] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "ad44YRx5DfpNmYF_PaHgjQAAAU0"]
[Tue Apr 14 20:51:47.503948 2026] [:error] [pid 59985:tid 60015] [client 74.248.158.124:51309] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "ad44Y-gHaxkvLE6V1klfkQAAABY"]
[Tue Apr 14 20:51:48.760043 2026] [:error] [pid 59986:tid 60044] [client 74.248.158.124:55313] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "ad44ZJ6axKeW6bX4H7dqBgAAAFg"]
[Tue Apr 14 20:51:52.879537 2026] [:error] [pid 59987:tid 60069] [client 74.248.158.124:51287] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xper.php"] [unique_id "ad44aFWpk-Tfi6_vLKowVQAAAJY"]
[Tue Apr 14 20:51:54.657022 2026] [:error] [pid 3778:tid 3788] [client 74.248.158.124:51086] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xper.php"] [unique_id "ad44ahx5DfpNmYF_PaHgnQAAAUg"]
[Tue Apr 14 20:51:58.387068 2026] [:error] [pid 59987:tid 60057] [client 74.248.158.124:65394] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xper.php"] [unique_id "ad44blWpk-Tfi6_vLKowYwAAAIo"]
[Tue Apr 14 20:52:00.181088 2026] [:error] [pid 3778:tid 3784] [client 74.248.158.124:50242] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xper.php"] [unique_id "ad44cBx5DfpNmYF_PaHgoAAAAUQ"]
[Tue Apr 14 20:52:01.169834 2026] [:error] [pid 60074:tid 60085] [client 74.248.158.124:55329] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wxpass.php"] [unique_id "ad44cetqnEmNU9vpHCmaegAAAMk"]
[Tue Apr 14 20:52:01.862618 2026] [:error] [pid 59986:tid 60044] [client 74.248.158.124:51115] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wxpass.php"] [unique_id "ad44cZ6axKeW6bX4H7dqDgAAAFg"]
[Tue Apr 14 20:52:05.945395 2026] [:error] [pid 3810:tid 3815] [client 74.248.158.124:58843] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wxpass.php"] [unique_id "ad44dcqc5XaYZhFXVGeWTwAAAYI"]
[Tue Apr 14 20:52:08.372773 2026] [:error] [pid 3810:tid 3834] [client 74.248.158.124:58875] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wxpass.php"] [unique_id "ad44eMqc5XaYZhFXVGeWWAAAAZU"]
[Tue Apr 14 20:52:11.028279 2026] [:error] [pid 59986:tid 60020] [client 74.248.158.124:51326] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "ad44e56axKeW6bX4H7dqJAAAAEA"]
[Tue Apr 14 20:52:12.829776 2026] [:error] [pid 59986:tid 60036] [client 74.248.158.124:51894] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "ad44fJ6axKeW6bX4H7dqLQAAAFA"]
[Tue Apr 14 20:52:13.775349 2026] [:error] [pid 3778:tid 3794] [client 74.248.158.124:5825] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "ad44fRx5DfpNmYF_PaHgoQAAAU4"]
[Tue Apr 14 20:52:14.813475 2026] [:error] [pid 22177:tid 22188] [client 74.248.158.124:50292] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "ad44foTVeJSXHDIlEDuCRAAAAQk"]
[Tue Apr 14 20:52:16.300957 2026] [:error] [pid 3810:tid 3828] [client 74.248.158.124:51883] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "ad44gMqc5XaYZhFXVGeWZQAAAY8"]
[Tue Apr 14 20:52:16.945877 2026] [:error] [pid 3810:tid 3815] [client 74.248.158.124:51112] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "ad44gMqc5XaYZhFXVGeWaAAAAYI"]
[Tue Apr 14 20:52:18.872679 2026] [:error] [pid 3778:tid 3803] [client 74.248.158.124:5853] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "ad44ghx5DfpNmYF_PaHgpgAAAVc"]
[Tue Apr 14 20:52:22.944342 2026] [:error] [pid 59987:tid 60071] [client 74.248.158.124:65361] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "ad44hlWpk-Tfi6_vLKowcQAAAJg"]
[Tue Apr 14 20:52:29.882160 2026] [:error] [pid 3778:tid 3799] [client 74.248.158.124:58846] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x3x.php"] [unique_id "ad44jRx5DfpNmYF_PaHgsAAAAVM"]
[Tue Apr 14 20:52:31.303886 2026] [:error] [pid 60074:tid 60094] [client 74.248.158.124:58836] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x3x.php"] [unique_id "ad44j-tqnEmNU9vpHCmamQAAANI"]
[Tue Apr 14 20:52:33.240839 2026] [:error] [pid 3778:tid 3797] [client 74.248.158.124:5607] File does not exist: /usr/local/apache/htdocs/suspended-page/x3x.php
[Tue Apr 14 20:52:33.501357 2026] [:error] [pid 3778:tid 3782] [client 74.248.158.124:5607] File does not exist: /usr/local/apache/htdocs/suspended-page/xy.php
[Tue Apr 14 20:52:33.761940 2026] [:error] [pid 3778:tid 3781] [client 74.248.158.124:5607] File does not exist: /usr/local/apache/htdocs/suspended-page/global.php
[Tue Apr 14 20:52:34.024013 2026] [:error] [pid 3778:tid 3798] [client 74.248.158.124:5607] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Tue Apr 14 20:52:34.285740 2026] [:error] [pid 3778:tid 3802] [client 74.248.158.124:5607] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Tue Apr 14 20:52:34.568544 2026] [:error] [pid 3778:tid 3790] [client 74.248.158.124:5607] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Tue Apr 14 20:52:34.828824 2026] [:error] [pid 3778:tid 3796] [client 74.248.158.124:5607] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-block.php
[Tue Apr 14 20:52:35.106321 2026] [:error] [pid 3778:tid 3787] [client 74.248.158.124:5607] [client 74.248.158.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "ad44kxx5DfpNmYF_PaHgwwAAAUc"]
[Tue Apr 14 20:52:37.275818 2026] [:error] [pid 3810:tid 3823] [client 74.248.158.124:5928] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Tue Apr 14 20:52:37.540169 2026] [:error] [pid 3810:tid 3822] [client 74.248.158.124:5928] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Tue Apr 14 20:52:38.020453 2026] [:error] [pid 3810:tid 3821] [client 74.248.158.124:5928] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Tue Apr 14 20:52:38.279726 2026] [:error] [pid 3810:tid 3819] [client 74.248.158.124:5928] File does not exist: /usr/local/apache/htdocs/suspended-page/ws57.php
[Tue Apr 14 20:52:38.535026 2026] [:error] [pid 3810:tid 3813] [client 74.248.158.124:5928] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "ad44lsqc5XaYZhFXVGeWigAAAYA"]
[Tue Apr 14 20:52:40.067651 2026] [:error] [pid 3810:tid 3824] [client 74.248.158.124:51899] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "ad44mMqc5XaYZhFXVGeWkgAAAYs"]
[Tue Apr 14 20:52:41.113740 2026] [:error] [pid 60074:tid 60092] [client 74.248.158.124:5938] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "ad44metqnEmNU9vpHCmapAAAANA"]
[Tue Apr 14 20:52:43.593884 2026] [:error] [pid 59986:tid 60024] [client 74.248.158.124:5922] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "ad44m56axKeW6bX4H7dqZgAAAEQ"]
[Tue Apr 14 20:52:44.585978 2026] [:error] [pid 3778:tid 3794] [client 74.248.158.124:58351] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws66.php"] [unique_id "ad44nBx5DfpNmYF_PaHgywAAAU4"]
[Tue Apr 14 20:52:45.264551 2026] [:error] [pid 59987:tid 60059] [client 74.248.158.124:56055] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws66.php"] [unique_id "ad44nVWpk-Tfi6_vLKowfQAAAIw"]
[Tue Apr 14 20:52:47.618960 2026] [:error] [pid 3778:tid 3783] [client 74.248.158.124:51874] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws66.php"] [unique_id "ad44nxx5DfpNmYF_PaHg0gAAAUM"]
[Tue Apr 14 20:52:49.005281 2026] [:error] [pid 60074:tid 60091] [client 74.248.158.124:51895] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws66.php"] [unique_id "ad44oetqnEmNU9vpHCmaqgAAAM8"]
[Tue Apr 14 20:52:51.034032 2026] [:error] [pid 59986:tid 60022] [client 74.248.158.124:58355] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "ad44o56axKeW6bX4H7dqcAAAAEI"]
[Tue Apr 14 20:52:54.837047 2026] [:error] [pid 3778:tid 3802] [client 74.248.158.124:50262] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "ad44phx5DfpNmYF_PaHg5wAAAVY"]
[Tue Apr 14 20:52:56.055097 2026] [:error] [pid 59986:tid 60042] [client 74.248.158.124:62727] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "ad44qJ6axKeW6bX4H7dqeAAAAFY"]
[Tue Apr 14 20:52:57.187957 2026] [:error] [pid 3778:tid 3799] [client 74.248.158.124:51029] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "ad44qRx5DfpNmYF_PaHg6wAAAVM"]
[Tue Apr 14 20:52:57.869408 2026] [:error] [pid 3778:tid 3782] [client 74.248.158.124:62446] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xynz.php"] [unique_id "ad44qRx5DfpNmYF_PaHg8AAAAUI"]
[Tue Apr 14 20:53:02.294897 2026] [:error] [pid 3810:tid 3815] [client 74.248.158.124:55014] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xynz.php"] [unique_id "ad44rsqc5XaYZhFXVGeWoQAAAYI"]
[Tue Apr 14 20:53:03.931499 2026] [:error] [pid 60074:tid 60087] [client 74.248.158.124:58328] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xynz.php"] [unique_id "ad44r-tqnEmNU9vpHCmavgAAAMs"]
[Tue Apr 14 20:53:09.538153 2026] [:error] [pid 22177:tid 22193] [client 74.248.158.124:51040] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xynz.php"] [unique_id "ad44tYTVeJSXHDIlEDuCXwAAAQ4"]
[Tue Apr 14 20:53:11.707555 2026] [:error] [pid 60074:tid 60096] [client 74.248.158.124:47507] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-01ul.php"] [unique_id "ad44t-tqnEmNU9vpHCmaxAAAANQ"]
[Tue Apr 14 20:53:14.439450 2026] [:error] [pid 60074:tid 60097] [client 74.248.158.124:58105] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-01ul.php"] [unique_id "ad44uutqnEmNU9vpHCmayQAAANU"]
[Tue Apr 14 20:53:18.903079 2026] [:error] [pid 59986:tid 60023] [client 74.248.158.124:63137] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-01ul.php"] [unique_id "ad44vp6axKeW6bX4H7dqpQAAAEM"]
[Tue Apr 14 20:53:20.902821 2026] [:error] [pid 59986:tid 60031] [client 74.248.158.124:6054] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-01ul.php"] [unique_id "ad44wJ6axKeW6bX4H7dqsQAAAEs"]
[Tue Apr 14 20:53:23.113117 2026] [:error] [pid 60074:tid 60086] [client 74.248.158.124:48045] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e7.php"] [unique_id "ad44w-tqnEmNU9vpHCma3gAAAMo"]
[Tue Apr 14 20:53:23.895439 2026] [:error] [pid 3810:tid 3834] [client 74.248.158.124:64783] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e7.php"] [unique_id "ad44w8qc5XaYZhFXVGeWuQAAAZU"]
[Tue Apr 14 20:53:25.141689 2026] [:error] [pid 60074:tid 60100] [client 74.248.158.124:47557] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e7.php"] [unique_id "ad44xetqnEmNU9vpHCma5AAAANg"]
[Tue Apr 14 20:53:27.514909 2026] [:error] [pid 60074:tid 60081] [client 74.248.158.124:63491] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e7.php"] [unique_id "ad44x-tqnEmNU9vpHCma7wAAAMU"]
[Tue Apr 14 20:53:28.589992 2026] [:error] [pid 59986:tid 60037] [client 74.248.158.124:56941] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "ad44yJ6axKeW6bX4H7dqyAAAAFE"]
[Tue Apr 14 20:53:29.842966 2026] [:error] [pid 59986:tid 60025] [client 74.248.158.124:56939] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "ad44yZ6axKeW6bX4H7dqzQAAAEU"]
[Tue Apr 14 20:53:30.645638 2026] [:error] [pid 59986:tid 60038] [client 74.248.158.124:55169] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "ad44yp6axKeW6bX4H7dq0AAAAFI"]
[Tue Apr 14 20:53:31.467006 2026] [:error] [pid 3778:tid 3798] [client 74.248.158.124:55175] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "ad44yxx5DfpNmYF_PaHhIgAAAVI"]
[Tue Apr 14 20:53:33.570986 2026] [:error] [pid 59986:tid 60044] [client 74.248.158.124:49283] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "ad44zZ6axKeW6bX4H7dq2QAAAFg"]
[Tue Apr 14 20:53:34.430276 2026] [:error] [pid 59986:tid 60038] [client 74.248.158.124:49283] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "ad44zp6axKeW6bX4H7dq2gAAAFI"]
[Tue Apr 14 20:53:36.443807 2026] [:error] [pid 59986:tid 60043] [client 74.248.158.124:59168] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "ad440J6axKeW6bX4H7dq4wAAAFc"]
[Tue Apr 14 20:53:37.325817 2026] [:error] [pid 60074:tid 60076] [client 74.248.158.124:58032] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "ad440etqnEmNU9vpHCmbBQAAAMA"]
[Tue Apr 14 20:53:38.725924 2026] [:error] [pid 59987:tid 60048] [client 74.248.158.124:64788] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Tue Apr 14 20:53:38.989065 2026] [:error] [pid 59987:tid 60054] [client 74.248.158.124:64788] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Tue Apr 14 20:53:39.263854 2026] [:error] [pid 59987:tid 60057] [client 74.248.158.124:64788] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Tue Apr 14 20:53:39.522849 2026] [:error] [pid 59987:tid 60056] [client 74.248.158.124:64788] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Tue Apr 14 20:53:39.791469 2026] [:error] [pid 59987:tid 60067] [client 74.248.158.124:64788] File does not exist: /usr/local/apache/htdocs/suspended-page/error_log.php
[Tue Apr 14 20:53:40.065948 2026] [:error] [pid 59987:tid 60052] [client 74.248.158.124:64788] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Tue Apr 14 20:53:40.325979 2026] [:error] [pid 59987:tid 60071] [client 74.248.158.124:64788] File does not exist: /usr/local/apache/htdocs/suspended-page/curl.php
[Tue Apr 14 20:53:40.599868 2026] [:error] [pid 59987:tid 60065] [client 74.248.158.124:64788] File does not exist: /usr/local/apache/htdocs/suspended-page/sallu.php
[Tue Apr 14 20:53:41.193016 2026] [:error] [pid 59987:tid 60069] [client 74.248.158.124:64788] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Tue Apr 14 20:53:41.464052 2026] [:error] [pid 59987:tid 60051] [client 74.248.158.124:64788] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Tue Apr 14 20:53:41.734636 2026] [:error] [pid 59987:tid 60070] [client 74.248.158.124:64788] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Tue Apr 14 20:53:41.990837 2026] [:error] [pid 59987:tid 60061] [client 74.248.158.124:64788] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods_260325043000.php"] [unique_id "ad441VWpk-Tfi6_vLKowoQAAAI4"]
[Tue Apr 14 20:53:45.856119 2026] [:error] [pid 3778:tid 3800] [client 74.248.158.124:5743] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods_260325043000.php"] [unique_id "ad442Rx5DfpNmYF_PaHhNwAAAVQ"]
[Tue Apr 14 20:53:47.968366 2026] [:error] [pid 59986:tid 60027] [client 74.248.158.124:57672] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods_260325043000.php"] [unique_id "ad44256axKeW6bX4H7dq-QAAAEc"]
[Tue Apr 14 20:53:51.042954 2026] [:error] [pid 22177:tid 22182] [client 74.248.158.124:6118] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods_260325043000.php"] [unique_id "ad4434TVeJSXHDIlEDuCggAAAQM"]
[Tue Apr 14 20:53:52.462700 2026] [:error] [pid 22177:tid 22189] [client 74.248.158.124:56851] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods_260401065719.php"] [unique_id "ad444ITVeJSXHDIlEDuCiwAAAQo"]
[Tue Apr 14 20:53:53.930989 2026] [:error] [pid 60074:tid 60098] [client 74.248.158.124:54865] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods_260401065719.php"] [unique_id "ad444etqnEmNU9vpHCmbHQAAANY"]
[Tue Apr 14 20:53:54.774963 2026] [:error] [pid 60074:tid 60077] [client 74.248.158.124:64119] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods_260401065719.php"] [unique_id "ad444utqnEmNU9vpHCmbJQAAAME"]
[Tue Apr 14 20:53:55.793323 2026] [:error] [pid 59986:tid 60021] [client 74.248.158.124:54863] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods_260401065719.php"] [unique_id "ad44456axKeW6bX4H7drDwAAAEE"]
[Tue Apr 14 22:18:44.693054 2026] [:error] [pid 3810:tid 3820] [client 154.54.100.171:46080] [client 154.54.100.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ad5MxMqc5XaYZhFXVGfAogAAAYc"]
[Wed Apr 15 01:24:40.375591 2026] [:error] [pid 62297:tid 62354] [client 20.220.197.80:33480] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad54WKvogcWlrafOEaHJVQAAAQA"]
[Wed Apr 15 04:01:23.933783 2026] [:error] [pid 4065:tid 4095] [client 216.81.248.211:46408] [client 216.81.248.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ad6dEwWArgJTHu2_6OyrPwAAABM"]
[Wed Apr 15 11:45:07.877758 2026] [:error] [pid 30555:tid 30616] [client 159.89.55.133:58364] [client 159.89.55.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ad8Jw1TZEITMpQMsOnjY3wAAAII"]
[Wed Apr 15 20:16:12.464028 2026] [:error] [pid 31053:tid 31080] [client 51.103.238.164:8387] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Wed Apr 15 20:16:12.724586 2026] [:error] [pid 31053:tid 31066] [client 51.103.238.164:8387] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-xme.php
[Wed Apr 15 20:16:12.962692 2026] [:error] [pid 31053:tid 31078] [client 51.103.238.164:8387] File does not exist: /usr/local/apache/htdocs/suspended-page/136.php
[Wed Apr 15 20:16:14.724907 2026] [:error] [pid 31053:tid 31073] [client 51.103.238.164:8387] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Wed Apr 15 20:16:14.963902 2026] [:error] [pid 31053:tid 31057] [client 51.103.238.164:8387] File does not exist: /usr/local/apache/htdocs/suspended-page/amdin.php
[Wed Apr 15 20:16:15.214891 2026] [:error] [pid 31053:tid 31079] [client 51.103.238.164:8387] File does not exist: /usr/local/apache/htdocs/suspended-page/huya.php
[Wed Apr 15 20:16:15.453011 2026] [:error] [pid 31053:tid 31075] [client 51.103.238.164:8387] File does not exist: /usr/local/apache/htdocs/suspended-page/puc.php
[Wed Apr 15 20:16:15.704031 2026] [:error] [pid 31053:tid 31070] [client 51.103.238.164:8387] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Wed Apr 15 20:16:15.950150 2026] [:error] [pid 31053:tid 31059] [client 51.103.238.164:8387] File does not exist: /usr/local/apache/htdocs/suspended-page/ewp.php
[Wed Apr 15 20:16:16.185457 2026] [:error] [pid 31053:tid 31065] [client 51.103.238.164:8387] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "ad-BkBcEkLCmvF0fjDfGkQAAAIk"]
[Wed Apr 15 20:16:16.751303 2026] [:error] [pid 30957:tid 30999] [client 51.103.238.164:52107] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "ad-BkH5gwVEVXHfVSip_VwAAAEo"]
[Wed Apr 15 20:16:17.305090 2026] [:error] [pid 37370:tid 37376] [client 51.103.238.164:64600] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "ad-BkXg-gnM2Ga0cGAAsJgAAAQQ"]
[Wed Apr 15 20:16:17.804953 2026] [:error] [pid 30958:tid 31035] [client 51.103.238.164:2015] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "ad-BkceG3wSKTO7NWFGe-gAAANM"]
[Wed Apr 15 20:16:18.441850 2026] [:error] [pid 37370:tid 37389] [client 51.103.238.164:47353] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "ad-Bkng-gnM2Ga0cGAAsKgAAARE"]
[Wed Apr 15 20:16:19.084440 2026] [:error] [pid 30956:tid 30981] [client 51.103.238.164:19744] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "ad-Bk0BGUpjaWntNYq1uVwAAABU"]
[Wed Apr 15 20:16:19.560017 2026] [:error] [pid 37370:tid 37381] [client 51.103.238.164:7883] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "ad-Bk3g-gnM2Ga0cGAAsLgAAAQk"]
[Wed Apr 15 20:16:20.120535 2026] [:error] [pid 31053:tid 31077] [client 51.103.238.164:19300] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "ad-BlBcEkLCmvF0fjDfGlQAAAJU"]
[Wed Apr 15 20:16:20.706646 2026] [:error] [pid 30957:tid 30991] [client 51.103.238.164:17839] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ad-BlH5gwVEVXHfVSip_WgAAAEI"]
[Wed Apr 15 20:16:21.255029 2026] [:error] [pid 37370:tid 37392] [client 51.103.238.164:19310] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ad-BlXg-gnM2Ga0cGAAsMAAAARQ"]
[Wed Apr 15 20:16:21.821456 2026] [:error] [pid 31053:tid 31058] [client 51.103.238.164:19764] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ad-BlRcEkLCmvF0fjDfGmgAAAII"]
[Wed Apr 15 20:16:22.423951 2026] [:error] [pid 37370:tid 37373] [client 51.103.238.164:10539] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ad-Blng-gnM2Ga0cGAAsNgAAAQE"]
[Wed Apr 15 20:16:22.975611 2026] [:error] [pid 37370:tid 37391] [client 51.103.238.164:58893] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "ad-Blng-gnM2Ga0cGAAsOQAAARM"]
[Wed Apr 15 20:16:23.547755 2026] [:error] [pid 30958:tid 31028] [client 51.103.238.164:20313] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "ad-Bl8eG3wSKTO7NWFGfBAAAAMw"]
[Wed Apr 15 20:16:24.164469 2026] [:error] [pid 30957:tid 30998] [client 51.103.238.164:63959] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "ad-BmH5gwVEVXHfVSip_XAAAAEk"]
[Wed Apr 15 20:16:24.658890 2026] [:error] [pid 30956:tid 30984] [client 51.103.238.164:52099] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "ad-BmEBGUpjaWntNYq1uXAAAABg"]
[Wed Apr 15 20:16:25.167602 2026] [:error] [pid 30956:tid 30969] [client 51.103.238.164:58894] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "ad-BmUBGUpjaWntNYq1uXwAAAAk"]
[Wed Apr 15 20:16:25.728835 2026] [:error] [pid 37370:tid 37385] [client 51.103.238.164:57166] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "ad-BmXg-gnM2Ga0cGAAsPAAAAQ0"]
[Wed Apr 15 20:16:26.445212 2026] [:error] [pid 31053:tid 31075] [client 51.103.238.164:58894] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "ad-BmhcEkLCmvF0fjDfGoAAAAJM"]
[Wed Apr 15 20:16:27.086811 2026] [:error] [pid 31053:tid 31066] [client 51.103.238.164:7920] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "ad-BmxcEkLCmvF0fjDfGpAAAAIo"]
[Wed Apr 15 20:16:27.753581 2026] [:error] [pid 30958:tid 31036] [client 51.103.238.164:58913] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "ad-Bm8eG3wSKTO7NWFGfCwAAANQ"]
[Wed Apr 15 20:16:28.317774 2026] [:error] [pid 30956:tid 30964] [client 51.103.238.164:10535] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "ad-BnEBGUpjaWntNYq1ubgAAAAQ"]
[Wed Apr 15 20:16:28.895595 2026] [:error] [pid 30957:tid 31000] [client 51.103.238.164:47324] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "ad-BnH5gwVEVXHfVSip_YwAAAEs"]
[Wed Apr 15 20:16:29.554103 2026] [:error] [pid 30957:tid 30990] [client 51.103.238.164:13458] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "ad-BnX5gwVEVXHfVSip_ZgAAAEE"]
[Wed Apr 15 20:16:30.137612 2026] [:error] [pid 30957:tid 31002] [client 51.103.238.164:20298] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "ad-Bnn5gwVEVXHfVSip_aAAAAE0"]
[Wed Apr 15 20:16:30.712407 2026] [:error] [pid 30957:tid 30992] [client 51.103.238.164:46678] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "ad-Bnn5gwVEVXHfVSip_bAAAAEM"]
[Wed Apr 15 20:16:31.405309 2026] [:error] [pid 37370:tid 37388] [client 51.103.238.164:13449] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "ad-Bn3g-gnM2Ga0cGAAsPwAAARA"]
[Wed Apr 15 20:16:31.951489 2026] [:error] [pid 30956:tid 30981] [client 51.103.238.164:52131] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "ad-Bn0BGUpjaWntNYq1ucwAAABU"]
[Wed Apr 15 20:16:33.069572 2026] [:error] [pid 37370:tid 37374] [client 51.103.238.164:46687] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "ad-BoXg-gnM2Ga0cGAAsRgAAAQI"]
[Wed Apr 15 20:16:33.686021 2026] [:error] [pid 30957:tid 30998] [client 51.103.238.164:49636] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "ad-BoX5gwVEVXHfVSip_dQAAAEk"]
[Wed Apr 15 20:16:34.525641 2026] [:error] [pid 30957:tid 31009] [client 51.103.238.164:29494] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "ad-Bon5gwVEVXHfVSip_dwAAAFQ"]
[Wed Apr 15 20:16:35.241261 2026] [:error] [pid 30957:tid 31012] [client 51.103.238.164:63942] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "ad-Bo35gwVEVXHfVSip_eAAAAFc"]
[Wed Apr 15 20:16:35.815616 2026] [:error] [pid 30958:tid 31028] [client 51.103.238.164:62782] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "ad-Bo8eG3wSKTO7NWFGfGwAAAMw"]
[Wed Apr 15 20:16:36.523783 2026] [:error] [pid 30958:tid 31017] [client 51.103.238.164:64567] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "ad-BpMeG3wSKTO7NWFGfHgAAAME"]
[Wed Apr 15 20:16:37.399758 2026] [:error] [pid 37370:tid 37396] [client 51.103.238.164:29470] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "ad-BpXg-gnM2Ga0cGAAsSwAAARg"]
[Wed Apr 15 20:16:37.938420 2026] [:error] [pid 37370:tid 37388] [client 51.103.238.164:29498] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "ad-BpXg-gnM2Ga0cGAAsTAAAARA"]
[Wed Apr 15 20:16:39.173326 2026] [:error] [pid 30958:tid 31031] [client 51.103.238.164:62744] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "ad-Bp8eG3wSKTO7NWFGfIgAAAM8"]
[Wed Apr 15 20:16:39.790365 2026] [:error] [pid 30956:tid 30983] [client 51.103.238.164:12791] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "ad-Bp0BGUpjaWntNYq1udAAAABc"]
[Wed Apr 15 20:16:40.308203 2026] [:error] [pid 30958:tid 31018] [client 51.103.238.164:47890] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "ad-BqMeG3wSKTO7NWFGfJAAAAMI"]
[Wed Apr 15 20:16:40.983775 2026] [:error] [pid 31053:tid 31073] [client 51.103.238.164:64561] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "ad-BqBcEkLCmvF0fjDfGtAAAAJE"]
[Wed Apr 15 20:16:41.515045 2026] [:error] [pid 30958:tid 31024] [client 51.103.238.164:31696] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "ad-BqceG3wSKTO7NWFGfKAAAAMg"]
[Wed Apr 15 20:16:42.082693 2026] [:error] [pid 30958:tid 31027] [client 51.103.238.164:17821] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "ad-BqseG3wSKTO7NWFGfKgAAAMs"]
[Wed Apr 15 20:16:42.605976 2026] [:error] [pid 30957:tid 30998] [client 51.103.238.164:31686] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "ad-Bqn5gwVEVXHfVSip_fQAAAEk"]
[Wed Apr 15 20:16:43.251848 2026] [:error] [pid 37370:tid 37391] [client 51.103.238.164:1672] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "ad-Bq3g-gnM2Ga0cGAAsUwAAARM"]
[Wed Apr 15 20:16:43.957471 2026] [:error] [pid 37370:tid 37381] [client 51.103.238.164:10019] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ad-Bq3g-gnM2Ga0cGAAsVQAAAQk"]
[Wed Apr 15 20:16:44.594329 2026] [:error] [pid 30956:tid 30982] [client 51.103.238.164:59543] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ad-BrEBGUpjaWntNYq1ueAAAABY"]
[Wed Apr 15 20:16:45.318731 2026] [:error] [pid 37370:tid 37378] [client 51.103.238.164:64516] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ad-BrXg-gnM2Ga0cGAAsWQAAAQY"]
[Wed Apr 15 20:16:46.028231 2026] [:error] [pid 30958:tid 31019] [client 51.103.238.164:57125] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ad-BrseG3wSKTO7NWFGfLgAAAMM"]
[Wed Apr 15 20:16:46.932764 2026] [:error] [pid 37370:tid 37383] [client 51.103.238.164:8344] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "ad-Brng-gnM2Ga0cGAAsXAAAAQs"]
[Wed Apr 15 20:16:48.072753 2026] [:error] [pid 30957:tid 31012] [client 51.103.238.164:47933] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "ad-BsH5gwVEVXHfVSip_gAAAAFc"]
[Wed Apr 15 20:16:48.643175 2026] [:error] [pid 37370:tid 37372] [client 51.103.238.164:13126] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "ad-BsHg-gnM2Ga0cGAAsYgAAAQA"]
[Wed Apr 15 20:16:50.263114 2026] [:error] [pid 30958:tid 31021] [client 51.103.238.164:13135] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "ad-BsseG3wSKTO7NWFGfMAAAAMU"]
[Wed Apr 15 20:16:50.823548 2026] [:error] [pid 31053:tid 31079] [client 51.103.238.164:64539] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "ad-BshcEkLCmvF0fjDfGtgAAAJc"]
[Wed Apr 15 20:16:51.386099 2026] [:error] [pid 37370:tid 37383] [client 51.103.238.164:1793] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "ad-Bs3g-gnM2Ga0cGAAsawAAAQs"]
[Wed Apr 15 20:16:52.098844 2026] [:error] [pid 30958:tid 31023] [client 51.103.238.164:8828] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "ad-BtMeG3wSKTO7NWFGfMgAAAMc"]
[Wed Apr 15 20:16:53.782232 2026] [:error] [pid 30956:tid 30960] [client 51.103.238.164:7761] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "ad-BtUBGUpjaWntNYq1uewAAAAA"]
[Wed Apr 15 20:16:54.498524 2026] [:error] [pid 30957:tid 31006] [client 51.103.238.164:57104] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "ad-Btn5gwVEVXHfVSip_hAAAAFE"]
[Wed Apr 15 20:16:55.123003 2026] [:error] [pid 37370:tid 37384] [client 51.103.238.164:13868] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "ad-Bt3g-gnM2Ga0cGAAscQAAAQw"]
[Wed Apr 15 20:16:55.739880 2026] [:error] [pid 37370:tid 37389] [client 51.103.238.164:13871] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "ad-Bt3g-gnM2Ga0cGAAsdAAAARE"]
[Wed Apr 15 20:16:56.551401 2026] [:error] [pid 37370:tid 37393] [client 51.103.238.164:16995] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "ad-BuHg-gnM2Ga0cGAAseQAAARU"]
[Wed Apr 15 20:16:57.369090 2026] [:error] [pid 37370:tid 37372] [client 51.103.238.164:13830] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "ad-BuXg-gnM2Ga0cGAAsfQAAAQA"]
[Wed Apr 15 20:16:58.084593 2026] [:error] [pid 31053:tid 31080] [client 51.103.238.164:1807] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "ad-BuhcEkLCmvF0fjDfGuwAAAJg"]
[Wed Apr 15 20:16:58.800499 2026] [:error] [pid 31053:tid 31058] [client 51.103.238.164:1813] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "ad-BuhcEkLCmvF0fjDfGvgAAAII"]
[Wed Apr 15 20:16:59.667616 2026] [:error] [pid 37370:tid 37387] [client 51.103.238.164:35705] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "ad-Bu3g-gnM2Ga0cGAAsjAAAAQ8"]
[Wed Apr 15 20:17:00.440579 2026] [:error] [pid 30958:tid 31025] [client 51.103.238.164:12752] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "ad-BvMeG3wSKTO7NWFGfPgAAAMk"]
[Wed Apr 15 20:17:01.403729 2026] [:error] [pid 31053:tid 31057] [client 51.103.238.164:34429] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "ad-BvRcEkLCmvF0fjDfGxgAAAIE"]
[Wed Apr 15 20:17:02.071639 2026] [:error] [pid 31053:tid 31066] [client 51.103.238.164:12798] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "ad-BvhcEkLCmvF0fjDfGyAAAAIo"]
[Wed Apr 15 20:17:03.153779 2026] [:error] [pid 31053:tid 31062] [client 51.103.238.164:56466] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "ad-BvxcEkLCmvF0fjDfGzwAAAIY"]
[Wed Apr 15 20:17:03.851833 2026] [:error] [pid 37370:tid 37376] [client 51.103.238.164:1849] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ad-Bv3g-gnM2Ga0cGAAsqwAAAQQ"]
[Wed Apr 15 20:17:04.485556 2026] [:error] [pid 31053:tid 31069] [client 51.103.238.164:13921] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ad-BwBcEkLCmvF0fjDfG1wAAAI0"]
[Wed Apr 15 20:17:05.510105 2026] [:error] [pid 31053:tid 31062] [client 51.103.238.164:13080] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ad-BwRcEkLCmvF0fjDfG2gAAAIY"]
[Wed Apr 15 20:17:06.365752 2026] [:error] [pid 37370:tid 37376] [client 51.103.238.164:34396] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ad-Bwng-gnM2Ga0cGAAssgAAAQQ"]
[Wed Apr 15 20:17:06.942832 2026] [:error] [pid 31053:tid 31076] [client 51.103.238.164:9826] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ad-BwhcEkLCmvF0fjDfG4AAAAJQ"]
[Wed Apr 15 20:17:07.804861 2026] [:error] [pid 37370:tid 37388] [client 51.103.238.164:13086] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ad-Bw3g-gnM2Ga0cGAAsxQAAARA"]
[Wed Apr 15 20:17:08.426958 2026] [:error] [pid 30957:tid 31005] [client 51.103.238.164:1054] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ad-BxH5gwVEVXHfVSip_jgAAAFA"]
[Wed Apr 15 20:17:09.232512 2026] [:error] [pid 31053:tid 31077] [client 51.103.238.164:48601] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ad-BxRcEkLCmvF0fjDfG-AAAAJU"]
[Wed Apr 15 20:17:09.901727 2026] [:error] [pid 37370:tid 37374] [client 51.103.238.164:35697] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ad-BxXg-gnM2Ga0cGAAs1AAAAQI"]
[Wed Apr 15 20:17:10.596297 2026] [:error] [pid 37370:tid 37386] [client 51.103.238.164:8633] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ad-Bxng-gnM2Ga0cGAAs2AAAAQ4"]
[Wed Apr 15 20:17:11.173806 2026] [:error] [pid 37370:tid 37372] [client 51.103.238.164:1090] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ad-Bx3g-gnM2Ga0cGAAs3AAAAQA"]
[Wed Apr 15 20:17:11.665902 2026] [:error] [pid 30956:tid 30975] [client 51.103.238.164:8467] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ad-Bx0BGUpjaWntNYq1ugQAAAA8"]
[Wed Apr 15 20:17:12.192585 2026] [:error] [pid 31053:tid 31076] [client 51.103.238.164:57606] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "ad-ByBcEkLCmvF0fjDfG_AAAAJQ"]
[Wed Apr 15 20:17:12.731082 2026] [:error] [pid 37370:tid 37381] [client 51.103.238.164:1830] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "ad-ByHg-gnM2Ga0cGAAs4QAAAQk"]
[Wed Apr 15 20:17:13.258493 2026] [:error] [pid 31053:tid 31073] [client 51.103.238.164:8600] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "ad-ByRcEkLCmvF0fjDfG_gAAAJE"]
[Wed Apr 15 20:17:13.825248 2026] [:error] [pid 30956:tid 30964] [client 51.103.238.164:1848] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "ad-ByUBGUpjaWntNYq1ugwAAAAQ"]
[Wed Apr 15 20:17:14.779988 2026] [:error] [pid 30956:tid 30982] [client 51.103.238.164:58308] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "ad-BykBGUpjaWntNYq1uiAAAABY"]
[Wed Apr 15 20:17:15.353532 2026] [:error] [pid 30957:tid 31000] [client 51.103.238.164:1776] File does not exist: /usr/local/apache/htdocs/suspended-page/4.php
[Wed Apr 15 20:17:15.595186 2026] [:error] [pid 30957:tid 30992] [client 51.103.238.164:1776] File does not exist: /usr/local/apache/htdocs/suspended-page/5.php
[Wed Apr 15 20:17:15.835857 2026] [:error] [pid 30957:tid 30998] [client 51.103.238.164:1776] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Wed Apr 15 20:17:16.096220 2026] [:error] [pid 30957:tid 30997] [client 51.103.238.164:1776] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php
[Wed Apr 15 20:17:16.355730 2026] [:error] [pid 30957:tid 31004] [client 51.103.238.164:1776] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Wed Apr 15 20:17:16.605571 2026] [:error] [pid 30957:tid 31003] [client 51.103.238.164:1776] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Wed Apr 15 20:17:17.108151 2026] [:error] [pid 30957:tid 31012] [client 51.103.238.164:1776] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_S.php
[Wed Apr 15 20:17:17.353568 2026] [:error] [pid 30957:tid 31008] [client 51.103.238.164:1776] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Wed Apr 15 20:17:17.658826 2026] [:error] [pid 30957:tid 31007] [client 51.103.238.164:1776] File does not exist: /usr/local/apache/htdocs/suspended-page/111.php
[Wed Apr 15 20:17:17.899331 2026] [:error] [pid 30957:tid 30990] [client 51.103.238.164:1776] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Wed Apr 15 20:17:18.218508 2026] [:error] [pid 30957:tid 31006] [client 51.103.238.164:1776] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "ad-Bzn5gwVEVXHfVSip_oQAAAFE"]
[Wed Apr 15 20:17:18.760294 2026] [:error] [pid 31053:tid 31078] [client 51.103.238.164:1094] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "ad-BzhcEkLCmvF0fjDfHBAAAAJY"]
[Wed Apr 15 20:17:19.288119 2026] [:error] [pid 31053:tid 31057] [client 51.103.238.164:35650] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "ad-BzxcEkLCmvF0fjDfHCAAAAIE"]
[Wed Apr 15 20:17:19.881892 2026] [:error] [pid 30957:tid 30994] [client 51.103.238.164:8624] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "ad-Bz35gwVEVXHfVSip_ogAAAEU"]
[Wed Apr 15 20:17:20.427807 2026] [:error] [pid 30956:tid 30971] [client 51.103.238.164:35710] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "ad-B0EBGUpjaWntNYq1ujQAAAAs"]
[Wed Apr 15 20:17:20.995417 2026] [:error] [pid 30956:tid 30972] [client 51.103.238.164:1127] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "ad-B0EBGUpjaWntNYq1ujwAAAAw"]
[Wed Apr 15 20:17:21.890335 2026] [:error] [pid 30958:tid 31029] [client 51.103.238.164:35694] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "ad-B0ceG3wSKTO7NWFGfZQAAAM0"]
[Wed Apr 15 20:17:22.506232 2026] [:error] [pid 30958:tid 31036] [client 51.103.238.164:1075] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "ad-B0seG3wSKTO7NWFGfZwAAANQ"]
[Wed Apr 15 20:17:23.057862 2026] [:error] [pid 30957:tid 31004] [client 51.103.238.164:48635] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "ad-B035gwVEVXHfVSip_pQAAAE8"]
[Wed Apr 15 20:17:23.717879 2026] [:error] [pid 30958:tid 31035] [client 51.103.238.164:1104] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "ad-B08eG3wSKTO7NWFGfaQAAANM"]
[Wed Apr 15 20:17:24.292518 2026] [:error] [pid 37370:tid 37387] [client 51.103.238.164:32376] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "ad-B1Hg-gnM2Ga0cGAAs5wAAAQ8"]
[Wed Apr 15 20:17:24.830015 2026] [:error] [pid 31053:tid 31064] [client 51.103.238.164:24965] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "ad-B1BcEkLCmvF0fjDfHGAAAAIg"]
[Wed Apr 15 20:17:25.484777 2026] [:error] [pid 30958:tid 31025] [client 51.103.238.164:1749] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "ad-B1ceG3wSKTO7NWFGfcAAAAMk"]
[Wed Apr 15 20:17:26.135520 2026] [:error] [pid 30956:tid 30984] [client 51.103.238.164:8490] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "ad-B1kBGUpjaWntNYq1ulQAAABg"]
[Wed Apr 15 20:17:26.768777 2026] [:error] [pid 37370:tid 37376] [client 51.103.238.164:49573] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "ad-B1ng-gnM2Ga0cGAAs7AAAAQQ"]
[Wed Apr 15 20:17:27.476104 2026] [:error] [pid 37370:tid 37383] [client 51.103.238.164:32360] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "ad-B13g-gnM2Ga0cGAAs7wAAAQs"]
[Wed Apr 15 20:17:28.155383 2026] [:error] [pid 30958:tid 31027] [client 51.103.238.164:1774] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ad-B2MeG3wSKTO7NWFGfdAAAAMs"]
[Wed Apr 15 20:17:28.745094 2026] [:error] [pid 30958:tid 31036] [client 51.103.238.164:48578] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ad-B2MeG3wSKTO7NWFGfdwAAANQ"]
[Wed Apr 15 20:17:29.402382 2026] [:error] [pid 30956:tid 30965] [client 51.103.238.164:8230] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ad-B2UBGUpjaWntNYq1umAAAAAU"]
[Wed Apr 15 20:17:29.935681 2026] [:error] [pid 31053:tid 31057] [client 51.103.238.164:57605] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ad-B2RcEkLCmvF0fjDfHHQAAAIE"]
[Wed Apr 15 20:17:30.557346 2026] [:error] [pid 30957:tid 31011] [client 51.103.238.164:8607] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "ad-B2n5gwVEVXHfVSip_swAAAFY"]
[Wed Apr 15 20:17:31.166755 2026] [:error] [pid 37370:tid 37389] [client 51.103.238.164:32353] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "ad-B23g-gnM2Ga0cGAAs9QAAARE"]
[Wed Apr 15 20:17:31.794844 2026] [:error] [pid 30957:tid 31006] [client 51.103.238.164:10322] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "ad-B235gwVEVXHfVSip_tgAAAFE"]
[Wed Apr 15 20:17:32.364085 2026] [:error] [pid 30958:tid 31039] [client 51.103.238.164:48585] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "ad-B3MeG3wSKTO7NWFGfhQAAANc"]
[Wed Apr 15 20:17:32.917459 2026] [:error] [pid 31053:tid 31067] [client 51.103.238.164:10332] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "ad-B3BcEkLCmvF0fjDfHUgAAAIs"]
[Wed Apr 15 20:17:33.577935 2026] [:error] [pid 37370:tid 37375] [client 51.103.238.164:24978] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "ad-B3Xg-gnM2Ga0cGAAs-wAAAQM"]
[Wed Apr 15 20:17:34.076515 2026] [:error] [pid 30957:tid 31001] [client 51.103.238.164:10327] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "ad-B3n5gwVEVXHfVSip_uQAAAEw"]
[Wed Apr 15 20:17:34.573807 2026] [:error] [pid 37370:tid 37377] [client 51.103.238.164:47256] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "ad-B3ng-gnM2Ga0cGAAs_gAAAQU"]
[Wed Apr 15 20:17:35.138586 2026] [:error] [pid 31053:tid 31072] [client 51.103.238.164:47277] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/zample.php"] [unique_id "ad-B3xcEkLCmvF0fjDfHpwAAAJA"]
[Wed Apr 15 20:17:35.627722 2026] [:error] [pid 37370:tid 37384] [client 51.103.238.164:1732] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/zample.php"] [unique_id "ad-B33g-gnM2Ga0cGAAtAQAAAQw"]
[Wed Apr 15 20:17:36.130806 2026] [:error] [pid 31053:tid 31073] [client 51.103.238.164:1150] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/zample.php"] [unique_id "ad-B4BcEkLCmvF0fjDfHugAAAJE"]
[Wed Apr 15 20:17:36.644195 2026] [:error] [pid 30958:tid 31032] [client 51.103.238.164:48586] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/zample.php"] [unique_id "ad-B4MeG3wSKTO7NWFGfmQAAANA"]
[Wed Apr 15 20:17:37.222772 2026] [:error] [pid 30958:tid 31038] [client 51.103.238.164:49563] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "ad-B4ceG3wSKTO7NWFGfnAAAANY"]
[Wed Apr 15 20:17:37.730782 2026] [:error] [pid 31053:tid 31076] [client 51.103.238.164:35665] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "ad-B4RcEkLCmvF0fjDfHvwAAAJQ"]
[Wed Apr 15 20:17:38.435793 2026] [:error] [pid 37370:tid 37395] [client 51.103.238.164:47247] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "ad-B4ng-gnM2Ga0cGAAtBgAAARc"]
[Wed Apr 15 20:17:39.058976 2026] [:error] [pid 37370:tid 37396] [client 51.103.238.164:8217] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "ad-B43g-gnM2Ga0cGAAtCwAAARg"]
[Wed Apr 15 20:17:39.986677 2026] [:error] [pid 37370:tid 37380] [client 51.103.238.164:24988] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "ad-B43g-gnM2Ga0cGAAtEAAAAQg"]
[Wed Apr 15 20:17:40.519486 2026] [:error] [pid 31053:tid 31059] [client 51.103.238.164:13947] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "ad-B5BcEkLCmvF0fjDfHwwAAAIM"]
[Wed Apr 15 20:17:41.528890 2026] [:error] [pid 37370:tid 37394] [client 51.103.238.164:1740] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "ad-B5Xg-gnM2Ga0cGAAtGQAAARY"]
[Wed Apr 15 20:17:42.243594 2026] [:error] [pid 30958:tid 31019] [client 51.103.238.164:34396] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "ad-B5seG3wSKTO7NWFGfpQAAAMM"]
[Wed Apr 15 20:17:42.973475 2026] [:error] [pid 30957:tid 30994] [client 51.103.238.164:9828] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ad-B5n5gwVEVXHfVSip_wQAAAEU"]
[Wed Apr 15 20:17:43.646127 2026] [:error] [pid 30958:tid 31036] [client 51.103.238.164:32330] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ad-B58eG3wSKTO7NWFGfqQAAANQ"]
[Wed Apr 15 20:17:44.322199 2026] [:error] [pid 31053:tid 31060] [client 51.103.238.164:58352] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ad-B6BcEkLCmvF0fjDfHxAAAAIQ"]
[Wed Apr 15 20:17:44.898647 2026] [:error] [pid 37370:tid 37393] [client 51.103.238.164:1767] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ad-B6Hg-gnM2Ga0cGAAtIQAAARU"]
[Wed Apr 15 20:17:45.820592 2026] [:error] [pid 31053:tid 31071] [client 51.103.238.164:48598] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "ad-B6RcEkLCmvF0fjDfHxgAAAI8"]
[Wed Apr 15 20:17:46.366956 2026] [:error] [pid 31053:tid 31059] [client 51.103.238.164:14267] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "ad-B6hcEkLCmvF0fjDfHxwAAAIM"]
[Wed Apr 15 20:17:47.091066 2026] [:error] [pid 31053:tid 31073] [client 51.103.238.164:7996] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "ad-B6xcEkLCmvF0fjDfHyQAAAJE"]
[Wed Apr 15 20:17:47.870432 2026] [:error] [pid 30956:tid 30974] [client 51.103.238.164:57658] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "ad-B60BGUpjaWntNYq1uogAAAA4"]
[Wed Apr 15 20:17:48.476842 2026] [:error] [pid 30956:tid 30970] [client 51.103.238.164:35600] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "ad-B7EBGUpjaWntNYq1upAAAAAo"]
[Wed Apr 15 20:17:49.058820 2026] [:error] [pid 30956:tid 30966] [client 51.103.238.164:35602] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "ad-B7UBGUpjaWntNYq1upwAAAAY"]
[Wed Apr 15 20:17:49.574463 2026] [:error] [pid 37370:tid 37395] [client 51.103.238.164:1100] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "ad-B7Xg-gnM2Ga0cGAAtJwAAARc"]
[Wed Apr 15 20:17:50.190477 2026] [:error] [pid 30957:tid 31005] [client 51.103.238.164:9800] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "ad-B7n5gwVEVXHfVSip_xQAAAFA"]
[Wed Apr 15 20:17:50.765018 2026] [:error] [pid 30957:tid 30999] [client 51.103.238.164:61536] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "ad-B7n5gwVEVXHfVSip_yAAAAEo"]
[Wed Apr 15 20:17:51.436912 2026] [:error] [pid 30957:tid 31002] [client 51.103.238.164:14248] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "ad-B735gwVEVXHfVSip_ygAAAE0"]
[Wed Apr 15 20:17:52.140663 2026] [:error] [pid 31053:tid 31057] [client 51.103.238.164:61512] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "ad-B8BcEkLCmvF0fjDfHzwAAAIE"]
[Wed Apr 15 20:17:52.694810 2026] [:error] [pid 31053:tid 31070] [client 51.103.238.164:19209] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "ad-B8BcEkLCmvF0fjDfH0QAAAI4"]
[Wed Apr 15 20:17:53.213892 2026] [:error] [pid 30958:tid 31017] [client 51.103.238.164:11355] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "ad-B8ceG3wSKTO7NWFGftwAAAME"]
[Wed Apr 15 20:17:53.694559 2026] [:error] [pid 31053:tid 31072] [client 51.103.238.164:10357] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "ad-B8RcEkLCmvF0fjDfH2AAAAJA"]
[Wed Apr 15 20:17:54.458342 2026] [:error] [pid 31053:tid 31078] [client 51.103.238.164:9843] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "ad-B8hcEkLCmvF0fjDfH2wAAAJY"]
[Wed Apr 15 20:17:55.000208 2026] [:error] [pid 31053:tid 31057] [client 51.103.238.164:32328] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "ad-B8hcEkLCmvF0fjDfH3gAAAIE"]
[Wed Apr 15 20:17:55.576105 2026] [:error] [pid 31053:tid 31060] [client 51.103.238.164:9848] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "ad-B8xcEkLCmvF0fjDfH4gAAAIQ"]
[Wed Apr 15 20:17:56.104565 2026] [:error] [pid 30957:tid 31009] [client 51.103.238.164:1733] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "ad-B9H5gwVEVXHfVSip_0QAAAFQ"]
[Wed Apr 15 20:17:56.764224 2026] [:error] [pid 30958:tid 31018] [client 51.103.238.164:14231] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "ad-B9MeG3wSKTO7NWFGfvwAAAMI"]
[Wed Apr 15 20:17:57.433421 2026] [:error] [pid 37370:tid 37396] [client 51.103.238.164:9836] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "ad-B9Xg-gnM2Ga0cGAAtLwAAARg"]
[Wed Apr 15 20:17:57.980838 2026] [:error] [pid 30957:tid 31006] [client 51.103.238.164:49550] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "ad-B9X5gwVEVXHfVSip_0gAAAFE"]
[Wed Apr 15 20:17:58.612318 2026] [:error] [pid 37370:tid 37387] [client 51.103.238.164:9796] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "ad-B9ng-gnM2Ga0cGAAtMgAAAQ8"]
[Wed Apr 15 20:17:59.343819 2026] [:error] [pid 31053:tid 31074] [client 51.103.238.164:14215] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "ad-B9xcEkLCmvF0fjDfH6wAAAJI"]
[Wed Apr 15 20:17:59.943516 2026] [:error] [pid 30957:tid 31001] [client 51.103.238.164:11109] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "ad-B935gwVEVXHfVSip_1gAAAEw"]
[Wed Apr 15 20:18:00.553987 2026] [:error] [pid 37370:tid 37388] [client 51.103.238.164:11365] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ad-B-Hg-gnM2Ga0cGAAtOAAAARA"]
[Wed Apr 15 20:18:01.029065 2026] [:error] [pid 30958:tid 31033] [client 51.103.238.164:10353] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ad-B-ceG3wSKTO7NWFGfyAAAANE"]
[Wed Apr 15 20:18:01.603134 2026] [:error] [pid 30958:tid 31022] [client 51.103.238.164:61528] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ad-B-ceG3wSKTO7NWFGfygAAAMY"]
[Wed Apr 15 20:18:02.163001 2026] [:error] [pid 30958:tid 31039] [client 51.103.238.164:49559] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ad-B-seG3wSKTO7NWFGfzQAAANc"]
[Wed Apr 15 20:18:02.706788 2026] [:error] [pid 31053:tid 31072] [client 51.103.238.164:8206] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ad-B-hcEkLCmvF0fjDfH8wAAAJA"]
[Wed Apr 15 20:18:03.324268 2026] [:error] [pid 31053:tid 31074] [client 51.103.238.164:14243] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ad-B-xcEkLCmvF0fjDfH9wAAAJI"]
[Wed Apr 15 20:18:04.058874 2026] [:error] [pid 31053:tid 31078] [client 51.103.238.164:34401] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ad-B_BcEkLCmvF0fjDfH-gAAAJY"]
[Wed Apr 15 20:18:04.590281 2026] [:error] [pid 31053:tid 31058] [client 51.103.238.164:11380] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ad-B_BcEkLCmvF0fjDfH_QAAAII"]
[Wed Apr 15 20:18:05.344997 2026] [:error] [pid 37370:tid 37375] [client 51.103.238.164:47232] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ad-B_Xg-gnM2Ga0cGAAtRwAAAQM"]
[Wed Apr 15 20:18:05.949070 2026] [:error] [pid 31053:tid 31080] [client 51.103.238.164:19239] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ad-B_RcEkLCmvF0fjDfIAwAAAJg"]
[Wed Apr 15 20:18:06.470330 2026] [:error] [pid 31053:tid 31056] [client 51.103.238.164:57655] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ad-B_hcEkLCmvF0fjDfIBQAAAIA"]
[Wed Apr 15 20:18:06.961599 2026] [:error] [pid 30958:tid 31023] [client 51.103.238.164:34979] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ad-B_seG3wSKTO7NWFGf1AAAAMc"]
[Wed Apr 15 20:18:07.682759 2026] [:error] [pid 30958:tid 31016] [client 51.103.238.164:61523] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad-B_8eG3wSKTO7NWFGf1wAAAMA"]
[Wed Apr 15 20:18:08.363434 2026] [:error] [pid 31053:tid 31066] [client 51.103.238.164:9855] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad-CABcEkLCmvF0fjDfIBgAAAIo"]
[Wed Apr 15 20:18:09.143103 2026] [:error] [pid 37370:tid 37379] [client 51.103.238.164:35589] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad-CAXg-gnM2Ga0cGAAtSQAAAQc"]
[Wed Apr 15 20:18:09.679201 2026] [:error] [pid 37370:tid 37396] [client 51.103.238.164:30148] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad-CAXg-gnM2Ga0cGAAtSgAAARg"]
[Wed Apr 15 20:18:10.357191 2026] [:error] [pid 31053:tid 31079] [client 51.103.238.164:24979] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "ad-CAhcEkLCmvF0fjDfICgAAAJc"]
[Wed Apr 15 20:18:10.943914 2026] [:error] [pid 31053:tid 31059] [client 51.103.238.164:1894] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "ad-CAhcEkLCmvF0fjDfICwAAAIM"]
[Wed Apr 15 20:18:11.510880 2026] [:error] [pid 37370:tid 37377] [client 51.103.238.164:19229] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "ad-CA3g-gnM2Ga0cGAAtUQAAAQU"]
[Wed Apr 15 20:18:12.111500 2026] [:error] [pid 30958:tid 31036] [client 51.103.238.164:30190] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "ad-CBMeG3wSKTO7NWFGf3wAAANQ"]
[Wed Apr 15 20:18:12.717852 2026] [:error] [pid 31053:tid 31058] [client 51.103.238.164:24975] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "ad-CBBcEkLCmvF0fjDfIEQAAAII"]
[Wed Apr 15 20:18:13.350964 2026] [:error] [pid 31053:tid 31061] [client 51.103.238.164:8961] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "ad-CBRcEkLCmvF0fjDfIFAAAAIU"]
[Wed Apr 15 20:18:13.973812 2026] [:error] [pid 30956:tid 30969] [client 51.103.238.164:33657] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "ad-CBUBGUpjaWntNYq1usgAAAAk"]
[Wed Apr 15 20:18:14.827071 2026] [:error] [pid 30956:tid 30960] [client 51.103.238.164:7568] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "ad-CBkBGUpjaWntNYq1uswAAAAA"]
[Wed Apr 15 20:18:15.545096 2026] [:error] [pid 37370:tid 37374] [client 51.103.238.164:47285] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "ad-CB3g-gnM2Ga0cGAAtVAAAAQI"]
[Wed Apr 15 20:18:16.284759 2026] [:error] [pid 30956:tid 30971] [client 51.103.238.164:7573] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "ad-CCEBGUpjaWntNYq1uuAAAAAs"]
[Wed Apr 15 20:18:16.941081 2026] [:error] [pid 30957:tid 30994] [client 51.103.238.164:33619] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "ad-CCH5gwVEVXHfVSip_3gAAAEU"]
[Wed Apr 15 20:18:17.694018 2026] [:error] [pid 37370:tid 37394] [client 51.103.238.164:19223] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Wed Apr 15 20:18:17.938395 2026] [:error] [pid 37370:tid 37393] [client 51.103.238.164:19223] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Wed Apr 15 20:18:18.188455 2026] [:error] [pid 37370:tid 37376] [client 51.103.238.164:19223] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Apr 15 20:18:18.426742 2026] [:error] [pid 37370:tid 37392] [client 51.103.238.164:19223] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Wed Apr 15 20:18:19.941888 2026] [:error] [pid 37370:tid 37392] [client 51.103.238.164:19223] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Wed Apr 15 20:18:20.180672 2026] [:error] [pid 37370:tid 37380] [client 51.103.238.164:19223] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Wed Apr 15 20:18:21.786481 2026] [:error] [pid 37370:tid 37372] [client 51.103.238.164:19223] File does not exist: /usr/local/apache/htdocs/suspended-page/bless4.php
[Wed Apr 15 20:18:22.035144 2026] [:error] [pid 37370:tid 37374] [client 51.103.238.164:19223] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Wed Apr 15 20:18:22.274387 2026] [:error] [pid 37370:tid 37389] [client 51.103.238.164:19223] File does not exist: /usr/local/apache/htdocs/suspended-page/xqq.php
[Wed Apr 15 20:18:22.513227 2026] [:error] [pid 37370:tid 37379] [client 51.103.238.164:19223] File does not exist: /usr/local/apache/htdocs/suspended-page/plss3.php
[Wed Apr 15 20:18:22.803997 2026] [:error] [pid 37370:tid 37386] [client 51.103.238.164:19223] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "ad-CDng-gnM2Ga0cGAAtZgAAAQ4"]
[Wed Apr 15 20:18:23.324134 2026] [:error] [pid 30958:tid 31024] [client 51.103.238.164:21277] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "ad-CD8eG3wSKTO7NWFGf8wAAAMg"]
[Wed Apr 15 20:18:23.866940 2026] [:error] [pid 37370:tid 37390] [client 51.103.238.164:48539] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "ad-CD3g-gnM2Ga0cGAAtaAAAARI"]
[Wed Apr 15 20:18:24.420928 2026] [:error] [pid 31053:tid 31066] [client 51.103.238.164:18711] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "ad-CEBcEkLCmvF0fjDfIIQAAAIo"]
[Wed Apr 15 20:18:25.067993 2026] [:error] [pid 37370:tid 37391] [client 51.103.238.164:18724] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ad-CEXg-gnM2Ga0cGAAtbgAAARM"]
[Wed Apr 15 20:18:25.667117 2026] [:error] [pid 37370:tid 37375] [client 51.103.238.164:18702] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ad-CEXg-gnM2Ga0cGAAtcAAAAQM"]
[Wed Apr 15 20:18:26.219171 2026] [:error] [pid 37370:tid 37389] [client 51.103.238.164:1740] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ad-CEng-gnM2Ga0cGAAtdAAAARE"]
[Wed Apr 15 20:18:26.872085 2026] [:error] [pid 30958:tid 31035] [client 51.103.238.164:49010] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ad-CEseG3wSKTO7NWFGf-AAAANM"]
[Wed Apr 15 20:18:27.397211 2026] [:error] [pid 37370:tid 37390] [client 51.103.238.164:33611] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ad-CE3g-gnM2Ga0cGAAtfwAAARI"]
[Wed Apr 15 20:18:27.898204 2026] [:error] [pid 30957:tid 31010] [client 51.103.238.164:9017] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ad-CE35gwVEVXHfVSip_6gAAAFU"]
[Wed Apr 15 20:18:28.455932 2026] [:error] [pid 30957:tid 31008] [client 51.103.238.164:30167] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ad-CFH5gwVEVXHfVSip_6wAAAFM"]
[Wed Apr 15 20:18:29.035501 2026] [:error] [pid 30957:tid 31006] [client 51.103.238.164:8990] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ad-CFX5gwVEVXHfVSip_7QAAAFE"]
[Wed Apr 15 20:18:29.707163 2026] [:error] [pid 37370:tid 37387] [client 51.103.238.164:1881] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad-CFXg-gnM2Ga0cGAAthQAAAQ8"]
[Wed Apr 15 20:18:30.474167 2026] [:error] [pid 31053:tid 31074] [client 51.103.238.164:61547] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad-CFhcEkLCmvF0fjDfIKwAAAJI"]
[Wed Apr 15 20:18:31.145742 2026] [:error] [pid 30958:tid 31019] [client 51.103.238.164:7295] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad-CF8eG3wSKTO7NWFGgAQAAAMM"]
[Wed Apr 15 20:18:31.624413 2026] [:error] [pid 37370:tid 37392] [client 51.103.238.164:1886] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad-CF3g-gnM2Ga0cGAAthwAAARQ"]
[Wed Apr 15 20:18:32.224082 2026] [:error] [pid 31053:tid 31062] [client 51.103.238.164:48565] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "ad-CGBcEkLCmvF0fjDfILgAAAIY"]
[Wed Apr 15 20:18:32.799311 2026] [:error] [pid 31053:tid 31073] [client 51.103.238.164:49001] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "ad-CGBcEkLCmvF0fjDfIMQAAAJE"]
[Wed Apr 15 20:18:33.374176 2026] [:error] [pid 37370:tid 37395] [client 51.103.238.164:18743] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "ad-CGXg-gnM2Ga0cGAAtjwAAARc"]
[Wed Apr 15 20:18:33.936349 2026] [:error] [pid 31053:tid 31068] [client 51.103.238.164:48558] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "ad-CGRcEkLCmvF0fjDfIMwAAAIw"]
[Wed Apr 15 20:18:34.406962 2026] [:error] [pid 37370:tid 37392] [client 51.103.238.164:24395] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "ad-CGng-gnM2Ga0cGAAtkAAAARQ"]
[Wed Apr 15 20:18:34.891454 2026] [:error] [pid 37370:tid 37393] [client 51.103.238.164:18733] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "ad-CGng-gnM2Ga0cGAAtkgAAARU"]
[Wed Apr 15 20:18:35.451565 2026] [:error] [pid 30956:tid 30960] [client 51.103.238.164:11112] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "ad-CG0BGUpjaWntNYq1uvwAAAAA"]
[Wed Apr 15 20:18:35.990352 2026] [:error] [pid 30956:tid 30965] [client 51.103.238.164:48961] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "ad-CG0BGUpjaWntNYq1uwQAAAAU"]
[Wed Apr 15 20:18:36.490430 2026] [:error] [pid 31053:tid 31058] [client 51.103.238.164:33600] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "ad-CHBcEkLCmvF0fjDfIOAAAAII"]
[Wed Apr 15 20:18:37.046406 2026] [:error] [pid 37370:tid 37379] [client 51.103.238.164:1910] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "ad-CHXg-gnM2Ga0cGAAtlAAAAQc"]
[Wed Apr 15 20:18:37.588615 2026] [:error] [pid 37370:tid 37381] [client 51.103.238.164:8533] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "ad-CHXg-gnM2Ga0cGAAtlgAAAQk"]
[Wed Apr 15 20:18:38.194807 2026] [:error] [pid 31053:tid 31076] [client 51.103.238.164:7553] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "ad-CHhcEkLCmvF0fjDfIOQAAAJQ"]
[Wed Apr 15 20:18:38.831908 2026] [:error] [pid 30957:tid 30990] [client 51.103.238.164:15438] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ad-CHn5gwVEVXHfVSip_9AAAAEE"]
[Wed Apr 15 20:18:39.775920 2026] [:error] [pid 30958:tid 31032] [client 51.103.238.164:8525] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ad-CH8eG3wSKTO7NWFGgCgAAANA"]
[Wed Apr 15 20:18:40.419801 2026] [:error] [pid 30958:tid 31028] [client 51.103.238.164:11100] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ad-CIMeG3wSKTO7NWFGgDgAAAMw"]
[Wed Apr 15 20:18:41.133127 2026] [:error] [pid 37370:tid 37380] [client 51.103.238.164:7608] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ad-CIXg-gnM2Ga0cGAAtmQAAAQg"]
[Wed Apr 15 20:18:41.625135 2026] [:error] [pid 30958:tid 31025] [client 51.103.238.164:14239] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad-CIceG3wSKTO7NWFGgEQAAAMk"]
[Wed Apr 15 20:18:42.175672 2026] [:error] [pid 30957:tid 31013] [client 51.103.238.164:48996] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad-CIn5gwVEVXHfVSip_-AAAAFg"]
[Wed Apr 15 20:18:42.749413 2026] [:error] [pid 30957:tid 31001] [client 51.103.238.164:24979] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad-CIn5gwVEVXHfVSip_-QAAAEw"]
[Wed Apr 15 20:18:43.252014 2026] [:error] [pid 30956:tid 30981] [client 51.103.238.164:8573] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad-CI0BGUpjaWntNYq1uxAAAABU"]
[Wed Apr 15 20:18:43.803785 2026] [:error] [pid 30957:tid 30991] [client 51.103.238.164:7286] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "ad-CI35gwVEVXHfVSip_-wAAAEI"]
[Wed Apr 15 20:18:44.433907 2026] [:error] [pid 31053:tid 31078] [client 51.103.238.164:33631] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "ad-CJBcEkLCmvF0fjDfIPQAAAJY"]
[Wed Apr 15 20:18:44.942087 2026] [:error] [pid 30957:tid 30989] [client 51.103.238.164:8557] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "ad-CJH5gwVEVXHfVSip__gAAAEA"]
[Wed Apr 15 20:18:45.469819 2026] [:error] [pid 31053:tid 31060] [client 51.103.238.164:61524] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "ad-CJRcEkLCmvF0fjDfIQAAAAIQ"]
[Wed Apr 15 20:18:46.103976 2026] [:error] [pid 30957:tid 30993] [client 51.103.238.164:19225] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "ad-CJn5gwVEVXHfVSiqAAAAAAEQ"]
[Wed Apr 15 20:18:46.677552 2026] [:error] [pid 30956:tid 30968] [client 51.103.238.164:48541] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "ad-CJkBGUpjaWntNYq1uyAAAAAg"]
[Wed Apr 15 20:18:47.260599 2026] [:error] [pid 31053:tid 31070] [client 51.103.238.164:30205] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "ad-CJxcEkLCmvF0fjDfIRQAAAI4"]
[Wed Apr 15 20:18:47.866658 2026] [:error] [pid 31053:tid 31071] [client 51.103.238.164:33623] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "ad-CJxcEkLCmvF0fjDfIRwAAAI8"]
[Wed Apr 15 20:18:48.433409 2026] [:error] [pid 30957:tid 31005] [client 51.103.238.164:1876] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "ad-CKH5gwVEVXHfVSiqAAQAAAFA"]
[Wed Apr 15 20:18:49.002204 2026] [:error] [pid 31053:tid 31080] [client 51.103.238.164:35599] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "ad-CKRcEkLCmvF0fjDfITAAAAJg"]
[Wed Apr 15 20:18:49.543367 2026] [:error] [pid 37370:tid 37384] [client 51.103.238.164:34960] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "ad-CKXg-gnM2Ga0cGAAtngAAAQw"]
[Wed Apr 15 20:18:50.028355 2026] [:error] [pid 30957:tid 30999] [client 51.103.238.164:30171] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "ad-CKn5gwVEVXHfVSiqABQAAAEo"]
[Wed Apr 15 20:18:50.540584 2026] [:error] [pid 37370:tid 37390] [client 51.103.238.164:19246] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "ad-CKng-gnM2Ga0cGAAtoQAAARI"]
[Wed Apr 15 20:18:51.051696 2026] [:error] [pid 37370:tid 37388] [client 51.103.238.164:61546] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "ad-CK3g-gnM2Ga0cGAAtpAAAARA"]
[Wed Apr 15 20:18:51.532087 2026] [:error] [pid 37370:tid 37382] [client 51.103.238.164:24394] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "ad-CK3g-gnM2Ga0cGAAtpgAAAQo"]
[Wed Apr 15 20:18:52.028029 2026] [:error] [pid 37370:tid 37395] [client 51.103.238.164:8565] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "ad-CLHg-gnM2Ga0cGAAtpwAAARc"]
[Wed Apr 15 20:18:52.913823 2026] [:error] [pid 37370:tid 37374] [client 51.103.238.164:7592] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ad-CLHg-gnM2Ga0cGAAtqwAAAQI"]
[Wed Apr 15 20:18:53.573642 2026] [:error] [pid 37370:tid 37379] [client 51.103.238.164:35604] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ad-CLXg-gnM2Ga0cGAAtrgAAAQc"]
[Wed Apr 15 20:18:54.056348 2026] [:error] [pid 37370:tid 37388] [client 51.103.238.164:35637] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ad-CLng-gnM2Ga0cGAAtsgAAARA"]
[Wed Apr 15 20:18:54.545096 2026] [:error] [pid 37370:tid 37383] [client 51.103.238.164:47259] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ad-CLng-gnM2Ga0cGAAttgAAAQs"]
[Wed Apr 15 20:18:55.074874 2026] [:error] [pid 37370:tid 37380] [client 51.103.238.164:47285] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ad-CL3g-gnM2Ga0cGAAtuQAAAQg"]
[Wed Apr 15 20:18:55.658783 2026] [:error] [pid 30956:tid 30968] [client 51.103.238.164:14238] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ad-CL0BGUpjaWntNYq1u0AAAAAg"]
[Wed Apr 15 20:18:56.152883 2026] [:error] [pid 37370:tid 37379] [client 51.103.238.164:47270] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ad-CMHg-gnM2Ga0cGAAtvgAAAQc"]
[Wed Apr 15 20:18:56.794504 2026] [:error] [pid 37370:tid 37384] [client 51.103.238.164:61553] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ad-CMHg-gnM2Ga0cGAAtwQAAAQw"]
[Wed Apr 15 20:18:57.338863 2026] [:error] [pid 30958:tid 31029] [client 51.103.238.164:1895] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "ad-CMceG3wSKTO7NWFGgJQAAAM0"]
[Wed Apr 15 20:18:57.812149 2026] [:error] [pid 30956:tid 30963] [client 51.103.238.164:11082] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "ad-CMUBGUpjaWntNYq1u0wAAAAM"]
[Wed Apr 15 20:18:58.504555 2026] [:error] [pid 37370:tid 37376] [client 51.103.238.164:1882] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "ad-CMng-gnM2Ga0cGAAtzgAAAQQ"]
[Wed Apr 15 20:18:59.066382 2026] [:error] [pid 30958:tid 31022] [client 51.103.238.164:56507] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "ad-CM8eG3wSKTO7NWFGgKgAAAMY"]
[Wed Apr 15 20:18:59.612854 2026] [:error] [pid 37370:tid 37380] [client 51.103.238.164:35630] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "ad-CM3g-gnM2Ga0cGAAt1wAAAQg"]
[Wed Apr 15 20:19:00.269173 2026] [:error] [pid 30956:tid 30972] [client 51.103.238.164:57604] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "ad-CNEBGUpjaWntNYq1u2gAAAAw"]
[Wed Apr 15 20:19:00.832531 2026] [:error] [pid 30956:tid 30966] [client 51.103.238.164:32332] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "ad-CNEBGUpjaWntNYq1u2wAAAAY"]
[Wed Apr 15 20:19:01.361170 2026] [:error] [pid 37370:tid 37396] [client 51.103.238.164:1025] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "ad-CNXg-gnM2Ga0cGAAt2wAAARg"]
[Wed Apr 15 20:19:01.864847 2026] [:error] [pid 37370:tid 37389] [client 51.103.238.164:58340] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "ad-CNXg-gnM2Ga0cGAAt3AAAARE"]
[Wed Apr 15 20:19:02.426505 2026] [:error] [pid 30958:tid 31031] [client 51.103.238.164:56462] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "ad-CNseG3wSKTO7NWFGgNAAAAM8"]
[Wed Apr 15 20:19:02.916000 2026] [:error] [pid 30956:tid 30962] [client 51.103.238.164:9854] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "ad-CNkBGUpjaWntNYq1u4wAAAAI"]
[Wed Apr 15 20:19:03.402811 2026] [:error] [pid 30957:tid 31012] [client 51.103.238.164:11343] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "ad-CN35gwVEVXHfVSiqADQAAAFc"]
[Wed Apr 15 20:19:04.071421 2026] [:error] [pid 30957:tid 30993] [client 51.103.238.164:7946] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "ad-COH5gwVEVXHfVSiqAFQAAAEQ"]
[Wed Apr 15 20:19:04.720558 2026] [:error] [pid 37370:tid 37382] [client 51.103.238.164:34391] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "ad-COHg-gnM2Ga0cGAAt6AAAAQo"]
[Wed Apr 15 20:19:05.239903 2026] [:error] [pid 30956:tid 30974] [client 51.103.238.164:8629] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "ad-COUBGUpjaWntNYq1u8AAAAA4"]
[Wed Apr 15 20:19:05.717653 2026] [:error] [pid 31053:tid 31065] [client 51.103.238.164:1035] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "ad-CORcEkLCmvF0fjDfIZwAAAIk"]
[Wed Apr 15 20:19:06.228561 2026] [:error] [pid 37370:tid 37376] [client 51.103.238.164:17019] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "ad-COng-gnM2Ga0cGAAt7QAAAQQ"]
[Wed Apr 15 20:19:06.737324 2026] [:error] [pid 37370:tid 37390] [client 51.103.238.164:13931] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "ad-COng-gnM2Ga0cGAAt8gAAARI"]
[Wed Apr 15 20:19:07.236778 2026] [:error] [pid 37370:tid 37393] [client 51.103.238.164:13838] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "ad-CO3g-gnM2Ga0cGAAuAwAAARU"]
[Wed Apr 15 20:19:07.776036 2026] [:error] [pid 30957:tid 31003] [client 51.103.238.164:34420] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "ad-CO35gwVEVXHfVSiqALwAAAE4"]
[Wed Apr 15 20:19:08.324552 2026] [:error] [pid 31053:tid 31066] [client 51.103.238.164:34428] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "ad-CPBcEkLCmvF0fjDfIbQAAAIo"]
[Wed Apr 15 20:19:08.882324 2026] [:error] [pid 37370:tid 37375] [client 51.103.238.164:13115] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "ad-CPHg-gnM2Ga0cGAAuHQAAAQM"]
[Wed Apr 15 20:19:09.399539 2026] [:error] [pid 30957:tid 30997] [client 51.103.238.164:8603] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "ad-CPX5gwVEVXHfVSiqAOAAAAEg"]
[Wed Apr 15 20:19:09.957301 2026] [:error] [pid 31053:tid 31072] [client 51.103.238.164:8452] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "ad-CPRcEkLCmvF0fjDfIfAAAAJA"]
[Wed Apr 15 20:19:10.519376 2026] [:error] [pid 37370:tid 37382] [client 51.103.238.164:11961] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "ad-CPng-gnM2Ga0cGAAuMwAAAQo"]
[Wed Apr 15 20:19:11.103479 2026] [:error] [pid 37370:tid 37391] [client 51.103.238.164:21327] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "ad-CP3g-gnM2Ga0cGAAuPwAAARM"]
[Wed Apr 15 20:19:11.661528 2026] [:error] [pid 37370:tid 37372] [client 51.103.238.164:47270] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "ad-CP3g-gnM2Ga0cGAAuTAAAAQA"]
[Wed Apr 15 20:19:12.341926 2026] [:error] [pid 30958:tid 31038] [client 51.103.238.164:11962] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "ad-CQMeG3wSKTO7NWFGgVgAAANY"]
[Wed Apr 15 20:19:12.909168 2026] [:error] [pid 30957:tid 30999] [client 51.103.238.164:13919] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ad-CQH5gwVEVXHfVSiqATAAAAEo"]
[Wed Apr 15 20:19:13.513530 2026] [:error] [pid 31053:tid 31059] [client 51.103.238.164:34380] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ad-CQRcEkLCmvF0fjDfIkwAAAIM"]
[Wed Apr 15 20:19:13.995020 2026] [:error] [pid 37370:tid 37389] [client 51.103.238.164:31702] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ad-CQXg-gnM2Ga0cGAAudQAAARE"]
[Wed Apr 15 20:19:14.621096 2026] [:error] [pid 37370:tid 37372] [client 51.103.238.164:1843] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ad-CQng-gnM2Ga0cGAAuhgAAAQA"]
[Wed Apr 15 20:19:15.185110 2026] [:error] [pid 30958:tid 31037] [client 51.103.238.164:21369] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "ad-CQ8eG3wSKTO7NWFGgXwAAANU"]
[Wed Apr 15 20:19:15.706657 2026] [:error] [pid 37370:tid 37372] [client 51.103.238.164:8580] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "ad-CQ3g-gnM2Ga0cGAAulQAAAQA"]
[Wed Apr 15 20:19:16.179173 2026] [:error] [pid 30956:tid 30978] [client 51.103.238.164:13850] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "ad-CREBGUpjaWntNYq1vFgAAABI"]
[Wed Apr 15 20:19:16.708674 2026] [:error] [pid 37370:tid 37384] [client 51.103.238.164:21369] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "ad-CRHg-gnM2Ga0cGAAuoQAAAQw"]
[Wed Apr 15 20:19:17.288343 2026] [:error] [pid 37370:tid 37390] [client 51.103.238.164:31716] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ad-CRXg-gnM2Ga0cGAAusAAAARI"]
[Wed Apr 15 20:19:17.826831 2026] [:error] [pid 37370:tid 37388] [client 51.103.238.164:7978] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ad-CRXg-gnM2Ga0cGAAuvAAAARA"]
[Wed Apr 15 20:19:18.439615 2026] [:error] [pid 30956:tid 30963] [client 51.103.238.164:12760] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ad-CRkBGUpjaWntNYq1vHgAAAAM"]
[Wed Apr 15 20:19:19.022521 2026] [:error] [pid 30957:tid 31003] [client 51.103.238.164:1187] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ad-CR35gwVEVXHfVSiqAdgAAAE4"]
[Wed Apr 15 20:19:19.559757 2026] [:error] [pid 30957:tid 30991] [client 51.103.238.164:7983] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "ad-CR35gwVEVXHfVSiqAgAAAAEI"]
[Wed Apr 15 20:19:20.057798 2026] [:error] [pid 30956:tid 30974] [client 51.103.238.164:34425] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "ad-CSEBGUpjaWntNYq1vIgAAAA4"]
[Wed Apr 15 20:19:20.610673 2026] [:error] [pid 31053:tid 31063] [client 51.103.238.164:10090] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "ad-CSBcEkLCmvF0fjDfIsgAAAIc"]
[Wed Apr 15 20:19:21.100190 2026] [:error] [pid 30958:tid 31022] [client 51.103.238.164:23218] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "ad-CSceG3wSKTO7NWFGglwAAAMY"]
[Wed Apr 15 20:19:21.690475 2026] [:error] [pid 30957:tid 31005] [client 51.103.238.164:10868] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ad-CSX5gwVEVXHfVSiqAjAAAAFA"]
[Wed Apr 15 20:19:22.223943 2026] [:error] [pid 31053:tid 31061] [client 51.103.238.164:12759] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed Apr 15 20:19:22.773660 2026] [:error] [pid 31053:tid 31056] [client 51.103.238.164:12759] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Wed Apr 15 20:19:23.256208 2026] [:error] [pid 31053:tid 31068] [client 51.103.238.164:12759] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Wed Apr 15 20:19:23.506562 2026] [:error] [pid 31053:tid 31077] [client 51.103.238.164:12759] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Wed Apr 15 20:19:23.758615 2026] [:error] [pid 31053:tid 31063] [client 51.103.238.164:12759] File does not exist: /usr/local/apache/htdocs/suspended-page/fi.php
[Wed Apr 15 20:19:23.996933 2026] [:error] [pid 31053:tid 31059] [client 51.103.238.164:12759] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Wed Apr 15 20:19:24.476714 2026] [:error] [pid 31053:tid 31069] [client 51.103.238.164:12759] [client 51.103.238.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ad-CTBcEkLCmvF0fjDfIzAAAAI0"]
[Wed Apr 15 20:19:24.962639 2026] [:error] [pid 31053:tid 31064] [client 51.103.238.164:10081] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Wed Apr 15 20:19:25.454151 2026] [:error] [pid 31053:tid 31063] [client 51.103.238.164:10081] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad-CTRcEkLCmvF0fjDfI2wAAAIc"]
[Wed Apr 15 20:19:25.982091 2026] [:error] [pid 31053:tid 31074] [client 51.103.238.164:7734] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad-CTRcEkLCmvF0fjDfI5QAAAJI"]
[Wed Apr 15 20:19:26.572299 2026] [:error] [pid 30957:tid 31003] [client 51.103.238.164:10875] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad-CTn5gwVEVXHfVSiqAoAAAAE4"]
[Wed Apr 15 20:19:27.083903 2026] [:error] [pid 30958:tid 31030] [client 51.103.238.164:1173] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad-CT8eG3wSKTO7NWFGguwAAAM4"]
[Wed Apr 15 20:19:27.647840 2026] [:error] [pid 30957:tid 31004] [client 51.103.238.164:10067] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "ad-CT35gwVEVXHfVSiqApgAAAE8"]
[Wed Apr 15 20:19:28.172105 2026] [:error] [pid 30958:tid 31033] [client 51.103.238.164:31733] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "ad-CUMeG3wSKTO7NWFGgygAAANE"]
[Wed Apr 15 20:19:28.660428 2026] [:error] [pid 37370:tid 37380] [client 51.103.238.164:15746] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "ad-CUHg-gnM2Ga0cGAAvGAAAAQg"]
[Wed Apr 15 20:19:29.199932 2026] [:error] [pid 37370:tid 37379] [client 51.103.238.164:11930] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "ad-CUXg-gnM2Ga0cGAAvIAAAAQc"]
[Wed Apr 15 20:19:29.679299 2026] [:error] [pid 31053:tid 31066] [client 51.103.238.164:15075] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ad-CURcEkLCmvF0fjDfI9wAAAIo"]
[Wed Apr 15 20:19:30.272082 2026] [:error] [pid 31053:tid 31060] [client 51.103.238.164:60836] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ad-CUhcEkLCmvF0fjDfI-gAAAIQ"]
[Wed Apr 15 20:19:30.778866 2026] [:error] [pid 30958:tid 31018] [client 51.103.238.164:15043] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ad-CUseG3wSKTO7NWFGg2QAAAMI"]
[Wed Apr 15 20:19:31.367260 2026] [:error] [pid 30957:tid 31003] [client 51.103.238.164:10861] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ad-CU35gwVEVXHfVSiqAsgAAAE4"]
[Wed Apr 15 20:19:32.033650 2026] [:error] [pid 30957:tid 31000] [client 51.103.238.164:10065] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "ad-CVH5gwVEVXHfVSiqAtQAAAEs"]
[Wed Apr 15 20:19:32.625464 2026] [:error] [pid 30958:tid 31017] [client 51.103.238.164:11963] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "ad-CVMeG3wSKTO7NWFGg2gAAAME"]
[Wed Apr 15 20:19:33.159085 2026] [:error] [pid 31053:tid 31065] [client 51.103.238.164:13888] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "ad-CVRcEkLCmvF0fjDfI_AAAAIk"]
[Wed Apr 15 20:19:33.656199 2026] [:error] [pid 30958:tid 31020] [client 51.103.238.164:23199] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "ad-CVceG3wSKTO7NWFGg3AAAAMQ"]
[Wed Apr 15 20:19:34.186007 2026] [:error] [pid 30956:tid 30960] [client 51.103.238.164:10090] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "ad-CVkBGUpjaWntNYq1vPgAAAAA"]
[Wed Apr 15 20:19:34.657033 2026] [:error] [pid 30956:tid 30977] [client 51.103.238.164:15101] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "ad-CVkBGUpjaWntNYq1vPwAAABE"]
[Wed Apr 15 20:19:35.157128 2026] [:error] [pid 31053:tid 31076] [client 51.103.238.164:15759] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "ad-CVxcEkLCmvF0fjDfI_wAAAJQ"]
[Wed Apr 15 20:19:35.637932 2026] [:error] [pid 30958:tid 31021] [client 51.103.238.164:59545] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "ad-CV8eG3wSKTO7NWFGg3QAAAMU"]
[Wed Apr 15 20:19:36.118828 2026] [:error] [pid 30958:tid 31037] [client 51.103.238.164:7327] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "ad-CWMeG3wSKTO7NWFGg3wAAANU"]
[Wed Apr 15 20:19:36.630410 2026] [:error] [pid 37370:tid 37394] [client 51.103.238.164:7315] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "ad-CWHg-gnM2Ga0cGAAvMAAAARY"]
[Wed Apr 15 20:19:37.104297 2026] [:error] [pid 31053:tid 31072] [client 51.103.238.164:60834] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "ad-CWRcEkLCmvF0fjDfJAgAAAJA"]
[Wed Apr 15 20:19:37.618335 2026] [:error] [pid 31053:tid 31058] [client 51.103.238.164:59524] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "ad-CWRcEkLCmvF0fjDfJBAAAAII"]
[Wed Apr 15 20:19:38.130526 2026] [:error] [pid 30958:tid 31023] [client 51.103.238.164:23202] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "ad-CWseG3wSKTO7NWFGg5AAAAMc"]
[Wed Apr 15 20:19:38.607325 2026] [:error] [pid 30958:tid 31025] [client 51.103.238.164:7687] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "ad-CWseG3wSKTO7NWFGg5QAAAMk"]
[Wed Apr 15 20:19:39.133526 2026] [:error] [pid 37370:tid 37377] [client 51.103.238.164:15081] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "ad-CW3g-gnM2Ga0cGAAvNQAAAQU"]
[Wed Apr 15 20:19:39.680924 2026] [:error] [pid 37370:tid 37392] [client 51.103.238.164:62081] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "ad-CW3g-gnM2Ga0cGAAvOQAAARQ"]
[Wed Apr 15 20:19:40.206806 2026] [:error] [pid 30958:tid 31021] [client 51.103.238.164:13922] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ad-CXMeG3wSKTO7NWFGg9AAAAMU"]
[Wed Apr 15 20:19:40.732562 2026] [:error] [pid 37370:tid 37372] [client 51.103.238.164:10813] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ad-CXHg-gnM2Ga0cGAAvQwAAAQA"]
[Wed Apr 15 20:19:41.219339 2026] [:error] [pid 30958:tid 31039] [client 51.103.238.164:11924] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ad-CXceG3wSKTO7NWFGg-AAAANc"]
[Wed Apr 15 20:19:41.697153 2026] [:error] [pid 30958:tid 31026] [client 51.103.238.164:62138] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ad-CXceG3wSKTO7NWFGg_gAAAMo"]
[Wed Apr 15 20:19:42.199014 2026] [:error] [pid 37370:tid 37395] [client 51.103.238.164:62105] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "ad-CXng-gnM2Ga0cGAAvSQAAARc"]
[Wed Apr 15 20:19:42.694786 2026] [:error] [pid 30958:tid 31036] [client 51.103.238.164:15069] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "ad-CXseG3wSKTO7NWFGhBQAAANQ"]
[Wed Apr 15 20:19:43.204344 2026] [:error] [pid 37370:tid 37379] [client 51.103.238.164:10111] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "ad-CX3g-gnM2Ga0cGAAvVAAAAQc"]
[Wed Apr 15 20:19:43.752729 2026] [:error] [pid 37370:tid 37372] [client 51.103.238.164:10051] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "ad-CX3g-gnM2Ga0cGAAvWQAAAQA"]
[Wed Apr 15 20:19:44.288122 2026] [:error] [pid 37370:tid 37373] [client 51.103.238.164:25047] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "ad-CYHg-gnM2Ga0cGAAvWgAAAQE"]
[Wed Apr 15 20:19:44.844210 2026] [:error] [pid 37370:tid 37389] [client 51.103.238.164:15045] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "ad-CYHg-gnM2Ga0cGAAvXQAAARE"]
[Wed Apr 15 20:19:45.334136 2026] [:error] [pid 30958:tid 31038] [client 51.103.238.164:12771] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "ad-CYceG3wSKTO7NWFGhDQAAANY"]
[Wed Apr 15 20:19:45.858657 2026] [:error] [pid 30958:tid 31023] [client 51.103.238.164:15779] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "ad-CYceG3wSKTO7NWFGhDgAAAMc"]
[Wed Apr 15 20:19:46.385799 2026] [:error] [pid 37370:tid 37387] [client 51.103.238.164:15749] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ad-CYng-gnM2Ga0cGAAvXgAAAQ8"]
[Wed Apr 15 20:19:46.957878 2026] [:error] [pid 30958:tid 31019] [client 51.103.238.164:25038] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ad-CYseG3wSKTO7NWFGhEQAAAMM"]
[Wed Apr 15 20:19:47.501560 2026] [:error] [pid 37370:tid 37385] [client 51.103.238.164:25035] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ad-CY3g-gnM2Ga0cGAAvYQAAAQ0"]
[Wed Apr 15 20:19:48.016491 2026] [:error] [pid 37370:tid 37383] [client 51.103.238.164:10786] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ad-CZHg-gnM2Ga0cGAAvYgAAAQs"]
[Wed Apr 15 20:19:48.558487 2026] [:error] [pid 31053:tid 31063] [client 51.103.238.164:25073] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "ad-CZBcEkLCmvF0fjDfJBQAAAIc"]
[Wed Apr 15 20:19:49.092202 2026] [:error] [pid 31053:tid 31078] [client 51.103.238.164:7967] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "ad-CZRcEkLCmvF0fjDfJBgAAAJY"]
[Wed Apr 15 20:19:49.679415 2026] [:error] [pid 37370:tid 37390] [client 51.103.238.164:13890] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "ad-CZXg-gnM2Ga0cGAAvaAAAARI"]
[Wed Apr 15 20:19:50.195481 2026] [:error] [pid 37370:tid 37393] [client 51.103.238.164:7319] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "ad-CZng-gnM2Ga0cGAAvaQAAARU"]
[Wed Apr 15 20:19:50.717731 2026] [:error] [pid 30957:tid 31001] [client 51.103.238.164:59560] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "ad-CZn5gwVEVXHfVSiqAvAAAAEw"]
[Wed Apr 15 20:19:51.204514 2026] [:error] [pid 30958:tid 31030] [client 51.103.238.164:7985] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "ad-CZ8eG3wSKTO7NWFGhFQAAAM4"]
[Wed Apr 15 20:19:51.740408 2026] [:error] [pid 31053:tid 31060] [client 51.103.238.164:10824] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "ad-CZxcEkLCmvF0fjDfJCgAAAIQ"]
[Wed Apr 15 20:19:52.284376 2026] [:error] [pid 30958:tid 31035] [client 51.103.238.164:7707] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "ad-CaMeG3wSKTO7NWFGhFgAAANM"]
[Wed Apr 15 20:19:52.800369 2026] [:error] [pid 30957:tid 31011] [client 51.103.238.164:10811] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "ad-CaH5gwVEVXHfVSiqAvQAAAFY"]
[Wed Apr 15 20:19:53.329740 2026] [:error] [pid 30958:tid 31020] [client 51.103.238.164:15081] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "ad-CaceG3wSKTO7NWFGhFwAAAMQ"]
[Wed Apr 15 20:19:53.814106 2026] [:error] [pid 31053:tid 31056] [client 51.103.238.164:60810] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "ad-CaRcEkLCmvF0fjDfJEgAAAIA"]
[Wed Apr 15 20:19:54.343713 2026] [:error] [pid 30958:tid 31033] [client 51.103.238.164:10832] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "ad-CaseG3wSKTO7NWFGhGAAAANE"]
[Wed Apr 15 20:19:54.832593 2026] [:error] [pid 30956:tid 30981] [client 51.103.238.164:1211] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ad-CakBGUpjaWntNYq1vRAAAABU"]
[Wed Apr 15 20:19:55.359865 2026] [:error] [pid 30957:tid 30996] [client 51.103.238.164:25032] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ad-Ca35gwVEVXHfVSiqAvwAAAEc"]
[Wed Apr 15 20:19:55.862621 2026] [:error] [pid 30957:tid 30992] [client 51.103.238.164:10796] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ad-Ca35gwVEVXHfVSiqAwAAAAEM"]
[Wed Apr 15 20:19:56.378766 2026] [:error] [pid 37370:tid 37373] [client 51.103.238.164:10050] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ad-CbHg-gnM2Ga0cGAAvdAAAAQE"]
[Wed Apr 15 20:19:56.876264 2026] [:error] [pid 31053:tid 31071] [client 51.103.238.164:15058] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "ad-CbBcEkLCmvF0fjDfJHgAAAI8"]
[Wed Apr 15 20:19:57.361515 2026] [:error] [pid 31053:tid 31079] [client 51.103.238.164:31729] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "ad-CbRcEkLCmvF0fjDfJIAAAAJc"]
[Wed Apr 15 20:19:57.881211 2026] [:error] [pid 37370:tid 37379] [client 51.103.238.164:13933] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "ad-CbXg-gnM2Ga0cGAAveQAAAQc"]
[Wed Apr 15 20:19:58.354928 2026] [:error] [pid 37370:tid 37391] [client 51.103.238.164:23192] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "ad-Cbng-gnM2Ga0cGAAvfAAAARM"]
[Wed Apr 15 20:19:58.868857 2026] [:error] [pid 31053:tid 31068] [client 51.103.238.164:23228] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ad-CbhcEkLCmvF0fjDfJKAAAAIw"]
[Wed Apr 15 20:19:59.346590 2026] [:error] [pid 30958:tid 31038] [client 51.103.238.164:60814] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ad-Cb8eG3wSKTO7NWFGhGwAAANY"]
[Wed Apr 15 20:19:59.846831 2026] [:error] [pid 31053:tid 31072] [client 51.103.238.164:15088] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ad-CbxcEkLCmvF0fjDfJKgAAAJA"]
[Wed Apr 15 20:20:00.333233 2026] [:error] [pid 37370:tid 37380] [client 51.103.238.164:7715] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ad-CcHg-gnM2Ga0cGAAvhAAAAQg"]
[Wed Apr 15 20:20:00.812215 2026] [:error] [pid 30957:tid 30992] [client 51.103.238.164:11912] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "ad-CcH5gwVEVXHfVSiqA5gAAAEM"]
[Wed Apr 15 20:20:01.308984 2026] [:error] [pid 30957:tid 30993] [client 51.103.238.164:12783] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "ad-CcX5gwVEVXHfVSiqA9QAAAEQ"]
[Wed Apr 15 20:20:01.793149 2026] [:error] [pid 30957:tid 31012] [client 51.103.238.164:12757] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "ad-CcX5gwVEVXHfVSiqBAAAAAFc"]
[Wed Apr 15 20:20:02.333282 2026] [:error] [pid 31053:tid 31064] [client 51.103.238.164:10787] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "ad-CchcEkLCmvF0fjDfJMAAAAIg"]
[Wed Apr 15 20:20:02.817539 2026] [:error] [pid 37370:tid 37395] [client 51.103.238.164:10100] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ad-Ccng-gnM2Ga0cGAAvkQAAARc"]
[Wed Apr 15 20:20:03.292178 2026] [:error] [pid 37370:tid 37377] [client 51.103.238.164:7712] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ad-Cc3g-gnM2Ga0cGAAvoAAAAQU"]
[Wed Apr 15 20:20:03.866737 2026] [:error] [pid 37370:tid 37375] [client 51.103.238.164:56457] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ad-Cc3g-gnM2Ga0cGAAvpgAAAQM"]
[Wed Apr 15 20:20:04.366475 2026] [:error] [pid 30958:tid 31035] [client 51.103.238.164:15060] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ad-CdMeG3wSKTO7NWFGhJgAAANM"]
[Wed Apr 15 20:20:04.867763 2026] [:error] [pid 37370:tid 37393] [client 51.103.238.164:13056] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "ad-CdHg-gnM2Ga0cGAAvqwAAARU"]
[Wed Apr 15 20:20:05.384414 2026] [:error] [pid 31053:tid 31076] [client 51.103.238.164:59535] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "ad-CdRcEkLCmvF0fjDfJOAAAAJQ"]
[Wed Apr 15 20:20:05.864747 2026] [:error] [pid 30957:tid 31009] [client 51.103.238.164:62100] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "ad-CdX5gwVEVXHfVSiqBJwAAAFQ"]
[Wed Apr 15 20:20:06.360596 2026] [:error] [pid 31053:tid 31071] [client 51.103.238.164:62093] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "ad-CdhcEkLCmvF0fjDfJOwAAAI8"]
[Wed Apr 15 20:20:06.859632 2026] [:error] [pid 30958:tid 31033] [client 51.103.238.164:59572] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "ad-CdseG3wSKTO7NWFGhKAAAANE"]
[Wed Apr 15 20:20:07.343891 2026] [:error] [pid 37370:tid 37381] [client 51.103.238.164:7725] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "ad-Cd3g-gnM2Ga0cGAAvsgAAAQk"]
[Wed Apr 15 20:20:07.840857 2026] [:error] [pid 37370:tid 37389] [client 51.103.238.164:10055] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "ad-Cd3g-gnM2Ga0cGAAvtQAAARE"]
[Wed Apr 15 20:20:08.327972 2026] [:error] [pid 30958:tid 31018] [client 51.103.238.164:10104] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "ad-CeMeG3wSKTO7NWFGhKgAAAMI"]
[Wed Apr 15 20:20:08.808058 2026] [:error] [pid 31053:tid 31074] [client 51.103.238.164:7340] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "ad-CeBcEkLCmvF0fjDfJPgAAAJI"]
[Wed Apr 15 20:20:09.294065 2026] [:error] [pid 37370:tid 37373] [client 51.103.238.164:15783] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "ad-CeXg-gnM2Ga0cGAAvuAAAAQE"]
[Wed Apr 15 20:20:09.776848 2026] [:error] [pid 37370:tid 37380] [client 51.103.238.164:62133] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "ad-CeXg-gnM2Ga0cGAAvvAAAAQg"]
[Wed Apr 15 20:20:10.255426 2026] [:error] [pid 37370:tid 37393] [client 51.103.238.164:10066] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "ad-Ceng-gnM2Ga0cGAAvwAAAARU"]
[Wed Apr 15 20:20:10.735396 2026] [:error] [pid 37370:tid 37385] [client 51.103.238.164:10799] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "ad-Ceng-gnM2Ga0cGAAvxQAAAQ0"]
[Wed Apr 15 20:20:11.225599 2026] [:error] [pid 37370:tid 37390] [client 51.103.238.164:62129] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "ad-Ce3g-gnM2Ga0cGAAvywAAARI"]
[Wed Apr 15 20:20:11.721595 2026] [:error] [pid 37370:tid 37394] [client 51.103.238.164:10089] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "ad-Ce3g-gnM2Ga0cGAAvzwAAARY"]
[Wed Apr 15 20:20:12.215183 2026] [:error] [pid 31053:tid 31060] [client 51.103.238.164:10846] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "ad-CfBcEkLCmvF0fjDfJRQAAAIQ"]
[Wed Apr 15 20:20:12.714819 2026] [:error] [pid 37370:tid 37381] [client 51.103.238.164:10078] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "ad-CfHg-gnM2Ga0cGAAv1QAAAQk"]
[Wed Apr 15 20:20:13.195585 2026] [:error] [pid 31053:tid 31059] [client 51.103.238.164:31714] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "ad-CfRcEkLCmvF0fjDfJSAAAAIM"]
[Wed Apr 15 20:20:13.670385 2026] [:error] [pid 31053:tid 31071] [client 51.103.238.164:15785] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "ad-CfRcEkLCmvF0fjDfJSgAAAI8"]
[Wed Apr 15 20:20:14.172384 2026] [:error] [pid 31053:tid 31070] [client 51.103.238.164:7296] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "ad-CfhcEkLCmvF0fjDfJTAAAAI4"]
[Wed Apr 15 20:20:14.652499 2026] [:error] [pid 30957:tid 30989] [client 51.103.238.164:62104] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "ad-Cfn5gwVEVXHfVSiqBLQAAAEA"]
[Wed Apr 15 20:20:15.127853 2026] [:error] [pid 30956:tid 30961] [client 51.103.238.164:10776] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "ad-Cf0BGUpjaWntNYq1vXAAAAAE"]
[Wed Apr 15 20:20:15.620739 2026] [:error] [pid 37370:tid 37395] [client 51.103.238.164:15053] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "ad-Cf3g-gnM2Ga0cGAAv2wAAARc"]
[Wed Apr 15 20:20:16.133729 2026] [:error] [pid 30956:tid 30977] [client 51.103.238.164:13076] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "ad-CgEBGUpjaWntNYq1vXwAAABE"]
[Wed Apr 15 20:20:16.631275 2026] [:error] [pid 30957:tid 31009] [client 51.103.238.164:1818] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ad-CgH5gwVEVXHfVSiqBMAAAAFQ"]
[Wed Apr 15 20:20:17.114316 2026] [:error] [pid 31053:tid 31064] [client 51.103.238.164:31717] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ad-CgRcEkLCmvF0fjDfJUQAAAIg"]
[Wed Apr 15 20:20:17.598720 2026] [:error] [pid 30957:tid 31002] [client 51.103.238.164:17020] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ad-CgX5gwVEVXHfVSiqBNAAAAE0"]
[Wed Apr 15 20:20:18.103425 2026] [:error] [pid 30957:tid 31006] [client 51.103.238.164:7304] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ad-Cgn5gwVEVXHfVSiqBNgAAAFE"]
[Wed Apr 15 20:20:18.619890 2026] [:error] [pid 37370:tid 37387] [client 51.103.238.164:23190] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "ad-Cgng-gnM2Ga0cGAAv4gAAAQ8"]
[Wed Apr 15 20:20:19.125865 2026] [:error] [pid 30957:tid 30994] [client 51.103.238.164:15768] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "ad-Cg35gwVEVXHfVSiqBOAAAAEU"]
[Wed Apr 15 20:20:19.616480 2026] [:error] [pid 30957:tid 30996] [client 51.103.238.164:23173] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "ad-Cg35gwVEVXHfVSiqBOQAAAEc"]
[Wed Apr 15 20:20:20.100618 2026] [:error] [pid 31053:tid 31059] [client 51.103.238.164:1177] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "ad-ChBcEkLCmvF0fjDfJVAAAAIM"]
[Wed Apr 15 20:20:20.605371 2026] [:error] [pid 31053:tid 31075] [client 51.103.238.164:13903] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ad-ChBcEkLCmvF0fjDfJVwAAAJM"]
[Wed Apr 15 20:20:21.099576 2026] [:error] [pid 30958:tid 31027] [client 51.103.238.164:10809] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ad-ChceG3wSKTO7NWFGhQQAAAMs"]
[Wed Apr 15 20:20:21.614593 2026] [:error] [pid 31053:tid 31066] [client 51.103.238.164:23216] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ad-ChRcEkLCmvF0fjDfJawAAAIo"]
[Wed Apr 15 20:20:22.106492 2026] [:error] [pid 30956:tid 30971] [client 51.103.238.164:23168] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ad-ChkBGUpjaWntNYq1vZAAAAAs"]
[Wed Apr 15 20:20:22.613914 2026] [:error] [pid 30958:tid 31038] [client 51.103.238.164:7350] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ad-ChseG3wSKTO7NWFGhVQAAANY"]
[Wed Apr 15 20:20:23.096103 2026] [:error] [pid 30956:tid 30984] [client 51.103.238.164:1180] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ad-Ch0BGUpjaWntNYq1vZQAAABg"]
[Wed Apr 15 20:20:23.582059 2026] [:error] [pid 37370:tid 37374] [client 51.103.238.164:11947] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ad-Ch3g-gnM2Ga0cGAAv6QAAAQI"]
[Wed Apr 15 20:20:24.079097 2026] [:error] [pid 31053:tid 31067] [client 51.103.238.164:60816] [client 51.103.238.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ad-CiBcEkLCmvF0fjDfJ4gAAAIs"]
[Thu Apr 16 02:40:51.144299 2026] [:error] [pid 792:tid 876] [client 172.71.148.152:14112] [client 172.71.148.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "ad_bs93PZ8z30TezIkZoEgAAAMc"]
[Thu Apr 16 02:43:18.501779 2026] [:error] [pid 34542:tid 34557] [client 91.200.101.138:52403] [client 91.200.101.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/graphql"] [unique_id "ad_cRgdF4OGi-asleB6gggAAAU0"]
[Thu Apr 16 02:43:18.738823 2026] [:error] [pid 54814:tid 54835] [client 91.200.101.138:60967] [client 91.200.101.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/graphql"] [unique_id "ad_cRjrHu_-tAAe-BOW9mwAAAY8"]
[Thu Apr 16 03:02:38.740186 2026] [:error] [pid 34542:tid 34552] [client 52.165.250.244:60061] [client 52.165.250.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ad_gzgdF4OGi-asleB6kowAAAUg"], referer: https://outlook.live.com/
[Thu Apr 16 03:02:48.592890 2026] [:error] [pid 54814:tid 54822] [client 20.168.159.162:13362] [client 20.168.159.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ad_g2DrHu_-tAAe-BOXDhQAAAYI"]
[Thu Apr 16 03:05:28.044270 2026] [:error] [pid 912:tid 972] [client 172.215.217.96:56739] [client 172.215.217.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ad_heMU0_VzYCBipADlBYgAAAQQ"], referer: https://news.ycombinator.com/
[Thu Apr 16 05:43:39.924224 2026] [:error] [pid 57538:tid 57602] [client 20.163.83.251:43072] [client 20.163.83.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aeAGi8uMaiEF5SVR2Bcp-AAAAIA"]
[Thu Apr 16 06:14:58.393407 2026] [:error] [pid 57639:tid 57652] [client 40.115.139.4:4783] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Apr 16 06:14:58.512249 2026] [:error] [pid 57639:tid 57646] [client 40.115.139.4:4783] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 16 06:14:58.629968 2026] [:error] [pid 57639:tid 57654] [client 40.115.139.4:4783] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Apr 16 06:14:58.748138 2026] [:error] [pid 57639:tid 57659] [client 40.115.139.4:4783] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 16 06:14:58.866710 2026] [:error] [pid 57639:tid 57668] [client 40.115.139.4:4783] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Thu Apr 16 06:14:58.985052 2026] [:error] [pid 57639:tid 57666] [client 40.115.139.4:4783] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Thu Apr 16 06:14:59.243164 2026] [:error] [pid 57639:tid 57653] [client 40.115.139.4:4783] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Thu Apr 16 06:14:59.364503 2026] [:error] [pid 57639:tid 57656] [client 40.115.139.4:4783] File does not exist: /usr/local/apache/htdocs/suspended-page/file3.php
[Thu Apr 16 06:14:59.482279 2026] [:error] [pid 57639:tid 57647] [client 40.115.139.4:4783] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Thu Apr 16 06:14:59.620413 2026] [:error] [pid 57639:tid 57664] [client 40.115.139.4:4783] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Apr 16 06:14:59.735362 2026] [:error] [pid 57639:tid 57648] [client 40.115.139.4:4783] [client 40.115.139.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeAN46MCQoTw7TsxWunGSwAAAMI"]
[Thu Apr 16 06:15:00.200850 2026] [:error] [pid 49094:tid 49105] [client 40.115.139.4:4797] [client 40.115.139.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeAN5DbDwvcXorHR_MyH5gAAAUk"]
[Thu Apr 16 06:15:00.718106 2026] [:error] [pid 57537:tid 57584] [client 40.115.139.4:4360] [client 40.115.139.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeAN5FVQRS8nm73ENAkxCgAAAEk"]
[Thu Apr 16 06:15:01.194771 2026] [:error] [pid 49094:tid 49119] [client 40.115.139.4:4748] [client 40.115.139.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeAN5TbDwvcXorHR_MyH6QAAAVc"]
[Thu Apr 16 07:36:59.121847 2026] [:error] [pid 57639:tid 57655] [client 20.193.52.210:3631] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Apr 16 07:36:59.151710 2026] [:error] [pid 57639:tid 57652] [client 20.193.52.210:3631] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 16 07:36:59.170982 2026] [:error] [pid 57639:tid 57664] [client 20.193.52.210:3631] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Apr 16 07:36:59.190113 2026] [:error] [pid 57639:tid 57661] [client 20.193.52.210:3631] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 16 07:36:59.209695 2026] [:error] [pid 57639:tid 57670] [client 20.193.52.210:3631] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Thu Apr 16 07:36:59.258469 2026] [:error] [pid 57639:tid 57650] [client 20.193.52.210:3631] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Thu Apr 16 07:36:59.296182 2026] [:error] [pid 57639:tid 57667] [client 20.193.52.210:3631] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Thu Apr 16 07:36:59.315584 2026] [:error] [pid 57639:tid 57657] [client 20.193.52.210:3631] File does not exist: /usr/local/apache/htdocs/suspended-page/file3.php
[Thu Apr 16 07:36:59.335356 2026] [:error] [pid 57639:tid 57659] [client 20.193.52.210:3631] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Thu Apr 16 07:36:59.353993 2026] [:error] [pid 57639:tid 57649] [client 20.193.52.210:3631] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Apr 16 07:36:59.369020 2026] [:error] [pid 57639:tid 57647] [client 20.193.52.210:3631] [client 20.193.52.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeAhG6MCQoTw7TsxWune6wAAAME"]
[Thu Apr 16 07:36:59.437071 2026] [:error] [pid 57639:tid 57658] [client 20.193.52.210:3444] [client 20.193.52.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeAhG6MCQoTw7TsxWune7AAAAMw"]
[Thu Apr 16 07:36:59.547636 2026] [:error] [pid 29603:tid 29625] [client 20.193.52.210:3641] [client 20.193.52.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeAhG1fGOR6fpTWUAzrmJQAAARQ"]
[Thu Apr 16 07:36:59.613232 2026] [:error] [pid 57538:tid 57619] [client 20.193.52.210:3620] [client 20.193.52.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeAhG8uMaiEF5SVR2BdNZgAAAJE"]
[Thu Apr 16 07:48:06.642822 2026] [:error] [pid 49094:tid 49108] [client 172.71.148.152:13878] [client 172.71.148.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aeAjtjbDwvcXorHR_My_NQAAAUw"]
[Thu Apr 16 07:48:07.470078 2026] [:error] [pid 49094:tid 49111] [client 162.158.87.7:10495] [client 162.158.87.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.save"] [unique_id "aeAjtzbDwvcXorHR_My_NwAAAU8"]
[Thu Apr 16 07:48:07.494134 2026] [:error] [pid 57537:tid 57595] [client 162.158.87.8:9310] [client 162.158.87.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.production.local"] [unique_id "aeAjt1VQRS8nm73ENAlDoAAAAFQ"]
[Thu Apr 16 07:48:07.503269 2026] [:error] [pid 29603:tid 29614] [client 162.158.87.7:10493] [client 162.158.87.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "aeAjt1fGOR6fpTWUAzrpAwAAAQk"]
[Thu Apr 16 07:48:11.069894 2026] [:error] [pid 57639:tid 57657] [client 18.193.43.181:49122] [client 18.193.43.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.backup"] [unique_id "aeAju6MCQoTw7TsxWunkrAAAAMs"]
[Thu Apr 16 08:12:22.011308 2026] [:error] [pid 57537:tid 57575] [client 172.71.203.43:12007] [client 172.71.203.43] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.save"] [unique_id "aeApZlVQRS8nm73ENAlIqgAAAEA"]
[Thu Apr 16 08:12:24.037354 2026] [:error] [pid 57639:tid 57669] [client 104.23.190.253:14165] [client 104.23.190.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.backup"] [unique_id "aeApaKMCQoTw7TsxWunzHQAAANc"]
[Thu Apr 16 08:12:24.044676 2026] [:error] [pid 57639:tid 57670] [client 104.23.190.252:9636] [client 104.23.190.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "aeApaKMCQoTw7TsxWunzHgAAANg"]
[Thu Apr 16 08:12:25.245304 2026] [:error] [pid 57639:tid 57664] [client 104.23.253.137:13630] [client 104.23.253.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.staging"] [unique_id "aeApaaMCQoTw7TsxWunzIgAAANI"]
[Thu Apr 16 08:12:26.930024 2026] [:error] [pid 49094:tid 49096] [client 162.158.63.233:13294] [client 162.158.63.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.development"] [unique_id "aeApajbDwvcXorHR_MzJ0wAAAUA"]
[Thu Apr 16 08:12:27.706866 2026] [:error] [pid 29603:tid 29608] [client 104.23.190.253:14170] [client 104.23.190.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aeApa1fGOR6fpTWUAzrxtAAAAQM"]
[Thu Apr 16 08:12:27.718053 2026] [:error] [pid 29603:tid 29623] [client 172.71.203.42:12170] [client 172.71.203.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.old"] [unique_id "aeApa1fGOR6fpTWUAzrxtQAAARI"]
[Thu Apr 16 08:41:01.862142 2026] [:error] [pid 57538:tid 57616] [client 98.93.160.221:43266] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aeAwHcuMaiEF5SVR2BddaQAAAI4"]
[Thu Apr 16 12:09:29.966642 2026] [:error] [pid 7880:tid 7892] [client 98.93.160.221:40208] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aeBg-aaezm4fSGc0yUIQmQAAAYc"]
[Thu Apr 16 13:32:45.545134 2026] [:error] [pid 7880:tid 7886] [client 20.199.125.41:52369] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-config-sample.php
[Thu Apr 16 14:34:24.136522 2026] [:error] [pid 49094:tid 49100] [client 40.115.139.4:5530] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Thu Apr 16 14:34:24.310250 2026] [:error] [pid 49094:tid 49101] [client 40.115.139.4:5530] File does not exist: /usr/local/apache/htdocs/suspended-page/ftde.php
[Thu Apr 16 14:34:24.449954 2026] [:error] [pid 49094:tid 49103] [client 40.115.139.4:5530] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-temp.php
[Thu Apr 16 14:34:24.729763 2026] [:error] [pid 49094:tid 49118] [client 40.115.139.4:5530] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Thu Apr 16 14:34:24.880734 2026] [:error] [pid 49094:tid 49117] [client 40.115.139.4:5530] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Apr 16 14:34:25.021144 2026] [:error] [pid 49094:tid 49113] [client 40.115.139.4:5530] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Apr 16 14:34:25.161417 2026] [:error] [pid 49094:tid 49109] [client 40.115.139.4:5530] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Thu Apr 16 14:34:25.302091 2026] [:error] [pid 49094:tid 49115] [client 40.115.139.4:5530] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX2.php
[Thu Apr 16 14:34:25.443027 2026] [:error] [pid 49094:tid 49099] [client 40.115.139.4:5530] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php
[Thu Apr 16 14:34:25.734736 2026] [:error] [pid 49094:tid 49110] [client 40.115.139.4:5530] [client 40.115.139.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeCC8TbDwvcXorHR_Mw1gQAAAU4"]
[Thu Apr 16 14:34:26.197992 2026] [:error] [pid 57639:tid 57648] [client 40.115.139.4:5545] [client 40.115.139.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeCC8qMCQoTw7TsxWumligAAAMI"]
[Thu Apr 16 14:34:26.753561 2026] [:error] [pid 7880:tid 7896] [client 40.115.139.4:5546] [client 40.115.139.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeCC8qaezm4fSGc0yUI3uwAAAYs"]
[Thu Apr 16 14:34:27.375686 2026] [:error] [pid 57538:tid 57619] [client 40.115.139.4:4814] [client 40.115.139.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeCC88uMaiEF5SVR2BeWdQAAAJE"]
[Thu Apr 16 23:50:20.032491 2026] [:error] [pid 57639:tid 57664] [client 45.130.203.136:26161] [client 45.130.203.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/HEAD"] [unique_id "aeEFPKMCQoTw7TsxWukhMwAAANI"]
[Thu Apr 16 23:50:20.724391 2026] [:error] [pid 57639:tid 57648] [client 45.130.203.135:36889] [client 45.130.203.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/HEAD"] [unique_id "aeEFPKMCQoTw7TsxWukhNQAAAMI"]
[Fri Apr 17 00:24:20.623095 2026] [:error] [pid 43482:tid 43492] [client 34.168.59.108:52950] [client 34.168.59.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aeENND9SZnuKxlHrct12AAAAAMg"]
[Fri Apr 17 00:27:22.419531 2026] [:error] [pid 3245:tid 3275] [client 4.232.179.255:3139] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Fri Apr 17 00:27:22.697956 2026] [:error] [pid 3245:tid 3269] [client 4.232.179.255:3139] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Apr 17 00:27:22.979845 2026] [:error] [pid 3245:tid 3273] [client 4.232.179.255:3139] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Apr 17 00:27:23.249399 2026] [:error] [pid 3245:tid 3286] [client 4.232.179.255:3139] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Fri Apr 17 00:27:23.518489 2026] [:error] [pid 3245:tid 3279] [client 4.232.179.255:3139] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Fri Apr 17 00:27:24.083040 2026] [:error] [pid 3245:tid 3280] [client 4.232.179.255:3139] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Fri Apr 17 00:27:24.410271 2026] [:error] [pid 3245:tid 3274] [client 4.232.179.255:3139] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Fri Apr 17 00:27:24.680156 2026] [:error] [pid 3245:tid 3269] [client 4.232.179.255:3139] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri Apr 17 00:27:24.949631 2026] [:error] [pid 3245:tid 3281] [client 4.232.179.255:3139] File does not exist: /usr/local/apache/htdocs/suspended-page/admlo.php
[Fri Apr 17 00:27:25.507286 2026] [:error] [pid 3245:tid 3270] [client 4.232.179.255:3139] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "aeEN7aESOMTHVLs-uFC3YgAAAQg"]
[Fri Apr 17 00:27:26.366096 2026] [:error] [pid 3245:tid 3265] [client 4.232.179.255:3245] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "aeEN7qESOMTHVLs-uFC3ZAAAAQM"]
[Fri Apr 17 00:27:27.513784 2026] [:error] [pid 3245:tid 3272] [client 4.232.179.255:62965] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "aeEN76ESOMTHVLs-uFC3bQAAAQo"]
[Fri Apr 17 00:27:28.722569 2026] [:error] [pid 3245:tid 3271] [client 4.232.179.255:3685] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "aeEN8KESOMTHVLs-uFC3eAAAAQk"]
[Fri Apr 17 00:27:29.426042 2026] [:error] [pid 3245:tid 3267] [client 4.232.179.255:3216] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeEN8aESOMTHVLs-uFC3fgAAAQU"]
[Fri Apr 17 00:27:30.222277 2026] [:error] [pid 3245:tid 3266] [client 4.232.179.255:57897] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeEN8qESOMTHVLs-uFC3hAAAAQQ"]
[Fri Apr 17 00:27:30.901907 2026] [:error] [pid 43385:tid 43408] [client 4.232.179.255:47718] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeEN8snIxkJaUI8KNs7w0QAAABM"]
[Fri Apr 17 00:27:32.483693 2026] [:error] [pid 3245:tid 3278] [client 4.232.179.255:62916] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeEN9KESOMTHVLs-uFC3kQAAARA"]
[Fri Apr 17 00:27:34.095723 2026] [:error] [pid 43482:tid 43495] [client 4.232.179.255:3691] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aeEN9j9SZnuKxlHrct14dwAAAMs"]
[Fri Apr 17 00:27:35.844514 2026] [:error] [pid 3245:tid 3267] [client 4.232.179.255:3243] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aeEN96ESOMTHVLs-uFC3pAAAAQU"]
[Fri Apr 17 00:27:42.316835 2026] [:error] [pid 43387:tid 43476] [client 4.232.179.255:57917] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aeEN_iBNsONqHxWTakUoagAAAJc"]
[Fri Apr 17 00:27:44.366639 2026] [:error] [pid 43387:tid 43454] [client 4.232.179.255:47722] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aeEOACBNsONqHxWTakUodQAAAIQ"]
[Fri Apr 17 00:27:45.779611 2026] [:error] [pid 43385:tid 43413] [client 4.232.179.255:3650] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "aeEOAcnIxkJaUI8KNs7w8QAAABc"]
[Fri Apr 17 00:27:48.380673 2026] [:error] [pid 43387:tid 43458] [client 4.232.179.255:62952] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "aeEOBCBNsONqHxWTakUohQAAAIc"]
[Fri Apr 17 00:27:51.336878 2026] [:error] [pid 43387:tid 43454] [client 4.232.179.255:3655] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "aeEOByBNsONqHxWTakUokAAAAIQ"]
[Fri Apr 17 00:27:52.782644 2026] [:error] [pid 43387:tid 43473] [client 4.232.179.255:3190] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "aeEOCCBNsONqHxWTakUokQAAAJQ"]
[Fri Apr 17 00:27:53.790734 2026] [:error] [pid 43482:tid 43503] [client 4.232.179.255:62957] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeEOCT9SZnuKxlHrct14lwAAANM"]
[Fri Apr 17 00:27:54.741313 2026] [:error] [pid 3245:tid 3272] [client 4.232.179.255:62931] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeEOCqESOMTHVLs-uFC3zAAAAQo"]
[Fri Apr 17 00:27:55.618729 2026] [:error] [pid 43387:tid 43462] [client 4.232.179.255:3218] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeEOCyBNsONqHxWTakUomgAAAIs"]
[Fri Apr 17 00:27:56.348882 2026] [:error] [pid 3245:tid 3277] [client 4.232.179.255:55413] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeEODKESOMTHVLs-uFC32AAAAQ8"]
[Fri Apr 17 00:27:57.089771 2026] [:error] [pid 3245:tid 3285] [client 4.232.179.255:55423] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeEODaESOMTHVLs-uFC34AAAARc"]
[Fri Apr 17 00:28:01.728271 2026] [:error] [pid 43385:tid 43394] [client 4.232.179.255:3247] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeEOEcnIxkJaUI8KNs7xEgAAAAU"]
[Fri Apr 17 00:28:02.290728 2026] [:error] [pid 3245:tid 3286] [client 4.232.179.255:3191] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeEOEqESOMTHVLs-uFC37gAAARg"]
[Fri Apr 17 00:28:05.793365 2026] [:error] [pid 43385:tid 43398] [client 4.232.179.255:55384] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeEOFcnIxkJaUI8KNs7xHQAAAAk"]
[Fri Apr 17 00:28:08.629032 2026] [:error] [pid 43386:tid 43421] [client 4.232.179.255:3689] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aeEOGO91GAVgUfhPVDGugAAAAEE"]
[Fri Apr 17 00:28:09.867017 2026] [:error] [pid 43387:tid 43475] [client 4.232.179.255:3699] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aeEOGSBNsONqHxWTakUotAAAAJY"]
[Fri Apr 17 00:28:11.381873 2026] [:error] [pid 43387:tid 43459] [client 4.232.179.255:57875] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aeEOGyBNsONqHxWTakUotwAAAIg"]
[Fri Apr 17 00:28:12.380921 2026] [:error] [pid 3245:tid 3276] [client 4.232.179.255:3673] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aeEOHKESOMTHVLs-uFC4EQAAAQ4"]
[Fri Apr 17 00:28:13.748120 2026] [:error] [pid 43482:tid 43491] [client 4.232.179.255:55373] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aeEOHT9SZnuKxlHrct14zwAAAMc"]
[Fri Apr 17 00:28:15.195217 2026] [:error] [pid 3245:tid 3268] [client 4.232.179.255:3565] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aeEOH6ESOMTHVLs-uFC4KwAAAQY"]
[Fri Apr 17 00:28:17.755814 2026] [:error] [pid 3245:tid 3278] [client 4.232.179.255:57893] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aeEOIaESOMTHVLs-uFC4QAAAARA"]
[Fri Apr 17 00:28:18.930116 2026] [:error] [pid 43387:tid 43469] [client 4.232.179.255:55405] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aeEOIiBNsONqHxWTakUoxgAAAJA"]
[Fri Apr 17 00:28:20.429939 2026] [:error] [pid 43387:tid 43461] [client 4.232.179.255:51894] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "aeEOJCBNsONqHxWTakUoywAAAIo"]
[Fri Apr 17 00:28:22.681565 2026] [:error] [pid 43482:tid 43501] [client 4.232.179.255:3187] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "aeEOJj9SZnuKxlHrct144wAAANE"]
[Fri Apr 17 00:28:23.760814 2026] [:error] [pid 43482:tid 43484] [client 4.232.179.255:3230] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "aeEOJz9SZnuKxlHrct146AAAAMA"]
[Fri Apr 17 00:28:24.434722 2026] [:error] [pid 43482:tid 43506] [client 4.232.179.255:62964] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Fri Apr 17 00:28:24.904576 2026] [:error] [pid 43482:tid 43497] [client 4.232.179.255:62964] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Fri Apr 17 00:28:25.220188 2026] [:error] [pid 43482:tid 43494] [client 4.232.179.255:62964] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Apr 17 00:28:25.489416 2026] [:error] [pid 43482:tid 43496] [client 4.232.179.255:62964] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Fri Apr 17 00:28:25.839069 2026] [:error] [pid 43482:tid 43491] [client 4.232.179.255:62964] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Fri Apr 17 00:28:26.108770 2026] [:error] [pid 43482:tid 43500] [client 4.232.179.255:62964] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Fri Apr 17 00:28:26.380559 2026] [:error] [pid 43482:tid 43493] [client 4.232.179.255:62964] File does not exist: /usr/local/apache/htdocs/suspended-page/166.php
[Fri Apr 17 00:28:26.649771 2026] [:error] [pid 43482:tid 43504] [client 4.232.179.255:62964] File does not exist: /usr/local/apache/htdocs/suspended-page/bmi.php
[Fri Apr 17 00:28:26.932936 2026] [:error] [pid 43482:tid 43505] [client 4.232.179.255:62964] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Apr 17 00:28:27.207732 2026] [:error] [pid 43482:tid 43486] [client 4.232.179.255:62964] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Fri Apr 17 00:28:27.763190 2026] [:error] [pid 43482:tid 43498] [client 4.232.179.255:62964] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Fri Apr 17 00:28:28.029746 2026] [:error] [pid 43482:tid 43506] [client 4.232.179.255:62964] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aeEOLD9SZnuKxlHrct15AQAAANY"]
[Fri Apr 17 00:28:29.080931 2026] [:error] [pid 3245:tid 3277] [client 4.232.179.255:55382] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aeEOLaESOMTHVLs-uFC4XQAAAQ8"]
[Fri Apr 17 00:28:29.704511 2026] [:error] [pid 3245:tid 3263] [client 4.232.179.255:57911] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aeEOLaESOMTHVLs-uFC4ZAAAAQE"]
[Fri Apr 17 00:28:30.413337 2026] [:error] [pid 3245:tid 3264] [client 4.232.179.255:47728] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aeEOLqESOMTHVLs-uFC4bAAAAQI"]
[Fri Apr 17 00:28:31.468060 2026] [:error] [pid 3245:tid 3266] [client 4.232.179.255:55417] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeEOL6ESOMTHVLs-uFC4cQAAAQQ"]
[Fri Apr 17 00:28:32.886400 2026] [:error] [pid 43386:tid 43434] [client 4.232.179.255:55421] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeEOMO91GAVgUfhPVDGusQAAAE4"]
[Fri Apr 17 00:28:33.702887 2026] [:error] [pid 43482:tid 43503] [client 4.232.179.255:3254] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeEOMT9SZnuKxlHrct15EgAAANM"]
[Fri Apr 17 00:28:34.541231 2026] [:error] [pid 43482:tid 43502] [client 4.232.179.255:55370] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeEOMj9SZnuKxlHrct15FgAAANI"]
[Fri Apr 17 00:28:35.116013 2026] [:error] [pid 43387:tid 43471] [client 4.232.179.255:47682] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeEOMyBNsONqHxWTakUo4gAAAJI"]
[Fri Apr 17 00:28:35.620000 2026] [:error] [pid 43387:tid 43469] [client 4.232.179.255:3163] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeEOMyBNsONqHxWTakUo6AAAAJA"]
[Fri Apr 17 00:28:36.520179 2026] [:error] [pid 43482:tid 43490] [client 4.232.179.255:62968] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeEOND9SZnuKxlHrct15HAAAAMY"]
[Fri Apr 17 00:28:37.249098 2026] [:error] [pid 43386:tid 43423] [client 4.232.179.255:3262] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeEONe91GAVgUfhPVDGutQAAAEM"]
[Fri Apr 17 00:28:37.907531 2026] [:error] [pid 43386:tid 43427] [client 4.232.179.255:3657] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeEONe91GAVgUfhPVDGutgAAAEc"]
[Fri Apr 17 00:28:38.686964 2026] [:error] [pid 43387:tid 43460] [client 4.232.179.255:3180] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeEONiBNsONqHxWTakUo8wAAAIk"]
[Fri Apr 17 00:28:39.624932 2026] [:error] [pid 43386:tid 43422] [client 4.232.179.255:3223] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeEON-91GAVgUfhPVDGuuwAAAEI"]
[Fri Apr 17 00:28:40.402664 2026] [:error] [pid 43386:tid 43443] [client 4.232.179.255:55378] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeEOOO91GAVgUfhPVDGuvgAAAFY"]
[Fri Apr 17 00:28:41.184883 2026] [:error] [pid 43482:tid 43491] [client 4.232.179.255:47699] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "aeEOOT9SZnuKxlHrct15JgAAAMc"]
[Fri Apr 17 00:28:42.072692 2026] [:error] [pid 3245:tid 3264] [client 4.232.179.255:57872] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "aeEOOqESOMTHVLs-uFC4mAAAAQI"]
[Fri Apr 17 00:28:43.390601 2026] [:error] [pid 3245:tid 3280] [client 4.232.179.255:47730] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "aeEOO6ESOMTHVLs-uFC4mwAAARI"]
[Fri Apr 17 00:28:44.386722 2026] [:error] [pid 43386:tid 43420] [client 4.232.179.255:57888] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "aeEOPO91GAVgUfhPVDGuwAAAAEA"]
[Fri Apr 17 00:28:45.050528 2026] [:error] [pid 43482:tid 43489] [client 4.232.179.255:55409] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeEOPT9SZnuKxlHrct15LQAAAMU"]
[Fri Apr 17 00:28:45.684972 2026] [:error] [pid 43386:tid 43444] [client 4.232.179.255:62918] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeEOPe91GAVgUfhPVDGuyAAAAFc"]
[Fri Apr 17 00:28:46.383588 2026] [:error] [pid 43386:tid 43423] [client 4.232.179.255:3227] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeEOPu91GAVgUfhPVDGuywAAAEM"]
[Fri Apr 17 00:28:47.313106 2026] [:error] [pid 43387:tid 43467] [client 4.232.179.255:57857] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeEOPyBNsONqHxWTakUpBwAAAI4"]
[Fri Apr 17 00:28:47.881158 2026] [:error] [pid 3245:tid 3265] [client 4.232.179.255:3183] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeEOP6ESOMTHVLs-uFC4qwAAAQM"]
[Fri Apr 17 00:28:48.960170 2026] [:error] [pid 43482:tid 43499] [client 4.232.179.255:47723] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeEOQD9SZnuKxlHrct15NAAAAM8"]
[Fri Apr 17 00:28:50.354675 2026] [:error] [pid 43385:tid 43401] [client 4.232.179.255:55376] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeEOQsnIxkJaUI8KNs7xXwAAAAw"]
[Fri Apr 17 00:28:51.657632 2026] [:error] [pid 43386:tid 43429] [client 4.232.179.255:47696] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeEOQ-91GAVgUfhPVDGu3gAAAEk"]
[Fri Apr 17 00:28:52.972882 2026] [:error] [pid 43482:tid 43504] [client 4.232.179.255:62938] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "aeEORD9SZnuKxlHrct15PgAAANQ"]
[Fri Apr 17 00:28:54.439751 2026] [:error] [pid 43386:tid 43431] [client 4.232.179.255:3202] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "aeEORu91GAVgUfhPVDGu5gAAAEs"]
[Fri Apr 17 00:28:55.795121 2026] [:error] [pid 43482:tid 43502] [client 4.232.179.255:3237] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "aeEORz9SZnuKxlHrct15SQAAANI"]
[Fri Apr 17 00:28:56.821294 2026] [:error] [pid 43386:tid 43426] [client 4.232.179.255:55363] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "aeEOSO91GAVgUfhPVDGu7wAAAEY"]
[Fri Apr 17 00:28:59.031196 2026] [:error] [pid 43387:tid 43465] [client 4.232.179.255:3162] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "aeEOSyBNsONqHxWTakUpFwAAAIw"]
[Fri Apr 17 00:29:00.253080 2026] [:error] [pid 43386:tid 43441] [client 4.232.179.255:55386] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "aeEOTO91GAVgUfhPVDGvAQAAAFQ"]
[Fri Apr 17 00:29:02.386228 2026] [:error] [pid 3245:tid 3277] [client 4.232.179.255:3257] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "aeEOTqESOMTHVLs-uFC43QAAAQ8"]
[Fri Apr 17 00:29:03.982084 2026] [:error] [pid 43482:tid 43505] [client 4.232.179.255:62972] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "aeEOTz9SZnuKxlHrct15TQAAANU"]
[Fri Apr 17 00:29:05.324554 2026] [:error] [pid 43482:tid 43502] [client 4.232.179.255:3705] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeEOUT9SZnuKxlHrct15VwAAANI"]
[Fri Apr 17 00:29:06.352320 2026] [:error] [pid 3245:tid 3273] [client 4.232.179.255:62973] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeEOUqESOMTHVLs-uFC45QAAAQs"]
[Fri Apr 17 00:29:07.781338 2026] [:error] [pid 43387:tid 43472] [client 4.232.179.255:55364] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeEOUyBNsONqHxWTakUpHgAAAJM"]
[Fri Apr 17 00:29:09.198221 2026] [:error] [pid 43387:tid 43448] [client 4.232.179.255:57904] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeEOVSBNsONqHxWTakUpIQAAAIA"]
[Fri Apr 17 00:29:10.975280 2026] [:error] [pid 43482:tid 43503] [client 4.232.179.255:57915] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "aeEOVj9SZnuKxlHrct15YAAAANM"]
[Fri Apr 17 00:29:13.364123 2026] [:error] [pid 43385:tid 43412] [client 4.232.179.255:47727] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "aeEOWcnIxkJaUI8KNs7xfgAAABY"]
[Fri Apr 17 00:29:15.357567 2026] [:error] [pid 3245:tid 3265] [client 4.232.179.255:3701] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "aeEOW6ESOMTHVLs-uFC5AAAAAQM"]
[Fri Apr 17 00:29:16.330286 2026] [:error] [pid 3245:tid 3282] [client 4.232.179.255:3219] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "aeEOXKESOMTHVLs-uFC5CAAAARQ"]
[Fri Apr 17 00:29:17.074475 2026] [:error] [pid 3245:tid 3267] [client 4.232.179.255:55396] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeEOXaESOMTHVLs-uFC5EAAAAQU"]
[Fri Apr 17 00:29:17.870079 2026] [:error] [pid 3245:tid 3275] [client 4.232.179.255:55396] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeEOXaESOMTHVLs-uFC5FgAAAQ0"]
[Fri Apr 17 00:29:18.692949 2026] [:error] [pid 3245:tid 3276] [client 4.232.179.255:62927] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeEOXqESOMTHVLs-uFC5HQAAAQ4"]
[Fri Apr 17 00:29:20.179255 2026] [:error] [pid 43387:tid 43460] [client 4.232.179.255:57890] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeEOYCBNsONqHxWTakUpSQAAAIk"]
[Fri Apr 17 00:29:21.140459 2026] [:error] [pid 43482:tid 43494] [client 4.232.179.255:47687] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aeEOYT9SZnuKxlHrct15bgAAAMo"]
[Fri Apr 17 00:29:21.901924 2026] [:error] [pid 3245:tid 3270] [client 4.232.179.255:62970] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aeEOYaESOMTHVLs-uFC5KgAAAQg"]
[Fri Apr 17 00:29:23.341959 2026] [:error] [pid 3245:tid 3282] [client 4.232.179.255:57891] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aeEOY6ESOMTHVLs-uFC5LAAAARQ"]
[Fri Apr 17 00:29:24.720894 2026] [:error] [pid 43482:tid 43507] [client 4.232.179.255:64585] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aeEOZD9SZnuKxlHrct15fQAAANc"]
[Fri Apr 17 00:29:25.373789 2026] [:error] [pid 43386:tid 43430] [client 4.232.179.255:57886] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aeEOZe91GAVgUfhPVDGvNgAAAEo"]
[Fri Apr 17 00:29:25.943035 2026] [:error] [pid 3245:tid 3274] [client 4.232.179.255:62933] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aeEOZaESOMTHVLs-uFC5MwAAAQw"]
[Fri Apr 17 00:29:27.286052 2026] [:error] [pid 43482:tid 43501] [client 4.232.179.255:47721] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Fri Apr 17 00:29:27.550580 2026] [:error] [pid 43482:tid 43487] [client 4.232.179.255:47721] File does not exist: /usr/local/apache/htdocs/suspended-page/900.php
[Fri Apr 17 00:29:27.792693 2026] [:error] [pid 43482:tid 43486] [client 4.232.179.255:47721] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Fri Apr 17 00:29:28.034250 2026] [:error] [pid 43482:tid 43496] [client 4.232.179.255:47721] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Fri Apr 17 00:29:28.311095 2026] [:error] [pid 43482:tid 43497] [client 4.232.179.255:47721] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Fri Apr 17 00:29:28.552949 2026] [:error] [pid 43482:tid 43504] [client 4.232.179.255:47721] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Fri Apr 17 00:29:28.796836 2026] [:error] [pid 43482:tid 43492] [client 4.232.179.255:47721] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Fri Apr 17 00:29:29.045054 2026] [:error] [pid 43482:tid 43503] [client 4.232.179.255:47721] File does not exist: /usr/local/apache/htdocs/suspended-page/aboutc.php
[Fri Apr 17 00:29:29.318780 2026] [:error] [pid 43482:tid 43505] [client 4.232.179.255:47721] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Fri Apr 17 00:29:29.638055 2026] [:error] [pid 43482:tid 43507] [client 4.232.179.255:47721] File does not exist: /usr/local/apache/htdocs/suspended-page/ws82.php
[Fri Apr 17 00:29:30.237798 2026] [:error] [pid 43482:tid 43495] [client 4.232.179.255:47721] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws48.php"] [unique_id "aeEOaj9SZnuKxlHrct15kgAAAMs"]
[Fri Apr 17 00:29:30.796579 2026] [:error] [pid 43385:tid 43399] [client 4.232.179.255:62962] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws48.php"] [unique_id "aeEOasnIxkJaUI8KNs7xjgAAAAo"]
[Fri Apr 17 00:29:31.569869 2026] [:error] [pid 43387:tid 43449] [client 4.232.179.255:55388] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws48.php"] [unique_id "aeEOayBNsONqHxWTakUpaQAAAIE"]
[Fri Apr 17 00:29:32.378422 2026] [:error] [pid 43386:tid 43429] [client 4.232.179.255:62940] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws48.php"] [unique_id "aeEObO91GAVgUfhPVDGvQgAAAEk"]
[Fri Apr 17 00:29:33.145791 2026] [:error] [pid 43387:tid 43475] [client 4.232.179.255:47695] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aeEObSBNsONqHxWTakUpbQAAAJY"]
[Fri Apr 17 00:29:34.334829 2026] [:error] [pid 43387:tid 43470] [client 4.232.179.255:3256] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aeEObiBNsONqHxWTakUpcwAAAJE"]
[Fri Apr 17 00:29:35.114922 2026] [:error] [pid 43385:tid 43413] [client 4.232.179.255:62928] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aeEOb8nIxkJaUI8KNs7xlgAAABc"]
[Fri Apr 17 00:29:36.760403 2026] [:error] [pid 3245:tid 3278] [client 4.232.179.255:47739] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aeEOcKESOMTHVLs-uFC5SgAAARA"]
[Fri Apr 17 00:29:38.138095 2026] [:error] [pid 43385:tid 43405] [client 4.232.179.255:3197] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aeEOcsnIxkJaUI8KNs7xnQAAABA"]
[Fri Apr 17 00:29:39.198430 2026] [:error] [pid 43482:tid 43492] [client 4.232.179.255:47742] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aeEOcz9SZnuKxlHrct15qgAAAMg"]
[Fri Apr 17 00:29:40.451375 2026] [:error] [pid 43482:tid 43505] [client 4.232.179.255:3261] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aeEOdD9SZnuKxlHrct15rQAAANU"]
[Fri Apr 17 00:29:42.425301 2026] [:error] [pid 43482:tid 43491] [client 4.232.179.255:55372] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aeEOdj9SZnuKxlHrct15sQAAAMc"]
[Fri Apr 17 00:29:43.017439 2026] [:error] [pid 43482:tid 43484] [client 4.232.179.255:3711] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeEOdz9SZnuKxlHrct15swAAAMA"]
[Fri Apr 17 00:29:43.694529 2026] [:error] [pid 43482:tid 43500] [client 4.232.179.255:3153] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeEOdz9SZnuKxlHrct15twAAANA"]
[Fri Apr 17 00:29:44.588910 2026] [:error] [pid 43386:tid 43431] [client 4.232.179.255:55392] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeEOeO91GAVgUfhPVDGvTAAAAEs"]
[Fri Apr 17 00:29:45.343453 2026] [:error] [pid 3245:tid 3279] [client 4.232.179.255:3188] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeEOeaESOMTHVLs-uFC5UwAAARE"]
[Fri Apr 17 00:29:45.836914 2026] [:error] [pid 3245:tid 3268] [client 4.232.179.255:3675] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeEOeaESOMTHVLs-uFC5VgAAAQY"]
[Fri Apr 17 00:29:46.423527 2026] [:error] [pid 43386:tid 43432] [client 4.232.179.255:3200] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeEOeu91GAVgUfhPVDGvTgAAAEw"]
[Fri Apr 17 00:29:47.080663 2026] [:error] [pid 43385:tid 43402] [client 4.232.179.255:3265] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeEOe8nIxkJaUI8KNs7xpAAAAA0"]
[Fri Apr 17 00:29:47.631501 2026] [:error] [pid 3245:tid 3271] [client 4.232.179.255:57908] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeEOe6ESOMTHVLs-uFC5WgAAAQk"]
[Fri Apr 17 00:29:48.313221 2026] [:error] [pid 3245:tid 3275] [client 4.232.179.255:57869] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aeEOfKESOMTHVLs-uFC5XwAAAQ0"]
[Fri Apr 17 00:29:49.349036 2026] [:error] [pid 43482:tid 43498] [client 4.232.179.255:3209] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aeEOfT9SZnuKxlHrct15wQAAAM4"]
[Fri Apr 17 00:29:49.989433 2026] [:error] [pid 3245:tid 3262] [client 4.232.179.255:3142] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aeEOfaESOMTHVLs-uFC5YgAAAQA"]
[Fri Apr 17 00:29:50.757303 2026] [:error] [pid 43482:tid 43486] [client 4.232.179.255:47737] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aeEOfj9SZnuKxlHrct15xgAAAMI"]
[Fri Apr 17 00:29:51.620518 2026] [:error] [pid 3245:tid 3267] [client 4.232.179.255:3231] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeEOf6ESOMTHVLs-uFC5aAAAAQU"]
[Fri Apr 17 00:29:52.344659 2026] [:error] [pid 43386:tid 43426] [client 4.232.179.255:3525] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeEOgO91GAVgUfhPVDGvUgAAAEY"]
[Fri Apr 17 00:29:53.273604 2026] [:error] [pid 43387:tid 43466] [client 4.232.179.255:55397] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeEOgSBNsONqHxWTakUpnAAAAI0"]
[Fri Apr 17 00:29:54.088508 2026] [:error] [pid 43482:tid 43493] [client 4.232.179.255:3148] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeEOgj9SZnuKxlHrct15zQAAAMk"]
[Fri Apr 17 00:29:57.949903 2026] [:error] [pid 3245:tid 3281] [client 4.232.179.255:3198] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aeEOhaESOMTHVLs-uFC5fgAAARM"]
[Fri Apr 17 00:29:59.515499 2026] [:error] [pid 43482:tid 43487] [client 4.232.179.255:3670] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aeEOhz9SZnuKxlHrct150wAAAMM"]
[Fri Apr 17 00:30:02.223850 2026] [:error] [pid 3245:tid 3264] [client 4.232.179.255:57900] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aeEOiqESOMTHVLs-uFC5hwAAAQI"]
[Fri Apr 17 00:30:04.686308 2026] [:error] [pid 3245:tid 3272] [client 4.232.179.255:62929] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aeEOjKESOMTHVLs-uFC5nAAAAQo"]
[Fri Apr 17 00:30:05.959387 2026] [:error] [pid 43386:tid 43420] [client 4.232.179.255:47692] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeEOje91GAVgUfhPVDGvcQAAAEA"]
[Fri Apr 17 00:30:07.407325 2026] [:error] [pid 3245:tid 3284] [client 4.232.179.255:3694] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeEOj6ESOMTHVLs-uFC5rwAAARY"]
[Fri Apr 17 00:30:08.716519 2026] [:error] [pid 43482:tid 43507] [client 4.232.179.255:47689] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeEOkD9SZnuKxlHrct155AAAANc"]
[Fri Apr 17 00:30:09.418733 2026] [:error] [pid 43482:tid 43491] [client 4.232.179.255:57863] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeEOkT9SZnuKxlHrct155QAAAMc"]
[Fri Apr 17 00:30:11.356006 2026] [:error] [pid 43387:tid 43456] [client 4.232.179.255:3700] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "aeEOkyBNsONqHxWTakUpvAAAAIU"]
[Fri Apr 17 00:30:13.779713 2026] [:error] [pid 3245:tid 3277] [client 4.232.179.255:55407] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "aeEOlaESOMTHVLs-uFC5tgAAAQ8"]
[Fri Apr 17 00:30:14.866431 2026] [:error] [pid 3245:tid 3262] [client 4.232.179.255:3660] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "aeEOlqESOMTHVLs-uFC5vQAAAQA"]
[Fri Apr 17 00:30:15.605777 2026] [:error] [pid 3245:tid 3265] [client 4.232.179.255:57906] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "aeEOl6ESOMTHVLs-uFC5wgAAAQM"]
[Fri Apr 17 00:30:16.263979 2026] [:error] [pid 43386:tid 43436] [client 4.232.179.255:3688] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeEOmO91GAVgUfhPVDGvfQAAAFA"]
[Fri Apr 17 00:30:17.301539 2026] [:error] [pid 43385:tid 43410] [client 4.232.179.255:3199] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeEOmcnIxkJaUI8KNs7xtgAAABQ"]
[Fri Apr 17 00:30:18.093937 2026] [:error] [pid 3245:tid 3272] [client 4.232.179.255:55394] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeEOmqESOMTHVLs-uFC5ygAAAQo"]
[Fri Apr 17 00:30:18.737957 2026] [:error] [pid 43387:tid 43458] [client 4.232.179.255:57859] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeEOmiBNsONqHxWTakUpxgAAAIc"]
[Fri Apr 17 00:30:19.323442 2026] [:error] [pid 43387:tid 43468] [client 4.232.179.255:55418] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aeEOmyBNsONqHxWTakUpxwAAAI8"]
[Fri Apr 17 00:30:20.185979 2026] [:error] [pid 43387:tid 43457] [client 4.232.179.255:3656] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aeEOnCBNsONqHxWTakUpyAAAAIY"]
[Fri Apr 17 00:30:20.726410 2026] [:error] [pid 43386:tid 43429] [client 4.232.179.255:3196] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aeEOnO91GAVgUfhPVDGviAAAAEk"]
[Fri Apr 17 00:30:21.317964 2026] [:error] [pid 43387:tid 43477] [client 4.232.179.255:3137] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aeEOnSBNsONqHxWTakUpygAAAJg"]
[Fri Apr 17 00:30:21.994971 2026] [:error] [pid 43386:tid 43430] [client 4.232.179.255:62951] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "aeEOne91GAVgUfhPVDGviwAAAEo"]
[Fri Apr 17 00:30:22.556025 2026] [:error] [pid 43482:tid 43500] [client 4.232.179.255:62958] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "aeEOnj9SZnuKxlHrct15-AAAANA"]
[Fri Apr 17 00:30:23.163972 2026] [:error] [pid 43387:tid 43472] [client 4.232.179.255:57873] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "aeEOnyBNsONqHxWTakUp0AAAAJM"]
[Fri Apr 17 00:30:23.767968 2026] [:error] [pid 3245:tid 3281] [client 4.232.179.255:3697] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "aeEOn6ESOMTHVLs-uFC53gAAARM"]
[Fri Apr 17 00:30:24.333440 2026] [:error] [pid 43386:tid 43422] [client 4.232.179.255:49729] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aeEOoO91GAVgUfhPVDGvkAAAAEI"]
[Fri Apr 17 00:30:24.953693 2026] [:error] [pid 3245:tid 3264] [client 4.232.179.255:3529] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aeEOoKESOMTHVLs-uFC54gAAAQI"]
[Fri Apr 17 00:30:25.711337 2026] [:error] [pid 43385:tid 43393] [client 4.232.179.255:3531] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aeEOocnIxkJaUI8KNs7xxAAAAAQ"]
[Fri Apr 17 00:30:26.463732 2026] [:error] [pid 43387:tid 43466] [client 4.232.179.255:57866] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aeEOoiBNsONqHxWTakUp1gAAAI0"]
[Fri Apr 17 00:30:27.060638 2026] [:error] [pid 43386:tid 43433] [client 4.232.179.255:3195] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aeEOo-91GAVgUfhPVDGvlQAAAE0"]
[Fri Apr 17 00:30:27.718927 2026] [:error] [pid 43385:tid 43411] [client 4.232.179.255:47738] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aeEOo8nIxkJaUI8KNs7xxQAAABU"]
[Fri Apr 17 00:30:28.233041 2026] [:error] [pid 43482:tid 43506] [client 4.232.179.255:3176] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aeEOpD9SZnuKxlHrct16EwAAANY"]
[Fri Apr 17 00:30:28.720540 2026] [:error] [pid 43482:tid 43504] [client 4.232.179.255:57885] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aeEOpD9SZnuKxlHrct16FQAAANQ"]
[Fri Apr 17 00:30:29.232367 2026] [:error] [pid 43482:tid 43507] [client 4.232.179.255:57919] File does not exist: /usr/local/apache/htdocs/suspended-page/yw5bi63u.php
[Fri Apr 17 00:30:29.473657 2026] [:error] [pid 43482:tid 43498] [client 4.232.179.255:57919] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri Apr 17 00:30:29.715000 2026] [:error] [pid 43482:tid 43496] [client 4.232.179.255:57919] File does not exist: /usr/local/apache/htdocs/suspended-page/ws57.php
[Fri Apr 17 00:30:29.965032 2026] [:error] [pid 43482:tid 43488] [client 4.232.179.255:57919] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Fri Apr 17 00:30:30.213444 2026] [:error] [pid 43482:tid 43490] [client 4.232.179.255:57919] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Fri Apr 17 00:30:30.458357 2026] [:error] [pid 43482:tid 43502] [client 4.232.179.255:57919] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Fri Apr 17 00:30:30.699957 2026] [:error] [pid 43482:tid 43504] [client 4.232.179.255:57919] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-p2r3q9c8k4.php
[Fri Apr 17 00:30:30.999821 2026] [:error] [pid 43482:tid 43505] [client 4.232.179.255:57919] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Fri Apr 17 00:30:31.243586 2026] [:error] [pid 43482:tid 43507] [client 4.232.179.255:57919] File does not exist: /usr/local/apache/htdocs/suspended-page/mode.php
[Fri Apr 17 00:30:31.485183 2026] [:error] [pid 43482:tid 43497] [client 4.232.179.255:57919] File does not exist: /usr/local/apache/htdocs/suspended-page/set.php
[Fri Apr 17 00:30:32.047581 2026] [:error] [pid 43482:tid 43486] [client 4.232.179.255:57919] File does not exist: /usr/local/apache/htdocs/suspended-page/hroxw.php
[Fri Apr 17 00:30:32.766177 2026] [:error] [pid 43482:tid 43493] [client 4.232.179.255:57919] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "aeEOqD9SZnuKxlHrct16LwAAAMk"]
[Fri Apr 17 00:30:34.032892 2026] [:error] [pid 3245:tid 3267] [client 4.232.179.255:3167] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "aeEOqqESOMTHVLs-uFC59wAAAQU"]
[Fri Apr 17 00:30:34.652661 2026] [:error] [pid 3245:tid 3270] [client 4.232.179.255:47688] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "aeEOqqESOMTHVLs-uFC6AQAAAQg"]
[Fri Apr 17 00:30:35.625521 2026] [:error] [pid 43386:tid 43443] [client 4.232.179.255:51863] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "aeEOq-91GAVgUfhPVDGvowAAAFY"]
[Fri Apr 17 00:30:36.462045 2026] [:error] [pid 43482:tid 43504] [client 4.232.179.255:49764] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoo.php"] [unique_id "aeEOrD9SZnuKxlHrct16MgAAANQ"]
[Fri Apr 17 00:30:37.383943 2026] [:error] [pid 3245:tid 3277] [client 4.232.179.255:55420] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoo.php"] [unique_id "aeEOraESOMTHVLs-uFC6JwAAAQ8"]
[Fri Apr 17 00:30:39.402513 2026] [:error] [pid 43482:tid 43491] [client 4.232.179.255:3561] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoo.php"] [unique_id "aeEOrz9SZnuKxlHrct16NQAAAMc"]
[Fri Apr 17 00:30:42.029105 2026] [:error] [pid 43386:tid 43437] [client 4.232.179.255:47710] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoo.php"] [unique_id "aeEOsu91GAVgUfhPVDGvrAAAAFE"]
[Fri Apr 17 00:30:43.712486 2026] [:error] [pid 43387:tid 43460] [client 4.232.179.255:57903] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gaza.php"] [unique_id "aeEOsyBNsONqHxWTakUp9AAAAIk"]
[Fri Apr 17 00:30:44.679896 2026] [:error] [pid 43385:tid 43401] [client 4.232.179.255:62969] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gaza.php"] [unique_id "aeEOtMnIxkJaUI8KNs7x0wAAAAw"]
[Fri Apr 17 00:30:45.418253 2026] [:error] [pid 43387:tid 43457] [client 4.232.179.255:55398] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gaza.php"] [unique_id "aeEOtSBNsONqHxWTakUp-QAAAIY"]
[Fri Apr 17 00:30:46.437318 2026] [:error] [pid 43387:tid 43448] [client 4.232.179.255:3648] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gaza.php"] [unique_id "aeEOtiBNsONqHxWTakUp_wAAAIA"]
[Fri Apr 17 00:30:47.091233 2026] [:error] [pid 3245:tid 3283] [client 4.232.179.255:3267] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/retu11.PhP7"] [unique_id "aeEOt6ESOMTHVLs-uFC6QwAAARU"]
[Fri Apr 17 00:30:47.765885 2026] [:error] [pid 3245:tid 3275] [client 4.232.179.255:3158] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/retu11.PhP7"] [unique_id "aeEOt6ESOMTHVLs-uFC6RwAAAQ0"]
[Fri Apr 17 00:30:48.734365 2026] [:error] [pid 3245:tid 3269] [client 4.232.179.255:47681] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/retu11.PhP7"] [unique_id "aeEOuKESOMTHVLs-uFC6TAAAAQc"]
[Fri Apr 17 00:30:49.326465 2026] [:error] [pid 43482:tid 43496] [client 4.232.179.255:3165] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/retu11.PhP7"] [unique_id "aeEOuT9SZnuKxlHrct16TAAAAMw"]
[Fri Apr 17 00:30:50.245983 2026] [:error] [pid 43482:tid 43503] [client 4.232.179.255:3181] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeEOuj9SZnuKxlHrct16TwAAANM"]
[Fri Apr 17 00:30:50.854703 2026] [:error] [pid 43386:tid 43433] [client 4.232.179.255:62924] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeEOuu91GAVgUfhPVDGvtgAAAE0"]
[Fri Apr 17 00:30:51.563952 2026] [:error] [pid 43386:tid 43427] [client 4.232.179.255:3244] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeEOu-91GAVgUfhPVDGvugAAAEc"]
[Fri Apr 17 00:30:52.190110 2026] [:error] [pid 43385:tid 43412] [client 4.232.179.255:57916] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeEOvMnIxkJaUI8KNs7x3gAAABY"]
[Fri Apr 17 00:30:52.687060 2026] [:error] [pid 43386:tid 43426] [client 4.232.179.255:62941] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mk.php"] [unique_id "aeEOvO91GAVgUfhPVDGvvAAAAEY"]
[Fri Apr 17 00:30:53.286062 2026] [:error] [pid 43387:tid 43472] [client 4.232.179.255:57879] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mk.php"] [unique_id "aeEOvSBNsONqHxWTakUqCwAAAJM"]
[Fri Apr 17 00:30:54.040377 2026] [:error] [pid 43482:tid 43488] [client 4.232.179.255:51847] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mk.php"] [unique_id "aeEOvj9SZnuKxlHrct16VAAAAMQ"]
[Fri Apr 17 00:30:55.111912 2026] [:error] [pid 3245:tid 3283] [client 4.232.179.255:47705] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mk.php"] [unique_id "aeEOv6ESOMTHVLs-uFC6UwAAARU"]
[Fri Apr 17 00:30:56.018591 2026] [:error] [pid 43482:tid 43485] [client 4.232.179.255:55362] [client 4.232.179.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aeEOwD9SZnuKxlHrct16WQAAAME"]
[Fri Apr 17 01:57:34.713061 2026] [:error] [pid 26102:tid 26124] [client 34.82.192.37:63304] [client 34.82.192.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aeEjDv127aFqw6ALdngcHwAAAZM"]
[Fri Apr 17 03:09:49.715394 2026] [:error] [pid 43387:tid 43457] [client 136.107.233.88:55131] [client 136.107.233.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "aeEz_SBNsONqHxWTakVkAAAAAIY"]
[Fri Apr 17 03:09:51.716454 2026] [:error] [pid 43386:tid 43445] [client 136.107.233.88:65362] [client 136.107.233.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "aeEz_-91GAVgUfhPVDH0_gAAAFg"]
[Fri Apr 17 04:40:06.824998 2026] [:error] [pid 9263:tid 9281] [client 62.171.188.7:33688] [client 62.171.188.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/robots.txt"] [unique_id "aeFJJhP68VyHNvj1e57FPQAAANA"]
[Fri Apr 17 13:41:34.625156 2026] [:error] [pid 61523:tid 61548] [client 206.189.150.30:56453] [client 206.189.150.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aeHIDsOaH-Pgc7WEf4M2uQAAAcY"]
[Fri Apr 17 13:41:34.799961 2026] [:error] [pid 9152:tid 9213] [client 206.189.150.30:57232] [client 206.189.150.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "aeHIDpJYca8I3TNCwIfyIgAAAFc"]
[Fri Apr 17 13:41:34.992416 2026] [:error] [pid 9153:tid 9229] [client 206.189.150.30:57530] [client 206.189.150.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aeHIDuMHGxkTZX3c45fI5AAAAIs"]
[Fri Apr 17 13:41:35.170090 2026] [:error] [pid 34273:tid 34292] [client 206.189.150.30:57766] [client 206.189.150.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aeHID2uQDW686mK3dgG7qQAAAZE"]
[Fri Apr 17 13:41:35.364022 2026] [:error] [pid 34273:tid 34297] [client 206.189.150.30:58083] [client 206.189.150.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aeHID2uQDW686mK3dgG7rAAAAZY"]
[Fri Apr 17 13:41:35.557529 2026] [:error] [pid 61523:tid 61562] [client 206.189.150.30:58389] [client 206.189.150.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aeHID8OaH-Pgc7WEf4M2xQAAAdQ"]
[Fri Apr 17 13:41:35.737246 2026] [:error] [pid 9263:tid 9281] [client 206.189.150.30:58720] [client 206.189.150.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aeHIDxP68VyHNvj1e56M6gAAANA"]
[Fri Apr 17 13:41:35.960384 2026] [:error] [pid 9263:tid 9279] [client 206.189.150.30:59047] [client 206.189.150.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aeHIDxP68VyHNvj1e56M7QAAAM4"]
[Fri Apr 17 13:41:36.165578 2026] [:error] [pid 34273:tid 34278] [client 206.189.150.30:59370] [client 206.189.150.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aeHIEGuQDW686mK3dgG7rgAAAYM"]
[Fri Apr 17 13:41:36.527867 2026] [:error] [pid 51878:tid 51893] [client 206.189.150.30:59616] [client 206.189.150.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aeHIEEnQhUtMbw9EsgYRagAAAQ0"]
[Fri Apr 17 16:52:49.590101 2026] [:error] [pid 9153:tid 9240] [client 178.62.204.183:49274] [client 178.62.204.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.204.183, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aeH04eMHGxkTZX3c45fi4gAAAJY"]
[Fri Apr 17 16:52:49.593572 2026] [:error] [pid 9153:tid 9240] [client 178.62.204.183:49274] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Apr 17 21:15:12.685889 2026] [:error] [pid 9152:tid 9197] [client 35.185.3.106:51823] [client 35.185.3.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.185.3.106, incrementing ddos counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aeIyYJJYca8I3TNCwIdkzgAAAEc"]
[Fri Apr 17 21:15:12.689375 2026] [:error] [pid 9152:tid 9197] [client 35.185.3.106:51823] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Apr 17 21:15:15.906384 2026] [:error] [pid 9152:tid 9207] [client 35.185.3.106:51823] [client 35.185.3.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aeIyY5JYca8I3TNCwIdk2gAAAFE"]
[Fri Apr 17 21:15:18.084828 2026] [:error] [pid 9152:tid 9192] [client 35.185.3.106:52595] [client 35.185.3.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aeIyZpJYca8I3TNCwIdk4AAAAEI"]
[Fri Apr 17 21:15:21.148969 2026] [:error] [pid 9152:tid 9212] [client 35.185.3.106:59807] [client 35.185.3.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aeIyaZJYca8I3TNCwIdk5QAAAFY"]
[Fri Apr 17 21:15:23.111833 2026] [:error] [pid 9152:tid 9203] [client 35.185.3.106:50265] [client 35.185.3.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aeIya5JYca8I3TNCwIdk5wAAAE0"]
[Fri Apr 17 21:15:24.897305 2026] [:error] [pid 9263:tid 9271] [client 35.185.3.106:62930] [client 35.185.3.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aeIybBP68VyHNvj1e55FTQAAAMY"]
[Fri Apr 17 21:15:27.660571 2026] [:error] [pid 9263:tid 9272] [client 35.185.3.106:51881] [client 35.185.3.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aeIybxP68VyHNvj1e55FUgAAAMc"]
[Fri Apr 17 21:15:30.493943 2026] [:error] [pid 9263:tid 9282] [client 35.185.3.106:58002] [client 35.185.3.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aeIychP68VyHNvj1e55FYAAAANE"]
[Fri Apr 17 21:16:23.201687 2026] [:error] [pid 9263:tid 9274] [client 34.41.207.20:53003] [client 34.41.207.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.41.207.20, incrementing ddos counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aeIypxP68VyHNvj1e55GRwAAAMk"]
[Fri Apr 17 21:16:23.206023 2026] [:error] [pid 9263:tid 9274] [client 34.41.207.20:53003] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Apr 17 21:16:25.806314 2026] [:error] [pid 9263:tid 9266] [client 34.41.207.20:53003] [client 34.41.207.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aeIyqRP68VyHNvj1e55GXAAAAME"]
[Fri Apr 17 21:16:27.919622 2026] [:error] [pid 9263:tid 9274] [client 34.41.207.20:61370] [client 34.41.207.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aeIyqxP68VyHNvj1e55GbQAAAMk"]
[Fri Apr 17 21:16:29.938496 2026] [:error] [pid 9263:tid 9267] [client 34.41.207.20:61685] [client 34.41.207.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aeIyrRP68VyHNvj1e55GfwAAAMI"]
[Fri Apr 17 21:16:31.356564 2026] [:error] [pid 9153:tid 9230] [client 34.41.207.20:62231] [client 34.41.207.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aeIyr-MHGxkTZX3c45cOmQAAAIw"]
[Fri Apr 17 21:16:32.201009 2026] [:error] [pid 9153:tid 9231] [client 34.41.207.20:49166] [client 34.41.207.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aeIysOMHGxkTZX3c45cOnAAAAI0"]
[Fri Apr 17 21:16:32.921626 2026] [:error] [pid 61523:tid 61566] [client 34.41.207.20:54615] [client 34.41.207.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aeIysMOaH-Pgc7WEf4PXOwAAAdg"]
[Fri Apr 17 21:16:33.761012 2026] [:error] [pid 9152:tid 9204] [client 34.41.207.20:65179] [client 34.41.207.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aeIysZJYca8I3TNCwIdlRAAAAE4"]
[Fri Apr 17 21:46:53.361265 2026] [:error] [pid 51878:tid 51893] [client 20.216.170.187:13723] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Fri Apr 17 21:46:53.612522 2026] [:error] [pid 51878:tid 51901] [client 20.216.170.187:13723] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-xme.php
[Fri Apr 17 21:46:53.855490 2026] [:error] [pid 51878:tid 51887] [client 20.216.170.187:13723] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Fri Apr 17 21:46:54.096294 2026] [:error] [pid 51878:tid 51897] [client 20.216.170.187:13723] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kikikoko.php
[Fri Apr 17 21:46:54.336823 2026] [:error] [pid 51878:tid 51889] [client 20.216.170.187:13723] File does not exist: /usr/local/apache/htdocs/suspended-page/nDHHF.php
[Fri Apr 17 21:46:54.585437 2026] [:error] [pid 51878:tid 51896] [client 20.216.170.187:13723] File does not exist: /usr/local/apache/htdocs/suspended-page/xmff.php
[Fri Apr 17 21:46:54.828007 2026] [:error] [pid 51878:tid 51900] [client 20.216.170.187:13723] File does not exist: /usr/local/apache/htdocs/suspended-page/ktfow.php
[Fri Apr 17 21:46:55.080299 2026] [:error] [pid 51878:tid 51893] [client 20.216.170.187:13723] File does not exist: /usr/local/apache/htdocs/suspended-page/stun.php
[Fri Apr 17 21:46:55.328329 2026] [:error] [pid 51878:tid 51886] [client 20.216.170.187:13723] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Fri Apr 17 21:46:55.572906 2026] [:error] [pid 51878:tid 51880] [client 20.216.170.187:13723] File does not exist: /usr/local/apache/htdocs/suspended-page/mode.php
[Fri Apr 17 21:46:55.808498 2026] [:error] [pid 51878:tid 51901] [client 20.216.170.187:13723] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eetu.php"] [unique_id "aeI5z0nQhUtMbw9EsgauUAAAARU"]
[Fri Apr 17 21:46:56.711558 2026] [:error] [pid 61523:tid 61562] [client 20.216.170.187:36590] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eetu.php"] [unique_id "aeI50MOaH-Pgc7WEf4PiDwAAAdQ"]
[Fri Apr 17 21:46:57.278685 2026] [:error] [pid 9263:tid 9271] [client 20.216.170.187:17854] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eetu.php"] [unique_id "aeI50RP68VyHNvj1e55a0AAAAMY"]
[Fri Apr 17 21:46:57.863621 2026] [:error] [pid 51878:tid 51894] [client 20.216.170.187:19946] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eetu.php"] [unique_id "aeI50UnQhUtMbw9EsgauVwAAAQ4"]
[Fri Apr 17 21:46:58.746362 2026] [:error] [pid 9153:tid 9225] [client 20.216.170.187:12500] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/C1.php"] [unique_id "aeI50uMHGxkTZX3c45cUbAAAAIc"]
[Fri Apr 17 21:46:59.786995 2026] [:error] [pid 51878:tid 51880] [client 20.216.170.187:16126] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/C1.php"] [unique_id "aeI500nQhUtMbw9EsgauYQAAAQA"]
[Fri Apr 17 21:47:00.456177 2026] [:error] [pid 9153:tid 9224] [client 20.216.170.187:25246] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/C1.php"] [unique_id "aeI51OMHGxkTZX3c45cUbgAAAIY"]
[Fri Apr 17 21:47:00.981411 2026] [:error] [pid 61523:tid 61546] [client 20.216.170.187:15864] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/C1.php"] [unique_id "aeI51MOaH-Pgc7WEf4PiIwAAAcQ"]
[Fri Apr 17 21:47:01.593674 2026] [:error] [pid 51878:tid 51903] [client 20.216.170.187:6858] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/b35.php"] [unique_id "aeI51UnQhUtMbw9EsgauawAAARc"]
[Fri Apr 17 21:47:02.181285 2026] [:error] [pid 9263:tid 9289] [client 20.216.170.187:45564] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/b35.php"] [unique_id "aeI51hP68VyHNvj1e55a3AAAANg"]
[Fri Apr 17 21:47:02.759332 2026] [:error] [pid 9152:tid 9212] [client 20.216.170.187:20106] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/b35.php"] [unique_id "aeI51pJYca8I3TNCwIduggAAAFY"]
[Fri Apr 17 21:47:03.541062 2026] [:error] [pid 9263:tid 9289] [client 20.216.170.187:45565] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/b35.php"] [unique_id "aeI51xP68VyHNvj1e55a6QAAANg"]
[Fri Apr 17 21:47:04.177564 2026] [:error] [pid 51878:tid 51890] [client 20.216.170.187:12543] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aeI52EnQhUtMbw9EsgaubwAAAQo"]
[Fri Apr 17 21:47:04.921399 2026] [:error] [pid 51878:tid 51889] [client 20.216.170.187:17825] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aeI52EnQhUtMbw9EsgaudQAAAQk"]
[Fri Apr 17 21:47:05.892516 2026] [:error] [pid 9153:tid 9242] [client 20.216.170.187:46332] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aeI52eMHGxkTZX3c45cUdgAAAJg"]
[Fri Apr 17 21:47:06.813616 2026] [:error] [pid 9151:tid 9164] [client 20.216.170.187:12520] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aeI52shTVuRPkua22vRHKAAAAAM"]
[Fri Apr 17 21:47:07.601053 2026] [:error] [pid 61523:tid 61566] [client 20.216.170.187:17811] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-un.php"] [unique_id "aeI528OaH-Pgc7WEf4PiOgAAAdg"]
[Fri Apr 17 21:47:08.715337 2026] [:error] [pid 61523:tid 61552] [client 20.216.170.187:6481] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-un.php"] [unique_id "aeI53MOaH-Pgc7WEf4PiPgAAAco"]
[Fri Apr 17 21:47:09.484411 2026] [:error] [pid 61523:tid 61545] [client 20.216.170.187:6853] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-un.php"] [unique_id "aeI53cOaH-Pgc7WEf4PiPwAAAcM"]
[Fri Apr 17 21:47:10.468583 2026] [:error] [pid 9152:tid 9203] [client 20.216.170.187:46323] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-un.php"] [unique_id "aeI53pJYca8I3TNCwIduhwAAAE0"]
[Fri Apr 17 21:47:11.195669 2026] [:error] [pid 25010:tid 25013] [client 20.216.170.187:6393] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xroot.php"] [unique_id "aeI534-7kkf42RarqQ2A4QAAAUA"]
[Fri Apr 17 21:47:12.691309 2026] [:error] [pid 9263:tid 9285] [client 20.216.170.187:17835] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xroot.php"] [unique_id "aeI54BP68VyHNvj1e55bBAAAANQ"]
[Fri Apr 17 21:47:13.421705 2026] [:error] [pid 9153:tid 9222] [client 20.216.170.187:46322] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xroot.php"] [unique_id "aeI54eMHGxkTZX3c45cUfAAAAIQ"]
[Fri Apr 17 21:47:14.352722 2026] [:error] [pid 51878:tid 51902] [client 20.216.170.187:46300] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xroot.php"] [unique_id "aeI54knQhUtMbw9EsgauiQAAARY"]
[Fri Apr 17 21:47:15.283540 2026] [:error] [pid 9153:tid 9232] [client 20.216.170.187:45621] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmini.php"] [unique_id "aeI54-MHGxkTZX3c45cUfwAAAI4"]
[Fri Apr 17 21:47:16.092683 2026] [:error] [pid 34273:tid 34275] [client 20.216.170.187:15816] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmini.php"] [unique_id "aeI55GuQDW686mK3dgES_wAAAYA"]
[Fri Apr 17 21:47:17.414981 2026] [:error] [pid 61523:tid 61548] [client 20.216.170.187:47739] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmini.php"] [unique_id "aeI55cOaH-Pgc7WEf4PiWQAAAcY"]
[Fri Apr 17 21:47:18.302098 2026] [:error] [pid 34273:tid 34295] [client 20.216.170.187:39792] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmini.php"] [unique_id "aeI55muQDW686mK3dgETEgAAAZQ"]
[Fri Apr 17 21:47:19.611689 2026] [:error] [pid 9263:tid 9273] [client 20.216.170.187:37758] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index.php"] [unique_id "aeI55xP68VyHNvj1e55bDwAAAMg"]
[Fri Apr 17 21:47:21.224813 2026] [:error] [pid 9263:tid 9282] [client 20.216.170.187:38215] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index.php"] [unique_id "aeI56RP68VyHNvj1e55bFwAAANE"]
[Fri Apr 17 21:47:22.060320 2026] [:error] [pid 9152:tid 9201] [client 20.216.170.187:50429] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index.php"] [unique_id "aeI56pJYca8I3TNCwIdujgAAAEs"]
[Fri Apr 17 21:47:22.785157 2026] [:error] [pid 51878:tid 51880] [client 20.216.170.187:39784] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index.php"] [unique_id "aeI56knQhUtMbw9EsgaulwAAAQA"]
[Fri Apr 17 21:47:23.675329 2026] [:error] [pid 51878:tid 51891] [client 20.216.170.187:47727] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "aeI560nQhUtMbw9EsgaumwAAAQs"]
[Fri Apr 17 21:47:24.658802 2026] [:error] [pid 34273:tid 34276] [client 20.216.170.187:6352] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "aeI57GuQDW686mK3dgETLAAAAYE"]
[Fri Apr 17 21:47:25.352719 2026] [:error] [pid 9151:tid 9183] [client 20.216.170.187:18899] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "aeI57chTVuRPkua22vRHPQAAABY"]
[Fri Apr 17 21:47:26.496520 2026] [:error] [pid 34273:tid 34284] [client 20.216.170.187:12449] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "aeI57muQDW686mK3dgETMgAAAYk"]
[Fri Apr 17 21:47:27.266700 2026] [:error] [pid 34273:tid 34288] [client 20.216.170.187:45064] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eterezrezt.php"] [unique_id "aeI572uQDW686mK3dgETOAAAAY0"]
[Fri Apr 17 21:47:28.135334 2026] [:error] [pid 9263:tid 9277] [client 20.216.170.187:16330] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eterezrezt.php"] [unique_id "aeI58BP68VyHNvj1e55bJwAAAMw"]
[Fri Apr 17 21:47:28.898562 2026] [:error] [pid 34273:tid 34297] [client 20.216.170.187:16353] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eterezrezt.php"] [unique_id "aeI58GuQDW686mK3dgETPAAAAZY"]
[Fri Apr 17 21:47:29.592649 2026] [:error] [pid 34273:tid 34280] [client 20.216.170.187:38229] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eterezrezt.php"] [unique_id "aeI58WuQDW686mK3dgETPgAAAYU"]
[Fri Apr 17 21:47:30.600743 2026] [:error] [pid 51878:tid 51891] [client 20.216.170.187:12529] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeI58knQhUtMbw9EsgaupQAAAQs"]
[Fri Apr 17 21:47:31.745962 2026] [:error] [pid 9151:tid 9177] [client 20.216.170.187:12440] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeI588hTVuRPkua22vRHTgAAABA"]
[Fri Apr 17 21:47:33.264031 2026] [:error] [pid 9263:tid 9283] [client 20.216.170.187:47687] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeI59RP68VyHNvj1e55bQgAAANI"]
[Fri Apr 17 21:47:34.316385 2026] [:error] [pid 61523:tid 61554] [client 20.216.170.187:14837] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeI59sOaH-Pgc7WEf4PiZgAAAcw"]
[Fri Apr 17 21:47:34.896477 2026] [:error] [pid 9153:tid 9228] [client 20.216.170.187:37248] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeI59uMHGxkTZX3c45cUkQAAAIo"]
[Fri Apr 17 21:47:36.018068 2026] [:error] [pid 34273:tid 34290] [client 20.216.170.187:43085] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeI5-GuQDW686mK3dgETTAAAAY8"]
[Fri Apr 17 21:47:36.582168 2026] [:error] [pid 61523:tid 61562] [client 20.216.170.187:43126] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeI5-MOaH-Pgc7WEf4PicAAAAdQ"]
[Fri Apr 17 21:47:37.263062 2026] [:error] [pid 9152:tid 9201] [client 20.216.170.187:47682] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeI5-ZJYca8I3TNCwIdungAAAEs"]
[Fri Apr 17 21:47:38.130815 2026] [:error] [pid 51878:tid 51890] [client 20.216.170.187:14820] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aeI5-knQhUtMbw9EsgauwAAAAQo"]
[Fri Apr 17 21:47:38.771122 2026] [:error] [pid 51878:tid 51903] [client 20.216.170.187:6392] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aeI5-knQhUtMbw9EsgauxAAAARc"]
[Fri Apr 17 21:47:39.855762 2026] [:error] [pid 51878:tid 51901] [client 20.216.170.187:43119] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aeI5-0nQhUtMbw9EsgauywAAARU"]
[Fri Apr 17 21:47:41.119571 2026] [:error] [pid 61523:tid 61541] [client 20.216.170.187:6350] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aeI5_cOaH-Pgc7WEf4PieQAAAcA"]
[Fri Apr 17 21:47:42.699584 2026] [:error] [pid 51878:tid 51892] [client 20.216.170.187:13655] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/huya.php"] [unique_id "aeI5_knQhUtMbw9Esgau2AAAAQw"]
[Fri Apr 17 21:47:44.021297 2026] [:error] [pid 9152:tid 9196] [client 20.216.170.187:24725] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/huya.php"] [unique_id "aeI6AJJYca8I3TNCwIdurwAAAEY"]
[Fri Apr 17 21:47:45.024355 2026] [:error] [pid 34273:tid 34285] [client 20.216.170.187:14792] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/huya.php"] [unique_id "aeI6AWuQDW686mK3dgETWwAAAYo"]
[Fri Apr 17 21:47:45.961049 2026] [:error] [pid 9152:tid 9197] [client 20.216.170.187:43109] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/huya.php"] [unique_id "aeI6AZJYca8I3TNCwIdusgAAAEc"]
[Fri Apr 17 21:47:46.837424 2026] [:error] [pid 9153:tid 9232] [client 20.216.170.187:37261] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "aeI6AuMHGxkTZX3c45cUmgAAAI4"]
[Fri Apr 17 21:47:47.810784 2026] [:error] [pid 51878:tid 51888] [client 20.216.170.187:13883] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "aeI6A0nQhUtMbw9Esgau6gAAAQg"]
[Fri Apr 17 21:47:48.610179 2026] [:error] [pid 61523:tid 61541] [client 20.216.170.187:10289] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "aeI6BMOaH-Pgc7WEf4PihgAAAcA"]
[Fri Apr 17 21:47:50.850448 2026] [:error] [pid 61523:tid 61559] [client 20.216.170.187:11294] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "aeI6BsOaH-Pgc7WEf4PijwAAAdE"]
[Fri Apr 17 21:47:52.069230 2026] [:error] [pid 9153:tid 9230] [client 20.216.170.187:32912] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeI6COMHGxkTZX3c45cUnAAAAIw"]
[Fri Apr 17 21:47:53.773065 2026] [:error] [pid 34273:tid 34277] [client 20.216.170.187:16858] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeI6CWuQDW686mK3dgETYwAAAYI"]
[Fri Apr 17 21:47:55.948145 2026] [:error] [pid 61523:tid 61541] [client 20.216.170.187:32916] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri Apr 17 21:47:56.192343 2026] [:error] [pid 61523:tid 61562] [client 20.216.170.187:32916] File does not exist: /usr/local/apache/htdocs/suspended-page/ewp.php
[Fri Apr 17 21:47:56.430470 2026] [:error] [pid 61523:tid 61563] [client 20.216.170.187:32916] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Fri Apr 17 21:47:56.829507 2026] [:error] [pid 61523:tid 61549] [client 20.216.170.187:32916] File does not exist: /usr/local/apache/htdocs/suspended-page/nwflm.php
[Fri Apr 17 21:47:57.395597 2026] [:error] [pid 61523:tid 61564] [client 20.216.170.187:32916] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Fri Apr 17 21:47:57.642853 2026] [:error] [pid 61523:tid 61560] [client 20.216.170.187:32916] File does not exist: /usr/local/apache/htdocs/suspended-page/xff.php
[Fri Apr 17 21:47:57.881771 2026] [:error] [pid 61523:tid 61545] [client 20.216.170.187:32916] File does not exist: /usr/local/apache/htdocs/suspended-page/lupo.php
[Fri Apr 17 21:47:58.118854 2026] [:error] [pid 61523:tid 61551] [client 20.216.170.187:32916] File does not exist: /usr/local/apache/htdocs/suspended-page/awa.php
[Fri Apr 17 21:47:58.372412 2026] [:error] [pid 61523:tid 61563] [client 20.216.170.187:32916] File does not exist: /usr/local/apache/htdocs/suspended-page/popo.php
[Fri Apr 17 21:47:58.619323 2026] [:error] [pid 61523:tid 61555] [client 20.216.170.187:32916] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php
[Fri Apr 17 21:47:58.886307 2026] [:error] [pid 61523:tid 61541] [client 20.216.170.187:32916] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Fri Apr 17 21:47:59.652933 2026] [:error] [pid 61523:tid 61541] [client 20.216.170.187:32916] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aeI6D8OaH-Pgc7WEf4PixQAAAcA"]
[Fri Apr 17 21:48:01.189472 2026] [:error] [pid 34273:tid 34292] [client 20.216.170.187:29653] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aeI6EWuQDW686mK3dgETaAAAAZE"]
[Fri Apr 17 21:48:02.743616 2026] [:error] [pid 61523:tid 61550] [client 20.216.170.187:23718] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aeI6EsOaH-Pgc7WEf4PiygAAAcg"]
[Fri Apr 17 21:48:05.040029 2026] [:error] [pid 61523:tid 61553] [client 20.216.170.187:32898] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aeI6FcOaH-Pgc7WEf4PizgAAAcs"]
[Fri Apr 17 21:48:06.594484 2026] [:error] [pid 34273:tid 34284] [client 20.216.170.187:13862] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeI6FmuQDW686mK3dgETgQAAAYk"]
[Fri Apr 17 21:48:07.940919 2026] [:error] [pid 61523:tid 61550] [client 20.216.170.187:16564] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeI6F8OaH-Pgc7WEf4Pi1gAAAcg"]
[Fri Apr 17 21:48:09.296690 2026] [:error] [pid 9263:tid 9270] [client 20.216.170.187:7101] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeI6GRP68VyHNvj1e55bowAAAMU"]
[Fri Apr 17 21:48:10.091755 2026] [:error] [pid 34273:tid 34299] [client 20.216.170.187:6833] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeI6GmuQDW686mK3dgETiAAAAZg"]
[Fri Apr 17 21:48:11.111564 2026] [:error] [pid 51878:tid 51884] [client 20.216.170.187:39845] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeI6G0nQhUtMbw9EsgavIAAAAQQ"]
[Fri Apr 17 21:48:12.552828 2026] [:error] [pid 9151:tid 9171] [client 20.216.170.187:19117] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeI6HMhTVuRPkua22vRHaQAAAAo"]
[Fri Apr 17 21:48:13.514909 2026] [:error] [pid 9152:tid 9190] [client 20.216.170.187:19116] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeI6HZJYca8I3TNCwIduzgAAAEA"]
[Fri Apr 17 21:48:14.047669 2026] [:error] [pid 9152:tid 9192] [client 20.216.170.187:39127] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeI6HpJYca8I3TNCwIdu0wAAAEI"]
[Fri Apr 17 21:48:14.706362 2026] [:error] [pid 51878:tid 51902] [client 20.216.170.187:39188] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeI6HknQhUtMbw9EsgavKAAAARY"]
[Fri Apr 17 21:48:15.412878 2026] [:error] [pid 9263:tid 9277] [client 20.216.170.187:19101] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeI6HxP68VyHNvj1e55brQAAAMw"]
[Fri Apr 17 21:48:16.099785 2026] [:error] [pid 61523:tid 61547] [client 20.216.170.187:16522] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeI6IMOaH-Pgc7WEf4Pi4QAAAcU"]
[Fri Apr 17 21:48:17.142552 2026] [:error] [pid 34273:tid 34286] [client 20.216.170.187:13335] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeI6IWuQDW686mK3dgETowAAAYs"]
[Fri Apr 17 21:48:18.116359 2026] [:error] [pid 51878:tid 51903] [client 20.216.170.187:13329] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeI6IknQhUtMbw9EsgavLQAAARc"]
[Fri Apr 17 21:48:19.508889 2026] [:error] [pid 51878:tid 51902] [client 20.216.170.187:16523] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeI6I0nQhUtMbw9EsgavNAAAARY"]
[Fri Apr 17 21:48:22.003778 2026] [:error] [pid 51878:tid 51888] [client 20.216.170.187:39851] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeI6JknQhUtMbw9EsgavOQAAAQg"]
[Fri Apr 17 21:48:23.153477 2026] [:error] [pid 9151:tid 9174] [client 20.216.170.187:37761] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeI6J8hTVuRPkua22vRHcwAAAA0"]
[Fri Apr 17 21:48:23.756015 2026] [:error] [pid 9263:tid 9270] [client 20.216.170.187:12779] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aeI6JxP68VyHNvj1e55bvAAAAMU"]
[Fri Apr 17 21:48:24.601733 2026] [:error] [pid 9263:tid 9276] [client 20.216.170.187:6607] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aeI6KBP68VyHNvj1e55bxAAAAMs"]
[Fri Apr 17 21:48:25.427216 2026] [:error] [pid 9151:tid 9173] [client 20.216.170.187:33515] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aeI6KchTVuRPkua22vRHdQAAAAw"]
[Fri Apr 17 21:48:26.133729 2026] [:error] [pid 9152:tid 9208] [client 20.216.170.187:42482] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aeI6KpJYca8I3TNCwIdu6gAAAFI"]
[Fri Apr 17 21:48:26.795502 2026] [:error] [pid 51878:tid 51882] [client 20.216.170.187:12792] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeI6KknQhUtMbw9EsgavQwAAAQI"]
[Fri Apr 17 21:48:27.575501 2026] [:error] [pid 9263:tid 9275] [client 20.216.170.187:20176] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeI6KxP68VyHNvj1e55b0gAAAMo"]
[Fri Apr 17 21:48:28.136582 2026] [:error] [pid 51878:tid 51896] [client 20.216.170.187:39871] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeI6LEnQhUtMbw9EsgavSgAAARA"]
[Fri Apr 17 21:48:28.790100 2026] [:error] [pid 34273:tid 34276] [client 20.216.170.187:33535] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeI6LGuQDW686mK3dgETxAAAAYE"]
[Fri Apr 17 21:48:29.729916 2026] [:error] [pid 51878:tid 51883] [client 20.216.170.187:33573] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeI6LUnQhUtMbw9EsgavTAAAAQM"]
[Fri Apr 17 21:48:30.411142 2026] [:error] [pid 51878:tid 51903] [client 20.216.170.187:39840] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeI6LknQhUtMbw9EsgavUgAAARc"]
[Fri Apr 17 21:48:31.228623 2026] [:error] [pid 9152:tid 9200] [client 20.216.170.187:13342] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeI6L5JYca8I3TNCwIdu9gAAAEo"]
[Fri Apr 17 21:48:32.049316 2026] [:error] [pid 9153:tid 9222] [client 20.216.170.187:39829] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeI6MOMHGxkTZX3c45cU4AAAAIQ"]
[Fri Apr 17 21:48:32.942932 2026] [:error] [pid 9263:tid 9267] [client 20.216.170.187:6615] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aeI6MBP68VyHNvj1e55b4gAAAMI"]
[Fri Apr 17 21:48:34.139857 2026] [:error] [pid 9152:tid 9190] [client 20.216.170.187:33583] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aeI6MpJYca8I3TNCwIdu_QAAAEA"]
[Fri Apr 17 21:48:35.370071 2026] [:error] [pid 9153:tid 9232] [client 20.216.170.187:42551] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aeI6M-MHGxkTZX3c45cU8gAAAI4"]
[Fri Apr 17 21:48:36.237990 2026] [:error] [pid 61523:tid 61546] [client 20.216.170.187:33593] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aeI6NMOaH-Pgc7WEf4PjBQAAAcQ"]
[Fri Apr 17 21:48:37.076298 2026] [:error] [pid 9263:tid 9288] [client 20.216.170.187:14898] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeI6NRP68VyHNvj1e55b6QAAANc"]
[Fri Apr 17 21:48:38.012896 2026] [:error] [pid 51878:tid 51893] [client 20.216.170.187:14706] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeI6NknQhUtMbw9EsgavWQAAAQ0"]
[Fri Apr 17 21:48:39.481526 2026] [:error] [pid 51878:tid 51884] [client 20.216.170.187:42451] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeI6N0nQhUtMbw9EsgavYwAAAQQ"]
[Fri Apr 17 21:48:40.219402 2026] [:error] [pid 9153:tid 9221] [client 20.216.170.187:25178] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeI6OOMHGxkTZX3c45cU-QAAAIM"]
[Fri Apr 17 21:48:40.951606 2026] [:error] [pid 51878:tid 51888] [client 20.216.170.187:14698] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aeI6OEnQhUtMbw9EsgavbQAAAQg"]
[Fri Apr 17 21:48:41.702057 2026] [:error] [pid 51878:tid 51887] [client 20.216.170.187:42435] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aeI6OUnQhUtMbw9EsgavcgAAAQc"]
[Fri Apr 17 21:48:42.459099 2026] [:error] [pid 9153:tid 9227] [client 20.216.170.187:28152] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aeI6OuMHGxkTZX3c45cU_AAAAIk"]
[Fri Apr 17 21:48:43.483301 2026] [:error] [pid 25010:tid 25021] [client 20.216.170.187:22703] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aeI6O4-7kkf42RarqQ2BMgAAAUg"]
[Fri Apr 17 21:48:45.107211 2026] [:error] [pid 9153:tid 9225] [client 20.216.170.187:17321] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aeI6PeMHGxkTZX3c45cVBwAAAIc"]
[Fri Apr 17 21:48:46.146517 2026] [:error] [pid 9263:tid 9285] [client 20.216.170.187:17282] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aeI6PhP68VyHNvj1e55b7wAAANQ"]
[Fri Apr 17 21:48:47.215198 2026] [:error] [pid 9151:tid 9178] [client 20.216.170.187:6205] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aeI6P8hTVuRPkua22vRHngAAABE"]
[Fri Apr 17 21:48:48.565714 2026] [:error] [pid 25010:tid 25020] [client 20.216.170.187:25206] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aeI6QI-7kkf42RarqQ2BMwAAAUc"]
[Fri Apr 17 21:48:50.297433 2026] [:error] [pid 9151:tid 9171] [client 20.216.170.187:25184] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aeI6QshTVuRPkua22vRHpAAAAAo"]
[Fri Apr 17 21:48:51.674360 2026] [:error] [pid 61523:tid 61559] [client 20.216.170.187:19390] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aeI6Q8OaH-Pgc7WEf4PjFQAAAdE"]
[Fri Apr 17 21:48:52.378797 2026] [:error] [pid 9263:tid 9283] [client 20.216.170.187:19329] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aeI6RBP68VyHNvj1e55b-gAAANI"]
[Fri Apr 17 21:48:53.970297 2026] [:error] [pid 25010:tid 25017] [client 20.216.170.187:12289] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aeI6RY-7kkf42RarqQ2BOwAAAUQ"]
[Fri Apr 17 21:48:56.350536 2026] [:error] [pid 51878:tid 51890] [client 20.216.170.187:17336] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aeI6SEnQhUtMbw9EsgavfgAAAQo"]
[Fri Apr 17 21:48:57.349667 2026] [:error] [pid 9263:tid 9280] [client 20.216.170.187:23185] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aeI6SRP68VyHNvj1e55cBQAAAM8"]
[Fri Apr 17 21:48:57.951096 2026] [:error] [pid 25010:tid 25021] [client 20.216.170.187:6151] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aeI6SY-7kkf42RarqQ2BQQAAAUg"]
[Fri Apr 17 21:48:58.519414 2026] [:error] [pid 61523:tid 61558] [client 20.216.170.187:6162] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Fri Apr 17 21:48:58.757200 2026] [:error] [pid 61523:tid 61557] [client 20.216.170.187:6162] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php
[Fri Apr 17 21:48:58.994653 2026] [:error] [pid 61523:tid 61563] [client 20.216.170.187:6162] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Fri Apr 17 21:48:59.344293 2026] [:error] [pid 61523:tid 61555] [client 20.216.170.187:6162] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Fri Apr 17 21:48:59.831987 2026] [:error] [pid 61523:tid 61556] [client 20.216.170.187:6162] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_S.php
[Fri Apr 17 21:49:00.069842 2026] [:error] [pid 61523:tid 61559] [client 20.216.170.187:6162] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Fri Apr 17 21:49:00.323155 2026] [:error] [pid 61523:tid 61565] [client 20.216.170.187:6162] File does not exist: /usr/local/apache/htdocs/suspended-page/111.php
[Fri Apr 17 21:49:00.587514 2026] [:error] [pid 61523:tid 61549] [client 20.216.170.187:6162] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Fri Apr 17 21:49:00.826962 2026] [:error] [pid 61523:tid 61550] [client 20.216.170.187:6162] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Fri Apr 17 21:49:01.064649 2026] [:error] [pid 61523:tid 61545] [client 20.216.170.187:6162] File does not exist: /usr/local/apache/htdocs/suspended-page/byrgo.php
[Fri Apr 17 21:49:01.299480 2026] [:error] [pid 61523:tid 61552] [client 20.216.170.187:6162] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "aeI6TcOaH-Pgc7WEf4PjMgAAAco"]
[Fri Apr 17 21:49:01.883492 2026] [:error] [pid 51878:tid 51881] [client 20.216.170.187:6197] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "aeI6TUnQhUtMbw9EsgavlAAAAQE"]
[Fri Apr 17 21:49:02.508088 2026] [:error] [pid 9263:tid 9273] [client 20.216.170.187:25182] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "aeI6ThP68VyHNvj1e55cFgAAAMg"]
[Fri Apr 17 21:49:03.375905 2026] [:error] [pid 51878:tid 51893] [client 20.216.170.187:28680] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "aeI6T0nQhUtMbw9EsgavmQAAAQ0"]
[Fri Apr 17 21:49:04.106691 2026] [:error] [pid 9153:tid 9237] [client 20.216.170.187:41101] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "aeI6UOMHGxkTZX3c45cVIwAAAJM"]
[Fri Apr 17 21:49:04.683116 2026] [:error] [pid 34273:tid 34275] [client 20.216.170.187:15010] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "aeI6UGuQDW686mK3dgET9gAAAYA"]
[Fri Apr 17 21:49:05.340153 2026] [:error] [pid 9153:tid 9220] [client 20.216.170.187:12389] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "aeI6UeMHGxkTZX3c45cVLAAAAII"]
[Fri Apr 17 21:49:06.279952 2026] [:error] [pid 61523:tid 61564] [client 20.216.170.187:12336] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "aeI6UsOaH-Pgc7WEf4PjQwAAAdY"]
[Fri Apr 17 21:49:07.554376 2026] [:error] [pid 9151:tid 9185] [client 20.216.170.187:12329] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aeI6U8hTVuRPkua22vRHtAAAABg"]
[Fri Apr 17 21:49:08.215168 2026] [:error] [pid 9151:tid 9167] [client 20.216.170.187:41099] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aeI6VMhTVuRPkua22vRHugAAAAY"]
[Fri Apr 17 21:49:08.831846 2026] [:error] [pid 9153:tid 9230] [client 20.216.170.187:14976] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aeI6VOMHGxkTZX3c45cVMwAAAIw"]
[Fri Apr 17 21:49:09.684744 2026] [:error] [pid 34273:tid 34296] [client 20.216.170.187:15497] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aeI6VWuQDW686mK3dgET_QAAAZU"]
[Fri Apr 17 21:49:10.547545 2026] [:error] [pid 51878:tid 51884] [client 20.216.170.187:15539] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aeI6VknQhUtMbw9EsgavpwAAAQQ"]
[Fri Apr 17 21:49:11.533082 2026] [:error] [pid 51878:tid 51890] [client 20.216.170.187:15518] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aeI6V0nQhUtMbw9EsgavrwAAAQo"]
[Fri Apr 17 21:49:12.574574 2026] [:error] [pid 9152:tid 9209] [client 20.216.170.187:12381] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aeI6WJJYca8I3TNCwIdvOgAAAFM"]
[Fri Apr 17 21:49:13.146271 2026] [:error] [pid 9263:tid 9269] [client 20.216.170.187:13930] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aeI6WRP68VyHNvj1e55cKgAAAMQ"]
[Fri Apr 17 21:49:13.736425 2026] [:error] [pid 9263:tid 9286] [client 20.216.170.187:19352] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aeI6WRP68VyHNvj1e55cLwAAANU"]
[Fri Apr 17 21:49:14.938598 2026] [:error] [pid 61523:tid 61541] [client 20.216.170.187:13935] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aeI6WsOaH-Pgc7WEf4PjVgAAAcA"]
[Fri Apr 17 21:49:15.650752 2026] [:error] [pid 25010:tid 25029] [client 20.216.170.187:19142] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aeI6W4-7kkf42RarqQ2BSAAAAVA"]
[Fri Apr 17 21:49:17.074399 2026] [:error] [pid 9152:tid 9192] [client 20.216.170.187:7162] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aeI6XZJYca8I3TNCwIdvSAAAAEI"]
[Fri Apr 17 21:49:17.761854 2026] [:error] [pid 9263:tid 9266] [client 20.216.170.187:28684] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeI6XRP68VyHNvj1e55cPwAAAME"]
[Fri Apr 17 21:49:18.406647 2026] [:error] [pid 9263:tid 9288] [client 20.216.170.187:35369] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeI6XhP68VyHNvj1e55cQgAAANc"]
[Fri Apr 17 21:49:19.404564 2026] [:error] [pid 9263:tid 9275] [client 20.216.170.187:12341] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeI6XxP68VyHNvj1e55cSAAAAMo"]
[Fri Apr 17 21:49:20.248824 2026] [:error] [pid 51878:tid 51893] [client 20.216.170.187:14708] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeI6YEnQhUtMbw9EsgavwAAAAQ0"]
[Fri Apr 17 21:49:20.902983 2026] [:error] [pid 34273:tid 34297] [client 20.216.170.187:28718] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aeI6YGuQDW686mK3dgEUEgAAAZY"]
[Fri Apr 17 21:49:21.718296 2026] [:error] [pid 34273:tid 34299] [client 20.216.170.187:13942] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aeI6YWuQDW686mK3dgEUFQAAAZg"]
[Fri Apr 17 21:49:22.722368 2026] [:error] [pid 9263:tid 9277] [client 20.216.170.187:19174] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aeI6YhP68VyHNvj1e55cUwAAAMw"]
[Fri Apr 17 21:49:23.567148 2026] [:error] [pid 9263:tid 9283] [client 20.216.170.187:17883] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aeI6YxP68VyHNvj1e55cWAAAANI"]
[Fri Apr 17 21:49:24.880988 2026] [:error] [pid 9263:tid 9282] [client 20.216.170.187:7128] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aeI6ZBP68VyHNvj1e55caQAAANE"]
[Fri Apr 17 21:49:25.996458 2026] [:error] [pid 9263:tid 9268] [client 20.216.170.187:13760] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aeI6ZRP68VyHNvj1e55cegAAAMM"]
[Fri Apr 17 21:49:27.489028 2026] [:error] [pid 51878:tid 51904] [client 20.216.170.187:43823] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aeI6Z0nQhUtMbw9EsgavwgAAARg"]
[Fri Apr 17 21:49:28.413720 2026] [:error] [pid 25010:tid 25016] [client 20.216.170.187:43780] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aeI6aI-7kkf42RarqQ2BUwAAAUM"]
[Fri Apr 17 21:49:29.379037 2026] [:error] [pid 25010:tid 25025] [client 20.216.170.187:15546] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aeI6aY-7kkf42RarqQ2BVQAAAUw"]
[Fri Apr 17 21:49:30.323797 2026] [:error] [pid 51878:tid 51889] [client 20.216.170.187:17861] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aeI6aknQhUtMbw9EsgavxAAAAQk"]
[Fri Apr 17 21:49:31.171369 2026] [:error] [pid 9152:tid 9194] [client 20.216.170.187:11346] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aeI6a5JYca8I3TNCwIdvYgAAAEQ"]
[Fri Apr 17 21:49:31.980153 2026] [:error] [pid 34273:tid 34276] [client 20.216.170.187:7163] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aeI6a2uQDW686mK3dgEUKgAAAYE"]
[Fri Apr 17 21:49:32.680859 2026] [:error] [pid 9152:tid 9208] [client 20.216.170.187:19638] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeI6bJJYca8I3TNCwIdvZAAAAFI"]
[Fri Apr 17 21:49:33.329507 2026] [:error] [pid 51878:tid 51881] [client 20.216.170.187:13909] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeI6bUnQhUtMbw9EsgavzAAAAQE"]
[Fri Apr 17 21:49:34.387955 2026] [:error] [pid 9152:tid 9198] [client 20.216.170.187:14775] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeI6bpJYca8I3TNCwIdvcAAAAEg"]
[Fri Apr 17 21:49:35.089369 2026] [:error] [pid 9263:tid 9278] [client 20.216.170.187:14741] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeI6bxP68VyHNvj1e55cnwAAAM0"]
[Fri Apr 17 21:49:35.962473 2026] [:error] [pid 51878:tid 51893] [client 20.216.170.187:19647] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeI6b0nQhUtMbw9Esgav0wAAAQ0"]
[Fri Apr 17 21:49:37.011044 2026] [:error] [pid 9153:tid 9224] [client 20.216.170.187:13449] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeI6ceMHGxkTZX3c45cVUAAAAIY"]
[Fri Apr 17 21:49:37.747104 2026] [:error] [pid 9263:tid 9285] [client 20.216.170.187:6421] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeI6cRP68VyHNvj1e55crAAAANQ"]
[Fri Apr 17 21:49:38.953112 2026] [:error] [pid 61523:tid 61559] [client 20.216.170.187:10547] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeI6csOaH-Pgc7WEf4PjZAAAAdE"]
[Fri Apr 17 21:49:39.818722 2026] [:error] [pid 61523:tid 61565] [client 20.216.170.187:34746] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aeI6c8OaH-Pgc7WEf4PjZQAAAdc"]
[Fri Apr 17 21:49:40.580535 2026] [:error] [pid 51878:tid 51894] [client 20.216.170.187:19595] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aeI6dEnQhUtMbw9Esgav2wAAAQ4"]
[Fri Apr 17 21:49:41.734078 2026] [:error] [pid 9263:tid 9272] [client 20.216.170.187:27671] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aeI6dRP68VyHNvj1e55cwwAAAMc"]
[Fri Apr 17 21:49:42.657418 2026] [:error] [pid 9263:tid 9274] [client 20.216.170.187:34667] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aeI6dhP68VyHNvj1e55cyQAAAMk"]
[Fri Apr 17 21:49:43.610552 2026] [:error] [pid 51878:tid 51889] [client 20.216.170.187:6672] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aeI6d0nQhUtMbw9Esgav4AAAAQk"]
[Fri Apr 17 21:49:44.289091 2026] [:error] [pid 9151:tid 9181] [client 20.216.170.187:14353] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aeI6eMhTVuRPkua22vRHzAAAABQ"]
[Fri Apr 17 21:49:45.794281 2026] [:error] [pid 51878:tid 51896] [client 20.216.170.187:26287] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aeI6eUnQhUtMbw9Esgav4gAAARA"]
[Fri Apr 17 21:49:46.449125 2026] [:error] [pid 61523:tid 61558] [client 20.216.170.187:6434] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aeI6esOaH-Pgc7WEf4PjagAAAdA"]
[Fri Apr 17 21:49:47.916169 2026] [:error] [pid 61523:tid 61557] [client 20.216.170.187:26286] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aeI6e8OaH-Pgc7WEf4PjbAAAAc8"]
[Fri Apr 17 21:49:48.829573 2026] [:error] [pid 61523:tid 61560] [client 20.216.170.187:37220] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aeI6fMOaH-Pgc7WEf4PjcAAAAdI"]
[Fri Apr 17 21:49:49.920548 2026] [:error] [pid 61523:tid 61544] [client 20.216.170.187:34650] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aeI6fcOaH-Pgc7WEf4PjcgAAAcI"]
[Fri Apr 17 21:49:50.622854 2026] [:error] [pid 9153:tid 9241] [client 20.216.170.187:38286] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aeI6fuMHGxkTZX3c45cVZAAAAJc"]
[Fri Apr 17 21:49:51.254809 2026] [:error] [pid 61523:tid 61550] [client 20.216.170.187:24650] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aeI6f8OaH-Pgc7WEf4PjeQAAAcg"]
[Fri Apr 17 21:49:51.862973 2026] [:error] [pid 51878:tid 51896] [client 20.216.170.187:37201] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aeI6f0nQhUtMbw9Esgav8QAAARA"]
[Fri Apr 17 21:49:53.003764 2026] [:error] [pid 9153:tid 9242] [client 20.216.170.187:26271] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aeI6geMHGxkTZX3c45cVagAAAJg"]
[Fri Apr 17 21:49:53.730407 2026] [:error] [pid 51878:tid 51901] [client 20.216.170.187:11396] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aeI6gUnQhUtMbw9Esgav9wAAARU"]
[Fri Apr 17 21:49:54.495957 2026] [:error] [pid 9263:tid 9271] [client 20.216.170.187:18643] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeI6ghP68VyHNvj1e55c8QAAAMY"]
[Fri Apr 17 21:49:55.578477 2026] [:error] [pid 9152:tid 9195] [client 20.216.170.187:24237] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeI6g5JYca8I3TNCwIdvqQAAAEU"]
[Fri Apr 17 21:49:56.323429 2026] [:error] [pid 9152:tid 9212] [client 20.216.170.187:6695] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeI6hJJYca8I3TNCwIdvrgAAAFY"]
[Fri Apr 17 21:49:57.034122 2026] [:error] [pid 9152:tid 9202] [client 20.216.170.187:11498] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeI6hZJYca8I3TNCwIdvsgAAAEw"]
[Fri Apr 17 21:49:57.797421 2026] [:error] [pid 51878:tid 51900] [client 20.216.170.187:26267] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aeI6hUnQhUtMbw9EsgawDgAAARQ"]
[Fri Apr 17 21:49:58.628858 2026] [:error] [pid 9153:tid 9225] [client 20.216.170.187:10414] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aeI6huMHGxkTZX3c45cVbwAAAIc"]
[Fri Apr 17 21:49:59.615448 2026] [:error] [pid 34273:tid 34289] [client 20.216.170.187:14340] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aeI6h2uQDW686mK3dgEUSgAAAY4"]
[Fri Apr 17 21:50:00.257965 2026] [:error] [pid 9153:tid 9226] [client 20.216.170.187:38279] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aeI6iOMHGxkTZX3c45cVdQAAAIg"]
[Fri Apr 17 21:50:01.000833 2026] [:error] [pid 34273:tid 34276] [client 20.216.170.187:6689] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeI6iGuQDW686mK3dgEUUAAAAYE"]
[Fri Apr 17 21:50:02.146142 2026] [:error] [pid 9263:tid 9273] [client 20.216.170.187:38624] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Fri Apr 17 21:50:02.384047 2026] [:error] [pid 9263:tid 9272] [client 20.216.170.187:38624] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Fri Apr 17 21:50:02.635052 2026] [:error] [pid 9263:tid 9285] [client 20.216.170.187:38624] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Fri Apr 17 21:50:02.887622 2026] [:error] [pid 9263:tid 9275] [client 20.216.170.187:38624] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Fri Apr 17 21:50:03.207101 2026] [:error] [pid 9263:tid 9276] [client 20.216.170.187:38624] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Apr 17 21:50:03.444968 2026] [:error] [pid 9263:tid 9268] [client 20.216.170.187:38624] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Fri Apr 17 21:50:03.911175 2026] [:error] [pid 9263:tid 9271] [client 20.216.170.187:38624] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri Apr 17 21:50:04.148090 2026] [:error] [pid 9263:tid 9265] [client 20.216.170.187:38624] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Fri Apr 17 21:50:04.678624 2026] [:error] [pid 9263:tid 9278] [client 20.216.170.187:38624] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Fri Apr 17 21:50:04.912838 2026] [:error] [pid 9263:tid 9286] [client 20.216.170.187:38624] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "aeI6jBP68VyHNvj1e55dBgAAANU"]
[Fri Apr 17 21:50:05.779065 2026] [:error] [pid 34273:tid 34287] [client 20.216.170.187:38611] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "aeI6jWuQDW686mK3dgEUWwAAAYw"]
[Fri Apr 17 21:50:07.291100 2026] [:error] [pid 9263:tid 9282] [client 20.216.170.187:6278] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "aeI6jxP68VyHNvj1e55dCwAAANE"]
[Fri Apr 17 21:50:08.206596 2026] [:error] [pid 9263:tid 9267] [client 20.216.170.187:6327] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "aeI6kBP68VyHNvj1e55dEAAAAMI"]
[Fri Apr 17 21:50:10.069850 2026] [:error] [pid 9151:tid 9180] [client 20.216.170.187:26737] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "aeI6kshTVuRPkua22vRH4QAAABM"]
[Fri Apr 17 21:50:10.950065 2026] [:error] [pid 9263:tid 9284] [client 20.216.170.187:11460] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "aeI6khP68VyHNvj1e55dHAAAANM"]
[Fri Apr 17 21:50:12.024888 2026] [:error] [pid 9263:tid 9285] [client 20.216.170.187:18853] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "aeI6lBP68VyHNvj1e55dJQAAANQ"]
[Fri Apr 17 21:50:13.670571 2026] [:error] [pid 9263:tid 9268] [client 20.216.170.187:29215] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "aeI6lRP68VyHNvj1e55dKwAAAMM"]
[Fri Apr 17 21:50:14.628189 2026] [:error] [pid 9152:tid 9192] [client 20.216.170.187:17143] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "aeI6lpJYca8I3TNCwIdvvQAAAEI"]
[Fri Apr 17 21:50:15.235860 2026] [:error] [pid 25010:tid 25022] [client 20.216.170.187:26691] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "aeI6l4-7kkf42RarqQ2BhwAAAUk"]
[Fri Apr 17 21:50:16.097604 2026] [:error] [pid 51878:tid 51893] [client 20.216.170.187:28177] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "aeI6mEnQhUtMbw9EsgawIQAAAQ0"]
[Fri Apr 17 21:50:17.111434 2026] [:error] [pid 25010:tid 25014] [client 20.216.170.187:27621] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "aeI6mY-7kkf42RarqQ2BjAAAAUE"]
[Fri Apr 17 21:50:17.852827 2026] [:error] [pid 25010:tid 25025] [client 20.216.170.187:17377] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeI6mY-7kkf42RarqQ2BjgAAAUw"]
[Fri Apr 17 21:50:18.738701 2026] [:error] [pid 51878:tid 51887] [client 20.216.170.187:13278] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeI6mknQhUtMbw9EsgawJgAAAQc"]
[Fri Apr 17 21:50:19.842436 2026] [:error] [pid 51878:tid 51894] [client 20.216.170.187:32426] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeI6m0nQhUtMbw9EsgawLAAAAQ4"]
[Fri Apr 17 21:50:20.642492 2026] [:error] [pid 34273:tid 34294] [client 20.216.170.187:32438] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeI6nGuQDW686mK3dgEUZAAAAZM"]
[Fri Apr 17 21:50:21.416341 2026] [:error] [pid 9152:tid 9198] [client 20.216.170.187:17146] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeI6nZJYca8I3TNCwIdvwgAAAEg"]
[Fri Apr 17 21:50:22.262003 2026] [:error] [pid 51878:tid 51899] [client 20.216.170.187:17594] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeI6nknQhUtMbw9EsgawNwAAARM"]
[Fri Apr 17 21:50:22.985327 2026] [:error] [pid 51878:tid 51898] [client 20.216.170.187:17563] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeI6nknQhUtMbw9EsgawPAAAARI"]
[Fri Apr 17 21:50:24.671930 2026] [:error] [pid 51878:tid 51896] [client 20.216.170.187:15591] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeI6oEnQhUtMbw9EsgawRgAAARA"]
[Fri Apr 17 21:50:26.242629 2026] [:error] [pid 9263:tid 9285] [client 20.216.170.187:16258] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeI6ohP68VyHNvj1e55dRAAAANQ"]
[Fri Apr 17 21:50:27.577936 2026] [:error] [pid 9263:tid 9271] [client 20.216.170.187:44381] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeI6oxP68VyHNvj1e55dSgAAAMY"]
[Fri Apr 17 21:50:28.247461 2026] [:error] [pid 9263:tid 9279] [client 20.216.170.187:17098] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeI6pBP68VyHNvj1e55dUAAAAM4"]
[Fri Apr 17 21:50:29.015968 2026] [:error] [pid 9151:tid 9161] [client 20.216.170.187:40451] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeI6pchTVuRPkua22vRH7gAAAAA"]
[Fri Apr 17 21:50:29.707190 2026] [:error] [pid 9263:tid 9281] [client 20.216.170.187:17108] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aeI6pRP68VyHNvj1e55dXgAAANA"]
[Fri Apr 17 21:50:30.452984 2026] [:error] [pid 9263:tid 9266] [client 20.216.170.187:40491] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aeI6phP68VyHNvj1e55dYwAAAME"]
[Fri Apr 17 21:50:31.107476 2026] [:error] [pid 9263:tid 9270] [client 20.216.170.187:15586] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aeI6pxP68VyHNvj1e55daAAAAMU"]
[Fri Apr 17 21:50:31.993554 2026] [:error] [pid 9263:tid 9284] [client 20.216.170.187:13266] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aeI6pxP68VyHNvj1e55dbwAAANM"]
[Fri Apr 17 21:50:33.463502 2026] [:error] [pid 9151:tid 9171] [client 20.216.170.187:17061] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aeI6qchTVuRPkua22vRH8AAAAAo"]
[Fri Apr 17 21:50:34.696737 2026] [:error] [pid 9263:tid 9277] [client 20.216.170.187:17066] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aeI6qhP68VyHNvj1e55dfwAAAMw"]
[Fri Apr 17 21:50:35.375916 2026] [:error] [pid 61523:tid 61550] [client 20.216.170.187:17067] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aeI6q8OaH-Pgc7WEf4PjkwAAAcg"]
[Fri Apr 17 21:50:36.585727 2026] [:error] [pid 9263:tid 9280] [client 20.216.170.187:12728] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aeI6rBP68VyHNvj1e55dhAAAAM8"]
[Fri Apr 17 21:50:37.637618 2026] [:error] [pid 9152:tid 9209] [client 20.216.170.187:32420] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aeI6rZJYca8I3TNCwIdv1AAAAFM"]
[Fri Apr 17 21:50:38.835507 2026] [:error] [pid 9263:tid 9285] [client 20.216.170.187:44384] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aeI6rhP68VyHNvj1e55diQAAANQ"]
[Fri Apr 17 21:50:39.972102 2026] [:error] [pid 51878:tid 51886] [client 20.216.170.187:10317] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aeI6r0nQhUtMbw9EsgawYgAAAQY"]
[Fri Apr 17 21:50:40.723794 2026] [:error] [pid 61523:tid 61559] [client 20.216.170.187:32423] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aeI6sMOaH-Pgc7WEf4PjnwAAAdE"]
[Fri Apr 17 21:50:41.751707 2026] [:error] [pid 9153:tid 9230] [client 20.216.170.187:41813] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeI6seMHGxkTZX3c45cVjQAAAIw"]
[Fri Apr 17 21:50:42.787341 2026] [:error] [pid 9263:tid 9288] [client 20.216.170.187:40453] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeI6shP68VyHNvj1e55dnwAAANc"]
[Fri Apr 17 21:50:43.669037 2026] [:error] [pid 9151:tid 9165] [client 20.216.170.187:14625] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeI6s8hTVuRPkua22vRH8wAAAAQ"]
[Fri Apr 17 21:50:45.078377 2026] [:error] [pid 61523:tid 61554] [client 20.216.170.187:36651] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeI6tcOaH-Pgc7WEf4PjvgAAAcw"]
[Fri Apr 17 21:50:46.195559 2026] [:error] [pid 9151:tid 9166] [client 20.216.170.187:10349] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeI6tshTVuRPkua22vRH9gAAAAU"]
[Fri Apr 17 21:50:47.336629 2026] [:error] [pid 9152:tid 9204] [client 20.216.170.187:16312] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeI6t5JYca8I3TNCwIdv7AAAAE4"]
[Fri Apr 17 21:50:48.695492 2026] [:error] [pid 9153:tid 9237] [client 20.216.170.187:32388] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeI6uOMHGxkTZX3c45cVlAAAAJM"]
[Fri Apr 17 21:50:49.821036 2026] [:error] [pid 51878:tid 51886] [client 20.216.170.187:17043] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeI6uUnQhUtMbw9EsgawegAAAQY"]
[Fri Apr 17 21:50:51.022353 2026] [:error] [pid 9263:tid 9270] [client 20.216.170.187:41847] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeI6uxP68VyHNvj1e55dtgAAAMU"]
[Fri Apr 17 21:50:51.983450 2026] [:error] [pid 25010:tid 25026] [client 20.216.170.187:14529] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeI6u4-7kkf42RarqQ2BpAAAAU0"]
[Fri Apr 17 21:50:53.011615 2026] [:error] [pid 61523:tid 61551] [client 20.216.170.187:16296] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeI6vcOaH-Pgc7WEf4Pj0QAAAck"]
[Fri Apr 17 21:50:53.577302 2026] [:error] [pid 9153:tid 9238] [client 20.216.170.187:35965] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeI6veMHGxkTZX3c45cVlgAAAJQ"]
[Fri Apr 17 21:50:54.247416 2026] [:error] [pid 51878:tid 51891] [client 20.216.170.187:35929] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeI6vknQhUtMbw9EsgawgQAAAQs"]
[Fri Apr 17 21:50:55.528127 2026] [:error] [pid 51878:tid 51899] [client 20.216.170.187:40476] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeI6v0nQhUtMbw9EsgawjQAAARM"]
[Fri Apr 17 21:50:56.207481 2026] [:error] [pid 9263:tid 9285] [client 20.216.170.187:43197] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeI6wBP68VyHNvj1e55dwwAAANQ"]
[Fri Apr 17 21:50:56.953590 2026] [:error] [pid 51878:tid 51881] [client 20.216.170.187:17077] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeI6wEnQhUtMbw9EsgawmwAAAQE"]
[Fri Apr 17 21:50:57.905427 2026] [:error] [pid 9152:tid 9201] [client 20.216.170.187:12693] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aeI6wZJYca8I3TNCwIdv_AAAAEs"]
[Fri Apr 17 21:50:59.098630 2026] [:error] [pid 25010:tid 25015] [client 20.216.170.187:12732] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aeI6w4-7kkf42RarqQ2BqQAAAUI"]
[Fri Apr 17 21:50:59.773492 2026] [:error] [pid 9153:tid 9218] [client 20.216.170.187:41840] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aeI6w-MHGxkTZX3c45cVmwAAAIA"]
[Fri Apr 17 21:51:00.336014 2026] [:error] [pid 9263:tid 9288] [client 20.216.170.187:15272] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aeI6xBP68VyHNvj1e55d1AAAANc"]
[Fri Apr 17 21:51:01.099449 2026] [:error] [pid 61523:tid 61547] [client 20.216.170.187:44371] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeI6xcOaH-Pgc7WEf4Pj1gAAAcU"]
[Fri Apr 17 21:51:01.751688 2026] [:error] [pid 9263:tid 9284] [client 20.216.170.187:10321] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeI6xRP68VyHNvj1e55d3wAAANM"]
[Fri Apr 17 21:51:02.290252 2026] [:error] [pid 9263:tid 9272] [client 20.216.170.187:17058] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeI6xhP68VyHNvj1e55d5gAAAMc"]
[Fri Apr 17 21:51:02.860454 2026] [:error] [pid 34273:tid 34284] [client 20.216.170.187:41845] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeI6xmuQDW686mK3dgEUkQAAAYk"]
[Fri Apr 17 21:51:03.396504 2026] [:error] [pid 61523:tid 61558] [client 20.216.170.187:6236] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aeI6x8OaH-Pgc7WEf4Pj2AAAAdA"]
[Fri Apr 17 21:51:04.000006 2026] [:error] [pid 61523:tid 61549] [client 20.216.170.187:32440] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aeI6x8OaH-Pgc7WEf4Pj2wAAAcc"]
[Fri Apr 17 21:51:04.703446 2026] [:error] [pid 34273:tid 34297] [client 20.216.170.187:44397] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri Apr 17 21:51:05.259524 2026] [:error] [pid 34273:tid 34280] [client 20.216.170.187:44397] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Fri Apr 17 21:51:05.752297 2026] [:error] [pid 34273:tid 34296] [client 20.216.170.187:44397] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Fri Apr 17 21:51:06.029054 2026] [:error] [pid 34273:tid 34282] [client 20.216.170.187:44397] File does not exist: /usr/local/apache/htdocs/suspended-page/alpha.php
[Fri Apr 17 21:51:07.474314 2026] [:error] [pid 34273:tid 34282] [client 20.216.170.187:44397] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Fri Apr 17 21:51:07.714490 2026] [:error] [pid 34273:tid 34281] [client 20.216.170.187:44397] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-michan.php
[Fri Apr 17 21:51:07.978482 2026] [:error] [pid 34273:tid 34290] [client 20.216.170.187:44397] File does not exist: /usr/local/apache/htdocs/suspended-page/admin1.php
[Fri Apr 17 21:51:08.561420 2026] [:error] [pid 34273:tid 34299] [client 20.216.170.187:44397] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Fri Apr 17 21:51:08.877049 2026] [:error] [pid 34273:tid 34283] [client 20.216.170.187:44397] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeI6zGuQDW686mK3dgEUpgAAAYg"]
[Fri Apr 17 21:51:10.163278 2026] [:error] [pid 61523:tid 61555] [client 20.216.170.187:32387] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeI6zsOaH-Pgc7WEf4Pj6QAAAc0"]
[Fri Apr 17 21:51:10.980133 2026] [:error] [pid 51878:tid 51890] [client 20.216.170.187:6234] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeI6zknQhUtMbw9EsgawwAAAAQo"]
[Fri Apr 17 21:51:11.667939 2026] [:error] [pid 61523:tid 61552] [client 20.216.170.187:17102] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeI6z8OaH-Pgc7WEf4Pj-AAAAco"]
[Fri Apr 17 21:51:12.476133 2026] [:error] [pid 51878:tid 51882] [client 20.216.170.187:13212] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeI60EnQhUtMbw9EsgawxAAAAQI"]
[Fri Apr 17 21:51:13.407417 2026] [:error] [pid 9263:tid 9275] [client 20.216.170.187:15566] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeI60RP68VyHNvj1e55eGAAAAMo"]
[Fri Apr 17 21:51:14.619742 2026] [:error] [pid 51878:tid 51887] [client 20.216.170.187:14598] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeI60knQhUtMbw9Esgaw1gAAAQc"]
[Fri Apr 17 21:51:17.689464 2026] [:error] [pid 51878:tid 51889] [client 20.216.170.187:15565] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeI61UnQhUtMbw9Esgaw6gAAAQk"]
[Fri Apr 17 21:51:19.261040 2026] [:error] [pid 61523:tid 61546] [client 20.216.170.187:17345] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeI618OaH-Pgc7WEf4Pj_QAAAcQ"]
[Fri Apr 17 21:51:20.433286 2026] [:error] [pid 25010:tid 25017] [client 20.216.170.187:17360] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeI62I-7kkf42RarqQ2BtwAAAUQ"]
[Fri Apr 17 21:51:22.203517 2026] [:error] [pid 34273:tid 34296] [client 20.216.170.187:17406] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeI62muQDW686mK3dgEUrQAAAZU"]
[Fri Apr 17 21:51:23.454488 2026] [:error] [pid 34273:tid 34282] [client 20.216.170.187:32386] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeI622uQDW686mK3dgEUsQAAAYc"]
[Fri Apr 17 21:51:24.297898 2026] [:error] [pid 9263:tid 9288] [client 20.216.170.187:17096] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeI63BP68VyHNvj1e55edQAAANc"]
[Fri Apr 17 21:51:25.137760 2026] [:error] [pid 9263:tid 9283] [client 20.216.170.187:17058] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeI63RP68VyHNvj1e55eewAAANI"]
[Fri Apr 17 21:51:25.999523 2026] [:error] [pid 9153:tid 9223] [client 20.216.170.187:17349] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeI63eMHGxkTZX3c45cVrQAAAIU"]
[Fri Apr 17 21:51:26.704315 2026] [:error] [pid 51878:tid 51891] [client 20.216.170.187:14422] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeI63knQhUtMbw9EsgaxJAAAAQs"]
[Fri Apr 17 21:51:27.665445 2026] [:error] [pid 9151:tid 9185] [client 20.216.170.187:29191] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeI638hTVuRPkua22vRIDQAAABg"]
[Fri Apr 17 21:51:28.406253 2026] [:error] [pid 61523:tid 61546] [client 20.216.170.187:17575] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeI64MOaH-Pgc7WEf4PkDwAAAcQ"]
[Fri Apr 17 21:51:28.979275 2026] [:error] [pid 61523:tid 61561] [client 20.216.170.187:16032] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeI64MOaH-Pgc7WEf4PkEQAAAdM"]
[Fri Apr 17 21:51:30.263476 2026] [:error] [pid 25010:tid 25024] [client 20.216.170.187:16039] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeI64o-7kkf42RarqQ2BvgAAAUs"]
[Fri Apr 17 21:51:31.144309 2026] [:error] [pid 9152:tid 9199] [client 20.216.170.187:27593] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeI645JYca8I3TNCwIdwFwAAAEk"]
[Fri Apr 17 21:51:31.811589 2026] [:error] [pid 25010:tid 25020] [client 20.216.170.187:26288] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeI644-7kkf42RarqQ2BvwAAAUc"]
[Fri Apr 17 21:51:32.991221 2026] [:error] [pid 9153:tid 9240] [client 20.216.170.187:14343] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeI65OMHGxkTZX3c45cVsgAAAJY"]
[Fri Apr 17 21:51:33.773892 2026] [:error] [pid 9153:tid 9225] [client 20.216.170.187:37197] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeI65eMHGxkTZX3c45cVtAAAAIc"]
[Fri Apr 17 21:51:34.419592 2026] [:error] [pid 9152:tid 9191] [client 20.216.170.187:37209] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aeI65pJYca8I3TNCwIdwHwAAAEE"]
[Fri Apr 17 21:51:35.328257 2026] [:error] [pid 9152:tid 9205] [client 20.216.170.187:26262] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aeI655JYca8I3TNCwIdwIgAAAE8"]
[Fri Apr 17 21:51:36.846682 2026] [:error] [pid 51878:tid 51896] [client 20.216.170.187:10424] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aeI66EnQhUtMbw9EsgaxLgAAARA"]
[Fri Apr 17 21:51:37.823565 2026] [:error] [pid 9153:tid 9222] [client 20.216.170.187:14349] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aeI66eMHGxkTZX3c45cVtQAAAIQ"]
[Fri Apr 17 21:51:39.097997 2026] [:error] [pid 51878:tid 51883] [client 20.216.170.187:6406] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aeI660nQhUtMbw9EsgaxMgAAAQM"]
[Fri Apr 17 21:51:40.324783 2026] [:error] [pid 9153:tid 9237] [client 20.216.170.187:34633] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aeI67OMHGxkTZX3c45cVtgAAAJM"]
[Fri Apr 17 21:51:41.623987 2026] [:error] [pid 9153:tid 9234] [client 20.216.170.187:10428] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aeI67eMHGxkTZX3c45cVugAAAJA"]
[Fri Apr 17 21:51:42.835351 2026] [:error] [pid 9263:tid 9271] [client 20.216.170.187:6463] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aeI67hP68VyHNvj1e55esgAAAMY"]
[Fri Apr 17 21:51:44.968833 2026] [:error] [pid 9263:tid 9282] [client 20.216.170.187:34714] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aeI68BP68VyHNvj1e55etQAAANE"]
[Fri Apr 17 21:51:45.887072 2026] [:error] [pid 61523:tid 61559] [client 20.216.170.187:19853] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aeI68cOaH-Pgc7WEf4PkOwAAAdE"]
[Fri Apr 17 21:51:47.066181 2026] [:error] [pid 34273:tid 34276] [client 20.216.170.187:13950] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aeI682uQDW686mK3dgEUyQAAAYE"]
[Fri Apr 17 21:51:48.087607 2026] [:error] [pid 61523:tid 61547] [client 20.216.170.187:25772] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aeI69MOaH-Pgc7WEf4PkQAAAAcU"]
[Fri Apr 17 21:51:48.873392 2026] [:error] [pid 9263:tid 9271] [client 20.216.170.187:15509] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aeI69BP68VyHNvj1e55ewQAAAMY"]
[Fri Apr 17 21:51:49.679826 2026] [:error] [pid 51878:tid 51885] [client 20.216.170.187:41146] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aeI69UnQhUtMbw9EsgaxTgAAAQU"]
[Fri Apr 17 21:51:50.515307 2026] [:error] [pid 9263:tid 9282] [client 20.216.170.187:34116] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aeI69hP68VyHNvj1e55ewwAAANE"]
[Fri Apr 17 21:51:51.442569 2026] [:error] [pid 51878:tid 51889] [client 20.216.170.187:32374] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aeI690nQhUtMbw9EsgaxVgAAAQk"]
[Fri Apr 17 21:51:52.209857 2026] [:error] [pid 51878:tid 51893] [client 20.216.170.187:22709] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aeI6-EnQhUtMbw9EsgaxWgAAAQ0"]
[Fri Apr 17 21:51:53.492288 2026] [:error] [pid 9152:tid 9196] [client 20.216.170.187:22698] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aeI6-ZJYca8I3TNCwIdwNwAAAEY"]
[Fri Apr 17 21:51:54.664552 2026] [:error] [pid 61523:tid 61556] [client 20.216.170.187:33567] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aeI6-sOaH-Pgc7WEf4PkSgAAAc4"]
[Fri Apr 17 21:51:55.746848 2026] [:error] [pid 61523:tid 61566] [client 20.216.170.187:39180] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aeI6-8OaH-Pgc7WEf4PkTgAAAdg"]
[Fri Apr 17 21:51:56.757660 2026] [:error] [pid 61523:tid 61564] [client 20.216.170.187:16550] [client 20.216.170.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeI6_MOaH-Pgc7WEf4PkVAAAAdY"]
[Fri Apr 17 21:51:57.747482 2026] [:error] [pid 9263:tid 9288] [client 20.216.170.187:23681] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeI6_RP68VyHNvj1e55e0AAAANc"]
[Fri Apr 17 21:51:59.341724 2026] [:error] [pid 25010:tid 25035] [client 20.216.170.187:28660] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeI6_4-7kkf42RarqQ2BzQAAAVY"]
[Fri Apr 17 21:52:00.078467 2026] [:error] [pid 9152:tid 9199] [client 20.216.170.187:16851] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeI7AJJYca8I3TNCwIdwPQAAAEk"]
[Fri Apr 17 21:52:01.051134 2026] [:error] [pid 61523:tid 61547] [client 20.216.170.187:18941] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeI7AcOaH-Pgc7WEf4PkXAAAAcU"]
[Fri Apr 17 21:52:02.213211 2026] [:error] [pid 61523:tid 61545] [client 20.216.170.187:16850] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeI7AsOaH-Pgc7WEf4PkYAAAAcM"]
[Fri Apr 17 21:52:03.210569 2026] [:error] [pid 61523:tid 61550] [client 20.216.170.187:50443] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeI7A8OaH-Pgc7WEf4PkYQAAAcg"]
[Fri Apr 17 21:52:04.884951 2026] [:error] [pid 9153:tid 9227] [client 20.216.170.187:45093] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeI7BOMHGxkTZX3c45cVyQAAAIk"]
[Fri Apr 17 21:52:05.696450 2026] [:error] [pid 34273:tid 34295] [client 20.216.170.187:39795] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeI7BWuQDW686mK3dgEU2QAAAZQ"]
[Fri Apr 17 21:52:06.532947 2026] [:error] [pid 25010:tid 25029] [client 20.216.170.187:50476] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeI7Bo-7kkf42RarqQ2B0wAAAVA"]
[Fri Apr 17 21:52:07.341297 2026] [:error] [pid 61523:tid 61552] [client 20.216.170.187:50449] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeI7B8OaH-Pgc7WEf4PkawAAAco"]
[Fri Apr 17 21:52:08.972708 2026] [:error] [pid 9263:tid 9265] [client 20.216.170.187:37697] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Fri Apr 17 21:52:09.210839 2026] [:error] [pid 9263:tid 9269] [client 20.216.170.187:37697] File does not exist: /usr/local/apache/htdocs/suspended-page/dev.php
[Fri Apr 17 21:52:09.530041 2026] [:error] [pid 9263:tid 9270] [client 20.216.170.187:37697] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Fri Apr 17 21:52:09.778651 2026] [:error] [pid 9263:tid 9272] [client 20.216.170.187:37697] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Fri Apr 17 21:52:10.411517 2026] [:error] [pid 9263:tid 9278] [client 20.216.170.187:37697] File does not exist: /usr/local/apache/htdocs/suspended-page/gssdd.php
[Fri Apr 17 21:52:10.886891 2026] [:error] [pid 9263:tid 9284] [client 20.216.170.187:37697] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Fri Apr 17 21:52:11.392496 2026] [:error] [pid 9263:tid 9277] [client 20.216.170.187:37697] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php
[Fri Apr 17 21:52:11.635118 2026] [:error] [pid 9263:tid 9276] [client 20.216.170.187:37697] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aeI7CxP68VyHNvj1e55e8gAAAMs"]
[Fri Apr 17 21:52:12.555126 2026] [:error] [pid 9263:tid 9267] [client 20.216.170.187:37264] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aeI7DBP68VyHNvj1e55e9AAAAMI"]
[Fri Apr 17 21:52:13.290506 2026] [:error] [pid 25010:tid 25022] [client 20.216.170.187:39807] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aeI7DY-7kkf42RarqQ2B1gAAAUk"]
[Fri Apr 17 21:52:15.130503 2026] [:error] [pid 25010:tid 25028] [client 20.216.170.187:17820] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aeI7D4-7kkf42RarqQ2B2AAAAU8"]
[Fri Apr 17 21:52:17.373049 2026] [:error] [pid 9263:tid 9282] [client 20.216.170.187:47697] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeI7ERP68VyHNvj1e55fCgAAANE"]
[Fri Apr 17 21:52:18.372122 2026] [:error] [pid 61523:tid 61557] [client 20.216.170.187:12455] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeI7EsOaH-Pgc7WEf4PkiwAAAc8"]
[Fri Apr 17 21:52:19.520945 2026] [:error] [pid 9263:tid 9266] [client 20.216.170.187:12416] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeI7ExP68VyHNvj1e55fDwAAAME"]
[Fri Apr 17 21:52:20.368277 2026] [:error] [pid 9153:tid 9229] [client 20.216.170.187:12535] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeI7FOMHGxkTZX3c45cV2gAAAIs"]
[Fri Apr 17 21:52:21.782396 2026] [:error] [pid 61523:tid 61557] [client 20.216.170.187:6886] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeI7FcOaH-Pgc7WEf4PknQAAAc8"]
[Fri Apr 17 21:52:23.028834 2026] [:error] [pid 61523:tid 61551] [client 20.216.170.187:15779] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeI7F8OaH-Pgc7WEf4PkqQAAAck"]
[Fri Apr 17 21:52:25.102167 2026] [:error] [pid 9151:tid 9178] [client 20.216.170.187:45553] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeI7GchTVuRPkua22vRIOgAAABE"]
[Fri Apr 17 21:52:26.330516 2026] [:error] [pid 9151:tid 9183] [client 20.216.170.187:18892] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeI7GshTVuRPkua22vRIPAAAABY"]
[Fri Apr 17 21:52:27.700749 2026] [:error] [pid 9263:tid 9266] [client 20.216.170.187:45551] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aeI7GxP68VyHNvj1e55fJgAAAME"]
[Fri Apr 17 21:52:29.220610 2026] [:error] [pid 9152:tid 9205] [client 20.216.170.187:18916] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aeI7HZJYca8I3TNCwIdwTwAAAE8"]
[Fri Apr 17 21:52:30.385628 2026] [:error] [pid 9151:tid 9172] [client 20.216.170.187:15802] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aeI7HshTVuRPkua22vRIQQAAAAs"]
[Fri Apr 17 21:52:31.796225 2026] [:error] [pid 9151:tid 9180] [client 20.216.170.187:19410] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aeI7H8hTVuRPkua22vRIRQAAABM"]
[Fri Apr 17 21:52:32.872333 2026] [:error] [pid 25010:tid 25026] [client 20.216.170.187:6905] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aeI7II-7kkf42RarqQ2B4QAAAU0"]
[Fri Apr 17 21:52:33.912627 2026] [:error] [pid 51878:tid 51894] [client 20.216.170.187:12421] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aeI7IUnQhUtMbw9EsgaxggAAAQ4"]
[Fri Apr 17 21:52:34.959803 2026] [:error] [pid 51878:tid 51902] [client 20.216.170.187:12501] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aeI7IknQhUtMbw9EsgaxhAAAARY"]
[Fri Apr 17 21:52:35.887779 2026] [:error] [pid 61523:tid 61550] [client 20.216.170.187:6862] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aeI7I8OaH-Pgc7WEf4Pk1AAAAcg"]
[Fri Apr 17 21:52:36.399644 2026] [:error] [pid 9263:tid 9272] [client 20.216.170.187:19434] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeI7JBP68VyHNvj1e55fNAAAAMc"]
[Fri Apr 17 21:52:37.419922 2026] [:error] [pid 9263:tid 9275] [client 20.216.170.187:14281] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeI7JRP68VyHNvj1e55fOgAAAMo"]
[Fri Apr 17 21:52:38.107695 2026] [:error] [pid 9263:tid 9289] [client 20.216.170.187:15429] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeI7JhP68VyHNvj1e55fPAAAANg"]
[Fri Apr 17 21:52:38.900998 2026] [:error] [pid 51878:tid 51898] [client 20.216.170.187:14823] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeI7JknQhUtMbw9EsgaxhgAAARI"]
[Fri Apr 17 21:52:40.178029 2026] [:error] [pid 9152:tid 9201] [client 20.216.170.187:38218] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aeI7KJJYca8I3TNCwIdwZwAAAEs"]
[Fri Apr 17 21:52:41.715874 2026] [:error] [pid 9153:tid 9224] [client 20.216.170.187:20157] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aeI7KeMHGxkTZX3c45cV-QAAAIY"]
[Fri Apr 17 21:52:43.168189 2026] [:error] [pid 9263:tid 9285] [client 20.216.170.187:23730] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aeI7KxP68VyHNvj1e55fRQAAANQ"]
[Fri Apr 17 21:52:43.946526 2026] [:error] [pid 9263:tid 9281] [client 20.216.170.187:16521] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aeI7KxP68VyHNvj1e55fSwAAANA"]
[Fri Apr 17 21:52:45.661928 2026] [:error] [pid 51878:tid 51899] [client 20.216.170.187:19408] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aeI7LUnQhUtMbw9EsgaxmgAAARM"]
[Fri Apr 17 21:52:47.593898 2026] [:error] [pid 25010:tid 25013] [client 20.216.170.187:39181] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aeI7L4-7kkf42RarqQ2B5gAAAUA"]
[Fri Apr 17 21:52:48.952875 2026] [:error] [pid 61523:tid 61554] [client 20.216.170.187:15404] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aeI7MMOaH-Pgc7WEf4Pk8wAAAcw"]
[Fri Apr 17 21:52:49.825324 2026] [:error] [pid 51878:tid 51898] [client 20.216.170.187:39227] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aeI7MUnQhUtMbw9EsgaxrQAAARI"]
[Fri Apr 17 21:52:50.602987 2026] [:error] [pid 9263:tid 9276] [client 20.216.170.187:6618] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aeI7MhP68VyHNvj1e55frgAAAMs"]
[Fri Apr 17 21:52:51.563726 2026] [:error] [pid 9263:tid 9285] [client 20.216.170.187:14310] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aeI7MxP68VyHNvj1e55fvgAAANQ"]
[Fri Apr 17 21:52:52.105425 2026] [:error] [pid 9153:tid 9240] [client 20.216.170.187:25712] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aeI7NOMHGxkTZX3c45cWAAAAAJY"]
[Fri Apr 17 21:52:52.889543 2026] [:error] [pid 9263:tid 9278] [client 20.216.170.187:19094] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aeI7NBP68VyHNvj1e55f1gAAAM0"]
[Fri Apr 17 21:52:53.673711 2026] [:error] [pid 51878:tid 51883] [client 20.216.170.187:23717] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aeI7NUnQhUtMbw9EsgaxtAAAAQM"]
[Fri Apr 17 21:52:55.036910 2026] [:error] [pid 61523:tid 61555] [client 20.216.170.187:42539] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aeI7N8OaH-Pgc7WEf4Pk-gAAAc0"]
[Fri Apr 17 21:52:55.883336 2026] [:error] [pid 51878:tid 51898] [client 20.216.170.187:28157] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aeI7N0nQhUtMbw9EsgaxuQAAARI"]
[Fri Apr 17 21:52:57.234915 2026] [:error] [pid 51878:tid 51885] [client 20.216.170.187:37760] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aeI7OUnQhUtMbw9EsgaxvQAAAQU"]
[Fri Apr 17 21:52:58.023550 2026] [:error] [pid 9263:tid 9272] [client 20.216.170.187:42515] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "aeI7OhP68VyHNvj1e55gNwAAAMc"]
[Fri Apr 17 21:52:59.140616 2026] [:error] [pid 9152:tid 9191] [client 20.216.170.187:28098] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "aeI7O5JYca8I3TNCwIdwfgAAAEE"]
[Fri Apr 17 21:52:59.867561 2026] [:error] [pid 25010:tid 25030] [client 20.216.170.187:23718] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "aeI7O4-7kkf42RarqQ2B9AAAAVE"]
[Fri Apr 17 21:53:01.500549 2026] [:error] [pid 9263:tid 9283] [client 20.216.170.187:19908] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "aeI7PRP68VyHNvj1e55gcwAAANI"]
[Fri Apr 17 21:53:02.569314 2026] [:error] [pid 9263:tid 9269] [client 20.216.170.187:6596] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "aeI7PhP68VyHNvj1e55gjAAAAMQ"]
[Fri Apr 17 21:53:04.311575 2026] [:error] [pid 61523:tid 61548] [client 20.216.170.187:33581] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "aeI7QMOaH-Pgc7WEf4Pk_gAAAcY"]
[Fri Apr 17 21:53:05.531830 2026] [:error] [pid 51878:tid 51883] [client 20.216.170.187:39852] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "aeI7QUnQhUtMbw9Esgax5gAAAQM"]
[Fri Apr 17 21:53:06.718619 2026] [:error] [pid 9151:tid 9166] [client 20.216.170.187:19928] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "aeI7QshTVuRPkua22vRIUQAAAAU"]
[Fri Apr 17 21:53:07.844964 2026] [:error] [pid 9263:tid 9273] [client 20.216.170.187:37801] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "aeI7QxP68VyHNvj1e55g8gAAAMg"]
[Fri Apr 17 21:53:09.639086 2026] [:error] [pid 9263:tid 9269] [client 20.216.170.187:6995] [client 20.216.170.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "aeI7RRP68VyHNvj1e55hBQAAAMQ"]
[Fri Apr 17 21:53:11.692448 2026] [:error] [pid 34273:tid 34290] [client 20.216.170.187:25228] File does not exist: /usr/local/apache/htdocs/suspended-page/cabs.php
[Fri Apr 17 21:53:11.932716 2026] [:error] [pid 34273:tid 34282] [client 20.216.170.187:25228] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Fri Apr 17 21:53:12.234949 2026] [:error] [pid 34273:tid 34287] [client 20.216.170.187:25228] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Apr 17 21:53:12.486932 2026] [:error] [pid 34273:tid 34275] [client 20.216.170.187:25228] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Apr 18 01:10:29.721034 2026] [:error] [pid 63702:tid 63747] [client 74.234.79.117:34126] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sat Apr 18 01:10:29.973671 2026] [:error] [pid 63702:tid 63744] [client 74.234.79.117:34126] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Sat Apr 18 01:10:30.240136 2026] [:error] [pid 63702:tid 63751] [client 74.234.79.117:34126] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sat Apr 18 01:10:30.490821 2026] [:error] [pid 63702:tid 63743] [client 74.234.79.117:34126] File does not exist: /usr/local/apache/htdocs/suspended-page/mifta.php
[Sat Apr 18 01:10:31.017777 2026] [:error] [pid 63702:tid 63753] [client 74.234.79.117:34126] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Sat Apr 18 01:10:31.280075 2026] [:error] [pid 63702:tid 63739] [client 74.234.79.117:34126] File does not exist: /usr/local/apache/htdocs/suspended-page/packsin1.php
[Sat Apr 18 01:10:31.553690 2026] [:error] [pid 63702:tid 63747] [client 74.234.79.117:34126] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Sat Apr 18 01:10:31.981164 2026] [:error] [pid 63702:tid 63758] [client 74.234.79.117:34126] File does not exist: /usr/local/apache/htdocs/suspended-page/son1.php
[Sat Apr 18 01:10:32.229278 2026] [:error] [pid 63702:tid 63744] [client 74.234.79.117:34126] [client 74.234.79.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeJpiMTL05PWYsKqTEYI7wAAAUU"]
[Sat Apr 18 01:10:33.918269 2026] [:error] [pid 42442:tid 42453] [client 74.234.79.117:34048] File does not exist: /usr/local/apache/htdocs/suspended-page/aboute.php
[Sat Apr 18 01:10:34.188288 2026] [:error] [pid 42442:tid 42455] [client 74.234.79.117:34048] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Sat Apr 18 01:10:34.505016 2026] [:error] [pid 42442:tid 42452] [client 74.234.79.117:34048] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeJpij4PBGqL_yqPJ8kh2wAAAQg"]
[Sat Apr 18 01:10:35.224325 2026] [:error] [pid 42442:tid 42457] [client 74.234.79.117:34067] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeJpiz4PBGqL_yqPJ8kh3wAAAQ0"]
[Sat Apr 18 01:10:35.961333 2026] [:error] [pid 42442:tid 42459] [client 74.234.79.117:34136] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeJpiz4PBGqL_yqPJ8kh5gAAAQ8"]
[Sat Apr 18 01:10:36.673022 2026] [:error] [pid 63702:tid 63750] [client 74.234.79.117:34153] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeJpjMTL05PWYsKqTEYI9wAAAUo"]
[Sat Apr 18 01:10:37.570118 2026] [:error] [pid 59136:tid 59161] [client 74.234.79.117:34159] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeJpjSaoiUyiIR3EhLW2UgAAANY"]
[Sat Apr 18 01:10:38.577702 2026] [:error] [pid 42442:tid 42458] [client 74.234.79.117:34115] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeJpjj4PBGqL_yqPJ8kh7gAAAQ4"]
[Sat Apr 18 01:10:39.757058 2026] [:error] [pid 42442:tid 42461] [client 74.234.79.117:34127] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeJpjz4PBGqL_yqPJ8kh8wAAARE"]
[Sat Apr 18 01:10:41.672480 2026] [:error] [pid 59042:tid 59050] [client 74.234.79.117:34122] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeJpkZ6p5oql0UklEBJKSAAAAAM"]
[Sat Apr 18 01:10:43.265142 2026] [:error] [pid 63702:tid 63747] [client 74.234.79.117:34079] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeJpk8TL05PWYsKqTEYJAQAAAUg"]
[Sat Apr 18 01:10:44.225355 2026] [:error] [pid 63702:tid 63764] [client 74.234.79.117:34148] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeJplMTL05PWYsKqTEYJBwAAAVc"]
[Sat Apr 18 01:10:46.076526 2026] [:error] [pid 42442:tid 42460] [client 74.234.79.117:34167] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeJplj4PBGqL_yqPJ8kiDgAAARA"]
[Sat Apr 18 01:10:47.493713 2026] [:error] [pid 59136:tid 59161] [client 74.234.79.117:34134] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeJplyaoiUyiIR3EhLW2WgAAANY"]
[Sat Apr 18 01:10:48.722408 2026] [:error] [pid 42442:tid 42456] [client 74.234.79.117:10692] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeJpmD4PBGqL_yqPJ8kiGwAAAQw"]
[Sat Apr 18 01:10:50.047710 2026] [:error] [pid 59042:tid 59071] [client 74.234.79.117:34162] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeJpmp6p5oql0UklEBJKTgAAABg"]
[Sat Apr 18 01:10:51.210443 2026] [:error] [pid 63702:tid 63743] [client 74.234.79.117:34055] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeJpm8TL05PWYsKqTEYJEQAAAUQ"]
[Sat Apr 18 01:10:53.065062 2026] [:error] [pid 42442:tid 42462] [client 74.234.79.117:34094] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeJpnT4PBGqL_yqPJ8kiLgAAARI"]
[Sat Apr 18 01:10:53.958725 2026] [:error] [pid 42442:tid 42456] [client 74.234.79.117:34060] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeJpnT4PBGqL_yqPJ8kiMgAAAQw"]
[Sat Apr 18 01:10:55.311610 2026] [:error] [pid 63702:tid 63759] [client 74.234.79.117:34123] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeJpn8TL05PWYsKqTEYJFgAAAVI"]
[Sat Apr 18 01:10:55.924755 2026] [:error] [pid 63702:tid 63739] [client 74.234.79.117:34161] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeJpn8TL05PWYsKqTEYJGQAAAUE"]
[Sat Apr 18 01:10:58.139425 2026] [:error] [pid 59043:tid 59077] [client 74.234.79.117:34074] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeJpooRtUGE9SfUh2wwQXAAAAEM"]
[Sat Apr 18 01:10:59.905546 2026] [:error] [pid 42442:tid 42454] [client 74.234.79.117:34058] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeJpoz4PBGqL_yqPJ8kiPwAAAQo"]
[Sat Apr 18 01:11:00.728815 2026] [:error] [pid 63702:tid 63765] [client 74.234.79.117:34057] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeJppMTL05PWYsKqTEYJIAAAAVg"]
[Sat Apr 18 01:11:01.633241 2026] [:error] [pid 42442:tid 42445] [client 74.234.79.117:34072] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeJppT4PBGqL_yqPJ8kiRQAAAQE"]
[Sat Apr 18 01:11:02.644889 2026] [:error] [pid 63702:tid 63753] [client 74.234.79.117:34160] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeJppsTL05PWYsKqTEYJJAAAAUw"]
[Sat Apr 18 01:11:03.634784 2026] [:error] [pid 59044:tid 59125] [client 74.234.79.117:34156] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeJppwFamkFyEtD_SMG72AAAAJg"]
[Sat Apr 18 01:11:04.677163 2026] [:error] [pid 59044:tid 59121] [client 74.234.79.117:34061] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeJpqAFamkFyEtD_SMG72gAAAJQ"]
[Sat Apr 18 01:11:05.517186 2026] [:error] [pid 59136:tid 59148] [client 74.234.79.117:34169] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeJpqSaoiUyiIR3EhLW2fAAAAMk"]
[Sat Apr 18 01:11:06.282478 2026] [:error] [pid 59042:tid 59064] [client 74.234.79.117:34119] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeJpqp6p5oql0UklEBJKVgAAABE"]
[Sat Apr 18 01:11:06.935962 2026] [:error] [pid 42442:tid 42448] [client 74.234.79.117:34150] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeJpqj4PBGqL_yqPJ8kiUgAAAQQ"]
[Sat Apr 18 01:11:07.522566 2026] [:error] [pid 63702:tid 63760] [client 74.234.79.117:34165] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeJpq8TL05PWYsKqTEYJLQAAAVM"]
[Sat Apr 18 01:11:08.175927 2026] [:error] [pid 59043:tid 59092] [client 74.234.79.117:34120] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeJprIRtUGE9SfUh2wwQYwAAAFI"]
[Sat Apr 18 01:11:08.890800 2026] [:error] [pid 59043:tid 59078] [client 74.234.79.117:34071] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeJprIRtUGE9SfUh2wwQZAAAAEQ"]
[Sat Apr 18 01:11:09.550728 2026] [:error] [pid 63702:tid 63749] [client 74.234.79.117:10701] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeJprcTL05PWYsKqTEYJNwAAAUk"]
[Sat Apr 18 01:11:10.288727 2026] [:error] [pid 42442:tid 42444] [client 74.234.79.117:34143] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeJprj4PBGqL_yqPJ8kiVQAAAQA"]
[Sat Apr 18 01:11:11.104172 2026] [:error] [pid 42442:tid 42458] [client 74.234.79.117:10696] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeJprz4PBGqL_yqPJ8kiWQAAAQ4"]
[Sat Apr 18 01:11:11.636946 2026] [:error] [pid 59136:tid 59157] [client 74.234.79.117:34070] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeJpryaoiUyiIR3EhLW2hgAAANI"]
[Sat Apr 18 01:11:12.402988 2026] [:error] [pid 42442:tid 42450] [client 74.234.79.117:34053] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeJpsD4PBGqL_yqPJ8kiXgAAAQY"]
[Sat Apr 18 01:11:13.660166 2026] [:error] [pid 63702:tid 63751] [client 74.234.79.117:34097] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeJpscTL05PWYsKqTEYJQwAAAUs"]
[Sat Apr 18 01:11:14.585832 2026] [:error] [pid 63702:tid 63750] [client 74.234.79.117:34116] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeJpssTL05PWYsKqTEYJRwAAAUo"]
[Sat Apr 18 01:11:15.327703 2026] [:error] [pid 63702:tid 63760] [client 74.234.79.117:10742] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeJps8TL05PWYsKqTEYJSgAAAVM"]
[Sat Apr 18 01:11:16.312824 2026] [:error] [pid 63702:tid 63753] [client 74.234.79.117:10743] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeJptMTL05PWYsKqTEYJTAAAAUw"]
[Sat Apr 18 01:11:16.948952 2026] [:error] [pid 42442:tid 42466] [client 74.234.79.117:34175] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeJptD4PBGqL_yqPJ8kiaQAAARY"]
[Sat Apr 18 01:11:17.593412 2026] [:error] [pid 59044:tid 59105] [client 74.234.79.117:10693] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeJptQFamkFyEtD_SMG75AAAAIQ"]
[Sat Apr 18 01:11:18.574926 2026] [:error] [pid 59043:tid 59089] [client 74.234.79.117:34130] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeJptoRtUGE9SfUh2wwQZwAAAE8"]
[Sat Apr 18 01:11:19.391979 2026] [:error] [pid 59042:tid 59056] [client 74.234.79.117:34064] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeJpt56p5oql0UklEBJKZQAAAAk"]
[Sat Apr 18 01:11:20.053349 2026] [:error] [pid 63702:tid 63759] [client 74.234.79.117:10697] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeJpuMTL05PWYsKqTEYJUgAAAVI"]
[Sat Apr 18 01:11:20.841764 2026] [:error] [pid 59044:tid 59103] [client 74.234.79.117:34093] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeJpuAFamkFyEtD_SMG76QAAAII"]
[Sat Apr 18 01:11:21.659670 2026] [:error] [pid 59044:tid 59120] [client 74.234.79.117:34086] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeJpuQFamkFyEtD_SMG76wAAAJM"]
[Sat Apr 18 01:11:22.321957 2026] [:error] [pid 63702:tid 63755] [client 74.234.79.117:34158] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "aeJpusTL05PWYsKqTEYJVwAAAU4"]
[Sat Apr 18 01:11:22.922453 2026] [:error] [pid 42442:tid 42461] [client 74.234.79.117:34059] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "aeJpuj4PBGqL_yqPJ8kicAAAARE"]
[Sat Apr 18 01:11:23.797534 2026] [:error] [pid 59042:tid 59056] [client 74.234.79.117:34065] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "aeJpu56p5oql0UklEBJKbgAAAAk"]
[Sat Apr 18 01:11:24.713442 2026] [:error] [pid 63702:tid 63765] [client 74.234.79.117:34113] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "aeJpvMTL05PWYsKqTEYJXAAAAVg"]
[Sat Apr 18 01:11:25.462059 2026] [:error] [pid 59044:tid 59107] [client 74.234.79.117:34174] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tiny"] [unique_id "aeJpvQFamkFyEtD_SMG77wAAAIY"]
[Sat Apr 18 01:11:26.109043 2026] [:error] [pid 63702:tid 63759] [client 74.234.79.117:34168] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tiny"] [unique_id "aeJpvsTL05PWYsKqTEYJYAAAAVI"]
[Sat Apr 18 01:11:26.800311 2026] [:error] [pid 63702:tid 63743] [client 74.234.79.117:34173] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tiny"] [unique_id "aeJpvsTL05PWYsKqTEYJZAAAAUQ"]
[Sat Apr 18 01:11:27.612669 2026] [:error] [pid 63702:tid 63741] [client 74.234.79.117:34128] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tiny"] [unique_id "aeJpv8TL05PWYsKqTEYJaQAAAUM"]
[Sat Apr 18 01:11:28.205781 2026] [:error] [pid 59136:tid 59150] [client 74.234.79.117:34146] [client 74.234.79.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "aeJpwCaoiUyiIR3EhLW2mAAAAMs"]
[Sat Apr 18 01:11:28.752777 2026] [:error] [pid 42442:tid 42458] [client 74.234.79.117:34105] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeJpwD4PBGqL_yqPJ8kifQAAAQ4"]
[Sat Apr 18 01:11:29.492978 2026] [:error] [pid 59042:tid 59052] [client 74.234.79.117:34121] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeJpwZ6p5oql0UklEBJKcgAAAAU"]
[Sat Apr 18 01:11:30.262033 2026] [:error] [pid 63702:tid 63746] [client 74.234.79.117:34049] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeJpwsTL05PWYsKqTEYJdgAAAUc"]
[Sat Apr 18 01:11:30.941373 2026] [:error] [pid 63702:tid 63763] [client 74.234.79.117:34144] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeJpwsTL05PWYsKqTEYJfAAAAVY"]
[Sat Apr 18 01:11:31.592624 2026] [:error] [pid 59042:tid 59056] [client 74.234.79.117:34164] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class-wp-image.php"] [unique_id "aeJpw56p5oql0UklEBJKeAAAAAk"]
[Sat Apr 18 01:11:32.299925 2026] [:error] [pid 59042:tid 59060] [client 74.234.79.117:10709] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class-wp-image.php"] [unique_id "aeJpxJ6p5oql0UklEBJKewAAAA0"]
[Sat Apr 18 01:11:32.827992 2026] [:error] [pid 42442:tid 42449] [client 74.234.79.117:10710] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class-wp-image.php"] [unique_id "aeJpxD4PBGqL_yqPJ8kihwAAAQU"]
[Sat Apr 18 01:11:33.458491 2026] [:error] [pid 42442:tid 42454] [client 74.234.79.117:34140] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class-wp-image.php"] [unique_id "aeJpxT4PBGqL_yqPJ8kiiAAAAQo"]
[Sat Apr 18 01:11:34.158503 2026] [:error] [pid 59044:tid 59105] [client 74.234.79.117:34111] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sat Apr 18 01:11:34.627790 2026] [:error] [pid 59044:tid 59122] [client 74.234.79.117:34111] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Sat Apr 18 01:11:34.911018 2026] [:error] [pid 59044:tid 59102] [client 74.234.79.117:34111] File does not exist: /usr/local/apache/htdocs/suspended-page/footer.php
[Sat Apr 18 01:11:35.211275 2026] [:error] [pid 59044:tid 59125] [client 74.234.79.117:34111] File does not exist: /usr/local/apache/htdocs/suspended-page/img.php
[Sat Apr 18 01:11:35.479381 2026] [:error] [pid 59044:tid 59124] [client 74.234.79.117:34111] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Sat Apr 18 01:11:35.756191 2026] [:error] [pid 59044:tid 59103] [client 74.234.79.117:34111] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Sat Apr 18 01:11:36.036414 2026] [:error] [pid 59044:tid 59116] [client 74.234.79.117:34111] File does not exist: /usr/local/apache/htdocs/suspended-page/xff.php
[Sat Apr 18 01:11:36.311995 2026] [:error] [pid 59044:tid 59120] [client 74.234.79.117:34111] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Sat Apr 18 01:11:36.583844 2026] [:error] [pid 59044:tid 59114] [client 74.234.79.117:34111] File does not exist: /usr/local/apache/htdocs/suspended-page/roksad1.php
[Sat Apr 18 01:11:36.853707 2026] [:error] [pid 59044:tid 59119] [client 74.234.79.117:34111] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Sat Apr 18 01:11:37.173752 2026] [:error] [pid 59044:tid 59118] [client 74.234.79.117:34111] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Apr 18 01:11:37.511015 2026] [:error] [pid 59044:tid 59117] [client 74.234.79.117:34111] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aeJpyQFamkFyEtD_SMG8CwAAAJA"]
[Sat Apr 18 01:11:38.171410 2026] [:error] [pid 42442:tid 42447] [client 74.234.79.117:34103] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aeJpyj4PBGqL_yqPJ8kiowAAAQM"]
[Sat Apr 18 01:11:38.897950 2026] [:error] [pid 59043:tid 59088] [client 74.234.79.117:34099] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aeJpyoRtUGE9SfUh2wwQcAAAAE4"]
[Sat Apr 18 01:11:39.921443 2026] [:error] [pid 59042:tid 59062] [client 74.234.79.117:34147] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aeJpy56p5oql0UklEBJKjAAAAA8"]
[Sat Apr 18 01:11:40.637435 2026] [:error] [pid 42442:tid 42456] [client 74.234.79.117:34056] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeJpzD4PBGqL_yqPJ8kitAAAAQw"]
[Sat Apr 18 01:11:41.864569 2026] [:error] [pid 42442:tid 42450] [client 74.234.79.117:34081] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeJpzT4PBGqL_yqPJ8kivwAAAQY"]
[Sat Apr 18 01:11:43.399749 2026] [:error] [pid 42442:tid 42452] [client 74.234.79.117:34152] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeJpzz4PBGqL_yqPJ8kixQAAAQg"]
[Sat Apr 18 01:11:44.624328 2026] [:error] [pid 59136:tid 59146] [client 74.234.79.117:34052] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeJp0CaoiUyiIR3EhLW2tAAAAMc"]
[Sat Apr 18 01:11:46.879602 2026] [:error] [pid 42442:tid 42453] [client 74.234.79.117:34106] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "aeJp0j4PBGqL_yqPJ8ki0AAAAQk"]
[Sat Apr 18 01:11:48.357405 2026] [:error] [pid 42442:tid 42461] [client 74.234.79.117:34157] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "aeJp1D4PBGqL_yqPJ8ki2QAAARE"]
[Sat Apr 18 01:11:49.669008 2026] [:error] [pid 59042:tid 59062] [client 74.234.79.117:34132] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "aeJp1Z6p5oql0UklEBJKlgAAAA8"]
[Sat Apr 18 01:11:51.072395 2026] [:error] [pid 59044:tid 59102] [client 74.234.79.117:34088] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "aeJp1wFamkFyEtD_SMG8EQAAAIE"]
[Sat Apr 18 01:11:52.328038 2026] [:error] [pid 59042:tid 59058] [client 74.234.79.117:34133] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "aeJp2J6p5oql0UklEBJKnwAAAAs"]
[Sat Apr 18 01:11:54.380111 2026] [:error] [pid 59042:tid 59056] [client 74.234.79.117:34155] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "aeJp2p6p5oql0UklEBJKrQAAAAk"]
[Sat Apr 18 01:11:55.564509 2026] [:error] [pid 59044:tid 59121] [client 74.234.79.117:10729] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "aeJp2wFamkFyEtD_SMG8HAAAAJQ"]
[Sat Apr 18 01:11:56.540319 2026] [:error] [pid 42442:tid 42451] [client 74.234.79.117:34124] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "aeJp3D4PBGqL_yqPJ8ki8QAAAQc"]
[Sat Apr 18 01:11:58.579637 2026] [:error] [pid 59044:tid 59111] [client 74.234.79.117:34062] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "aeJp3gFamkFyEtD_SMG8HwAAAIo"]
[Sat Apr 18 01:11:59.250693 2026] [:error] [pid 59042:tid 59053] [client 74.234.79.117:34082] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "aeJp356p5oql0UklEBJKtAAAAAY"]
[Sat Apr 18 01:12:00.146399 2026] [:error] [pid 63702:tid 63747] [client 74.234.79.117:34131] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "aeJp4MTL05PWYsKqTEYJlQAAAUg"]
[Sat Apr 18 01:12:02.186116 2026] [:error] [pid 42442:tid 42453] [client 74.234.79.117:34054] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "aeJp4j4PBGqL_yqPJ8kjAAAAAQk"]
[Sat Apr 18 01:12:03.240517 2026] [:error] [pid 59043:tid 59097] [client 74.234.79.117:34063] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/maxro.php"] [unique_id "aeJp44RtUGE9SfUh2wwQfQAAAFc"]
[Sat Apr 18 01:12:03.958229 2026] [:error] [pid 42442:tid 42455] [client 74.234.79.117:34149] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/maxro.php"] [unique_id "aeJp4z4PBGqL_yqPJ8kjAwAAAQs"]
[Sat Apr 18 01:12:05.071309 2026] [:error] [pid 63702:tid 63744] [client 74.234.79.117:10747] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/maxro.php"] [unique_id "aeJp5cTL05PWYsKqTEYJnQAAAUU"]
[Sat Apr 18 01:12:05.981940 2026] [:error] [pid 59136:tid 59149] [client 74.234.79.117:10707] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/maxro.php"] [unique_id "aeJp5SaoiUyiIR3EhLW2wgAAAMo"]
[Sat Apr 18 01:12:07.416754 2026] [:error] [pid 59043:tid 59081] [client 74.234.79.117:34092] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeJp54RtUGE9SfUh2wwQlgAAAEc"]
[Sat Apr 18 01:12:08.194614 2026] [:error] [pid 59043:tid 59088] [client 74.234.79.117:10677] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeJp6IRtUGE9SfUh2wwQnQAAAE4"]
[Sat Apr 18 01:12:09.292957 2026] [:error] [pid 63702:tid 63760] [client 74.234.79.117:34085] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeJp6cTL05PWYsKqTEYJpQAAAVM"]
[Sat Apr 18 01:12:10.624006 2026] [:error] [pid 63702:tid 63745] [client 74.234.79.117:34102] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeJp6sTL05PWYsKqTEYJsQAAAUY"]
[Sat Apr 18 01:12:12.272259 2026] [:error] [pid 59136:tid 59159] [client 74.234.79.117:34075] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeJp7CaoiUyiIR3EhLW2zAAAANQ"]
[Sat Apr 18 01:12:13.703840 2026] [:error] [pid 59136:tid 59162] [client 74.234.79.117:10704] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeJp7SaoiUyiIR3EhLW21AAAANc"]
[Sat Apr 18 01:12:14.688883 2026] [:error] [pid 42442:tid 42458] [client 74.234.79.117:34089] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeJp7j4PBGqL_yqPJ8kjEgAAAQ4"]
[Sat Apr 18 01:12:16.846558 2026] [:error] [pid 59043:tid 59083] [client 74.234.79.117:10720] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeJp8IRtUGE9SfUh2wwQpQAAAEk"]
[Sat Apr 18 01:12:18.155468 2026] [:error] [pid 63702:tid 63740] [client 74.234.79.117:34076] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bdktk.php"] [unique_id "aeJp8sTL05PWYsKqTEYJyQAAAUI"]
[Sat Apr 18 01:12:19.208509 2026] [:error] [pid 59042:tid 59059] [client 74.234.79.117:34166] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bdktk.php"] [unique_id "aeJp856p5oql0UklEBJKywAAAAw"]
[Sat Apr 18 01:12:19.988823 2026] [:error] [pid 63702:tid 63746] [client 74.234.79.117:10700] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bdktk.php"] [unique_id "aeJp88TL05PWYsKqTEYJzQAAAUc"]
[Sat Apr 18 01:12:21.605805 2026] [:error] [pid 42442:tid 42456] [client 74.234.79.117:10643] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bdktk.php"] [unique_id "aeJp9T4PBGqL_yqPJ8kjHwAAAQw"]
[Sat Apr 18 01:12:22.649454 2026] [:error] [pid 63702:tid 63754] [client 74.234.79.117:10739] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "aeJp9sTL05PWYsKqTEYJ2AAAAU0"]
[Sat Apr 18 01:12:23.285131 2026] [:error] [pid 63702:tid 63745] [client 74.234.79.117:10702] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "aeJp98TL05PWYsKqTEYJ2gAAAUY"]
[Sat Apr 18 01:12:23.909878 2026] [:error] [pid 59042:tid 59062] [client 74.234.79.117:34083] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "aeJp956p5oql0UklEBJKzQAAAA8"]
[Sat Apr 18 01:12:24.941137 2026] [:error] [pid 63702:tid 63765] [client 74.234.79.117:34151] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "aeJp-MTL05PWYsKqTEYJ4gAAAVg"]
[Sat Apr 18 01:12:25.844982 2026] [:error] [pid 42442:tid 42464] [client 74.234.79.117:34141] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "aeJp-T4PBGqL_yqPJ8kjJwAAARQ"]
[Sat Apr 18 01:12:26.834067 2026] [:error] [pid 59136:tid 59148] [client 74.234.79.117:10719] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "aeJp-iaoiUyiIR3EhLW23gAAAMk"]
[Sat Apr 18 01:12:28.249818 2026] [:error] [pid 63702:tid 63744] [client 74.234.79.117:10728] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "aeJp_MTL05PWYsKqTEYJ5wAAAUU"]
[Sat Apr 18 01:12:29.032170 2026] [:error] [pid 42442:tid 42450] [client 74.234.79.117:10751] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "aeJp_T4PBGqL_yqPJ8kjMQAAAQY"]
[Sat Apr 18 01:12:29.827998 2026] [:error] [pid 42442:tid 42463] [client 74.234.79.117:34118] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeJp_T4PBGqL_yqPJ8kjNQAAARM"]
[Sat Apr 18 01:12:30.841408 2026] [:error] [pid 42442:tid 42466] [client 74.234.79.117:34073] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeJp_j4PBGqL_yqPJ8kjOAAAARY"]
[Sat Apr 18 01:12:32.334903 2026] [:error] [pid 42442:tid 42462] [client 74.234.79.117:10630] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeJqAD4PBGqL_yqPJ8kjPwAAARI"]
[Sat Apr 18 01:12:34.241294 2026] [:error] [pid 59136:tid 59139] [client 74.234.79.117:34050] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeJqAiaoiUyiIR3EhLW25QAAAMA"]
[Sat Apr 18 01:12:35.295529 2026] [:error] [pid 42442:tid 42445] [client 74.234.79.117:10725] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "aeJqAz4PBGqL_yqPJ8kjRgAAAQE"]
[Sat Apr 18 01:12:37.004356 2026] [:error] [pid 42442:tid 42453] [client 74.234.79.117:10723] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Sat Apr 18 01:12:37.357532 2026] [:error] [pid 42442:tid 42468] [client 74.234.79.117:10723] File does not exist: /usr/local/apache/htdocs/suspended-page/r2.php
[Sat Apr 18 01:12:37.653782 2026] [:error] [pid 42442:tid 42448] [client 74.234.79.117:10723] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Sat Apr 18 01:12:37.924149 2026] [:error] [pid 42442:tid 42453] [client 74.234.79.117:10723] File does not exist: /usr/local/apache/htdocs/suspended-page/006.php
[Sat Apr 18 01:12:38.195807 2026] [:error] [pid 42442:tid 42460] [client 74.234.79.117:10723] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Sat Apr 18 01:12:38.484374 2026] [:error] [pid 42442:tid 42467] [client 74.234.79.117:10723] File does not exist: /usr/local/apache/htdocs/suspended-page/zogy1.php
[Sat Apr 18 01:12:38.765842 2026] [:error] [pid 42442:tid 42464] [client 74.234.79.117:10723] File does not exist: /usr/local/apache/htdocs/suspended-page/aios-bootstrap.php
[Sat Apr 18 01:12:39.036349 2026] [:error] [pid 42442:tid 42453] [client 74.234.79.117:10723] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Sat Apr 18 01:12:39.307422 2026] [:error] [pid 42442:tid 42455] [client 74.234.79.117:10723] File does not exist: /usr/local/apache/htdocs/suspended-page/gz.php
[Sat Apr 18 01:12:39.577995 2026] [:error] [pid 42442:tid 42453] [client 74.234.79.117:10723] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Sat Apr 18 01:12:39.918385 2026] [:error] [pid 42442:tid 42454] [client 74.234.79.117:10723] File does not exist: /usr/local/apache/htdocs/suspended-page/areak1.php
[Sat Apr 18 01:12:40.436969 2026] [:error] [pid 42442:tid 42446] [client 74.234.79.117:10723] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "aeJqCD4PBGqL_yqPJ8kjyAAAAQI"]
[Sat Apr 18 01:12:41.704749 2026] [:error] [pid 42442:tid 42467] [client 74.234.79.117:34139] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "aeJqCT4PBGqL_yqPJ8kj7AAAARc"]
[Sat Apr 18 01:12:42.658057 2026] [:error] [pid 63702:tid 63737] [client 74.234.79.117:34109] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "aeJqCsTL05PWYsKqTEYKCwAAAUA"]
[Sat Apr 18 01:12:43.663156 2026] [:error] [pid 63702:tid 63764] [client 74.234.79.117:34080] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "aeJqC8TL05PWYsKqTEYKDQAAAVc"]
[Sat Apr 18 01:12:46.100640 2026] [:error] [pid 59043:tid 59090] [client 74.234.79.117:34090] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeJqDoRtUGE9SfUh2wwQtAAAAFA"]
[Sat Apr 18 01:12:47.053335 2026] [:error] [pid 59043:tid 59074] [client 74.234.79.117:34154] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeJqD4RtUGE9SfUh2wwQugAAAEA"]
[Sat Apr 18 01:12:48.349916 2026] [:error] [pid 63702:tid 63755] [client 74.234.79.117:10690] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeJqEMTL05PWYsKqTEYKHAAAAU4"]
[Sat Apr 18 01:12:49.510581 2026] [:error] [pid 42442:tid 42467] [client 74.234.79.117:34051] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeJqET4PBGqL_yqPJ8kkIgAAARc"]
[Sat Apr 18 01:12:50.561566 2026] [:error] [pid 59042:tid 59067] [client 74.234.79.117:34078] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "aeJqEp6p5oql0UklEBJK6QAAABQ"]
[Sat Apr 18 01:12:51.242910 2026] [:error] [pid 59042:tid 59047] [client 74.234.79.117:34108] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "aeJqE56p5oql0UklEBJK6wAAAAA"]
[Sat Apr 18 01:12:52.484082 2026] [:error] [pid 59044:tid 59118] [client 74.234.79.117:10654] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "aeJqFAFamkFyEtD_SMG8WQAAAJE"]
[Sat Apr 18 01:12:53.349293 2026] [:error] [pid 63702:tid 63746] [client 74.234.79.117:10735] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "aeJqFcTL05PWYsKqTEYKJwAAAUc"]
[Sat Apr 18 01:12:54.574319 2026] [:error] [pid 63702:tid 63745] [client 74.234.79.117:10721] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "aeJqFsTL05PWYsKqTEYKLwAAAUY"]
[Sat Apr 18 01:12:55.709325 2026] [:error] [pid 42442:tid 42446] [client 74.234.79.117:34114] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "aeJqFz4PBGqL_yqPJ8kkLwAAAQI"]
[Sat Apr 18 01:12:56.501340 2026] [:error] [pid 59042:tid 59049] [client 74.234.79.117:10737] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "aeJqGJ6p5oql0UklEBJK8gAAAAI"]
[Sat Apr 18 01:12:57.590243 2026] [:error] [pid 59042:tid 59059] [client 74.234.79.117:10741] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "aeJqGZ6p5oql0UklEBJK_AAAAAw"]
[Sat Apr 18 01:12:58.824180 2026] [:error] [pid 59044:tid 59113] [client 74.234.79.117:10625] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "aeJqGgFamkFyEtD_SMG8XAAAAIw"]
[Sat Apr 18 01:12:59.911878 2026] [:error] [pid 63702:tid 63761] [client 74.234.79.117:34129] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "aeJqG8TL05PWYsKqTEYKOwAAAVQ"]
[Sat Apr 18 01:13:01.257640 2026] [:error] [pid 63702:tid 63763] [client 74.234.79.117:10686] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "aeJqHcTL05PWYsKqTEYKQgAAAVY"]
[Sat Apr 18 01:13:01.981631 2026] [:error] [pid 59136:tid 59140] [client 74.234.79.117:34100] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "aeJqHSaoiUyiIR3EhLW3MAAAAME"]
[Sat Apr 18 01:13:03.006176 2026] [:error] [pid 42442:tid 42446] [client 74.234.79.117:34069] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeJqHz4PBGqL_yqPJ8kkRwAAAQI"]
[Sat Apr 18 01:13:03.998395 2026] [:error] [pid 42442:tid 42463] [client 74.234.79.117:34170] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeJqHz4PBGqL_yqPJ8kkSgAAARM"]
[Sat Apr 18 01:13:04.604937 2026] [:error] [pid 59136:tid 59159] [client 74.234.79.117:10698] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeJqICaoiUyiIR3EhLW3SQAAANQ"]
[Sat Apr 18 01:13:05.512948 2026] [:error] [pid 42442:tid 42456] [client 74.234.79.117:34112] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeJqIT4PBGqL_yqPJ8kkUAAAAQw"]
[Sat Apr 18 01:13:06.367971 2026] [:error] [pid 42442:tid 42453] [client 74.234.79.117:34066] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeJqIj4PBGqL_yqPJ8kkVAAAAQk"]
[Sat Apr 18 01:13:08.040502 2026] [:error] [pid 59043:tid 59081] [client 74.234.79.117:34098] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeJqJIRtUGE9SfUh2wwQygAAAEc"]
[Sat Apr 18 01:13:09.952270 2026] [:error] [pid 59042:tid 59055] [client 74.234.79.117:10626] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeJqJZ6p5oql0UklEBJLEgAAAAg"]
[Sat Apr 18 01:13:11.519908 2026] [:error] [pid 42442:tid 42463] [client 74.234.79.117:10635] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeJqJz4PBGqL_yqPJ8kkZwAAARM"]
[Sat Apr 18 01:13:12.592119 2026] [:error] [pid 63702:tid 63754] [client 74.234.79.117:10652] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "aeJqKMTL05PWYsKqTEYKWAAAAU0"]
[Sat Apr 18 01:13:13.725982 2026] [:error] [pid 59136:tid 59140] [client 74.234.79.117:34145] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "aeJqKSaoiUyiIR3EhLW3XAAAAME"]
[Sat Apr 18 01:13:14.585619 2026] [:error] [pid 63702:tid 63759] [client 74.234.79.117:10681] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "aeJqKsTL05PWYsKqTEYKYAAAAVI"]
[Sat Apr 18 01:13:15.312563 2026] [:error] [pid 59044:tid 59101] [client 74.234.79.117:10629] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "aeJqKwFamkFyEtD_SMG8agAAAIA"]
[Sat Apr 18 01:13:17.672107 2026] [:error] [pid 59042:tid 59056] [client 74.234.79.117:10750] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-lo.php"] [unique_id "aeJqLZ6p5oql0UklEBJLHQAAAAk"]
[Sat Apr 18 01:13:20.915480 2026] [:error] [pid 59042:tid 59062] [client 74.234.79.117:10714] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-lo.php"] [unique_id "aeJqMJ6p5oql0UklEBJLJAAAAA8"]
[Sat Apr 18 01:13:21.621798 2026] [:error] [pid 59042:tid 59054] [client 74.234.79.117:10565] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-lo.php"] [unique_id "aeJqMZ6p5oql0UklEBJLJQAAAAc"]
[Sat Apr 18 01:13:22.567220 2026] [:error] [pid 42442:tid 42461] [client 74.234.79.117:34171] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-lo.php"] [unique_id "aeJqMj4PBGqL_yqPJ8kkgQAAARE"]
[Sat Apr 18 01:13:24.056692 2026] [:error] [pid 59136:tid 59144] [client 74.234.79.117:10718] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeJqNCaoiUyiIR3EhLW3ZAAAAMU"]
[Sat Apr 18 01:13:25.486375 2026] [:error] [pid 42442:tid 42455] [client 74.234.79.117:10705] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeJqNT4PBGqL_yqPJ8kkkQAAAQs"]
[Sat Apr 18 01:13:26.627540 2026] [:error] [pid 59044:tid 59110] [client 74.234.79.117:10695] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeJqNgFamkFyEtD_SMG8cQAAAIk"]
[Sat Apr 18 01:13:28.416000 2026] [:error] [pid 63702:tid 63741] [client 74.234.79.117:10632] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeJqOMTL05PWYsKqTEYKiwAAAUM"]
[Sat Apr 18 01:13:29.508972 2026] [:error] [pid 42442:tid 42450] [client 74.234.79.117:10749] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Ipv6.php"] [unique_id "aeJqOT4PBGqL_yqPJ8kkowAAAQY"]
[Sat Apr 18 01:13:30.652978 2026] [:error] [pid 59044:tid 59101] [client 74.234.79.117:10732] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Ipv6.php"] [unique_id "aeJqOgFamkFyEtD_SMG8cwAAAIA"]
[Sat Apr 18 01:13:32.343068 2026] [:error] [pid 59136:tid 59158] [client 74.234.79.117:10569] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Ipv6.php"] [unique_id "aeJqPCaoiUyiIR3EhLW3awAAANM"]
[Sat Apr 18 01:13:33.656878 2026] [:error] [pid 59044:tid 59120] [client 74.234.79.117:34107] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Ipv6.php"] [unique_id "aeJqPQFamkFyEtD_SMG8fwAAAJM"]
[Sat Apr 18 01:13:35.591943 2026] [:error] [pid 59042:tid 59069] [client 74.234.79.117:10734] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeJqP56p5oql0UklEBJLNwAAABY"]
[Sat Apr 18 01:13:37.687873 2026] [:error] [pid 59136:tid 59160] [client 74.234.79.117:10678] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeJqQSaoiUyiIR3EhLW3cgAAANU"]
[Sat Apr 18 01:13:39.694544 2026] [:error] [pid 59043:tid 59095] [client 74.234.79.117:10716] File does not exist: /usr/local/apache/htdocs/suspended-page/file-gertdxz.php
[Sat Apr 18 01:13:40.258224 2026] [:error] [pid 59043:tid 59087] [client 74.234.79.117:10716] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Sat Apr 18 01:13:40.522784 2026] [:error] [pid 59043:tid 59091] [client 74.234.79.117:10716] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Sat Apr 18 01:13:40.775576 2026] [:error] [pid 59043:tid 59097] [client 74.234.79.117:10716] File does not exist: /usr/local/apache/htdocs/suspended-page/wglum1.php
[Sat Apr 18 01:13:41.030991 2026] [:error] [pid 59043:tid 59078] [client 74.234.79.117:10716] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Sat Apr 18 01:13:41.302027 2026] [:error] [pid 59043:tid 59086] [client 74.234.79.117:10716] File does not exist: /usr/local/apache/htdocs/suspended-page/xper.php
[Sat Apr 18 01:13:41.554747 2026] [:error] [pid 59043:tid 59077] [client 74.234.79.117:10716] File does not exist: /usr/local/apache/htdocs/suspended-page/wxpass.php
[Sat Apr 18 01:13:42.254202 2026] [:error] [pid 59043:tid 59081] [client 74.234.79.117:10716] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Sat Apr 18 01:13:42.514345 2026] [:error] [pid 59043:tid 59075] [client 74.234.79.117:10716] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sat Apr 18 01:13:42.769851 2026] [:error] [pid 59043:tid 59080] [client 74.234.79.117:10716] File does not exist: /usr/local/apache/htdocs/suspended-page/x3x.php
[Sat Apr 18 01:13:43.026855 2026] [:error] [pid 59043:tid 59083] [client 74.234.79.117:10716] File does not exist: /usr/local/apache/htdocs/suspended-page/xy.php
[Sat Apr 18 01:13:43.277058 2026] [:error] [pid 59043:tid 59082] [client 74.234.79.117:10716] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/global.php"] [unique_id "aeJqR4RtUGE9SfUh2wwQ5wAAAEg"]
[Sat Apr 18 01:13:45.473735 2026] [:error] [pid 42442:tid 42447] [client 74.234.79.117:10627] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/global.php"] [unique_id "aeJqST4PBGqL_yqPJ8kktQAAAQM"]
[Sat Apr 18 01:13:48.125523 2026] [:error] [pid 59136:tid 59139] [client 74.234.79.117:10644] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/global.php"] [unique_id "aeJqTCaoiUyiIR3EhLW3hwAAAMA"]
[Sat Apr 18 01:13:49.541954 2026] [:error] [pid 42442:tid 42465] [client 74.234.79.117:10595] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/global.php"] [unique_id "aeJqTT4PBGqL_yqPJ8kkvQAAARU"]
[Sat Apr 18 01:13:51.002417 2026] [:error] [pid 42442:tid 42461] [client 74.234.79.117:10653] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeJqTz4PBGqL_yqPJ8kkxAAAARE"]
[Sat Apr 18 01:13:51.828848 2026] [:error] [pid 63702:tid 63759] [client 74.234.79.117:34068] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeJqT8TL05PWYsKqTEYKqwAAAVI"]
[Sat Apr 18 01:13:52.985065 2026] [:error] [pid 42442:tid 42451] [client 74.234.79.117:34068] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeJqUD4PBGqL_yqPJ8kkywAAAQc"]
[Sat Apr 18 01:13:53.730565 2026] [:error] [pid 42442:tid 42461] [client 74.234.79.117:10731] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeJqUT4PBGqL_yqPJ8kk0AAAARE"]
[Sat Apr 18 01:13:56.042761 2026] [:error] [pid 42442:tid 42451] [client 74.234.79.117:10711] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aeJqVD4PBGqL_yqPJ8kk2wAAAQc"]
[Sat Apr 18 01:14:01.332022 2026] [:error] [pid 59042:tid 59052] [client 74.234.79.117:34137] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aeJqWZ6p5oql0UklEBJLXgAAAAU"]
[Sat Apr 18 01:14:02.477908 2026] [:error] [pid 59136:tid 59156] [client 74.234.79.117:10656] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aeJqWiaoiUyiIR3EhLW3mgAAANE"]
[Sat Apr 18 01:14:03.235845 2026] [:error] [pid 59044:tid 59118] [client 74.234.79.117:10703] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aeJqWwFamkFyEtD_SMG8mAAAAJE"]
[Sat Apr 18 01:14:04.195325 2026] [:error] [pid 42442:tid 42454] [client 74.234.79.117:10703] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeJqXD4PBGqL_yqPJ8kk-AAAAQo"]
[Sat Apr 18 01:14:04.919012 2026] [:error] [pid 59043:tid 59081] [client 74.234.79.117:10640] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeJqXIRtUGE9SfUh2wwQ7gAAAEc"]
[Sat Apr 18 01:14:05.858905 2026] [:error] [pid 42442:tid 42444] [client 74.234.79.117:34091] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeJqXT4PBGqL_yqPJ8kk_QAAAQA"]
[Sat Apr 18 01:14:06.949169 2026] [:error] [pid 59044:tid 59107] [client 74.234.79.117:10685] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeJqXgFamkFyEtD_SMG8ngAAAIY"]
[Sat Apr 18 01:14:08.386267 2026] [:error] [pid 59044:tid 59124] [client 74.234.79.117:10691] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeJqYAFamkFyEtD_SMG8oAAAAJc"]
[Sat Apr 18 01:14:09.721295 2026] [:error] [pid 42442:tid 42455] [client 74.234.79.117:34172] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeJqYT4PBGqL_yqPJ8klDAAAAQs"]
[Sat Apr 18 01:14:12.956412 2026] [:error] [pid 42442:tid 42466] [client 74.234.79.117:10708] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeJqZD4PBGqL_yqPJ8klGgAAARY"]
[Sat Apr 18 01:14:16.740836 2026] [:error] [pid 42442:tid 42465] [client 74.234.79.117:10736] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeJqaD4PBGqL_yqPJ8klNQAAARU"]
[Sat Apr 18 01:14:20.416140 2026] [:error] [pid 42442:tid 42464] [client 74.234.79.117:10649] [client 74.234.79.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeJqbD4PBGqL_yqPJ8klSAAAARQ"]
[Sat Apr 18 01:14:23.090057 2026] [:error] [pid 59042:tid 59054] [client 74.234.79.117:10665] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeJqb56p5oql0UklEBJLhgAAAAc"]
[Sat Apr 18 01:14:31.272003 2026] [:error] [pid 42442:tid 42457] [client 74.234.79.117:10568] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeJqdz4PBGqL_yqPJ8klYAAAAQ0"]
[Sat Apr 18 01:14:36.110912 2026] [:error] [pid 42442:tid 42452] [client 74.234.79.117:34101] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeJqfD4PBGqL_yqPJ8klZQAAAQg"]
[Sat Apr 18 01:14:36.745650 2026] [:error] [pid 59043:tid 59096] [client 74.234.79.117:10738] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeJqfIRtUGE9SfUh2wwRDAAAAFY"]
[Sat Apr 18 01:14:38.597200 2026] [:error] [pid 59043:tid 59089] [client 74.234.79.117:34098] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeJqfoRtUGE9SfUh2wwREAAAAE8"]
[Sat Apr 18 01:14:39.568955 2026] [:error] [pid 63702:tid 63740] [client 74.234.79.117:10689] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeJqf8TL05PWYsKqTEYK3gAAAUI"]
[Sat Apr 18 01:14:42.232463 2026] [:error] [pid 59044:tid 59101] [client 74.234.79.117:34117] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeJqggFamkFyEtD_SMG8twAAAIA"]
[Sat Apr 18 01:14:43.017660 2026] [:error] [pid 63702:tid 63749] [client 74.234.79.117:10667] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Sat Apr 18 01:14:43.337324 2026] [:error] [pid 63702:tid 63747] [client 74.234.79.117:10667] File does not exist: /usr/local/apache/htdocs/suspended-page/ws57.php
[Sat Apr 18 01:14:43.605668 2026] [:error] [pid 63702:tid 63740] [client 74.234.79.117:10667] File does not exist: /usr/local/apache/htdocs/suspended-page/ws61.php
[Sat Apr 18 01:14:44.179038 2026] [:error] [pid 63702:tid 63753] [client 74.234.79.117:10667] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Sat Apr 18 01:14:44.460477 2026] [:error] [pid 63702:tid 63737] [client 74.234.79.117:10667] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Sat Apr 18 01:14:44.745861 2026] [:error] [pid 63702:tid 63763] [client 74.234.79.117:10667] File does not exist: /usr/local/apache/htdocs/suspended-page/xynz.php
[Sat Apr 18 01:14:45.014118 2026] [:error] [pid 63702:tid 63756] [client 74.234.79.117:10667] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-01ul.php
[Sat Apr 18 01:14:45.282517 2026] [:error] [pid 63702:tid 63764] [client 74.234.79.117:10667] File does not exist: /usr/local/apache/htdocs/suspended-page/e7.php
[Sat Apr 18 01:14:45.559318 2026] [:error] [pid 63702:tid 63746] [client 74.234.79.117:10667] File does not exist: /usr/local/apache/htdocs/suspended-page/e3.php
[Sat Apr 18 01:14:45.965335 2026] [:error] [pid 63702:tid 63741] [client 74.234.79.117:10667] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Sat Apr 18 01:14:46.248020 2026] [:error] [pid 63702:tid 63760] [client 74.234.79.117:10667] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Sat Apr 18 01:14:46.514092 2026] [:error] [pid 63702:tid 63747] [client 74.234.79.117:10667] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aeJqhsTL05PWYsKqTEYK_gAAAUg"]
[Sat Apr 18 01:14:49.687861 2026] [:error] [pid 42442:tid 42448] [client 74.234.79.117:10624] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aeJqiT4PBGqL_yqPJ8klfgAAAQQ"]
[Sat Apr 18 01:14:51.295625 2026] [:error] [pid 59136:tid 59152] [client 74.234.79.117:10605] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aeJqiyaoiUyiIR3EhLW32QAAAM0"]
[Sat Apr 18 01:14:52.609820 2026] [:error] [pid 59042:tid 59057] [client 74.234.79.117:10646] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aeJqjJ6p5oql0UklEBJL6AAAAAo"]
[Sat Apr 18 01:14:53.887616 2026] [:error] [pid 42442:tid 42468] [client 74.234.79.117:10745] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aeJqjT4PBGqL_yqPJ8klmwAAARg"]
[Sat Apr 18 01:14:54.804075 2026] [:error] [pid 63702:tid 63754] [client 74.234.79.117:10645] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aeJqjsTL05PWYsKqTEYLCgAAAU0"]
[Sat Apr 18 01:14:56.122751 2026] [:error] [pid 59043:tid 59074] [client 74.234.79.117:10636] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aeJqkIRtUGE9SfUh2wwRJwAAAEA"]
[Sat Apr 18 01:14:56.878006 2026] [:error] [pid 59042:tid 59055] [client 74.234.79.117:10502] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aeJqkJ6p5oql0UklEBJL9gAAAAg"]
[Sat Apr 18 01:14:57.859934 2026] [:error] [pid 63702:tid 63761] [client 74.234.79.117:10655] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "aeJqkcTL05PWYsKqTEYLFgAAAVQ"]
[Sat Apr 18 01:14:58.559274 2026] [:error] [pid 59043:tid 59098] [client 74.234.79.117:10672] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "aeJqkoRtUGE9SfUh2wwRMgAAAFg"]
[Sat Apr 18 01:14:59.318101 2026] [:error] [pid 63702:tid 63749] [client 74.234.79.117:10641] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "aeJqk8TL05PWYsKqTEYLHwAAAUk"]
[Sat Apr 18 01:15:00.359727 2026] [:error] [pid 42442:tid 42462] [client 74.234.79.117:34095] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "aeJqlD4PBGqL_yqPJ8klpAAAARI"]
[Sat Apr 18 01:15:01.383378 2026] [:error] [pid 42442:tid 42447] [client 74.234.79.117:10680] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "aeJqlT4PBGqL_yqPJ8klqgAAAQM"]
[Sat Apr 18 01:15:02.182883 2026] [:error] [pid 42442:tid 42446] [client 74.234.79.117:10699] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "aeJqlj4PBGqL_yqPJ8klsgAAAQI"]
[Sat Apr 18 01:15:03.391554 2026] [:error] [pid 42442:tid 42465] [client 74.234.79.117:34142] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "aeJqlz4PBGqL_yqPJ8klvwAAARU"]
[Sat Apr 18 01:15:05.854972 2026] [:error] [pid 42442:tid 42448] [client 74.234.79.117:34135] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "aeJqmT4PBGqL_yqPJ8klyQAAAQQ"]
[Sat Apr 18 01:15:08.217244 2026] [:error] [pid 63702:tid 63745] [client 74.234.79.117:10675] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeJqnMTL05PWYsKqTEYLNQAAAUY"]
[Sat Apr 18 01:15:09.370329 2026] [:error] [pid 59136:tid 59159] [client 74.234.79.117:10724] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeJqnSaoiUyiIR3EhLW38QAAANQ"]
[Sat Apr 18 01:15:10.379359 2026] [:error] [pid 42442:tid 42446] [client 74.234.79.117:10600] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeJqnj4PBGqL_yqPJ8kl1wAAAQI"]
[Sat Apr 18 01:15:11.167023 2026] [:error] [pid 59044:tid 59106] [client 74.234.79.117:34084] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeJqnwFamkFyEtD_SMG81AAAAIU"]
[Sat Apr 18 01:15:12.717604 2026] [:error] [pid 59136:tid 59142] [client 74.234.79.117:10712] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/curl.php"] [unique_id "aeJqoCaoiUyiIR3EhLW38gAAAMM"]
[Sat Apr 18 01:15:13.583589 2026] [:error] [pid 59044:tid 59103] [client 74.234.79.117:10663] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/curl.php"] [unique_id "aeJqoQFamkFyEtD_SMG82AAAAII"]
[Sat Apr 18 01:15:14.364593 2026] [:error] [pid 42442:tid 42447] [client 74.234.79.117:10566] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/curl.php"] [unique_id "aeJqoj4PBGqL_yqPJ8kl6wAAAQM"]
[Sat Apr 18 01:15:15.818031 2026] [:error] [pid 59044:tid 59113] [client 74.234.79.117:10674] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/curl.php"] [unique_id "aeJqowFamkFyEtD_SMG85QAAAIw"]
[Sat Apr 18 01:15:17.216658 2026] [:error] [pid 59042:tid 59063] [client 74.234.79.117:10564] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aeJqpZ6p5oql0UklEBJMKQAAABA"]
[Sat Apr 18 01:15:18.696423 2026] [:error] [pid 63702:tid 63758] [client 74.234.79.117:10669] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aeJqpsTL05PWYsKqTEYLTgAAAVE"]
[Sat Apr 18 01:15:19.643387 2026] [:error] [pid 63702:tid 63762] [client 74.234.79.117:10582] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aeJqp8TL05PWYsKqTEYLTwAAAVU"]
[Sat Apr 18 01:15:20.718487 2026] [:error] [pid 63702:tid 63737] [client 74.234.79.117:10717] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aeJqqMTL05PWYsKqTEYLUQAAAUA"]
[Sat Apr 18 01:15:22.631224 2026] [:error] [pid 59042:tid 59056] [client 74.234.79.117:10633] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aeJqqp6p5oql0UklEBJMLgAAAAk"]
[Sat Apr 18 01:15:24.941479 2026] [:error] [pid 63702:tid 63751] [client 74.234.79.117:10572] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aeJqrMTL05PWYsKqTEYLXAAAAUs"]
[Sat Apr 18 01:15:25.962446 2026] [:error] [pid 42442:tid 42467] [client 74.234.79.117:10563] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aeJqrT4PBGqL_yqPJ8kmMgAAARc"]
[Sat Apr 18 01:15:27.039195 2026] [:error] [pid 59042:tid 59062] [client 74.234.79.117:10682] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aeJqr56p5oql0UklEBJMOAAAAA8"]
[Sat Apr 18 01:15:28.051125 2026] [:error] [pid 59042:tid 59047] [client 74.234.79.117:10584] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeJqsJ6p5oql0UklEBJMQAAAAAA"]
[Sat Apr 18 01:15:28.892806 2026] [:error] [pid 59043:tid 59090] [client 74.234.79.117:10694] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeJqsIRtUGE9SfUh2wwRPQAAAFA"]
[Sat Apr 18 01:15:29.612573 2026] [:error] [pid 42442:tid 42448] [client 74.234.79.117:10578] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeJqsT4PBGqL_yqPJ8kmOAAAAQQ"]
[Sat Apr 18 01:15:30.190350 2026] [:error] [pid 59042:tid 59066] [client 74.234.79.117:10591] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeJqsp6p5oql0UklEBJMSAAAABM"]
[Sat Apr 18 01:15:30.852429 2026] [:error] [pid 59136:tid 59144] [client 74.234.79.117:10726] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aeJqsiaoiUyiIR3EhLW4HgAAAMU"]
[Sat Apr 18 01:15:31.523013 2026] [:error] [pid 59136:tid 59163] [client 74.234.79.117:34077] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aeJqsyaoiUyiIR3EhLW4IwAAANg"]
[Sat Apr 18 01:15:32.197492 2026] [:error] [pid 59043:tid 59080] [client 74.234.79.117:10621] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aeJqtIRtUGE9SfUh2wwRRgAAAEY"]
[Sat Apr 18 01:15:32.967842 2026] [:error] [pid 59042:tid 59071] [client 74.234.79.117:10670] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aeJqtJ6p5oql0UklEBJMVQAAABg"]
[Sat Apr 18 01:15:33.665392 2026] [:error] [pid 63702:tid 63756] [client 74.234.79.117:10529] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeJqtcTL05PWYsKqTEYLhwAAAU8"]
[Sat Apr 18 01:15:34.427804 2026] [:error] [pid 59044:tid 59118] [client 74.234.79.117:10660] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeJqtgFamkFyEtD_SMG9AwAAAJE"]
[Sat Apr 18 01:15:35.556575 2026] [:error] [pid 42442:tid 42467] [client 74.234.79.117:34101] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeJqtz4PBGqL_yqPJ8kmXwAAARc"]
[Sat Apr 18 01:15:36.518745 2026] [:error] [pid 59044:tid 59103] [client 74.234.79.117:10683] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeJquAFamkFyEtD_SMG9BwAAAII"]
[Sat Apr 18 01:15:37.241504 2026] [:error] [pid 42442:tid 42458] [client 74.234.79.117:34122] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeJquT4PBGqL_yqPJ8kmbgAAAQ4"]
[Sat Apr 18 01:15:38.396489 2026] [:error] [pid 63702:tid 63761] [client 74.234.79.117:34163] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeJqusTL05PWYsKqTEYLmAAAAVQ"]
[Sat Apr 18 01:15:39.741302 2026] [:error] [pid 59044:tid 59117] [client 74.234.79.117:10639] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeJquwFamkFyEtD_SMG9CgAAAJA"]
[Sat Apr 18 01:15:40.985810 2026] [:error] [pid 59044:tid 59111] [client 74.234.79.117:34159] [client 74.234.79.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeJqvAFamkFyEtD_SMG9DgAAAIo"]
[Sat Apr 18 02:27:32.961581 2026] [:error] [pid 42442:tid 42459] [client 20.215.244.72:30326] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Sat Apr 18 02:27:33.219277 2026] [:error] [pid 42442:tid 42453] [client 20.215.244.72:30326] File does not exist: /usr/local/apache/htdocs/suspended-page/sl.php
[Sat Apr 18 02:27:33.478768 2026] [:error] [pid 42442:tid 42455] [client 20.215.244.72:30326] File does not exist: /usr/local/apache/htdocs/suspended-page/flox.php
[Sat Apr 18 02:27:33.752875 2026] [:error] [pid 42442:tid 42464] [client 20.215.244.72:30326] File does not exist: /usr/local/apache/htdocs/suspended-page/mff.php
[Sat Apr 18 02:27:34.010508 2026] [:error] [pid 42442:tid 42444] [client 20.215.244.72:30326] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Sat Apr 18 02:27:34.299125 2026] [:error] [pid 42442:tid 42466] [client 20.215.244.72:30326] File does not exist: /usr/local/apache/htdocs/suspended-page/filemanger2.php
[Sat Apr 18 02:27:34.576996 2026] [:error] [pid 42442:tid 42454] [client 20.215.244.72:30326] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Sat Apr 18 02:27:34.839325 2026] [:error] [pid 42442:tid 42451] [client 20.215.244.72:30326] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-vn1.php
[Sat Apr 18 02:27:35.097077 2026] [:error] [pid 42442:tid 42449] [client 20.215.244.72:30326] File does not exist: /usr/local/apache/htdocs/suspended-page/ewp.php
[Sat Apr 18 02:27:35.391950 2026] [:error] [pid 42442:tid 42448] [client 20.215.244.72:30326] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Sat Apr 18 02:27:35.898624 2026] [:error] [pid 42442:tid 42460] [client 20.215.244.72:30326] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "aeJ7lz4PBGqL_yqPJ8lNkgAAARA"]
[Sat Apr 18 02:27:37.756529 2026] [:error] [pid 42442:tid 42468] [client 20.215.244.72:41823] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "aeJ7mT4PBGqL_yqPJ8lNlQAAARg"]
[Sat Apr 18 02:27:39.463443 2026] [:error] [pid 42442:tid 42463] [client 20.215.244.72:41837] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "aeJ7mz4PBGqL_yqPJ8lNmwAAARM"]
[Sat Apr 18 02:27:41.474653 2026] [:error] [pid 42442:tid 42462] [client 20.215.244.72:45636] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "aeJ7nT4PBGqL_yqPJ8lNpgAAARI"]
[Sat Apr 18 02:27:42.521863 2026] [:error] [pid 59042:tid 59050] [client 20.215.244.72:41809] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeJ7np6p5oql0UklEBJkWQAAAAM"]
[Sat Apr 18 02:27:43.502593 2026] [:error] [pid 59043:tid 59077] [client 20.215.244.72:51777] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeJ7n4RtUGE9SfUh2wwg8gAAAEM"]
[Sat Apr 18 02:27:44.745438 2026] [:error] [pid 59136:tid 59149] [client 20.215.244.72:52517] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeJ7oCaoiUyiIR3EhLXM7wAAAMo"]
[Sat Apr 18 02:27:45.997535 2026] [:error] [pid 42442:tid 42448] [client 20.215.244.72:26357] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeJ7oT4PBGqL_yqPJ8lNswAAAQQ"]
[Sat Apr 18 02:27:48.892307 2026] [:error] [pid 59042:tid 59065] [client 20.215.244.72:52497] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeJ7pJ6p5oql0UklEBJkWgAAABI"]
[Sat Apr 18 02:27:49.861134 2026] [:error] [pid 42442:tid 42466] [client 20.215.244.72:51786] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeJ7pT4PBGqL_yqPJ8lNwgAAARY"]
[Sat Apr 18 02:27:50.689151 2026] [:error] [pid 42442:tid 42454] [client 20.215.244.72:26313] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeJ7pj4PBGqL_yqPJ8lNxQAAAQo"]
[Sat Apr 18 02:27:51.558863 2026] [:error] [pid 59043:tid 59081] [client 20.215.244.72:51797] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeJ7p4RtUGE9SfUh2wwg9wAAAEc"]
[Sat Apr 18 02:27:52.265549 2026] [:error] [pid 42442:tid 42446] [client 20.215.244.72:30274] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aeJ7qD4PBGqL_yqPJ8lN0AAAAQI"]
[Sat Apr 18 02:27:53.079310 2026] [:error] [pid 59042:tid 59060] [client 20.215.244.72:56007] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aeJ7qZ6p5oql0UklEBJkXAAAAA0"]
[Sat Apr 18 02:27:53.686685 2026] [:error] [pid 59136:tid 59152] [client 20.215.244.72:56014] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aeJ7qSaoiUyiIR3EhLXM8wAAAM0"]
[Sat Apr 18 02:27:56.771122 2026] [:error] [pid 59043:tid 59087] [client 20.215.244.72:34440] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aeJ7rIRtUGE9SfUh2wwg_gAAAE0"]
[Sat Apr 18 02:27:58.545608 2026] [:error] [pid 63702:tid 63754] [client 20.215.244.72:62231] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aeJ7rsTL05PWYsKqTEYqHAAAAU0"]
[Sat Apr 18 02:27:59.766447 2026] [:error] [pid 42442:tid 42461] [client 20.215.244.72:62259] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aeJ7rz4PBGqL_yqPJ8lN5gAAARE"]
[Sat Apr 18 02:28:00.521719 2026] [:error] [pid 59042:tid 59064] [client 20.215.244.72:41820] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aeJ7sJ6p5oql0UklEBJkfQAAABE"]
[Sat Apr 18 02:28:01.616096 2026] [:error] [pid 42442:tid 42465] [client 20.215.244.72:52530] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aeJ7sT4PBGqL_yqPJ8lN7AAAARU"]
[Sat Apr 18 02:28:02.530373 2026] [:error] [pid 42442:tid 42452] [client 20.215.244.72:42388] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeJ7sj4PBGqL_yqPJ8lN9AAAAQg"]
[Sat Apr 18 02:28:03.642442 2026] [:error] [pid 42442:tid 42450] [client 20.215.244.72:4055] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeJ7sz4PBGqL_yqPJ8lN_AAAAQY"]
[Sat Apr 18 02:28:04.383274 2026] [:error] [pid 63702:tid 63744] [client 20.215.244.72:4088] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeJ7tMTL05PWYsKqTEYqHwAAAUU"]
[Sat Apr 18 02:28:05.185009 2026] [:error] [pid 63702:tid 63745] [client 20.215.244.72:49074] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeJ7tcTL05PWYsKqTEYqJgAAAUY"]
[Sat Apr 18 02:28:06.660729 2026] [:error] [pid 59043:tid 59081] [client 20.215.244.72:45663] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aeJ7toRtUGE9SfUh2wwhFgAAAEc"]
[Sat Apr 18 02:28:07.454701 2026] [:error] [pid 42442:tid 42453] [client 20.215.244.72:4074] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aeJ7tz4PBGqL_yqPJ8lOCQAAAQk"]
[Sat Apr 18 02:28:08.371694 2026] [:error] [pid 42442:tid 42466] [client 20.215.244.72:3383] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aeJ7uD4PBGqL_yqPJ8lODgAAARY"]
[Sat Apr 18 02:28:09.600763 2026] [:error] [pid 63702:tid 63762] [client 20.215.244.72:62243] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aeJ7ucTL05PWYsKqTEYqLgAAAVU"]
[Sat Apr 18 02:28:10.626581 2026] [:error] [pid 59044:tid 59111] [client 20.215.244.72:52503] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/water.php"] [unique_id "aeJ7ugFamkFyEtD_SMHOagAAAIo"]
[Sat Apr 18 02:28:11.365707 2026] [:error] [pid 59044:tid 59124] [client 20.215.244.72:30315] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/water.php"] [unique_id "aeJ7uwFamkFyEtD_SMHObgAAAJc"]
[Sat Apr 18 02:28:12.478352 2026] [:error] [pid 42442:tid 42468] [client 20.215.244.72:59355] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/water.php"] [unique_id "aeJ7vD4PBGqL_yqPJ8lOIAAAARg"]
[Sat Apr 18 02:28:13.555003 2026] [:error] [pid 42442:tid 42450] [client 20.215.244.72:49069] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/water.php"] [unique_id "aeJ7vT4PBGqL_yqPJ8lOKgAAAQY"]
[Sat Apr 18 02:28:14.955819 2026] [:error] [pid 63702:tid 63739] [client 20.215.244.72:42406] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "aeJ7vsTL05PWYsKqTEYqMgAAAUE"]
[Sat Apr 18 02:28:16.234393 2026] [:error] [pid 42442:tid 42459] [client 20.215.244.72:59365] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "aeJ7wD4PBGqL_yqPJ8lONwAAAQ8"]
[Sat Apr 18 02:28:17.735097 2026] [:error] [pid 63702:tid 63760] [client 20.215.244.72:51784] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "aeJ7wcTL05PWYsKqTEYqPAAAAVM"]
[Sat Apr 18 02:28:19.479606 2026] [:error] [pid 42442:tid 42468] [client 20.215.244.72:3338] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "aeJ7wz4PBGqL_yqPJ8lOPQAAARg"]
[Sat Apr 18 02:28:20.738086 2026] [:error] [pid 59136:tid 59154] [client 20.215.244.72:26009] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aeJ7xCaoiUyiIR3EhLXNAgAAAM8"]
[Sat Apr 18 02:28:21.824704 2026] [:error] [pid 42442:tid 42460] [client 20.215.244.72:4010] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aeJ7xT4PBGqL_yqPJ8lOQwAAARA"]
[Sat Apr 18 02:28:23.383045 2026] [:error] [pid 63702:tid 63763] [client 20.215.244.72:54776] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aeJ7x8TL05PWYsKqTEYqRQAAAVY"]
[Sat Apr 18 02:28:25.745783 2026] [:error] [pid 63702:tid 63764] [client 20.215.244.72:3334] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aeJ7ycTL05PWYsKqTEYqTgAAAVc"]
[Sat Apr 18 02:28:29.121697 2026] [:error] [pid 42442:tid 42450] [client 20.215.244.72:48965] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "aeJ7zT4PBGqL_yqPJ8lOTwAAAQY"]
[Sat Apr 18 02:28:31.074434 2026] [:error] [pid 42442:tid 42466] [client 20.215.244.72:46493] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "aeJ7zz4PBGqL_yqPJ8lOWgAAARY"]
[Sat Apr 18 02:28:32.439491 2026] [:error] [pid 59136:tid 59158] [client 20.215.244.72:38477] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "aeJ70CaoiUyiIR3EhLXNBgAAANM"]
[Sat Apr 18 02:28:33.936348 2026] [:error] [pid 42442:tid 42452] [client 20.215.244.72:3202] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "aeJ70T4PBGqL_yqPJ8lOZAAAAQg"]
[Sat Apr 18 02:28:36.946283 2026] [:error] [pid 42442:tid 42449] [client 20.215.244.72:47338] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Sat Apr 18 02:28:37.779717 2026] [:error] [pid 42442:tid 42452] [client 20.215.244.72:47338] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Sat Apr 18 02:28:38.058784 2026] [:error] [pid 42442:tid 42460] [client 20.215.244.72:47338] File does not exist: /usr/local/apache/htdocs/suspended-page/oij98gy.php
[Sat Apr 18 02:28:38.601522 2026] [:error] [pid 42442:tid 42463] [client 20.215.244.72:47338] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Sat Apr 18 02:28:38.884115 2026] [:error] [pid 42442:tid 42445] [client 20.215.244.72:47338] File does not exist: /usr/local/apache/htdocs/suspended-page/turkshell.php
[Sat Apr 18 02:28:39.181367 2026] [:error] [pid 42442:tid 42455] [client 20.215.244.72:47338] File does not exist: /usr/local/apache/htdocs/suspended-page/tea.php
[Sat Apr 18 02:28:39.569577 2026] [:error] [pid 42442:tid 42448] [client 20.215.244.72:47338] File does not exist: /usr/local/apache/htdocs/suspended-page/seo.php
[Sat Apr 18 02:28:39.829548 2026] [:error] [pid 42442:tid 42449] [client 20.215.244.72:47338] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Sat Apr 18 02:28:40.087351 2026] [:error] [pid 42442:tid 42457] [client 20.215.244.72:47338] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sat Apr 18 02:28:40.352975 2026] [:error] [pid 42442:tid 42450] [client 20.215.244.72:47338] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat Apr 18 02:28:40.634378 2026] [:error] [pid 42442:tid 42460] [client 20.215.244.72:47338] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Sat Apr 18 02:28:41.091496 2026] [:error] [pid 42442:tid 42461] [client 20.215.244.72:47338] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aeJ72T4PBGqL_yqPJ8lOfwAAARE"]
[Sat Apr 18 02:28:42.318013 2026] [:error] [pid 63702:tid 63744] [client 20.215.244.72:60372] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aeJ72sTL05PWYsKqTEYqeAAAAUU"]
[Sat Apr 18 02:28:44.276063 2026] [:error] [pid 42442:tid 42452] [client 20.215.244.72:51243] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aeJ73D4PBGqL_yqPJ8lOjAAAAQg"]
[Sat Apr 18 02:28:46.410638 2026] [:error] [pid 42442:tid 42447] [client 20.215.244.72:37426] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aeJ73j4PBGqL_yqPJ8lOlQAAAQM"]
[Sat Apr 18 02:28:47.368836 2026] [:error] [pid 59042:tid 59050] [client 20.215.244.72:45197] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aeJ7356p5oql0UklEBJkrQAAAAM"]
[Sat Apr 18 02:28:48.707318 2026] [:error] [pid 63702:tid 63739] [client 20.215.244.72:3437] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aeJ74MTL05PWYsKqTEYqiwAAAUE"]
[Sat Apr 18 02:28:50.062190 2026] [:error] [pid 42442:tid 42461] [client 20.215.244.72:47095] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aeJ74j4PBGqL_yqPJ8lOogAAARE"]
[Sat Apr 18 02:28:51.472923 2026] [:error] [pid 59136:tid 59141] [client 20.215.244.72:42495] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aeJ74yaoiUyiIR3EhLXNEQAAAMI"]
[Sat Apr 18 02:28:53.711884 2026] [:error] [pid 42442:tid 42459] [client 20.215.244.72:49456] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aeJ75T4PBGqL_yqPJ8lOrgAAAQ8"]
[Sat Apr 18 02:28:54.909889 2026] [:error] [pid 59043:tid 59085] [client 20.215.244.72:42460] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aeJ75oRtUGE9SfUh2wwhNgAAAEs"]
[Sat Apr 18 02:28:56.097421 2026] [:error] [pid 63702:tid 63753] [client 20.215.244.72:60427] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aeJ76MTL05PWYsKqTEYqnwAAAUw"]
[Sat Apr 18 02:28:57.220400 2026] [:error] [pid 63702:tid 63740] [client 20.215.244.72:24111] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aeJ76cTL05PWYsKqTEYqpAAAAUI"]
[Sat Apr 18 02:28:58.548449 2026] [:error] [pid 63702:tid 63763] [client 20.215.244.72:24098] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aeJ76sTL05PWYsKqTEYqqgAAAVY"]
[Sat Apr 18 02:28:59.302752 2026] [:error] [pid 63702:tid 63741] [client 20.215.244.72:60452] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aeJ768TL05PWYsKqTEYqrwAAAUM"]
[Sat Apr 18 02:29:00.211378 2026] [:error] [pid 59044:tid 59108] [client 20.215.244.72:42839] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aeJ77AFamkFyEtD_SMHOnQAAAIc"]
[Sat Apr 18 02:29:00.764931 2026] [:error] [pid 59136:tid 59145] [client 20.215.244.72:39676] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aeJ77CaoiUyiIR3EhLXNGQAAAMY"]
[Sat Apr 18 02:29:01.435008 2026] [:error] [pid 63702:tid 63758] [client 20.215.244.72:51775] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "aeJ77cTL05PWYsKqTEYqvgAAAVE"]
[Sat Apr 18 02:29:02.353386 2026] [:error] [pid 59042:tid 59056] [client 20.215.244.72:26779] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "aeJ77p6p5oql0UklEBJktAAAAAk"]
[Sat Apr 18 02:29:03.108074 2026] [:error] [pid 59043:tid 59094] [client 20.215.244.72:29158] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "aeJ774RtUGE9SfUh2wwhPgAAAFQ"]
[Sat Apr 18 02:29:03.843611 2026] [:error] [pid 63702:tid 63756] [client 20.215.244.72:28051] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "aeJ778TL05PWYsKqTEYqwQAAAU8"]
[Sat Apr 18 02:29:04.455135 2026] [:error] [pid 63702:tid 63761] [client 20.215.244.72:29172] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aeJ78MTL05PWYsKqTEYqxQAAAVQ"]
[Sat Apr 18 02:29:05.185776 2026] [:error] [pid 59042:tid 59068] [client 20.215.244.72:35018] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aeJ78Z6p5oql0UklEBJkugAAABU"]
[Sat Apr 18 02:29:05.941734 2026] [:error] [pid 42442:tid 42453] [client 20.215.244.72:26408] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aeJ78T4PBGqL_yqPJ8lOwwAAAQk"]
[Sat Apr 18 02:29:06.518167 2026] [:error] [pid 59136:tid 59140] [client 20.215.244.72:28402] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aeJ78iaoiUyiIR3EhLXNIgAAAME"]
[Sat Apr 18 02:29:07.366134 2026] [:error] [pid 59043:tid 59078] [client 20.215.244.72:35026] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.mopj.php"] [unique_id "aeJ784RtUGE9SfUh2wwhRgAAAEQ"]
[Sat Apr 18 02:29:08.580347 2026] [:error] [pid 63702:tid 63755] [client 20.215.244.72:24111] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.mopj.php"] [unique_id "aeJ79MTL05PWYsKqTEYqygAAAU4"]
[Sat Apr 18 02:29:09.830675 2026] [:error] [pid 63702:tid 63761] [client 20.215.244.72:41148] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.mopj.php"] [unique_id "aeJ79cTL05PWYsKqTEYq1AAAAVQ"]
[Sat Apr 18 02:29:10.785780 2026] [:error] [pid 59044:tid 59118] [client 20.215.244.72:3110] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.mopj.php"] [unique_id "aeJ79gFamkFyEtD_SMHOpAAAAJE"]
[Sat Apr 18 02:29:11.462350 2026] [:error] [pid 59044:tid 59123] [client 20.215.244.72:43560] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeJ79wFamkFyEtD_SMHOpQAAAJY"]
[Sat Apr 18 02:29:12.123560 2026] [:error] [pid 42442:tid 42448] [client 20.215.244.72:39676] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeJ7-D4PBGqL_yqPJ8lO0AAAAQQ"]
[Sat Apr 18 02:29:13.559298 2026] [:error] [pid 42442:tid 42468] [client 20.215.244.72:29160] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeJ7-T4PBGqL_yqPJ8lO3AAAARg"]
[Sat Apr 18 02:29:14.532425 2026] [:error] [pid 42442:tid 42467] [client 20.215.244.72:50473] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeJ7-j4PBGqL_yqPJ8lO4wAAARc"]
[Sat Apr 18 02:29:15.567181 2026] [:error] [pid 59044:tid 59112] [client 20.215.244.72:3277] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nano.php"] [unique_id "aeJ7-wFamkFyEtD_SMHOqQAAAIs"]
[Sat Apr 18 02:29:16.598468 2026] [:error] [pid 59042:tid 59063] [client 20.215.244.72:3119] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nano.php"] [unique_id "aeJ7_J6p5oql0UklEBJk8gAAABA"]
[Sat Apr 18 02:29:17.365831 2026] [:error] [pid 59044:tid 59117] [client 20.215.244.72:24443] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nano.php"] [unique_id "aeJ7_QFamkFyEtD_SMHOsAAAAJA"]
[Sat Apr 18 02:29:18.353332 2026] [:error] [pid 59042:tid 59049] [client 20.215.244.72:28088] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nano.php"] [unique_id "aeJ7_p6p5oql0UklEBJlAQAAAAI"]
[Sat Apr 18 02:29:19.456429 2026] [:error] [pid 59044:tid 59121] [client 20.215.244.72:50448] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35_S.php"] [unique_id "aeJ7_wFamkFyEtD_SMHOswAAAJQ"]
[Sat Apr 18 02:29:20.727833 2026] [:error] [pid 59044:tid 59102] [client 20.215.244.72:41137] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35_S.php"] [unique_id "aeJ8AAFamkFyEtD_SMHOuAAAAIE"]
[Sat Apr 18 02:29:22.911503 2026] [:error] [pid 42442:tid 42457] [client 20.215.244.72:24385] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35_S.php"] [unique_id "aeJ8Aj4PBGqL_yqPJ8lO7gAAAQ0"]
[Sat Apr 18 02:29:24.534277 2026] [:error] [pid 59043:tid 59079] [client 20.215.244.72:62429] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35_S.php"] [unique_id "aeJ8BIRtUGE9SfUh2wwhWgAAAEU"]
[Sat Apr 18 02:29:25.819471 2026] [:error] [pid 63702:tid 63754] [client 20.215.244.72:31228] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aeJ8BcTL05PWYsKqTEYrAAAAAU0"]
[Sat Apr 18 02:29:27.401033 2026] [:error] [pid 59136:tid 59163] [client 20.215.244.72:40521] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aeJ8ByaoiUyiIR3EhLXNLAAAANg"]
[Sat Apr 18 02:29:29.040443 2026] [:error] [pid 59136:tid 59147] [client 20.215.244.72:40546] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aeJ8CSaoiUyiIR3EhLXNMAAAAMg"]
[Sat Apr 18 02:29:33.218828 2026] [:error] [pid 59043:tid 59074] [client 20.215.244.72:62406] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aeJ8DYRtUGE9SfUh2wwhagAAAEA"]
[Sat Apr 18 02:29:34.167465 2026] [:error] [pid 59136:tid 59142] [client 20.215.244.72:41099] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aeJ8DiaoiUyiIR3EhLXNPAAAAMM"]
[Sat Apr 18 02:29:36.001718 2026] [:error] [pid 42442:tid 42444] [client 20.215.244.72:38878] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aeJ8ED4PBGqL_yqPJ8lPBgAAAQA"]
[Sat Apr 18 02:29:37.617953 2026] [:error] [pid 63702:tid 63741] [client 20.215.244.72:41117] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aeJ8EcTL05PWYsKqTEYrHgAAAUM"]
[Sat Apr 18 02:29:38.779807 2026] [:error] [pid 59136:tid 59159] [client 20.215.244.72:59886] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aeJ8EiaoiUyiIR3EhLXNRwAAANQ"]
[Sat Apr 18 02:29:40.099028 2026] [:error] [pid 59042:tid 59051] [client 20.215.244.72:47019] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Sat Apr 18 02:29:40.586468 2026] [:error] [pid 59042:tid 59052] [client 20.215.244.72:47019] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Sat Apr 18 02:29:40.855460 2026] [:error] [pid 59042:tid 59057] [client 20.215.244.72:47019] File does not exist: /usr/local/apache/htdocs/suspended-page/byrgo.php
[Sat Apr 18 02:29:41.113278 2026] [:error] [pid 59042:tid 59059] [client 20.215.244.72:47019] File does not exist: /usr/local/apache/htdocs/suspended-page/xwpg.php
[Sat Apr 18 02:29:41.371090 2026] [:error] [pid 59042:tid 59055] [client 20.215.244.72:47019] File does not exist: /usr/local/apache/htdocs/suspended-page/ass.php
[Sat Apr 18 02:29:41.628437 2026] [:error] [pid 59042:tid 59056] [client 20.215.244.72:47019] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Apr 18 02:29:41.885852 2026] [:error] [pid 59042:tid 59064] [client 20.215.244.72:47019] File does not exist: /usr/local/apache/htdocs/suspended-page/no18.php
[Sat Apr 18 02:29:42.144732 2026] [:error] [pid 59042:tid 59053] [client 20.215.244.72:47019] File does not exist: /usr/local/apache/htdocs/suspended-page/fine.php
[Sat Apr 18 02:29:42.402288 2026] [:error] [pid 59042:tid 59066] [client 20.215.244.72:47019] File does not exist: /usr/local/apache/htdocs/suspended-page/zample.php
[Sat Apr 18 02:29:42.928398 2026] [:error] [pid 59042:tid 59049] [client 20.215.244.72:47019] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Sat Apr 18 02:29:43.185186 2026] [:error] [pid 59042:tid 59067] [client 20.215.244.72:47019] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Sat Apr 18 02:29:43.439977 2026] [:error] [pid 59042:tid 59069] [client 20.215.244.72:47019] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aeJ8F56p5oql0UklEBJlVAAAABY"]
[Sat Apr 18 02:29:44.202863 2026] [:error] [pid 63702:tid 63751] [client 20.215.244.72:59953] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aeJ8GMTL05PWYsKqTEYrNgAAAUs"]
[Sat Apr 18 02:29:44.933981 2026] [:error] [pid 42442:tid 42467] [client 20.215.244.72:47001] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aeJ8GD4PBGqL_yqPJ8lPFQAAARc"]
[Sat Apr 18 02:29:46.429989 2026] [:error] [pid 63702:tid 63750] [client 20.215.244.72:59887] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aeJ8GsTL05PWYsKqTEYrPQAAAUo"]
[Sat Apr 18 02:29:49.358528 2026] [:error] [pid 42442:tid 42468] [client 20.215.244.72:31262] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aeJ8HT4PBGqL_yqPJ8lPIQAAARg"]
[Sat Apr 18 02:29:50.884478 2026] [:error] [pid 42442:tid 42466] [client 20.215.244.72:3617] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aeJ8Hj4PBGqL_yqPJ8lPLAAAARY"]
[Sat Apr 18 02:29:52.407616 2026] [:error] [pid 59136:tid 59156] [client 20.215.244.72:53166] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aeJ8ICaoiUyiIR3EhLXNagAAANE"]
[Sat Apr 18 02:29:53.207615 2026] [:error] [pid 42442:tid 42463] [client 20.215.244.72:48394] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aeJ8IT4PBGqL_yqPJ8lPNgAAARM"]
[Sat Apr 18 02:29:54.043318 2026] [:error] [pid 59044:tid 59115] [client 20.215.244.72:62805] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeJ8IgFamkFyEtD_SMHO2gAAAI4"]
[Sat Apr 18 02:29:54.838788 2026] [:error] [pid 63702:tid 63740] [client 20.215.244.72:25182] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeJ8IsTL05PWYsKqTEYrSgAAAUI"]
[Sat Apr 18 02:29:55.651770 2026] [:error] [pid 63702:tid 63758] [client 20.215.244.72:55446] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeJ8I8TL05PWYsKqTEYrTgAAAVE"]
[Sat Apr 18 02:29:56.365577 2026] [:error] [pid 42442:tid 42456] [client 20.215.244.72:48396] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeJ8JD4PBGqL_yqPJ8lPPAAAAQw"]
[Sat Apr 18 02:29:57.093128 2026] [:error] [pid 42442:tid 42463] [client 20.215.244.72:47883] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeJ8JT4PBGqL_yqPJ8lPPwAAARM"]
[Sat Apr 18 02:29:58.325299 2026] [:error] [pid 42442:tid 42464] [client 20.215.244.72:62807] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeJ8Jj4PBGqL_yqPJ8lPRQAAARQ"]
[Sat Apr 18 02:29:59.363513 2026] [:error] [pid 42442:tid 42453] [client 20.215.244.72:39712] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeJ8Jz4PBGqL_yqPJ8lPSwAAAQk"]
[Sat Apr 18 02:30:00.450398 2026] [:error] [pid 59044:tid 59111] [client 20.215.244.72:53121] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeJ8KAFamkFyEtD_SMHO3AAAAIo"]
[Sat Apr 18 02:30:01.169603 2026] [:error] [pid 59136:tid 59143] [client 20.215.244.72:62842] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "aeJ8KSaoiUyiIR3EhLXNmwAAAMQ"]
[Sat Apr 18 02:30:02.102106 2026] [:error] [pid 59136:tid 59162] [client 20.215.244.72:3621] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "aeJ8KiaoiUyiIR3EhLXNoAAAANc"]
[Sat Apr 18 02:30:03.274992 2026] [:error] [pid 42442:tid 42464] [client 20.215.244.72:55476] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "aeJ8Kz4PBGqL_yqPJ8lPWwAAARQ"]
[Sat Apr 18 02:30:04.213590 2026] [:error] [pid 42442:tid 42459] [client 20.215.244.72:62823] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "aeJ8LD4PBGqL_yqPJ8lPYQAAAQ8"]
[Sat Apr 18 02:30:04.973952 2026] [:error] [pid 42442:tid 42445] [client 20.215.244.72:25178] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aeJ8LD4PBGqL_yqPJ8lPagAAAQE"]
[Sat Apr 18 02:30:05.939764 2026] [:error] [pid 42442:tid 42463] [client 20.215.244.72:3185] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aeJ8LT4PBGqL_yqPJ8lPbQAAARM"]
[Sat Apr 18 02:30:06.849106 2026] [:error] [pid 63702:tid 63740] [client 20.215.244.72:25576] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aeJ8LsTL05PWYsKqTEYrcwAAAUI"]
[Sat Apr 18 02:30:07.865821 2026] [:error] [pid 59044:tid 59105] [client 20.215.244.72:25159] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aeJ8LwFamkFyEtD_SMHO4wAAAIQ"]
[Sat Apr 18 02:30:09.031800 2026] [:error] [pid 63702:tid 63747] [client 20.215.244.72:54957] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aeJ8McTL05PWYsKqTEYrfQAAAUg"]
[Sat Apr 18 02:30:09.818921 2026] [:error] [pid 63702:tid 63739] [client 20.215.244.72:25155] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aeJ8McTL05PWYsKqTEYrgQAAAUE"]
[Sat Apr 18 02:30:10.984812 2026] [:error] [pid 42442:tid 42458] [client 20.215.244.72:54992] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aeJ8Mj4PBGqL_yqPJ8lPdwAAAQ4"]
[Sat Apr 18 02:30:11.842365 2026] [:error] [pid 63702:tid 63754] [client 20.215.244.72:55013] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aeJ8M8TL05PWYsKqTEYriAAAAU0"]
[Sat Apr 18 02:30:12.897711 2026] [:error] [pid 42442:tid 42460] [client 20.215.244.72:3626] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aeJ8ND4PBGqL_yqPJ8lPfgAAARA"]
[Sat Apr 18 02:30:13.753912 2026] [:error] [pid 63702:tid 63737] [client 20.215.244.72:48419] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aeJ8NcTL05PWYsKqTEYrkAAAAUA"]
[Sat Apr 18 02:30:14.411581 2026] [:error] [pid 42442:tid 42447] [client 20.215.244.72:48439] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aeJ8Nj4PBGqL_yqPJ8lPgQAAAQM"]
[Sat Apr 18 02:30:15.108000 2026] [:error] [pid 42442:tid 42466] [client 20.215.244.72:48431] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aeJ8Nz4PBGqL_yqPJ8lPhwAAARY"]
[Sat Apr 18 02:30:15.861024 2026] [:error] [pid 59042:tid 59069] [client 20.215.244.72:54966] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aeJ8N56p5oql0UklEBJlZwAAABY"]
[Sat Apr 18 02:30:16.623476 2026] [:error] [pid 63702:tid 63744] [client 20.215.244.72:34376] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aeJ8OMTL05PWYsKqTEYrmgAAAUU"]
[Sat Apr 18 02:30:17.353902 2026] [:error] [pid 59042:tid 59063] [client 20.215.244.72:40020] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aeJ8OZ6p5oql0UklEBJlaAAAABA"]
[Sat Apr 18 02:30:17.982278 2026] [:error] [pid 42442:tid 42446] [client 20.215.244.72:32708] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aeJ8OT4PBGqL_yqPJ8lPjAAAAQI"]
[Sat Apr 18 02:30:18.967440 2026] [:error] [pid 42442:tid 42454] [client 20.215.244.72:39742] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeJ8Oj4PBGqL_yqPJ8lPkwAAAQo"]
[Sat Apr 18 02:30:19.733849 2026] [:error] [pid 59136:tid 59161] [client 20.215.244.72:55435] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeJ8OyaoiUyiIR3EhLXN3wAAANY"]
[Sat Apr 18 02:30:20.301020 2026] [:error] [pid 59042:tid 59057] [client 20.215.244.72:34380] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeJ8PJ6p5oql0UklEBJlcgAAAAo"]
[Sat Apr 18 02:30:20.983886 2026] [:error] [pid 59136:tid 59145] [client 20.215.244.72:3850] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeJ8PCaoiUyiIR3EhLXN6gAAAMY"]
[Sat Apr 18 02:30:21.897658 2026] [:error] [pid 63702:tid 63765] [client 20.215.244.72:32739] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aeJ8PcTL05PWYsKqTEYrpgAAAVg"]
[Sat Apr 18 02:30:22.920434 2026] [:error] [pid 63702:tid 63745] [client 20.215.244.72:27981] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aeJ8PsTL05PWYsKqTEYrqwAAAUY"]
[Sat Apr 18 02:30:23.584406 2026] [:error] [pid 63702:tid 63756] [client 20.215.244.72:54998] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aeJ8P8TL05PWYsKqTEYrsAAAAU8"]
[Sat Apr 18 02:30:24.486817 2026] [:error] [pid 59136:tid 59149] [client 20.215.244.72:33937] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aeJ8QCaoiUyiIR3EhLXN7wAAAMo"]
[Sat Apr 18 02:30:25.370868 2026] [:error] [pid 63702:tid 63750] [client 20.215.244.72:32728] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeJ8QcTL05PWYsKqTEYruQAAAUo"]
[Sat Apr 18 02:30:25.981578 2026] [:error] [pid 63702:tid 63741] [client 20.215.244.72:28777] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeJ8QcTL05PWYsKqTEYrvwAAAUM"]
[Sat Apr 18 02:30:26.682357 2026] [:error] [pid 59043:tid 59080] [client 20.215.244.72:32711] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeJ8QoRtUGE9SfUh2wwhpAAAAEY"]
[Sat Apr 18 02:30:27.584653 2026] [:error] [pid 59042:tid 59071] [client 20.215.244.72:34379] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeJ8Q56p5oql0UklEBJlnAAAABg"]
[Sat Apr 18 02:30:28.443376 2026] [:error] [pid 59136:tid 59144] [client 20.215.244.72:35552] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aeJ8RCaoiUyiIR3EhLXN-AAAAMU"]
[Sat Apr 18 02:30:29.188825 2026] [:error] [pid 59136:tid 59154] [client 20.215.244.72:3491] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aeJ8RSaoiUyiIR3EhLXN_QAAAM8"]
[Sat Apr 18 02:30:29.804690 2026] [:error] [pid 59042:tid 59061] [client 20.215.244.72:35574] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aeJ8RZ6p5oql0UklEBJlpAAAAA4"]
[Sat Apr 18 02:30:30.425032 2026] [:error] [pid 59042:tid 59062] [client 20.215.244.72:34398] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aeJ8Rp6p5oql0UklEBJlqgAAAA8"]
[Sat Apr 18 02:30:31.299465 2026] [:error] [pid 42442:tid 42465] [client 20.215.244.72:35531] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeJ8Rz4PBGqL_yqPJ8lPxQAAARU"]
[Sat Apr 18 02:30:32.498702 2026] [:error] [pid 59136:tid 59160] [client 20.215.244.72:32755] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeJ8SCaoiUyiIR3EhLXOCwAAANU"]
[Sat Apr 18 02:30:33.546763 2026] [:error] [pid 59043:tid 59079] [client 20.215.244.72:32731] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeJ8SYRtUGE9SfUh2wwhrAAAAEU"]
[Sat Apr 18 02:30:34.467049 2026] [:error] [pid 59044:tid 59105] [client 20.215.244.72:23268] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeJ8SgFamkFyEtD_SMHO-gAAAIQ"]
[Sat Apr 18 02:30:35.405453 2026] [:error] [pid 42442:tid 42456] [client 20.215.244.72:54713] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aeJ8Sz4PBGqL_yqPJ8lP3AAAAQw"]
[Sat Apr 18 02:30:36.304891 2026] [:error] [pid 42442:tid 42460] [client 20.215.244.72:27318] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aeJ8TD4PBGqL_yqPJ8lP4wAAARA"]
[Sat Apr 18 02:30:37.326620 2026] [:error] [pid 59043:tid 59077] [client 20.215.244.72:34390] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aeJ8TYRtUGE9SfUh2wwhrQAAAEM"]
[Sat Apr 18 02:30:38.486863 2026] [:error] [pid 42442:tid 42454] [client 20.215.244.72:32720] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aeJ8Tj4PBGqL_yqPJ8lP7QAAAQo"]
[Sat Apr 18 02:30:40.491397 2026] [:error] [pid 59043:tid 59093] [client 20.215.244.72:24856] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aeJ8UIRtUGE9SfUh2wwhsgAAAFM"]
[Sat Apr 18 02:30:43.667495 2026] [:error] [pid 59044:tid 59122] [client 20.215.244.72:55953] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Sat Apr 18 02:30:43.926935 2026] [:error] [pid 59044:tid 59120] [client 20.215.244.72:55953] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Apr 18 02:30:44.187064 2026] [:error] [pid 59044:tid 59123] [client 20.215.244.72:55953] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sat Apr 18 02:30:44.479108 2026] [:error] [pid 59044:tid 59105] [client 20.215.244.72:55953] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat Apr 18 02:30:44.754845 2026] [:error] [pid 59044:tid 59101] [client 20.215.244.72:55953] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sat Apr 18 02:30:46.486704 2026] [:error] [pid 59044:tid 59119] [client 20.215.244.72:55953] File does not exist: /usr/local/apache/htdocs/suspended-page/bless4.php
[Sat Apr 18 02:30:47.550504 2026] [:error] [pid 59044:tid 59113] [client 20.215.244.72:55953] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Sat Apr 18 02:30:47.816603 2026] [:error] [pid 59044:tid 59121] [client 20.215.244.72:55953] File does not exist: /usr/local/apache/htdocs/suspended-page/xqq.php
[Sat Apr 18 02:30:48.074516 2026] [:error] [pid 59044:tid 59118] [client 20.215.244.72:55953] File does not exist: /usr/local/apache/htdocs/suspended-page/plss3.php
[Sat Apr 18 02:30:48.332714 2026] [:error] [pid 59044:tid 59120] [client 20.215.244.72:55953] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Sat Apr 18 02:30:48.587243 2026] [:error] [pid 59044:tid 59123] [client 20.215.244.72:55953] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeJ8WAFamkFyEtD_SMHPGAAAAJY"]
[Sat Apr 18 02:30:51.185351 2026] [:error] [pid 59136:tid 59141] [client 20.215.244.72:38000] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeJ8WyaoiUyiIR3EhLXOHgAAAMI"]
[Sat Apr 18 02:30:52.619258 2026] [:error] [pid 42442:tid 42446] [client 20.215.244.72:46068] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeJ8XD4PBGqL_yqPJ8lQKwAAAQI"]
[Sat Apr 18 02:30:54.552723 2026] [:error] [pid 59043:tid 59093] [client 20.215.244.72:49369] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeJ8XoRtUGE9SfUh2wwhugAAAFM"]
[Sat Apr 18 02:30:56.068889 2026] [:error] [pid 42442:tid 42452] [client 20.215.244.72:28431] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeJ8YD4PBGqL_yqPJ8lQPQAAAQg"]
[Sat Apr 18 02:30:57.250190 2026] [:error] [pid 59136:tid 59160] [client 20.215.244.72:35587] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeJ8YSaoiUyiIR3EhLXOJgAAANU"]
[Sat Apr 18 02:30:57.901642 2026] [:error] [pid 59042:tid 59056] [client 20.215.244.72:28428] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeJ8YZ6p5oql0UklEBJl7gAAAAk"]
[Sat Apr 18 02:30:58.892404 2026] [:error] [pid 42442:tid 42444] [client 20.215.244.72:37989] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeJ8Yj4PBGqL_yqPJ8lQRgAAAQA"]
[Sat Apr 18 02:31:00.043085 2026] [:error] [pid 42442:tid 42455] [client 20.215.244.72:38550] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeJ8ZD4PBGqL_yqPJ8lQTQAAAQs"]
[Sat Apr 18 02:31:01.018028 2026] [:error] [pid 59136:tid 59149] [client 20.215.244.72:38586] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeJ8ZSaoiUyiIR3EhLXOKQAAAMo"]
[Sat Apr 18 02:31:01.885738 2026] [:error] [pid 63702:tid 63764] [client 20.215.244.72:24500] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeJ8ZcTL05PWYsKqTEYsBwAAAVc"]
[Sat Apr 18 02:31:02.686745 2026] [:error] [pid 59044:tid 59125] [client 20.215.244.72:3545] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeJ8ZgFamkFyEtD_SMHPNwAAAJg"]
[Sat Apr 18 02:31:03.443566 2026] [:error] [pid 59136:tid 59145] [client 20.215.244.72:3721] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aeJ8ZyaoiUyiIR3EhLXOOAAAAMY"]
[Sat Apr 18 02:31:04.025903 2026] [:error] [pid 59136:tid 59157] [client 20.215.244.72:24490] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aeJ8aCaoiUyiIR3EhLXOPAAAANI"]
[Sat Apr 18 02:31:04.717889 2026] [:error] [pid 59043:tid 59081] [client 20.215.244.72:29906] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aeJ8aIRtUGE9SfUh2wwhvgAAAEc"]
[Sat Apr 18 02:31:05.646866 2026] [:error] [pid 59043:tid 59090] [client 20.215.244.72:49385] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aeJ8aYRtUGE9SfUh2wwhwAAAAFA"]
[Sat Apr 18 02:31:06.445360 2026] [:error] [pid 42442:tid 42453] [client 20.215.244.72:49892] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aeJ8aj4PBGqL_yqPJ8lQVQAAAQk"]
[Sat Apr 18 02:31:07.348462 2026] [:error] [pid 59044:tid 59118] [client 20.215.244.72:50393] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aeJ8awFamkFyEtD_SMHPQAAAAJE"]
[Sat Apr 18 02:31:08.199115 2026] [:error] [pid 42442:tid 42468] [client 20.215.244.72:46026] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aeJ8bD4PBGqL_yqPJ8lQWQAAARg"]
[Sat Apr 18 02:31:09.041651 2026] [:error] [pid 59044:tid 59125] [client 20.215.244.72:32305] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aeJ8bQFamkFyEtD_SMHPRgAAAJg"]
[Sat Apr 18 02:31:10.573452 2026] [:error] [pid 63702:tid 63758] [client 20.215.244.72:49406] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aeJ8bsTL05PWYsKqTEYsEgAAAVE"]
[Sat Apr 18 02:31:11.455630 2026] [:error] [pid 63702:tid 63747] [client 20.215.244.72:37979] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aeJ8b8TL05PWYsKqTEYsGAAAAUg"]
[Sat Apr 18 02:31:12.191251 2026] [:error] [pid 59042:tid 59054] [client 20.215.244.72:35611] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aeJ8cJ6p5oql0UklEBJmBwAAAAc"]
[Sat Apr 18 02:31:13.095835 2026] [:error] [pid 59044:tid 59120] [client 20.215.244.72:24494] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aeJ8cQFamkFyEtD_SMHPSAAAAJM"]
[Sat Apr 18 02:31:13.740738 2026] [:error] [pid 63702:tid 63751] [client 20.215.244.72:50399] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeJ8ccTL05PWYsKqTEYsHgAAAUs"]
[Sat Apr 18 02:31:14.842035 2026] [:error] [pid 63702:tid 63740] [client 20.215.244.72:3744] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeJ8csTL05PWYsKqTEYsJAAAAUI"]
[Sat Apr 18 02:31:15.579343 2026] [:error] [pid 59043:tid 59087] [client 20.215.244.72:28443] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeJ8c4RtUGE9SfUh2wwhzQAAAE0"]
[Sat Apr 18 02:31:16.211798 2026] [:error] [pid 63702:tid 63746] [client 20.215.244.72:3701] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeJ8dMTL05PWYsKqTEYsJgAAAUc"]
[Sat Apr 18 02:31:17.022428 2026] [:error] [pid 63702:tid 63758] [client 20.215.244.72:41166] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeJ8dcTL05PWYsKqTEYsJwAAAVE"]
[Sat Apr 18 02:31:17.749535 2026] [:error] [pid 42442:tid 42460] [client 20.215.244.72:24488] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeJ8dT4PBGqL_yqPJ8lQZAAAARA"]
[Sat Apr 18 02:31:18.369828 2026] [:error] [pid 59136:tid 59156] [client 20.215.244.72:33266] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeJ8diaoiUyiIR3EhLXOQwAAANE"]
[Sat Apr 18 02:31:19.436109 2026] [:error] [pid 63702:tid 63746] [client 20.215.244.72:49863] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeJ8d8TL05PWYsKqTEYsLAAAAUc"]
[Sat Apr 18 02:31:21.035984 2026] [:error] [pid 59136:tid 59162] [client 20.215.244.72:28460] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeJ8eSaoiUyiIR3EhLXORAAAANc"]
[Sat Apr 18 02:31:22.898352 2026] [:error] [pid 59042:tid 59054] [client 20.215.244.72:33239] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeJ8ep6p5oql0UklEBJmEwAAAAc"]
[Sat Apr 18 02:31:27.308051 2026] [:error] [pid 42442:tid 42444] [client 20.215.244.72:41749] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeJ8fz4PBGqL_yqPJ8lQdgAAAQA"]
[Sat Apr 18 02:31:29.091150 2026] [:error] [pid 63702:tid 63764] [client 20.215.244.72:46046] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeJ8gcTL05PWYsKqTEYsQwAAAVc"]
[Sat Apr 18 02:31:30.226467 2026] [:error] [pid 59136:tid 59163] [client 20.215.244.72:33248] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeJ8giaoiUyiIR3EhLXOWAAAANg"]
[Sat Apr 18 02:31:31.458528 2026] [:error] [pid 59136:tid 59154] [client 20.215.244.72:32301] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeJ8gyaoiUyiIR3EhLXOXAAAAM8"]
[Sat Apr 18 02:31:32.501469 2026] [:error] [pid 42442:tid 42467] [client 20.215.244.72:24504] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeJ8hD4PBGqL_yqPJ8lQhgAAARc"]
[Sat Apr 18 02:31:33.405396 2026] [:error] [pid 59044:tid 59119] [client 20.215.244.72:3555] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeJ8hQFamkFyEtD_SMHPVAAAAJI"]
[Sat Apr 18 02:31:34.173295 2026] [:error] [pid 42442:tid 42449] [client 20.215.244.72:35623] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aeJ8hj4PBGqL_yqPJ8lQigAAAQU"]
[Sat Apr 18 02:31:35.271146 2026] [:error] [pid 59043:tid 59088] [client 20.215.244.72:32313] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aeJ8h4RtUGE9SfUh2wwh2gAAAE4"]
[Sat Apr 18 02:31:36.044977 2026] [:error] [pid 59042:tid 59050] [client 20.215.244.72:23669] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aeJ8iJ6p5oql0UklEBJmGwAAAAM"]
[Sat Apr 18 02:31:36.877120 2026] [:error] [pid 42442:tid 42460] [client 20.215.244.72:45288] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aeJ8iD4PBGqL_yqPJ8lQlgAAARA"]
[Sat Apr 18 02:31:37.863453 2026] [:error] [pid 59043:tid 59078] [client 20.215.244.72:24454] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeJ8iYRtUGE9SfUh2wwh3QAAAEQ"]
[Sat Apr 18 02:31:38.483366 2026] [:error] [pid 63702:tid 63740] [client 20.215.244.72:30391] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeJ8isTL05PWYsKqTEYsdwAAAUI"]
[Sat Apr 18 02:31:39.315281 2026] [:error] [pid 42442:tid 42449] [client 20.215.244.72:41739] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeJ8iz4PBGqL_yqPJ8lQnwAAAQU"]
[Sat Apr 18 02:31:39.959356 2026] [:error] [pid 42442:tid 42451] [client 20.215.244.72:44100] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeJ8iz4PBGqL_yqPJ8lQogAAAQc"]
[Sat Apr 18 02:31:40.825025 2026] [:error] [pid 63702:tid 63757] [client 20.215.244.72:24464] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aeJ8jMTL05PWYsKqTEYshQAAAVA"]
[Sat Apr 18 02:31:41.558222 2026] [:error] [pid 59042:tid 59060] [client 20.215.244.72:46570] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aeJ8jZ6p5oql0UklEBJmIwAAAA0"]
[Sat Apr 18 02:31:42.703940 2026] [:error] [pid 42442:tid 42460] [client 20.215.244.72:50385] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aeJ8jj4PBGqL_yqPJ8lQqgAAARA"]
[Sat Apr 18 02:31:44.048286 2026] [:error] [pid 63702:tid 63758] [client 20.215.244.72:30379] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aeJ8kMTL05PWYsKqTEYsnAAAAVE"]
[Sat Apr 18 02:31:45.634672 2026] [:error] [pid 63702:tid 63749] [client 20.215.244.72:30366] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeJ8kcTL05PWYsKqTEYspgAAAUk"]
[Sat Apr 18 02:31:47.084525 2026] [:error] [pid 59042:tid 59060] [client 20.215.244.72:36837] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeJ8k56p5oql0UklEBJmMwAAAA0"]
[Sat Apr 18 02:31:48.996514 2026] [:error] [pid 42442:tid 42463] [client 20.215.244.72:45259] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Sat Apr 18 02:31:49.578728 2026] [:error] [pid 42442:tid 42455] [client 20.215.244.72:45259] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Sat Apr 18 02:31:49.837074 2026] [:error] [pid 42442:tid 42452] [client 20.215.244.72:45259] File does not exist: /usr/local/apache/htdocs/suspended-page/alpha.php
[Sat Apr 18 02:31:50.095045 2026] [:error] [pid 42442:tid 42451] [client 20.215.244.72:45259] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sat Apr 18 02:31:50.376811 2026] [:error] [pid 42442:tid 42448] [client 20.215.244.72:45259] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-michan.php
[Sat Apr 18 02:31:50.635224 2026] [:error] [pid 42442:tid 42462] [client 20.215.244.72:45259] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sat Apr 18 02:31:51.156377 2026] [:error] [pid 42442:tid 42465] [client 20.215.244.72:45259] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Sat Apr 18 02:31:51.693075 2026] [:error] [pid 42442:tid 42464] [client 20.215.244.72:45259] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeJ8lz4PBGqL_yqPJ8lRBAAAARQ"]
[Sat Apr 18 02:31:53.757944 2026] [:error] [pid 63702:tid 63749] [client 20.215.244.72:41758] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeJ8mcTL05PWYsKqTEYszwAAAUk"]
[Sat Apr 18 02:31:55.534627 2026] [:error] [pid 63702:tid 63747] [client 20.215.244.72:45256] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeJ8m8TL05PWYsKqTEYs1wAAAUg"]
[Sat Apr 18 02:31:57.486974 2026] [:error] [pid 63702:tid 63756] [client 20.215.244.72:41787] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeJ8ncTL05PWYsKqTEYs4gAAAU8"]
[Sat Apr 18 02:31:59.234432 2026] [:error] [pid 59042:tid 59047] [client 20.215.244.72:36847] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeJ8n56p5oql0UklEBJmRAAAAAA"]
[Sat Apr 18 02:32:01.980000 2026] [:error] [pid 59042:tid 59048] [client 20.215.244.72:32253] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeJ8oZ6p5oql0UklEBJmUQAAAAE"]
[Sat Apr 18 02:32:04.278680 2026] [:error] [pid 59136:tid 59145] [client 20.215.244.72:30397] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeJ8pCaoiUyiIR3EhLXOhQAAAMY"]
[Sat Apr 18 02:32:05.455924 2026] [:error] [pid 59044:tid 59116] [client 20.215.244.72:45254] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeJ8pQFamkFyEtD_SMHPjAAAAI8"]
[Sat Apr 18 02:32:07.335006 2026] [:error] [pid 59136:tid 59160] [client 20.215.244.72:3945] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeJ8pyaoiUyiIR3EhLXOjQAAANU"]
[Sat Apr 18 02:32:10.061215 2026] [:error] [pid 59043:tid 59085] [client 20.215.244.72:3953] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeJ8qoRtUGE9SfUh2wwh_AAAAEs"]
[Sat Apr 18 02:32:11.185920 2026] [:error] [pid 59043:tid 59080] [client 20.215.244.72:30352] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeJ8q4RtUGE9SfUh2wwiAAAAAEY"]
[Sat Apr 18 02:32:12.075740 2026] [:error] [pid 63702:tid 63737] [client 20.215.244.72:47320] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeJ8rMTL05PWYsKqTEYs9gAAAUA"]
[Sat Apr 18 02:32:13.150170 2026] [:error] [pid 59044:tid 59113] [client 20.215.244.72:34490] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeJ8rQFamkFyEtD_SMHPlgAAAIw"]
[Sat Apr 18 02:32:13.778714 2026] [:error] [pid 59044:tid 59123] [client 20.215.244.72:49972] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeJ8rQFamkFyEtD_SMHPmAAAAJY"]
[Sat Apr 18 02:32:14.305114 2026] [:error] [pid 59042:tid 59049] [client 20.215.244.72:29982] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeJ8rp6p5oql0UklEBJmgQAAAAI"]
[Sat Apr 18 02:32:14.974928 2026] [:error] [pid 42442:tid 42445] [client 20.215.244.72:35073] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeJ8rj4PBGqL_yqPJ8lRaAAAAQE"]
[Sat Apr 18 02:32:15.613026 2026] [:error] [pid 59042:tid 59052] [client 20.215.244.72:47344] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeJ8r56p5oql0UklEBJmgwAAAAU"]
[Sat Apr 18 02:32:16.284547 2026] [:error] [pid 63702:tid 63755] [client 20.215.244.72:45257] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeJ8sMTL05PWYsKqTEYtBQAAAU4"]
[Sat Apr 18 02:32:16.865531 2026] [:error] [pid 63702:tid 63737] [client 20.215.244.72:34480] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeJ8sMTL05PWYsKqTEYtCAAAAUA"]
[Sat Apr 18 02:32:17.599569 2026] [:error] [pid 63702:tid 63754] [client 20.215.244.72:47318] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeJ8scTL05PWYsKqTEYtDAAAAU0"]
[Sat Apr 18 02:32:18.349922 2026] [:error] [pid 63702:tid 63753] [client 20.215.244.72:3935] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aeJ8ssTL05PWYsKqTEYtDwAAAUw"]
[Sat Apr 18 02:32:19.244171 2026] [:error] [pid 63702:tid 63741] [client 20.215.244.72:49968] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aeJ8s8TL05PWYsKqTEYtFAAAAUM"]
[Sat Apr 18 02:32:19.976815 2026] [:error] [pid 42442:tid 42458] [client 20.215.244.72:23725] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aeJ8sz4PBGqL_yqPJ8lRcQAAAQ4"]
[Sat Apr 18 02:32:21.322892 2026] [:error] [pid 42442:tid 42453] [client 20.215.244.72:26361] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aeJ8tT4PBGqL_yqPJ8lRdAAAAQk"]
[Sat Apr 18 02:32:22.344109 2026] [:error] [pid 59044:tid 59121] [client 20.215.244.72:44070] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aeJ8tgFamkFyEtD_SMHPoAAAAJQ"]
[Sat Apr 18 02:32:22.914270 2026] [:error] [pid 63702:tid 63743] [client 20.215.244.72:29989] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aeJ8tsTL05PWYsKqTEYtGgAAAUQ"]
[Sat Apr 18 02:32:23.622550 2026] [:error] [pid 59136:tid 59156] [client 20.215.244.72:23726] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aeJ8tyaoiUyiIR3EhLXOlwAAANE"]
[Sat Apr 18 02:32:24.721027 2026] [:error] [pid 59042:tid 59054] [client 20.215.244.72:34451] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aeJ8uJ6p5oql0UklEBJmhwAAAAc"]
[Sat Apr 18 02:32:25.524567 2026] [:error] [pid 59043:tid 59087] [client 20.215.244.72:60371] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aeJ8uYRtUGE9SfUh2wwiBgAAAE0"]
[Sat Apr 18 02:32:26.356191 2026] [:error] [pid 42442:tid 42460] [client 20.215.244.72:30781] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aeJ8uj4PBGqL_yqPJ8lRhwAAARA"]
[Sat Apr 18 02:32:27.260865 2026] [:error] [pid 63702:tid 63755] [client 20.215.244.72:56048] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aeJ8u8TL05PWYsKqTEYtIQAAAU4"]
[Sat Apr 18 02:32:28.430565 2026] [:error] [pid 59136:tid 59154] [client 20.215.244.72:3973] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aeJ8vCaoiUyiIR3EhLXOmgAAAM8"]
[Sat Apr 18 02:32:29.813951 2026] [:error] [pid 42442:tid 42464] [client 20.215.244.72:49060] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aeJ8vT4PBGqL_yqPJ8lRjwAAARQ"]
[Sat Apr 18 02:32:31.297545 2026] [:error] [pid 42442:tid 42456] [client 20.215.244.72:41849] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aeJ8vz4PBGqL_yqPJ8lRkwAAAQw"]
[Sat Apr 18 02:32:32.002134 2026] [:error] [pid 63702:tid 63744] [client 20.215.244.72:3343] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aeJ8wMTL05PWYsKqTEYtKwAAAUU"]
[Sat Apr 18 02:32:33.451597 2026] [:error] [pid 59044:tid 59106] [client 20.215.244.72:52526] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aeJ8wQFamkFyEtD_SMHPpAAAAIU"]
[Sat Apr 18 02:32:34.558492 2026] [:error] [pid 59042:tid 59050] [client 20.215.244.72:26008] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aeJ8wp6p5oql0UklEBJmkQAAAAM"]
[Sat Apr 18 02:32:36.013506 2026] [:error] [pid 59042:tid 59068] [client 20.215.244.72:48983] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aeJ8xJ6p5oql0UklEBJmlgAAABU"]
[Sat Apr 18 02:32:37.207534 2026] [:error] [pid 59136:tid 59139] [client 20.215.244.72:36188] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aeJ8xSaoiUyiIR3EhLXOsAAAAMA"]
[Sat Apr 18 02:32:38.315245 2026] [:error] [pid 63702:tid 63764] [client 20.215.244.72:24052] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aeJ8xsTL05PWYsKqTEYtLwAAAVc"]
[Sat Apr 18 02:32:39.613867 2026] [:error] [pid 63702:tid 63741] [client 20.215.244.72:56467] [client 20.215.244.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeJ8x8TL05PWYsKqTEYtMQAAAUM"]
[Sat Apr 18 02:32:41.122217 2026] [:error] [pid 59043:tid 59078] [client 20.215.244.72:29517] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeJ8yYRtUGE9SfUh2wwiEQAAAEQ"]
[Sat Apr 18 02:32:41.982812 2026] [:error] [pid 63702:tid 63762] [client 20.215.244.72:29507] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeJ8ycTL05PWYsKqTEYtMgAAAVU"]
[Sat Apr 18 02:32:42.637134 2026] [:error] [pid 59043:tid 59087] [client 20.215.244.72:28827] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeJ8yoRtUGE9SfUh2wwiEwAAAE0"]
[Sat Apr 18 02:32:43.480975 2026] [:error] [pid 63702:tid 63765] [client 20.215.244.72:31688] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeJ8y8TL05PWYsKqTEYtNgAAAVg"]
[Sat Apr 18 02:32:44.255749 2026] [:error] [pid 59042:tid 59067] [client 20.215.244.72:59348] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeJ8zJ6p5oql0UklEBJmnwAAABQ"]
[Sat Apr 18 02:32:44.962037 2026] [:error] [pid 63702:tid 63737] [client 20.215.244.72:29537] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeJ8zMTL05PWYsKqTEYtOwAAAUA"]
[Sat Apr 18 02:32:45.749614 2026] [:error] [pid 59044:tid 59111] [client 20.215.244.72:25247] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeJ8zQFamkFyEtD_SMHPuAAAAIo"]
[Sat Apr 18 02:32:46.381164 2026] [:error] [pid 42442:tid 42454] [client 20.215.244.72:54783] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeJ8zj4PBGqL_yqPJ8lR1QAAAQo"]
[Sat Apr 18 02:32:46.901057 2026] [:error] [pid 42442:tid 42457] [client 20.215.244.72:3794] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeJ8zj4PBGqL_yqPJ8lR2QAAAQ0"]
[Sat Apr 18 02:32:47.472419 2026] [:error] [pid 59044:tid 59122] [client 20.215.244.72:54724] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeJ8zwFamkFyEtD_SMHPvAAAAJU"]
[Sat Apr 18 02:32:48.016077 2026] [:error] [pid 42442:tid 42455] [client 20.215.244.72:38464] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeJ80D4PBGqL_yqPJ8lR4gAAAQs"]
[Sat Apr 18 02:32:48.603818 2026] [:error] [pid 42442:tid 42463] [client 20.215.244.72:24775] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeJ80D4PBGqL_yqPJ8lR5gAAARM"]
[Sat Apr 18 02:32:49.368626 2026] [:error] [pid 59043:tid 59092] [client 20.215.244.72:54771] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/prv8.php"] [unique_id "aeJ80YRtUGE9SfUh2wwiFQAAAFI"]
[Sat Apr 18 02:32:49.971497 2026] [:error] [pid 63702:tid 63763] [client 20.215.244.72:29233] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/prv8.php"] [unique_id "aeJ80cTL05PWYsKqTEYtPwAAAVY"]
[Sat Apr 18 02:32:50.677219 2026] [:error] [pid 42442:tid 42462] [client 20.215.244.72:27671] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/prv8.php"] [unique_id "aeJ80j4PBGqL_yqPJ8lR9AAAARI"]
[Sat Apr 18 02:32:51.566563 2026] [:error] [pid 59042:tid 59052] [client 20.215.244.72:25260] File does not exist: /usr/local/apache/htdocs/suspended-page/prv8.php
[Sat Apr 18 02:32:51.824109 2026] [:error] [pid 59042:tid 59061] [client 20.215.244.72:25260] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Sat Apr 18 02:32:52.125875 2026] [:error] [pid 59042:tid 59055] [client 20.215.244.72:25260] File does not exist: /usr/local/apache/htdocs/suspended-page/dev.php
[Sat Apr 18 02:32:52.384844 2026] [:error] [pid 59042:tid 59066] [client 20.215.244.72:25260] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Sat Apr 18 02:32:52.643281 2026] [:error] [pid 59042:tid 59058] [client 20.215.244.72:25260] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Sat Apr 18 02:32:53.021028 2026] [:error] [pid 59042:tid 59062] [client 20.215.244.72:25260] File does not exist: /usr/local/apache/htdocs/suspended-page/gssdd.php
[Sat Apr 18 02:32:53.591387 2026] [:error] [pid 59042:tid 59057] [client 20.215.244.72:25260] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Sat Apr 18 02:32:53.850196 2026] [:error] [pid 59042:tid 59071] [client 20.215.244.72:25260] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Sat Apr 18 02:32:54.136537 2026] [:error] [pid 59042:tid 59054] [client 20.215.244.72:25260] File does not exist: /usr/local/apache/htdocs/suspended-page/bengi.php
[Sat Apr 18 02:32:54.664553 2026] [:error] [pid 59042:tid 59059] [client 20.215.244.72:25260] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php
[Sat Apr 18 02:32:54.927354 2026] [:error] [pid 59042:tid 59051] [client 20.215.244.72:25260] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aeJ81p6p5oql0UklEBJmswAAAAQ"]
[Sat Apr 18 02:32:56.227944 2026] [:error] [pid 59136:tid 59162] [client 20.215.244.72:29197] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aeJ82CaoiUyiIR3EhLXOxwAAANc"]
[Sat Apr 18 02:32:57.408077 2026] [:error] [pid 59136:tid 59160] [client 20.215.244.72:65235] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aeJ82SaoiUyiIR3EhLXOyQAAANU"]
[Sat Apr 18 02:32:58.501059 2026] [:error] [pid 59043:tid 59081] [client 20.215.244.72:59440] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aeJ82oRtUGE9SfUh2wwiGAAAAEc"]
[Sat Apr 18 02:33:00.187170 2026] [:error] [pid 42442:tid 42454] [client 20.215.244.72:59421] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeJ83D4PBGqL_yqPJ8lSLwAAAQo"]
[Sat Apr 18 02:33:01.156420 2026] [:error] [pid 42442:tid 42455] [client 20.215.244.72:50856] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeJ83T4PBGqL_yqPJ8lSNgAAAQs"]
[Sat Apr 18 02:33:02.733908 2026] [:error] [pid 42442:tid 42464] [client 20.215.244.72:33323] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeJ83j4PBGqL_yqPJ8lSPQAAARQ"]
[Sat Apr 18 02:33:03.911639 2026] [:error] [pid 42442:tid 42461] [client 20.215.244.72:40464] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeJ83z4PBGqL_yqPJ8lSRAAAARE"]
[Sat Apr 18 02:33:04.927271 2026] [:error] [pid 42442:tid 42462] [client 20.215.244.72:40507] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeJ84D4PBGqL_yqPJ8lSXgAAARI"]
[Sat Apr 18 02:33:06.198444 2026] [:error] [pid 59136:tid 59151] [client 20.215.244.72:33341] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeJ84iaoiUyiIR3EhLXO0gAAAMw"]
[Sat Apr 18 02:33:07.747142 2026] [:error] [pid 42442:tid 42463] [client 20.215.244.72:51208] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeJ84z4PBGqL_yqPJ8lSjgAAARM"]
[Sat Apr 18 02:33:08.644292 2026] [:error] [pid 42442:tid 42468] [client 20.215.244.72:24118] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeJ85D4PBGqL_yqPJ8lSmQAAARg"]
[Sat Apr 18 02:33:09.820623 2026] [:error] [pid 59044:tid 59109] [client 20.215.244.72:24067] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aeJ85QFamkFyEtD_SMHPzQAAAIg"]
[Sat Apr 18 02:33:11.144351 2026] [:error] [pid 63702:tid 63753] [client 20.215.244.72:24071] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aeJ858TL05PWYsKqTEYtUgAAAUw"]
[Sat Apr 18 02:33:13.355695 2026] [:error] [pid 59043:tid 59089] [client 20.215.244.72:38915] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aeJ86YRtUGE9SfUh2wwiMgAAAE8"]
[Sat Apr 18 02:33:14.678004 2026] [:error] [pid 59043:tid 59087] [client 20.215.244.72:24086] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aeJ86oRtUGE9SfUh2wwiNAAAAE0"]
[Sat Apr 18 02:33:16.384811 2026] [:error] [pid 42442:tid 42460] [client 20.215.244.72:28405] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aeJ87D4PBGqL_yqPJ8lSswAAARA"]
[Sat Apr 18 02:33:17.190117 2026] [:error] [pid 63702:tid 63740] [client 20.215.244.72:51257] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aeJ87cTL05PWYsKqTEYtVAAAAUI"]
[Sat Apr 18 02:33:17.986226 2026] [:error] [pid 63702:tid 63746] [client 20.215.244.72:46012] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aeJ87cTL05PWYsKqTEYtWAAAAUc"]
[Sat Apr 18 02:33:18.910026 2026] [:error] [pid 59044:tid 59110] [client 20.215.244.72:30673] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aeJ87gFamkFyEtD_SMHP1AAAAIk"]
[Sat Apr 18 02:33:19.839877 2026] [:error] [pid 59043:tid 59080] [client 20.215.244.72:60439] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeJ874RtUGE9SfUh2wwiOQAAAEY"]
[Sat Apr 18 02:33:20.962220 2026] [:error] [pid 59043:tid 59083] [client 20.215.244.72:24079] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeJ88IRtUGE9SfUh2wwiPwAAAEk"]
[Sat Apr 18 02:33:21.941203 2026] [:error] [pid 63702:tid 63763] [client 20.215.244.72:30710] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeJ88cTL05PWYsKqTEYtXAAAAVY"]
[Sat Apr 18 02:33:22.940160 2026] [:error] [pid 59044:tid 59124] [client 20.215.244.72:51765] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeJ88gFamkFyEtD_SMHP1wAAAJc"]
[Sat Apr 18 02:33:23.733602 2026] [:error] [pid 59043:tid 59085] [client 20.215.244.72:28391] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aeJ884RtUGE9SfUh2wwiRwAAAEs"]
[Sat Apr 18 02:33:24.551485 2026] [:error] [pid 59043:tid 59075] [client 20.215.244.72:49451] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aeJ89IRtUGE9SfUh2wwiSwAAAEE"]
[Sat Apr 18 02:33:25.318036 2026] [:error] [pid 63702:tid 63746] [client 20.215.244.72:38938] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aeJ89cTL05PWYsKqTEYtYgAAAUc"]
[Sat Apr 18 02:33:26.220299 2026] [:error] [pid 59042:tid 59069] [client 20.215.244.72:45969] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aeJ89p6p5oql0UklEBJmzgAAABY"]
[Sat Apr 18 02:33:27.068984 2026] [:error] [pid 59136:tid 59149] [client 20.215.244.72:38919] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aeJ89yaoiUyiIR3EhLXO7gAAAMo"]
[Sat Apr 18 02:33:31.314242 2026] [:error] [pid 59136:tid 59150] [client 20.215.244.72:43538] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aeJ8-yaoiUyiIR3EhLXO-AAAAMs"]
[Sat Apr 18 02:33:34.023987 2026] [:error] [pid 59043:tid 59078] [client 20.215.244.72:42476] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aeJ8_oRtUGE9SfUh2wwiUAAAAEQ"]
[Sat Apr 18 02:33:35.926738 2026] [:error] [pid 59042:tid 59057] [client 20.215.244.72:29142] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aeJ8_56p5oql0UklEBJm2wAAAAo"]
[Sat Apr 18 02:33:37.714766 2026] [:error] [pid 59136:tid 59142] [client 20.215.244.72:29174] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aeJ9ASaoiUyiIR3EhLXPBgAAAMM"]
[Sat Apr 18 02:33:40.761520 2026] [:error] [pid 59136:tid 59160] [client 20.215.244.72:25606] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aeJ9BCaoiUyiIR3EhLXPDAAAANU"]
[Sat Apr 18 02:33:45.262945 2026] [:error] [pid 42442:tid 42450] [client 20.215.244.72:25644] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aeJ9CT4PBGqL_yqPJ8lS4AAAAQY"]
[Sat Apr 18 02:33:47.068645 2026] [:error] [pid 59043:tid 59079] [client 20.215.244.72:51728] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aeJ9C4RtUGE9SfUh2wwihwAAAEU"]
[Sat Apr 18 02:33:51.804844 2026] [:error] [pid 63702:tid 63751] [client 20.215.244.72:3089] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "aeJ9D8TL05PWYsKqTEYthAAAAUs"]
[Sat Apr 18 02:33:53.239079 2026] [:error] [pid 59043:tid 59088] [client 20.215.244.72:35036] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "aeJ9EYRtUGE9SfUh2wwikgAAAE4"]
[Sat Apr 18 02:33:55.499929 2026] [:error] [pid 59043:tid 59086] [client 20.215.244.72:43556] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Sat Apr 18 02:33:55.786892 2026] [:error] [pid 59043:tid 59079] [client 20.215.244.72:43556] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Sat Apr 18 02:33:56.044155 2026] [:error] [pid 59043:tid 59080] [client 20.215.244.72:43556] File does not exist: /usr/local/apache/htdocs/suspended-page/file18.php
[Sat Apr 18 02:33:56.554971 2026] [:error] [pid 59043:tid 59095] [client 20.215.244.72:43556] File does not exist: /usr/local/apache/htdocs/suspended-page/vee.php
[Sat Apr 18 02:33:56.812874 2026] [:error] [pid 59043:tid 59084] [client 20.215.244.72:43556] File does not exist: /usr/local/apache/htdocs/suspended-page/cabs.php
[Sat Apr 18 02:33:57.423313 2026] [:error] [pid 59043:tid 59074] [client 20.215.244.72:43556] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Sat Apr 18 02:33:57.683279 2026] [:error] [pid 59043:tid 59090] [client 20.215.244.72:43556] File does not exist: /usr/local/apache/htdocs/suspended-page/x1da.php
[Sat Apr 18 02:33:57.940821 2026] [:error] [pid 59043:tid 59085] [client 20.215.244.72:43556] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sat Apr 18 02:33:58.199829 2026] [:error] [pid 59043:tid 59089] [client 20.215.244.72:43556] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Apr 18 08:57:02.648060 2026] [:error] [pid 34237:tid 34255] [client 20.215.244.72:8155] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sat Apr 18 08:57:02.913073 2026] [:error] [pid 34237:tid 34259] [client 20.215.244.72:8155] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Sat Apr 18 08:57:03.177666 2026] [:error] [pid 34237:tid 34248] [client 20.215.244.72:8155] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sat Apr 18 08:57:03.436248 2026] [:error] [pid 34237:tid 34257] [client 20.215.244.72:8155] File does not exist: /usr/local/apache/htdocs/suspended-page/mifta.php
[Sat Apr 18 08:57:03.693849 2026] [:error] [pid 34237:tid 34247] [client 20.215.244.72:8155] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Sat Apr 18 08:57:03.953034 2026] [:error] [pid 34237:tid 34260] [client 20.215.244.72:8155] File does not exist: /usr/local/apache/htdocs/suspended-page/packsin1.php
[Sat Apr 18 08:57:04.217616 2026] [:error] [pid 34237:tid 34240] [client 20.215.244.72:8155] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Sat Apr 18 08:57:04.476784 2026] [:error] [pid 34237:tid 34239] [client 20.215.244.72:8155] File does not exist: /usr/local/apache/htdocs/suspended-page/son1.php
[Sat Apr 18 08:57:04.837546 2026] [:error] [pid 34237:tid 34256] [client 20.215.244.72:8155] [client 20.215.244.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeLW4BBmX4Wq5a6rxfbv_gAAAVE"]
[Sat Apr 18 08:57:05.411649 2026] [:error] [pid 9865:tid 9951] [client 20.215.244.72:8073] File does not exist: /usr/local/apache/htdocs/suspended-page/aboute.php
[Sat Apr 18 08:57:05.673768 2026] [:error] [pid 9865:tid 9954] [client 20.215.244.72:8073] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Sat Apr 18 08:57:05.928568 2026] [:error] [pid 9865:tid 9960] [client 20.215.244.72:8073] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeLW4azb5knECIY-C-jcQgAAAJc"]
[Sat Apr 18 08:57:06.493470 2026] [:error] [pid 34290:tid 34335] [client 20.215.244.72:8129] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeLW4hqX6WpmmAXOBi98iQAAAdA"]
[Sat Apr 18 08:57:07.082360 2026] [:error] [pid 9865:tid 9955] [client 20.215.244.72:8134] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeLW46zb5knECIY-C-jcSAAAAJI"]
[Sat Apr 18 08:57:07.635597 2026] [:error] [pid 9970:tid 9991] [client 20.215.244.72:8144] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeLW4yYdRLRhVmaIMx0R2AAAANE"]
[Sat Apr 18 08:57:08.274588 2026] [:error] [pid 9865:tid 9958] [client 20.215.244.72:8079] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeLW5Kzb5knECIY-C-jcTgAAAJU"]
[Sat Apr 18 08:57:08.852541 2026] [:error] [pid 34288:tid 34310] [client 20.215.244.72:8188] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeLW5OTIiy__PtiLmplRWQAAAZI"]
[Sat Apr 18 08:57:09.462148 2026] [:error] [pid 34290:tid 34337] [client 20.215.244.72:8066] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeLW5RqX6WpmmAXOBi98jAAAAdI"]
[Sat Apr 18 08:57:10.064079 2026] [:error] [pid 9863:tid 9887] [client 20.215.244.72:8131] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeLW5jjjiypiFrTucbI1lgAAAA4"]
[Sat Apr 18 08:57:11.052497 2026] [:error] [pid 13023:tid 13041] [client 20.215.244.72:8083] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeLW5_1e7hG8DAeABB9TqQAAARA"]
[Sat Apr 18 08:57:12.029123 2026] [:error] [pid 9863:tid 9873] [client 20.215.244.72:8181] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeLW6DjjiypiFrTucbI1mwAAAAA"]
[Sat Apr 18 08:57:12.925643 2026] [:error] [pid 34290:tid 34333] [client 20.215.244.72:8174] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeLW6BqX6WpmmAXOBi98jgAAAc4"]
[Sat Apr 18 08:57:13.711152 2026] [:error] [pid 13023:tid 13031] [client 20.215.244.72:8082] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeLW6f1e7hG8DAeABB9TrQAAAQY"]
[Sat Apr 18 08:57:14.388410 2026] [:error] [pid 34288:tid 34294] [client 20.215.244.72:8086] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeLW6uTIiy__PtiLmplRZAAAAYI"]
[Sat Apr 18 08:57:15.079085 2026] [:error] [pid 34237:tid 34246] [client 20.215.244.72:8160] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeLW6xBmX4Wq5a6rxfbwCwAAAUc"]
[Sat Apr 18 08:57:15.721735 2026] [:error] [pid 9865:tid 9954] [client 20.215.244.72:8085] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeLW66zb5knECIY-C-jcWwAAAJE"]
[Sat Apr 18 08:57:16.349447 2026] [:error] [pid 9865:tid 9937] [client 20.215.244.72:8136] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeLW7Kzb5knECIY-C-jcXQAAAIA"]
[Sat Apr 18 08:57:17.068532 2026] [:error] [pid 34288:tid 34296] [client 20.215.244.72:8169] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeLW7eTIiy__PtiLmplRZwAAAYQ"]
[Sat Apr 18 08:57:17.798961 2026] [:error] [pid 34237:tid 34254] [client 20.215.244.72:8141] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeLW7RBmX4Wq5a6rxfbwDgAAAU8"]
[Sat Apr 18 08:57:18.374188 2026] [:error] [pid 9863:tid 9886] [client 20.215.244.72:8133] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeLW7jjjiypiFrTucbI1nwAAAA0"]
[Sat Apr 18 08:57:19.029668 2026] [:error] [pid 13023:tid 13043] [client 20.215.244.72:8145] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeLW7_1e7hG8DAeABB9TsQAAARI"]
[Sat Apr 18 08:57:19.612183 2026] [:error] [pid 9865:tid 9944] [client 20.215.244.72:8180] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeLW76zb5knECIY-C-jcYQAAAIc"]
[Sat Apr 18 08:57:20.420880 2026] [:error] [pid 9865:tid 9952] [client 20.215.244.72:8142] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeLW8Kzb5knECIY-C-jcZgAAAI8"]
[Sat Apr 18 08:57:20.991696 2026] [:error] [pid 9865:tid 9958] [client 20.215.244.72:8166] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeLW8Kzb5knECIY-C-jcawAAAJU"]
[Sat Apr 18 08:57:21.568996 2026] [:error] [pid 9865:tid 9947] [client 20.215.244.72:8124] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeLW8azb5knECIY-C-jcbgAAAIo"]
[Sat Apr 18 08:57:22.139571 2026] [:error] [pid 9865:tid 9946] [client 20.215.244.72:8087] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeLW8qzb5knECIY-C-jccgAAAIk"]
[Sat Apr 18 08:57:22.681784 2026] [:error] [pid 13023:tid 13026] [client 20.215.244.72:8101] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeLW8v1e7hG8DAeABB9TtwAAAQE"]
[Sat Apr 18 08:57:23.225656 2026] [:error] [pid 9970:tid 9992] [client 20.215.244.72:8191] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeLW8yYdRLRhVmaIMx0R2gAAANI"]
[Sat Apr 18 08:57:23.774828 2026] [:error] [pid 9865:tid 9939] [client 20.215.244.72:8138] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeLW86zb5knECIY-C-jcdgAAAII"]
[Sat Apr 18 08:57:24.332250 2026] [:error] [pid 34290:tid 34319] [client 20.215.244.72:8137] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeLW9BqX6WpmmAXOBi98lAAAAcA"]
[Sat Apr 18 08:57:24.867723 2026] [:error] [pid 34288:tid 34294] [client 20.215.244.72:8070] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeLW9OTIiy__PtiLmplRdgAAAYI"]
[Sat Apr 18 08:57:25.386228 2026] [:error] [pid 34288:tid 34313] [client 20.215.244.72:8178] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeLW9eTIiy__PtiLmplRewAAAZU"]
[Sat Apr 18 08:57:25.895380 2026] [:error] [pid 34288:tid 34314] [client 20.215.244.72:8173] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeLW9eTIiy__PtiLmplRfAAAAZY"]
[Sat Apr 18 08:57:26.410426 2026] [:error] [pid 9970:tid 9986] [client 20.215.244.72:8018] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeLW9iYdRLRhVmaIMx0R4QAAAMw"]
[Sat Apr 18 08:57:26.922142 2026] [:error] [pid 9865:tid 9950] [client 20.215.244.72:8152] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeLW9qzb5knECIY-C-jceQAAAI0"]
[Sat Apr 18 08:57:27.437789 2026] [:error] [pid 34290:tid 34335] [client 20.215.244.72:8154] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeLW9xqX6WpmmAXOBi98lwAAAdA"]
[Sat Apr 18 08:57:27.949139 2026] [:error] [pid 34290:tid 34322] [client 20.215.244.72:8120] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeLW9xqX6WpmmAXOBi98mQAAAcM"]
[Sat Apr 18 08:57:28.469627 2026] [:error] [pid 34237:tid 34252] [client 20.215.244.72:8068] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeLW-BBmX4Wq5a6rxfbwGgAAAU0"]
[Sat Apr 18 08:57:28.979453 2026] [:error] [pid 9865:tid 9952] [client 20.215.244.72:8176] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeLW-Kzb5knECIY-C-jchgAAAI8"]
[Sat Apr 18 08:57:29.494559 2026] [:error] [pid 34290:tid 34341] [client 20.215.244.72:8183] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeLW-RqX6WpmmAXOBi98mgAAAdY"]
[Sat Apr 18 08:57:30.016884 2026] [:error] [pid 34237:tid 34239] [client 20.215.244.72:8147] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeLW-hBmX4Wq5a6rxfbwMwAAAUA"]
[Sat Apr 18 08:57:30.528487 2026] [:error] [pid 34237:tid 34254] [client 20.215.244.72:8084] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeLW-hBmX4Wq5a6rxfbwNQAAAU8"]
[Sat Apr 18 08:57:31.048849 2026] [:error] [pid 34290:tid 34333] [client 20.215.244.72:8132] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeLW-xqX6WpmmAXOBi98nQAAAc4"]
[Sat Apr 18 08:57:31.587157 2026] [:error] [pid 34288:tid 34295] [client 20.215.244.72:8164] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeLW--TIiy__PtiLmplRlQAAAYM"]
[Sat Apr 18 08:57:32.119495 2026] [:error] [pid 34237:tid 34248] [client 20.215.244.72:7502] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeLW_BBmX4Wq5a6rxfbwNwAAAUk"]
[Sat Apr 18 08:57:32.654304 2026] [:error] [pid 9865:tid 9959] [client 20.215.244.72:8000] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeLW_Kzb5knECIY-C-jciAAAAJY"]
[Sat Apr 18 08:57:33.183680 2026] [:error] [pid 9864:tid 9925] [client 20.215.244.72:8046] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeLW_YCFeowknfXHM7lfSAAAAFM"]
[Sat Apr 18 08:57:33.725089 2026] [:error] [pid 34290:tid 34330] [client 20.215.244.72:8186] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeLW_RqX6WpmmAXOBi98ogAAAcs"]
[Sat Apr 18 08:57:34.264181 2026] [:error] [pid 34237:tid 34240] [client 20.215.244.72:8140] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeLW_hBmX4Wq5a6rxfbwOgAAAUE"]
[Sat Apr 18 08:57:34.877393 2026] [:error] [pid 9865:tid 9952] [client 20.215.244.72:8170] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "aeLW_qzb5knECIY-C-jckwAAAI8"]
[Sat Apr 18 08:57:35.441732 2026] [:error] [pid 9970:tid 9985] [client 20.215.244.72:8067] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "aeLW_yYdRLRhVmaIMx0R5wAAAMs"]
[Sat Apr 18 08:57:36.043071 2026] [:error] [pid 34288:tid 34300] [client 20.215.244.72:8091] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "aeLXAOTIiy__PtiLmplRmQAAAYg"]
[Sat Apr 18 08:57:36.613932 2026] [:error] [pid 34288:tid 34305] [client 20.215.244.72:8123] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "aeLXAOTIiy__PtiLmplRnQAAAY0"]
[Sat Apr 18 08:57:37.160968 2026] [:error] [pid 9865:tid 9959] [client 20.215.244.72:8190] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny"] [unique_id "aeLXAazb5knECIY-C-jclgAAAJY"]
[Sat Apr 18 08:57:37.769317 2026] [:error] [pid 34288:tid 34292] [client 20.215.244.72:8093] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny"] [unique_id "aeLXAeTIiy__PtiLmplRnwAAAYA"]
[Sat Apr 18 08:57:38.349794 2026] [:error] [pid 13023:tid 13039] [client 20.215.244.72:8122] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny"] [unique_id "aeLXAv1e7hG8DAeABB9TwQAAAQ4"]
[Sat Apr 18 08:57:38.901448 2026] [:error] [pid 9970:tid 9993] [client 20.215.244.72:8075] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny"] [unique_id "aeLXAiYdRLRhVmaIMx0R6QAAANM"]
[Sat Apr 18 08:57:39.484458 2026] [:error] [pid 34237:tid 34254] [client 20.215.244.72:8175] [client 20.215.244.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "aeLXAxBmX4Wq5a6rxfbwPwAAAU8"]
[Sat Apr 18 08:57:40.113406 2026] [:error] [pid 9863:tid 9885] [client 20.215.244.72:8179] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeLXBDjjiypiFrTucbI1pAAAAAw"]
[Sat Apr 18 08:57:40.685920 2026] [:error] [pid 9865:tid 9953] [client 20.215.244.72:8095] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeLXBKzb5knECIY-C-jcrQAAAJA"]
[Sat Apr 18 08:57:41.367689 2026] [:error] [pid 9863:tid 9893] [client 20.215.244.72:8103] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeLXBTjjiypiFrTucbI1pwAAABQ"]
[Sat Apr 18 08:57:42.063781 2026] [:error] [pid 34237:tid 34240] [client 20.215.244.72:8078] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp-image.php"] [unique_id "aeLXBhBmX4Wq5a6rxfbwRQAAAUE"]
[Sat Apr 18 08:57:42.626045 2026] [:error] [pid 34288:tid 34316] [client 20.215.244.72:8146] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp-image.php"] [unique_id "aeLXBuTIiy__PtiLmplRowAAAZg"]
[Sat Apr 18 08:57:43.186382 2026] [:error] [pid 34288:tid 34306] [client 20.215.244.72:8156] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp-image.php"] [unique_id "aeLXB-TIiy__PtiLmplRpgAAAY4"]
[Sat Apr 18 08:57:43.807433 2026] [:error] [pid 34290:tid 34342] [client 20.215.244.72:8167] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp-image.php"] [unique_id "aeLXBxqX6WpmmAXOBi98pwAAAdc"]
[Sat Apr 18 08:57:44.340523 2026] [:error] [pid 9865:tid 9948] [client 20.215.244.72:8172] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeLXCKzb5knECIY-C-jctwAAAIs"]
[Sat Apr 18 08:57:44.926264 2026] [:error] [pid 9970:tid 9989] [client 20.215.244.72:8024] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeLXCCYdRLRhVmaIMx0R7QAAAM8"]
[Sat Apr 18 08:57:45.450752 2026] [:error] [pid 9865:tid 9961] [client 20.215.244.72:8019] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeLXCazb5knECIY-C-jcvQAAAJg"]
[Sat Apr 18 08:57:46.004420 2026] [:error] [pid 9970:tid 9984] [client 20.215.244.72:8064] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeLXCiYdRLRhVmaIMx0R8QAAAMo"]
[Sat Apr 18 08:57:46.530684 2026] [:error] [pid 9970:tid 9997] [client 20.215.244.72:8104] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeLXCiYdRLRhVmaIMx0R8wAAANc"]
[Sat Apr 18 08:57:47.077317 2026] [:error] [pid 9863:tid 9890] [client 20.215.244.72:8187] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeLXCzjjiypiFrTucbI1rAAAABE"]
[Sat Apr 18 08:57:47.603813 2026] [:error] [pid 9970:tid 9977] [client 20.215.244.72:8126] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeLXCyYdRLRhVmaIMx0R-AAAAMM"]
[Sat Apr 18 08:57:48.130212 2026] [:error] [pid 9863:tid 9876] [client 20.215.244.72:8159] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeLXDDjjiypiFrTucbI1rQAAAAM"]
[Sat Apr 18 08:57:48.643054 2026] [:error] [pid 9863:tid 9875] [client 20.215.244.72:8139] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/footer.php"] [unique_id "aeLXDDjjiypiFrTucbI1rgAAAAI"]
[Sat Apr 18 08:57:49.242517 2026] [:error] [pid 34237:tid 34248] [client 20.215.244.72:8102] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/footer.php"] [unique_id "aeLXDRBmX4Wq5a6rxfbwSwAAAUk"]
[Sat Apr 18 08:57:49.763826 2026] [:error] [pid 9864:tid 9910] [client 20.215.244.72:8143] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/footer.php"] [unique_id "aeLXDYCFeowknfXHM7lfUAAAAEU"]
[Sat Apr 18 08:57:50.341689 2026] [:error] [pid 9865:tid 9947] [client 20.215.244.72:8054] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/footer.php"] [unique_id "aeLXDqzb5knECIY-C-jc0QAAAIo"]
[Sat Apr 18 08:57:50.861532 2026] [:error] [pid 34237:tid 34243] [client 20.215.244.72:8020] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "aeLXDhBmX4Wq5a6rxfbwTQAAAUQ"]
[Sat Apr 18 08:57:51.391526 2026] [:error] [pid 34290:tid 34322] [client 20.215.244.72:8072] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "aeLXDxqX6WpmmAXOBi98rgAAAcM"]
[Sat Apr 18 08:57:51.905752 2026] [:error] [pid 9865:tid 9956] [client 20.215.244.72:8100] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "aeLXD6zb5knECIY-C-jc1wAAAJM"]
[Sat Apr 18 08:57:52.416928 2026] [:error] [pid 9970:tid 9996] [client 20.215.244.72:8171] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "aeLXECYdRLRhVmaIMx0R-gAAANY"]
[Sat Apr 18 08:57:52.990216 2026] [:error] [pid 9864:tid 9927] [client 20.215.244.72:8077] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aeLXEICFeowknfXHM7lfUwAAAFU"]
[Sat Apr 18 08:57:53.515433 2026] [:error] [pid 9864:tid 9921] [client 20.215.244.72:8162] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aeLXEYCFeowknfXHM7lfVAAAAE8"]
[Sat Apr 18 08:57:54.040089 2026] [:error] [pid 9864:tid 9913] [client 20.215.244.72:8113] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aeLXEoCFeowknfXHM7lfWQAAAEc"]
[Sat Apr 18 08:57:54.578021 2026] [:error] [pid 13023:tid 13030] [client 20.215.244.72:8098] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aeLXEv1e7hG8DAeABB9TxQAAAQU"]
[Sat Apr 18 08:57:55.093658 2026] [:error] [pid 34237:tid 34246] [client 20.215.244.72:8158] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeLXExBmX4Wq5a6rxfbwUwAAAUc"]
[Sat Apr 18 08:57:55.614163 2026] [:error] [pid 9863:tid 9878] [client 20.215.244.72:8069] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeLXEzjjiypiFrTucbI1twAAAAU"]
[Sat Apr 18 08:57:56.131917 2026] [:error] [pid 13023:tid 13047] [client 20.215.244.72:8163] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeLXFP1e7hG8DAeABB9T0AAAARY"]
[Sat Apr 18 08:57:56.652716 2026] [:error] [pid 9865:tid 9957] [client 20.215.244.72:8005] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeLXFKzb5knECIY-C-jc3wAAAJQ"]
[Sat Apr 18 08:57:57.166733 2026] [:error] [pid 13023:tid 13029] [client 20.215.244.72:7518] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeLXFf1e7hG8DAeABB9T2AAAAQQ"]
[Sat Apr 18 08:57:57.713306 2026] [:error] [pid 34237:tid 34258] [client 20.215.244.72:8118] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeLXFRBmX4Wq5a6rxfbwVgAAAVM"]
[Sat Apr 18 08:57:58.258002 2026] [:error] [pid 34237:tid 34256] [client 20.215.244.72:8185] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeLXFhBmX4Wq5a6rxfbwWQAAAVE"]
[Sat Apr 18 08:57:58.788092 2026] [:error] [pid 34288:tid 34295] [client 20.215.244.72:8150] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeLXFuTIiy__PtiLmplRuAAAAYM"]
[Sat Apr 18 08:57:59.304536 2026] [:error] [pid 34288:tid 34296] [client 20.215.244.72:8105] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeLXF-TIiy__PtiLmplRvAAAAYQ"]
[Sat Apr 18 08:57:59.921371 2026] [:error] [pid 34288:tid 34314] [client 20.215.244.72:8033] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeLXF-TIiy__PtiLmplRwwAAAZY"]
[Sat Apr 18 08:58:00.431385 2026] [:error] [pid 34288:tid 34300] [client 20.215.244.72:8037] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeLXGOTIiy__PtiLmplRxgAAAYg"]
[Sat Apr 18 08:58:00.955088 2026] [:error] [pid 9970:tid 9980] [client 20.215.244.72:8003] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeLXGCYdRLRhVmaIMx0SAQAAAMY"]
[Sat Apr 18 08:58:01.485839 2026] [:error] [pid 9970:tid 9979] [client 20.215.244.72:8011] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "aeLXGSYdRLRhVmaIMx0SBAAAAMU"]
[Sat Apr 18 08:58:02.095505 2026] [:error] [pid 34290:tid 34325] [client 20.215.244.72:8014] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "aeLXGhqX6WpmmAXOBi98swAAAcY"]
[Sat Apr 18 08:58:02.645253 2026] [:error] [pid 34290:tid 34319] [client 20.215.244.72:7489] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "aeLXGhqX6WpmmAXOBi98tAAAAcA"]
[Sat Apr 18 08:58:03.202184 2026] [:error] [pid 9865:tid 9958] [client 20.215.244.72:8065] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "aeLXG6zb5knECIY-C-jc6AAAAJU"]
[Sat Apr 18 08:58:03.739112 2026] [:error] [pid 13023:tid 13038] [client 20.215.244.72:8148] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aeLXG_1e7hG8DAeABB9T5AAAAQ0"]
[Sat Apr 18 08:58:04.269619 2026] [:error] [pid 9865:tid 9941] [client 20.215.244.72:8106] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aeLXHKzb5knECIY-C-jc7QAAAIQ"]
[Sat Apr 18 08:58:04.865774 2026] [:error] [pid 34290:tid 34326] [client 20.215.244.72:7499] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aeLXHBqX6WpmmAXOBi98vwAAAcc"]
[Sat Apr 18 08:58:05.462011 2026] [:error] [pid 9865:tid 9950] [client 20.215.244.72:8094] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Sat Apr 18 08:58:05.721560 2026] [:error] [pid 9865:tid 9955] [client 20.215.244.72:8094] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Apr 18 08:58:05.989973 2026] [:error] [pid 9865:tid 9951] [client 20.215.244.72:8094] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Apr 18 08:58:06.248967 2026] [:error] [pid 9865:tid 9961] [client 20.215.244.72:8094] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Sat Apr 18 08:58:06.509393 2026] [:error] [pid 9865:tid 9946] [client 20.215.244.72:8094] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sat Apr 18 08:58:06.775035 2026] [:error] [pid 9865:tid 9937] [client 20.215.244.72:8094] File does not exist: /usr/local/apache/htdocs/suspended-page/less.php
[Sat Apr 18 08:58:07.041533 2026] [:error] [pid 9865:tid 9939] [client 20.215.244.72:8094] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Sat Apr 18 08:58:07.301571 2026] [:error] [pid 9865:tid 9942] [client 20.215.244.72:8094] File does not exist: /usr/local/apache/htdocs/suspended-page/maxro.php
[Sat Apr 18 08:58:07.561970 2026] [:error] [pid 9865:tid 9953] [client 20.215.244.72:8094] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Apr 18 08:58:07.822179 2026] [:error] [pid 9865:tid 9958] [client 20.215.244.72:8094] File does not exist: /usr/local/apache/htdocs/suspended-page/1s7y8wt9dz.php
[Sat Apr 18 08:58:08.083225 2026] [:error] [pid 9865:tid 9954] [client 20.215.244.72:8094] File does not exist: /usr/local/apache/htdocs/suspended-page/bdktk.php
[Sat Apr 18 08:58:08.339095 2026] [:error] [pid 9865:tid 9949] [client 20.215.244.72:8094] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "aeLXIKzb5knECIY-C-jdBAAAAIw"]
[Sat Apr 18 08:58:08.891762 2026] [:error] [pid 34288:tid 34308] [client 20.215.244.72:8151] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "aeLXIOTIiy__PtiLmplR_QAAAZA"]
[Sat Apr 18 08:58:09.412824 2026] [:error] [pid 13023:tid 13025] [client 20.215.244.72:8115] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "aeLXIf1e7hG8DAeABB9T8wAAAQA"]
[Sat Apr 18 08:58:09.966054 2026] [:error] [pid 34237:tid 34263] [client 20.215.244.72:8007] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "aeLXIRBmX4Wq5a6rxfbwYgAAAVg"]
[Sat Apr 18 08:58:10.585688 2026] [:error] [pid 13023:tid 13031] [client 20.215.244.72:8074] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "aeLXIv1e7hG8DAeABB9T-QAAAQY"]
[Sat Apr 18 08:58:11.120504 2026] [:error] [pid 34288:tid 34302] [client 20.215.244.72:7509] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "aeLXI-TIiy__PtiLmplSAwAAAYo"]
[Sat Apr 18 08:58:11.654769 2026] [:error] [pid 9865:tid 9939] [client 20.215.244.72:8109] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "aeLXI6zb5knECIY-C-jdDwAAAII"]
[Sat Apr 18 08:58:12.170348 2026] [:error] [pid 9970:tid 9987] [client 20.215.244.72:8010] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "aeLXJCYdRLRhVmaIMx0SFAAAAM0"]
[Sat Apr 18 08:58:12.716061 2026] [:error] [pid 9865:tid 9958] [client 20.215.244.72:8168] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeLXJKzb5knECIY-C-jdEQAAAJU"]
[Sat Apr 18 08:58:13.235530 2026] [:error] [pid 34237:tid 34259] [client 20.215.244.72:8092] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeLXJRBmX4Wq5a6rxfbwZQAAAVQ"]
[Sat Apr 18 08:58:13.756944 2026] [:error] [pid 34288:tid 34296] [client 20.215.244.72:8177] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeLXJeTIiy__PtiLmplSBgAAAYQ"]
[Sat Apr 18 08:58:14.283480 2026] [:error] [pid 34288:tid 34293] [client 20.215.244.72:8165] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeLXJuTIiy__PtiLmplSCQAAAYE"]
[Sat Apr 18 08:58:14.816063 2026] [:error] [pid 34290:tid 34340] [client 20.215.244.72:8040] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "aeLXJhqX6WpmmAXOBi98ywAAAdU"]
[Sat Apr 18 08:58:15.363645 2026] [:error] [pid 13023:tid 13032] [client 20.215.244.72:8004] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "aeLXJ_1e7hG8DAeABB9T_QAAAQc"]
[Sat Apr 18 08:58:15.889116 2026] [:error] [pid 34290:tid 34333] [client 20.215.244.72:8080] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "aeLXJxqX6WpmmAXOBi98zwAAAc4"]
[Sat Apr 18 08:58:16.459971 2026] [:error] [pid 34237:tid 34251] [client 20.215.244.72:8045] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "aeLXKBBmX4Wq5a6rxfbwbAAAAUw"]
[Sat Apr 18 08:58:17.053778 2026] [:error] [pid 34237:tid 34252] [client 20.215.244.72:8182] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r2.php"] [unique_id "aeLXKRBmX4Wq5a6rxfbwbQAAAU0"]
[Sat Apr 18 08:58:17.668498 2026] [:error] [pid 34288:tid 34299] [client 20.215.244.72:8059] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r2.php"] [unique_id "aeLXKeTIiy__PtiLmplSEwAAAYc"]
[Sat Apr 18 08:58:18.347877 2026] [:error] [pid 9970:tid 9979] [client 20.215.244.72:8071] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r2.php"] [unique_id "aeLXKiYdRLRhVmaIMx0SGgAAAMU"]
[Sat Apr 18 08:58:18.952098 2026] [:error] [pid 9865:tid 9946] [client 20.215.244.72:8032] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r2.php"] [unique_id "aeLXKqzb5knECIY-C-jdJwAAAIk"]
[Sat Apr 18 08:58:19.627776 2026] [:error] [pid 9865:tid 9948] [client 20.215.244.72:8097] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aeLXK6zb5knECIY-C-jdMgAAAIs"]
[Sat Apr 18 08:58:20.349055 2026] [:error] [pid 13023:tid 13029] [client 20.215.244.72:8012] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aeLXLP1e7hG8DAeABB9UBwAAAQQ"]
[Sat Apr 18 08:58:20.939217 2026] [:error] [pid 13023:tid 13032] [client 20.215.244.72:8110] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aeLXLP1e7hG8DAeABB9UDQAAAQc"]
[Sat Apr 18 08:58:21.528065 2026] [:error] [pid 34237:tid 34262] [client 20.215.244.72:8017] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aeLXLRBmX4Wq5a6rxfbwcwAAAVc"]
[Sat Apr 18 08:58:22.153829 2026] [:error] [pid 34237:tid 34240] [client 20.215.244.72:8076] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aeLXLhBmX4Wq5a6rxfbwegAAAUE"]
[Sat Apr 18 08:58:22.734388 2026] [:error] [pid 9863:tid 9891] [client 20.215.244.72:8149] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aeLXLjjjiypiFrTucbI1wgAAABI"]
[Sat Apr 18 08:58:23.290335 2026] [:error] [pid 9970:tid 9988] [client 20.215.244.72:8001] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aeLXLyYdRLRhVmaIMx0SIAAAAM4"]
[Sat Apr 18 08:58:23.883437 2026] [:error] [pid 13023:tid 13028] [client 20.215.244.72:8081] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aeLXL_1e7hG8DAeABB9UFgAAAQM"]
[Sat Apr 18 08:58:24.406088 2026] [:error] [pid 9865:tid 9939] [client 20.215.244.72:8022] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "aeLXMKzb5knECIY-C-jdNQAAAII"]
[Sat Apr 18 08:58:24.945327 2026] [:error] [pid 9863:tid 9882] [client 20.215.244.72:7511] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "aeLXMDjjiypiFrTucbI1ygAAAAk"]
[Sat Apr 18 08:58:25.464989 2026] [:error] [pid 9863:tid 9875] [client 20.215.244.72:7516] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "aeLXMTjjiypiFrTucbI1zAAAAAI"]
[Sat Apr 18 08:58:26.007038 2026] [:error] [pid 9863:tid 9883] [client 20.215.244.72:8042] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "aeLXMjjjiypiFrTucbI1zQAAAAo"]
[Sat Apr 18 08:58:26.561029 2026] [:error] [pid 13023:tid 13047] [client 20.215.244.72:8121] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "aeLXMv1e7hG8DAeABB9UHAAAARY"]
[Sat Apr 18 08:58:27.085979 2026] [:error] [pid 34237:tid 34260] [client 20.215.244.72:8055] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "aeLXMxBmX4Wq5a6rxfbwfAAAAVU"]
[Sat Apr 18 08:58:27.640992 2026] [:error] [pid 34288:tid 34298] [client 20.215.244.72:8041] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "aeLXM-TIiy__PtiLmplSGwAAAYY"]
[Sat Apr 18 08:58:28.172503 2026] [:error] [pid 9970:tid 9974] [client 20.215.244.72:8057] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "aeLXNCYdRLRhVmaIMx0SLwAAAMA"]
[Sat Apr 18 08:58:28.771041 2026] [:error] [pid 34237:tid 34258] [client 20.215.244.72:8108] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeLXNBBmX4Wq5a6rxfbwfQAAAVM"]
[Sat Apr 18 08:58:29.290147 2026] [:error] [pid 9865:tid 9951] [client 20.215.244.72:8125] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeLXNazb5knECIY-C-jdOwAAAI4"]
[Sat Apr 18 08:58:29.856205 2026] [:error] [pid 9865:tid 9958] [client 20.215.244.72:8002] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeLXNazb5knECIY-C-jdQQAAAJU"]
[Sat Apr 18 08:58:30.375405 2026] [:error] [pid 34288:tid 34313] [client 20.215.244.72:8161] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeLXNuTIiy__PtiLmplSHgAAAZU"]
[Sat Apr 18 08:58:30.972507 2026] [:error] [pid 34288:tid 34296] [client 20.215.244.72:8096] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aeLXNuTIiy__PtiLmplSIwAAAYQ"]
[Sat Apr 18 08:58:31.519767 2026] [:error] [pid 34288:tid 34305] [client 20.215.244.72:7491] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aeLXN-TIiy__PtiLmplSKQAAAY0"]
[Sat Apr 18 08:58:32.050853 2026] [:error] [pid 9970:tid 9985] [client 20.215.244.72:8127] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aeLXOCYdRLRhVmaIMx0SNwAAAMs"]
[Sat Apr 18 08:58:32.582544 2026] [:error] [pid 34237:tid 34255] [client 20.215.244.72:8088] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aeLXOBBmX4Wq5a6rxfbwgAAAAVA"]
[Sat Apr 18 08:58:33.180566 2026] [:error] [pid 34290:tid 34330] [client 20.215.244.72:8089] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gz.php"] [unique_id "aeLXORqX6WpmmAXOBi984gAAAcs"]
[Sat Apr 18 08:58:33.717063 2026] [:error] [pid 34237:tid 34243] [client 20.215.244.72:8031] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gz.php"] [unique_id "aeLXORBmX4Wq5a6rxfbwhQAAAUQ"]
[Sat Apr 18 08:58:34.333525 2026] [:error] [pid 9970:tid 9976] [client 20.215.244.72:7531] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gz.php"] [unique_id "aeLXOiYdRLRhVmaIMx0SPgAAAMI"]
[Sat Apr 18 08:58:34.901995 2026] [:error] [pid 34288:tid 34306] [client 20.215.244.72:8044] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gz.php"] [unique_id "aeLXOuTIiy__PtiLmplSNAAAAY4"]
[Sat Apr 18 08:58:35.459120 2026] [:error] [pid 9970:tid 9995] [client 20.215.244.72:8043] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "aeLXOyYdRLRhVmaIMx0SQQAAANU"]
[Sat Apr 18 08:58:36.050942 2026] [:error] [pid 9970:tid 9974] [client 20.215.244.72:7505] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "aeLXPCYdRLRhVmaIMx0SQgAAAMA"]
[Sat Apr 18 08:58:36.600146 2026] [:error] [pid 9970:tid 9982] [client 20.215.244.72:8055] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "aeLXPCYdRLRhVmaIMx0SRQAAAMg"]
[Sat Apr 18 08:58:37.160651 2026] [:error] [pid 9970:tid 9992] [client 20.215.244.72:8030] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "aeLXPSYdRLRhVmaIMx0SSAAAANI"]
[Sat Apr 18 08:58:37.688796 2026] [:error] [pid 13023:tid 13033] [client 20.215.244.72:8009] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/areak1.php"] [unique_id "aeLXPf1e7hG8DAeABB9UJwAAAQg"]
[Sat Apr 18 08:58:38.274941 2026] [:error] [pid 9865:tid 9959] [client 20.215.244.72:7510] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/areak1.php"] [unique_id "aeLXPqzb5knECIY-C-jdTQAAAJY"]
[Sat Apr 18 08:58:38.809794 2026] [:error] [pid 13023:tid 13030] [client 20.215.244.72:7514] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/areak1.php"] [unique_id "aeLXPv1e7hG8DAeABB9ULAAAAQU"]
[Sat Apr 18 08:58:39.328275 2026] [:error] [pid 9865:tid 9941] [client 20.215.244.72:8025] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/areak1.php"] [unique_id "aeLXP6zb5knECIY-C-jdUgAAAIQ"]
[Sat Apr 18 08:58:39.932520 2026] [:error] [pid 9864:tid 9928] [client 20.215.244.72:8036] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "aeLXP4CFeowknfXHM7lfigAAAFY"]
[Sat Apr 18 08:58:40.476095 2026] [:error] [pid 9864:tid 9924] [client 20.215.244.72:8034] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "aeLXQICFeowknfXHM7lfjAAAAFI"]
[Sat Apr 18 08:58:41.048014 2026] [:error] [pid 9970:tid 9984] [client 20.215.244.72:7495] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "aeLXQSYdRLRhVmaIMx0STAAAAMo"]
[Sat Apr 18 08:58:41.566875 2026] [:error] [pid 9864:tid 9930] [client 20.215.244.72:8189] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "aeLXQYCFeowknfXHM7lfjQAAAFg"]
[Sat Apr 18 08:58:42.129890 2026] [:error] [pid 34237:tid 34256] [client 20.215.244.72:8116] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeLXQhBmX4Wq5a6rxfbwkQAAAVE"]
[Sat Apr 18 08:58:42.693674 2026] [:error] [pid 34290:tid 34343] [client 20.215.244.72:8119] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeLXQhqX6WpmmAXOBi986wAAAdg"]
[Sat Apr 18 08:58:43.286588 2026] [:error] [pid 9970:tid 9991] [client 20.215.244.72:8062] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeLXQyYdRLRhVmaIMx0SUgAAANE"]
[Sat Apr 18 08:58:43.942836 2026] [:error] [pid 9970:tid 9990] [client 20.215.244.72:8021] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeLXQyYdRLRhVmaIMx0SVQAAANA"]
[Sat Apr 18 08:58:44.465535 2026] [:error] [pid 9970:tid 9989] [client 20.215.244.72:8008] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "aeLXRCYdRLRhVmaIMx0SWQAAAM8"]
[Sat Apr 18 08:58:45.028942 2026] [:error] [pid 34288:tid 34293] [client 20.215.244.72:7503] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "aeLXReTIiy__PtiLmplSOgAAAYE"]
[Sat Apr 18 08:58:45.593655 2026] [:error] [pid 9970:tid 9986] [client 20.215.244.72:7521] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "aeLXRSYdRLRhVmaIMx0SXAAAAMw"]
[Sat Apr 18 08:58:46.151458 2026] [:error] [pid 9863:tid 9896] [client 20.215.244.72:7533] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "aeLXRjjjiypiFrTucbI12QAAABc"]
[Sat Apr 18 08:58:46.747968 2026] [:error] [pid 34290:tid 34332] [client 20.215.244.72:8107] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "aeLXRhqX6WpmmAXOBi988AAAAc0"]
[Sat Apr 18 08:58:47.296590 2026] [:error] [pid 9970:tid 9983] [client 20.215.244.72:8039] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "aeLXRyYdRLRhVmaIMx0SXwAAAMk"]
[Sat Apr 18 08:58:47.890529 2026] [:error] [pid 9864:tid 9920] [client 20.215.244.72:8056] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "aeLXR4CFeowknfXHM7lfmwAAAE4"]
[Sat Apr 18 08:58:48.501385 2026] [:error] [pid 13023:tid 13039] [client 20.215.244.72:7517] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "aeLXSP1e7hG8DAeABB9UNwAAAQ4"]
[Sat Apr 18 08:58:49.033508 2026] [:error] [pid 34288:tid 34303] [client 20.215.244.72:8111] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "aeLXSeTIiy__PtiLmplSPwAAAYs"]
[Sat Apr 18 08:58:49.672343 2026] [:error] [pid 9865:tid 9959] [client 20.215.244.72:7972] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "aeLXSazb5knECIY-C-jdawAAAJY"]
[Sat Apr 18 08:58:50.324854 2026] [:error] [pid 9865:tid 9943] [client 20.215.244.72:7515] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "aeLXSqzb5knECIY-C-jdcAAAAIY"]
[Sat Apr 18 08:58:50.859428 2026] [:error] [pid 9865:tid 9956] [client 20.215.244.72:7545] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "aeLXSqzb5knECIY-C-jdcwAAAJM"]
[Sat Apr 18 08:58:51.391544 2026] [:error] [pid 34288:tid 34297] [client 20.215.244.72:7523] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeLXS-TIiy__PtiLmplSQwAAAYU"]
[Sat Apr 18 08:58:51.971560 2026] [:error] [pid 34288:tid 34292] [client 20.215.244.72:7488] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeLXS-TIiy__PtiLmplSRgAAAYA"]
[Sat Apr 18 08:58:52.523538 2026] [:error] [pid 9864:tid 9909] [client 20.215.244.72:8090] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeLXTICFeowknfXHM7lfnwAAAEQ"]
[Sat Apr 18 08:58:53.102596 2026] [:error] [pid 9970:tid 9978] [client 20.215.244.72:7508] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeLXTSYdRLRhVmaIMx0SYgAAAMQ"]
[Sat Apr 18 08:58:53.668156 2026] [:error] [pid 9864:tid 9915] [client 20.215.244.72:7504] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeLXTYCFeowknfXHM7lfogAAAEk"]
[Sat Apr 18 08:58:54.228991 2026] [:error] [pid 9864:tid 9916] [client 20.215.244.72:8048] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeLXToCFeowknfXHM7lfpQAAAEo"]
[Sat Apr 18 08:58:54.757436 2026] [:error] [pid 13023:tid 13028] [client 20.215.244.72:7492] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeLXTv1e7hG8DAeABB9UPQAAAQM"]
[Sat Apr 18 08:58:55.316079 2026] [:error] [pid 13023:tid 13033] [client 20.215.244.72:7519] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeLXT_1e7hG8DAeABB9UQQAAAQg"]
[Sat Apr 18 08:58:55.955779 2026] [:error] [pid 34290:tid 34329] [client 20.215.244.72:7962] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "aeLXTxqX6WpmmAXOBi989wAAAco"]
[Sat Apr 18 08:58:56.501880 2026] [:error] [pid 9865:tid 9941] [client 20.215.244.72:8015] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "aeLXUKzb5knECIY-C-jdgAAAAIQ"]
[Sat Apr 18 08:58:57.029664 2026] [:error] [pid 34237:tid 34247] [client 20.215.244.72:7496] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "aeLXURBmX4Wq5a6rxfbwqwAAAUg"]
[Sat Apr 18 08:58:57.566995 2026] [:error] [pid 34288:tid 34311] [client 20.215.244.72:7500] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "aeLXUeTIiy__PtiLmplSSgAAAZM"]
[Sat Apr 18 08:58:58.152602 2026] [:error] [pid 9865:tid 9942] [client 20.215.244.72:7945] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-lo.php"] [unique_id "aeLXUqzb5knECIY-C-jdggAAAIU"]
[Sat Apr 18 08:58:58.921919 2026] [:error] [pid 34290:tid 34338] [client 20.215.244.72:8128] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-lo.php"] [unique_id "aeLXUhqX6WpmmAXOBi98-wAAAdM"]
[Sat Apr 18 08:58:59.561863 2026] [:error] [pid 34290:tid 34319] [client 20.215.244.72:8051] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-lo.php"] [unique_id "aeLXUxqX6WpmmAXOBi98_gAAAcA"]
[Sat Apr 18 08:59:00.154502 2026] [:error] [pid 34290:tid 34323] [client 20.215.244.72:8135] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-lo.php"] [unique_id "aeLXVBqX6WpmmAXOBi99AwAAAcQ"]
[Sat Apr 18 08:59:00.746259 2026] [:error] [pid 34237:tid 34259] [client 20.215.244.72:8035] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeLXVBBmX4Wq5a6rxfbwrwAAAVQ"]
[Sat Apr 18 08:59:01.358581 2026] [:error] [pid 34237:tid 34241] [client 20.215.244.72:8013] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeLXVRBmX4Wq5a6rxfbwsQAAAUI"]
[Sat Apr 18 08:59:01.951999 2026] [:error] [pid 34237:tid 34262] [client 20.215.244.72:8026] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeLXVRBmX4Wq5a6rxfbwtAAAAVc"]
[Sat Apr 18 08:59:02.938794 2026] [:error] [pid 9865:tid 9947] [client 20.215.244.72:7938] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeLXVqzb5knECIY-C-jdjAAAAIo"]
[Sat Apr 18 08:59:03.473447 2026] [:error] [pid 34237:tid 34249] [client 20.215.244.72:7944] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Ipv6.php"] [unique_id "aeLXVxBmX4Wq5a6rxfbwuQAAAUo"]
[Sat Apr 18 08:59:04.198799 2026] [:error] [pid 9865:tid 9956] [client 20.215.244.72:8016] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Ipv6.php"] [unique_id "aeLXWKzb5knECIY-C-jdkwAAAJM"]
[Sat Apr 18 08:59:04.772107 2026] [:error] [pid 13023:tid 13026] [client 20.215.244.72:8117] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Ipv6.php"] [unique_id "aeLXWP1e7hG8DAeABB9UbgAAAQE"]
[Sat Apr 18 08:59:05.298716 2026] [:error] [pid 9865:tid 9953] [client 20.215.244.72:7538] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Ipv6.php"] [unique_id "aeLXWazb5knECIY-C-jdmAAAAJA"]
[Sat Apr 18 08:59:06.074660 2026] [:error] [pid 9865:tid 9957] [client 20.215.244.72:7546] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeLXWqzb5knECIY-C-jdoQAAAJQ"]
[Sat Apr 18 08:59:06.703259 2026] [:error] [pid 9970:tid 9979] [client 20.215.244.72:7951] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeLXWiYdRLRhVmaIMx0SawAAAMU"]
[Sat Apr 18 08:59:07.365857 2026] [:error] [pid 9970:tid 9995] [client 20.215.244.72:7522] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeLXWyYdRLRhVmaIMx0SbAAAANU"]
[Sat Apr 18 08:59:07.910638 2026] [:error] [pid 9865:tid 9941] [client 20.215.244.72:8047] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeLXW6zb5knECIY-C-jdqQAAAIQ"]
[Sat Apr 18 08:59:08.471469 2026] [:error] [pid 9970:tid 9975] [client 20.215.244.72:7939] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Sat Apr 18 08:59:08.744107 2026] [:error] [pid 9970:tid 9994] [client 20.215.244.72:7939] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Sat Apr 18 08:59:09.008559 2026] [:error] [pid 9970:tid 9984] [client 20.215.244.72:7939] File does not exist: /usr/local/apache/htdocs/suspended-page/wglum1.php
[Sat Apr 18 08:59:09.267840 2026] [:error] [pid 9970:tid 9985] [client 20.215.244.72:7939] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Sat Apr 18 08:59:09.531040 2026] [:error] [pid 9970:tid 9993] [client 20.215.244.72:7939] File does not exist: /usr/local/apache/htdocs/suspended-page/xper.php
[Sat Apr 18 08:59:09.788144 2026] [:error] [pid 9970:tid 9976] [client 20.215.244.72:7939] File does not exist: /usr/local/apache/htdocs/suspended-page/wxpass.php
[Sat Apr 18 08:59:10.060846 2026] [:error] [pid 9970:tid 9997] [client 20.215.244.72:7939] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Sat Apr 18 08:59:10.320537 2026] [:error] [pid 9970:tid 9980] [client 20.215.244.72:7939] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sat Apr 18 08:59:10.586069 2026] [:error] [pid 9970:tid 9979] [client 20.215.244.72:7939] File does not exist: /usr/local/apache/htdocs/suspended-page/x3x.php
[Sat Apr 18 08:59:10.863338 2026] [:error] [pid 9970:tid 9995] [client 20.215.244.72:7939] File does not exist: /usr/local/apache/htdocs/suspended-page/xy.php
[Sat Apr 18 08:59:11.126453 2026] [:error] [pid 9970:tid 9977] [client 20.215.244.72:7939] File does not exist: /usr/local/apache/htdocs/suspended-page/global.php
[Sat Apr 18 08:59:11.381558 2026] [:error] [pid 9970:tid 9991] [client 20.215.244.72:7939] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeLXXyYdRLRhVmaIMx0ShQAAANE"]
[Sat Apr 18 08:59:11.923117 2026] [:error] [pid 34288:tid 34305] [client 20.215.244.72:7948] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeLXX-TIiy__PtiLmplSfQAAAY0"]
[Sat Apr 18 08:59:12.572535 2026] [:error] [pid 34237:tid 34251] [client 20.215.244.72:7494] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeLXYBBmX4Wq5a6rxfbw4gAAAUw"]
[Sat Apr 18 08:59:13.140318 2026] [:error] [pid 9865:tid 9953] [client 20.215.244.72:7550] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeLXYazb5knECIY-C-jdsAAAAJA"]
[Sat Apr 18 08:59:13.719337 2026] [:error] [pid 34288:tid 34303] [client 20.215.244.72:7526] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aeLXYeTIiy__PtiLmplSggAAAYs"]
[Sat Apr 18 08:59:14.390510 2026] [:error] [pid 9864:tid 9927] [client 20.215.244.72:7937] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aeLXYoCFeowknfXHM7lf0AAAAFU"]
[Sat Apr 18 08:59:14.984913 2026] [:error] [pid 9864:tid 9922] [client 20.215.244.72:8184] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aeLXYoCFeowknfXHM7lf0gAAAFA"]
[Sat Apr 18 08:59:15.607782 2026] [:error] [pid 9864:tid 9913] [client 20.215.244.72:7979] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aeLXY4CFeowknfXHM7lf1QAAAEc"]
[Sat Apr 18 08:59:16.176569 2026] [:error] [pid 9863:tid 9874] [client 20.215.244.72:8023] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeLXZDjjiypiFrTucbI1_QAAAAE"]
[Sat Apr 18 08:59:16.939491 2026] [:error] [pid 34288:tid 34313] [client 20.215.244.72:7512] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeLXZOTIiy__PtiLmplSjAAAAZU"]
[Sat Apr 18 08:59:17.491852 2026] [:error] [pid 9970:tid 9986] [client 20.215.244.72:8111] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeLXZSYdRLRhVmaIMx0SiAAAAMw"]
[Sat Apr 18 08:59:18.044653 2026] [:error] [pid 34288:tid 34310] [client 20.215.244.72:7514] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeLXZuTIiy__PtiLmplSkQAAAZI"]
[Sat Apr 18 08:59:18.682482 2026] [:error] [pid 34290:tid 34329] [client 20.215.244.72:7965] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeLXZhqX6WpmmAXOBi99FgAAAco"]
[Sat Apr 18 08:59:19.234641 2026] [:error] [pid 9863:tid 9895] [client 20.215.244.72:7957] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeLXZzjjiypiFrTucbI1_wAAABY"]
[Sat Apr 18 08:59:19.807148 2026] [:error] [pid 9865:tid 9942] [client 20.215.244.72:8050] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeLXZ6zb5knECIY-C-jdvgAAAIU"]
[Sat Apr 18 08:59:20.369197 2026] [:error] [pid 13023:tid 13028] [client 20.215.244.72:8099] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeLXaP1e7hG8DAeABB9UiQAAAQM"]
[Sat Apr 18 08:59:21.061283 2026] [:error] [pid 13023:tid 13040] [client 20.215.244.72:8114] [client 20.215.244.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeLXaf1e7hG8DAeABB9UjAAAAQ8"]
[Sat Apr 18 08:59:21.622471 2026] [:error] [pid 9865:tid 9945] [client 20.215.244.72:7968] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeLXaazb5knECIY-C-jdyQAAAIg"]
[Sat Apr 18 08:59:22.202439 2026] [:error] [pid 9865:tid 9943] [client 20.215.244.72:8049] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeLXaqzb5knECIY-C-jd0AAAAIY"]
[Sat Apr 18 08:59:22.731364 2026] [:error] [pid 34237:tid 34244] [client 20.215.244.72:8061] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeLXahBmX4Wq5a6rxfbw9gAAAUU"]
[Sat Apr 18 08:59:23.291949 2026] [:error] [pid 9865:tid 9954] [client 20.215.244.72:8153] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeLXa6zb5knECIY-C-jd2gAAAJE"]
[Sat Apr 18 08:59:23.880631 2026] [:error] [pid 9865:tid 9948] [client 20.215.244.72:8052] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeLXa6zb5knECIY-C-jd3wAAAIs"]
[Sat Apr 18 08:59:24.392269 2026] [:error] [pid 9970:tid 9983] [client 20.215.244.72:7527] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeLXbCYdRLRhVmaIMx0SkgAAAMk"]
[Sat Apr 18 08:59:24.922537 2026] [:error] [pid 13023:tid 13036] [client 20.215.244.72:8029] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeLXbP1e7hG8DAeABB9UlgAAAQs"]
[Sat Apr 18 08:59:25.443435 2026] [:error] [pid 9970:tid 9975] [client 20.215.244.72:7980] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeLXbSYdRLRhVmaIMx0SlAAAAME"]
[Sat Apr 18 08:59:26.090610 2026] [:error] [pid 34288:tid 34297] [client 20.215.244.72:7520] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aeLXbuTIiy__PtiLmplSoAAAAYU"]
[Sat Apr 18 08:59:26.604251 2026] [:error] [pid 9864:tid 9921] [client 20.215.244.72:8060] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aeLXboCFeowknfXHM7lf4QAAAE8"]
[Sat Apr 18 08:59:27.144609 2026] [:error] [pid 9970:tid 9985] [client 20.215.244.72:7507] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aeLXbyYdRLRhVmaIMx0SlgAAAMs"]
[Sat Apr 18 08:59:27.666889 2026] [:error] [pid 9970:tid 9993] [client 20.215.244.72:7885] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aeLXbyYdRLRhVmaIMx0SlwAAANM"]
[Sat Apr 18 08:59:28.229490 2026] [:error] [pid 13023:tid 13033] [client 20.215.244.72:7513] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aeLXcP1e7hG8DAeABB9UnwAAAQg"]
[Sat Apr 18 08:59:28.853507 2026] [:error] [pid 9863:tid 9876] [client 20.215.244.72:7964] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aeLXcDjjiypiFrTucbI2CQAAAAM"]
[Sat Apr 18 08:59:29.370420 2026] [:error] [pid 34288:tid 34300] [client 20.215.244.72:8028] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aeLXceTIiy__PtiLmplSsAAAAYg"]
[Sat Apr 18 08:59:29.938746 2026] [:error] [pid 13023:tid 13044] [client 20.215.244.72:7544] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aeLXcf1e7hG8DAeABB9UowAAARM"]
[Sat Apr 18 08:59:30.505198 2026] [:error] [pid 34288:tid 34309] [client 20.215.244.72:7947] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "aeLXcuTIiy__PtiLmplSuQAAAZE"]
[Sat Apr 18 08:59:31.047851 2026] [:error] [pid 9865:tid 9960] [client 20.215.244.72:7973] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "aeLXc6zb5knECIY-C-jd7AAAAJc"]
[Sat Apr 18 08:59:31.568935 2026] [:error] [pid 13023:tid 13040] [client 20.215.244.72:7961] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "aeLXc_1e7hG8DAeABB9UqQAAAQ8"]
[Sat Apr 18 08:59:32.124400 2026] [:error] [pid 9863:tid 9895] [client 20.215.244.72:7525] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "aeLXdDjjiypiFrTucbI2EgAAABY"]
[Sat Apr 18 08:59:32.690503 2026] [:error] [pid 34288:tid 34311] [client 20.215.244.72:8112] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws66.php"] [unique_id "aeLXdOTIiy__PtiLmplSxwAAAZM"]
[Sat Apr 18 08:59:33.398121 2026] [:error] [pid 9863:tid 9886] [client 20.215.244.72:8058] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws66.php"] [unique_id "aeLXdTjjiypiFrTucbI2HQAAAA0"]
[Sat Apr 18 08:59:33.939643 2026] [:error] [pid 34288:tid 34300] [client 20.215.244.72:7999] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws66.php"] [unique_id "aeLXdeTIiy__PtiLmplS1AAAAYg"]
[Sat Apr 18 08:59:34.529516 2026] [:error] [pid 34288:tid 34314] [client 20.215.244.72:7900] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws66.php"] [unique_id "aeLXduTIiy__PtiLmplS2wAAAZY"]
[Sat Apr 18 08:59:35.112582 2026] [:error] [pid 9865:tid 9945] [client 20.215.244.72:7886] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeLXd6zb5knECIY-C-jd8AAAAIg"]
[Sat Apr 18 08:59:35.769635 2026] [:error] [pid 13023:tid 13029] [client 20.215.244.72:7958] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeLXd_1e7hG8DAeABB9UzAAAAQQ"]
[Sat Apr 18 08:59:36.311093 2026] [:error] [pid 13023:tid 13039] [client 20.215.244.72:7490] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeLXeP1e7hG8DAeABB9U0AAAAQ4"]
[Sat Apr 18 08:59:36.883891 2026] [:error] [pid 34288:tid 34302] [client 20.215.244.72:7498] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeLXeOTIiy__PtiLmplS7wAAAYo"]
[Sat Apr 18 08:59:37.410243 2026] [:error] [pid 9864:tid 9926] [client 20.215.244.72:7956] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xynz.php"] [unique_id "aeLXeYCFeowknfXHM7lf8gAAAFQ"]
[Sat Apr 18 08:59:37.944896 2026] [:error] [pid 9865:tid 9956] [client 20.215.244.72:7942] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xynz.php"] [unique_id "aeLXeazb5knECIY-C-jd-gAAAJM"]
[Sat Apr 18 08:59:38.460074 2026] [:error] [pid 13023:tid 13041] [client 20.215.244.72:7960] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xynz.php"] [unique_id "aeLXev1e7hG8DAeABB9U0wAAARA"]
[Sat Apr 18 08:59:38.993447 2026] [:error] [pid 9864:tid 9909] [client 20.215.244.72:7941] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xynz.php"] [unique_id "aeLXeoCFeowknfXHM7lf8wAAAEQ"]
[Sat Apr 18 08:59:39.520450 2026] [:error] [pid 9865:tid 9949] [client 20.215.244.72:7974] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-01ul.php"] [unique_id "aeLXe6zb5knECIY-C-jeBQAAAIw"]
[Sat Apr 18 08:59:40.153585 2026] [:error] [pid 34288:tid 34314] [client 20.215.244.72:7985] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-01ul.php"] [unique_id "aeLXfOTIiy__PtiLmplS_QAAAZY"]
[Sat Apr 18 08:59:40.736221 2026] [:error] [pid 34237:tid 34241] [client 20.215.244.72:7899] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-01ul.php"] [unique_id "aeLXfBBmX4Wq5a6rxfbxAQAAAUI"]
[Sat Apr 18 08:59:41.270041 2026] [:error] [pid 9865:tid 9941] [client 20.215.244.72:7530] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-01ul.php"] [unique_id "aeLXfazb5knECIY-C-jeFwAAAIQ"]
[Sat Apr 18 08:59:41.819397 2026] [:error] [pid 9865:tid 9949] [client 20.215.244.72:8038] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e7.php"] [unique_id "aeLXfazb5knECIY-C-jeHAAAAIw"]
[Sat Apr 18 08:59:42.352738 2026] [:error] [pid 9863:tid 9873] [client 20.215.244.72:7990] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e7.php"] [unique_id "aeLXfjjjiypiFrTucbI2NwAAAAA"]
[Sat Apr 18 08:59:42.928055 2026] [:error] [pid 9865:tid 9946] [client 20.215.244.72:7501] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e7.php"] [unique_id "aeLXfqzb5knECIY-C-jeKwAAAIk"]
[Sat Apr 18 08:59:43.447938 2026] [:error] [pid 9865:tid 9940] [client 20.215.244.72:7506] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e7.php"] [unique_id "aeLXf6zb5knECIY-C-jeNAAAAIM"]
[Sat Apr 18 08:59:43.985574 2026] [:error] [pid 34237:tid 34255] [client 20.215.244.72:7548] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "aeLXfxBmX4Wq5a6rxfbxBgAAAVA"]
[Sat Apr 18 08:59:44.503172 2026] [:error] [pid 9863:tid 9896] [client 20.215.244.72:7946] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "aeLXgDjjiypiFrTucbI2OQAAABc"]
[Sat Apr 18 08:59:45.041783 2026] [:error] [pid 9970:tid 9980] [client 20.215.244.72:7540] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "aeLXgSYdRLRhVmaIMx0SugAAAMY"]
[Sat Apr 18 08:59:45.628057 2026] [:error] [pid 34288:tid 34311] [client 20.215.244.72:7878] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "aeLXgeTIiy__PtiLmplTDwAAAZM"]
[Sat Apr 18 08:59:46.173343 2026] [:error] [pid 9863:tid 9878] [client 20.215.244.72:7872] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "aeLXgjjjiypiFrTucbI2OwAAAAU"]
[Sat Apr 18 08:59:46.694697 2026] [:error] [pid 9863:tid 9890] [client 20.215.244.72:7966] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "aeLXgjjjiypiFrTucbI2PQAAABE"]
[Sat Apr 18 08:59:47.248579 2026] [:error] [pid 9864:tid 9925] [client 20.215.244.72:7493] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "aeLXg4CFeowknfXHM7lgAAAAAFM"]
[Sat Apr 18 08:59:47.762919 2026] [:error] [pid 34290:tid 34326] [client 20.215.244.72:7971] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "aeLXgxqX6WpmmAXOBi99LQAAAcc"]
[Sat Apr 18 08:59:48.287654 2026] [:error] [pid 13023:tid 13040] [client 20.215.244.72:7997] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeLXhP1e7hG8DAeABB9U5wAAAQ8"]
[Sat Apr 18 08:59:48.801527 2026] [:error] [pid 34237:tid 34240] [client 20.215.244.72:8130] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeLXhBBmX4Wq5a6rxfbxDAAAAUE"]
[Sat Apr 18 08:59:49.320765 2026] [:error] [pid 9863:tid 9895] [client 20.215.244.72:7541] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeLXhTjjiypiFrTucbI2RwAAABY"]
[Sat Apr 18 08:59:49.850075 2026] [:error] [pid 34237:tid 34261] [client 20.215.244.72:7949] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeLXhRBmX4Wq5a6rxfbxDwAAAVY"]
[Sat Apr 18 08:59:50.373520 2026] [:error] [pid 9865:tid 9944] [client 20.215.244.72:7539] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aeLXhqzb5knECIY-C-jegQAAAIc"]
[Sat Apr 18 08:59:50.927462 2026] [:error] [pid 13023:tid 13044] [client 20.215.244.72:7895] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aeLXhv1e7hG8DAeABB9U7AAAARM"]
[Sat Apr 18 08:59:51.440213 2026] [:error] [pid 9865:tid 9950] [client 20.215.244.72:7955] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aeLXh6zb5knECIY-C-jelAAAAI0"]
[Sat Apr 18 08:59:51.975306 2026] [:error] [pid 9865:tid 9937] [client 20.215.244.72:7888] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aeLXh6zb5knECIY-C-jenwAAAIA"]
[Sat Apr 18 08:59:52.486821 2026] [:error] [pid 9865:tid 9952] [client 20.215.244.72:8027] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aeLXiKzb5knECIY-C-jepwAAAI8"]
[Sat Apr 18 08:59:53.021111 2026] [:error] [pid 9865:tid 9961] [client 20.215.244.72:7537] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aeLXiazb5knECIY-C-jesQAAAJg"]
[Sat Apr 18 08:59:53.550620 2026] [:error] [pid 13023:tid 13049] [client 20.215.244.72:7936] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aeLXif1e7hG8DAeABB9U8AAAARg"]
[Sat Apr 18 08:59:54.085963 2026] [:error] [pid 9865:tid 9955] [client 20.215.244.72:7543] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aeLXiqzb5knECIY-C-jevgAAAJI"]
[Sat Apr 18 08:59:54.626536 2026] [:error] [pid 34288:tid 34315] [client 20.215.244.72:7987] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "aeLXiuTIiy__PtiLmplTGwAAAZc"]
[Sat Apr 18 08:59:55.151312 2026] [:error] [pid 34288:tid 34299] [client 20.215.244.72:7877] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "aeLXi-TIiy__PtiLmplTHwAAAYc"]
[Sat Apr 18 08:59:55.663233 2026] [:error] [pid 13023:tid 13036] [client 20.215.244.72:7983] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "aeLXi_1e7hG8DAeABB9U9QAAAQs"]
[Sat Apr 18 08:59:56.184574 2026] [:error] [pid 34237:tid 34245] [client 20.215.244.72:7881] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "aeLXjBBmX4Wq5a6rxfbxGQAAAUY"]
[Sat Apr 18 08:59:56.711203 2026] [:error] [pid 13023:tid 13045] [client 20.215.244.72:7994] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "aeLXjP1e7hG8DAeABB9U-QAAARQ"]
[Sat Apr 18 08:59:57.267892 2026] [:error] [pid 9970:tid 9996] [client 20.215.244.72:7963] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "aeLXjSYdRLRhVmaIMx0S1AAAANY"]
[Sat Apr 18 08:59:57.805941 2026] [:error] [pid 9863:tid 9882] [client 20.215.244.72:7528] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "aeLXjTjjiypiFrTucbI2TQAAAAk"]
[Sat Apr 18 08:59:58.322297 2026] [:error] [pid 34237:tid 34252] [client 20.215.244.72:7547] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "aeLXjhBmX4Wq5a6rxfbxHgAAAU0"]
[Sat Apr 18 08:59:58.850452 2026] [:error] [pid 9863:tid 9892] [client 20.215.244.72:7524] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeLXjjjjiypiFrTucbI2TwAAABM"]
[Sat Apr 18 08:59:59.361505 2026] [:error] [pid 9863:tid 9880] [client 20.215.244.72:7535] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeLXjzjjiypiFrTucbI2UQAAAAc"]
[Sat Apr 18 08:59:59.884110 2026] [:error] [pid 9863:tid 9891] [client 20.215.244.72:7894] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeLXjzjjiypiFrTucbI2VQAAABI"]
[Sat Apr 18 09:00:00.398822 2026] [:error] [pid 9865:tid 9937] [client 20.215.244.72:7891] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeLXkKzb5knECIY-C-je0wAAAIA"]
[Sat Apr 18 09:00:00.911581 2026] [:error] [pid 9970:tid 9993] [client 20.215.244.72:7977] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/curl.php"] [unique_id "aeLXkCYdRLRhVmaIMx0S2gAAANM"]
[Sat Apr 18 09:00:01.433636 2026] [:error] [pid 9863:tid 9877] [client 20.215.244.72:7995] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/curl.php"] [unique_id "aeLXkTjjiypiFrTucbI2XAAAAAQ"]
[Sat Apr 18 09:00:01.949293 2026] [:error] [pid 9864:tid 9921] [client 20.215.244.72:7887] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/curl.php"] [unique_id "aeLXkYCFeowknfXHM7lgEQAAAE8"]
[Sat Apr 18 09:00:02.463915 2026] [:error] [pid 34237:tid 34252] [client 20.215.244.72:7992] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/curl.php"] [unique_id "aeLXkhBmX4Wq5a6rxfbxKwAAAU0"]
[Sat Apr 18 09:00:02.981389 2026] [:error] [pid 13023:tid 13039] [client 20.215.244.72:7549] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aeLXkv1e7hG8DAeABB9VDAAAAQ4"]
[Sat Apr 18 09:00:03.531033 2026] [:error] [pid 9864:tid 9923] [client 20.215.244.72:7978] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aeLXk4CFeowknfXHM7lgEgAAAFE"]
[Sat Apr 18 09:00:04.070411 2026] [:error] [pid 13023:tid 13043] [client 20.215.244.72:7536] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aeLXlP1e7hG8DAeABB9VDgAAARI"]
[Sat Apr 18 09:00:04.599654 2026] [:error] [pid 34237:tid 34261] [client 20.215.244.72:7919] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aeLXlBBmX4Wq5a6rxfbxMAAAAVY"]
[Sat Apr 18 09:00:05.144634 2026] [:error] [pid 9865:tid 9951] [client 20.215.244.72:7943] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aeLXlazb5knECIY-C-je6QAAAI4"]
[Sat Apr 18 09:00:05.676563 2026] [:error] [pid 9863:tid 9887] [client 20.215.244.72:7908] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aeLXlTjjiypiFrTucbI2bQAAAA4"]
[Sat Apr 18 09:00:06.251372 2026] [:error] [pid 34288:tid 34316] [client 20.215.244.72:7889] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aeLXluTIiy__PtiLmplTNQAAAZg"]
[Sat Apr 18 09:00:06.764761 2026] [:error] [pid 9863:tid 9880] [client 20.215.244.72:7912] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aeLXljjjiypiFrTucbI2dAAAAAc"]
[Sat Apr 18 09:00:07.288931 2026] [:error] [pid 9863:tid 9897] [client 20.215.244.72:7827] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeLXlzjjiypiFrTucbI2dQAAABg"]
[Sat Apr 18 09:00:07.811499 2026] [:error] [pid 9864:tid 9909] [client 20.215.244.72:7984] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeLXl4CFeowknfXHM7lgFQAAAEQ"]
[Sat Apr 18 09:00:08.330943 2026] [:error] [pid 9863:tid 9878] [client 20.215.244.72:7940] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeLXmDjjiypiFrTucbI2eQAAAAU"]
[Sat Apr 18 09:00:08.850613 2026] [:error] [pid 9863:tid 9894] [client 20.215.244.72:7954] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeLXmDjjiypiFrTucbI2fQAAABU"]
[Sat Apr 18 09:00:09.379587 2026] [:error] [pid 9865:tid 9938] [client 20.215.244.72:7873] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aeLXmazb5knECIY-C-jfBgAAAIE"]
[Sat Apr 18 09:00:09.910180 2026] [:error] [pid 9865:tid 9937] [client 20.215.244.72:7532] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aeLXmazb5knECIY-C-jfEQAAAIA"]
[Sat Apr 18 09:00:10.450102 2026] [:error] [pid 34288:tid 34305] [client 20.215.244.72:7998] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aeLXmuTIiy__PtiLmplTOAAAAY0"]
[Sat Apr 18 09:00:10.968788 2026] [:error] [pid 34288:tid 34298] [client 20.215.244.72:8053] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aeLXmuTIiy__PtiLmplTPAAAAYY"]
[Sat Apr 18 09:00:11.492267 2026] [:error] [pid 34288:tid 34295] [client 20.215.244.72:7835] File does not exist: /usr/local/apache/htdocs/suspended-page/goods_260325043000.php
[Sat Apr 18 09:00:11.754308 2026] [:error] [pid 34288:tid 34294] [client 20.215.244.72:7835] File does not exist: /usr/local/apache/htdocs/suspended-page/goods_260401065719.php
[Sat Apr 18 19:56:20.220655 2026] [:error] [pid 9864:tid 9922] [client 185.170.198.219:37102] [client 185.170.198.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aeNxZICFeowknfXHM7kS6QAAAFA"]
[Sun Apr 19 01:26:42.873842 2026] [:error] [pid 32167:tid 32227] [client 4.223.172.220:36431] File does not exist: /usr/local/apache/htdocs/suspended-page/eFpU3yHnriNNLtvdefault.php
[Sun Apr 19 01:26:43.228663 2026] [:error] [pid 32167:tid 32248] [client 4.223.172.220:36431] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Sun Apr 19 01:26:43.517016 2026] [:error] [pid 32167:tid 32233] [client 4.223.172.220:36431] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Apr 19 01:26:43.802617 2026] [:error] [pid 32167:tid 32245] [client 4.223.172.220:36431] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Sun Apr 19 01:26:44.162699 2026] [:error] [pid 32167:tid 32244] [client 4.223.172.220:36431] File does not exist: /usr/local/apache/htdocs/suspended-page/file-kikikoko.php
[Sun Apr 19 01:26:44.451664 2026] [:error] [pid 32167:tid 32230] [client 4.223.172.220:36431] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kikikoko.php
[Sun Apr 19 01:26:44.738085 2026] [:error] [pid 32167:tid 32249] [client 4.223.172.220:36431] File does not exist: /usr/local/apache/htdocs/suspended-page/ganja.php
[Sun Apr 19 01:26:45.162897 2026] [:error] [pid 32167:tid 32231] [client 4.223.172.220:36431] File does not exist: /usr/local/apache/htdocs/suspended-page/sad821.php
[Sun Apr 19 01:26:45.452009 2026] [:error] [pid 32167:tid 32236] [client 4.223.172.220:36431] File does not exist: /usr/local/apache/htdocs/suspended-page/sad8210.php
[Sun Apr 19 01:26:46.683948 2026] [:error] [pid 32167:tid 32236] [client 4.223.172.220:36431] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Sun Apr 19 01:26:47.023352 2026] [:error] [pid 32167:tid 32239] [client 4.223.172.220:36431] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "aeO-10yD4Jm27Mb3NJhvfAAAAI4"]
[Sun Apr 19 01:26:49.656907 2026] [:error] [pid 33517:tid 33538] [client 4.223.172.220:33345] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "aeO-2X4Zz-rubR1wiZ-m-AAAANM"]
[Sun Apr 19 01:26:50.632988 2026] [:error] [pid 32167:tid 32246] [client 4.223.172.220:15045] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "aeO-2kyD4Jm27Mb3NJhvhwAAAJU"]
[Sun Apr 19 01:26:52.103400 2026] [:error] [pid 60910:tid 60931] [client 4.223.172.220:21182] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "aeO-3HFWunkyacYqsD0sUwAAAVM"]
[Sun Apr 19 01:26:53.312626 2026] [:error] [pid 32165:tid 32190] [client 4.223.172.220:38410] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aeO-3ae2vKwEk_N0BrbyNAAAABU"]
[Sun Apr 19 01:26:54.815962 2026] [:error] [pid 32167:tid 32237] [client 4.223.172.220:8605] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aeO-3kyD4Jm27Mb3NJhvkQAAAIw"]
[Sun Apr 19 01:26:58.684077 2026] [:error] [pid 41277:tid 41291] [client 4.223.172.220:34817] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aeO-4kH3ayszMLZYflvr1QAAAYw"]
[Sun Apr 19 01:27:01.958573 2026] [:error] [pid 60910:tid 60921] [client 4.223.172.220:23256] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aeO-5XFWunkyacYqsD0sXAAAAUk"]
[Sun Apr 19 01:27:07.273967 2026] [:error] [pid 33517:tid 33522] [client 4.223.172.220:41460] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeO-634Zz-rubR1wiZ-nCQAAAMM"]
[Sun Apr 19 01:27:09.196588 2026] [:error] [pid 41277:tid 41289] [client 4.223.172.220:39143] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeO-7UH3ayszMLZYflvsDwAAAYo"]
[Sun Apr 19 01:27:11.589500 2026] [:error] [pid 32167:tid 32244] [client 4.223.172.220:9076] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeO-70yD4Jm27Mb3NJhvogAAAJM"]
[Sun Apr 19 01:27:13.638737 2026] [:error] [pid 32165:tid 32173] [client 4.223.172.220:39128] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeO-8ae2vKwEk_N0BrbyTgAAAAQ"]
[Sun Apr 19 01:27:14.496131 2026] [:error] [pid 32167:tid 32243] [client 4.223.172.220:39162] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeO-8kyD4Jm27Mb3NJhvqwAAAJI"]
[Sun Apr 19 01:27:15.470735 2026] [:error] [pid 60910:tid 60933] [client 4.223.172.220:8301] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeO-83FWunkyacYqsD0saAAAAVU"]
[Sun Apr 19 01:27:17.443069 2026] [:error] [pid 32166:tid 32204] [client 4.223.172.220:44298] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeO-9ZCHNkWwdiZnafLI0AAAAEY"]
[Sun Apr 19 01:27:18.751786 2026] [:error] [pid 41277:tid 41290] [client 4.223.172.220:17182] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeO-9kH3ayszMLZYflvsOgAAAYs"]
[Sun Apr 19 01:27:20.938695 2026] [:error] [pid 60910:tid 60914] [client 4.223.172.220:51805] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeO--HFWunkyacYqsD0sfQAAAUI"]
[Sun Apr 19 01:27:24.970941 2026] [:error] [pid 32165:tid 32177] [client 4.223.172.220:19748] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeO-_Ke2vKwEk_N0BrbyXQAAAAg"]
[Sun Apr 19 01:27:26.932939 2026] [:error] [pid 41277:tid 41300] [client 4.223.172.220:30169] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeO-_kH3ayszMLZYflvsVQAAAZU"]
[Sun Apr 19 01:27:27.734935 2026] [:error] [pid 60910:tid 60933] [client 4.223.172.220:8858] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeO-_3FWunkyacYqsD0skwAAAVU"]
[Sun Apr 19 01:27:30.746040 2026] [:error] [pid 41277:tid 41301] [client 4.223.172.220:30186] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aeO_AkH3ayszMLZYflvsaAAAAZY"]
[Sun Apr 19 01:27:36.575120 2026] [:error] [pid 60910:tid 60930] [client 4.223.172.220:18303] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aeO_CHFWunkyacYqsD0srwAAAVI"]
[Sun Apr 19 01:27:39.316647 2026] [:error] [pid 32167:tid 32248] [client 4.223.172.220:28222] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aeO_C0yD4Jm27Mb3NJhv8wAAAJc"]
[Sun Apr 19 01:27:40.831168 2026] [:error] [pid 41277:tid 41297] [client 4.223.172.220:47999] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aeO_DEH3ayszMLZYflvsewAAAZI"]
[Sun Apr 19 01:27:43.142394 2026] [:error] [pid 41277:tid 41294] [client 4.223.172.220:47968] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeO_D0H3ayszMLZYflvsgwAAAY8"]
[Sun Apr 19 01:27:45.542120 2026] [:error] [pid 41277:tid 41303] [client 4.223.172.220:48534] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeO_EUH3ayszMLZYflvsiAAAAZg"]
[Sun Apr 19 01:27:48.889533 2026] [:error] [pid 60910:tid 60925] [client 4.223.172.220:36378] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Sun Apr 19 01:27:49.155335 2026] [:error] [pid 60910:tid 60912] [client 4.223.172.220:36378] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Sun Apr 19 01:27:49.421422 2026] [:error] [pid 60910:tid 60918] [client 4.223.172.220:36378] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Sun Apr 19 01:27:49.690298 2026] [:error] [pid 60910:tid 60915] [client 4.223.172.220:36378] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Sun Apr 19 01:27:49.956322 2026] [:error] [pid 60910:tid 60926] [client 4.223.172.220:36378] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sun Apr 19 01:27:50.221299 2026] [:error] [pid 60910:tid 60932] [client 4.223.172.220:36378] File does not exist: /usr/local/apache/htdocs/suspended-page/ws81.php
[Sun Apr 19 01:27:50.500401 2026] [:error] [pid 60910:tid 60918] [client 4.223.172.220:36378] File does not exist: /usr/local/apache/htdocs/suspended-page/r2.php
[Sun Apr 19 01:27:52.325827 2026] [:error] [pid 60910:tid 60922] [client 4.223.172.220:36378] [client 4.223.172.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "aeO_GHFWunkyacYqsD0s9gAAAUo"]
[Sun Apr 19 01:28:04.983688 2026] [:error] [pid 60910:tid 60935] [client 4.223.172.220:53029] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Apr 19 01:28:05.269625 2026] [:error] [pid 60910:tid 60932] [client 4.223.172.220:53029] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Sun Apr 19 01:28:05.595027 2026] [:error] [pid 60910:tid 60920] [client 4.223.172.220:53029] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Sun Apr 19 01:28:05.909232 2026] [:error] [pid 60910:tid 60913] [client 4.223.172.220:53029] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "aeO_JXFWunkyacYqsD0tMAAAAUE"]
[Sun Apr 19 01:28:08.461856 2026] [:error] [pid 33517:tid 33532] [client 4.223.172.220:30087] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "aeO_KH4Zz-rubR1wiZ-nUgAAAM0"]
[Sun Apr 19 01:28:09.848116 2026] [:error] [pid 32167:tid 32238] [client 4.223.172.220:49818] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "aeO_KUyD4Jm27Mb3NJhwNAAAAI0"]
[Sun Apr 19 01:28:10.781056 2026] [:error] [pid 32252:tid 32268] [client 4.223.172.220:45652] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "aeO_KuXl4Yc-Lt5fJ9ibCgAAAQ4"]
[Sun Apr 19 01:28:12.602014 2026] [:error] [pid 32252:tid 32274] [client 4.223.172.220:17704] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeO_LOXl4Yc-Lt5fJ9ibEQAAARQ"]
[Sun Apr 19 01:28:14.832411 2026] [:error] [pid 41277:tid 41299] [client 4.223.172.220:54375] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeO_LkH3ayszMLZYflvsuAAAAZQ"]
[Sun Apr 19 01:28:16.937248 2026] [:error] [pid 32166:tid 32215] [client 4.223.172.220:30100] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeO_MJCHNkWwdiZnafLJCQAAAFE"]
[Sun Apr 19 01:28:18.678122 2026] [:error] [pid 41277:tid 41279] [client 4.223.172.220:23775] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeO_MkH3ayszMLZYflvsyAAAAYA"]
[Sun Apr 19 01:28:19.770165 2026] [:error] [pid 60910:tid 60925] [client 4.223.172.220:45587] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeO_M3FWunkyacYqsD0tSAAAAU0"]
[Sun Apr 19 01:28:21.635475 2026] [:error] [pid 41277:tid 41296] [client 4.223.172.220:16659] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeO_NUH3ayszMLZYflvs2QAAAZE"]
[Sun Apr 19 01:28:23.568358 2026] [:error] [pid 32165:tid 32192] [client 4.223.172.220:43852] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeO_N6e2vKwEk_N0BrbyhwAAABc"]
[Sun Apr 19 01:28:25.588789 2026] [:error] [pid 32165:tid 32175] [client 4.223.172.220:29544] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeO_Oae2vKwEk_N0BrbyjQAAAAY"]
[Sun Apr 19 01:28:26.518296 2026] [:error] [pid 41277:tid 41295] [client 4.223.172.220:16136] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aeO_OkH3ayszMLZYflvs5QAAAZA"]
[Sun Apr 19 01:28:27.787531 2026] [:error] [pid 32165:tid 32179] [client 4.223.172.220:54391] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aeO_O6e2vKwEk_N0BrbykAAAAAo"]
[Sun Apr 19 01:28:31.694260 2026] [:error] [pid 32167:tid 32225] [client 4.223.172.220:45607] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aeO_P0yD4Jm27Mb3NJhwPwAAAIA"]
[Sun Apr 19 01:28:33.817399 2026] [:error] [pid 32166:tid 32222] [client 4.223.172.220:34895] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aeO_QZCHNkWwdiZnafLJIwAAAFg"]
[Sun Apr 19 01:28:35.402372 2026] [:error] [pid 33517:tid 33529] [client 4.223.172.220:40811] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeO_Q34Zz-rubR1wiZ-ncgAAAMo"]
[Sun Apr 19 01:28:37.603337 2026] [:error] [pid 32166:tid 32217] [client 4.223.172.220:8936] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeO_RZCHNkWwdiZnafLJLwAAAFM"]
[Sun Apr 19 01:28:46.069916 2026] [:error] [pid 32252:tid 32266] [client 4.223.172.220:30652] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeO_TuXl4Yc-Lt5fJ9ibPQAAAQw"]
[Sun Apr 19 01:28:55.448399 2026] [:error] [pid 33517:tid 33519] [client 4.223.172.220:54323] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeO_V34Zz-rubR1wiZ-nkQAAAMA"]
[Sun Apr 19 01:28:57.612435 2026] [:error] [pid 33517:tid 33533] [client 4.223.172.220:62047] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeO_WX4Zz-rubR1wiZ-nlgAAAM4"]
[Sun Apr 19 01:28:59.500859 2026] [:error] [pid 32166:tid 32215] [client 4.223.172.220:42078] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeO_W5CHNkWwdiZnafLJUQAAAFE"]
[Sun Apr 19 01:29:01.120585 2026] [:error] [pid 32252:tid 32256] [client 4.223.172.220:37226] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeO_XeXl4Yc-Lt5fJ9ibVAAAAQI"]
[Sun Apr 19 01:29:01.895123 2026] [:error] [pid 33517:tid 33531] [client 4.223.172.220:62009] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeO_XX4Zz-rubR1wiZ-nmQAAAMw"]
[Sun Apr 19 01:29:02.914617 2026] [:error] [pid 60910:tid 60931] [client 4.223.172.220:25409] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeO_XnFWunkyacYqsD0tkwAAAVM"]
[Sun Apr 19 01:29:04.892414 2026] [:error] [pid 32166:tid 32205] [client 4.223.172.220:15823] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeO_YJCHNkWwdiZnafLJYwAAAEc"]
[Sun Apr 19 01:29:06.338035 2026] [:error] [pid 32167:tid 32237] [client 4.223.172.220:19818] File does not exist: /usr/local/apache/htdocs/suspended-page/xff.php
[Sun Apr 19 01:29:06.905915 2026] [:error] [pid 32167:tid 32236] [client 4.223.172.220:19818] File does not exist: /usr/local/apache/htdocs/suspended-page/wglum1.php
[Sun Apr 19 01:29:07.172173 2026] [:error] [pid 32167:tid 32229] [client 4.223.172.220:19818] File does not exist: /usr/local/apache/htdocs/suspended-page/ng.php
[Sun Apr 19 01:29:07.437732 2026] [:error] [pid 32167:tid 32243] [client 4.223.172.220:19818] File does not exist: /usr/local/apache/htdocs/suspended-page/wgift1.php
[Sun Apr 19 01:29:08.133555 2026] [:error] [pid 32167:tid 32228] [client 4.223.172.220:19818] File does not exist: /usr/local/apache/htdocs/suspended-page/xynz.php
[Sun Apr 19 01:29:08.682482 2026] [:error] [pid 32167:tid 32234] [client 4.223.172.220:19818] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Sun Apr 19 01:29:08.949230 2026] [:error] [pid 32167:tid 32240] [client 4.223.172.220:19818] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Sun Apr 19 01:29:09.235757 2026] [:error] [pid 32167:tid 32238] [client 4.223.172.220:19818] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Sun Apr 19 01:29:09.500731 2026] [:error] [pid 32167:tid 32239] [client 4.223.172.220:19818] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Sun Apr 19 01:29:09.781762 2026] [:error] [pid 32167:tid 32232] [client 4.223.172.220:19818] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Apr 19 01:29:10.304675 2026] [:error] [pid 32167:tid 32244] [client 4.223.172.220:19818] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "aeO_ZkyD4Jm27Mb3NJhwbwAAAJM"]
[Sun Apr 19 01:29:15.101126 2026] [:error] [pid 33517:tid 33540] [client 4.223.172.220:34522] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "aeO_a34Zz-rubR1wiZ-nnQAAANU"]
[Sun Apr 19 01:29:20.085140 2026] [:error] [pid 32167:tid 32237] [client 4.223.172.220:28859] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "aeO_cEyD4Jm27Mb3NJhwhgAAAIw"]
[Sun Apr 19 01:29:27.212162 2026] [:error] [pid 32167:tid 32230] [client 4.223.172.220:34492] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "aeO_d0yD4Jm27Mb3NJhwmgAAAIU"]
[Sun Apr 19 01:29:29.910920 2026] [:error] [pid 32252:tid 32260] [client 4.223.172.220:63295] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "aeO_eeXl4Yc-Lt5fJ9ibiAAAAQY"]
[Sun Apr 19 01:29:34.642843 2026] [:error] [pid 60910:tid 60923] [client 4.223.172.220:42592] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "aeO_fnFWunkyacYqsD0ttwAAAUs"]
[Sun Apr 19 01:29:36.269949 2026] [:error] [pid 60910:tid 60931] [client 4.223.172.220:62537] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "aeO_gHFWunkyacYqsD0twQAAAVM"]
[Sun Apr 19 01:29:37.293133 2026] [:error] [pid 32167:tid 32239] [client 4.223.172.220:42552] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aeO_gUyD4Jm27Mb3NJhwtAAAAI4"]
[Sun Apr 19 01:29:38.649686 2026] [:error] [pid 33517:tid 33531] [client 4.223.172.220:63292] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aeO_gn4Zz-rubR1wiZ-n0gAAAMw"]
[Sun Apr 19 01:29:43.696498 2026] [:error] [pid 60910:tid 60918] [client 4.223.172.220:43060] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aeO_h3FWunkyacYqsD0t3gAAAUY"]
[Sun Apr 19 01:29:52.217636 2026] [:error] [pid 41277:tid 41280] [client 4.223.172.220:42547] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeO_kEH3ayszMLZYflvtYAAAAYE"]
[Sun Apr 19 01:29:53.550875 2026] [:error] [pid 41277:tid 41294] [client 4.223.172.220:42508] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeO_kUH3ayszMLZYflvtZQAAAY8"]
[Sun Apr 19 01:29:55.164325 2026] [:error] [pid 41277:tid 41291] [client 4.223.172.220:42540] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeO_k0H3ayszMLZYflvtawAAAYw"]
[Sun Apr 19 01:29:56.913831 2026] [:error] [pid 32252:tid 32268] [client 4.223.172.220:8543] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeO_lOXl4Yc-Lt5fJ9ibpgAAAQ4"]
[Sun Apr 19 01:29:59.407370 2026] [:error] [pid 60910:tid 60914] [client 4.223.172.220:19277] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "aeO_l3FWunkyacYqsD0t6QAAAUI"]
[Sun Apr 19 01:30:01.021921 2026] [:error] [pid 60910:tid 60934] [client 4.223.172.220:25946] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "aeO_mXFWunkyacYqsD0t8wAAAVY"]
[Sun Apr 19 01:30:03.553479 2026] [:error] [pid 33517:tid 33527] [client 4.223.172.220:8691] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "aeO_m34Zz-rubR1wiZ-n7wAAAMg"]
[Sun Apr 19 01:30:09.907584 2026] [:error] [pid 41277:tid 41293] [client 4.223.172.220:8486] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sun Apr 19 01:30:10.176924 2026] [:error] [pid 41277:tid 41296] [client 4.223.172.220:8486] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Sun Apr 19 01:30:10.451802 2026] [:error] [pid 41277:tid 41300] [client 4.223.172.220:8486] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Sun Apr 19 01:30:10.748014 2026] [:error] [pid 41277:tid 41280] [client 4.223.172.220:8486] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Sun Apr 19 01:30:11.014889 2026] [:error] [pid 41277:tid 41303] [client 4.223.172.220:8486] File does not exist: /usr/local/apache/htdocs/suspended-page/ws82.php
[Sun Apr 19 01:30:11.298817 2026] [:error] [pid 41277:tid 41295] [client 4.223.172.220:8486] [client 4.223.172.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeO_o0H3ayszMLZYflvthQAAAZA"]
[Sun Apr 19 01:30:17.392279 2026] [:error] [pid 32165:tid 32178] [client 4.223.172.220:8528] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sun Apr 19 01:30:17.678628 2026] [:error] [pid 32165:tid 32192] [client 4.223.172.220:8528] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Sun Apr 19 01:30:17.966493 2026] [:error] [pid 32165:tid 32187] [client 4.223.172.220:8528] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Sun Apr 19 01:30:19.056351 2026] [:error] [pid 32165:tid 32180] [client 4.223.172.220:8528] File does not exist: /usr/local/apache/htdocs/suspended-page/zogy1.php
[Sun Apr 19 01:30:20.446293 2026] [:error] [pid 32165:tid 32174] [client 4.223.172.220:8528] File does not exist: /usr/local/apache/htdocs/suspended-page/state.php
[Sun Apr 19 01:30:20.741914 2026] [:error] [pid 32165:tid 32189] [client 4.223.172.220:8528] File does not exist: /usr/local/apache/htdocs/suspended-page/ss.php
[Sun Apr 19 01:30:21.025206 2026] [:error] [pid 32165:tid 32188] [client 4.223.172.220:8528] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeO_rae2vKwEk_N0Brby7QAAABM"]
[Sun Apr 19 01:30:28.936679 2026] [:error] [pid 60910:tid 60920] [client 4.223.172.220:22777] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeO_tHFWunkyacYqsD0uYwAAAUg"]
[Sun Apr 19 01:30:46.588612 2026] [:error] [pid 32166:tid 32203] [client 4.223.172.220:19260] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "aeO_xpCHNkWwdiZnafLJtAAAAEU"]
[Sun Apr 19 01:30:48.153281 2026] [:error] [pid 33517:tid 33526] [client 4.223.172.220:40717] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "aeO_yH4Zz-rubR1wiZ-oPwAAAMc"]
[Sun Apr 19 01:30:49.692034 2026] [:error] [pid 60910:tid 60930] [client 4.223.172.220:30685] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "aeO_yXFWunkyacYqsD0u1AAAAVI"]
[Sun Apr 19 01:30:50.945679 2026] [:error] [pid 32167:tid 32227] [client 4.223.172.220:28921] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "aeO_ykyD4Jm27Mb3NJhxEgAAAII"]
[Sun Apr 19 01:30:54.364421 2026] [:error] [pid 32167:tid 32240] [client 4.223.172.220:27602] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mifta.php"] [unique_id "aeO_zkyD4Jm27Mb3NJhxHAAAAI8"]
[Sun Apr 19 01:30:59.598674 2026] [:error] [pid 32252:tid 32264] [client 4.223.172.220:30677] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mifta.php"] [unique_id "aeO_0-Xl4Yc-Lt5fJ9ib1wAAAQo"]
[Sun Apr 19 01:31:02.714046 2026] [:error] [pid 32167:tid 32238] [client 4.223.172.220:31269] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mifta.php"] [unique_id "aeO_1kyD4Jm27Mb3NJhxLAAAAI0"]
[Sun Apr 19 01:31:05.183232 2026] [:error] [pid 41277:tid 41297] [client 4.223.172.220:8605] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mifta.php"] [unique_id "aeO_2UH3ayszMLZYflvuEAAAAZI"]
[Sun Apr 19 01:31:06.669351 2026] [:error] [pid 41277:tid 41296] [client 4.223.172.220:36468] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aeO_2kH3ayszMLZYflvuHQAAAZE"]
[Sun Apr 19 01:31:08.315555 2026] [:error] [pid 33517:tid 33528] [client 4.223.172.220:20096] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aeO_3H4Zz-rubR1wiZ-oWQAAAMk"]
[Sun Apr 19 01:31:10.145407 2026] [:error] [pid 60910:tid 60917] [client 4.223.172.220:8603] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aeO_3nFWunkyacYqsD0u-wAAAUU"]
[Sun Apr 19 01:31:11.062706 2026] [:error] [pid 60910:tid 60923] [client 4.223.172.220:20154] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aeO_33FWunkyacYqsD0u_QAAAUs"]
[Sun Apr 19 01:31:11.928191 2026] [:error] [pid 60910:tid 60920] [client 4.223.172.220:32736] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "aeO_33FWunkyacYqsD0vAQAAAUg"]
[Sun Apr 19 01:31:12.747148 2026] [:error] [pid 60910:tid 60912] [client 4.223.172.220:33402] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "aeO_4HFWunkyacYqsD0vBQAAAUA"]
[Sun Apr 19 01:31:15.128567 2026] [:error] [pid 60910:tid 60930] [client 4.223.172.220:27582] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "aeO_43FWunkyacYqsD0vCQAAAVI"]
[Sun Apr 19 01:31:17.340171 2026] [:error] [pid 32252:tid 32274] [client 4.223.172.220:20724] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "aeO_5eXl4Yc-Lt5fJ9ib4wAAARQ"]
[Sun Apr 19 01:31:18.736775 2026] [:error] [pid 32252:tid 32277] [client 4.223.172.220:37806] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeO_5uXl4Yc-Lt5fJ9ib5gAAARc"]
[Sun Apr 19 01:31:20.495860 2026] [:error] [pid 33517:tid 33530] [client 4.223.172.220:34846] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Sun Apr 19 01:31:20.780127 2026] [:error] [pid 33517:tid 33525] [client 4.223.172.220:34846] File does not exist: /usr/local/apache/htdocs/suspended-page/packsin1.php
[Sun Apr 19 01:31:21.074494 2026] [:error] [pid 33517:tid 33533] [client 4.223.172.220:34846] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Sun Apr 19 01:31:21.359846 2026] [:error] [pid 33517:tid 33534] [client 4.223.172.220:34846] File does not exist: /usr/local/apache/htdocs/suspended-page/img.php
[Sun Apr 19 01:31:21.645324 2026] [:error] [pid 33517:tid 33527] [client 4.223.172.220:34846] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Apr 19 01:31:21.932900 2026] [:error] [pid 33517:tid 33529] [client 4.223.172.220:34846] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Sun Apr 19 01:31:23.253285 2026] [:error] [pid 33517:tid 33529] [client 4.223.172.220:34846] File does not exist: /usr/local/apache/htdocs/suspended-page/maxro.php
[Sun Apr 19 01:31:23.759260 2026] [:error] [pid 33517:tid 33519] [client 4.223.172.220:34846] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Sun Apr 19 01:31:24.060614 2026] [:error] [pid 33517:tid 33542] [client 4.223.172.220:34846] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-block.php
[Sun Apr 19 01:31:24.381985 2026] [:error] [pid 33517:tid 33543] [client 4.223.172.220:34846] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sun Apr 19 01:31:24.680478 2026] [:error] [pid 33517:tid 33532] [client 4.223.172.220:34846] File does not exist: /usr/local/apache/htdocs/suspended-page/areak1.php
[Sun Apr 19 01:31:24.963344 2026] [:error] [pid 33517:tid 33523] [client 4.223.172.220:34846] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aeO_7H4Zz-rubR1wiZ-oeQAAAMQ"]
[Sun Apr 19 01:31:28.888884 2026] [:error] [pid 60910:tid 60921] [client 4.223.172.220:9084] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aeO_8HFWunkyacYqsD0vKAAAAUk"]
[Sun Apr 19 01:31:33.877471 2026] [:error] [pid 41277:tid 41293] [client 4.223.172.220:44295] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aeO_9UH3ayszMLZYflvudQAAAY4"]
[Sun Apr 19 01:31:37.569265 2026] [:error] [pid 33517:tid 33536] [client 4.223.172.220:24954] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aeO_-X4Zz-rubR1wiZ-oiAAAANE"]
[Sun Apr 19 01:31:40.251797 2026] [:error] [pid 41277:tid 41279] [client 4.223.172.220:24953] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeO__EH3ayszMLZYflvuhQAAAYA"]
[Sun Apr 19 01:31:41.818964 2026] [:error] [pid 32166:tid 32207] [client 4.223.172.220:8880] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeO__ZCHNkWwdiZnafLJ2QAAAEk"]
[Sun Apr 19 01:31:42.907336 2026] [:error] [pid 32167:tid 32234] [client 4.223.172.220:8834] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeO__kyD4Jm27Mb3NJhxUgAAAIk"]
[Sun Apr 19 01:31:45.895167 2026] [:error] [pid 33517:tid 33541] [client 4.223.172.220:39638] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aePAAX4Zz-rubR1wiZ-okwAAANY"]
[Sun Apr 19 01:31:48.489576 2026] [:error] [pid 60910:tid 60921] [client 4.223.172.220:21725] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aePABHFWunkyacYqsD0vagAAAUk"]
[Sun Apr 19 01:31:49.812062 2026] [:error] [pid 32252:tid 32267] [client 4.223.172.220:30151] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aePABeXl4Yc-Lt5fJ9icAQAAAQ0"]
[Sun Apr 19 01:31:50.463779 2026] [:error] [pid 60910:tid 60918] [client 4.223.172.220:49875] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aePABnFWunkyacYqsD0vdQAAAUY"]
[Sun Apr 19 01:31:51.575116 2026] [:error] [pid 32167:tid 32226] [client 4.223.172.220:38478] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aePAB0yD4Jm27Mb3NJhxbAAAAIE"]
[Sun Apr 19 01:31:59.269920 2026] [:error] [pid 33517:tid 33529] [client 4.223.172.220:40201] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gz.php"] [unique_id "aePAD34Zz-rubR1wiZ-oqgAAAMo"]
[Sun Apr 19 01:32:13.143767 2026] [:error] [pid 32167:tid 32225] [client 4.223.172.220:47915] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aePAHUyD4Jm27Mb3NJhxnAAAAIA"]
[Sun Apr 19 01:32:16.618628 2026] [:error] [pid 32252:tid 32271] [client 4.223.172.220:36387] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aePAIOXl4Yc-Lt5fJ9icGgAAARE"]
[Sun Apr 19 01:32:17.934828 2026] [:error] [pid 60910:tid 60925] [client 4.223.172.220:55574] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aePAIXFWunkyacYqsD0vzAAAAU0"]
[Sun Apr 19 01:32:22.667174 2026] [:error] [pid 60910:tid 60925] [client 4.223.172.220:8414] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aePAJnFWunkyacYqsD0v4gAAAU0"]
[Sun Apr 19 01:32:24.498722 2026] [:error] [pid 60910:tid 60916] [client 4.223.172.220:25384] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Sun Apr 19 01:32:24.789084 2026] [:error] [pid 60910:tid 60921] [client 4.223.172.220:25384] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Sun Apr 19 01:32:25.079590 2026] [:error] [pid 60910:tid 60932] [client 4.223.172.220:25384] File does not exist: /usr/local/apache/htdocs/suspended-page/ws68.php
[Sun Apr 19 01:32:25.420637 2026] [:error] [pid 60910:tid 60914] [client 4.223.172.220:25384] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Sun Apr 19 01:32:25.713644 2026] [:error] [pid 60910:tid 60913] [client 4.223.172.220:25384] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Sun Apr 19 01:32:26.014072 2026] [:error] [pid 60910:tid 60921] [client 4.223.172.220:25384] File does not exist: /usr/local/apache/htdocs/suspended-page/son1.php
[Sun Apr 19 01:32:26.602578 2026] [:error] [pid 60910:tid 60921] [client 4.223.172.220:25384] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Sun Apr 19 01:32:26.893192 2026] [:error] [pid 60910:tid 60929] [client 4.223.172.220:25384] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Sun Apr 19 01:32:27.184084 2026] [:error] [pid 60910:tid 60923] [client 4.223.172.220:25384] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Sun Apr 19 01:32:27.475354 2026] [:error] [pid 60910:tid 60916] [client 4.223.172.220:25384] File does not exist: /usr/local/apache/htdocs/suspended-page/ws84.php
[Sun Apr 19 01:32:27.766116 2026] [:error] [pid 60910:tid 60932] [client 4.223.172.220:25384] File does not exist: /usr/local/apache/htdocs/suspended-page/ws61.php
[Sun Apr 19 01:32:28.199460 2026] [:error] [pid 60910:tid 60915] [client 4.223.172.220:25384] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp-image.php"] [unique_id "aePALHFWunkyacYqsD0v_wAAAUM"]
[Sun Apr 19 01:32:29.917525 2026] [:error] [pid 33517:tid 33537] [client 4.223.172.220:52415] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp-image.php"] [unique_id "aePALX4Zz-rubR1wiZ-o2QAAANI"]
[Sun Apr 19 01:32:31.286697 2026] [:error] [pid 41277:tid 41299] [client 4.223.172.220:32649] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp-image.php"] [unique_id "aePAL0H3ayszMLZYflvu7wAAAZQ"]
[Sun Apr 19 01:32:34.421048 2026] [:error] [pid 41277:tid 41302] [client 4.223.172.220:45655] [client 4.223.172.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp-image.php"] [unique_id "aePAMkH3ayszMLZYflvu9gAAAZc"]
[Sun Apr 19 03:49:09.657741 2026] [:error] [pid 40227:tid 40247] [client 82.112.253.162:45466] [client 82.112.253.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/HEAD"] [unique_id "aePgNcmYbIO-pIsDFC10-gAAAA8"]
[Sun Apr 19 03:49:11.417112 2026] [:error] [pid 40228:tid 40272] [client 82.112.253.162:50272] [client 82.112.253.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aePgN9xU5CVPllHZihwuXwAAAEU"]
[Sun Apr 19 03:49:12.169203 2026] [:error] [pid 40523:tid 40621] [client 82.112.253.162:50356] [client 82.112.253.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "aePgOBEzcODHo9hQBygF1gAAAgY"]
[Sun Apr 19 03:49:12.730941 2026] [:error] [pid 40521:tid 40583] [client 82.112.253.162:50368] [client 82.112.253.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.development"] [unique_id "aePgOEEtmklX8iswPrCbeAAAAZg"]
[Sun Apr 19 03:49:16.527825 2026] [:error] [pid 40227:tid 40237] [client 82.112.253.162:50372] [client 82.112.253.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/backend/.env"] [unique_id "aePgPMmYbIO-pIsDFC10_QAAAAU"]
[Sun Apr 19 19:13:47.518316 2026] [:error] [pid 15765:tid 15852] [client 213.35.109.170:58223] [client 213.35.109.170] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in ARGS:auth outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||windfcau.windfarmcoolants.com.au|F|3"] [data "ARGS:auth=\\x00"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-automatic/inc/csv.php"] [unique_id "aeS46_Rqinw-W5EwQ77qxgAAAoA"]
[Sun Apr 19 21:59:15.250619 2026] [:error] [pid 15764:tid 15838] [client 34.46.243.112:57057] [client 34.46.243.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.46.243.112, incrementing ddos counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aeTfs2LL_sqdSHoVp-QmaAAAAkw"]
[Sun Apr 19 21:59:15.254222 2026] [:error] [pid 15764:tid 15838] [client 34.46.243.112:57057] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Apr 19 21:59:16.029958 2026] [:error] [pid 15764:tid 15837] [client 34.46.243.112:57057] [client 34.46.243.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aeTftGLL_sqdSHoVp-QmbAAAAks"]
[Sun Apr 19 21:59:16.534636 2026] [:error] [pid 47775:tid 47863] [client 34.46.243.112:62192] [client 34.46.243.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aeTftLmztjlk9tsmoewc2QAAAJQ"]
[Sun Apr 19 21:59:16.983518 2026] [:error] [pid 15765:tid 15864] [client 34.46.243.112:62493] [client 34.46.243.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aeTftPRqinw-W5EwQ74BOQAAAos"]
[Sun Apr 19 21:59:17.525357 2026] [:error] [pid 15760:tid 15775] [client 34.46.243.112:63643] [client 34.46.243.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aeTftfSdD_XHQMJ_IStE9gAAAcc"]
[Sun Apr 19 21:59:18.025533 2026] [:error] [pid 47772:tid 47796] [client 34.46.243.112:53118] [client 34.46.243.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aeTftoc0L16cb4smAz_JdAAAAAc"]
[Sun Apr 19 21:59:18.499068 2026] [:error] [pid 15760:tid 15789] [client 34.46.243.112:52395] [client 34.46.243.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aeTftvSdD_XHQMJ_IStE_wAAAdU"]
[Sun Apr 19 23:54:46.325989 2026] [:error] [pid 15764:tid 15846] [client 136.116.128.106:51420] [client 136.116.128.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.116.128.106, incrementing ddos counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aeT6xmLL_sqdSHoVp-RRgQAAAlQ"]
[Sun Apr 19 23:54:46.328330 2026] [:error] [pid 15764:tid 15846] [client 136.116.128.106:51420] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Apr 19 23:54:46.547031 2026] [:error] [pid 15764:tid 15838] [client 136.116.128.106:51420] [client 136.116.128.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "aeT6xmLL_sqdSHoVp-RRhAAAAkw"]
[Sun Apr 19 23:54:47.013570 2026] [:error] [pid 15694:tid 15733] [client 136.116.128.106:57956] [client 136.116.128.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aeT6x7imB-jol1fwqAofewAAAYc"]
[Sun Apr 19 23:54:47.492033 2026] [:error] [pid 47773:tid 47820] [client 136.116.128.106:52252] [client 136.116.128.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aeT6x-iBHdnCJDuPq9BjJQAAAEQ"]
[Sun Apr 19 23:54:47.952151 2026] [:error] [pid 15763:tid 15796] [client 136.116.128.106:60836] [client 136.116.128.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aeT6x7MXv1Y1THOoxaAh7wAAAgA"]
[Sun Apr 19 23:54:48.444904 2026] [:error] [pid 15763:tid 15814] [client 136.116.128.106:60907] [client 136.116.128.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aeT6yLMXv1Y1THOoxaAh8AAAAhI"]
[Mon Apr 20 08:47:36.001664 2026] [:error] [pid 64333:tid 64394] [client 158.158.114.211:26041] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Mon Apr 20 08:47:36.245629 2026] [:error] [pid 64333:tid 64376] [client 158.158.114.211:26041] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Mon Apr 20 08:47:36.488565 2026] [:error] [pid 64333:tid 64397] [client 158.158.114.211:26041] File does not exist: /usr/local/apache/htdocs/suspended-page/kcs.php
[Mon Apr 20 08:47:36.730961 2026] [:error] [pid 64333:tid 64400] [client 158.158.114.211:26041] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-post-data.php
[Mon Apr 20 08:47:36.973798 2026] [:error] [pid 64333:tid 64389] [client 158.158.114.211:26041] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211022.php
[Mon Apr 20 08:47:37.218195 2026] [:error] [pid 64333:tid 64390] [client 158.158.114.211:26041] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Mon Apr 20 08:47:37.460749 2026] [:error] [pid 64333:tid 64391] [client 158.158.114.211:26041] File does not exist: /usr/local/apache/htdocs/suspended-page/cs.php
[Mon Apr 20 08:47:37.705620 2026] [:error] [pid 64333:tid 64394] [client 158.158.114.211:26041] File does not exist: /usr/local/apache/htdocs/suspended-page/1index.php
[Mon Apr 20 14:51:00.571376 2026] [:error] [pid 6928:tid 6938] [client 2.24.210.210:34450] [client 2.24.210.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aeXM1B3y7MHq1iB0qYoglAAAAUg"]
[Mon Apr 20 18:40:33.266861 2026] [:error] [pid 11350:tid 11366] [client 34.182.185.173:53265] [client 34.182.185.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.182.185.173, incrementing ddos counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aeYCof4EoMBgOJuJnT1jJAAAAAc"]
[Mon Apr 20 18:40:33.270920 2026] [:error] [pid 11350:tid 11366] [client 34.182.185.173:53265] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Apr 20 18:40:36.047670 2026] [:error] [pid 11350:tid 11368] [client 34.182.185.173:53265] [client 34.182.185.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aeYCpP4EoMBgOJuJnT1jMAAAAAk"]
[Mon Apr 20 18:40:36.472742 2026] [:error] [pid 11441:tid 11462] [client 34.182.185.173:53769] [client 34.182.185.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aeYCpMixByFUvmh319B7SAAAANM"]
[Mon Apr 20 18:40:37.069911 2026] [:error] [pid 11494:tid 11520] [client 34.182.185.173:60793] [client 34.182.185.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aeYCpcgko5iFiE8YoyS7zwAAAZg"]
[Mon Apr 20 18:40:37.538706 2026] [:error] [pid 42014:tid 42026] [client 34.182.185.173:51177] [client 34.182.185.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aeYCpcek-00-ZI0f1NprMwAAAQo"]
[Mon Apr 20 18:40:38.019702 2026] [:error] [pid 11350:tid 11371] [client 34.182.185.173:57375] [client 34.182.185.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aeYCpv4EoMBgOJuJnT1jMQAAAAw"]
[Mon Apr 20 18:40:38.524459 2026] [:error] [pid 11494:tid 11499] [client 34.182.185.173:55994] [client 34.182.185.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aeYCpsgko5iFiE8YoyS70QAAAYM"]
[Mon Apr 20 18:40:38.999985 2026] [:error] [pid 11441:tid 11452] [client 34.182.185.173:58057] [client 34.182.185.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aeYCpsixByFUvmh319B7TAAAAMk"]
[Tue Apr 21 03:09:56.917463 2026] [:error] [pid 11351:tid 11392] [client 20.100.178.47:29540] File does not exist: /usr/local/apache/htdocs/suspended-page/gold.php
[Tue Apr 21 03:09:57.179481 2026] [:error] [pid 11351:tid 11388] [client 20.100.178.47:29540] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Tue Apr 21 03:09:58.530304 2026] [:error] [pid 11351:tid 11397] [client 20.100.178.47:29540] File does not exist: /usr/local/apache/htdocs/suspended-page/m57.php
[Tue Apr 21 03:09:58.792216 2026] [:error] [pid 11351:tid 11403] [client 20.100.178.47:29540] File does not exist: /usr/local/apache/htdocs/suspended-page/sw.php
[Tue Apr 21 03:09:59.055318 2026] [:error] [pid 11351:tid 11394] [client 20.100.178.47:29540] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-m57.php
[Tue Apr 21 03:10:00.665933 2026] [:error] [pid 11351:tid 11394] [client 20.100.178.47:29540] File does not exist: /usr/local/apache/htdocs/suspended-page/vuln.php
[Tue Apr 21 03:10:00.927463 2026] [:error] [pid 11351:tid 11395] [client 20.100.178.47:29540] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "aeZ6CAN8Z1-vktaI_tPYQgAAAEg"]
[Tue Apr 21 03:10:01.802083 2026] [:error] [pid 42014:tid 42021] [client 20.100.178.47:16146] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "aeZ6Ccek-00-ZI0f1NrDKAAAAQU"]
[Tue Apr 21 03:10:02.646084 2026] [:error] [pid 42014:tid 42018] [client 20.100.178.47:17934] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "aeZ6Csek-00-ZI0f1NrDKwAAAQI"]
[Tue Apr 21 03:10:03.289932 2026] [:error] [pid 11352:tid 11429] [client 20.100.178.47:17974] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "aeZ6C2l10mhMSfJ7ir8VMwAAAI8"]
[Tue Apr 21 03:10:03.914324 2026] [:error] [pid 42014:tid 42039] [client 20.100.178.47:48100] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZ6C8ek-00-ZI0f1NrDNgAAARc"]
[Tue Apr 21 03:10:04.486520 2026] [:error] [pid 42014:tid 42024] [client 20.100.178.47:30149] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZ6DMek-00-ZI0f1NrDOgAAAQg"]
[Tue Apr 21 03:10:05.184846 2026] [:error] [pid 11494:tid 11501] [client 20.100.178.47:17946] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZ6Dcgko5iFiE8YoyRe6AAAAYU"]
[Tue Apr 21 03:10:05.999406 2026] [:error] [pid 11441:tid 11448] [client 20.100.178.47:29537] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZ6DcixByFUvmh319D9oAAAAMU"]
[Tue Apr 21 03:10:06.677904 2026] [:error] [pid 42014:tid 42018] [client 20.100.178.47:20169] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZ6Dsek-00-ZI0f1NrDQAAAAQI"]
[Tue Apr 21 03:10:07.300096 2026] [:error] [pid 6928:tid 6948] [client 20.100.178.47:30201] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZ6Dx3y7MHq1iB0qYoDEwAAAVI"]
[Tue Apr 21 03:10:07.880093 2026] [:error] [pid 11352:tid 11428] [client 20.100.178.47:11380] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZ6D2l10mhMSfJ7ir8VNQAAAI4"]
[Tue Apr 21 03:10:08.433151 2026] [:error] [pid 6928:tid 6945] [client 20.100.178.47:30188] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZ6EB3y7MHq1iB0qYoDGQAAAU8"]
[Tue Apr 21 03:10:08.979790 2026] [:error] [pid 11494:tid 11498] [client 20.100.178.47:17955] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZ6EMgko5iFiE8YoyRe7wAAAYI"]
[Tue Apr 21 03:10:09.559884 2026] [:error] [pid 42014:tid 42036] [client 20.100.178.47:11868] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZ6Ecek-00-ZI0f1NrDRgAAARQ"]
[Tue Apr 21 03:10:10.144402 2026] [:error] [pid 11351:tid 11403] [client 20.100.178.47:26210] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZ6EgN8Z1-vktaI_tPYRgAAAFA"]
[Tue Apr 21 03:10:11.011702 2026] [:error] [pid 42014:tid 42025] [client 20.100.178.47:14048] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZ6E8ek-00-ZI0f1NrDSwAAAQk"]
[Tue Apr 21 03:10:11.571492 2026] [:error] [pid 42014:tid 42031] [client 20.100.178.47:30196] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class-bda.php"] [unique_id "aeZ6E8ek-00-ZI0f1NrDTgAAAQ8"]
[Tue Apr 21 03:10:12.198670 2026] [:error] [pid 6928:tid 6946] [client 20.100.178.47:20209] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class-bda.php"] [unique_id "aeZ6FB3y7MHq1iB0qYoDIQAAAVA"]
[Tue Apr 21 03:10:12.757854 2026] [:error] [pid 11441:tid 11459] [client 20.100.178.47:14029] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class-bda.php"] [unique_id "aeZ6FMixByFUvmh319D9ygAAANA"]
[Tue Apr 21 03:10:13.400303 2026] [:error] [pid 11494:tid 11500] [client 20.100.178.47:26210] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class-bda.php"] [unique_id "aeZ6Fcgko5iFiE8YoyRe-wAAAYQ"]
[Tue Apr 21 03:10:14.025636 2026] [:error] [pid 11494:tid 11512] [client 20.100.178.47:26214] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bhm.php"] [unique_id "aeZ6Fsgko5iFiE8YoyRfAAAAAZA"]
[Tue Apr 21 03:10:14.646164 2026] [:error] [pid 42014:tid 42023] [client 20.100.178.47:16152] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bhm.php"] [unique_id "aeZ6Fsek-00-ZI0f1NrDUQAAAQc"]
[Tue Apr 21 03:10:15.344780 2026] [:error] [pid 11494:tid 11497] [client 20.100.178.47:14078] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bhm.php"] [unique_id "aeZ6F8gko5iFiE8YoyRfDQAAAYE"]
[Tue Apr 21 03:10:15.935489 2026] [:error] [pid 11494:tid 11505] [client 20.100.178.47:46373] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bhm.php"] [unique_id "aeZ6F8gko5iFiE8YoyRfGAAAAYk"]
[Tue Apr 21 03:10:16.721862 2026] [:error] [pid 11494:tid 11504] [client 20.100.178.47:16157] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "aeZ6GMgko5iFiE8YoyRfHgAAAYg"]
[Tue Apr 21 03:10:17.381184 2026] [:error] [pid 11441:tid 11444] [client 20.100.178.47:1798] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "aeZ6GcixByFUvmh319D99QAAAME"]
[Tue Apr 21 03:10:18.124546 2026] [:error] [pid 42014:tid 42018] [client 20.100.178.47:20191] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "aeZ6Gsek-00-ZI0f1NrDVQAAAQI"]
[Tue Apr 21 03:10:18.932952 2026] [:error] [pid 42014:tid 42017] [client 20.100.178.47:11877] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "aeZ6Gsek-00-ZI0f1NrDVgAAAQE"]
[Tue Apr 21 03:10:19.627908 2026] [:error] [pid 11350:tid 11359] [client 20.100.178.47:20177] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZ6G_4EoMBgOJuJnT1ZXQAAAAA"]
[Tue Apr 21 03:10:20.364331 2026] [:error] [pid 42014:tid 42022] [client 20.100.178.47:12121] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZ6HMek-00-ZI0f1NrDWgAAAQY"]
[Tue Apr 21 03:10:21.167767 2026] [:error] [pid 11494:tid 11510] [client 20.100.178.47:11376] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZ6Hcgko5iFiE8YoyRfLwAAAY4"]
[Tue Apr 21 03:10:21.844784 2026] [:error] [pid 11441:tid 11461] [client 20.100.178.47:16129] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZ6HcixByFUvmh319D-FQAAANI"]
[Tue Apr 21 03:10:22.616390 2026] [:error] [pid 11352:tid 11416] [client 20.100.178.47:12102] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "aeZ6Hml10mhMSfJ7ir8VSAAAAII"]
[Tue Apr 21 03:10:23.568608 2026] [:error] [pid 11350:tid 11380] [client 20.100.178.47:11840] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "aeZ6H_4EoMBgOJuJnT1ZeAAAABU"]
[Tue Apr 21 03:10:24.369025 2026] [:error] [pid 42014:tid 42038] [client 20.100.178.47:20918] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "aeZ6IMek-00-ZI0f1NrDbgAAARY"]
[Tue Apr 21 03:10:25.110225 2026] [:error] [pid 11352:tid 11431] [client 20.100.178.47:20879] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "aeZ6IWl10mhMSfJ7ir8VUQAAAJE"]
[Tue Apr 21 03:10:25.940824 2026] [:error] [pid 11350:tid 11368] [client 20.100.178.47:1787] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ref.php"] [unique_id "aeZ6If4EoMBgOJuJnT1ZhQAAAAk"]
[Tue Apr 21 03:10:26.771660 2026] [:error] [pid 11351:tid 11391] [client 20.100.178.47:23587] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ref.php"] [unique_id "aeZ6IgN8Z1-vktaI_tPYXgAAAEQ"]
[Tue Apr 21 03:10:27.504107 2026] [:error] [pid 11350:tid 11381] [client 20.100.178.47:26779] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ref.php"] [unique_id "aeZ6I_4EoMBgOJuJnT1ZiQAAABY"]
[Tue Apr 21 03:10:28.260905 2026] [:error] [pid 11350:tid 11380] [client 20.100.178.47:1753] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ref.php"] [unique_id "aeZ6JP4EoMBgOJuJnT1ZjQAAABU"]
[Tue Apr 21 03:10:29.029597 2026] [:error] [pid 11351:tid 11387] [client 20.100.178.47:26869] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aeZ6JQN8Z1-vktaI_tPYaQAAAEA"]
[Tue Apr 21 03:10:29.852256 2026] [:error] [pid 6928:tid 6933] [client 20.100.178.47:12501] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aeZ6JR3y7MHq1iB0qYoDOQAAAUM"]
[Tue Apr 21 03:10:30.719702 2026] [:error] [pid 11351:tid 11401] [client 20.100.178.47:28767] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aeZ6JgN8Z1-vktaI_tPYbgAAAE4"]
[Tue Apr 21 03:10:31.382482 2026] [:error] [pid 11351:tid 11387] [client 20.100.178.47:22127] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aeZ6JwN8Z1-vktaI_tPYeAAAAEA"]
[Tue Apr 21 03:10:32.308558 2026] [:error] [pid 11350:tid 11365] [client 20.100.178.47:25562] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aeZ6KP4EoMBgOJuJnT1ZqgAAAAY"]
[Tue Apr 21 03:10:33.086202 2026] [:error] [pid 11351:tid 11400] [client 20.100.178.47:22140] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aeZ6KQN8Z1-vktaI_tPYfAAAAE0"]
[Tue Apr 21 03:10:33.943888 2026] [:error] [pid 11351:tid 11402] [client 20.100.178.47:1988] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aeZ6KQN8Z1-vktaI_tPYggAAAE8"]
[Tue Apr 21 03:10:34.591151 2026] [:error] [pid 11351:tid 11395] [client 20.100.178.47:11650] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aeZ6KgN8Z1-vktaI_tPYiAAAAEg"]
[Tue Apr 21 03:10:35.326660 2026] [:error] [pid 11351:tid 11398] [client 20.100.178.47:26765] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aeZ6KwN8Z1-vktaI_tPYiwAAAEs"]
[Tue Apr 21 03:10:36.560002 2026] [:error] [pid 11350:tid 11364] [client 20.100.178.47:12596] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aeZ6LP4EoMBgOJuJnT1Z1QAAAAU"]
[Tue Apr 21 03:10:37.425931 2026] [:error] [pid 11350:tid 11374] [client 20.100.178.47:26871] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aeZ6Lf4EoMBgOJuJnT1Z4wAAAA8"]
[Tue Apr 21 03:10:38.225834 2026] [:error] [pid 11351:tid 11392] [client 20.100.178.47:11710] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aeZ6LgN8Z1-vktaI_tPYlAAAAEU"]
[Tue Apr 21 03:10:38.957385 2026] [:error] [pid 11494:tid 11505] [client 20.100.178.47:22792] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aeZ6Lsgko5iFiE8YoyRfRAAAAYk"]
[Tue Apr 21 03:10:39.561550 2026] [:error] [pid 11494:tid 11516] [client 20.100.178.47:1334] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aeZ6L8gko5iFiE8YoyRfSAAAAZQ"]
[Tue Apr 21 03:10:40.397653 2026] [:error] [pid 11352:tid 11429] [client 20.100.178.47:22519] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aeZ6MGl10mhMSfJ7ir8VWgAAAI8"]
[Tue Apr 21 03:10:41.219870 2026] [:error] [pid 11494:tid 11509] [client 20.100.178.47:2021] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aeZ6Mcgko5iFiE8YoyRfVgAAAY0"]
[Tue Apr 21 03:10:41.990058 2026] [:error] [pid 11351:tid 11399] [client 20.100.178.47:18292] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aeZ6MQN8Z1-vktaI_tPYoQAAAEw"]
[Tue Apr 21 03:10:42.653507 2026] [:error] [pid 11352:tid 11420] [client 20.100.178.47:20137] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aeZ6Mml10mhMSfJ7ir8VXQAAAIY"]
[Tue Apr 21 03:10:43.400861 2026] [:error] [pid 11494:tid 11504] [client 20.100.178.47:22826] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aeZ6M8gko5iFiE8YoyRfZgAAAYg"]
[Tue Apr 21 03:10:44.164055 2026] [:error] [pid 11351:tid 11411] [client 20.100.178.47:12561] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aeZ6NAN8Z1-vktaI_tPYpgAAAFg"]
[Tue Apr 21 03:10:44.795072 2026] [:error] [pid 6928:tid 6946] [client 20.100.178.47:29482] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xmini.php"] [unique_id "aeZ6NB3y7MHq1iB0qYoDRgAAAVA"]
[Tue Apr 21 03:10:45.465749 2026] [:error] [pid 11494:tid 11501] [client 20.100.178.47:1997] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xmini.php"] [unique_id "aeZ6Ncgko5iFiE8YoyRfbgAAAYU"]
[Tue Apr 21 03:10:46.455814 2026] [:error] [pid 11350:tid 11361] [client 20.100.178.47:12052] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xmini.php"] [unique_id "aeZ6Nv4EoMBgOJuJnT1aFgAAAAI"]
[Tue Apr 21 03:10:47.202297 2026] [:error] [pid 11350:tid 11379] [client 20.100.178.47:22514] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xmini.php"] [unique_id "aeZ6N_4EoMBgOJuJnT1aGQAAABQ"]
[Tue Apr 21 03:10:48.014250 2026] [:error] [pid 11352:tid 11436] [client 20.100.178.47:20122] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "aeZ6OGl10mhMSfJ7ir8VaAAAAJY"]
[Tue Apr 21 03:10:48.691439 2026] [:error] [pid 11351:tid 11391] [client 20.100.178.47:16689] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "aeZ6OAN8Z1-vktaI_tPYuQAAAEQ"]
[Tue Apr 21 03:10:49.476737 2026] [:error] [pid 11441:tid 11444] [client 20.100.178.47:47447] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "aeZ6OcixByFUvmh319D-TgAAAME"]
[Tue Apr 21 03:10:50.073890 2026] [:error] [pid 11351:tid 11404] [client 20.100.178.47:12059] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "aeZ6OgN8Z1-vktaI_tPYvQAAAFE"]
[Tue Apr 21 03:10:50.760044 2026] [:error] [pid 11494:tid 11517] [client 20.100.178.47:47432] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZ6Osgko5iFiE8YoyRfdQAAAZU"]
[Tue Apr 21 03:10:51.434798 2026] [:error] [pid 11352:tid 11420] [client 20.100.178.47:18282] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZ6O2l10mhMSfJ7ir8VbQAAAIY"]
[Tue Apr 21 03:10:52.074679 2026] [:error] [pid 11352:tid 11437] [client 20.100.178.47:11702] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZ6PGl10mhMSfJ7ir8VcQAAAJc"]
[Tue Apr 21 03:10:52.717161 2026] [:error] [pid 6928:tid 6940] [client 20.100.178.47:12577] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZ6PB3y7MHq1iB0qYoDUAAAAUo"]
[Tue Apr 21 03:10:53.411202 2026] [:error] [pid 11441:tid 11443] [client 20.100.178.47:2024] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeZ6PcixByFUvmh319D-WAAAAMA"]
[Tue Apr 21 03:10:54.086522 2026] [:error] [pid 6928:tid 6947] [client 20.100.178.47:22472] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeZ6Ph3y7MHq1iB0qYoDWAAAAVE"]
[Tue Apr 21 03:10:54.722254 2026] [:error] [pid 11441:tid 11447] [client 20.100.178.47:1994] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeZ6PsixByFUvmh319D-YQAAAMQ"]
[Tue Apr 21 03:10:55.464458 2026] [:error] [pid 6928:tid 6954] [client 20.100.178.47:11665] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeZ6Px3y7MHq1iB0qYoDWwAAAVg"]
[Tue Apr 21 03:10:56.151185 2026] [:error] [pid 11350:tid 11375] [client 20.100.178.47:47476] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aeZ6QP4EoMBgOJuJnT1aKgAAABA"]
[Tue Apr 21 03:10:56.819569 2026] [:error] [pid 11351:tid 11398] [client 20.100.178.47:16684] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aeZ6QAN8Z1-vktaI_tPYzAAAAEs"]
[Tue Apr 21 03:10:57.478765 2026] [:error] [pid 11350:tid 11360] [client 20.100.178.47:20969] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aeZ6Qf4EoMBgOJuJnT1aLwAAAAE"]
[Tue Apr 21 03:10:58.362623 2026] [:error] [pid 11351:tid 11390] [client 20.100.178.47:47462] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aeZ6QgN8Z1-vktaI_tPYzwAAAEM"]
[Tue Apr 21 03:10:59.014568 2026] [:error] [pid 11350:tid 11372] [client 20.100.178.47:22521] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/huya.php"] [unique_id "aeZ6Q_4EoMBgOJuJnT1aNAAAAA0"]
[Tue Apr 21 03:10:59.740636 2026] [:error] [pid 11350:tid 11367] [client 20.100.178.47:22503] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/huya.php"] [unique_id "aeZ6Q_4EoMBgOJuJnT1aOAAAAAg"]
[Tue Apr 21 03:11:00.493887 2026] [:error] [pid 11350:tid 11364] [client 20.100.178.47:12037] File does not exist: /usr/local/apache/htdocs/suspended-page/huya.php
[Tue Apr 21 03:11:00.777085 2026] [:error] [pid 11350:tid 11360] [client 20.100.178.47:12037] File does not exist: /usr/local/apache/htdocs/suspended-page/puc.php
[Tue Apr 21 03:11:01.044348 2026] [:error] [pid 11350:tid 11375] [client 20.100.178.47:12037] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Tue Apr 21 03:11:01.308548 2026] [:error] [pid 11350:tid 11380] [client 20.100.178.47:12037] File does not exist: /usr/local/apache/htdocs/suspended-page/ewp.php
[Tue Apr 21 03:11:01.578316 2026] [:error] [pid 11350:tid 11374] [client 20.100.178.47:12037] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Tue Apr 21 03:11:01.842702 2026] [:error] [pid 11350:tid 11383] [client 20.100.178.47:12037] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Tue Apr 21 03:11:02.134372 2026] [:error] [pid 11350:tid 11373] [client 20.100.178.47:12037] File does not exist: /usr/local/apache/htdocs/suspended-page/xff.php
[Tue Apr 21 03:11:02.420159 2026] [:error] [pid 11350:tid 11360] [client 20.100.178.47:12037] File does not exist: /usr/local/apache/htdocs/suspended-page/lupo.php
[Tue Apr 21 03:11:02.684813 2026] [:error] [pid 11350:tid 11380] [client 20.100.178.47:12037] File does not exist: /usr/local/apache/htdocs/suspended-page/awa.php
[Tue Apr 21 03:11:02.985169 2026] [:error] [pid 11350:tid 11365] [client 20.100.178.47:12037] File does not exist: /usr/local/apache/htdocs/suspended-page/popo.php
[Tue Apr 21 03:11:03.250576 2026] [:error] [pid 11350:tid 11374] [client 20.100.178.47:12037] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php
[Tue Apr 21 03:11:03.517157 2026] [:error] [pid 11350:tid 11383] [client 20.100.178.47:12037] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aeZ6R_4EoMBgOJuJnT1aVQAAABg"]
[Tue Apr 21 03:11:04.152859 2026] [:error] [pid 6928:tid 6933] [client 20.100.178.47:12048] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aeZ6SB3y7MHq1iB0qYoDZAAAAUM"]
[Tue Apr 21 03:11:04.960805 2026] [:error] [pid 11441:tid 11457] [client 20.100.178.47:22806] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aeZ6SMixByFUvmh319D-iwAAAM4"]
[Tue Apr 21 03:11:05.895087 2026] [:error] [pid 11350:tid 11382] [client 20.100.178.47:1342] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aeZ6Sf4EoMBgOJuJnT1aWAAAABc"]
[Tue Apr 21 03:11:06.497649 2026] [:error] [pid 11494:tid 11515] [client 20.100.178.47:16673] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aeZ6Ssgko5iFiE8YoyRfiwAAAZM"]
[Tue Apr 21 03:11:07.247553 2026] [:error] [pid 11351:tid 11404] [client 20.100.178.47:29456] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aeZ6SwN8Z1-vktaI_tPY7wAAAFE"]
[Tue Apr 21 03:11:07.977635 2026] [:error] [pid 11351:tid 11397] [client 20.100.178.47:52038] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aeZ6SwN8Z1-vktaI_tPY9gAAAEo"]
[Tue Apr 21 03:11:08.820343 2026] [:error] [pid 11494:tid 11503] [client 20.100.178.47:20985] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aeZ6TMgko5iFiE8YoyRfjQAAAYc"]
[Tue Apr 21 03:11:09.591463 2026] [:error] [pid 11351:tid 11404] [client 20.100.178.47:1882] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeZ6TQN8Z1-vktaI_tPY_QAAAFE"]
[Tue Apr 21 03:11:10.549219 2026] [:error] [pid 11350:tid 11366] [client 20.100.178.47:47449] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeZ6Tv4EoMBgOJuJnT1aYwAAAAc"]
[Tue Apr 21 03:11:11.469312 2026] [:error] [pid 11351:tid 11399] [client 20.100.178.47:12799] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeZ6TwN8Z1-vktaI_tPZBAAAAEw"]
[Tue Apr 21 03:11:12.303780 2026] [:error] [pid 11494:tid 11497] [client 20.100.178.47:46297] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeZ6UMgko5iFiE8YoyRfkgAAAYE"]
[Tue Apr 21 03:11:12.960996 2026] [:error] [pid 11494:tid 11499] [client 20.100.178.47:12085] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeZ6UMgko5iFiE8YoyRflAAAAYM"]
[Tue Apr 21 03:11:13.590657 2026] [:error] [pid 11494:tid 11514] [client 20.100.178.47:21670] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeZ6Ucgko5iFiE8YoyRfmgAAAZI"]
[Tue Apr 21 03:11:14.290502 2026] [:error] [pid 11494:tid 11496] [client 20.100.178.47:21639] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeZ6Usgko5iFiE8YoyRfoAAAAYA"]
[Tue Apr 21 03:11:15.252507 2026] [:error] [pid 42014:tid 42038] [client 20.100.178.47:46334] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeZ6U8ek-00-ZI0f1NrDrgAAARY"]
[Tue Apr 21 03:11:16.033435 2026] [:error] [pid 11494:tid 11519] [client 20.100.178.47:12943] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeZ6VMgko5iFiE8YoyRfqAAAAZc"]
[Tue Apr 21 03:11:16.774337 2026] [:error] [pid 11494:tid 11512] [client 20.100.178.47:21645] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeZ6VMgko5iFiE8YoyRfrAAAAZA"]
[Tue Apr 21 03:11:17.505644 2026] [:error] [pid 11494:tid 11503] [client 20.100.178.47:47486] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeZ6Vcgko5iFiE8YoyRftgAAAYc"]
[Tue Apr 21 03:11:18.219732 2026] [:error] [pid 11350:tid 11372] [client 20.100.178.47:46325] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeZ6Vv4EoMBgOJuJnT1abQAAAA0"]
[Tue Apr 21 03:11:19.099045 2026] [:error] [pid 6928:tid 6949] [client 20.100.178.47:23629] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeZ6Vx3y7MHq1iB0qYoDewAAAVM"]
[Tue Apr 21 03:11:20.455854 2026] [:error] [pid 11494:tid 11512] [client 20.100.178.47:16675] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeZ6WMgko5iFiE8YoyRfugAAAZA"]
[Tue Apr 21 03:11:21.465643 2026] [:error] [pid 6928:tid 6931] [client 20.100.178.47:21681] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeZ6WR3y7MHq1iB0qYoDgQAAAUE"]
[Tue Apr 21 03:11:22.280676 2026] [:error] [pid 11352:tid 11432] [client 20.100.178.47:20949] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeZ6Wml10mhMSfJ7ir8ViAAAAJI"]
[Tue Apr 21 03:11:23.189556 2026] [:error] [pid 42014:tid 42022] [client 20.100.178.47:16666] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aeZ6W8ek-00-ZI0f1NrDswAAAQY"]
[Tue Apr 21 03:11:23.894605 2026] [:error] [pid 11351:tid 11396] [client 20.100.178.47:39448] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aeZ6WwN8Z1-vktaI_tPZGAAAAEk"]
[Tue Apr 21 03:11:24.794950 2026] [:error] [pid 11351:tid 11395] [client 20.100.178.47:21686] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aeZ6XAN8Z1-vktaI_tPZIQAAAEg"]
[Tue Apr 21 03:11:26.135503 2026] [:error] [pid 11441:tid 11460] [client 20.100.178.47:52068] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aeZ6XsixByFUvmh319D-sAAAANE"]
[Tue Apr 21 03:11:26.887939 2026] [:error] [pid 6928:tid 6949] [client 20.100.178.47:12758] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeZ6Xh3y7MHq1iB0qYoDkQAAAVM"]
[Tue Apr 21 03:11:27.724554 2026] [:error] [pid 11352:tid 11436] [client 20.100.178.47:12784] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeZ6X2l10mhMSfJ7ir8ViwAAAJY"]
[Tue Apr 21 03:11:28.409270 2026] [:error] [pid 11350:tid 11369] [client 20.100.178.47:19833] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeZ6YP4EoMBgOJuJnT1akAAAAAo"]
[Tue Apr 21 03:11:29.154875 2026] [:error] [pid 11352:tid 11422] [client 20.100.178.47:12959] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeZ6YWl10mhMSfJ7ir8VjQAAAIg"]
[Tue Apr 21 03:11:29.821649 2026] [:error] [pid 42014:tid 42023] [client 20.100.178.47:46326] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeZ6Ycek-00-ZI0f1NrDwAAAAQc"]
[Tue Apr 21 03:11:30.614028 2026] [:error] [pid 42014:tid 42036] [client 20.100.178.47:21710] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeZ6Ysek-00-ZI0f1NrDxgAAARQ"]
[Tue Apr 21 03:11:31.214760 2026] [:error] [pid 11350:tid 11367] [client 20.100.178.47:46292] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeZ6Y_4EoMBgOJuJnT1amAAAAAg"]
[Tue Apr 21 03:11:31.854599 2026] [:error] [pid 6928:tid 6949] [client 20.100.178.47:46850] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeZ6Yx3y7MHq1iB0qYoDsgAAAVM"]
[Tue Apr 21 03:11:32.562791 2026] [:error] [pid 11350:tid 11360] [client 20.100.178.47:21703] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aeZ6ZP4EoMBgOJuJnT1amQAAAAE"]
[Tue Apr 21 03:11:33.284775 2026] [:error] [pid 11350:tid 11366] [client 20.100.178.47:47480] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aeZ6Zf4EoMBgOJuJnT1amgAAAAc"]
[Tue Apr 21 03:11:34.137609 2026] [:error] [pid 11441:tid 11454] [client 20.100.178.47:21638] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aeZ6ZsixByFUvmh319D-zwAAAMs"]
[Tue Apr 21 03:11:34.957081 2026] [:error] [pid 6928:tid 6933] [client 20.100.178.47:12976] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aeZ6Zh3y7MHq1iB0qYoDuAAAAUM"]
[Tue Apr 21 03:11:36.257010 2026] [:error] [pid 11350:tid 11374] [client 20.100.178.47:46861] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeZ6aP4EoMBgOJuJnT1aoAAAAA8"]
[Tue Apr 21 03:11:36.971330 2026] [:error] [pid 6928:tid 6953] [client 20.100.178.47:14585] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeZ6aB3y7MHq1iB0qYoDvAAAAVc"]
[Tue Apr 21 03:11:37.720751 2026] [:error] [pid 11351:tid 11398] [client 20.100.178.47:12983] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeZ6aQN8Z1-vktaI_tPZSQAAAEs"]
[Tue Apr 21 03:11:38.531183 2026] [:error] [pid 11352:tid 11423] [client 20.100.178.47:46313] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeZ6aml10mhMSfJ7ir8VkAAAAIk"]
[Tue Apr 21 03:11:39.216139 2026] [:error] [pid 11441:tid 11450] [client 20.100.178.47:46880] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aeZ6a8ixByFUvmh319D-2wAAAMc"]
[Tue Apr 21 03:11:39.807341 2026] [:error] [pid 11351:tid 11392] [client 20.100.178.47:14537] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aeZ6awN8Z1-vktaI_tPZVgAAAEU"]
[Tue Apr 21 03:11:40.394135 2026] [:error] [pid 11494:tid 11504] [client 20.100.178.47:19812] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aeZ6bMgko5iFiE8YoyRf0AAAAYg"]
[Tue Apr 21 03:11:41.091577 2026] [:error] [pid 6928:tid 6948] [client 20.100.178.47:40046] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aeZ6bR3y7MHq1iB0qYoDwAAAAVI"]
[Tue Apr 21 03:11:41.861434 2026] [:error] [pid 11350:tid 11382] [client 20.100.178.47:21263] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aeZ6bf4EoMBgOJuJnT1aqwAAABc"]
[Tue Apr 21 03:11:42.690286 2026] [:error] [pid 11494:tid 11496] [client 20.100.178.47:17496] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aeZ6bsgko5iFiE8YoyRf1QAAAYA"]
[Tue Apr 21 03:11:43.264897 2026] [:error] [pid 6928:tid 6947] [client 20.100.178.47:22435] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aeZ6bx3y7MHq1iB0qYoDxAAAAVE"]
[Tue Apr 21 03:11:43.981880 2026] [:error] [pid 11351:tid 11395] [client 20.100.178.47:28691] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aeZ6bwN8Z1-vktaI_tPZXQAAAEg"]
[Tue Apr 21 03:11:44.544948 2026] [:error] [pid 11441:tid 11454] [client 20.100.178.47:28683] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aeZ6cMixByFUvmh319D-5wAAAMs"]
[Tue Apr 21 03:11:45.323194 2026] [:error] [pid 11494:tid 11509] [client 20.100.178.47:1534] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aeZ6ccgko5iFiE8YoyRf2wAAAY0"]
[Tue Apr 21 03:11:45.971909 2026] [:error] [pid 11350:tid 11367] [client 20.100.178.47:22448] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aeZ6cf4EoMBgOJuJnT1axAAAAAg"]
[Tue Apr 21 03:11:46.571347 2026] [:error] [pid 11350:tid 11383] [client 20.100.178.47:19379] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aeZ6cv4EoMBgOJuJnT1aygAAABg"]
[Tue Apr 21 03:11:47.286649 2026] [:error] [pid 11494:tid 11497] [client 20.100.178.47:1518] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aeZ6c8gko5iFiE8YoyRf4QAAAYE"]
[Tue Apr 21 03:11:48.149586 2026] [:error] [pid 11350:tid 11362] [client 20.100.178.47:19347] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aeZ6dP4EoMBgOJuJnT1a3AAAAAM"]
[Tue Apr 21 03:11:49.027890 2026] [:error] [pid 11352:tid 11414] [client 20.100.178.47:18228] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aeZ6dWl10mhMSfJ7ir8VmAAAAIA"]
[Tue Apr 21 03:11:49.823807 2026] [:error] [pid 11494:tid 11507] [client 20.100.178.47:14483] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aeZ6dcgko5iFiE8YoyRf6AAAAYs"]
[Tue Apr 21 03:11:50.442416 2026] [:error] [pid 11352:tid 11436] [client 20.100.178.47:1493] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "aeZ6dml10mhMSfJ7ir8VmQAAAJY"]
[Tue Apr 21 03:11:51.075528 2026] [:error] [pid 6928:tid 6952] [client 20.100.178.47:28714] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "aeZ6dx3y7MHq1iB0qYoD0wAAAVY"]
[Tue Apr 21 03:11:52.030683 2026] [:error] [pid 11494:tid 11499] [client 20.100.178.47:1180] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "aeZ6eMgko5iFiE8YoyRf9QAAAYM"]
[Tue Apr 21 03:11:52.675112 2026] [:error] [pid 11441:tid 11461] [client 20.100.178.47:13466] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "aeZ6eMixByFUvmh319D_IAAAANI"]
[Tue Apr 21 03:11:53.344021 2026] [:error] [pid 11350:tid 11378] [client 20.100.178.47:22451] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aeZ6ef4EoMBgOJuJnT1a_gAAABM"]
[Tue Apr 21 03:11:54.005489 2026] [:error] [pid 11350:tid 11374] [client 20.100.178.47:14481] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aeZ6ev4EoMBgOJuJnT1bBQAAAA8"]
[Tue Apr 21 03:11:54.562622 2026] [:error] [pid 11351:tid 11388] [client 20.100.178.47:39951] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aeZ6egN8Z1-vktaI_tPZcwAAAEE"]
[Tue Apr 21 03:11:55.335025 2026] [:error] [pid 11351:tid 11399] [client 20.100.178.47:1423] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aeZ6ewN8Z1-vktaI_tPZdwAAAEw"]
[Tue Apr 21 03:11:56.591160 2026] [:error] [pid 11441:tid 11458] [client 20.100.178.47:1527] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeZ6fMixByFUvmh319D_RAAAAM8"]
[Tue Apr 21 03:11:57.321845 2026] [:error] [pid 11351:tid 11398] [client 20.100.178.47:15075] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeZ6fQN8Z1-vktaI_tPZfwAAAEs"]
[Tue Apr 21 03:11:58.007553 2026] [:error] [pid 11494:tid 11496] [client 20.100.178.47:1448] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeZ6fsgko5iFiE8YoyRgCgAAAYA"]
[Tue Apr 21 03:11:58.674785 2026] [:error] [pid 11494:tid 11513] [client 20.100.178.47:1544] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeZ6fsgko5iFiE8YoyRgDgAAAZE"]
[Tue Apr 21 03:11:59.400507 2026] [:error] [pid 11494:tid 11501] [client 20.100.178.47:13440] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZ6f8gko5iFiE8YoyRgDwAAAYU"]
[Tue Apr 21 03:12:00.156763 2026] [:error] [pid 11441:tid 11451] [client 20.100.178.47:39994] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZ6gMixByFUvmh319D_aQAAAMg"]
[Tue Apr 21 03:12:01.104293 2026] [:error] [pid 11351:tid 11391] [client 20.100.178.47:15099] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZ6gQN8Z1-vktaI_tPZigAAAEQ"]
[Tue Apr 21 03:12:01.935578 2026] [:error] [pid 11494:tid 11506] [client 20.100.178.47:46835] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZ6gcgko5iFiE8YoyRgHwAAAYo"]
[Tue Apr 21 03:12:02.659665 2026] [:error] [pid 42014:tid 42029] [client 20.100.178.47:47530] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f35_S.php"] [unique_id "aeZ6gsek-00-ZI0f1NrEOwAAAQ0"]
[Tue Apr 21 03:12:03.480322 2026] [:error] [pid 11351:tid 11408] [client 20.100.178.47:47529] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_S.php
[Tue Apr 21 03:12:03.752251 2026] [:error] [pid 11351:tid 11401] [client 20.100.178.47:47529] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Tue Apr 21 03:12:04.013780 2026] [:error] [pid 11351:tid 11410] [client 20.100.178.47:47529] File does not exist: /usr/local/apache/htdocs/suspended-page/111.php
[Tue Apr 21 03:12:04.276191 2026] [:error] [pid 11351:tid 11393] [client 20.100.178.47:47529] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Tue Apr 21 03:12:04.570101 2026] [:error] [pid 11351:tid 11404] [client 20.100.178.47:47529] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Tue Apr 21 03:12:04.832673 2026] [:error] [pid 11351:tid 11407] [client 20.100.178.47:47529] File does not exist: /usr/local/apache/htdocs/suspended-page/byrgo.php
[Tue Apr 21 03:12:05.138055 2026] [:error] [pid 11351:tid 11388] [client 20.100.178.47:47529] File does not exist: /usr/local/apache/htdocs/suspended-page/xwpg.php
[Tue Apr 21 03:12:05.513922 2026] [:error] [pid 11351:tid 11409] [client 20.100.178.47:47529] File does not exist: /usr/local/apache/htdocs/suspended-page/ass.php
[Tue Apr 21 03:12:05.787850 2026] [:error] [pid 11351:tid 11408] [client 20.100.178.47:47529] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Apr 21 03:12:06.053902 2026] [:error] [pid 11351:tid 11401] [client 20.100.178.47:47529] File does not exist: /usr/local/apache/htdocs/suspended-page/no18.php
[Tue Apr 21 03:12:06.316731 2026] [:error] [pid 11351:tid 11406] [client 20.100.178.47:47529] File does not exist: /usr/local/apache/htdocs/suspended-page/fine.php
[Tue Apr 21 03:12:06.576193 2026] [:error] [pid 11351:tid 11398] [client 20.100.178.47:47529] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeZ6hgN8Z1-vktaI_tPZrAAAAEs"]
[Tue Apr 21 03:12:07.301840 2026] [:error] [pid 11350:tid 11368] [client 20.100.178.47:47501] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeZ6h_4EoMBgOJuJnT1bLQAAAAk"]
[Tue Apr 21 03:12:07.978934 2026] [:error] [pid 11351:tid 11402] [client 20.100.178.47:18235] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeZ6hwN8Z1-vktaI_tPZswAAAE8"]
[Tue Apr 21 03:12:08.729842 2026] [:error] [pid 11351:tid 11398] [client 20.100.178.47:15042] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeZ6iAN8Z1-vktaI_tPZuQAAAEs"]
[Tue Apr 21 03:12:09.487491 2026] [:error] [pid 42014:tid 42038] [client 20.100.178.47:47497] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aeZ6icek-00-ZI0f1NrEPwAAARY"]
[Tue Apr 21 03:12:10.218595 2026] [:error] [pid 11351:tid 11391] [client 20.100.178.47:15043] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aeZ6igN8Z1-vktaI_tPZwQAAAEQ"]
[Tue Apr 21 03:12:10.907984 2026] [:error] [pid 11494:tid 11519] [client 20.100.178.47:1547] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aeZ6isgko5iFiE8YoyRgMgAAAZc"]
[Tue Apr 21 03:12:11.768277 2026] [:error] [pid 11494:tid 11517] [client 20.100.178.47:18209] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aeZ6i8gko5iFiE8YoyRgOQAAAZU"]
[Tue Apr 21 03:12:12.410603 2026] [:error] [pid 11350:tid 11361] [client 20.100.178.47:46837] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aeZ6jP4EoMBgOJuJnT1bOAAAAAI"]
[Tue Apr 21 03:12:13.109596 2026] [:error] [pid 11351:tid 11402] [client 20.100.178.47:14527] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aeZ6jQN8Z1-vktaI_tPZygAAAE8"]
[Tue Apr 21 03:12:13.781270 2026] [:error] [pid 11351:tid 11391] [client 20.100.178.47:1273] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aeZ6jQN8Z1-vktaI_tPZzgAAAEQ"]
[Tue Apr 21 03:12:14.510184 2026] [:error] [pid 11351:tid 11388] [client 20.100.178.47:12397] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aeZ6jgN8Z1-vktaI_tPZ0QAAAEE"]
[Tue Apr 21 03:12:15.192099 2026] [:error] [pid 11351:tid 11399] [client 20.100.178.47:11636] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aeZ6jwN8Z1-vktaI_tPZ1QAAAEw"]
[Tue Apr 21 03:12:16.000606 2026] [:error] [pid 11441:tid 11458] [client 20.100.178.47:1443] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aeZ6j8ixByFUvmh319D_gAAAAM8"]
[Tue Apr 21 03:12:16.687993 2026] [:error] [pid 6928:tid 6937] [client 20.100.178.47:39970] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aeZ6kB3y7MHq1iB0qYoEFgAAAUc"]
[Tue Apr 21 03:12:17.287171 2026] [:error] [pid 11441:tid 11465] [client 20.100.178.47:11616] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aeZ6kcixByFUvmh319D_gwAAANY"]
[Tue Apr 21 03:12:17.969892 2026] [:error] [pid 11494:tid 11502] [client 20.100.178.47:12395] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeZ6kcgko5iFiE8YoyRgRAAAAYY"]
[Tue Apr 21 03:12:18.827825 2026] [:error] [pid 11351:tid 11399] [client 20.100.178.47:18207] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeZ6kgN8Z1-vktaI_tPZ5AAAAEw"]
[Tue Apr 21 03:12:19.437993 2026] [:error] [pid 11351:tid 11405] [client 20.100.178.47:15070] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeZ6kwN8Z1-vktaI_tPZ6AAAAFI"]
[Tue Apr 21 03:12:20.141575 2026] [:error] [pid 6928:tid 6930] [client 20.100.178.47:14230] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeZ6lB3y7MHq1iB0qYoEGwAAAUA"]
[Tue Apr 21 03:12:20.997374 2026] [:error] [pid 11494:tid 11503] [client 20.100.178.47:1413] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeZ6lMgko5iFiE8YoyRgSQAAAYc"]
[Tue Apr 21 03:12:21.669116 2026] [:error] [pid 11350:tid 11380] [client 20.100.178.47:1470] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeZ6lf4EoMBgOJuJnT1bQgAAABU"]
[Tue Apr 21 03:12:22.287694 2026] [:error] [pid 11350:tid 11383] [client 20.100.178.47:14259] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeZ6lv4EoMBgOJuJnT1bRQAAABg"]
[Tue Apr 21 03:12:22.851702 2026] [:error] [pid 11350:tid 11369] [client 20.100.178.47:47512] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeZ6lv4EoMBgOJuJnT1bSQAAAAo"]
[Tue Apr 21 03:12:23.420341 2026] [:error] [pid 11351:tid 11388] [client 20.100.178.47:15090] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aeZ6lwN8Z1-vktaI_tPZ8gAAAEE"]
[Tue Apr 21 03:12:23.972858 2026] [:error] [pid 11350:tid 11371] [client 20.100.178.47:28086] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aeZ6l_4EoMBgOJuJnT1bUAAAAAw"]
[Tue Apr 21 03:12:24.588606 2026] [:error] [pid 6928:tid 6935] [client 20.100.178.47:15078] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aeZ6mB3y7MHq1iB0qYoEHwAAAUU"]
[Tue Apr 21 03:12:25.277942 2026] [:error] [pid 11351:tid 11405] [client 20.100.178.47:1416] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aeZ6mQN8Z1-vktaI_tPZ-gAAAFI"]
[Tue Apr 21 03:12:25.945036 2026] [:error] [pid 42014:tid 42030] [client 20.100.178.47:12618] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aeZ6mcek-00-ZI0f1NrEQwAAAQ4"]
[Tue Apr 21 03:12:26.484418 2026] [:error] [pid 11350:tid 11380] [client 20.100.178.47:1261] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aeZ6mv4EoMBgOJuJnT1bVgAAABU"]
[Tue Apr 21 03:12:27.073038 2026] [:error] [pid 6928:tid 6951] [client 20.100.178.47:12391] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aeZ6mx3y7MHq1iB0qYoEIgAAAVU"]
[Tue Apr 21 03:12:27.716598 2026] [:error] [pid 11494:tid 11506] [client 20.100.178.47:46794] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aeZ6m8gko5iFiE8YoyRgVgAAAYo"]
[Tue Apr 21 03:12:28.451994 2026] [:error] [pid 11494:tid 11514] [client 20.100.178.47:14215] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aeZ6nMgko5iFiE8YoyRgVwAAAZI"]
[Tue Apr 21 03:12:29.121697 2026] [:error] [pid 11494:tid 11511] [client 20.100.178.47:12615] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aeZ6ncgko5iFiE8YoyRgWAAAAY8"]
[Tue Apr 21 03:12:29.930372 2026] [:error] [pid 6928:tid 6940] [client 20.100.178.47:11808] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aeZ6nR3y7MHq1iB0qYoEKQAAAUo"]
[Tue Apr 21 03:12:30.511955 2026] [:error] [pid 11352:tid 11436] [client 20.100.178.47:47503] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aeZ6nml10mhMSfJ7ir8VqQAAAJY"]
[Tue Apr 21 03:12:31.204067 2026] [:error] [pid 6928:tid 6953] [client 20.100.178.47:1542] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aeZ6nx3y7MHq1iB0qYoELgAAAVc"]
[Tue Apr 21 03:12:31.845339 2026] [:error] [pid 11494:tid 11510] [client 20.100.178.47:1216] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aeZ6n8gko5iFiE8YoyRgYgAAAY4"]
[Tue Apr 21 03:12:32.521930 2026] [:error] [pid 11352:tid 11422] [client 20.100.178.47:28081] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aeZ6oGl10mhMSfJ7ir8VqgAAAIg"]
[Tue Apr 21 03:12:33.164953 2026] [:error] [pid 11352:tid 11417] [client 20.100.178.47:15092] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aeZ6oWl10mhMSfJ7ir8VrwAAAIM"]
[Tue Apr 21 03:12:33.821179 2026] [:error] [pid 11350:tid 11374] [client 20.100.178.47:28081] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeZ6of4EoMBgOJuJnT1bbQAAAA8"]
[Tue Apr 21 03:12:34.486849 2026] [:error] [pid 11351:tid 11402] [client 20.100.178.47:1548] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeZ6ogN8Z1-vktaI_tPaHwAAAE8"]
[Tue Apr 21 03:12:35.232956 2026] [:error] [pid 11494:tid 11505] [client 20.100.178.47:22444] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeZ6o8gko5iFiE8YoyRgawAAAYk"]
[Tue Apr 21 03:12:35.810026 2026] [:error] [pid 11351:tid 11387] [client 20.100.178.47:11800] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeZ6owN8Z1-vktaI_tPaIwAAAEA"]
[Tue Apr 21 03:12:36.427652 2026] [:error] [pid 11351:tid 11395] [client 20.100.178.47:12378] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZ6pAN8Z1-vktaI_tPaJgAAAEg"]
[Tue Apr 21 03:12:37.163462 2026] [:error] [pid 11494:tid 11516] [client 20.100.178.47:1549] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZ6pcgko5iFiE8YoyRgcQAAAZQ"]
[Tue Apr 21 03:12:37.749885 2026] [:error] [pid 11494:tid 11515] [client 20.100.178.47:14208] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZ6pcgko5iFiE8YoyRgcgAAAZM"]
[Tue Apr 21 03:12:38.385031 2026] [:error] [pid 6928:tid 6939] [client 20.100.178.47:53840] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZ6ph3y7MHq1iB0qYoEOwAAAUk"]
[Tue Apr 21 03:12:38.977615 2026] [:error] [pid 11350:tid 11377] [client 20.100.178.47:1250] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZ6pv4EoMBgOJuJnT1bdAAAABI"]
[Tue Apr 21 03:12:39.554277 2026] [:error] [pid 11351:tid 11396] [client 20.100.178.47:12364] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZ6pwN8Z1-vktaI_tPaLAAAAEk"]
[Tue Apr 21 03:12:40.355455 2026] [:error] [pid 42014:tid 42022] [client 20.100.178.47:28038] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZ6qMek-00-ZI0f1NrERQAAAQY"]
[Tue Apr 21 03:12:40.907457 2026] [:error] [pid 11351:tid 11390] [client 20.100.178.47:1554] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZ6qAN8Z1-vktaI_tPaMgAAAEM"]
[Tue Apr 21 03:12:41.512121 2026] [:error] [pid 11494:tid 11506] [client 20.100.178.47:12411] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aeZ6qcgko5iFiE8YoyRgfwAAAYo"]
[Tue Apr 21 03:12:42.178805 2026] [:error] [pid 11352:tid 11438] [client 20.100.178.47:11777] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aeZ6qml10mhMSfJ7ir8VvAAAAJg"]
[Tue Apr 21 03:12:42.926610 2026] [:error] [pid 11352:tid 11418] [client 20.100.178.47:46816] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aeZ6qml10mhMSfJ7ir8VvgAAAIQ"]
[Tue Apr 21 03:12:43.455961 2026] [:error] [pid 11441:tid 11464] [client 20.100.178.47:53877] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aeZ6q8ixByFUvmh319D_jAAAANU"]
[Tue Apr 21 03:12:44.304705 2026] [:error] [pid 11441:tid 11458] [client 20.100.178.47:11785] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeZ6rMixByFUvmh319D_kAAAAM8"]
[Tue Apr 21 03:12:44.922531 2026] [:error] [pid 11351:tid 11408] [client 20.100.178.47:53881] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeZ6rAN8Z1-vktaI_tPaOgAAAFU"]
[Tue Apr 21 03:12:45.498132 2026] [:error] [pid 11351:tid 11395] [client 20.100.178.47:15049] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeZ6rQN8Z1-vktaI_tPaPwAAAEg"]
[Tue Apr 21 03:12:46.172911 2026] [:error] [pid 11350:tid 11366] [client 20.100.178.47:1271] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeZ6rv4EoMBgOJuJnT1beQAAAAc"]
[Tue Apr 21 03:12:46.949154 2026] [:error] [pid 42014:tid 42038] [client 20.100.178.47:12636] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aeZ6rsek-00-ZI0f1NrESwAAARY"]
[Tue Apr 21 03:12:47.742457 2026] [:error] [pid 11350:tid 11373] [client 20.100.178.47:47533] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aeZ6r_4EoMBgOJuJnT1bfQAAAA4"]
[Tue Apr 21 03:12:48.395570 2026] [:error] [pid 11494:tid 11517] [client 20.100.178.47:53856] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aeZ6sMgko5iFiE8YoyRgjwAAAZU"]
[Tue Apr 21 03:12:49.146653 2026] [:error] [pid 11441:tid 11455] [client 20.100.178.47:28042] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aeZ6scixByFUvmh319D_lwAAAMw"]
[Tue Apr 21 03:12:49.880053 2026] [:error] [pid 11494:tid 11512] [client 20.100.178.47:46797] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aeZ6scgko5iFiE8YoyRglAAAAZA"]
[Tue Apr 21 03:12:50.697643 2026] [:error] [pid 11351:tid 11409] [client 20.100.178.47:14251] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aeZ6sgN8Z1-vktaI_tPaRQAAAFY"]
[Tue Apr 21 03:12:51.563985 2026] [:error] [pid 11351:tid 11405] [client 20.100.178.47:11832] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aeZ6swN8Z1-vktaI_tPaRwAAAFI"]
[Tue Apr 21 03:12:52.256008 2026] [:error] [pid 11350:tid 11383] [client 20.100.178.47:28080] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aeZ6tP4EoMBgOJuJnT1biQAAABg"]
[Tue Apr 21 03:12:53.015697 2026] [:error] [pid 11351:tid 11403] [client 20.100.178.47:28137] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aeZ6tQN8Z1-vktaI_tPaTQAAAFA"]
[Tue Apr 21 03:12:53.625656 2026] [:error] [pid 11351:tid 11397] [client 20.100.178.47:1552] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aeZ6tQN8Z1-vktaI_tPaUAAAAEo"]
[Tue Apr 21 03:12:54.322919 2026] [:error] [pid 11351:tid 11408] [client 20.100.178.47:1558] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aeZ6tgN8Z1-vktaI_tPaWAAAAFU"]
[Tue Apr 21 03:12:54.962164 2026] [:error] [pid 11351:tid 11395] [client 20.100.178.47:1202] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aeZ6tgN8Z1-vktaI_tPaXQAAAEg"]
[Tue Apr 21 03:12:55.627414 2026] [:error] [pid 11351:tid 11403] [client 20.100.178.47:12660] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aeZ6twN8Z1-vktaI_tPaYgAAAFA"]
[Tue Apr 21 03:12:56.360698 2026] [:error] [pid 6928:tid 6953] [client 20.100.178.47:53839] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aeZ6uB3y7MHq1iB0qYoERwAAAVc"]
[Tue Apr 21 03:12:57.103081 2026] [:error] [pid 11351:tid 11396] [client 20.100.178.47:1550] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aeZ6uQN8Z1-vktaI_tPaZwAAAEk"]
[Tue Apr 21 03:12:57.704214 2026] [:error] [pid 11351:tid 11387] [client 20.100.178.47:13724] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aeZ6uQN8Z1-vktaI_tPaagAAAEA"]
[Tue Apr 21 03:12:58.250295 2026] [:error] [pid 11351:tid 11406] [client 20.100.178.47:14235] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aeZ6ugN8Z1-vktaI_tPadAAAAFM"]
[Tue Apr 21 03:12:58.981643 2026] [:error] [pid 42014:tid 42038] [client 20.100.178.47:12367] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aeZ6usek-00-ZI0f1NrEVQAAARY"]
[Tue Apr 21 03:12:59.554885 2026] [:error] [pid 11441:tid 11449] [client 20.100.178.47:14229] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aeZ6u8ixByFUvmh319D_ogAAAMY"]
[Tue Apr 21 03:13:00.197783 2026] [:error] [pid 42014:tid 42026] [client 20.100.178.47:12360] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aeZ6vMek-00-ZI0f1NrEVgAAAQo"]
[Tue Apr 21 03:13:00.806307 2026] [:error] [pid 11352:tid 11437] [client 20.100.178.47:13720] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aeZ6vGl10mhMSfJ7ir8VzQAAAJc"]
[Tue Apr 21 03:13:01.523564 2026] [:error] [pid 11441:tid 11459] [client 20.100.178.47:28070] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aeZ6vcixByFUvmh319D_qAAAANA"]
[Tue Apr 21 03:13:02.301154 2026] [:error] [pid 11494:tid 11513] [client 20.100.178.47:47498] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aeZ6vsgko5iFiE8YoyRgqwAAAZE"]
[Tue Apr 21 03:13:03.151354 2026] [:error] [pid 11494:tid 11512] [client 20.100.178.47:14239] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aeZ6v8gko5iFiE8YoyRgswAAAZA"]
[Tue Apr 21 03:13:04.933705 2026] [:error] [pid 11441:tid 11462] [client 20.100.178.47:15084] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZ6wMixByFUvmh319D_rQAAANM"]
[Tue Apr 21 03:13:05.524344 2026] [:error] [pid 11494:tid 11519] [client 20.100.178.47:28127] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZ6wcgko5iFiE8YoyRgyQAAAZc"]
[Tue Apr 21 03:13:06.591683 2026] [:error] [pid 11494:tid 11513] [client 20.100.178.47:12668] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Tue Apr 21 03:13:06.854368 2026] [:error] [pid 11494:tid 11506] [client 20.100.178.47:12668] File does not exist: /usr/local/apache/htdocs/suspended-page/xqq.php
[Tue Apr 21 03:13:07.266956 2026] [:error] [pid 11494:tid 11496] [client 20.100.178.47:12668] File does not exist: /usr/local/apache/htdocs/suspended-page/plss3.php
[Tue Apr 21 03:13:07.540391 2026] [:error] [pid 11494:tid 11501] [client 20.100.178.47:12668] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Tue Apr 21 03:13:07.804185 2026] [:error] [pid 11494:tid 11518] [client 20.100.178.47:12668] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Tue Apr 21 03:13:08.439051 2026] [:error] [pid 11494:tid 11505] [client 20.100.178.47:12668] File does not exist: /usr/local/apache/htdocs/suspended-page/tinyfilemanager.php
[Tue Apr 21 03:13:08.703371 2026] [:error] [pid 11494:tid 11508] [client 20.100.178.47:12668] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-update.php
[Tue Apr 21 03:13:08.966144 2026] [:error] [pid 11494:tid 11506] [client 20.100.178.47:12668] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Tue Apr 21 03:13:09.243923 2026] [:error] [pid 11494:tid 11504] [client 20.100.178.47:12668] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Tue Apr 21 03:13:09.509978 2026] [:error] [pid 11494:tid 11515] [client 20.100.178.47:12668] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZ6xcgko5iFiE8YoyRg5wAAAZM"]
[Tue Apr 21 03:13:10.159514 2026] [:error] [pid 11494:tid 11520] [client 20.100.178.47:14301] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZ6xsgko5iFiE8YoyRg6wAAAZg"]
[Tue Apr 21 03:13:10.759959 2026] [:error] [pid 11350:tid 11359] [client 20.100.178.47:12647] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZ6xv4EoMBgOJuJnT1brAAAAAA"]
[Tue Apr 21 03:13:11.422047 2026] [:error] [pid 11350:tid 11371] [client 20.100.178.47:19766] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZ6x_4EoMBgOJuJnT1bsAAAAAw"]
[Tue Apr 21 03:13:12.008521 2026] [:error] [pid 11351:tid 11393] [client 20.100.178.47:12399] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZ6yAN8Z1-vktaI_tPagAAAAEY"]
[Tue Apr 21 03:13:12.625782 2026] [:error] [pid 11350:tid 11369] [client 20.100.178.47:19768] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZ6yP4EoMBgOJuJnT1btAAAAAo"]
[Tue Apr 21 03:13:13.460419 2026] [:error] [pid 11350:tid 11365] [client 20.100.178.47:28043] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZ6yf4EoMBgOJuJnT1btgAAAAY"]
[Tue Apr 21 03:13:14.053189 2026] [:error] [pid 11441:tid 11454] [client 20.100.178.47:23249] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZ6ysixByFUvmh319D_sAAAAMs"]
[Tue Apr 21 03:13:14.698335 2026] [:error] [pid 11441:tid 11467] [client 20.100.178.47:32832] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeZ6ysixByFUvmh319D_sgAAANg"]
[Tue Apr 21 03:13:15.259080 2026] [:error] [pid 11494:tid 11515] [client 20.100.178.47:32857] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeZ6y8gko5iFiE8YoyRg-wAAAZM"]
[Tue Apr 21 03:13:15.885961 2026] [:error] [pid 11441:tid 11455] [client 20.100.178.47:11835] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeZ6y8ixByFUvmh319D_wAAAAMw"]
[Tue Apr 21 03:13:16.572570 2026] [:error] [pid 11494:tid 11518] [client 20.100.178.47:1711] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeZ6zMgko5iFiE8YoyRhGQAAAZY"]
[Tue Apr 21 03:13:17.190018 2026] [:error] [pid 11494:tid 11505] [client 20.100.178.47:1712] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeZ6zcgko5iFiE8YoyRhHwAAAYk"]
[Tue Apr 21 03:13:17.927113 2026] [:error] [pid 11351:tid 11410] [client 20.100.178.47:1721] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeZ6zQN8Z1-vktaI_tPalQAAAFc"]
[Tue Apr 21 03:13:18.494431 2026] [:error] [pid 11441:tid 11465] [client 20.100.178.47:14296] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeZ6zsixByFUvmh319D_wwAAANY"]
[Tue Apr 21 03:13:19.294396 2026] [:error] [pid 11494:tid 11504] [client 20.100.178.47:27458] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeZ6z8gko5iFiE8YoyRhPQAAAYg"]
[Tue Apr 21 03:13:20.030360 2026] [:error] [pid 11351:tid 11401] [client 20.100.178.47:63537] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aeZ60AN8Z1-vktaI_tPamwAAAE4"]
[Tue Apr 21 03:13:20.625137 2026] [:error] [pid 11351:tid 11405] [client 20.100.178.47:11533] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aeZ60AN8Z1-vktaI_tPanQAAAFI"]
[Tue Apr 21 03:13:21.609545 2026] [:error] [pid 11350:tid 11361] [client 20.100.178.47:1694] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aeZ60f4EoMBgOJuJnT1b1QAAAAI"]
[Tue Apr 21 03:13:22.553868 2026] [:error] [pid 11351:tid 11400] [client 20.100.178.47:1092] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aeZ60gN8Z1-vktaI_tPanwAAAE0"]
[Tue Apr 21 03:13:23.451640 2026] [:error] [pid 11351:tid 11392] [client 20.100.178.47:52642] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeZ60wN8Z1-vktaI_tPaogAAAEU"]
[Tue Apr 21 03:13:24.167589 2026] [:error] [pid 6928:tid 6930] [client 20.100.178.47:30089] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeZ61B3y7MHq1iB0qYoEYAAAAUA"]
[Tue Apr 21 03:13:24.960423 2026] [:error] [pid 42014:tid 42035] [client 20.100.178.47:13968] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeZ61Mek-00-ZI0f1NrEYwAAARM"]
[Tue Apr 21 03:13:25.549896 2026] [:error] [pid 11351:tid 11403] [client 20.100.178.47:52623] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeZ61QN8Z1-vktaI_tPaowAAAFA"]
[Tue Apr 21 03:13:26.383981 2026] [:error] [pid 11352:tid 11414] [client 20.100.178.47:25500] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aeZ61ml10mhMSfJ7ir8V3gAAAIA"]
[Tue Apr 21 03:13:27.139516 2026] [:error] [pid 11350:tid 11365] [client 20.100.178.47:14754] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aeZ61_4EoMBgOJuJnT1b4AAAAAY"]
[Tue Apr 21 03:13:27.956401 2026] [:error] [pid 11351:tid 11392] [client 20.100.178.47:26136] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aeZ61wN8Z1-vktaI_tPaqwAAAEU"]
[Tue Apr 21 03:13:28.625170 2026] [:error] [pid 11350:tid 11382] [client 20.100.178.47:13229] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aeZ62P4EoMBgOJuJnT1b4wAAABc"]
[Tue Apr 21 03:13:29.250608 2026] [:error] [pid 42014:tid 42016] [client 20.100.178.47:27402] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeZ62cek-00-ZI0f1NrEaAAAAQA"]
[Tue Apr 21 03:13:29.923562 2026] [:error] [pid 11494:tid 11505] [client 20.100.178.47:53183] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeZ62cgko5iFiE8YoyRhYgAAAYk"]
[Tue Apr 21 03:13:30.481464 2026] [:error] [pid 6928:tid 6954] [client 20.100.178.47:17425] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeZ62h3y7MHq1iB0qYoEYwAAAVg"]
[Tue Apr 21 03:13:31.159069 2026] [:error] [pid 11350:tid 11377] [client 20.100.178.47:15422] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeZ62_4EoMBgOJuJnT1b-gAAABI"]
[Tue Apr 21 03:13:31.762788 2026] [:error] [pid 11350:tid 11381] [client 20.100.178.47:52129] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aeZ62_4EoMBgOJuJnT1b_gAAABY"]
[Tue Apr 21 03:13:32.533949 2026] [:error] [pid 11494:tid 11508] [client 20.100.178.47:64436] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aeZ63Mgko5iFiE8YoyRhaAAAAYw"]
[Tue Apr 21 03:13:33.156502 2026] [:error] [pid 11494:tid 11496] [client 20.100.178.47:52152] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aeZ63cgko5iFiE8YoyRhbQAAAYA"]
[Tue Apr 21 03:13:33.758462 2026] [:error] [pid 11350:tid 11360] [client 20.100.178.47:40635] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aeZ63f4EoMBgOJuJnT1cBgAAAAE"]
[Tue Apr 21 03:13:34.481708 2026] [:error] [pid 11351:tid 11388] [client 20.100.178.47:54369] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeZ63gN8Z1-vktaI_tPatQAAAEE"]
[Tue Apr 21 03:13:35.256595 2026] [:error] [pid 11351:tid 11398] [client 20.100.178.47:62031] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeZ63wN8Z1-vktaI_tPatwAAAEs"]
[Tue Apr 21 03:13:35.877668 2026] [:error] [pid 11494:tid 11517] [client 20.100.178.47:11308] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeZ638gko5iFiE8YoyRhdAAAAZU"]
[Tue Apr 21 03:13:36.556281 2026] [:error] [pid 11494:tid 11508] [client 20.100.178.47:15375] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeZ64Mgko5iFiE8YoyRhdgAAAYw"]
[Tue Apr 21 03:13:37.291407 2026] [:error] [pid 42014:tid 42017] [client 20.100.178.47:40604] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aeZ64cek-00-ZI0f1NrEbgAAAQE"]
[Tue Apr 21 03:13:37.869765 2026] [:error] [pid 42014:tid 42038] [client 20.100.178.47:22858] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aeZ64cek-00-ZI0f1NrEcAAAARY"]
[Tue Apr 21 03:13:38.451834 2026] [:error] [pid 11351:tid 11395] [client 20.100.178.47:1384] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aeZ64gN8Z1-vktaI_tPawwAAAEg"]
[Tue Apr 21 03:13:38.990193 2026] [:error] [pid 11351:tid 11398] [client 20.100.178.47:62042] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aeZ64gN8Z1-vktaI_tPaxQAAAEs"]
[Tue Apr 21 03:13:39.664921 2026] [:error] [pid 11350:tid 11362] [client 20.100.178.47:20985] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aeZ64_4EoMBgOJuJnT1cDQAAAAM"]
[Tue Apr 21 03:13:40.210300 2026] [:error] [pid 11350:tid 11369] [client 20.100.178.47:37905] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aeZ65P4EoMBgOJuJnT1cDgAAAAo"]
[Tue Apr 21 03:13:40.746741 2026] [:error] [pid 11350:tid 11380] [client 20.100.178.47:63445] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aeZ65P4EoMBgOJuJnT1cEAAAABU"]
[Tue Apr 21 03:13:41.382370 2026] [:error] [pid 11350:tid 11364] [client 20.100.178.47:39544] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aeZ65f4EoMBgOJuJnT1cEwAAAAU"]
[Tue Apr 21 03:13:42.018278 2026] [:error] [pid 11350:tid 11361] [client 20.100.178.47:12192] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aeZ65v4EoMBgOJuJnT1cFQAAAAI"]
[Tue Apr 21 03:13:42.754095 2026] [:error] [pid 11441:tid 11456] [client 20.100.178.47:12305] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aeZ65sixByFUvmh319D_0wAAAM0"]
[Tue Apr 21 03:13:43.388473 2026] [:error] [pid 11350:tid 11367] [client 20.100.178.47:18971] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aeZ65_4EoMBgOJuJnT1cHgAAAAg"]
[Tue Apr 21 03:13:44.017795 2026] [:error] [pid 11350:tid 11363] [client 20.100.178.47:63472] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aeZ66P4EoMBgOJuJnT1cIQAAAAQ"]
[Tue Apr 21 03:13:44.915044 2026] [:error] [pid 42014:tid 42022] [client 20.100.178.47:37915] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "aeZ66Mek-00-ZI0f1NrEeAAAAQY"]
[Tue Apr 21 03:13:45.961747 2026] [:error] [pid 11441:tid 11455] [client 20.100.178.47:34147] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "aeZ66cixByFUvmh319D_2wAAAMw"]
[Tue Apr 21 03:13:46.596819 2026] [:error] [pid 42014:tid 42040] [client 20.100.178.47:18947] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "aeZ66sek-00-ZI0f1NrEegAAARg"]
[Tue Apr 21 03:13:47.441033 2026] [:error] [pid 11350:tid 11379] [client 20.100.178.47:39518] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "aeZ66_4EoMBgOJuJnT1cJAAAABQ"]
[Tue Apr 21 03:13:48.293334 2026] [:error] [pid 11494:tid 11506] [client 20.100.178.47:34131] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aeZ67Mgko5iFiE8YoyRhjwAAAYo"]
[Tue Apr 21 03:13:48.915587 2026] [:error] [pid 11494:tid 11505] [client 20.100.178.47:22850] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aeZ67Mgko5iFiE8YoyRhkQAAAYk"]
[Tue Apr 21 03:13:49.520024 2026] [:error] [pid 42014:tid 42039] [client 20.100.178.47:1355] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aeZ67cek-00-ZI0f1NrEewAAARc"]
[Tue Apr 21 03:13:50.103937 2026] [:error] [pid 11350:tid 11376] [client 20.100.178.47:12288] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aeZ67v4EoMBgOJuJnT1cMwAAABE"]
[Tue Apr 21 03:13:50.657705 2026] [:error] [pid 11350:tid 11359] [client 20.100.178.47:37902] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZ67v4EoMBgOJuJnT1cNAAAAAA"]
[Tue Apr 21 03:13:51.265445 2026] [:error] [pid 11351:tid 11400] [client 20.100.178.47:17669] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZ67wN8Z1-vktaI_tPazAAAAE0"]
[Tue Apr 21 03:13:52.012752 2026] [:error] [pid 11494:tid 11520] [client 20.100.178.47:64423] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZ68Mgko5iFiE8YoyRhmwAAAZg"]
[Tue Apr 21 03:13:52.674964 2026] [:error] [pid 11494:tid 11512] [client 20.100.178.47:64424] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZ68Mgko5iFiE8YoyRhnAAAAZA"]
[Tue Apr 21 03:13:53.385195 2026] [:error] [pid 11350:tid 11374] [client 20.100.178.47:13784] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZ68f4EoMBgOJuJnT1cOwAAAA8"]
[Tue Apr 21 03:13:54.011162 2026] [:error] [pid 11441:tid 11448] [client 20.100.178.47:62016] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZ68sixByFUvmh319D_5gAAAMU"]
[Tue Apr 21 03:13:54.592604 2026] [:error] [pid 11350:tid 11362] [client 20.100.178.47:22904] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZ68v4EoMBgOJuJnT1cRgAAAAM"]
[Tue Apr 21 03:13:55.149417 2026] [:error] [pid 11351:tid 11392] [client 20.100.178.47:40637] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZ68wN8Z1-vktaI_tPa1gAAAEU"]
[Tue Apr 21 03:13:55.757983 2026] [:error] [pid 11351:tid 11411] [client 20.100.178.47:62030] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZ68wN8Z1-vktaI_tPa2QAAAFg"]
[Tue Apr 21 03:13:56.333030 2026] [:error] [pid 11351:tid 11404] [client 20.100.178.47:63438] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZ69AN8Z1-vktaI_tPa3QAAAFE"]
[Tue Apr 21 03:13:56.907612 2026] [:error] [pid 11441:tid 11466] [client 20.100.178.47:22863] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZ69MixByFUvmh319D_6wAAANc"]
[Tue Apr 21 03:13:57.535880 2026] [:error] [pid 11351:tid 11403] [client 20.100.178.47:64388] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZ69QN8Z1-vktaI_tPa4wAAAFA"]
[Tue Apr 21 03:13:58.143529 2026] [:error] [pid 6928:tid 6935] [client 20.100.178.47:62020] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZ69h3y7MHq1iB0qYoEcQAAAUU"]
[Tue Apr 21 03:13:58.736379 2026] [:error] [pid 11494:tid 11510] [client 20.100.178.47:12303] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZ69sgko5iFiE8YoyRhogAAAY4"]
[Tue Apr 21 03:13:59.349594 2026] [:error] [pid 11441:tid 11446] [client 20.100.178.47:12307] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZ698ixByFUvmh319D_8QAAAMM"]
[Tue Apr 21 03:13:59.967879 2026] [:error] [pid 11351:tid 11396] [client 20.100.178.47:12160] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZ69wN8Z1-vktaI_tPa6QAAAEk"]
[Tue Apr 21 03:14:00.540517 2026] [:error] [pid 11351:tid 11399] [client 20.100.178.47:62081] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeZ6-AN8Z1-vktaI_tPa6wAAAEw"]
[Tue Apr 21 03:14:01.126864 2026] [:error] [pid 42014:tid 42020] [client 20.100.178.47:18958] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeZ6-cek-00-ZI0f1NrEfQAAAQQ"]
[Tue Apr 21 03:14:01.740806 2026] [:error] [pid 11494:tid 11504] [client 20.100.178.47:22864] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeZ6-cgko5iFiE8YoyRhpwAAAYg"]
[Tue Apr 21 03:14:02.493394 2026] [:error] [pid 11350:tid 11364] [client 20.100.178.47:64441] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeZ6-v4EoMBgOJuJnT1cVAAAAAU"]
[Tue Apr 21 03:14:03.086908 2026] [:error] [pid 11352:tid 11419] [client 20.100.178.47:64434] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZ6-2l10mhMSfJ7ir8V7QAAAIU"]
[Tue Apr 21 03:14:03.748882 2026] [:error] [pid 11494:tid 11496] [client 20.100.178.47:62101] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZ6-8gko5iFiE8YoyRhqwAAAYA"]
[Tue Apr 21 03:14:04.438333 2026] [:error] [pid 11494:tid 11518] [client 20.100.178.47:11289] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZ6_Mgko5iFiE8YoyRhrQAAAZY"]
[Tue Apr 21 03:14:05.095118 2026] [:error] [pid 11494:tid 11506] [client 20.100.178.47:53153] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZ6_cgko5iFiE8YoyRhsAAAAYo"]
[Tue Apr 21 03:14:05.849860 2026] [:error] [pid 11441:tid 11444] [client 20.100.178.47:62126] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeZ6_cixByFUvmh319D_8gAAAME"]
[Tue Apr 21 03:14:06.663108 2026] [:error] [pid 6928:tid 6934] [client 20.100.178.47:62138] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeZ6_h3y7MHq1iB0qYoEdgAAAUQ"]
[Tue Apr 21 03:14:07.416714 2026] [:error] [pid 11350:tid 11359] [client 20.100.178.47:27407] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeZ6__4EoMBgOJuJnT1cWgAAAAA"]
[Tue Apr 21 03:14:08.152354 2026] [:error] [pid 11441:tid 11443] [client 20.100.178.47:54343] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeZ7AMixByFUvmh319D__gAAAMA"]
[Tue Apr 21 03:14:08.827907 2026] [:error] [pid 6928:tid 6937] [client 20.100.178.47:40609] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZ7AB3y7MHq1iB0qYoEfwAAAUc"]
[Tue Apr 21 03:14:09.672276 2026] [:error] [pid 11350:tid 11376] [client 20.100.178.47:53182] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Tue Apr 21 03:14:09.934963 2026] [:error] [pid 11350:tid 11360] [client 20.100.178.47:53182] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Tue Apr 21 03:14:10.201100 2026] [:error] [pid 11350:tid 11369] [client 20.100.178.47:53182] File does not exist: /usr/local/apache/htdocs/suspended-page/fi.php
[Tue Apr 21 03:14:10.469340 2026] [:error] [pid 11350:tid 11362] [client 20.100.178.47:53182] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Tue Apr 21 03:14:11.006754 2026] [:error] [pid 11350:tid 11372] [client 20.100.178.47:53182] [client 20.100.178.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeZ7A_4EoMBgOJuJnT1cZgAAAA0"]
[Tue Apr 21 03:14:11.614668 2026] [:error] [pid 11441:tid 11446] [client 20.100.178.47:62084] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Tue Apr 21 03:14:12.413092 2026] [:error] [pid 11441:tid 11454] [client 20.100.178.47:62084] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Tue Apr 21 03:14:12.678374 2026] [:error] [pid 11441:tid 11447] [client 20.100.178.47:62084] File does not exist: /usr/local/apache/htdocs/suspended-page/dev.php
[Tue Apr 21 03:14:12.945768 2026] [:error] [pid 11441:tid 11462] [client 20.100.178.47:62084] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "aeZ7BMixByFUvmh319AAHgAAANM"]
[Tue Apr 21 03:14:13.620695 2026] [:error] [pid 11441:tid 11456] [client 20.100.178.47:17408] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "aeZ7BcixByFUvmh319AAIQAAAM0"]
[Tue Apr 21 03:14:14.225527 2026] [:error] [pid 11494:tid 11503] [client 20.100.178.47:27401] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "aeZ7Bsgko5iFiE8YoyRhvgAAAYc"]
[Tue Apr 21 03:14:14.771574 2026] [:error] [pid 11441:tid 11464] [client 20.100.178.47:37962] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "aeZ7BsixByFUvmh319AAKAAAANU"]
[Tue Apr 21 03:14:15.381155 2026] [:error] [pid 11441:tid 11467] [client 20.100.178.47:17469] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "aeZ7B8ixByFUvmh319AAKwAAANg"]
[Tue Apr 21 03:14:16.046193 2026] [:error] [pid 11350:tid 11378] [client 20.100.178.47:13777] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "aeZ7CP4EoMBgOJuJnT1cfgAAABM"]
[Tue Apr 21 03:14:16.676279 2026] [:error] [pid 11350:tid 11368] [client 20.100.178.47:12010] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "aeZ7CP4EoMBgOJuJnT1cgAAAAAk"]
[Tue Apr 21 03:14:17.324633 2026] [:error] [pid 11441:tid 11463] [client 20.100.178.47:13798] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "aeZ7CcixByFUvmh319AANQAAANQ"]
[Tue Apr 21 03:14:17.902535 2026] [:error] [pid 11351:tid 11387] [client 20.100.178.47:53066] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "aeZ7CQN8Z1-vktaI_tPbAwAAAEA"]
[Tue Apr 21 03:14:18.517267 2026] [:error] [pid 11352:tid 11424] [client 20.100.178.47:1105] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "aeZ7Cml10mhMSfJ7ir8WAgAAAIo"]
[Tue Apr 21 03:14:19.115831 2026] [:error] [pid 11441:tid 11450] [client 20.100.178.47:52116] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "aeZ7C8ixByFUvmh319AATwAAAMc"]
[Tue Apr 21 03:14:19.755474 2026] [:error] [pid 42014:tid 42023] [client 20.100.178.47:13223] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "aeZ7C8ek-00-ZI0f1NrEiQAAAQc"]
[Tue Apr 21 03:14:20.316281 2026] [:error] [pid 42014:tid 42016] [client 20.100.178.47:38004] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeZ7DMek-00-ZI0f1NrEigAAAQA"]
[Tue Apr 21 03:14:20.983660 2026] [:error] [pid 42014:tid 42025] [client 20.100.178.47:25496] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeZ7DMek-00-ZI0f1NrEjQAAAQk"]
[Tue Apr 21 03:14:21.544947 2026] [:error] [pid 42014:tid 42033] [client 20.100.178.47:1945] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeZ7Dcek-00-ZI0f1NrEjwAAARE"]
[Tue Apr 21 03:14:22.151494 2026] [:error] [pid 6928:tid 6934] [client 20.100.178.47:12716] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeZ7Dh3y7MHq1iB0qYoEowAAAUQ"]
[Tue Apr 21 03:14:22.770091 2026] [:error] [pid 11441:tid 11461] [client 20.100.178.47:64363] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aeZ7DsixByFUvmh319AAUwAAANI"]
[Tue Apr 21 03:14:23.301168 2026] [:error] [pid 11494:tid 11497] [client 20.100.178.47:63520] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aeZ7D8gko5iFiE8YoyRh4AAAAYE"]
[Tue Apr 21 03:14:23.859767 2026] [:error] [pid 11441:tid 11451] [client 20.100.178.47:64321] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aeZ7D8ixByFUvmh319AAVgAAAMg"]
[Tue Apr 21 03:14:24.505353 2026] [:error] [pid 11441:tid 11454] [client 20.100.178.47:63530] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aeZ7EMixByFUvmh319AAWQAAAMs"]
[Tue Apr 21 03:14:25.077906 2026] [:error] [pid 6928:tid 6948] [client 20.100.178.47:12706] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeZ7ER3y7MHq1iB0qYoEpQAAAVI"]
[Tue Apr 21 03:14:25.662306 2026] [:error] [pid 6928:tid 6942] [client 20.100.178.47:23258] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeZ7ER3y7MHq1iB0qYoEqAAAAUw"]
[Tue Apr 21 03:14:26.240452 2026] [:error] [pid 11350:tid 11371] [client 20.100.178.47:32847] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeZ7Ev4EoMBgOJuJnT1cjgAAAAw"]
[Tue Apr 21 03:14:26.867137 2026] [:error] [pid 42014:tid 42038] [client 20.100.178.47:23260] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeZ7Esek-00-ZI0f1NrEkwAAARY"]
[Tue Apr 21 03:14:27.453016 2026] [:error] [pid 11350:tid 11363] [client 20.100.178.47:1704] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aeZ7E_4EoMBgOJuJnT1ckQAAAAQ"]
[Tue Apr 21 03:14:28.097833 2026] [:error] [pid 11352:tid 11433] [client 20.100.178.47:14773] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aeZ7FGl10mhMSfJ7ir8WDwAAAJM"]
[Tue Apr 21 03:14:28.846266 2026] [:error] [pid 11494:tid 11515] [client 20.100.178.47:1056] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aeZ7FMgko5iFiE8YoyRh-AAAAZM"]
[Tue Apr 21 03:14:29.464626 2026] [:error] [pid 11441:tid 11452] [client 20.100.178.47:13709] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aeZ7FcixByFUvmh319AAXQAAAMk"]
[Tue Apr 21 03:14:30.156861 2026] [:error] [pid 11441:tid 11467] [client 20.100.178.47:16729] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aeZ7FsixByFUvmh319AAXwAAANg"]
[Tue Apr 21 03:14:30.711048 2026] [:error] [pid 42014:tid 42030] [client 20.100.178.47:53884] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aeZ7Fsek-00-ZI0f1NrElgAAAQ4"]
[Tue Apr 21 03:14:31.484946 2026] [:error] [pid 42014:tid 42031] [client 20.100.178.47:28701] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aeZ7F8ek-00-ZI0f1NrEmgAAAQ8"]
[Tue Apr 21 03:14:32.185748 2026] [:error] [pid 11350:tid 11380] [client 20.100.178.47:19383] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aeZ7GP4EoMBgOJuJnT1cmQAAABU"]
[Tue Apr 21 03:14:32.800282 2026] [:error] [pid 11351:tid 11393] [client 20.100.178.47:19452] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeZ7GAN8Z1-vktaI_tPbDQAAAEY"]
[Tue Apr 21 03:14:33.477912 2026] [:error] [pid 11494:tid 11512] [client 20.100.178.47:15763] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeZ7Gcgko5iFiE8YoyRh_AAAAZA"]
[Tue Apr 21 03:14:34.192831 2026] [:error] [pid 11441:tid 11457] [client 20.100.178.47:39472] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeZ7GsixByFUvmh319AAYQAAAM4"]
[Tue Apr 21 03:14:34.918421 2026] [:error] [pid 11351:tid 11389] [client 20.100.178.47:21698] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeZ7GgN8Z1-vktaI_tPbEgAAAEI"]
[Tue Apr 21 03:14:35.556132 2026] [:error] [pid 11351:tid 11396] [client 20.100.178.47:17474] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeZ7GwN8Z1-vktaI_tPbFAAAAEk"]
[Tue Apr 21 03:14:36.128899 2026] [:error] [pid 11351:tid 11401] [client 20.100.178.47:19792] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeZ7HAN8Z1-vktaI_tPbGAAAAE4"]
[Tue Apr 21 03:14:36.925984 2026] [:error] [pid 11350:tid 11379] [client 20.100.178.47:21720] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeZ7HP4EoMBgOJuJnT1cnwAAABQ"]
[Tue Apr 21 03:14:37.478448 2026] [:error] [pid 11494:tid 11520] [client 20.100.178.47:15786] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeZ7Hcgko5iFiE8YoyRiAAAAAZg"]
[Tue Apr 21 03:14:38.125198 2026] [:error] [pid 11441:tid 11463] [client 20.100.178.47:19794] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aeZ7HsixByFUvmh319AAZQAAANQ"]
[Tue Apr 21 03:14:38.728595 2026] [:error] [pid 11494:tid 11500] [client 20.100.178.47:17130] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aeZ7Hsgko5iFiE8YoyRiAgAAAYQ"]
[Tue Apr 21 03:14:39.438178 2026] [:error] [pid 11441:tid 11459] [client 20.100.178.47:21706] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aeZ7H8ixByFUvmh319AAaAAAANA"]
[Tue Apr 21 03:14:40.015328 2026] [:error] [pid 42014:tid 42027] [client 20.100.178.47:15807] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aeZ7IMek-00-ZI0f1NrEqQAAAQs"]
[Tue Apr 21 03:14:40.593850 2026] [:error] [pid 42014:tid 42021] [client 20.100.178.47:15802] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aeZ7IMek-00-ZI0f1NrEqgAAAQU"]
[Tue Apr 21 03:14:41.153699 2026] [:error] [pid 11351:tid 11397] [client 20.100.178.47:46870] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aeZ7IQN8Z1-vktaI_tPbIgAAAEo"]
[Tue Apr 21 03:14:41.701663 2026] [:error] [pid 42014:tid 42026] [client 20.100.178.47:21249] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aeZ7Icek-00-ZI0f1NrErAAAAQo"]
[Tue Apr 21 03:14:42.449041 2026] [:error] [pid 11494:tid 11508] [client 20.100.178.47:39426] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aeZ7Isgko5iFiE8YoyRiDAAAAYw"]
[Tue Apr 21 03:14:43.109989 2026] [:error] [pid 42014:tid 42016] [client 20.100.178.47:19835] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeZ7I8ek-00-ZI0f1NrEsQAAAQA"]
[Tue Apr 21 03:14:43.877444 2026] [:error] [pid 42014:tid 42025] [client 20.100.178.47:46871] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeZ7I8ek-00-ZI0f1NrEtAAAAQk"]
[Tue Apr 21 03:14:44.457371 2026] [:error] [pid 11350:tid 11370] [client 20.100.178.47:46862] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeZ7JP4EoMBgOJuJnT1cqAAAAAs"]
[Tue Apr 21 03:14:45.279621 2026] [:error] [pid 11351:tid 11405] [client 20.100.178.47:14982] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeZ7JQN8Z1-vktaI_tPbJgAAAFI"]
[Tue Apr 21 03:14:46.102909 2026] [:error] [pid 11351:tid 11406] [client 20.100.178.47:15760] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aeZ7JgN8Z1-vktaI_tPbKQAAAFM"]
[Tue Apr 21 03:14:47.059562 2026] [:error] [pid 6928:tid 6937] [client 20.100.178.47:21702] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aeZ7Jx3y7MHq1iB0qYoE0QAAAUc"]
[Tue Apr 21 03:14:47.709128 2026] [:error] [pid 11351:tid 11399] [client 20.100.178.47:17505] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aeZ7JwN8Z1-vktaI_tPbLgAAAEw"]
[Tue Apr 21 03:14:48.444187 2026] [:error] [pid 11494:tid 11501] [client 20.100.178.47:17534] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aeZ7KMgko5iFiE8YoyRiEAAAAYU"]
[Tue Apr 21 03:14:49.119947 2026] [:error] [pid 11494:tid 11511] [client 20.100.178.47:14573] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aeZ7Kcgko5iFiE8YoyRiFAAAAY8"]
[Tue Apr 21 03:14:49.727865 2026] [:error] [pid 11494:tid 11500] [client 20.100.178.47:17519] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aeZ7Kcgko5iFiE8YoyRiGAAAAYQ"]
[Tue Apr 21 03:14:50.474378 2026] [:error] [pid 11351:tid 11406] [client 20.100.178.47:21711] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aeZ7KgN8Z1-vktaI_tPbOQAAAFM"]
[Tue Apr 21 03:14:51.222023 2026] [:error] [pid 11351:tid 11408] [client 20.100.178.47:30179] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aeZ7KwN8Z1-vktaI_tPbQAAAAFU"]
[Tue Apr 21 03:14:51.801982 2026] [:error] [pid 11351:tid 11411] [client 20.100.178.47:21700] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aeZ7KwN8Z1-vktaI_tPbRwAAAFg"]
[Tue Apr 21 03:14:52.645311 2026] [:error] [pid 11351:tid 11396] [client 20.100.178.47:30164] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aeZ7LAN8Z1-vktaI_tPbUQAAAEk"]
[Tue Apr 21 03:14:53.292889 2026] [:error] [pid 11350:tid 11360] [client 20.100.178.47:15793] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aeZ7Lf4EoMBgOJuJnT1ctAAAAAE"]
[Tue Apr 21 03:14:53.948421 2026] [:error] [pid 11350:tid 11363] [client 20.100.178.47:14046] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aeZ7Lf4EoMBgOJuJnT1ctwAAAAQ"]
[Tue Apr 21 03:14:54.643688 2026] [:error] [pid 11351:tid 11403] [client 20.100.178.47:21752] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aeZ7LgN8Z1-vktaI_tPbXgAAAFA"]
[Tue Apr 21 03:14:55.317832 2026] [:error] [pid 11351:tid 11406] [client 20.100.178.47:21287] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aeZ7LwN8Z1-vktaI_tPbYgAAAFM"]
[Tue Apr 21 03:14:55.915494 2026] [:error] [pid 11351:tid 11387] [client 20.100.178.47:19817] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aeZ7LwN8Z1-vktaI_tPbaAAAAEA"]
[Tue Apr 21 03:14:56.633301 2026] [:error] [pid 11351:tid 11407] [client 20.100.178.47:17784] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aeZ7MAN8Z1-vktaI_tPbcAAAAFQ"]
[Tue Apr 21 03:14:57.334773 2026] [:error] [pid 42014:tid 42034] [client 20.100.178.47:30182] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "aeZ7Mcek-00-ZI0f1NrEwwAAARI"]
[Tue Apr 21 03:14:58.003270 2026] [:error] [pid 11350:tid 11369] [client 20.100.178.47:19419] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "aeZ7Mv4EoMBgOJuJnT1cwgAAAAo"]
[Tue Apr 21 03:14:58.746883 2026] [:error] [pid 42014:tid 42018] [client 20.100.178.47:19410] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "aeZ7Msek-00-ZI0f1NrExgAAAQI"]
[Tue Apr 21 03:14:59.354721 2026] [:error] [pid 11494:tid 11506] [client 20.100.178.47:19795] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "aeZ7M8gko5iFiE8YoyRiKgAAAYo"]
[Tue Apr 21 03:15:00.033297 2026] [:error] [pid 6928:tid 6939] [client 20.100.178.47:21736] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeZ7NB3y7MHq1iB0qYoE4wAAAUk"]
[Tue Apr 21 03:15:00.609643 2026] [:error] [pid 11350:tid 11360] [client 20.100.178.47:46864] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeZ7NP4EoMBgOJuJnT1cxgAAAAE"]
[Tue Apr 21 03:15:01.286794 2026] [:error] [pid 11441:tid 11453] [client 20.100.178.47:21295] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeZ7NcixByFUvmh319AA0wAAAMo"]
[Tue Apr 21 03:15:02.107816 2026] [:error] [pid 11351:tid 11391] [client 20.100.178.47:19437] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeZ7NgN8Z1-vktaI_tPbhwAAAEQ"]
[Tue Apr 21 03:15:02.784761 2026] [:error] [pid 11350:tid 11359] [client 20.100.178.47:18602] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZ7Nv4EoMBgOJuJnT1czQAAAAA"]
[Tue Apr 21 03:15:03.492600 2026] [:error] [pid 11351:tid 11408] [client 20.100.178.47:21718] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZ7NwN8Z1-vktaI_tPbjQAAAFU"]
[Tue Apr 21 03:15:04.190338 2026] [:error] [pid 6928:tid 6944] [client 20.100.178.47:14582] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZ7OB3y7MHq1iB0qYoE5wAAAU4"]
[Tue Apr 21 03:15:05.027879 2026] [:error] [pid 6928:tid 6952] [client 20.100.178.47:21701] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZ7OR3y7MHq1iB0qYoE6QAAAVY"]
[Tue Apr 21 03:15:05.783812 2026] [:error] [pid 11494:tid 11501] [client 20.100.178.47:14019] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aeZ7Ocgko5iFiE8YoyRiQAAAAYU"]
[Tue Apr 21 03:15:06.501522 2026] [:error] [pid 11350:tid 11359] [client 20.100.178.47:21277] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aeZ7Ov4EoMBgOJuJnT1c2QAAAAA"]
[Tue Apr 21 03:15:07.503268 2026] [:error] [pid 11350:tid 11380] [client 20.100.178.47:48077] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aeZ7O_4EoMBgOJuJnT1c3gAAABU"]
[Tue Apr 21 03:15:08.259024 2026] [:error] [pid 11351:tid 11408] [client 20.100.178.47:39483] [client 20.100.178.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aeZ7PAN8Z1-vktaI_tPbnQAAAFU"]
[Tue Apr 21 14:49:49.409206 2026] [:error] [pid 35415:tid 35441] [client 50.17.106.38:33606] [client 50.17.106.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aeceDUiqDinI4_22zzhFiwAAAM4"]
[Tue Apr 21 14:49:50.587097 2026] [:error] [pid 4822:tid 4845] [client 50.17.106.38:55782] [client 50.17.106.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aeceDiAteFQFwS_23JmL_QAAAVM"]
[Tue Apr 21 14:49:51.625329 2026] [:error] [pid 4823:tid 4871] [client 50.17.106.38:55832] [client 50.17.106.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "aeceD_c8mke3PfHqsxGMcgAAAZI"]
[Tue Apr 21 14:49:52.677756 2026] [:error] [pid 5377:tid 5397] [client 50.17.106.38:55866] [client 50.17.106.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "aeceELBKychFlrHBdvvBGAAAAcs"]
[Tue Apr 21 15:36:34.813490 2026] [:error] [pid 35415:tid 35442] [client 185.82.72.109:54569] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue Apr 21 15:36:35.092982 2026] [:error] [pid 35415:tid 35447] [client 185.82.72.109:54569] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Tue Apr 21 15:36:35.376063 2026] [:error] [pid 35415:tid 35440] [client 185.82.72.109:54569] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Tue Apr 21 15:36:35.666675 2026] [:error] [pid 35415:tid 35448] [client 185.82.72.109:54569] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Tue Apr 21 15:36:35.946991 2026] [:error] [pid 35415:tid 35430] [client 185.82.72.109:54569] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Tue Apr 21 15:36:36.244712 2026] [:error] [pid 35415:tid 35445] [client 185.82.72.109:54569] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Tue Apr 21 15:36:36.547689 2026] [:error] [pid 35415:tid 35436] [client 185.82.72.109:54569] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Tue Apr 21 15:36:36.846595 2026] [:error] [pid 35415:tid 35451] [client 185.82.72.109:54569] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Tue Apr 21 15:36:37.129692 2026] [:error] [pid 35415:tid 35438] [client 185.82.72.109:54569] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Tue Apr 21 15:36:37.406355 2026] [:error] [pid 35415:tid 35442] [client 185.82.72.109:54569] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "aecpBUiqDinI4_22zzhViQAAAM8"]
[Tue Apr 21 15:36:37.939100 2026] [:error] [pid 53832:tid 53857] [client 45.86.200.236:35399] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Tue Apr 21 15:36:38.205536 2026] [:error] [pid 53832:tid 53836] [client 45.86.200.236:35399] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aecpBtzkuxsE_OhM9UITfQAAAkE"]
[Tue Apr 21 15:36:54.487018 2026] [:error] [pid 5377:tid 5407] [client 45.86.200.222:63259] [client 45.86.200.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bitrix/admin/htmleditor2/%20"] [unique_id "aecpFrBKychFlrHBdvvjvAAAAdU"]
[Tue Apr 21 15:36:58.725477 2026] [:error] [pid 53731:tid 53755] [client 45.86.200.246:31611] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Tue Apr 21 15:37:24.491548 2026] [:error] [pid 53731:tid 53758] [client 45.86.200.246:31611] [client 45.86.200.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aecpNF2I9THUR-bRVGzbCgAAAhY"]
[Tue Apr 21 15:38:09.725133 2026] [:error] [pid 4777:tid 4802] [client 45.86.200.227:58133] [client 45.86.200.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/seooyanz/"] [unique_id "aecpYaxXur6bykKyLZSIXQAAAQ4"]
[Tue Apr 21 15:38:23.633387 2026] [:error] [pid 35321:tid 35387] [client 45.86.200.213:37865] [client 45.86.200.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/ID3/img/img/block/"] [unique_id "aecpbzeHLhVUuu8cVXyv4AAAAEM"]
[Tue Apr 21 15:38:43.141323 2026] [:error] [pid 35321:tid 35398] [client 45.86.200.246:51419] [client 45.86.200.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.well-known/pkivalidation/"] [unique_id "aecpgzeHLhVUuu8cVXyxJgAAAE4"]
[Tue Apr 21 17:12:08.011887 2026] [:error] [pid 35321:tid 35389] [client 54.238.71.130:39480] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aec_aDeHLhVUuu8cVXzyBQAAAEU"]
[Tue Apr 21 17:12:08.719713 2026] [:error] [pid 53731:tid 53741] [client 54.238.71.130:37564] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aec_aF2I9THUR-bRVGz_MwAAAgY"]
[Tue Apr 21 17:12:09.287892 2026] [:error] [pid 54080:tid 54094] [client 54.238.71.130:37628] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "aec_aYzEbQHHxtmWbaaBLgAAAsw"]
[Tue Apr 21 17:12:11.739166 2026] [:error] [pid 53978:tid 53983] [client 54.238.71.130:37816] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.staging"] [unique_id "aec_a51ivsR4hcOSQbbTrAAAAoM"]
[Tue Apr 21 17:12:12.297102 2026] [:error] [pid 53978:tid 53997] [client 54.238.71.130:37870] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.development"] [unique_id "aec_bJ1ivsR4hcOSQbbTsAAAApE"]
[Tue Apr 21 17:12:12.862890 2026] [:error] [pid 53978:tid 53994] [client 54.238.71.130:37922] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.test"] [unique_id "aec_bJ1ivsR4hcOSQbbTtgAAAo4"]
[Tue Apr 21 18:56:03.007009 2026] [:error] [pid 53978:tid 54004] [client 68.183.74.61:54145] [client 68.183.74.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.74.61, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aedXw51ivsR4hcOSQbb7qQAAApg"]
[Tue Apr 21 18:56:03.011347 2026] [:error] [pid 53978:tid 54004] [client 68.183.74.61:54145] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Apr 21 20:58:40.625297 2026] [:error] [pid 35320:tid 35337] [client 159.203.117.74:60395] [client 159.203.117.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.117.74, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aed0gIJW6fdXWO6agMHB8AAAAAc"]
[Tue Apr 21 20:58:40.629639 2026] [:error] [pid 35320:tid 35337] [client 159.203.117.74:60395] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Apr 21 21:13:44.685402 2026] [:error] [pid 35320:tid 35337] [client 35.184.142.175:63705] [client 35.184.142.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.184.142.175, incrementing ddos counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aed4CIJW6fdXWO6agMHJlAAAAAc"]
[Tue Apr 21 21:13:44.688170 2026] [:error] [pid 35320:tid 35337] [client 35.184.142.175:63705] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Apr 21 21:13:44.915631 2026] [:error] [pid 35320:tid 35331] [client 35.184.142.175:63705] [client 35.184.142.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.184.142.175, counter = 6"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "aed4CIJW6fdXWO6agMHJmgAAAAE"]
[Tue Apr 21 21:13:47.061643 2026] [:error] [pid 35321:tid 35401] [client 35.184.142.175:65398] [client 35.184.142.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.184.142.175, counter = 6"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aed4CzeHLhVUuu8cVXyqPgAAAFE"]
[Tue Apr 21 21:13:48.509415 2026] [:error] [pid 53978:tid 53992] [client 35.184.142.175:49994] [client 35.184.142.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.184.142.175, counter = 6"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aed4DJ1ivsR4hcOSQbYk-QAAAow"]
[Tue Apr 21 22:53:34.861776 2026] [:error] [pid 35321:tid 35407] [client 34.9.16.187:64011] [client 34.9.16.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.9.16.187, incrementing ddos counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aeePbjeHLhVUuu8cVXz7wAAAAFc"]
[Tue Apr 21 22:53:34.864275 2026] [:error] [pid 35321:tid 35407] [client 34.9.16.187:64011] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Apr 21 22:53:35.324792 2026] [:error] [pid 35321:tid 35394] [client 34.9.16.187:64011] [client 34.9.16.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aeePbzeHLhVUuu8cVXz7ygAAAEo"]
[Wed Apr 22 05:36:13.137810 2026] [:error] [pid 23041:tid 23054] [client 172.213.220.91:11202] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Wed Apr 22 05:36:13.375633 2026] [:error] [pid 23041:tid 23053] [client 172.213.220.91:11202] File does not exist: /usr/local/apache/htdocs/suspended-page/sl.php
[Wed Apr 22 05:36:13.615424 2026] [:error] [pid 23041:tid 23055] [client 172.213.220.91:11202] File does not exist: /usr/local/apache/htdocs/suspended-page/flox.php
[Wed Apr 22 05:36:14.209789 2026] [:error] [pid 23041:tid 23052] [client 172.213.220.91:11202] File does not exist: /usr/local/apache/htdocs/suspended-page/mff.php
[Wed Apr 22 05:36:14.458584 2026] [:error] [pid 23041:tid 23062] [client 172.213.220.91:11202] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Wed Apr 22 05:36:14.698978 2026] [:error] [pid 23041:tid 23049] [client 172.213.220.91:11202] File does not exist: /usr/local/apache/htdocs/suspended-page/filemanger2.php
[Wed Apr 22 05:36:14.936727 2026] [:error] [pid 23041:tid 23051] [client 172.213.220.91:11202] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Wed Apr 22 05:36:15.185985 2026] [:error] [pid 23041:tid 23064] [client 172.213.220.91:11202] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-vn1.php
[Wed Apr 22 05:36:15.424733 2026] [:error] [pid 23041:tid 23046] [client 172.213.220.91:11202] File does not exist: /usr/local/apache/htdocs/suspended-page/ewp.php
[Wed Apr 22 05:36:15.663890 2026] [:error] [pid 23041:tid 23047] [client 172.213.220.91:11202] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Wed Apr 22 05:36:15.899108 2026] [:error] [pid 23041:tid 23057] [client 172.213.220.91:11202] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "aeftz0TXx_lUa7xwAb62swAAAQ0"]
[Wed Apr 22 05:36:16.487450 2026] [:error] [pid 21683:tid 21765] [client 172.213.220.91:11219] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "aeft0FZBWT-0diZyYyZ95wAAAI8"]
[Wed Apr 22 05:36:17.233777 2026] [:error] [pid 21683:tid 21771] [client 172.213.220.91:11212] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "aeft0VZBWT-0diZyYyZ97AAAAJU"]
[Wed Apr 22 05:36:17.730948 2026] [:error] [pid 21683:tid 21761] [client 172.213.220.91:11206] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "aeft0VZBWT-0diZyYyZ97wAAAIs"]
[Wed Apr 22 05:36:18.227567 2026] [:error] [pid 21683:tid 21767] [client 172.213.220.91:45790] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeft0lZBWT-0diZyYyZ98QAAAJE"]
[Wed Apr 22 05:36:18.701250 2026] [:error] [pid 21683:tid 21770] [client 172.213.220.91:45788] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeft0lZBWT-0diZyYyZ98gAAAJQ"]
[Wed Apr 22 05:36:19.266587 2026] [:error] [pid 21788:tid 21793] [client 172.213.220.91:45800] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeft037OM27rzVpef25_FgAAAMM"]
[Wed Apr 22 05:36:19.755317 2026] [:error] [pid 23041:tid 23047] [client 172.213.220.91:45821] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeft00TXx_lUa7xwAb62wgAAAQM"]
[Wed Apr 22 05:36:20.355452 2026] [:error] [pid 21683:tid 21759] [client 172.213.220.91:45786] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeft1FZBWT-0diZyYyZ9_AAAAIk"]
[Wed Apr 22 05:36:20.950816 2026] [:error] [pid 23041:tid 23050] [client 172.213.220.91:45780] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeft1ETXx_lUa7xwAb62yAAAAQY"]
[Wed Apr 22 05:36:21.445965 2026] [:error] [pid 21788:tid 21805] [client 172.213.220.91:11220] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeft1X7OM27rzVpef25_HQAAAM8"]
[Wed Apr 22 05:36:21.929035 2026] [:error] [pid 23041:tid 23049] [client 172.213.220.91:45799] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeft1UTXx_lUa7xwAb620AAAAQU"]
[Wed Apr 22 05:36:22.534300 2026] [:error] [pid 21681:tid 21706] [client 172.213.220.91:45784] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aeft1t5LmJziq-yZYawoGgAAABA"]
[Wed Apr 22 05:36:23.203688 2026] [:error] [pid 21681:tid 21697] [client 172.213.220.91:45814] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aeft195LmJziq-yZYawoHAAAAAc"]
[Wed Apr 22 05:36:23.744318 2026] [:error] [pid 21681:tid 21712] [client 172.213.220.91:11216] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aeft195LmJziq-yZYawoHwAAABY"]
[Wed Apr 22 05:36:24.509983 2026] [:error] [pid 23041:tid 23049] [client 172.213.220.91:45791] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aeft2ETXx_lUa7xwAb623gAAAQU"]
[Wed Apr 22 05:36:25.070112 2026] [:error] [pid 23041:tid 23047] [client 172.213.220.91:11234] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aeft2UTXx_lUa7xwAb624wAAAQM"]
[Wed Apr 22 05:36:25.635887 2026] [:error] [pid 21682:tid 21741] [client 172.213.220.91:45811] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aeft2ZlXWQZUlmPHS3ruqwAAAFI"]
[Wed Apr 22 05:36:26.288017 2026] [:error] [pid 21788:tid 21794] [client 172.213.220.91:11207] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aeft2n7OM27rzVpef25_JgAAAMQ"]
[Wed Apr 22 05:36:27.335616 2026] [:error] [pid 21788:tid 21807] [client 172.213.220.91:45804] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aeft237OM27rzVpef25_KQAAANE"]
[Wed Apr 22 05:36:28.149526 2026] [:error] [pid 21788:tid 21798] [client 172.213.220.91:11253] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeft3H7OM27rzVpef25_LAAAAMg"]
[Wed Apr 22 05:36:29.013791 2026] [:error] [pid 21683:tid 21774] [client 172.213.220.91:11260] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeft3VZBWT-0diZyYyZ-BAAAAJg"]
[Wed Apr 22 05:36:29.954386 2026] [:error] [pid 21788:tid 21811] [client 172.213.220.91:11224] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeft3X7OM27rzVpef25_OQAAANU"]
[Wed Apr 22 05:36:31.014818 2026] [:error] [pid 21682:tid 21743] [client 172.213.220.91:45782] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeft35lXWQZUlmPHS3rutwAAAFQ"]
[Wed Apr 22 05:36:31.623448 2026] [:error] [pid 21788:tid 21803] [client 172.213.220.91:45771] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aeft337OM27rzVpef25_RQAAAM0"]
[Wed Apr 22 05:36:32.270123 2026] [:error] [pid 23041:tid 23049] [client 172.213.220.91:45792] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aeft4ETXx_lUa7xwAb628gAAAQU"]
[Wed Apr 22 05:36:32.970660 2026] [:error] [pid 21788:tid 21800] [client 172.213.220.91:11210] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aeft4H7OM27rzVpef25_TAAAAMo"]
[Wed Apr 22 05:36:33.564851 2026] [:error] [pid 21682:tid 21741] [client 172.213.220.91:11201] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aeft4ZlXWQZUlmPHS3ruugAAAFI"]
[Wed Apr 22 05:36:34.315378 2026] [:error] [pid 21681:tid 21700] [client 172.213.220.91:45795] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/water.php"] [unique_id "aeft4t5LmJziq-yZYawoKAAAAAo"]
[Wed Apr 22 05:36:35.252597 2026] [:error] [pid 23041:tid 23057] [client 172.213.220.91:45820] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/water.php"] [unique_id "aeft40TXx_lUa7xwAb629gAAAQ0"]
[Wed Apr 22 05:36:36.418108 2026] [:error] [pid 21788:tid 21802] [client 172.213.220.91:11256] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/water.php"] [unique_id "aeft5H7OM27rzVpef25_VAAAAMw"]
[Wed Apr 22 05:36:37.387004 2026] [:error] [pid 21683:tid 21763] [client 172.213.220.91:11214] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/water.php"] [unique_id "aeft5VZBWT-0diZyYyZ-CgAAAI0"]
[Wed Apr 22 05:36:38.043141 2026] [:error] [pid 21683:tid 21751] [client 172.213.220.91:45803] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "aeft5lZBWT-0diZyYyZ-DgAAAIE"]
[Wed Apr 22 05:36:38.709573 2026] [:error] [pid 21788:tid 21813] [client 172.213.220.91:45761] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "aeft5n7OM27rzVpef25_YAAAANc"]
[Wed Apr 22 05:36:39.262319 2026] [:error] [pid 21683:tid 21752] [client 172.213.220.91:11204] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "aeft51ZBWT-0diZyYyZ-EQAAAII"]
[Wed Apr 22 05:36:39.887851 2026] [:error] [pid 21788:tid 21798] [client 172.213.220.91:11252] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "aeft537OM27rzVpef25_ZQAAAMg"]
[Wed Apr 22 05:36:41.107220 2026] [:error] [pid 21682:tid 21747] [client 172.213.220.91:11221] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aeft6ZlXWQZUlmPHS3ruzQAAAFg"]
[Wed Apr 22 05:36:42.227907 2026] [:error] [pid 21788:tid 21801] [client 172.213.220.91:45812] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aeft6n7OM27rzVpef25_bAAAAMs"]
[Wed Apr 22 05:36:45.843415 2026] [:error] [pid 23041:tid 23051] [client 172.213.220.91:11233] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aeft7UTXx_lUa7xwAb63AwAAAQc"]
[Wed Apr 22 05:36:49.567164 2026] [:error] [pid 21788:tid 21799] [client 172.213.220.91:45781] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aeft8X7OM27rzVpef25_iQAAAMk"]
[Wed Apr 22 05:36:50.965892 2026] [:error] [pid 21681:tid 21694] [client 172.213.220.91:11209] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "aeft8t5LmJziq-yZYawoMAAAAAQ"]
[Wed Apr 22 05:36:52.214192 2026] [:error] [pid 21682:tid 21743] [client 172.213.220.91:45807] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "aeft9JlXWQZUlmPHS3ru7QAAAFQ"]
[Wed Apr 22 05:36:53.042999 2026] [:error] [pid 23041:tid 23050] [client 172.213.220.91:11243] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "aeft9UTXx_lUa7xwAb63FAAAAQY"]
[Wed Apr 22 05:36:53.618179 2026] [:error] [pid 23041:tid 23052] [client 172.213.220.91:11227] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "aeft9UTXx_lUa7xwAb63GQAAAQg"]
[Wed Apr 22 05:36:54.098303 2026] [:error] [pid 21788:tid 21810] [client 172.213.220.91:45769] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aeft9n7OM27rzVpef25_kgAAANQ"]
[Wed Apr 22 05:36:54.605543 2026] [:error] [pid 21683:tid 21760] [client 172.213.220.91:45764] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aeft9lZBWT-0diZyYyZ-LAAAAIo"]
[Wed Apr 22 05:36:55.215110 2026] [:error] [pid 23041:tid 23056] [client 172.213.220.91:45760] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aeft90TXx_lUa7xwAb63HwAAAQw"]
[Wed Apr 22 05:36:55.712516 2026] [:error] [pid 23041:tid 23051] [client 172.213.220.91:45816] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aeft90TXx_lUa7xwAb63IgAAAQc"]
[Wed Apr 22 05:36:56.417578 2026] [:error] [pid 21788:tid 21801] [client 172.213.220.91:45815] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aeft-H7OM27rzVpef25_nAAAAMs"]
[Wed Apr 22 05:36:56.990004 2026] [:error] [pid 23041:tid 23063] [client 172.213.220.91:11222] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aeft-ETXx_lUa7xwAb63JAAAARM"]
[Wed Apr 22 05:36:57.472084 2026] [:error] [pid 21788:tid 21809] [client 172.213.220.91:10781] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aeft-X7OM27rzVpef25_pAAAANM"]
[Wed Apr 22 05:36:57.984142 2026] [:error] [pid 21788:tid 21807] [client 172.213.220.91:11237] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aeft-X7OM27rzVpef25_qAAAANE"]
[Wed Apr 22 05:36:58.455097 2026] [:error] [pid 21788:tid 21811] [client 172.213.220.91:10761] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/oij98gy.php"] [unique_id "aeft-n7OM27rzVpef25_rQAAANU"]
[Wed Apr 22 05:36:58.970603 2026] [:error] [pid 21788:tid 21805] [client 172.213.220.91:10773] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/oij98gy.php"] [unique_id "aeft-n7OM27rzVpef25_swAAAM8"]
[Wed Apr 22 05:36:59.493137 2026] [:error] [pid 21683:tid 21773] [client 172.213.220.91:45768] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/oij98gy.php"] [unique_id "aeft-1ZBWT-0diZyYyZ-MgAAAJc"]
[Wed Apr 22 05:36:59.976191 2026] [:error] [pid 21681:tid 21692] [client 172.213.220.91:11238] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/oij98gy.php"] [unique_id "aeft-95LmJziq-yZYawoOgAAAAI"]
[Wed Apr 22 05:37:00.512483 2026] [:error] [pid 21788:tid 21813] [client 172.213.220.91:11211] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeft_H7OM27rzVpef25_vAAAANc"]
[Wed Apr 22 05:37:01.015376 2026] [:error] [pid 21681:tid 21695] [client 172.213.220.91:45813] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeft_d5LmJziq-yZYawoOwAAAAU"]
[Wed Apr 22 05:37:01.542628 2026] [:error] [pid 23041:tid 23059] [client 172.213.220.91:45775] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeft_UTXx_lUa7xwAb63KAAAAQ8"]
[Wed Apr 22 05:37:02.186635 2026] [:error] [pid 21681:tid 21691] [client 172.213.220.91:10779] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeft_t5LmJziq-yZYawoPAAAAAE"]
[Wed Apr 22 05:37:02.671880 2026] [:error] [pid 21681:tid 21714] [client 172.213.220.91:11225] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/turkshell.php"] [unique_id "aeft_t5LmJziq-yZYawoPgAAABg"]
[Wed Apr 22 05:37:03.200885 2026] [:error] [pid 21788:tid 21805] [client 172.213.220.91:10775] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/turkshell.php"] [unique_id "aeft_37OM27rzVpef25_zQAAAM8"]
[Wed Apr 22 05:37:03.792362 2026] [:error] [pid 21788:tid 21811] [client 172.213.220.91:45772] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/turkshell.php"] [unique_id "aeft_37OM27rzVpef25_0gAAANU"]
[Wed Apr 22 05:37:04.600561 2026] [:error] [pid 23041:tid 23066] [client 172.213.220.91:10763] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/turkshell.php"] [unique_id "aefuAETXx_lUa7xwAb63KgAAARY"]
[Wed Apr 22 05:37:05.614188 2026] [:error] [pid 21682:tid 21732] [client 172.213.220.91:11244] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aefuAZlXWQZUlmPHS3ru-gAAAEk"]
[Wed Apr 22 05:37:06.521333 2026] [:error] [pid 23041:tid 23047] [client 172.213.220.91:45805] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aefuAkTXx_lUa7xwAb63MAAAAQM"]
[Wed Apr 22 05:37:07.267900 2026] [:error] [pid 21683:tid 21758] [client 172.213.220.91:45793] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aefuA1ZBWT-0diZyYyZ-OgAAAIg"]
[Wed Apr 22 05:37:07.885621 2026] [:error] [pid 21682:tid 21745] [client 172.213.220.91:45777] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aefuA5lXWQZUlmPHS3ru_gAAAFY"]
[Wed Apr 22 05:37:08.420711 2026] [:error] [pid 21682:tid 21744] [client 172.213.220.91:45798] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aefuBJlXWQZUlmPHS3rvAAAAAFU"]
[Wed Apr 22 05:37:08.892636 2026] [:error] [pid 21788:tid 21792] [client 172.213.220.91:45773] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aefuBH7OM27rzVpef25_5AAAAMI"]
[Wed Apr 22 05:37:09.454224 2026] [:error] [pid 21788:tid 21790] [client 172.213.220.91:10805] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aefuBX7OM27rzVpef25_5QAAAMA"]
[Wed Apr 22 05:37:10.031688 2026] [:error] [pid 23041:tid 23056] [client 172.213.220.91:11250] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aefuBkTXx_lUa7xwAb63NQAAAQw"]
[Wed Apr 22 05:37:10.847352 2026] [:error] [pid 23041:tid 23062] [client 172.213.220.91:11217] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aefuBkTXx_lUa7xwAb63NgAAARI"]
[Wed Apr 22 05:37:11.370754 2026] [:error] [pid 21788:tid 21801] [client 172.213.220.91:11242] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aefuB37OM27rzVpef25_7gAAAMs"]
[Wed Apr 22 05:37:11.944222 2026] [:error] [pid 23041:tid 23047] [client 172.213.220.91:11215] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aefuB0TXx_lUa7xwAb63OAAAAQM"]
[Wed Apr 22 05:37:12.469378 2026] [:error] [pid 21681:tid 21707] [client 172.213.220.91:11231] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aefuCN5LmJziq-yZYawoSgAAABE"]
[Wed Apr 22 05:37:12.981435 2026] [:error] [pid 23041:tid 23048] [client 172.213.220.91:11232] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aefuCETXx_lUa7xwAb63PAAAAQQ"]
[Wed Apr 22 05:37:13.516533 2026] [:error] [pid 23041:tid 23055] [client 172.213.220.91:11240] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aefuCUTXx_lUa7xwAb63QgAAAQs"]
[Wed Apr 22 05:37:14.007039 2026] [:error] [pid 21683:tid 21752] [client 172.213.220.91:45801] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aefuClZBWT-0diZyYyZ-QAAAAII"]
[Wed Apr 22 05:37:14.509332 2026] [:error] [pid 21788:tid 21813] [client 172.213.220.91:45817] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aefuCn7OM27rzVpef25_-wAAANc"]
[Wed Apr 22 05:37:15.057201 2026] [:error] [pid 21788:tid 21790] [client 172.213.220.91:11261] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Wed Apr 22 05:37:15.345561 2026] [:error] [pid 21788:tid 21797] [client 172.213.220.91:11261] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Wed Apr 22 05:37:16.987148 2026] [:error] [pid 21788:tid 21797] [client 172.213.220.91:11261] File does not exist: /usr/local/apache/htdocs/suspended-page/3.php
[Wed Apr 22 05:37:17.245992 2026] [:error] [pid 21788:tid 21803] [client 172.213.220.91:11261] File does not exist: /usr/local/apache/htdocs/suspended-page/4.php
[Wed Apr 22 05:37:17.483982 2026] [:error] [pid 21788:tid 21800] [client 172.213.220.91:11261] File does not exist: /usr/local/apache/htdocs/suspended-page/5.php
[Wed Apr 22 05:37:17.753544 2026] [:error] [pid 21788:tid 21808] [client 172.213.220.91:11261] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Wed Apr 22 05:37:18.032023 2026] [:error] [pid 21788:tid 21810] [client 172.213.220.91:11261] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php
[Wed Apr 22 05:37:18.270331 2026] [:error] [pid 21788:tid 21799] [client 172.213.220.91:11261] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Wed Apr 22 05:37:18.543683 2026] [:error] [pid 21788:tid 21797] [client 172.213.220.91:11261] File does not exist: /usr/local/apache/htdocs/suspended-page/.mopj.php
[Wed Apr 22 05:37:18.796620 2026] [:error] [pid 21788:tid 21804] [client 172.213.220.91:11261] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Wed Apr 22 05:37:19.034756 2026] [:error] [pid 21788:tid 21791] [client 172.213.220.91:11261] File does not exist: /usr/local/apache/htdocs/suspended-page/nano.php
[Wed Apr 22 05:37:19.274675 2026] [:error] [pid 21788:tid 21806] [client 172.213.220.91:11261] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f35_S.php"] [unique_id "aefuD37OM27rzVpef26AHQAAANA"]
[Wed Apr 22 05:37:19.813006 2026] [:error] [pid 21683:tid 21764] [client 172.213.220.91:45794] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f35_S.php"] [unique_id "aefuD1ZBWT-0diZyYyZ-RQAAAI4"]
[Wed Apr 22 05:37:20.357158 2026] [:error] [pid 21683:tid 21765] [client 172.213.220.91:45766] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f35_S.php"] [unique_id "aefuEFZBWT-0diZyYyZ-RgAAAI8"]
[Wed Apr 22 05:37:20.941699 2026] [:error] [pid 21683:tid 21767] [client 172.213.220.91:10770] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/f35_S.php"] [unique_id "aefuEFZBWT-0diZyYyZ-SAAAAJE"]
[Wed Apr 22 05:37:21.421387 2026] [:error] [pid 21683:tid 21773] [client 172.213.220.91:11223] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aefuEVZBWT-0diZyYyZ-TAAAAJc"]
[Wed Apr 22 05:37:21.918213 2026] [:error] [pid 23041:tid 23054] [client 172.213.220.91:10755] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aefuEUTXx_lUa7xwAb63VwAAAQo"]
[Wed Apr 22 05:37:22.538660 2026] [:error] [pid 21683:tid 21750] [client 172.213.220.91:45802] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aefuElZBWT-0diZyYyZ-VAAAAIA"]
[Wed Apr 22 05:37:23.171954 2026] [:error] [pid 21683:tid 21755] [client 172.213.220.91:11254] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aefuE1ZBWT-0diZyYyZ-VgAAAIU"]
[Wed Apr 22 05:37:23.713175 2026] [:error] [pid 21683:tid 21763] [client 172.213.220.91:45785] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aefuE1ZBWT-0diZyYyZ-WgAAAI0"]
[Wed Apr 22 05:37:24.251204 2026] [:error] [pid 21682:tid 21737] [client 172.213.220.91:11255] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aefuFJlXWQZUlmPHS3rvFAAAAE4"]
[Wed Apr 22 05:37:24.809673 2026] [:error] [pid 21681:tid 21693] [client 172.213.220.91:45810] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aefuFN5LmJziq-yZYawoVAAAAAM"]
[Wed Apr 22 05:37:25.283425 2026] [:error] [pid 21683:tid 21755] [client 172.213.220.91:11262] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aefuFVZBWT-0diZyYyZ-ZAAAAIU"]
[Wed Apr 22 05:37:25.759999 2026] [:error] [pid 21682:tid 21730] [client 172.213.220.91:11258] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "aefuFZlXWQZUlmPHS3rvGAAAAEc"]
[Wed Apr 22 05:37:26.320915 2026] [:error] [pid 21683:tid 21773] [client 172.213.220.91:45789] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "aefuFlZBWT-0diZyYyZ-awAAAJc"]
[Wed Apr 22 05:37:26.830183 2026] [:error] [pid 21683:tid 21761] [client 172.213.220.91:10800] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "aefuFlZBWT-0diZyYyZ-cAAAAIs"]
[Wed Apr 22 05:37:27.414268 2026] [:error] [pid 21682:tid 21727] [client 172.213.220.91:10757] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "aefuF5lXWQZUlmPHS3rvHgAAAEQ"]
[Wed Apr 22 05:37:27.922832 2026] [:error] [pid 21682:tid 21740] [client 172.213.220.91:11247] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "aefuF5lXWQZUlmPHS3rvIQAAAFE"]
[Wed Apr 22 05:37:28.500291 2026] [:error] [pid 21788:tid 21805] [client 172.213.220.91:45818] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "aefuGH7OM27rzVpef26AIwAAAM8"]
[Wed Apr 22 05:37:29.132637 2026] [:error] [pid 21788:tid 21812] [client 172.213.220.91:11251] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "aefuGX7OM27rzVpef26AJwAAANY"]
[Wed Apr 22 05:37:29.681720 2026] [:error] [pid 21683:tid 21754] [client 172.213.220.91:45765] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "aefuGVZBWT-0diZyYyZ-dgAAAIQ"]
[Wed Apr 22 05:37:30.238286 2026] [:error] [pid 23041:tid 23064] [client 172.213.220.91:45783] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "aefuGkTXx_lUa7xwAb63YQAAARQ"]
[Wed Apr 22 05:37:30.821771 2026] [:error] [pid 23041:tid 23053] [client 172.213.220.91:10808] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "aefuGkTXx_lUa7xwAb63ZAAAAQk"]
[Wed Apr 22 05:37:31.336654 2026] [:error] [pid 23041:tid 23045] [client 172.213.220.91:10812] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "aefuG0TXx_lUa7xwAb63ZgAAAQE"]
[Wed Apr 22 05:37:31.981162 2026] [:error] [pid 23041:tid 23058] [client 172.213.220.91:11239] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "aefuG0TXx_lUa7xwAb63awAAAQ4"]
[Wed Apr 22 05:37:32.549676 2026] [:error] [pid 23041:tid 23066] [client 172.213.220.91:10792] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "aefuHETXx_lUa7xwAb63bAAAARY"]
[Wed Apr 22 05:37:33.066646 2026] [:error] [pid 23041:tid 23063] [client 172.213.220.91:10799] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "aefuHUTXx_lUa7xwAb63cQAAARM"]
[Wed Apr 22 05:37:33.601280 2026] [:error] [pid 21788:tid 21806] [client 172.213.220.91:45806] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "aefuHX7OM27rzVpef26ALwAAANA"]
[Wed Apr 22 05:37:34.137657 2026] [:error] [pid 21788:tid 21793] [client 172.213.220.91:45797] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "aefuHn7OM27rzVpef26AMgAAAMM"]
[Wed Apr 22 05:37:34.758418 2026] [:error] [pid 23041:tid 23060] [client 172.213.220.91:45778] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "aefuHkTXx_lUa7xwAb63eQAAARA"]
[Wed Apr 22 05:37:35.311367 2026] [:error] [pid 21682:tid 21738] [client 172.213.220.91:10794] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "aefuH5lXWQZUlmPHS3rvLwAAAE8"]
[Wed Apr 22 05:37:35.872030 2026] [:error] [pid 21788:tid 21790] [client 172.213.220.91:11257] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "aefuH37OM27rzVpef26AOQAAAMA"]
[Wed Apr 22 05:37:36.465203 2026] [:error] [pid 21682:tid 21743] [client 172.213.220.91:10791] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "aefuIJlXWQZUlmPHS3rvMQAAAFQ"]
[Wed Apr 22 05:37:37.070380 2026] [:error] [pid 21682:tid 21739] [client 172.213.220.91:45819] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aefuIZlXWQZUlmPHS3rvMwAAAFA"]
[Wed Apr 22 05:37:37.541780 2026] [:error] [pid 21682:tid 21729] [client 172.213.220.91:10769] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aefuIZlXWQZUlmPHS3rvNAAAAEY"]
[Wed Apr 22 05:37:38.048549 2026] [:error] [pid 21788:tid 21806] [client 172.213.220.91:11248] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aefuIn7OM27rzVpef26APQAAANA"]
[Wed Apr 22 05:37:38.569500 2026] [:error] [pid 21788:tid 21791] [client 172.213.220.91:10789] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aefuIn7OM27rzVpef26APgAAAME"]
[Wed Apr 22 05:37:39.289310 2026] [:error] [pid 23041:tid 23055] [client 172.213.220.91:11203] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aefuI0TXx_lUa7xwAb63jgAAAQs"]
[Wed Apr 22 05:37:39.945224 2026] [:error] [pid 21788:tid 21798] [client 172.213.220.91:11082] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aefuI37OM27rzVpef26AQAAAAMg"]
[Wed Apr 22 05:37:40.594718 2026] [:error] [pid 21683:tid 21767] [client 172.213.220.91:11143] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aefuJFZBWT-0diZyYyZ-hQAAAJE"]
[Wed Apr 22 05:37:41.364348 2026] [:error] [pid 21788:tid 21799] [client 172.213.220.91:10797] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aefuJX7OM27rzVpef26ARgAAAMk"]
[Wed Apr 22 05:37:42.073670 2026] [:error] [pid 21788:tid 21808] [client 172.213.220.91:10752] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aefuJn7OM27rzVpef26ATAAAANI"]
[Wed Apr 22 05:37:43.605203 2026] [:error] [pid 21788:tid 21813] [client 172.213.220.91:10810] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aefuJ37OM27rzVpef26AVQAAANc"]
[Wed Apr 22 05:37:45.921351 2026] [:error] [pid 21682:tid 21729] [client 172.213.220.91:10785] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aefuKZlXWQZUlmPHS3rvQgAAAEY"]
[Wed Apr 22 05:37:49.734889 2026] [:error] [pid 21681:tid 21701] [client 172.213.220.91:45796] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aefuLd5LmJziq-yZYawoXgAAAAs"]
[Wed Apr 22 05:37:51.112777 2026] [:error] [pid 23041:tid 23059] [client 172.213.220.91:11160] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/zample.php"] [unique_id "aefuL0TXx_lUa7xwAb63oQAAAQ8"]
[Wed Apr 22 05:37:52.564314 2026] [:error] [pid 21681:tid 21696] [client 172.213.220.91:11200] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/zample.php"] [unique_id "aefuMN5LmJziq-yZYawoXwAAAAY"]
[Wed Apr 22 05:37:53.298369 2026] [:error] [pid 23041:tid 23056] [client 172.213.220.91:45776] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/zample.php"] [unique_id "aefuMUTXx_lUa7xwAb63qQAAAQw"]
[Wed Apr 22 05:37:53.867659 2026] [:error] [pid 21682:tid 21732] [client 172.213.220.91:10778] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/zample.php"] [unique_id "aefuMZlXWQZUlmPHS3rvWQAAAEk"]
[Wed Apr 22 05:37:54.442669 2026] [:error] [pid 21683:tid 21763] [client 172.213.220.91:10759] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aefuMlZBWT-0diZyYyZ-ngAAAI0"]
[Wed Apr 22 05:37:54.973386 2026] [:error] [pid 21683:tid 21753] [client 172.213.220.91:11144] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aefuMlZBWT-0diZyYyZ-oQAAAIM"]
[Wed Apr 22 05:37:55.709252 2026] [:error] [pid 21788:tid 21804] [client 172.213.220.91:45823] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aefuM37OM27rzVpef26AcQAAAM4"]
[Wed Apr 22 05:37:56.411380 2026] [:error] [pid 21788:tid 21796] [client 172.213.220.91:10762] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aefuNH7OM27rzVpef26AcgAAAMY"]
[Wed Apr 22 05:37:57.253791 2026] [:error] [pid 21788:tid 21801] [client 172.213.220.91:45822] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aefuNX7OM27rzVpef26AdgAAAMs"]
[Wed Apr 22 05:37:57.794893 2026] [:error] [pid 21788:tid 21808] [client 172.213.220.91:11230] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aefuNX7OM27rzVpef26AeAAAANI"]
[Wed Apr 22 05:37:58.548000 2026] [:error] [pid 21683:tid 21752] [client 172.213.220.91:11172] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aefuNlZBWT-0diZyYyZ-sAAAAII"]
[Wed Apr 22 05:37:59.193252 2026] [:error] [pid 21683:tid 21768] [client 172.213.220.91:11245] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aefuN1ZBWT-0diZyYyZ-tQAAAJI"]
[Wed Apr 22 05:37:59.692777 2026] [:error] [pid 21788:tid 21791] [client 172.213.220.91:11229] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aefuN37OM27rzVpef26AewAAAME"]
[Wed Apr 22 05:38:00.175518 2026] [:error] [pid 21788:tid 21798] [client 172.213.220.91:10798] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aefuOH7OM27rzVpef26AfAAAAMg"]
[Wed Apr 22 05:38:00.679658 2026] [:error] [pid 21788:tid 21794] [client 172.213.220.91:45770] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aefuOH7OM27rzVpef26AfQAAAMQ"]
[Wed Apr 22 05:38:01.224357 2026] [:error] [pid 21683:tid 21764] [client 172.213.220.91:10793] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aefuOVZBWT-0diZyYyZ-wQAAAI4"]
[Wed Apr 22 05:38:01.709983 2026] [:error] [pid 21788:tid 21807] [client 172.213.220.91:11153] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aefuOX7OM27rzVpef26AgQAAANE"]
[Wed Apr 22 05:38:02.261762 2026] [:error] [pid 21788:tid 21809] [client 172.213.220.91:45763] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aefuOn7OM27rzVpef26AhwAAANM"]
[Wed Apr 22 05:38:02.755465 2026] [:error] [pid 21788:tid 21797] [client 172.213.220.91:11096] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aefuOn7OM27rzVpef26AiQAAAMc"]
[Wed Apr 22 05:38:03.448078 2026] [:error] [pid 21682:tid 21739] [client 172.213.220.91:11192] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aefuO5lXWQZUlmPHS3rvZQAAAFA"]
[Wed Apr 22 05:38:03.952292 2026] [:error] [pid 21681:tid 21706] [client 172.213.220.91:45808] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aefuO95LmJziq-yZYawoYgAAABA"]
[Wed Apr 22 05:38:04.580960 2026] [:error] [pid 21788:tid 21802] [client 172.213.220.91:10780] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aefuPH7OM27rzVpef26AlQAAAMw"]
[Wed Apr 22 05:38:05.055288 2026] [:error] [pid 23041:tid 23055] [client 172.213.220.91:10813] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aefuPUTXx_lUa7xwAb63tgAAAQs"]
[Wed Apr 22 05:38:05.797304 2026] [:error] [pid 21683:tid 21769] [client 172.213.220.91:10804] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aefuPVZBWT-0diZyYyZ-ygAAAJM"]
[Wed Apr 22 05:38:06.549443 2026] [:error] [pid 21788:tid 21796] [client 172.213.220.91:11259] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aefuPn7OM27rzVpef26AmQAAAMY"]
[Wed Apr 22 05:38:07.555514 2026] [:error] [pid 23041:tid 23063] [client 172.213.220.91:11151] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aefuP0TXx_lUa7xwAb63xQAAARM"]
[Wed Apr 22 05:38:08.497043 2026] [:error] [pid 21683:tid 21764] [client 172.213.220.91:45787] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aefuQFZBWT-0diZyYyZ-zQAAAI4"]
[Wed Apr 22 05:38:09.302209 2026] [:error] [pid 21788:tid 21791] [client 172.213.220.91:11236] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aefuQX7OM27rzVpef26AogAAAME"]
[Wed Apr 22 05:38:10.178413 2026] [:error] [pid 21681:tid 21697] [client 172.213.220.91:10756] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "aefuQt5LmJziq-yZYawoZQAAAAc"]
[Wed Apr 22 05:38:11.189337 2026] [:error] [pid 23041:tid 23054] [client 172.213.220.91:11208] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "aefuQ0TXx_lUa7xwAb63ygAAAQo"]
[Wed Apr 22 05:38:12.913610 2026] [:error] [pid 21788:tid 21803] [client 172.213.220.91:11182] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "aefuRH7OM27rzVpef26AqQAAAM0"]
[Wed Apr 22 05:38:13.938557 2026] [:error] [pid 23041:tid 23058] [client 172.213.220.91:11169] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "aefuRUTXx_lUa7xwAb63zgAAAQ4"]
[Wed Apr 22 05:38:16.103855 2026] [:error] [pid 21683:tid 21755] [client 172.213.220.91:11170] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aefuSFZBWT-0diZyYyZ-4wAAAIU"]
[Wed Apr 22 05:38:17.507332 2026] [:error] [pid 21788:tid 21809] [client 172.213.220.91:45779] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aefuSX7OM27rzVpef26AvAAAANM"]
[Wed Apr 22 05:38:19.462784 2026] [:error] [pid 21682:tid 21740] [client 172.213.220.91:11165] File does not exist: /usr/local/apache/htdocs/suspended-page/no1.php
[Wed Apr 22 05:38:19.700134 2026] [:error] [pid 21682:tid 21742] [client 172.213.220.91:11165] File does not exist: /usr/local/apache/htdocs/suspended-page/w2025.php
[Wed Apr 22 05:38:19.938186 2026] [:error] [pid 21682:tid 21744] [client 172.213.220.91:11165] File does not exist: /usr/local/apache/htdocs/suspended-page/fvvff.php
[Wed Apr 22 05:38:20.216772 2026] [:error] [pid 21682:tid 21726] [client 172.213.220.91:11165] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Wed Apr 22 05:38:20.465777 2026] [:error] [pid 21682:tid 21723] [client 172.213.220.91:11165] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed Apr 22 05:38:20.731418 2026] [:error] [pid 21682:tid 21724] [client 172.213.220.91:11165] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Apr 22 05:38:21.230971 2026] [:error] [pid 21682:tid 21738] [client 172.213.220.91:11165] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Wed Apr 22 05:38:21.471089 2026] [:error] [pid 21682:tid 21729] [client 172.213.220.91:11165] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Wed Apr 22 05:38:21.739936 2026] [:error] [pid 21682:tid 21737] [client 172.213.220.91:11165] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Wed Apr 22 05:38:21.979758 2026] [:error] [pid 21682:tid 21743] [client 172.213.220.91:11165] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Wed Apr 22 05:38:22.217276 2026] [:error] [pid 21682:tid 21747] [client 172.213.220.91:11165] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aefuTplXWQZUlmPHS3rvhQAAAFg"]
[Wed Apr 22 05:38:24.112020 2026] [:error] [pid 21788:tid 21808] [client 172.213.220.91:10777] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aefuUH7OM27rzVpef26A1QAAANI"]
[Wed Apr 22 05:38:26.106138 2026] [:error] [pid 21788:tid 21801] [client 172.213.220.91:10795] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aefuUn7OM27rzVpef26A3QAAAMs"]
[Wed Apr 22 05:38:27.466792 2026] [:error] [pid 23041:tid 23046] [client 172.213.220.91:11188] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aefuU0TXx_lUa7xwAb632AAAAQI"]
[Wed Apr 22 05:38:28.684489 2026] [:error] [pid 23041:tid 23057] [client 172.213.220.91:10809] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aefuVETXx_lUa7xwAb632wAAAQ0"]
[Wed Apr 22 05:38:29.304529 2026] [:error] [pid 21788:tid 21798] [client 172.213.220.91:11139] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aefuVX7OM27rzVpef26A6wAAAMg"]
[Wed Apr 22 05:38:30.229457 2026] [:error] [pid 21788:tid 21794] [client 172.213.220.91:10774] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aefuVn7OM27rzVpef26A8gAAAMQ"]
[Wed Apr 22 05:38:30.765814 2026] [:error] [pid 21682:tid 21742] [client 172.213.220.91:45767] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aefuVplXWQZUlmPHS3rvjgAAAFM"]
[Wed Apr 22 05:38:31.614129 2026] [:error] [pid 21788:tid 21813] [client 172.213.220.91:10796] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aefuV37OM27rzVpef26A9gAAANc"]
[Wed Apr 22 05:38:32.333152 2026] [:error] [pid 21682:tid 21744] [client 172.213.220.91:11177] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aefuWJlXWQZUlmPHS3rvkAAAAFU"]
[Wed Apr 22 05:38:32.929446 2026] [:error] [pid 21682:tid 21723] [client 172.213.220.91:11263] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aefuWJlXWQZUlmPHS3rvkQAAAEA"]
[Wed Apr 22 05:38:33.764965 2026] [:error] [pid 21681:tid 21692] [client 172.213.220.91:11213] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aefuWd5LmJziq-yZYawoiwAAAAI"]
[Wed Apr 22 05:38:34.448380 2026] [:error] [pid 23041:tid 23068] [client 172.213.220.91:11174] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aefuWkTXx_lUa7xwAb635gAAARg"]
[Wed Apr 22 05:38:34.957440 2026] [:error] [pid 21788:tid 21790] [client 172.213.220.91:11118] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aefuWn7OM27rzVpef26BAAAAAMA"]
[Wed Apr 22 05:38:35.597527 2026] [:error] [pid 21683:tid 21765] [client 172.213.220.91:11140] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aefuW1ZBWT-0diZyYyZ_AAAAAI8"]
[Wed Apr 22 05:38:36.736904 2026] [:error] [pid 21683:tid 21770] [client 172.213.220.91:11159] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aefuXFZBWT-0diZyYyZ_BQAAAJQ"]
[Wed Apr 22 05:38:37.564369 2026] [:error] [pid 21683:tid 21772] [client 172.213.220.91:10814] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aefuXVZBWT-0diZyYyZ_DQAAAJY"]
[Wed Apr 22 05:38:38.379035 2026] [:error] [pid 21683:tid 21773] [client 172.213.220.91:11159] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aefuXlZBWT-0diZyYyZ_EQAAAJc"]
[Wed Apr 22 05:38:39.091988 2026] [:error] [pid 21683:tid 21752] [client 172.213.220.91:11105] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aefuX1ZBWT-0diZyYyZ_FQAAAII"]
[Wed Apr 22 05:38:39.827125 2026] [:error] [pid 23041:tid 23058] [client 172.213.220.91:11205] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aefuX0TXx_lUa7xwAb637AAAAQ4"]
[Wed Apr 22 05:38:40.526695 2026] [:error] [pid 21681:tid 21710] [client 172.213.220.91:10772] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless4.php"] [unique_id "aefuYN5LmJziq-yZYawolwAAABQ"]
[Wed Apr 22 05:38:41.477712 2026] [:error] [pid 21788:tid 21814] [client 172.213.220.91:10815] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless4.php"] [unique_id "aefuYX7OM27rzVpef26BHAAAANg"]
[Wed Apr 22 05:38:42.372866 2026] [:error] [pid 21788:tid 21804] [client 172.213.220.91:11107] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless4.php"] [unique_id "aefuYn7OM27rzVpef26BIgAAAM4"]
[Wed Apr 22 05:38:43.995674 2026] [:error] [pid 21682:tid 21747] [client 172.213.220.91:10801] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bless4.php"] [unique_id "aefuY5lXWQZUlmPHS3rvlgAAAFg"]
[Wed Apr 22 05:38:45.122755 2026] [:error] [pid 21683:tid 21773] [client 172.213.220.91:45774] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aefuZVZBWT-0diZyYyZ_IAAAAJc"]
[Wed Apr 22 05:38:45.927626 2026] [:error] [pid 21683:tid 21751] [client 172.213.220.91:45809] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aefuZVZBWT-0diZyYyZ_JAAAAIE"]
[Wed Apr 22 05:38:46.638570 2026] [:error] [pid 21681:tid 21712] [client 172.213.220.91:10787] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aefuZt5LmJziq-yZYawooQAAABY"]
[Wed Apr 22 05:38:47.465246 2026] [:error] [pid 23041:tid 23059] [client 172.213.220.91:11179] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aefuZ0TXx_lUa7xwAb64AAAAAQ8"]
[Wed Apr 22 05:38:47.985546 2026] [:error] [pid 21683:tid 21753] [client 172.213.220.91:10765] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "aefuZ1ZBWT-0diZyYyZ_KwAAAIM"]
[Wed Apr 22 05:38:48.478628 2026] [:error] [pid 21683:tid 21754] [client 172.213.220.91:11148] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "aefuaFZBWT-0diZyYyZ_LAAAAIQ"]
[Wed Apr 22 05:38:49.244791 2026] [:error] [pid 21788:tid 21814] [client 172.213.220.91:11141] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "aefuaX7OM27rzVpef26BQAAAANg"]
[Wed Apr 22 05:38:49.878008 2026] [:error] [pid 23041:tid 23045] [client 172.213.220.91:11183] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "aefuaUTXx_lUa7xwAb64BwAAAQE"]
[Wed Apr 22 05:38:53.017068 2026] [:error] [pid 23041:tid 23058] [client 172.213.220.91:11158] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "aefubUTXx_lUa7xwAb64DgAAAQ4"]
[Wed Apr 22 05:38:54.455349 2026] [:error] [pid 23041:tid 23050] [client 172.213.220.91:11136] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "aefubkTXx_lUa7xwAb64FAAAAQY"]
[Wed Apr 22 05:38:55.701878 2026] [:error] [pid 21681:tid 21701] [client 172.213.220.91:11195] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "aefub95LmJziq-yZYawoqAAAAAs"]
[Wed Apr 22 05:38:56.824322 2026] [:error] [pid 21683:tid 21758] [client 172.213.220.91:11121] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "aefucFZBWT-0diZyYyZ_PQAAAIg"]
[Wed Apr 22 05:38:57.757145 2026] [:error] [pid 21788:tid 21791] [client 172.213.220.91:10758] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "aefucX7OM27rzVpef26BaAAAAME"]
[Wed Apr 22 05:38:59.500162 2026] [:error] [pid 21682:tid 21740] [client 172.213.220.91:11090] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "aefuc5lXWQZUlmPHS3rvngAAAFE"]
[Wed Apr 22 05:39:00.500540 2026] [:error] [pid 21681:tid 21692] [client 172.213.220.91:11175] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "aefudN5LmJziq-yZYaworQAAAAI"]
[Wed Apr 22 05:39:01.102273 2026] [:error] [pid 23041:tid 23056] [client 172.213.220.91:10804] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "aefudUTXx_lUa7xwAb64GgAAAQw"]
[Wed Apr 22 05:39:01.980799 2026] [:error] [pid 23041:tid 23067] [client 172.213.220.91:11156] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aefudUTXx_lUa7xwAb64HgAAARc"]
[Wed Apr 22 05:39:02.599278 2026] [:error] [pid 23041:tid 23065] [client 172.213.220.91:11113] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aefudkTXx_lUa7xwAb64IwAAARU"]
[Wed Apr 22 05:39:03.157130 2026] [:error] [pid 23041:tid 23063] [client 172.213.220.91:11073] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aefud0TXx_lUa7xwAb64JgAAARM"]
[Wed Apr 22 05:39:03.657206 2026] [:error] [pid 23041:tid 23057] [client 172.213.220.91:11249] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aefud0TXx_lUa7xwAb64KQAAAQ0"]
[Wed Apr 22 05:39:04.197471 2026] [:error] [pid 23041:tid 23056] [client 172.213.220.91:11186] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aefueETXx_lUa7xwAb64KwAAAQw"]
[Wed Apr 22 05:39:04.992487 2026] [:error] [pid 23041:tid 23046] [client 172.213.220.91:11218] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aefueETXx_lUa7xwAb64LgAAAQI"]
[Wed Apr 22 05:39:05.646579 2026] [:error] [pid 21683:tid 21767] [client 172.213.220.91:11193] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aefueVZBWT-0diZyYyZ_RgAAAJE"]
[Wed Apr 22 05:39:06.183179 2026] [:error] [pid 21683:tid 21755] [client 172.213.220.91:11137] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aefuelZBWT-0diZyYyZ_RwAAAIU"]
[Wed Apr 22 05:39:06.654677 2026] [:error] [pid 21788:tid 21808] [client 172.213.220.91:10767] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aefuen7OM27rzVpef26BiQAAANI"]
[Wed Apr 22 05:39:07.161053 2026] [:error] [pid 21683:tid 21759] [client 172.213.220.91:11197] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aefue1ZBWT-0diZyYyZ_SQAAAIk"]
[Wed Apr 22 05:39:07.749124 2026] [:error] [pid 21788:tid 21810] [client 172.213.220.91:10790] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aefue37OM27rzVpef26BjAAAANQ"]
[Wed Apr 22 05:39:08.261831 2026] [:error] [pid 23041:tid 23044] [client 172.213.220.91:11149] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aefufETXx_lUa7xwAb64OQAAAQA"]
[Wed Apr 22 05:39:08.871384 2026] [:error] [pid 21681:tid 21700] [client 172.213.220.91:11241] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aefufN5LmJziq-yZYawowAAAAAo"]
[Wed Apr 22 05:39:09.362807 2026] [:error] [pid 21681:tid 21699] [client 172.213.220.91:11116] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aefufd5LmJziq-yZYawowgAAAAk"]
[Wed Apr 22 05:39:10.055818 2026] [:error] [pid 21682:tid 21728] [client 172.213.220.91:11085] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aefufplXWQZUlmPHS3rvwQAAAEU"]
[Wed Apr 22 05:39:10.557436 2026] [:error] [pid 23041:tid 23068] [client 172.213.220.91:11094] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aefufkTXx_lUa7xwAb64QQAAARg"]
[Wed Apr 22 05:39:11.166696 2026] [:error] [pid 23041:tid 23062] [client 172.213.220.91:11072] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aefuf0TXx_lUa7xwAb64RgAAARI"]
[Wed Apr 22 05:39:11.816703 2026] [:error] [pid 21788:tid 21791] [client 172.213.220.91:10788] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aefuf37OM27rzVpef26BmwAAAME"]
[Wed Apr 22 05:39:12.858772 2026] [:error] [pid 21681:tid 21711] [client 172.213.220.91:10783] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aefugN5LmJziq-yZYawoxAAAABU"]
[Wed Apr 22 05:39:13.791902 2026] [:error] [pid 21788:tid 21813] [client 172.213.220.91:11092] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aefugX7OM27rzVpef26BpwAAANc"]
[Wed Apr 22 05:39:14.490616 2026] [:error] [pid 23041:tid 23067] [client 172.213.220.91:11176] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aefugkTXx_lUa7xwAb64VgAAARc"]
[Wed Apr 22 05:39:15.641592 2026] [:error] [pid 23041:tid 23068] [client 172.213.220.91:11187] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aefug0TXx_lUa7xwAb64XwAAARg"]
[Wed Apr 22 05:39:16.913486 2026] [:error] [pid 21683:tid 21772] [client 172.213.220.91:11081] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aefuhFZBWT-0diZyYyZ_dQAAAJY"]
[Wed Apr 22 05:39:18.828407 2026] [:error] [pid 21788:tid 21794] [client 172.213.220.91:10754] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aefuhn7OM27rzVpef26BxQAAAMQ"]
[Wed Apr 22 05:39:20.332191 2026] [:error] [pid 23041:tid 23060] [client 172.213.220.91:11157] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aefuiETXx_lUa7xwAb64eAAAARA"]
[Wed Apr 22 05:39:23.073123 2026] [:error] [pid 23041:tid 23057] [client 172.213.220.91:11235] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Wed Apr 22 05:39:23.312943 2026] [:error] [pid 23041:tid 23067] [client 172.213.220.91:11235] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Wed Apr 22 05:39:23.576812 2026] [:error] [pid 23041:tid 23045] [client 172.213.220.91:11235] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Wed Apr 22 05:39:23.818612 2026] [:error] [pid 23041:tid 23064] [client 172.213.220.91:11235] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Wed Apr 22 05:39:24.057734 2026] [:error] [pid 23041:tid 23058] [client 172.213.220.91:11235] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Wed Apr 22 05:39:24.538704 2026] [:error] [pid 23041:tid 23062] [client 172.213.220.91:11235] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Wed Apr 22 05:39:25.038941 2026] [:error] [pid 23041:tid 23052] [client 172.213.220.91:11235] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Wed Apr 22 05:39:25.286987 2026] [:error] [pid 23041:tid 23066] [client 172.213.220.91:11235] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aefujUTXx_lUa7xwAb64mAAAARY"]
[Wed Apr 22 05:39:26.982037 2026] [:error] [pid 23041:tid 23051] [client 172.213.220.91:11087] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aefujkTXx_lUa7xwAb64nQAAAQc"]
[Wed Apr 22 05:39:29.233398 2026] [:error] [pid 21683:tid 21758] [client 172.213.220.91:11131] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aefukVZBWT-0diZyYyZ_lwAAAIg"]
[Wed Apr 22 05:39:31.811743 2026] [:error] [pid 23041:tid 23057] [client 172.213.220.91:10947] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aefuk0TXx_lUa7xwAb64qQAAAQ0"]
[Wed Apr 22 05:39:33.786638 2026] [:error] [pid 21681:tid 21699] [client 172.213.220.91:11083] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aefuld5LmJziq-yZYawo1QAAAAk"]
[Wed Apr 22 05:39:35.192680 2026] [:error] [pid 21788:tid 21796] [client 172.213.220.91:11152] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aeful37OM27rzVpef26CHgAAAMY"]
[Wed Apr 22 05:39:35.944423 2026] [:error] [pid 21788:tid 21802] [client 172.213.220.91:11088] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aeful37OM27rzVpef26CIwAAAMw"]
[Wed Apr 22 05:39:36.686685 2026] [:error] [pid 21788:tid 21807] [client 172.213.220.91:10768] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aefumH7OM27rzVpef26CJwAAANE"]
[Wed Apr 22 05:39:37.490879 2026] [:error] [pid 21788:tid 21814] [client 172.213.220.91:11145] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "aefumX7OM27rzVpef26CLwAAANg"]
[Wed Apr 22 05:39:38.321877 2026] [:error] [pid 21683:tid 21770] [client 172.213.220.91:11086] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "aefumlZBWT-0diZyYyZ_sQAAAJQ"]
[Wed Apr 22 05:39:38.795282 2026] [:error] [pid 23041:tid 23052] [client 172.213.220.91:11012] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "aefumkTXx_lUa7xwAb64wQAAAQg"]
[Wed Apr 22 05:39:39.545679 2026] [:error] [pid 21788:tid 21793] [client 172.213.220.91:10803] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "aefum37OM27rzVpef26CQAAAAMM"]
[Wed Apr 22 05:39:40.099400 2026] [:error] [pid 21683:tid 21753] [client 172.213.220.91:11150] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aefunFZBWT-0diZyYyZ_tAAAAIM"]
[Wed Apr 22 05:39:40.591133 2026] [:error] [pid 21682:tid 21745] [client 172.213.220.91:10764] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aefunJlXWQZUlmPHS3rwBgAAAFY"]
[Wed Apr 22 05:39:41.196156 2026] [:error] [pid 21682:tid 21728] [client 172.213.220.91:11142] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aefunZlXWQZUlmPHS3rwCQAAAEU"]
[Wed Apr 22 05:39:41.688421 2026] [:error] [pid 21682:tid 21730] [client 172.213.220.91:11162] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aefunZlXWQZUlmPHS3rwDAAAAEc"]
[Wed Apr 22 05:39:42.354533 2026] [:error] [pid 21683:tid 21752] [client 172.213.220.91:11185] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aefunlZBWT-0diZyYyZ_uwAAAII"]
[Wed Apr 22 05:39:42.989250 2026] [:error] [pid 23041:tid 23062] [client 172.213.220.91:11146] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aefunkTXx_lUa7xwAb64ywAAARI"]
[Wed Apr 22 05:39:43.499706 2026] [:error] [pid 21681:tid 21706] [client 172.213.220.91:10786] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aefun95LmJziq-yZYawo3AAAABA"]
[Wed Apr 22 05:39:43.998740 2026] [:error] [pid 23041:tid 23049] [client 172.213.220.91:11130] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aefun0TXx_lUa7xwAb640AAAAQU"]
[Wed Apr 22 05:39:44.610665 2026] [:error] [pid 21683:tid 21766] [client 172.213.220.91:11138] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aefuoFZBWT-0diZyYyZ_wgAAAJA"]
[Wed Apr 22 05:39:45.191983 2026] [:error] [pid 21683:tid 21769] [client 172.213.220.91:10802] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aefuoVZBWT-0diZyYyZ_xQAAAJM"]
[Wed Apr 22 05:39:45.734147 2026] [:error] [pid 21788:tid 21809] [client 172.213.220.91:11080] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aefuoX7OM27rzVpef26CXwAAANM"]
[Wed Apr 22 05:39:46.936077 2026] [:error] [pid 21788:tid 21805] [client 172.213.220.91:11101] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aefuon7OM27rzVpef26CYwAAAM8"]
[Wed Apr 22 05:39:47.816616 2026] [:error] [pid 23041:tid 23048] [client 172.213.220.91:11128] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aefuo0TXx_lUa7xwAb644gAAAQQ"]
[Wed Apr 22 05:39:49.232554 2026] [:error] [pid 21788:tid 21800] [client 172.213.220.91:11097] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aefupX7OM27rzVpef26CaAAAAMo"]
[Wed Apr 22 05:39:50.429130 2026] [:error] [pid 21681:tid 21693] [client 172.213.220.91:11212] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aefupt5LmJziq-yZYawo5QAAAAM"]
[Wed Apr 22 05:39:51.188009 2026] [:error] [pid 21682:tid 21729] [client 172.213.220.91:11199] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aefup5lXWQZUlmPHS3rwEQAAAEY"]
[Wed Apr 22 05:39:51.757385 2026] [:error] [pid 21682:tid 21731] [client 172.213.220.91:11122] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aefup5lXWQZUlmPHS3rwEwAAAEg"]
[Wed Apr 22 05:39:53.023679 2026] [:error] [pid 21682:tid 21745] [client 172.213.220.91:11180] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aefuqZlXWQZUlmPHS3rwFgAAAFY"]
[Wed Apr 22 05:39:54.019082 2026] [:error] [pid 21683:tid 21764] [client 172.213.220.91:11164] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aefuqlZBWT-0diZyYyZ_7gAAAI4"]
[Wed Apr 22 05:39:54.637988 2026] [:error] [pid 21683:tid 21755] [client 172.213.220.91:11178] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aefuqlZBWT-0diZyYyZ_8wAAAIU"]
[Wed Apr 22 05:39:55.294490 2026] [:error] [pid 23041:tid 23058] [client 172.213.220.91:11100] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aefuq0TXx_lUa7xwAb64-wAAAQ4"]
[Wed Apr 22 05:39:56.639424 2026] [:error] [pid 23041:tid 23062] [client 172.213.220.91:11091] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aefurETXx_lUa7xwAb64_AAAARI"]
[Wed Apr 22 05:39:58.103099 2026] [:error] [pid 21682:tid 21741] [client 172.213.220.91:10782] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aefurplXWQZUlmPHS3rwJgAAAFI"]
[Wed Apr 22 05:39:59.405290 2026] [:error] [pid 23041:tid 23057] [client 172.213.220.91:10771] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aefur0TXx_lUa7xwAb64_wAAAQ0"]
[Wed Apr 22 05:40:01.108822 2026] [:error] [pid 21682:tid 21740] [client 172.213.220.91:11031] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aefusZlXWQZUlmPHS3rwLAAAAFE"]
[Wed Apr 22 05:40:03.531725 2026] [:error] [pid 21683:tid 21750] [client 172.213.220.91:11058] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aefus1ZBWT-0diZyYyaACwAAAIA"]
[Wed Apr 22 05:40:05.224043 2026] [:error] [pid 21683:tid 21765] [client 172.213.220.91:11034] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aefutVZBWT-0diZyYyaADwAAAI8"]
[Wed Apr 22 05:40:06.343957 2026] [:error] [pid 21682:tid 21738] [client 172.213.220.91:11119] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aefutplXWQZUlmPHS3rwOwAAAE8"]
[Wed Apr 22 05:40:07.152960 2026] [:error] [pid 21788:tid 21792] [client 172.213.220.91:11132] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aefut37OM27rzVpef26CvwAAAMI"]
[Wed Apr 22 05:40:08.166154 2026] [:error] [pid 23041:tid 23047] [client 172.213.220.91:10784] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aefuuETXx_lUa7xwAb65GwAAAQM"]
[Wed Apr 22 05:40:09.512842 2026] [:error] [pid 23041:tid 23044] [client 172.213.220.91:11112] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aefuuUTXx_lUa7xwAb65IgAAAQA"]
[Wed Apr 22 05:40:12.003478 2026] [:error] [pid 21788:tid 21802] [client 172.213.220.91:11038] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aefuvH7OM27rzVpef26C1QAAAMw"]
[Wed Apr 22 05:40:13.325537 2026] [:error] [pid 23041:tid 23063] [client 172.213.220.91:11167] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aefuvUTXx_lUa7xwAb65KQAAARM"]
[Wed Apr 22 05:40:14.150044 2026] [:error] [pid 21681:tid 21697] [client 172.213.220.91:11194] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aefuvt5LmJziq-yZYawpCgAAAAc"]
[Wed Apr 22 05:40:14.974495 2026] [:error] [pid 21788:tid 21803] [client 172.213.220.91:11020] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aefuvn7OM27rzVpef26C4wAAAM0"]
[Wed Apr 22 05:40:15.859582 2026] [:error] [pid 21788:tid 21809] [client 172.213.220.91:11013] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aefuv37OM27rzVpef26C5wAAANM"]
[Wed Apr 22 05:40:16.508155 2026] [:error] [pid 21682:tid 21729] [client 172.213.220.91:10776] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aefuwJlXWQZUlmPHS3rwTQAAAEY"]
[Wed Apr 22 05:40:17.080548 2026] [:error] [pid 21788:tid 21808] [client 172.213.220.91:11077] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aefuwX7OM27rzVpef26C7AAAANI"]
[Wed Apr 22 05:40:17.558453 2026] [:error] [pid 21682:tid 21741] [client 172.213.220.91:11021] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aefuwZlXWQZUlmPHS3rwUQAAAFI"]
[Wed Apr 22 05:40:18.142456 2026] [:error] [pid 21681:tid 21692] [client 172.213.220.91:10807] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aefuwt5LmJziq-yZYawpDQAAAAI"]
[Wed Apr 22 05:40:18.673183 2026] [:error] [pid 21683:tid 21767] [client 172.213.220.91:11163] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aefuwlZBWT-0diZyYyaAIwAAAJE"]
[Wed Apr 22 05:40:19.265441 2026] [:error] [pid 21788:tid 21810] [client 172.213.220.91:11246] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aefuw37OM27rzVpef26C-AAAANQ"]
[Wed Apr 22 05:40:19.803820 2026] [:error] [pid 21788:tid 21798] [client 172.213.220.91:11115] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aefuw37OM27rzVpef26C_AAAAMg"]
[Wed Apr 22 05:40:20.369603 2026] [:error] [pid 23041:tid 23058] [client 172.213.220.91:11095] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aefuxETXx_lUa7xwAb65PQAAAQ4"]
[Wed Apr 22 05:40:20.979482 2026] [:error] [pid 21788:tid 21799] [client 172.213.220.91:11099] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aefuxH7OM27rzVpef26DBAAAAMk"]
[Wed Apr 22 05:40:21.503891 2026] [:error] [pid 21788:tid 21809] [client 172.213.220.91:11166] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aefuxX7OM27rzVpef26DCQAAANM"]
[Wed Apr 22 05:40:22.218491 2026] [:error] [pid 21788:tid 21804] [client 172.213.220.91:11202] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aefuxn7OM27rzVpef26DDgAAAM4"]
[Wed Apr 22 05:40:22.719929 2026] [:error] [pid 21788:tid 21799] [client 172.213.220.91:10766] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aefuxn7OM27rzVpef26DEQAAAMk"]
[Wed Apr 22 05:40:23.379683 2026] [:error] [pid 23041:tid 23057] [client 172.213.220.91:11110] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aefux0TXx_lUa7xwAb65RgAAAQ0"]
[Wed Apr 22 05:40:24.398810 2026] [:error] [pid 21788:tid 21796] [client 172.213.220.91:11135] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aefuyH7OM27rzVpef26DFAAAAMY"]
[Wed Apr 22 05:40:25.101982 2026] [:error] [pid 21788:tid 21808] [client 172.213.220.91:11056] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Wed Apr 22 05:40:25.577381 2026] [:error] [pid 21788:tid 21798] [client 172.213.220.91:11056] [client 172.213.220.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aefuyX7OM27rzVpef26DGwAAAMg"]
[Wed Apr 22 05:40:26.441059 2026] [:error] [pid 21788:tid 21807] [client 172.213.220.91:45790] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Wed Apr 22 05:40:27.278176 2026] [:error] [pid 21788:tid 21806] [client 172.213.220.91:45790] File does not exist: /usr/local/apache/htdocs/suspended-page/prv8.php
[Wed Apr 22 05:40:27.545991 2026] [:error] [pid 21788:tid 21793] [client 172.213.220.91:45790] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Wed Apr 22 05:40:27.782709 2026] [:error] [pid 21788:tid 21797] [client 172.213.220.91:45790] File does not exist: /usr/local/apache/htdocs/suspended-page/dev.php
[Wed Apr 22 05:40:28.020689 2026] [:error] [pid 21788:tid 21795] [client 172.213.220.91:45790] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Wed Apr 22 05:40:28.258418 2026] [:error] [pid 21788:tid 21805] [client 172.213.220.91:45790] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Wed Apr 22 05:40:28.496277 2026] [:error] [pid 21788:tid 21800] [client 172.213.220.91:45790] File does not exist: /usr/local/apache/htdocs/suspended-page/gssdd.php
[Wed Apr 22 05:40:28.731207 2026] [:error] [pid 21788:tid 21801] [client 172.213.220.91:45790] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "aefuzH7OM27rzVpef26DMwAAAMs"]
[Wed Apr 22 05:40:30.038423 2026] [:error] [pid 23041:tid 23049] [client 172.213.220.91:11109] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "aefuzkTXx_lUa7xwAb65WQAAAQU"]
[Wed Apr 22 05:40:31.700972 2026] [:error] [pid 23041:tid 23068] [client 172.213.220.91:11106] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "aefuz0TXx_lUa7xwAb65XgAAARg"]
[Wed Apr 22 05:40:33.437469 2026] [:error] [pid 21683:tid 21755] [client 172.213.220.91:11008] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "aefu0VZBWT-0diZyYyaARgAAAIU"]
[Wed Apr 22 05:40:36.334720 2026] [:error] [pid 21683:tid 21763] [client 172.213.220.91:11133] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aefu1FZBWT-0diZyYyaATAAAAI0"]
[Wed Apr 22 05:40:37.779611 2026] [:error] [pid 21682:tid 21731] [client 172.213.220.91:45780] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aefu1ZlXWQZUlmPHS3rwYgAAAEg"]
[Wed Apr 22 05:40:40.019660 2026] [:error] [pid 23041:tid 23055] [client 172.213.220.91:45795] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aefu2ETXx_lUa7xwAb65eAAAAQs"]
[Wed Apr 22 05:40:42.655082 2026] [:error] [pid 21682:tid 21745] [client 172.213.220.91:11173] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aefu2plXWQZUlmPHS3rwaQAAAFY"]
[Wed Apr 22 05:40:45.669057 2026] [:error] [pid 21681:tid 21701] [client 172.213.220.91:11184] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "aefu3d5LmJziq-yZYawpRgAAAAs"]
[Wed Apr 22 05:40:48.933916 2026] [:error] [pid 21788:tid 21793] [client 172.213.220.91:45784] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "aefu4H7OM27rzVpef26DgwAAAMM"]
[Wed Apr 22 05:40:50.364338 2026] [:error] [pid 21682:tid 21734] [client 172.213.220.91:11093] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "aefu4plXWQZUlmPHS3rwcwAAAEs"]
[Wed Apr 22 05:40:51.254006 2026] [:error] [pid 21682:tid 21723] [client 172.213.220.91:11210] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "aefu45lXWQZUlmPHS3rwdQAAAEA"]
[Wed Apr 22 05:40:52.419319 2026] [:error] [pid 23041:tid 23060] [client 172.213.220.91:11171] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aefu5ETXx_lUa7xwAb65pAAAARA"]
[Wed Apr 22 05:40:53.029737 2026] [:error] [pid 21788:tid 21805] [client 172.213.220.91:45782] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aefu5X7OM27rzVpef26DmQAAAM8"]
[Wed Apr 22 05:40:53.923875 2026] [:error] [pid 23041:tid 23059] [client 172.213.220.91:11219] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aefu5UTXx_lUa7xwAb65sgAAAQ8"]
[Wed Apr 22 05:40:54.982782 2026] [:error] [pid 23041:tid 23054] [client 172.213.220.91:11198] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aefu5kTXx_lUa7xwAb65vgAAAQo"]
[Wed Apr 22 05:40:55.850495 2026] [:error] [pid 21683:tid 21756] [client 172.213.220.91:11206] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aefu51ZBWT-0diZyYyaAkAAAAIY"]
[Wed Apr 22 05:40:56.796670 2026] [:error] [pid 21681:tid 21711] [client 172.213.220.91:11014] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aefu6N5LmJziq-yZYawpUwAAABU"]
[Wed Apr 22 05:40:57.347146 2026] [:error] [pid 21682:tid 21747] [client 172.213.220.91:11155] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aefu6ZlXWQZUlmPHS3rwegAAAFg"]
[Wed Apr 22 05:40:57.978385 2026] [:error] [pid 21788:tid 21796] [client 172.213.220.91:45781] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aefu6X7OM27rzVpef26DqwAAAMY"]
[Wed Apr 22 05:40:58.492014 2026] [:error] [pid 21683:tid 21759] [client 172.213.220.91:45799] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aefu6lZBWT-0diZyYyaAmAAAAIk"]
[Wed Apr 22 05:40:59.186273 2026] [:error] [pid 21683:tid 21763] [client 172.213.220.91:11129] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aefu61ZBWT-0diZyYyaAngAAAI0"]
[Wed Apr 22 05:40:59.802414 2026] [:error] [pid 23041:tid 23051] [client 172.213.220.91:11207] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aefu60TXx_lUa7xwAb65xwAAAQc"]
[Wed Apr 22 05:41:00.440980 2026] [:error] [pid 21683:tid 21771] [client 172.213.220.91:45807] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aefu7FZBWT-0diZyYyaAqQAAAJU"]
[Wed Apr 22 05:41:00.921076 2026] [:error] [pid 21788:tid 21807] [client 172.213.220.91:11224] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aefu7H7OM27rzVpef26DswAAANE"]
[Wed Apr 22 05:41:01.479250 2026] [:error] [pid 21681:tid 21706] [client 172.213.220.91:45807] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aefu7d5LmJziq-yZYawpXAAAABA"]
[Wed Apr 22 05:41:02.005437 2026] [:error] [pid 23041:tid 23050] [client 172.213.220.91:10806] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aefu7kTXx_lUa7xwAb66DAAAAQY"]
[Wed Apr 22 05:41:02.478058 2026] [:error] [pid 21682:tid 21743] [client 172.213.220.91:11227] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aefu7plXWQZUlmPHS3rwgAAAAFQ"]
[Wed Apr 22 05:41:02.976013 2026] [:error] [pid 21683:tid 21765] [client 172.213.220.91:11189] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aefu7lZBWT-0diZyYyaAwwAAAI8"]
[Wed Apr 22 05:41:03.458267 2026] [:error] [pid 21788:tid 21811] [client 172.213.220.91:11214] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aefu737OM27rzVpef26DvwAAANU"]
[Wed Apr 22 05:41:03.989857 2026] [:error] [pid 23041:tid 23066] [client 172.213.220.91:11201] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aefu70TXx_lUa7xwAb66NQAAARY"]
[Wed Apr 22 05:41:04.974985 2026] [:error] [pid 21788:tid 21809] [client 172.213.220.91:45814] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aefu8H7OM27rzVpef26DxQAAANM"]
[Wed Apr 22 05:41:05.553683 2026] [:error] [pid 21788:tid 21802] [client 172.213.220.91:11237] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aefu8X7OM27rzVpef26DyAAAAMw"]
[Wed Apr 22 05:41:06.100038 2026] [:error] [pid 23041:tid 23055] [client 172.213.220.91:45804] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aefu8kTXx_lUa7xwAb66QgAAAQs"]
[Wed Apr 22 05:41:06.889985 2026] [:error] [pid 21788:tid 21798] [client 172.213.220.91:10781] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aefu8n7OM27rzVpef26DywAAAMg"]
[Wed Apr 22 05:41:07.515092 2026] [:error] [pid 21788:tid 21803] [client 172.213.220.91:10970] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aefu837OM27rzVpef26D0gAAAM0"]
[Wed Apr 22 05:41:08.035368 2026] [:error] [pid 21682:tid 21738] [client 172.213.220.91:11204] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aefu9JlXWQZUlmPHS3rwjAAAAE8"]
[Wed Apr 22 05:41:08.526656 2026] [:error] [pid 21682:tid 21735] [client 172.213.220.91:11243] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aefu9JlXWQZUlmPHS3rwjwAAAEw"]
[Wed Apr 22 05:41:09.439644 2026] [:error] [pid 21683:tid 21774] [client 172.213.220.91:10775] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aefu9VZBWT-0diZyYyaA4QAAAJg"]
[Wed Apr 22 05:41:09.961372 2026] [:error] [pid 21788:tid 21804] [client 172.213.220.91:45803] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aefu9X7OM27rzVpef26D3wAAAM4"]
[Wed Apr 22 05:41:10.542072 2026] [:error] [pid 21682:tid 21729] [client 172.213.220.91:11051] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aefu9plXWQZUlmPHS3rwkQAAAEY"]
[Wed Apr 22 05:41:11.372058 2026] [:error] [pid 21788:tid 21814] [client 172.213.220.91:11074] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aefu937OM27rzVpef26D6wAAANg"]
[Wed Apr 22 05:41:11.938358 2026] [:error] [pid 21682:tid 21741] [client 172.213.220.91:11069] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aefu95lXWQZUlmPHS3rwkgAAAFI"]
[Wed Apr 22 05:41:12.453922 2026] [:error] [pid 21681:tid 21700] [client 172.213.220.91:11052] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aefu-N5LmJziq-yZYawpbgAAAAo"]
[Wed Apr 22 05:41:13.066591 2026] [:error] [pid 23041:tid 23050] [client 172.213.220.91:11049] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aefu-UTXx_lUa7xwAb66UAAAAQY"]
[Wed Apr 22 05:41:13.543509 2026] [:error] [pid 21683:tid 21774] [client 172.213.220.91:11103] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aefu-VZBWT-0diZyYyaA8gAAAJg"]
[Wed Apr 22 05:41:14.039480 2026] [:error] [pid 21681:tid 21711] [client 172.213.220.91:11059] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aefu-t5LmJziq-yZYawpcQAAABU"]
[Wed Apr 22 05:41:14.522723 2026] [:error] [pid 21682:tid 21743] [client 172.213.220.91:11064] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aefu-plXWQZUlmPHS3rwnQAAAFQ"]
[Wed Apr 22 05:41:15.071678 2026] [:error] [pid 21682:tid 21729] [client 172.213.220.91:11127] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aefu-5lXWQZUlmPHS3rwngAAAEY"]
[Wed Apr 22 05:41:15.695627 2026] [:error] [pid 21788:tid 21805] [client 172.213.220.91:11252] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aefu-37OM27rzVpef26D_AAAAM8"]
[Wed Apr 22 05:41:16.266022 2026] [:error] [pid 21788:tid 21802] [client 172.213.220.91:11026] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aefu_H7OM27rzVpef26EAQAAAMw"]
[Wed Apr 22 05:41:16.752665 2026] [:error] [pid 21788:tid 21797] [client 172.213.220.91:11211] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aefu_H7OM27rzVpef26EBAAAAMc"]
[Wed Apr 22 05:41:17.267185 2026] [:error] [pid 23041:tid 23054] [client 172.213.220.91:11079] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aefu_UTXx_lUa7xwAb66YAAAAQo"]
[Wed Apr 22 05:41:17.747526 2026] [:error] [pid 21788:tid 21806] [client 172.213.220.91:11233] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aefu_X7OM27rzVpef26EDgAAANA"]
[Wed Apr 22 05:41:18.227600 2026] [:error] [pid 21682:tid 21723] [client 172.213.220.91:11222] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aefu_plXWQZUlmPHS3rwogAAAEA"]
[Wed Apr 22 05:41:18.783184 2026] [:error] [pid 21682:tid 21742] [client 172.213.220.91:11075] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aefu_plXWQZUlmPHS3rwpQAAAFM"]
[Wed Apr 22 05:41:19.262934 2026] [:error] [pid 21683:tid 21771] [client 172.213.220.91:45805] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "aefu_1ZBWT-0diZyYyaBBAAAAJU"]
[Wed Apr 22 05:41:19.733067 2026] [:error] [pid 21788:tid 21809] [client 172.213.220.91:11228] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "aefu_37OM27rzVpef26EGwAAANM"]
[Wed Apr 22 05:41:20.297011 2026] [:error] [pid 21788:tid 21806] [client 172.213.220.91:11089] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "aefvAH7OM27rzVpef26EHAAAANA"]
[Wed Apr 22 05:41:20.780900 2026] [:error] [pid 21788:tid 21798] [client 172.213.220.91:11240] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "aefvAH7OM27rzVpef26EIAAAAMg"]
[Wed Apr 22 05:41:21.454987 2026] [:error] [pid 23041:tid 23062] [client 172.213.220.91:11234] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "aefvAUTXx_lUa7xwAb66aQAAARI"]
[Wed Apr 22 05:41:23.200190 2026] [:error] [pid 23041:tid 23062] [client 172.213.220.91:10982] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "aefvA0TXx_lUa7xwAb66eAAAARI"]
[Wed Apr 22 05:41:25.258892 2026] [:error] [pid 21683:tid 21766] [client 172.213.220.91:11221] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "aefvBVZBWT-0diZyYyaBLwAAAJA"]
[Wed Apr 22 05:41:27.197603 2026] [:error] [pid 21788:tid 21795] [client 172.213.220.91:45815] [client 172.213.220.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "aefvB37OM27rzVpef26EKwAAAMU"]
[Wed Apr 22 05:41:28.357945 2026] [:error] [pid 21683:tid 21773] [client 172.213.220.91:45791] File does not exist: /usr/local/apache/htdocs/suspended-page/file18.php
[Wed Apr 22 05:41:28.662845 2026] [:error] [pid 21683:tid 21768] [client 172.213.220.91:45791] File does not exist: /usr/local/apache/htdocs/suspended-page/vee.php
[Wed Apr 22 05:41:28.914787 2026] [:error] [pid 21683:tid 21764] [client 172.213.220.91:45791] File does not exist: /usr/local/apache/htdocs/suspended-page/cabs.php
[Wed Apr 22 05:41:29.152863 2026] [:error] [pid 21683:tid 21755] [client 172.213.220.91:45791] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Wed Apr 22 05:41:29.392371 2026] [:error] [pid 21683:tid 21760] [client 172.213.220.91:45791] File does not exist: /usr/local/apache/htdocs/suspended-page/x1da.php
[Wed Apr 22 05:41:29.631406 2026] [:error] [pid 21683:tid 21758] [client 172.213.220.91:45791] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Wed Apr 22 05:41:29.945009 2026] [:error] [pid 21683:tid 21770] [client 172.213.220.91:45791] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Wed Apr 22 20:52:17.069375 2026] [:error] [pid 9085:tid 9097] [client 40.89.139.177:24819] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Wed Apr 22 20:52:17.348480 2026] [:error] [pid 9085:tid 9089] [client 40.89.139.177:24819] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Wed Apr 22 20:52:17.589184 2026] [:error] [pid 9085:tid 9107] [client 40.89.139.177:24819] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Wed Apr 22 20:52:17.828983 2026] [:error] [pid 9085:tid 9098] [client 40.89.139.177:24819] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Wed Apr 22 20:52:18.085539 2026] [:error] [pid 9085:tid 9109] [client 40.89.139.177:24819] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Wed Apr 22 20:52:18.336579 2026] [:error] [pid 9085:tid 9101] [client 40.89.139.177:24819] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Wed Apr 22 20:52:18.815220 2026] [:error] [pid 9085:tid 9103] [client 40.89.139.177:24819] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Wed Apr 22 20:52:19.053154 2026] [:error] [pid 9085:tid 9095] [client 40.89.139.177:24819] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-243.php
[Wed Apr 22 20:52:19.295743 2026] [:error] [pid 9085:tid 9097] [client 40.89.139.177:24819] File does not exist: /usr/local/apache/htdocs/suspended-page/bkyac.php
[Wed Apr 22 20:52:19.531370 2026] [:error] [pid 9085:tid 9104] [client 40.89.139.177:24819] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "aejEg9-_-or9vQnlWnppxgAAAVE"]
[Wed Apr 22 20:52:25.733378 2026] [:error] [pid 9085:tid 9096] [client 40.89.139.177:16969] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "aejEid-_-or9vQnlWnpp4AAAAUk"]
[Wed Apr 22 20:52:29.918574 2026] [:error] [pid 6344:tid 6368] [client 40.89.139.177:43613] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "aejEjUDOTF-pkQnDeUnv_QAAABM"]
[Wed Apr 22 20:52:34.557848 2026] [:error] [pid 9085:tid 9100] [client 40.89.139.177:7192] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "aejEkt-_-or9vQnlWnpp-gAAAU0"]
[Wed Apr 22 20:52:39.457706 2026] [:error] [pid 6344:tid 6353] [client 40.89.139.177:7895] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aejEl0DOTF-pkQnDeUnwCQAAAAQ"]
[Wed Apr 22 20:52:41.831775 2026] [:error] [pid 9085:tid 9097] [client 40.89.139.177:7904] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aejEmd-_-or9vQnlWnpqDwAAAUo"]
[Wed Apr 22 20:52:44.011245 2026] [:error] [pid 6252:tid 6331] [client 40.89.139.177:7198] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aejEnOtGYuiYb1nWBpROEgAAARM"]
[Wed Apr 22 20:52:47.412145 2026] [:error] [pid 9085:tid 9105] [client 40.89.139.177:23079] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aejEn9-_-or9vQnlWnpqGAAAAVI"]
[Wed Apr 22 20:52:50.467712 2026] [:error] [pid 6252:tid 6335] [client 40.89.139.177:7919] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aejEoutGYuiYb1nWBpROGgAAARc"]
[Wed Apr 22 20:52:52.159708 2026] [:error] [pid 9085:tid 9092] [client 40.89.139.177:23113] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aejEpN-_-or9vQnlWnpqJgAAAUU"]
[Wed Apr 22 20:52:53.170451 2026] [:error] [pid 23776:tid 23794] [client 40.89.139.177:18857] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aejEpbRExf-1pAbSeJvvSwAAAZA"]
[Wed Apr 22 20:52:54.958867 2026] [:error] [pid 9085:tid 9100] [client 40.89.139.177:14273] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aejEpt-_-or9vQnlWnpqMAAAAU0"]
[Wed Apr 22 20:52:57.980302 2026] [:error] [pid 23776:tid 23802] [client 40.89.139.177:15768] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aejEqbRExf-1pAbSeJvvWwAAAZg"]
[Wed Apr 22 20:53:00.440858 2026] [:error] [pid 23776:tid 23793] [client 40.89.139.177:34445] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aejErLRExf-1pAbSeJvvZwAAAY8"]
[Wed Apr 22 20:53:02.967747 2026] [:error] [pid 6384:tid 6401] [client 40.89.139.177:15477] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aejErj58M3t15ICeWHU3sQAAAM4"]
[Wed Apr 22 20:53:04.699835 2026] [:error] [pid 9085:tid 9091] [client 40.89.139.177:15789] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aejEsN-_-or9vQnlWnpqQwAAAUQ"]
[Wed Apr 22 20:53:07.383545 2026] [:error] [pid 9085:tid 9092] [client 40.89.139.177:33351] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "aejEs9-_-or9vQnlWnpqTAAAAUU"]
[Wed Apr 22 20:53:11.150152 2026] [:error] [pid 6384:tid 6411] [client 40.89.139.177:29216] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "aejEtz58M3t15ICeWHU3ygAAANg"]
[Wed Apr 22 20:53:13.864059 2026] [:error] [pid 6384:tid 6411] [client 40.89.139.177:23139] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "aejEuT58M3t15ICeWHU31gAAANg"]
[Wed Apr 22 20:53:14.701743 2026] [:error] [pid 6384:tid 6396] [client 40.89.139.177:33377] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "aejEuj58M3t15ICeWHU32gAAAMk"]
[Wed Apr 22 20:53:15.862517 2026] [:error] [pid 9085:tid 9094] [client 40.89.139.177:23142] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ctex1.php"] [unique_id "aejEu9-_-or9vQnlWnpqdQAAAUc"]
[Wed Apr 22 20:53:17.300140 2026] [:error] [pid 9085:tid 9093] [client 40.89.139.177:33403] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ctex1.php"] [unique_id "aejEvd-_-or9vQnlWnpqgwAAAUY"]
[Wed Apr 22 20:53:19.201910 2026] [:error] [pid 23776:tid 23791] [client 40.89.139.177:14319] File does not exist: /usr/local/apache/htdocs/suspended-page/ctex1.php
[Wed Apr 22 20:53:19.441527 2026] [:error] [pid 23776:tid 23801] [client 40.89.139.177:14319] File does not exist: /usr/local/apache/htdocs/suspended-page/lb.php
[Wed Apr 22 20:53:19.681874 2026] [:error] [pid 23776:tid 23793] [client 40.89.139.177:14319] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Wed Apr 22 20:53:19.934422 2026] [:error] [pid 23776:tid 23785] [client 40.89.139.177:14319] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Wed Apr 22 20:53:20.183074 2026] [:error] [pid 23776:tid 23786] [client 40.89.139.177:14319] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Wed Apr 22 20:53:20.428119 2026] [:error] [pid 23776:tid 23783] [client 40.89.139.177:14319] File does not exist: /usr/local/apache/htdocs/suspended-page/auth.php
[Wed Apr 22 20:53:20.670179 2026] [:error] [pid 23776:tid 23787] [client 40.89.139.177:14319] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Wed Apr 22 20:53:20.914836 2026] [:error] [pid 23776:tid 23780] [client 40.89.139.177:14319] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Apr 22 20:53:21.346357 2026] [:error] [pid 23776:tid 23788] [client 40.89.139.177:14319] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Wed Apr 22 20:53:21.627101 2026] [:error] [pid 23776:tid 23784] [client 40.89.139.177:14319] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Wed Apr 22 20:53:21.866990 2026] [:error] [pid 23776:tid 23782] [client 40.89.139.177:14319] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Wed Apr 22 20:53:22.245090 2026] [:error] [pid 23776:tid 23792] [client 40.89.139.177:14319] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aejEwrRExf-1pAbSeJvvlwAAAY4"]
[Wed Apr 22 20:53:23.356141 2026] [:error] [pid 23776:tid 23799] [client 40.89.139.177:15831] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aejEw7RExf-1pAbSeJvvmAAAAZU"]
[Wed Apr 22 20:53:24.606261 2026] [:error] [pid 6344:tid 6369] [client 40.89.139.177:34434] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aejExEDOTF-pkQnDeUnwRQAAABQ"]
[Wed Apr 22 20:53:26.526274 2026] [:error] [pid 9085:tid 9097] [client 40.89.139.177:19592] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aejExt-_-or9vQnlWnpqyQAAAUo"]
[Wed Apr 22 20:53:27.636577 2026] [:error] [pid 9085:tid 9108] [client 40.89.139.177:15475] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aejEx9-_-or9vQnlWnpq1QAAAVU"]
[Wed Apr 22 20:53:28.705618 2026] [:error] [pid 6384:tid 6389] [client 40.89.139.177:33014] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aejEyD58M3t15ICeWHU39gAAAMI"]
[Wed Apr 22 20:53:29.435986 2026] [:error] [pid 6384:tid 6398] [client 40.89.139.177:34463] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aejEyT58M3t15ICeWHU3-AAAAMs"]
[Wed Apr 22 20:53:31.515664 2026] [:error] [pid 6384:tid 6391] [client 40.89.139.177:15482] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aejEyz58M3t15ICeWHU4BwAAAMQ"]
[Wed Apr 22 20:53:34.810514 2026] [:error] [pid 6384:tid 6394] [client 40.89.139.177:23145] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aejEzj58M3t15ICeWHU4FAAAAMc"]
[Wed Apr 22 20:53:37.606612 2026] [:error] [pid 9085:tid 9103] [client 40.89.139.177:15834] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aejE0d-_-or9vQnlWnprFAAAAVA"]
[Wed Apr 22 20:53:39.203457 2026] [:error] [pid 9085:tid 9105] [client 40.89.139.177:23145] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aejE09-_-or9vQnlWnprIQAAAVI"]
[Wed Apr 22 20:53:41.297895 2026] [:error] [pid 6250:tid 6266] [client 40.89.139.177:29186] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aejE1Q-iZeQkqmQVfj4N0AAAAEw"]
[Wed Apr 22 20:53:43.563004 2026] [:error] [pid 23776:tid 23780] [client 40.89.139.177:15471] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aejE17RExf-1pAbSeJvvxwAAAYI"]
[Wed Apr 22 20:53:45.132406 2026] [:error] [pid 6252:tid 6334] [client 40.89.139.177:15795] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aejE2etGYuiYb1nWBpRORgAAARY"]
[Wed Apr 22 20:53:47.613153 2026] [:error] [pid 9085:tid 9102] [client 40.89.139.177:19641] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aejE29-_-or9vQnlWnprVQAAAU8"]
[Wed Apr 22 20:53:50.390227 2026] [:error] [pid 6384:tid 6401] [client 40.89.139.177:33360] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aejE3j58M3t15ICeWHU4NgAAAM4"]
[Wed Apr 22 20:53:53.988016 2026] [:error] [pid 9085:tid 9088] [client 40.89.139.177:29227] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aejE4d-_-or9vQnlWnprigAAAUE"]
[Wed Apr 22 20:53:56.074645 2026] [:error] [pid 6384:tid 6403] [client 40.89.139.177:34432] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aejE5D58M3t15ICeWHU4PQAAANA"]
[Wed Apr 22 20:53:58.944559 2026] [:error] [pid 6384:tid 6391] [client 40.89.139.177:34472] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aejE5j58M3t15ICeWHU4QAAAAMQ"]
[Wed Apr 22 20:54:01.904983 2026] [:error] [pid 23776:tid 23801] [client 40.89.139.177:29231] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aejE6bRExf-1pAbSeJvv2wAAAZc"]
[Wed Apr 22 20:54:05.897445 2026] [:error] [pid 6252:tid 6323] [client 40.89.139.177:33371] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amwxl.php"] [unique_id "aejE7etGYuiYb1nWBpROXgAAAQs"]
[Wed Apr 22 20:54:10.333407 2026] [:error] [pid 9085:tid 9092] [client 40.89.139.177:29218] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amwxl.php"] [unique_id "aejE8t-_-or9vQnlWnpsEQAAAUU"]
[Wed Apr 22 20:54:13.170685 2026] [:error] [pid 9085:tid 9101] [client 40.89.139.177:29222] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amwxl.php"] [unique_id "aejE9d-_-or9vQnlWnpsKQAAAU4"]
[Wed Apr 22 20:54:17.412169 2026] [:error] [pid 6384:tid 6392] [client 40.89.139.177:23130] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amwxl.php"] [unique_id "aejE-T58M3t15ICeWHU4cgAAAMU"]
[Wed Apr 22 20:54:21.813983 2026] [:error] [pid 6384:tid 6389] [client 40.89.139.177:24488] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Wed Apr 22 20:54:22.087849 2026] [:error] [pid 6384:tid 6402] [client 40.89.139.177:24488] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php
[Wed Apr 22 20:54:22.353875 2026] [:error] [pid 6384:tid 6411] [client 40.89.139.177:24488] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Wed Apr 22 20:54:22.670580 2026] [:error] [pid 6384:tid 6408] [client 40.89.139.177:24488] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Wed Apr 22 20:54:23.246839 2026] [:error] [pid 6384:tid 6404] [client 40.89.139.177:24488] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Wed Apr 22 20:54:23.868506 2026] [:error] [pid 6384:tid 6388] [client 40.89.139.177:24488] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Wed Apr 22 20:54:24.134584 2026] [:error] [pid 6384:tid 6411] [client 40.89.139.177:24488] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Wed Apr 22 20:54:24.400674 2026] [:error] [pid 6384:tid 6400] [client 40.89.139.177:24488] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Wed Apr 22 20:54:25.382876 2026] [:error] [pid 6384:tid 6400] [client 40.89.139.177:24488] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Wed Apr 22 20:54:25.648590 2026] [:error] [pid 6384:tid 6398] [client 40.89.139.177:24488] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Wed Apr 22 20:54:25.915164 2026] [:error] [pid 6384:tid 6399] [client 40.89.139.177:24488] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Wed Apr 22 20:54:26.201445 2026] [:error] [pid 6384:tid 6402] [client 40.89.139.177:24488] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aejFAj58M3t15ICeWHU4sgAAAM8"]
[Wed Apr 22 20:54:27.701946 2026] [:error] [pid 9085:tid 9091] [client 40.89.139.177:24473] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aejFA9-_-or9vQnlWnpsbQAAAUQ"]
[Wed Apr 22 20:54:29.065230 2026] [:error] [pid 6344:tid 6364] [client 40.89.139.177:24497] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aejFBUDOTF-pkQnDeUnwbQAAAA8"]
[Wed Apr 22 20:54:30.104893 2026] [:error] [pid 6384:tid 6400] [client 40.89.139.177:14317] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aejFBj58M3t15ICeWHU4xQAAAM0"]
[Wed Apr 22 20:54:32.132682 2026] [:error] [pid 23776:tid 23781] [client 40.89.139.177:15753] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/koiy.php"] [unique_id "aejFCLRExf-1pAbSeJvwEwAAAYM"]
[Wed Apr 22 20:54:34.986801 2026] [:error] [pid 6252:tid 6315] [client 40.89.139.177:34485] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/koiy.php"] [unique_id "aejFCutGYuiYb1nWBpROhwAAAQM"]
[Wed Apr 22 20:54:35.965048 2026] [:error] [pid 23776:tid 23785] [client 40.89.139.177:18850] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/koiy.php"] [unique_id "aejFC7RExf-1pAbSeJvwGAAAAYc"]
[Wed Apr 22 20:54:36.651706 2026] [:error] [pid 6384:tid 6387] [client 40.89.139.177:29194] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/koiy.php"] [unique_id "aejFDD58M3t15ICeWHU43AAAAMA"]
[Wed Apr 22 20:54:38.079017 2026] [:error] [pid 6384:tid 6404] [client 40.89.139.177:41069] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "aejFDj58M3t15ICeWHU45QAAANE"]
[Wed Apr 22 20:54:39.490019 2026] [:error] [pid 23776:tid 23793] [client 40.89.139.177:15858] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "aejFD7RExf-1pAbSeJvwHQAAAY8"]
[Wed Apr 22 20:54:40.541903 2026] [:error] [pid 6344:tid 6359] [client 40.89.139.177:34470] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "aejFEEDOTF-pkQnDeUnwdQAAAAo"]
[Wed Apr 22 20:54:41.782079 2026] [:error] [pid 23776:tid 23792] [client 40.89.139.177:24499] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "aejFEbRExf-1pAbSeJvwIAAAAY4"]
[Wed Apr 22 20:54:42.667024 2026] [:error] [pid 6250:tid 6258] [client 40.89.139.177:18834] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aejFEg-iZeQkqmQVfj4OMQAAAEQ"]
[Wed Apr 22 20:54:43.719033 2026] [:error] [pid 6344:tid 6360] [client 40.89.139.177:15482] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aejFE0DOTF-pkQnDeUnwewAAAAs"]
[Wed Apr 22 20:54:44.616754 2026] [:error] [pid 6384:tid 6392] [client 40.89.139.177:15456] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aejFFD58M3t15ICeWHU48wAAAMU"]
[Wed Apr 22 20:54:46.576850 2026] [:error] [pid 9085:tid 9110] [client 40.89.139.177:15817] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aejFFt-_-or9vQnlWnpsvQAAAVc"]
[Wed Apr 22 20:54:48.106773 2026] [:error] [pid 9085:tid 9111] [client 40.89.139.177:23164] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "aejFGN-_-or9vQnlWnpswQAAAVg"]
[Wed Apr 22 20:54:49.374596 2026] [:error] [pid 6344:tid 6360] [client 40.89.139.177:23109] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "aejFGUDOTF-pkQnDeUnwiQAAAAs"]
[Wed Apr 22 20:54:50.854729 2026] [:error] [pid 9085:tid 9102] [client 40.89.139.177:29191] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "aejFGt-_-or9vQnlWnpsygAAAU8"]
[Wed Apr 22 20:54:52.116938 2026] [:error] [pid 9085:tid 9101] [client 40.89.139.177:15428] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "aejFHN-_-or9vQnlWnps0gAAAU4"]
[Wed Apr 22 20:54:54.238533 2026] [:error] [pid 6250:tid 6269] [client 40.89.139.177:18818] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aejFHg-iZeQkqmQVfj4OPAAAAE8"]
[Wed Apr 22 20:54:56.522414 2026] [:error] [pid 6384:tid 6390] [client 40.89.139.177:32988] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aejFID58M3t15ICeWHU5FwAAAMM"]
[Wed Apr 22 20:54:58.285584 2026] [:error] [pid 23776:tid 23785] [client 40.89.139.177:29240] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aejFIrRExf-1pAbSeJvwRgAAAYc"]
[Wed Apr 22 20:55:02.523496 2026] [:error] [pid 6250:tid 6265] [client 40.89.139.177:14295] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aejFJg-iZeQkqmQVfj4ORgAAAEs"]
[Wed Apr 22 20:55:10.268174 2026] [:error] [pid 9085:tid 9104] [client 40.89.139.177:15833] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aejFLt-_-or9vQnlWnps-AAAAVE"]
[Wed Apr 22 20:55:12.474624 2026] [:error] [pid 9085:tid 9102] [client 40.89.139.177:18839] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aejFMN-_-or9vQnlWnptDAAAAU8"]
[Wed Apr 22 20:55:16.010542 2026] [:error] [pid 9085:tid 9091] [client 40.89.139.177:14286] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aejFNN-_-or9vQnlWnptJgAAAUQ"]
[Wed Apr 22 20:55:19.959713 2026] [:error] [pid 9085:tid 9091] [client 40.89.139.177:15864] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aejFN9-_-or9vQnlWnptOAAAAUQ"]
[Wed Apr 22 20:55:20.936272 2026] [:error] [pid 9085:tid 9098] [client 40.89.139.177:23107] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aejFON-_-or9vQnlWnptPAAAAUs"]
[Wed Apr 22 20:55:22.442860 2026] [:error] [pid 6252:tid 6330] [client 40.89.139.177:23143] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aejFOutGYuiYb1nWBpROpQAAARI"]
[Wed Apr 22 20:55:23.554513 2026] [:error] [pid 6250:tid 6263] [client 40.89.139.177:32192] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aejFOw-iZeQkqmQVfj4OVQAAAEk"]
[Wed Apr 22 20:55:25.260654 2026] [:error] [pid 6344:tid 6367] [client 40.89.139.177:23135] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Wed Apr 22 20:55:25.504149 2026] [:error] [pid 6344:tid 6357] [client 40.89.139.177:23135] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Wed Apr 22 20:55:25.744989 2026] [:error] [pid 6344:tid 6351] [client 40.89.139.177:23135] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Wed Apr 22 20:55:25.983968 2026] [:error] [pid 6344:tid 6361] [client 40.89.139.177:23135] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Wed Apr 22 20:55:26.235025 2026] [:error] [pid 6344:tid 6364] [client 40.89.139.177:23135] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Wed Apr 22 20:55:26.480648 2026] [:error] [pid 6344:tid 6368] [client 40.89.139.177:23135] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Wed Apr 22 20:55:26.725153 2026] [:error] [pid 6344:tid 6362] [client 40.89.139.177:23135] File does not exist: /usr/local/apache/htdocs/suspended-page/t00l.php
[Wed Apr 22 20:55:27.567329 2026] [:error] [pid 6344:tid 6354] [client 40.89.139.177:23135] File does not exist: /usr/local/apache/htdocs/suspended-page/casp1.php
[Wed Apr 22 20:55:27.814020 2026] [:error] [pid 6344:tid 6355] [client 40.89.139.177:23135] File does not exist: /usr/local/apache/htdocs/suspended-page/acc.php
[Wed Apr 22 20:55:28.094599 2026] [:error] [pid 6344:tid 6371] [client 40.89.139.177:23135] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Wed Apr 22 20:55:28.372086 2026] [:error] [pid 6344:tid 6353] [client 40.89.139.177:23135] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Wed Apr 22 20:55:28.619209 2026] [:error] [pid 6344:tid 6349] [client 40.89.139.177:23135] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "aejFQEDOTF-pkQnDeUnwwwAAAAA"]
[Wed Apr 22 20:55:30.364734 2026] [:error] [pid 23776:tid 23798] [client 40.89.139.177:34461] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "aejFQrRExf-1pAbSeJvwlgAAAZQ"]
[Wed Apr 22 20:55:31.744994 2026] [:error] [pid 23776:tid 23782] [client 40.89.139.177:20432] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "aejFQ7RExf-1pAbSeJvwoQAAAYQ"]
[Wed Apr 22 20:55:33.896038 2026] [:error] [pid 6384:tid 6388] [client 40.89.139.177:7879] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "aejFRT58M3t15ICeWHU5pAAAAME"]
[Wed Apr 22 20:55:36.174029 2026] [:error] [pid 6344:tid 6353] [client 40.89.139.177:31830] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aejFSEDOTF-pkQnDeUnwzAAAAAQ"]
[Wed Apr 22 20:55:41.995916 2026] [:error] [pid 6384:tid 6400] [client 40.89.139.177:59541] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aejFTT58M3t15ICeWHU5wwAAAM0"]
[Wed Apr 22 20:55:42.915591 2026] [:error] [pid 9085:tid 9103] [client 40.89.139.177:28159] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aejFTt-_-or9vQnlWnptnQAAAVA"]
[Wed Apr 22 20:55:46.038321 2026] [:error] [pid 9085:tid 9099] [client 40.89.139.177:37211] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aejFUt-_-or9vQnlWnpttgAAAUw"]
[Wed Apr 22 20:55:48.241944 2026] [:error] [pid 9085:tid 9091] [client 40.89.139.177:31361] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "aejFVN-_-or9vQnlWnptzwAAAUQ"]
[Wed Apr 22 20:55:50.254409 2026] [:error] [pid 6250:tid 6268] [client 40.89.139.177:29253] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "aejFVg-iZeQkqmQVfj4OewAAAE4"]
[Wed Apr 22 20:55:55.387081 2026] [:error] [pid 9085:tid 9108] [client 40.89.139.177:26708] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "aejFW9-_-or9vQnlWnpuBAAAAVU"]
[Wed Apr 22 20:55:56.979515 2026] [:error] [pid 6344:tid 6368] [client 40.89.139.177:22708] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "aejFXEDOTF-pkQnDeUnw5AAAABM"]
[Wed Apr 22 20:55:58.513140 2026] [:error] [pid 23776:tid 23787] [client 40.89.139.177:53105] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "aejFXrRExf-1pAbSeJvw-AAAAYk"]
[Wed Apr 22 20:55:59.632050 2026] [:error] [pid 23776:tid 23789] [client 40.89.139.177:28810] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "aejFX7RExf-1pAbSeJvw_AAAAYs"]
[Wed Apr 22 20:56:01.345410 2026] [:error] [pid 6384:tid 6405] [client 40.89.139.177:18496] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "aejFYT58M3t15ICeWHU56wAAANI"]
[Wed Apr 22 20:56:02.397759 2026] [:error] [pid 6384:tid 6395] [client 40.89.139.177:27459] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "aejFYj58M3t15ICeWHU58gAAAMg"]
[Wed Apr 22 20:56:03.195679 2026] [:error] [pid 6384:tid 6388] [client 40.89.139.177:27470] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aejFYz58M3t15ICeWHU5_gAAAME"]
[Wed Apr 22 20:56:04.176932 2026] [:error] [pid 6344:tid 6361] [client 40.89.139.177:27472] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aejFZEDOTF-pkQnDeUnw9AAAAAw"]
[Wed Apr 22 20:56:04.783294 2026] [:error] [pid 6384:tid 6398] [client 40.89.139.177:26262] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aejFZD58M3t15ICeWHU6EgAAAMs"]
[Wed Apr 22 20:56:05.748648 2026] [:error] [pid 9085:tid 9110] [client 40.89.139.177:35694] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aejFZd-_-or9vQnlWnpuJgAAAVc"]
[Wed Apr 22 20:56:06.609040 2026] [:error] [pid 6250:tid 6265] [client 40.89.139.177:13919] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aejFZg-iZeQkqmQVfj4OjQAAAEs"]
[Wed Apr 22 20:56:08.253124 2026] [:error] [pid 6251:tid 6294] [client 40.89.139.177:27481] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aejFaCsFAzbyObL-SQ5-cQAAAIk"]
[Wed Apr 22 20:56:09.940362 2026] [:error] [pid 6384:tid 6403] [client 40.89.139.177:18438] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aejFaT58M3t15ICeWHU6OQAAANA"]
[Wed Apr 22 20:56:11.972144 2026] [:error] [pid 23776:tid 23782] [client 40.89.139.177:24268] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aejFa7RExf-1pAbSeJvxGwAAAYQ"]
[Wed Apr 22 20:56:14.545756 2026] [:error] [pid 23776:tid 23791] [client 40.89.139.177:31777] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "aejFbrRExf-1pAbSeJvxIgAAAY0"]
[Wed Apr 22 20:56:17.624513 2026] [:error] [pid 23776:tid 23800] [client 40.89.139.177:13932] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "aejFcbRExf-1pAbSeJvxJQAAAZY"]
[Wed Apr 22 20:56:18.958757 2026] [:error] [pid 6251:tid 6298] [client 40.89.139.177:7255] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "aejFcisFAzbyObL-SQ5-gwAAAI0"]
[Wed Apr 22 20:56:20.748179 2026] [:error] [pid 9085:tid 9100] [client 40.89.139.177:7243] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "aejFdN-_-or9vQnlWnpuRQAAAU0"]
[Wed Apr 22 20:56:22.643395 2026] [:error] [pid 9085:tid 9090] [client 40.89.139.177:16150] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aejFdt-_-or9vQnlWnpuXgAAAUM"]
[Wed Apr 22 20:56:23.730424 2026] [:error] [pid 6251:tid 6287] [client 40.89.139.177:16190] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aejFdysFAzbyObL-SQ5-hwAAAII"]
[Wed Apr 22 20:56:25.313124 2026] [:error] [pid 6384:tid 6397] [client 40.89.139.177:13835] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aejFeT58M3t15ICeWHU6nAAAAMo"]
[Wed Apr 22 20:56:26.370307 2026] [:error] [pid 6250:tid 6277] [client 40.89.139.177:7256] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aejFeg-iZeQkqmQVfj4OsgAAAFc"]
[Wed Apr 22 20:56:27.360999 2026] [:error] [pid 6344:tid 6364] [client 40.89.139.177:8021] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aejFe0DOTF-pkQnDeUnxEwAAAA8"]
[Wed Apr 22 20:56:28.794832 2026] [:error] [pid 6250:tid 6258] [client 40.89.139.177:24270] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Wed Apr 22 20:56:29.078840 2026] [:error] [pid 6250:tid 6263] [client 40.89.139.177:24270] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Wed Apr 22 20:56:29.345449 2026] [:error] [pid 6250:tid 6278] [client 40.89.139.177:24270] File does not exist: /usr/local/apache/htdocs/suspended-page/prosellers8.php
[Wed Apr 22 20:56:29.620057 2026] [:error] [pid 6250:tid 6261] [client 40.89.139.177:24270] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Wed Apr 22 20:56:29.898741 2026] [:error] [pid 6250:tid 6273] [client 40.89.139.177:24270] File does not exist: /usr/local/apache/htdocs/suspended-page/ww.php
[Wed Apr 22 20:56:30.200732 2026] [:error] [pid 6250:tid 6254] [client 40.89.139.177:24270] File does not exist: /usr/local/apache/htdocs/suspended-page/fsjzs.php
[Wed Apr 22 20:56:30.497661 2026] [:error] [pid 6250:tid 6262] [client 40.89.139.177:24270] File does not exist: /usr/local/apache/htdocs/suspended-page/cwclass.php
[Wed Apr 22 20:56:30.763764 2026] [:error] [pid 6250:tid 6274] [client 40.89.139.177:24270] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Wed Apr 22 20:56:31.030756 2026] [:error] [pid 6250:tid 6277] [client 40.89.139.177:24270] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Wed Apr 22 20:56:31.614931 2026] [:error] [pid 6250:tid 6268] [client 40.89.139.177:24270] File does not exist: /usr/local/apache/htdocs/suspended-page/zoper1.php
[Wed Apr 22 20:56:31.879200 2026] [:error] [pid 6250:tid 6260] [client 40.89.139.177:24270] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Wed Apr 22 20:56:32.141563 2026] [:error] [pid 6250:tid 6267] [client 40.89.139.177:24270] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ai.php"] [unique_id "aejFgA-iZeQkqmQVfj4OwQAAAE0"]
[Wed Apr 22 20:56:34.354953 2026] [:error] [pid 6384:tid 6387] [client 40.89.139.177:42101] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ai.php"] [unique_id "aejFgj58M3t15ICeWHU61QAAAMA"]
[Wed Apr 22 20:56:41.823726 2026] [:error] [pid 6250:tid 6256] [client 40.89.139.177:21139] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ai.php"] [unique_id "aejFiQ-iZeQkqmQVfj4OygAAAEI"]
[Wed Apr 22 20:56:44.268443 2026] [:error] [pid 6384:tid 6401] [client 40.89.139.177:13541] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ai.php"] [unique_id "aejFjD58M3t15ICeWHU7JgAAAM4"]
[Wed Apr 22 20:56:49.012394 2026] [:error] [pid 23776:tid 23778] [client 40.89.139.177:13872] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "aejFkbRExf-1pAbSeJvxkQAAAYA"]
[Wed Apr 22 20:56:50.979619 2026] [:error] [pid 6384:tid 6392] [client 40.89.139.177:28454] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "aejFkj58M3t15ICeWHU7TwAAAMU"]
[Wed Apr 22 20:56:51.889809 2026] [:error] [pid 6252:tid 6336] [client 40.89.139.177:33286] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "aejFk-tGYuiYb1nWBpRPbAAAARg"]
[Wed Apr 22 20:56:53.223113 2026] [:error] [pid 6384:tid 6403] [client 40.89.139.177:18113] [client 40.89.139.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "aejFlT58M3t15ICeWHU7VQAAANA"]
[Thu Apr 23 05:58:58.479220 2026] [:error] [pid 25635:tid 25642] [client 155.248.183.67:49324] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file-manager/initialize"] [unique_id "aelEosRxv6UsgRGKB3Ka5gAAAQM"]
[Thu Apr 23 05:58:59.947829 2026] [:error] [pid 42973:tid 43049] [client 155.248.183.67:62682] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file-manager/initialize"] [unique_id "aelEo26I0QqmmmLTHE2kJAAAAIY"]
[Thu Apr 23 05:59:01.412097 2026] [:error] [pid 42973:tid 43048] [client 155.248.183.67:51159] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file-manager/initialize"] [unique_id "aelEpW6I0QqmmmLTHE2kKwAAAIU"]
[Thu Apr 23 05:59:01.639487 2026] [:error] [pid 43083:tid 43096] [client 155.248.183.67:54825] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file-manager/initialize"] [unique_id "aelEpTC5hrvNXosL83KLbgAAAMs"]
[Thu Apr 23 05:59:02.866247 2026] [:error] [pid 42973:tid 43054] [client 155.248.183.67:63142] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file-manager/initialize"] [unique_id "aelEpm6I0QqmmmLTHE2kLQAAAIs"]
[Thu Apr 23 05:59:04.103155 2026] [:error] [pid 43083:tid 43089] [client 155.248.183.67:61705] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file-manager/initialize"] [unique_id "aelEqDC5hrvNXosL83KLcQAAAMQ"]
[Thu Apr 23 05:59:04.331904 2026] [:error] [pid 43083:tid 43092] [client 155.248.183.67:62726] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aelEqDC5hrvNXosL83KLcwAAAMc"]
[Thu Apr 23 05:59:05.564410 2026] [:error] [pid 42972:tid 43028] [client 155.248.183.67:51323] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aelEqcOAb-3sOknsk4fwTwAAAEw"]
[Thu Apr 23 05:59:06.791345 2026] [:error] [pid 42971:tid 42989] [client 155.248.183.67:49811] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aelEqjEP2_5RswrH8bF7nAAAAAM"]
[Thu Apr 23 05:59:07.038664 2026] [:error] [pid 25635:tid 25661] [client 155.248.183.67:53464] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aelEq8Rxv6UsgRGKB3Ka-wAAARY"]
[Thu Apr 23 05:59:08.265758 2026] [:error] [pid 25635:tid 25641] [client 155.248.183.67:57833] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aelErMRxv6UsgRGKB3KbBQAAAQI"]
[Thu Apr 23 05:59:09.494105 2026] [:error] [pid 25635:tid 25649] [client 155.248.183.67:61722] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aelErcRxv6UsgRGKB3KbGwAAAQo"]
[Thu Apr 23 07:23:16.267565 2026] [:error] [pid 43083:tid 43088] [client 89.251.0.113:51349] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Apr 23 07:23:16.607981 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.113:51349] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Apr 23 07:23:16.941862 2026] [:error] [pid 43083:tid 43094] [client 89.251.0.113:51349] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Apr 23 07:23:17.253140 2026] [:error] [pid 43083:tid 43090] [client 89.251.0.113:51349] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Apr 23 07:23:17.572891 2026] [:error] [pid 43083:tid 43099] [client 89.251.0.113:51349] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Apr 23 07:23:17.888713 2026] [:error] [pid 43083:tid 43108] [client 89.251.0.113:51349] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Apr 23 07:23:18.218714 2026] [:error] [pid 43083:tid 43109] [client 89.251.0.113:51349] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Apr 23 07:23:18.538435 2026] [:error] [pid 43083:tid 43101] [client 89.251.0.113:51349] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Apr 23 07:23:19.249973 2026] [:error] [pid 43083:tid 43089] [client 89.251.0.113:51349] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Apr 23 07:23:19.677922 2026] [:error] [pid 43083:tid 43104] [client 89.251.0.113:51349] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Apr 23 07:23:19.992612 2026] [:error] [pid 43083:tid 43097] [client 89.251.0.113:51349] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 23 07:23:20.719976 2026] [:error] [pid 43083:tid 43085] [client 89.251.0.113:51349] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Apr 23 07:23:21.044636 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.113:51349] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 23 07:23:21.370424 2026] [:error] [pid 43083:tid 43104] [client 89.251.0.113:51349] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Apr 23 07:23:21.683489 2026] [:error] [pid 43083:tid 43101] [client 89.251.0.113:51349] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Apr 23 07:23:21.992474 2026] [:error] [pid 43083:tid 43106] [client 89.251.0.113:51349] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Apr 23 07:23:22.313181 2026] [:error] [pid 43083:tid 43098] [client 89.251.0.113:51349] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Apr 23 07:23:22.609763 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.113:51349] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Thu Apr 23 07:23:35.125158 2026] [:error] [pid 43083:tid 43096] [client 89.251.0.113:51349] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aelYdzC5hrvNXosL83LBwwAAAMs"]
[Thu Apr 23 07:23:36.915300 2026] [:error] [pid 64967:tid 64991] [client 89.251.0.125:21163] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aelYeIAV4GfOOdX8QzoKcgAAAZY"]
[Thu Apr 23 07:23:38.719771 2026] [:error] [pid 65000:tid 65047] [client 89.251.0.150:30131] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Apr 23 07:23:39.715269 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.150:30131] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aelYe76vRb9j6psK2ZaKIwAAAhc"]
[Thu Apr 23 07:23:41.024390 2026] [:error] [pid 65000:tid 65051] [client 89.251.0.127:61337] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Apr 23 07:23:41.424528 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.127:61337] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aelYfb6vRb9j6psK2ZaKeAAAAgk"]
[Thu Apr 23 07:23:42.521150 2026] [:error] [pid 42972:tid 43025] [client 89.251.0.127:29815] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Apr 23 07:23:44.192028 2026] [:error] [pid 42972:tid 43030] [client 89.251.0.127:29815] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aelYgMOAb-3sOknsk4cXvQAAAE4"]
[Thu Apr 23 07:23:45.129776 2026] [:error] [pid 64967:tid 64978] [client 89.251.0.121:54833] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aelYgYAV4GfOOdX8QzoKoQAAAYk"]
[Thu Apr 23 07:23:45.760060 2026] [:error] [pid 64967:tid 64982] [client 89.251.0.140:26547] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aelYgYAV4GfOOdX8QzoKqQAAAY0"]
[Thu Apr 23 07:23:46.368118 2026] [:error] [pid 42973:tid 43053] [client 89.251.0.134:37159] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aelYgm6I0QqmmmLTHE3VSAAAAIo"]
[Thu Apr 23 07:23:47.040574 2026] [:error] [pid 59700:tid 59725] [client 89.251.0.120:41121] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aelYg5XyGZJFeAIDWtlR1wAAAVc"]
[Thu Apr 23 07:23:48.666658 2026] [:error] [pid 43083:tid 43104] [client 89.251.0.134:64521] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aelYhDC5hrvNXosL83LCFgAAANM"]
[Thu Apr 23 07:23:49.617892 2026] [:error] [pid 65000:tid 65053] [client 89.251.0.116:61531] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aelYhb6vRb9j6psK2ZaLaQAAAhQ"]
[Thu Apr 23 07:23:50.332950 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.133:48645] [client 89.251.0.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inc.php"] [unique_id "aelYhr6vRb9j6psK2ZaLegAAAgY"]
[Thu Apr 23 07:23:50.909596 2026] [:error] [pid 59700:tid 59709] [client 89.251.0.145:20127] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Thu Apr 23 07:23:51.566948 2026] [:error] [pid 59700:tid 59702] [client 89.251.0.145:20127] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "aelYh5XyGZJFeAIDWtlR_gAAAUA"]
[Thu Apr 23 07:23:52.971026 2026] [:error] [pid 65000:tid 65032] [client 89.251.0.113:39201] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aelYiL6vRb9j6psK2ZaLyQAAAgM"]
[Thu Apr 23 07:23:54.019642 2026] [:error] [pid 65000:tid 65031] [client 89.251.0.123:28591] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aelYib6vRb9j6psK2ZaL7AAAAgI"]
[Thu Apr 23 07:23:54.656832 2026] [:error] [pid 42973:tid 43050] [client 89.251.0.132:32241] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Thu Apr 23 07:23:55.044001 2026] [:error] [pid 42973:tid 43062] [client 89.251.0.132:32241] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aelYi26I0QqmmmLTHE3VcgAAAJM"]
[Thu Apr 23 07:23:55.737159 2026] [:error] [pid 42972:tid 43035] [client 89.251.0.127:28941] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Thu Apr 23 07:23:56.376997 2026] [:error] [pid 42972:tid 43039] [client 89.251.0.127:28941] [client 89.251.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin/upload/css.php"] [unique_id "aelYjMOAb-3sOknsk4cYJwAAAFc"]
[Thu Apr 23 07:23:57.318030 2026] [:error] [pid 65000:tid 65041] [client 89.251.0.131:53039] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Apr 23 07:23:57.925631 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.131:53039] [client 89.251.0.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aelYjb6vRb9j6psK2ZaMawAAAgk"]
[Thu Apr 23 07:23:59.801518 2026] [:error] [pid 42972:tid 43038] [client 89.251.0.138:34697] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aelYj8OAb-3sOknsk4cYRAAAAFY"]
[Thu Apr 23 07:24:00.499432 2026] [:error] [pid 59700:tid 59705] [client 89.251.0.123:51267] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Thu Apr 23 07:24:00.943920 2026] [:error] [pid 59700:tid 59715] [client 89.251.0.123:51267] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aelYkJXyGZJFeAIDWtlSSwAAAU0"]
[Thu Apr 23 07:24:01.704136 2026] [:error] [pid 65000:tid 65051] [client 89.251.0.117:39229] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Apr 23 07:24:02.317448 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.117:39229] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aelYkr6vRb9j6psK2ZaMwAAAAhA"]
[Thu Apr 23 07:24:03.266092 2026] [:error] [pid 42973:tid 43051] [client 89.251.0.143:38929] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aelYk26I0QqmmmLTHE3VnQAAAIg"]
[Thu Apr 23 07:24:04.173661 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.131:20891] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Thu Apr 23 07:24:04.488556 2026] [:error] [pid 65000:tid 65040] [client 89.251.0.131:20891] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Thu Apr 23 07:24:05.129863 2026] [:error] [pid 65000:tid 65057] [client 89.251.0.131:20891] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aelYlb6vRb9j6psK2ZaNFgAAAhg"]
[Thu Apr 23 07:24:06.167108 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.133:62215] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aelYlr6vRb9j6psK2ZaNOwAAAgY"]
[Thu Apr 23 07:24:16.746835 2026] [:error] [pid 59700:tid 59707] [client 89.251.0.117:38391] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aelYoJXyGZJFeAIDWtlS3AAAAUU"]
[Thu Apr 23 07:24:17.452140 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.133:32537] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aelYob6vRb9j6psK2ZaOaAAAAgk"]
[Thu Apr 23 07:24:18.347553 2026] [:error] [pid 42972:tid 43029] [client 89.251.0.143:25593] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aelYosOAb-3sOknsk4cY7wAAAE0"]
[Thu Apr 23 07:24:19.594291 2026] [:error] [pid 43083:tid 43094] [client 89.251.0.143:30629] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu Apr 23 07:24:19.917997 2026] [:error] [pid 43083:tid 43098] [client 89.251.0.143:30629] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aelYozC5hrvNXosL83LDCQAAAM0"]
[Thu Apr 23 07:24:20.801856 2026] [:error] [pid 42971:tid 42994] [client 89.251.0.121:65007] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aelYpDEP2_5RswrH8bGhUAAAAAg"]
[Thu Apr 23 07:24:21.398729 2026] [:error] [pid 42971:tid 43006] [client 89.251.0.115:49311] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aelYpTEP2_5RswrH8bGhXQAAABQ"]
[Thu Apr 23 07:24:22.708931 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.136:55765] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Thu Apr 23 07:24:23.369139 2026] [:error] [pid 65000:tid 65031] [client 89.251.0.136:55765] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Thu Apr 23 07:24:24.839875 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.136:55765] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aelYqL6vRb9j6psK2ZaO7QAAAgU"]
[Thu Apr 23 07:24:26.888382 2026] [:error] [pid 64967:tid 64986] [client 89.251.0.140:36959] [client 89.251.0.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.140, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aelYqoAV4GfOOdX8QzoMTQAAAZE"]
[Thu Apr 23 07:24:27.221762 2026] [:error] [pid 64967:tid 64969] [client 89.251.0.140:36959] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Apr 23 07:24:28.912053 2026] [:error] [pid 64967:tid 64992] [client 89.251.0.140:36959] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Thu Apr 23 07:24:29.252879 2026] [:error] [pid 64967:tid 64986] [client 89.251.0.140:36959] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Apr 23 07:24:31.011683 2026] [:error] [pid 64967:tid 64974] [client 89.251.0.140:36959] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aelYroAV4GfOOdX8QzoMoAAAAYU"]
[Thu Apr 23 07:24:31.944652 2026] [:error] [pid 43083:tid 43091] [client 89.251.0.141:32065] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Thu Apr 23 07:24:32.361883 2026] [:error] [pid 43083:tid 43086] [client 89.251.0.141:32065] [client 89.251.0.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.141, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aelYsDC5hrvNXosL83LDuwAAAME"]
[Thu Apr 23 07:24:33.051645 2026] [:error] [pid 43083:tid 43091] [client 89.251.0.141:32065] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/item.php"] [unique_id "aelYsTC5hrvNXosL83LDwQAAAMY"]
[Thu Apr 23 07:24:35.070472 2026] [:error] [pid 59700:tid 59704] [client 89.251.0.121:48183] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Apr 23 07:24:35.703198 2026] [:error] [pid 59700:tid 59708] [client 89.251.0.121:48183] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Thu Apr 23 07:24:36.381978 2026] [:error] [pid 59700:tid 59717] [client 89.251.0.121:48183] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aelYtJXyGZJFeAIDWtlTSQAAAU8"]
[Thu Apr 23 07:24:37.251943 2026] [:error] [pid 42972:tid 43019] [client 89.251.0.131:46403] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Apr 23 07:24:38.226916 2026] [:error] [pid 42972:tid 43016] [client 89.251.0.131:46403] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Thu Apr 23 07:24:38.857555 2026] [:error] [pid 42972:tid 43019] [client 89.251.0.131:46403] [client 89.251.0.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Marvins.php"] [unique_id "aelYtsOAb-3sOknsk4cZwwAAAEM"]
[Thu Apr 23 07:24:39.449645 2026] [:error] [pid 42973:tid 43057] [client 89.251.0.117:34329] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Thu Apr 23 07:24:40.129571 2026] [:error] [pid 42973:tid 43052] [client 89.251.0.117:34329] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Thu Apr 23 07:24:40.513464 2026] [:error] [pid 42973:tid 43044] [client 89.251.0.117:34329] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aelYuG6I0QqmmmLTHE3WiwAAAIE"]
[Thu Apr 23 07:24:47.949494 2026] [:error] [pid 25635:tid 25656] [client 89.251.0.126:23571] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Thu Apr 23 07:24:48.308308 2026] [:error] [pid 25635:tid 25650] [client 89.251.0.126:23571] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Thu Apr 23 07:24:48.673256 2026] [:error] [pid 25635:tid 25645] [client 89.251.0.126:23571] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aelYwMRxv6UsgRGKB3LeLQAAAQY"]
[Thu Apr 23 07:24:49.952840 2026] [:error] [pid 42973:tid 43058] [client 89.251.0.117:29551] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Thu Apr 23 07:24:50.625124 2026] [:error] [pid 42973:tid 43051] [client 89.251.0.117:29551] [client 89.251.0.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.117, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aelYwm6I0QqmmmLTHE3W7AAAAIg"]
[Thu Apr 23 07:24:50.938593 2026] [:error] [pid 42973:tid 43063] [client 89.251.0.117:29551] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aelYwm6I0QqmmmLTHE3W8AAAAJQ"]
[Thu Apr 23 07:24:55.577709 2026] [:error] [pid 65000:tid 65047] [client 89.251.0.137:39327] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Thu Apr 23 07:24:57.428632 2026] [:error] [pid 65000:tid 65052] [client 89.251.0.137:39327] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Thu Apr 23 07:24:57.730662 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.137:39327] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aelYyb6vRb9j6psK2ZaR5wAAAgU"]
[Thu Apr 23 07:24:58.473004 2026] [:error] [pid 64998:tid 65024] [client 89.251.0.141:50703] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Thu Apr 23 07:24:59.557068 2026] [:error] [pid 64998:tid 65009] [client 89.251.0.141:50703] [client 89.251.0.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.141, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aelYy4V5EysYcTLjmwjwawAAAcc"]
[Thu Apr 23 07:24:59.903802 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.141:50703] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Thu Apr 23 07:25:00.235456 2026] [:error] [pid 64998:tid 65014] [client 89.251.0.141:50703] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Thu Apr 23 07:25:00.652961 2026] [:error] [pid 64998:tid 65021] [client 89.251.0.141:50703] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Thu Apr 23 07:25:01.105937 2026] [:error] [pid 64998:tid 65006] [client 89.251.0.141:50703] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aelYzYV5EysYcTLjmwjwcwAAAcQ"]
[Thu Apr 23 07:25:01.905393 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.135:56359] [client 89.251.0.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aelYzb6vRb9j6psK2ZaSMQAAAgY"]
[Thu Apr 23 07:25:02.749721 2026] [:error] [pid 42973:tid 43058] [client 89.251.0.138:34645] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Thu Apr 23 07:25:03.059993 2026] [:error] [pid 42973:tid 43051] [client 89.251.0.138:34645] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aelYz26I0QqmmmLTHE3XWgAAAIg"]
[Thu Apr 23 07:25:04.403251 2026] [:error] [pid 65000:tid 65037] [client 89.251.0.125:37257] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Apr 23 07:25:04.749564 2026] [:error] [pid 65000:tid 65051] [client 89.251.0.125:37257] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aelY0L6vRb9j6psK2ZaSWAAAAhI"]
[Thu Apr 23 07:25:06.165997 2026] [:error] [pid 25635:tid 25655] [client 89.251.0.128:24827] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Thu Apr 23 07:25:06.843546 2026] [:error] [pid 25635:tid 25645] [client 89.251.0.128:24827] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aelY0sRxv6UsgRGKB3LetAAAAQY"]
[Thu Apr 23 07:25:08.483396 2026] [:error] [pid 42972:tid 43018] [client 89.251.0.113:43145] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aelY1MOAb-3sOknsk4cbQQAAAEI"]
[Thu Apr 23 07:25:09.314569 2026] [:error] [pid 42972:tid 43027] [client 89.251.0.117:60967] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Thu Apr 23 07:25:09.655051 2026] [:error] [pid 42972:tid 43027] [client 89.251.0.117:60967] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Thu Apr 23 07:25:11.023692 2026] [:error] [pid 42972:tid 43019] [client 89.251.0.117:60967] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aelY18OAb-3sOknsk4cbrAAAAEM"]
[Thu Apr 23 07:25:12.103686 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.138:48667] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aelY2L6vRb9j6psK2ZaS_QAAAgk"]
[Thu Apr 23 07:25:13.683268 2026] [:error] [pid 64967:tid 64978] [client 89.251.0.145:50339] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aelY2YAV4GfOOdX8QzoOrgAAAYk"]
[Thu Apr 23 07:25:14.797565 2026] [:error] [pid 43083:tid 43091] [client 89.251.0.146:46593] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Thu Apr 23 07:25:15.694298 2026] [:error] [pid 43083:tid 43092] [client 89.251.0.146:46593] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Thu Apr 23 07:25:16.005365 2026] [:error] [pid 43083:tid 43107] [client 89.251.0.146:46593] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aelY3DC5hrvNXosL83LFewAAANY"]
[Thu Apr 23 07:25:16.823657 2026] [:error] [pid 42973:tid 43061] [client 89.251.0.132:59713] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Apr 23 07:25:17.442425 2026] [:error] [pid 42973:tid 43043] [client 89.251.0.132:59713] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/click.php"] [unique_id "aelY3W6I0QqmmmLTHE3X9gAAAIA"]
[Thu Apr 23 07:25:19.370454 2026] [:error] [pid 64967:tid 64985] [client 89.251.0.142:62785] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aelY34AV4GfOOdX8QzoO-wAAAZA"]
[Thu Apr 23 07:25:20.585341 2026] [:error] [pid 59700:tid 59704] [client 89.251.0.120:38715] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Apr 23 07:25:21.657834 2026] [:error] [pid 59700:tid 59705] [client 89.251.0.120:38715] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Thu Apr 23 07:25:22.355808 2026] [:error] [pid 59700:tid 59724] [client 89.251.0.120:38715] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Thu Apr 23 07:25:22.784606 2026] [:error] [pid 59700:tid 59703] [client 89.251.0.120:38715] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aelY4pXyGZJFeAIDWtlVJwAAAUE"]
[Thu Apr 23 07:25:23.485618 2026] [:error] [pid 43083:tid 43099] [client 89.251.0.139:57679] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aelY4zC5hrvNXosL83LF7AAAAM4"]
[Thu Apr 23 07:25:24.095732 2026] [:error] [pid 42972:tid 43031] [client 89.251.0.121:21199] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aelY5MOAb-3sOknsk4ccPAAAAE8"]
[Thu Apr 23 07:25:24.723545 2026] [:error] [pid 42971:tid 43007] [client 89.251.0.117:24597] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aelY5DEP2_5RswrH8bGkGwAAABU"]
[Thu Apr 23 07:25:25.374483 2026] [:error] [pid 59700:tid 59722] [client 89.251.0.148:21911] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Thu Apr 23 07:25:25.674874 2026] [:error] [pid 59700:tid 59702] [client 89.251.0.148:21911] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aelY5ZXyGZJFeAIDWtlVRgAAAUA"]
[Thu Apr 23 07:25:26.389211 2026] [:error] [pid 64998:tid 65021] [client 89.251.0.113:21793] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aelY5oV5EysYcTLjmwjxggAAAdM"]
[Thu Apr 23 07:25:27.028742 2026] [:error] [pid 64998:tid 65007] [client 89.251.0.117:44809] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Thu Apr 23 07:25:27.647482 2026] [:error] [pid 64998:tid 65019] [client 89.251.0.117:44809] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aelY54V5EysYcTLjmwjxogAAAdE"]
[Thu Apr 23 07:25:29.295191 2026] [:error] [pid 42972:tid 43023] [client 89.251.0.129:61473] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aelY6cOAb-3sOknsk4ccVgAAAEc"]
[Thu Apr 23 07:25:29.928517 2026] [:error] [pid 65000:tid 65040] [client 89.251.0.132:49605] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aelY6b6vRb9j6psK2ZaT6AAAAgc"]
[Thu Apr 23 07:25:30.535909 2026] [:error] [pid 42972:tid 43026] [client 89.251.0.114:44595] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aelY6sOAb-3sOknsk4ccZwAAAEo"]
[Thu Apr 23 07:25:31.645477 2026] [:error] [pid 25635:tid 25656] [client 89.251.0.125:34083] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aelY68Rxv6UsgRGKB3LffwAAARE"]
[Thu Apr 23 07:25:32.872583 2026] [:error] [pid 64967:tid 64974] [client 89.251.0.114:26069] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aelY7IAV4GfOOdX8QzoPfAAAAYU"]
[Thu Apr 23 07:25:33.978251 2026] [:error] [pid 65000:tid 65057] [client 89.251.0.121:58971] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Thu Apr 23 07:25:35.004576 2026] [:error] [pid 65000:tid 65057] [client 89.251.0.121:58971] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Thu Apr 23 07:25:35.336702 2026] [:error] [pid 65000:tid 65053] [client 89.251.0.121:58971] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aelY776vRb9j6psK2ZaUSAAAAhQ"]
[Thu Apr 23 07:25:36.305657 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.126:33705] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Thu Apr 23 07:25:36.607560 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.126:33705] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Thu Apr 23 07:25:38.348062 2026] [:error] [pid 64998:tid 65013] [client 89.251.0.126:33705] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aelY8oV5EysYcTLjmwjycgAAAcs"]
[Thu Apr 23 07:25:40.079157 2026] [:error] [pid 42972:tid 43038] [client 89.251.0.125:32401] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aelY9MOAb-3sOknsk4cctAAAAFY"]
[Thu Apr 23 07:25:40.666713 2026] [:error] [pid 64967:tid 64985] [client 89.251.0.129:35381] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aelY9IAV4GfOOdX8QzoPtQAAAZA"]
[Thu Apr 23 07:25:42.010729 2026] [:error] [pid 42971:tid 42994] [client 89.251.0.121:55455] [client 89.251.0.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aelY9jEP2_5RswrH8bGlFgAAAAg"]
[Thu Apr 23 07:25:43.276199 2026] [:error] [pid 42972:tid 43036] [client 89.251.0.131:63387] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aelY98OAb-3sOknsk4cc2AAAAFQ"]
[Thu Apr 23 07:25:44.560253 2026] [:error] [pid 65000:tid 65037] [client 89.251.0.115:35369] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Thu Apr 23 07:25:44.891047 2026] [:error] [pid 65000:tid 65037] [client 89.251.0.115:35369] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Thu Apr 23 07:25:45.205457 2026] [:error] [pid 65000:tid 65030] [client 89.251.0.115:35369] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Thu Apr 23 07:25:45.509032 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.115:35369] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Thu Apr 23 07:25:48.626375 2026] [:error] [pid 65000:tid 65031] [client 89.251.0.115:35369] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aelY_L6vRb9j6psK2ZaUxQAAAgI"]
[Thu Apr 23 07:25:50.432181 2026] [:error] [pid 42973:tid 43054] [client 89.251.0.126:48955] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aelY_m6I0QqmmmLTHE3YoQAAAIs"]
[Thu Apr 23 07:25:51.206603 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.136:22675] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aelY_76vRb9j6psK2ZaU3QAAAhc"]
[Thu Apr 23 07:25:51.970718 2026] [:error] [pid 42972:tid 43020] [client 89.251.0.113:46441] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aelY_8OAb-3sOknsk4cdKQAAAEQ"]
[Thu Apr 23 07:25:52.632552 2026] [:error] [pid 65000:tid 65046] [client 89.251.0.123:52327] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aelZAL6vRb9j6psK2ZaU-gAAAg0"]
[Thu Apr 23 07:25:53.253167 2026] [:error] [pid 65000:tid 65047] [client 89.251.0.145:49721] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aelZAb6vRb9j6psK2ZaVCQAAAg4"]
[Thu Apr 23 07:25:54.310433 2026] [:error] [pid 43083:tid 43089] [client 89.251.0.124:54511] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aelZAjC5hrvNXosL83LHGwAAAMQ"]
[Thu Apr 23 07:25:54.935061 2026] [:error] [pid 65000:tid 65043] [client 89.251.0.140:33585] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aelZAr6vRb9j6psK2ZaVGgAAAgo"]
[Thu Apr 23 07:25:55.605335 2026] [:error] [pid 42972:tid 43037] [client 89.251.0.139:49747] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aelZA8OAb-3sOknsk4cdYQAAAFU"]
[Thu Apr 23 07:25:56.214140 2026] [:error] [pid 42972:tid 43019] [client 89.251.0.135:46061] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aelZBMOAb-3sOknsk4cdbgAAAEM"]
[Thu Apr 23 07:25:57.240778 2026] [:error] [pid 64967:tid 64984] [client 89.251.0.116:57669] [client 89.251.0.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "aelZBYAV4GfOOdX8QzoQQgAAAY8"]
[Thu Apr 23 07:25:58.168967 2026] [:error] [pid 65000:tid 65045] [client 89.251.0.151:31645] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aelZBr6vRb9j6psK2ZaVPQAAAgw"]
[Thu Apr 23 07:25:59.088328 2026] [:error] [pid 65000:tid 65032] [client 89.251.0.143:23571] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aelZB76vRb9j6psK2ZaVTgAAAgM"]
[Thu Apr 23 07:25:59.730639 2026] [:error] [pid 25635:tid 25660] [client 89.251.0.119:56007] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Thu Apr 23 07:26:00.427002 2026] [:error] [pid 25635:tid 25649] [client 89.251.0.119:56007] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aelZCMRxv6UsgRGKB3LgCQAAAQo"]
[Thu Apr 23 07:26:01.909727 2026] [:error] [pid 43083:tid 43096] [client 89.251.0.141:39319] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aelZCTC5hrvNXosL83LHXgAAAMs"]
[Thu Apr 23 07:26:03.246274 2026] [:error] [pid 64967:tid 64987] [client 89.251.0.133:33631] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Thu Apr 23 07:26:03.574649 2026] [:error] [pid 64967:tid 64986] [client 89.251.0.133:33631] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aelZC4AV4GfOOdX8QzoQiwAAAZE"]
[Thu Apr 23 07:26:04.644683 2026] [:error] [pid 42972:tid 43024] [client 89.251.0.135:43959] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Thu Apr 23 07:26:04.954055 2026] [:error] [pid 42972:tid 43028] [client 89.251.0.135:43959] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Thu Apr 23 07:26:05.267877 2026] [:error] [pid 42972:tid 43021] [client 89.251.0.135:43959] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Thu Apr 23 07:26:05.598062 2026] [:error] [pid 42972:tid 43016] [client 89.251.0.135:43959] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aelZDcOAb-3sOknsk4cduQAAAEA"]
[Thu Apr 23 07:26:06.200630 2026] [:error] [pid 65000:tid 65045] [client 89.251.0.148:61691] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Thu Apr 23 07:26:06.525886 2026] [:error] [pid 65000:tid 65029] [client 89.251.0.148:61691] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aelZDr6vRb9j6psK2ZaViwAAAgA"]
[Thu Apr 23 07:26:07.788675 2026] [:error] [pid 59700:tid 59704] [client 89.251.0.127:46651] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Apr 23 07:26:08.096327 2026] [:error] [pid 59700:tid 59707] [client 89.251.0.127:46651] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Apr 23 07:26:08.389325 2026] [:error] [pid 59700:tid 59726] [client 89.251.0.127:46651] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Thu Apr 23 07:26:09.991769 2026] [:error] [pid 59700:tid 59717] [client 89.251.0.127:46651] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu Apr 23 07:26:10.334496 2026] [:error] [pid 59700:tid 59726] [client 89.251.0.127:46651] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Thu Apr 23 07:26:11.071516 2026] [:error] [pid 59700:tid 59704] [client 89.251.0.127:46651] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Thu Apr 23 07:26:12.025283 2026] [:error] [pid 59700:tid 59703] [client 89.251.0.127:46651] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Thu Apr 23 07:26:12.386204 2026] [:error] [pid 59700:tid 59713] [client 89.251.0.127:46651] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aelZFJXyGZJFeAIDWtlW0QAAAUs"]
[Thu Apr 23 07:26:13.088595 2026] [:error] [pid 65000:tid 65030] [client 89.251.0.146:21839] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aelZFb6vRb9j6psK2ZaV1QAAAgE"]
[Thu Apr 23 07:26:13.709777 2026] [:error] [pid 59700:tid 59707] [client 89.251.0.126:62511] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Thu Apr 23 07:26:14.023919 2026] [:error] [pid 59700:tid 59714] [client 89.251.0.126:62511] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aelZFpXyGZJFeAIDWtlW5gAAAUw"]
[Thu Apr 23 07:26:14.922501 2026] [:error] [pid 25635:tid 25661] [client 89.251.0.138:64635] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Apr 23 07:26:15.234129 2026] [:error] [pid 25635:tid 25662] [client 89.251.0.138:64635] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aelZF8Rxv6UsgRGKB3LgcAAAARc"]
[Thu Apr 23 07:26:15.909102 2026] [:error] [pid 42971:tid 42990] [client 89.251.0.132:63695] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aelZFzEP2_5RswrH8bGmqQAAAAQ"]
[Thu Apr 23 07:26:17.862223 2026] [:error] [pid 42972:tid 43029] [client 89.251.0.142:36361] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aelZGcOAb-3sOknsk4ceAwAAAE0"]
[Thu Apr 23 07:26:18.406812 2026] [:error] [pid 42973:tid 43057] [client 89.251.0.142:44875] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aelZGm6I0QqmmmLTHE3ZSwAAAI4"]
[Thu Apr 23 07:26:19.904122 2026] [:error] [pid 43083:tid 43090] [client 89.251.0.129:41889] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Thu Apr 23 07:26:20.531846 2026] [:error] [pid 43083:tid 43085] [client 89.251.0.129:41889] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aelZHDC5hrvNXosL83LIJwAAAMA"]
[Thu Apr 23 07:26:21.441606 2026] [:error] [pid 42971:tid 42997] [client 89.251.0.134:60461] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Thu Apr 23 07:26:22.244076 2026] [:error] [pid 42971:tid 43007] [client 89.251.0.134:60461] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/function.php"] [unique_id "aelZHjEP2_5RswrH8bGm_gAAABU"]
[Thu Apr 23 07:26:22.928362 2026] [:error] [pid 42971:tid 42994] [client 89.251.0.133:23325] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aelZHjEP2_5RswrH8bGnCQAAAAg"]
[Thu Apr 23 07:26:24.715396 2026] [:error] [pid 42973:tid 43063] [client 89.251.0.127:29643] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Thu Apr 23 07:26:25.054576 2026] [:error] [pid 42973:tid 43044] [client 89.251.0.127:29643] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aelZIW6I0QqmmmLTHE3ZZAAAAIE"]
[Thu Apr 23 07:26:25.649619 2026] [:error] [pid 59700:tid 59713] [client 89.251.0.121:34897] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aelZIZXyGZJFeAIDWtlXuAAAAUs"]
[Thu Apr 23 07:26:27.966429 2026] [:error] [pid 64967:tid 64987] [client 89.251.0.139:27379] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Thu Apr 23 07:26:28.259396 2026] [:error] [pid 64967:tid 64993] [client 89.251.0.139:27379] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Thu Apr 23 07:26:28.853341 2026] [:error] [pid 64967:tid 64981] [client 89.251.0.139:27379] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Thu Apr 23 07:26:29.470663 2026] [:error] [pid 64967:tid 64969] [client 89.251.0.139:27379] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aelZJYAV4GfOOdX8QzoRXgAAAYA"]
[Thu Apr 23 07:26:30.163650 2026] [:error] [pid 42973:tid 43061] [client 89.251.0.144:49769] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aelZJm6I0QqmmmLTHE3ZoAAAAJI"]
[Thu Apr 23 07:26:31.828641 2026] [:error] [pid 25635:tid 25640] [client 89.251.0.125:59105] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Thu Apr 23 07:26:32.636110 2026] [:error] [pid 25635:tid 25645] [client 89.251.0.125:59105] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/index.php"] [unique_id "aelZKMRxv6UsgRGKB3LgwgAAAQY"]
[Thu Apr 23 07:26:33.245782 2026] [:error] [pid 42972:tid 43020] [client 89.251.0.134:28757] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aelZKcOAb-3sOknsk4ceeQAAAEQ"]
[Thu Apr 23 07:26:33.903821 2026] [:error] [pid 59700:tid 59718] [client 89.251.0.117:33553] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aelZKZXyGZJFeAIDWtlYCgAAAVA"]
[Thu Apr 23 07:26:35.998063 2026] [:error] [pid 42971:tid 43000] [client 89.251.0.142:54153] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Thu Apr 23 07:26:39.620642 2026] [:error] [pid 42971:tid 43000] [client 89.251.0.142:54153] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aelZLzEP2_5RswrH8bGoNwAAAA4"]
[Thu Apr 23 07:26:40.657726 2026] [:error] [pid 43083:tid 43108] [client 89.251.0.134:31343] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aelZMDC5hrvNXosL83LIlwAAANc"]
[Thu Apr 23 07:26:41.341775 2026] [:error] [pid 25635:tid 25641] [client 89.251.0.126:36201] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Thu Apr 23 07:26:41.667303 2026] [:error] [pid 25635:tid 25655] [client 89.251.0.126:36201] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Thu Apr 23 07:26:42.266722 2026] [:error] [pid 25635:tid 25659] [client 89.251.0.126:36201] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Thu Apr 23 07:26:43.516731 2026] [:error] [pid 25635:tid 25648] [client 89.251.0.126:36201] [client 89.251.0.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.126, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/js/wp-login.php"] [unique_id "aelZM8Rxv6UsgRGKB3Lg8gAAAQk"]
[Thu Apr 23 07:26:44.122497 2026] [:error] [pid 25635:tid 25641] [client 89.251.0.126:36201] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Thu Apr 23 07:26:44.446606 2026] [:error] [pid 25635:tid 25650] [client 89.251.0.126:36201] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Thu Apr 23 07:26:45.185446 2026] [:error] [pid 25635:tid 25655] [client 89.251.0.126:36201] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Thu Apr 23 07:26:45.861626 2026] [:error] [pid 25635:tid 25660] [client 89.251.0.126:36201] [client 89.251.0.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.126, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aelZNcRxv6UsgRGKB3Lg-wAAARU"]
[Thu Apr 23 07:26:46.807471 2026] [:error] [pid 25635:tid 25649] [client 89.251.0.126:36201] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Thu Apr 23 07:26:47.101764 2026] [:error] [pid 25635:tid 25654] [client 89.251.0.126:36201] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Thu Apr 23 07:26:47.760629 2026] [:error] [pid 25635:tid 25651] [client 89.251.0.126:36201] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Thu Apr 23 07:26:48.396939 2026] [:error] [pid 25635:tid 25655] [client 89.251.0.126:36201] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Thu Apr 23 07:26:49.296579 2026] [:error] [pid 25635:tid 25651] [client 89.251.0.126:36201] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Thu Apr 23 07:26:51.515524 2026] [:error] [pid 25635:tid 25660] [client 89.251.0.126:36201] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu Apr 23 07:26:51.887321 2026] [:error] [pid 25635:tid 25651] [client 89.251.0.126:36201] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Thu Apr 23 07:26:54.066078 2026] [:error] [pid 25635:tid 25657] [client 89.251.0.126:36201] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Thu Apr 23 07:26:54.704161 2026] [:error] [pid 25635:tid 25640] [client 89.251.0.126:36201] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aelZPsRxv6UsgRGKB3LhNgAAAQE"]
[Thu Apr 23 07:26:56.031096 2026] [:error] [pid 25635:tid 25646] [client 89.251.0.125:30631] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Thu Apr 23 07:26:56.326293 2026] [:error] [pid 25635:tid 25639] [client 89.251.0.125:30631] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aelZQMRxv6UsgRGKB3LhPwAAAQA"]
[Thu Apr 23 07:26:57.288044 2026] [:error] [pid 64998:tid 65018] [client 89.251.0.150:48469] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Thu Apr 23 07:26:57.666143 2026] [:error] [pid 64998:tid 65021] [client 89.251.0.150:48469] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aelZQYV5EysYcTLjmwj1cQAAAdM"]
[Thu Apr 23 07:26:58.879702 2026] [:error] [pid 43083:tid 43106] [client 89.251.0.134:50715] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Thu Apr 23 07:26:59.551523 2026] [:error] [pid 43083:tid 43086] [client 89.251.0.134:50715] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Thu Apr 23 07:27:00.211427 2026] [:error] [pid 43083:tid 43099] [client 89.251.0.134:50715] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Thu Apr 23 07:27:00.579410 2026] [:error] [pid 43083:tid 43088] [client 89.251.0.134:50715] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Thu Apr 23 07:27:01.517149 2026] [:error] [pid 43083:tid 43088] [client 89.251.0.134:50715] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aelZRTC5hrvNXosL83LJfwAAAMM"]
[Thu Apr 23 07:27:02.291903 2026] [:error] [pid 43083:tid 43103] [client 89.251.0.121:24913] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Thu Apr 23 07:27:02.636064 2026] [:error] [pid 43083:tid 43094] [client 89.251.0.121:24913] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Thu Apr 23 07:27:02.988625 2026] [:error] [pid 43083:tid 43100] [client 89.251.0.121:24913] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aelZRjC5hrvNXosL83LJlgAAAM8"]
[Thu Apr 23 07:27:03.898972 2026] [:error] [pid 59700:tid 59722] [client 89.251.0.135:54995] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aelZR5XyGZJFeAIDWtlY5QAAAVQ"]
[Thu Apr 23 07:27:04.872293 2026] [:error] [pid 42971:tid 42995] [client 89.251.0.151:24293] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Thu Apr 23 07:27:05.850154 2026] [:error] [pid 42971:tid 43008] [client 89.251.0.151:24293] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Thu Apr 23 07:27:06.152760 2026] [:error] [pid 42971:tid 42989] [client 89.251.0.151:24293] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Thu Apr 23 07:27:06.454377 2026] [:error] [pid 42971:tid 43002] [client 89.251.0.151:24293] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aelZSjEP2_5RswrH8bGpjAAAABA"]
[Thu Apr 23 07:27:07.056423 2026] [:error] [pid 42971:tid 42990] [client 89.251.0.134:52567] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aelZSzEP2_5RswrH8bGpjwAAAAQ"]
[Thu Apr 23 07:27:09.459507 2026] [:error] [pid 42972:tid 43029] [client 89.251.0.143:21875] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Thu Apr 23 07:27:10.588645 2026] [:error] [pid 42972:tid 43040] [client 89.251.0.143:21875] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aelZTsOAb-3sOknsk4cfuAAAAFg"]
[Thu Apr 23 07:27:11.584864 2026] [:error] [pid 42971:tid 42989] [client 89.251.0.115:28051] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "aelZTzEP2_5RswrH8bGpuAAAAAM"]
[Thu Apr 23 07:27:12.551701 2026] [:error] [pid 25635:tid 25646] [client 89.251.0.151:39067] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Apr 23 07:27:12.911919 2026] [:error] [pid 25635:tid 25639] [client 89.251.0.151:39067] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Thu Apr 23 07:27:13.449000 2026] [:error] [pid 25635:tid 25643] [client 89.251.0.151:39067] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aelZUcRxv6UsgRGKB3LhdwAAAQQ"]
[Thu Apr 23 07:27:14.418860 2026] [:error] [pid 43083:tid 43098] [client 89.251.0.131:39371] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Thu Apr 23 07:27:14.722028 2026] [:error] [pid 43083:tid 43104] [client 89.251.0.131:39371] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Thu Apr 23 07:27:15.463773 2026] [:error] [pid 43083:tid 43105] [client 89.251.0.131:39371] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu Apr 23 07:27:16.460445 2026] [:error] [pid 43083:tid 43095] [client 89.251.0.131:39371] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aelZVDC5hrvNXosL83LKdwAAAMo"]
[Thu Apr 23 07:27:17.113120 2026] [:error] [pid 64998:tid 65014] [client 89.251.0.127:36993] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Thu Apr 23 07:27:18.095981 2026] [:error] [pid 64998:tid 65003] [client 89.251.0.127:36993] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aelZVoV5EysYcTLjmwj2UQAAAcE"]
[Thu Apr 23 07:27:19.133831 2026] [:error] [pid 25635:tid 25655] [client 89.251.0.137:65293] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Thu Apr 23 07:27:20.090548 2026] [:error] [pid 25635:tid 25657] [client 89.251.0.137:65293] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Thu Apr 23 07:27:20.379966 2026] [:error] [pid 25635:tid 25645] [client 89.251.0.137:65293] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Thu Apr 23 07:27:21.051302 2026] [:error] [pid 25635:tid 25656] [client 89.251.0.137:65293] [client 89.251.0.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.137, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aelZWcRxv6UsgRGKB3LhwAAAARE"]
[Thu Apr 23 07:27:22.695315 2026] [:error] [pid 25635:tid 25640] [client 89.251.0.137:65293] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aelZWsRxv6UsgRGKB3LhzAAAAQE"]
[Thu Apr 23 07:27:23.297936 2026] [:error] [pid 59700:tid 59704] [client 89.251.0.148:54643] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Thu Apr 23 07:27:23.611192 2026] [:error] [pid 59700:tid 59714] [client 89.251.0.148:54643] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aelZW5XyGZJFeAIDWtlZYwAAAUw"]
[Thu Apr 23 07:27:24.333595 2026] [:error] [pid 64967:tid 64981] [client 89.251.0.145:28505] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Thu Apr 23 07:27:24.953300 2026] [:error] [pid 64967:tid 64979] [client 89.251.0.145:28505] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Thu Apr 23 07:27:25.567571 2026] [:error] [pid 64967:tid 64975] [client 89.251.0.145:28505] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aelZXYAV4GfOOdX8QzoTMgAAAYY"]
[Thu Apr 23 07:27:26.583308 2026] [:error] [pid 42973:tid 43067] [client 89.251.0.128:31719] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Thu Apr 23 07:27:26.899887 2026] [:error] [pid 42973:tid 43051] [client 89.251.0.128:31719] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Thu Apr 23 07:27:27.215965 2026] [:error] [pid 42973:tid 43048] [client 89.251.0.128:31719] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aelZX26I0QqmmmLTHE3ayQAAAIU"]
[Thu Apr 23 07:27:27.897775 2026] [:error] [pid 25635:tid 25646] [client 89.251.0.119:41169] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aelZX8Rxv6UsgRGKB3Lh4AAAAQc"]
[Thu Apr 23 07:27:29.131735 2026] [:error] [pid 42973:tid 43056] [client 89.251.0.123:40211] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Thu Apr 23 07:27:29.439398 2026] [:error] [pid 42973:tid 43051] [client 89.251.0.123:40211] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Thu Apr 23 07:27:30.053951 2026] [:error] [pid 42973:tid 43053] [client 89.251.0.123:40211] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aelZYm6I0QqmmmLTHE3a3gAAAIo"]
[Thu Apr 23 07:27:30.726667 2026] [:error] [pid 59700:tid 59724] [client 89.251.0.117:29321] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Thu Apr 23 07:27:31.500287 2026] [:error] [pid 59700:tid 59713] [client 89.251.0.117:29321] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Thu Apr 23 07:27:31.880546 2026] [:error] [pid 59700:tid 59723] [client 89.251.0.117:29321] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aelZY5XyGZJFeAIDWtlZrAAAAVU"]
[Thu Apr 23 07:27:32.943776 2026] [:error] [pid 42972:tid 43023] [client 89.251.0.140:36971] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/db.php"] [unique_id "aelZZMOAb-3sOknsk4cg4AAAAEc"]
[Thu Apr 23 07:27:33.631316 2026] [:error] [pid 65000:tid 65053] [client 89.251.0.135:29425] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aelZZb6vRb9j6psK2ZaZNAAAAhQ"]
[Thu Apr 23 07:27:34.295410 2026] [:error] [pid 64998:tid 65020] [client 89.251.0.151:52349] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aelZZoV5EysYcTLjmwj20QAAAdI"]
[Thu Apr 23 07:27:34.982327 2026] [:error] [pid 65000:tid 65047] [client 89.251.0.126:63775] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aelZZr6vRb9j6psK2ZaZPQAAAg4"]
[Thu Apr 23 07:27:35.617640 2026] [:error] [pid 64998:tid 65016] [client 89.251.0.126:41215] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aelZZ4V5EysYcTLjmwj24AAAAc4"]
[Thu Apr 23 07:27:36.317062 2026] [:error] [pid 42971:tid 43000] [client 89.251.0.124:62445] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aelZaDEP2_5RswrH8bGqogAAAA4"]
[Thu Apr 23 07:27:37.828118 2026] [:error] [pid 42971:tid 42996] [client 89.251.0.145:22449] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aelZaTEP2_5RswrH8bGqywAAAAo"]
[Thu Apr 23 07:27:38.441461 2026] [:error] [pid 64998:tid 65022] [client 89.251.0.117:34181] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aelZaoV5EysYcTLjmwj3CQAAAdQ"]
[Thu Apr 23 07:27:39.069292 2026] [:error] [pid 25635:tid 25647] [client 89.251.0.142:22399] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aelZa8Rxv6UsgRGKB3LiDwAAAQg"]
[Thu Apr 23 07:27:39.904189 2026] [:error] [pid 42972:tid 43025] [client 89.251.0.148:23693] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aelZa8OAb-3sOknsk4chKQAAAEk"]
[Thu Apr 23 07:27:40.533910 2026] [:error] [pid 43083:tid 43098] [client 89.251.0.139:27443] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aelZbDC5hrvNXosL83LLZwAAAM0"]
[Thu Apr 23 07:27:42.346670 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.144:65399] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Thu Apr 23 07:27:43.293801 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.144:65399] [client 89.251.0.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.144, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aelZb76vRb9j6psK2ZaZlwAAAgU"]
[Thu Apr 23 07:27:45.041649 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.144:65399] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aelZcb6vRb9j6psK2ZaZvAAAAgk"]
[Thu Apr 23 07:27:46.376399 2026] [:error] [pid 64998:tid 65024] [client 89.251.0.127:31351] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Thu Apr 23 07:27:46.691795 2026] [:error] [pid 64998:tid 65009] [client 89.251.0.127:31351] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Thu Apr 23 07:27:48.516089 2026] [:error] [pid 64998:tid 65011] [client 89.251.0.127:31351] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Thu Apr 23 07:27:48.808825 2026] [:error] [pid 64998:tid 65012] [client 89.251.0.127:31351] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Thu Apr 23 07:27:50.109384 2026] [:error] [pid 64998:tid 65003] [client 89.251.0.127:31351] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Thu Apr 23 07:27:50.452866 2026] [:error] [pid 64998:tid 65025] [client 89.251.0.127:31351] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Thu Apr 23 07:27:50.870322 2026] [:error] [pid 64998:tid 65004] [client 89.251.0.127:31351] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Thu Apr 23 07:27:51.248221 2026] [:error] [pid 64998:tid 65025] [client 89.251.0.127:31351] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Thu Apr 23 07:27:51.556596 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.127:31351] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aelZd4V5EysYcTLjmwj3cwAAAcM"]
[Thu Apr 23 07:27:52.427683 2026] [:error] [pid 42972:tid 43027] [client 89.251.0.142:59663] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aelZeMOAb-3sOknsk4chngAAAEs"]
[Thu Apr 23 07:27:53.064168 2026] [:error] [pid 65000:tid 65057] [client 89.251.0.128:59273] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aelZeb6vRb9j6psK2ZaaNgAAAhg"]
[Thu Apr 23 07:27:54.099727 2026] [:error] [pid 42971:tid 43001] [client 89.251.0.126:24679] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Thu Apr 23 07:27:54.509951 2026] [:error] [pid 42971:tid 42987] [client 89.251.0.126:24679] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Thu Apr 23 07:27:55.241299 2026] [:error] [pid 42971:tid 43007] [client 89.251.0.126:24679] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Thu Apr 23 07:27:55.914178 2026] [:error] [pid 42971:tid 43008] [client 89.251.0.126:24679] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aelZezEP2_5RswrH8bGrUAAAABY"]
[Thu Apr 23 07:27:56.551460 2026] [:error] [pid 64967:tid 64981] [client 89.251.0.139:58789] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aelZfIAV4GfOOdX8QzoUIAAAAYw"]
[Thu Apr 23 07:27:57.500911 2026] [:error] [pid 64998:tid 65008] [client 89.251.0.143:38311] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aelZfYV5EysYcTLjmwj3tQAAAcY"]
[Thu Apr 23 07:27:59.493423 2026] [:error] [pid 42971:tid 42995] [client 89.251.0.144:62621] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aelZfzEP2_5RswrH8bGrZwAAAAk"]
[Thu Apr 23 07:28:00.463311 2026] [:error] [pid 65000:tid 65043] [client 89.251.0.116:55605] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aelZgL6vRb9j6psK2ZaawAAAAgo"]
[Thu Apr 23 07:28:01.798199 2026] [:error] [pid 42972:tid 43021] [client 89.251.0.128:31991] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aelZgcOAb-3sOknsk4chywAAAEU"]
[Thu Apr 23 07:28:05.914383 2026] [:error] [pid 25635:tid 25641] [client 89.251.0.119:36561] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aelZhcRxv6UsgRGKB3LizQAAAQI"]
[Thu Apr 23 07:28:06.564751 2026] [:error] [pid 64967:tid 64986] [client 89.251.0.136:47807] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Thu Apr 23 07:28:06.933040 2026] [:error] [pid 64967:tid 64991] [client 89.251.0.136:47807] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/about.php"] [unique_id "aelZhoAV4GfOOdX8QzoUUwAAAZY"]
[Thu Apr 23 07:28:08.353916 2026] [:error] [pid 42973:tid 43067] [client 89.251.0.142:39197] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Thu Apr 23 07:28:09.409487 2026] [:error] [pid 42973:tid 43055] [client 89.251.0.142:39197] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Thu Apr 23 07:28:09.730068 2026] [:error] [pid 42973:tid 43049] [client 89.251.0.142:39197] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aelZiW6I0QqmmmLTHE3bvgAAAIY"]
[Thu Apr 23 07:28:11.024150 2026] [:error] [pid 59700:tid 59725] [client 89.251.0.132:42241] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aelZi5XyGZJFeAIDWtla-wAAAVc"]
[Thu Apr 23 07:28:13.274620 2026] [:error] [pid 64998:tid 65012] [client 89.251.0.115:51803] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aelZjYV5EysYcTLjmwj4SgAAAco"]
[Thu Apr 23 07:28:16.097777 2026] [:error] [pid 42971:tid 43007] [client 89.251.0.119:24413] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aelZkDEP2_5RswrH8bGrzQAAABU"]
[Thu Apr 23 07:28:17.084574 2026] [:error] [pid 42971:tid 42989] [client 89.251.0.140:33659] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Thu Apr 23 07:28:17.381937 2026] [:error] [pid 42971:tid 42997] [client 89.251.0.140:33659] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aelZkTEP2_5RswrH8bGr6AAAAAs"]
[Thu Apr 23 07:28:18.557730 2026] [:error] [pid 64998:tid 65020] [client 89.251.0.140:31391] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aelZkoV5EysYcTLjmwj4bQAAAdI"]
[Thu Apr 23 07:28:20.745693 2026] [:error] [pid 64998:tid 65002] [client 89.251.0.139:47729] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aelZlIV5EysYcTLjmwj4kAAAAcA"]
[Thu Apr 23 07:28:21.399022 2026] [:error] [pid 59700:tid 59718] [client 89.251.0.126:39301] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Thu Apr 23 07:28:22.662250 2026] [:error] [pid 59700:tid 59706] [client 89.251.0.126:39301] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Thu Apr 23 07:28:22.973018 2026] [:error] [pid 59700:tid 59710] [client 89.251.0.126:39301] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aelZlpXyGZJFeAIDWtlbRwAAAUg"]
[Thu Apr 23 07:28:24.158726 2026] [:error] [pid 42972:tid 43037] [client 89.251.0.143:65167] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Thu Apr 23 07:28:24.849521 2026] [:error] [pid 42972:tid 43026] [client 89.251.0.143:65167] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aelZmMOAb-3sOknsk4ciVAAAAEo"]
[Thu Apr 23 07:28:25.512306 2026] [:error] [pid 42972:tid 43035] [client 89.251.0.145:23461] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aelZmcOAb-3sOknsk4ciWQAAAFM"]
[Thu Apr 23 07:28:26.433487 2026] [:error] [pid 64967:tid 64975] [client 89.251.0.121:27443] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aelZmoAV4GfOOdX8QzoVIwAAAYY"]
[Thu Apr 23 07:28:28.218133 2026] [:error] [pid 64998:tid 65017] [client 89.251.0.145:61779] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aelZnIV5EysYcTLjmwj42gAAAc8"]
[Thu Apr 23 07:28:28.793943 2026] [:error] [pid 64967:tid 64987] [client 89.251.0.129:31429] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aelZnIAV4GfOOdX8QzoVRAAAAZI"]
[Thu Apr 23 07:28:31.051640 2026] [:error] [pid 64998:tid 65007] [client 89.251.0.135:26449] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_SpaceTn.php
[Thu Apr 23 07:28:33.281815 2026] [:error] [pid 64998:tid 65012] [client 89.251.0.135:26449] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aelZoYV5EysYcTLjmwj5HQAAAco"]
[Thu Apr 23 07:28:34.534678 2026] [:error] [pid 59700:tid 59724] [client 89.251.0.134:35703] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aelZopXyGZJFeAIDWtlbpgAAAVY"]
[Thu Apr 23 07:28:35.191215 2026] [:error] [pid 64998:tid 65012] [client 89.251.0.136:29433] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aelZo4V5EysYcTLjmwj5KgAAAco"]
[Thu Apr 23 07:28:36.266798 2026] [:error] [pid 43083:tid 43099] [client 89.251.0.131:55679] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Thu Apr 23 07:28:36.577674 2026] [:error] [pid 43083:tid 43100] [client 89.251.0.131:55679] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aelZpDC5hrvNXosL83LOZAAAAM8"]
[Thu Apr 23 07:28:37.662360 2026] [:error] [pid 64967:tid 64990] [client 89.251.0.133:34991] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aelZpYAV4GfOOdX8QzoVkQAAAZU"]
[Thu Apr 23 07:28:40.474566 2026] [:error] [pid 43083:tid 43089] [client 89.251.0.144:25643] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aelZqDC5hrvNXosL83LOngAAAMQ"]
[Thu Apr 23 07:28:41.545831 2026] [:error] [pid 64998:tid 65025] [client 89.251.0.126:47063] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Thu Apr 23 07:28:41.943714 2026] [:error] [pid 64998:tid 65014] [client 89.251.0.126:47063] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aelZqYV5EysYcTLjmwj5cQAAAcw"]
[Thu Apr 23 07:28:43.464116 2026] [:error] [pid 59700:tid 59706] [client 89.251.0.143:61197] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aelZq5XyGZJFeAIDWtlcDQAAAUQ"]
[Thu Apr 23 07:28:44.529985 2026] [:error] [pid 59700:tid 59703] [client 89.251.0.123:41783] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/as.php"] [unique_id "aelZrJXyGZJFeAIDWtlcHQAAAUE"]
[Thu Apr 23 07:28:45.484945 2026] [:error] [pid 59700:tid 59710] [client 89.251.0.131:49559] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aelZrZXyGZJFeAIDWtlcJAAAAUg"]
[Thu Apr 23 07:28:46.230939 2026] [:error] [pid 64967:tid 64985] [client 89.251.0.119:59027] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/install.php"] [unique_id "aelZroAV4GfOOdX8QzoVswAAAZA"]
[Thu Apr 23 07:28:46.863886 2026] [:error] [pid 42972:tid 43022] [client 89.251.0.137:33273] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aelZrsOAb-3sOknsk4ciwAAAAEY"]
[Thu Apr 23 07:28:49.677994 2026] [:error] [pid 42971:tid 43008] [client 89.251.0.127:31333] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aelZsTEP2_5RswrH8bGs1QAAABY"]
[Thu Apr 23 07:28:52.569564 2026] [:error] [pid 43083:tid 43100] [client 89.251.0.128:27859] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aelZtDC5hrvNXosL83LPDQAAAM8"]
[Thu Apr 23 07:28:53.530637 2026] [:error] [pid 42971:tid 43010] [client 89.251.0.140:25541] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Thu Apr 23 07:28:53.830067 2026] [:error] [pid 42971:tid 42996] [client 89.251.0.140:25541] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aelZtTEP2_5RswrH8bGs8wAAAAo"]
[Thu Apr 23 07:28:55.133392 2026] [:error] [pid 43083:tid 43090] [client 89.251.0.145:53689] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aelZtzC5hrvNXosL83LPLAAAAMU"]
[Thu Apr 23 07:28:55.894196 2026] [:error] [pid 42973:tid 43066] [client 89.251.0.150:45863] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Thu Apr 23 07:28:58.103961 2026] [:error] [pid 42973:tid 43044] [client 89.251.0.150:45863] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aelZum6I0QqmmmLTHE3cyAAAAIE"]
[Thu Apr 23 07:28:59.201966 2026] [:error] [pid 25635:tid 25646] [client 89.251.0.150:34793] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aelZu8Rxv6UsgRGKB3LjwAAAAQc"]
[Thu Apr 23 07:29:00.201302 2026] [:error] [pid 64998:tid 65003] [client 89.251.0.144:28259] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aelZvIV5EysYcTLjmwj6SQAAAcE"]
[Thu Apr 23 07:29:01.810661 2026] [:error] [pid 42971:tid 42987] [client 89.251.0.123:48987] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aelZvTEP2_5RswrH8bGtMwAAAAE"]
[Thu Apr 23 07:29:05.472620 2026] [:error] [pid 64998:tid 65007] [client 89.251.0.142:51001] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aelZwYV5EysYcTLjmwj6lgAAAcU"]
[Thu Apr 23 07:29:06.116869 2026] [:error] [pid 25635:tid 25647] [client 89.251.0.126:50281] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aelZwsRxv6UsgRGKB3Lj2AAAAQg"]
[Thu Apr 23 07:29:07.851800 2026] [:error] [pid 43083:tid 43090] [client 89.251.0.144:63725] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aelZwzC5hrvNXosL83LPtQAAAMU"]
[Thu Apr 23 07:29:08.518789 2026] [:error] [pid 43083:tid 43104] [client 89.251.0.147:27971] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aelZxDC5hrvNXosL83LPuwAAANM"]
[Thu Apr 23 07:29:09.903338 2026] [:error] [pid 64967:tid 64972] [client 89.251.0.123:58173] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aelZxYAV4GfOOdX8QzoWOQAAAYM"]
[Thu Apr 23 07:29:10.602315 2026] [:error] [pid 64998:tid 65016] [client 89.251.0.124:48157] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aelZxoV5EysYcTLjmwj6wAAAAc4"]
[Thu Apr 23 07:29:11.209019 2026] [:error] [pid 65000:tid 65051] [client 89.251.0.139:43301] [client 89.251.0.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.139, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aelZx76vRb9j6psK2Zad-AAAAhI"]
[Thu Apr 23 07:29:11.219064 2026] [:error] [pid 65000:tid 65051] [client 89.251.0.139:43301] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Thu Apr 23 07:29:11.535369 2026] [:error] [pid 65000:tid 65031] [client 89.251.0.139:43301] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aelZx76vRb9j6psK2Zad_QAAAgI"]
[Thu Apr 23 07:29:12.532973 2026] [:error] [pid 64998:tid 65022] [client 89.251.0.123:37809] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Thu Apr 23 07:29:12.836995 2026] [:error] [pid 64998:tid 65026] [client 89.251.0.123:37809] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aelZyIV5EysYcTLjmwj61QAAAdg"]
[Thu Apr 23 07:29:13.472684 2026] [:error] [pid 43083:tid 43085] [client 89.251.0.119:32771] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/network.php"] [unique_id "aelZyTC5hrvNXosL83LP3gAAAMA"]
[Thu Apr 23 07:29:15.149253 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.145:53005] File does not exist: /usr/local/apache/htdocs/suspended-page/page.php
[Thu Apr 23 07:29:17.656839 2026] [:error] [pid 43083:tid 43107] [client 89.251.0.145:53005] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aelZzTC5hrvNXosL83LQCgAAANY"]
[Thu Apr 23 07:29:18.303445 2026] [:error] [pid 64967:tid 64975] [client 89.251.0.121:38397] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aelZzoAV4GfOOdX8QzoWXQAAAYY"]
[Thu Apr 23 07:29:19.714469 2026] [:error] [pid 42971:tid 42987] [client 89.251.0.142:53077] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aelZzzEP2_5RswrH8bGuMgAAAAE"]
[Thu Apr 23 07:29:20.287026 2026] [:error] [pid 59700:tid 59726] [client 89.251.0.121:39855] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aelZ0JXyGZJFeAIDWtldSQAAAVg"]
[Thu Apr 23 07:29:21.034644 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.143:52713] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Thu Apr 23 07:29:21.341588 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.143:52713] [client 89.251.0.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.143, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aelZ0b6vRb9j6psK2ZaeYQAAAgY"]
[Thu Apr 23 07:29:22.081966 2026] [:error] [pid 65000:tid 65054] [client 89.251.0.143:52713] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aelZ0r6vRb9j6psK2ZaeaQAAAhU"]
[Thu Apr 23 07:29:23.640412 2026] [:error] [pid 65000:tid 65037] [client 89.251.0.117:42565] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aelZ076vRb9j6psK2ZaehQAAAgQ"]
[Thu Apr 23 07:29:24.342944 2026] [:error] [pid 59700:tid 59703] [client 89.251.0.141:50961] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Thu Apr 23 07:29:24.654227 2026] [:error] [pid 59700:tid 59722] [client 89.251.0.141:50961] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aelZ1JXyGZJFeAIDWtldbAAAAVQ"]
[Thu Apr 23 07:29:25.251025 2026] [:error] [pid 59700:tid 59723] [client 89.251.0.134:21743] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aelZ1ZXyGZJFeAIDWtldcAAAAVU"]
[Thu Apr 23 07:29:26.074937 2026] [:error] [pid 64998:tid 65014] [client 89.251.0.151:30295] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Thu Apr 23 07:29:27.105495 2026] [:error] [pid 64998:tid 65020] [client 89.251.0.151:30295] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aelZ14V5EysYcTLjmwj7TAAAAdI"]
[Thu Apr 23 07:29:28.544523 2026] [:error] [pid 43083:tid 43092] [client 89.251.0.121:60715] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aelZ2DC5hrvNXosL83LQkwAAAMc"]
[Thu Apr 23 07:29:29.186903 2026] [:error] [pid 43083:tid 43107] [client 89.251.0.128:56269] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Thu Apr 23 07:29:29.928754 2026] [:error] [pid 43083:tid 43089] [client 89.251.0.128:56269] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Thu Apr 23 07:29:30.681119 2026] [:error] [pid 43083:tid 43090] [client 89.251.0.128:56269] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aelZ2jC5hrvNXosL83LQtwAAAMU"]
[Thu Apr 23 07:29:31.399627 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.135:43865] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aelZ24V5EysYcTLjmwj7jwAAAcM"]
[Thu Apr 23 07:29:32.497413 2026] [:error] [pid 64998:tid 65022] [client 89.251.0.124:21783] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/count.php"] [unique_id "aelZ3IV5EysYcTLjmwj7pQAAAdQ"]
[Thu Apr 23 07:29:33.214685 2026] [:error] [pid 43083:tid 43095] [client 89.251.0.132:42185] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-error_log.php
[Thu Apr 23 07:29:35.643491 2026] [:error] [pid 43083:tid 43096] [client 89.251.0.132:42185] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aelZ3zC5hrvNXosL83LQ7AAAAMs"]
[Thu Apr 23 07:29:36.898939 2026] [:error] [pid 43083:tid 43098] [client 89.251.0.134:59211] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.windfcau.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/images/stories/themes.php"] [unique_id "aelZ4DC5hrvNXosL83LRFgAAAM0"]
[Thu Apr 23 07:29:37.196085 2026] [:error] [pid 43083:tid 43104] [client 89.251.0.134:59211] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aelZ4TC5hrvNXosL83LRIgAAANM"]
[Thu Apr 23 07:29:38.457816 2026] [:error] [pid 59700:tid 59713] [client 89.251.0.138:60101] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aelZ4pXyGZJFeAIDWtld7AAAAUs"]
[Thu Apr 23 07:29:39.292375 2026] [:error] [pid 25635:tid 25656] [client 89.251.0.119:46229] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aelZ48Rxv6UsgRGKB3LkowAAARE"]
[Thu Apr 23 07:29:41.676725 2026] [:error] [pid 59700:tid 59704] [client 89.251.0.145:61457] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Thu Apr 23 07:29:43.610892 2026] [:error] [pid 59700:tid 59712] [client 89.251.0.145:61457] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aelZ55XyGZJFeAIDWtleUwAAAUo"]
[Thu Apr 23 07:29:44.826041 2026] [:error] [pid 43083:tid 43093] [client 89.251.0.116:27979] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aelZ6DC5hrvNXosL83LRrgAAAMg"]
[Thu Apr 23 07:29:45.841388 2026] [:error] [pid 59700:tid 59710] [client 89.251.0.140:47153] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aelZ6ZXyGZJFeAIDWtleegAAAUg"]
[Thu Apr 23 07:29:46.562958 2026] [:error] [pid 64998:tid 65008] [client 89.251.0.119:51603] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Thu Apr 23 07:29:48.277186 2026] [:error] [pid 64998:tid 65016] [client 89.251.0.119:51603] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aelZ7IV5EysYcTLjmwj8UwAAAc4"]
[Thu Apr 23 07:29:48.936109 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.136:26015] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aelZ7DC5hrvNXosL83LR3QAAAMI"]
[Thu Apr 23 07:29:50.225493 2026] [:error] [pid 43083:tid 43109] [client 89.251.0.139:28431] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Thu Apr 23 07:29:50.519619 2026] [:error] [pid 43083:tid 43102] [client 89.251.0.139:28431] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aelZ7jC5hrvNXosL83LSAAAAANE"]
[Thu Apr 23 07:29:51.125533 2026] [:error] [pid 64967:tid 64983] [client 89.251.0.136:56211] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aelZ74AV4GfOOdX8QzoW4gAAAY4"]
[Thu Apr 23 07:29:52.525879 2026] [:error] [pid 42971:tid 42993] [client 89.251.0.128:35023] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aelZ8DEP2_5RswrH8bGvTwAAAAc"]
[Thu Apr 23 07:29:56.656157 2026] [:error] [pid 59700:tid 59718] [client 89.251.0.134:28537] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aelZ9JXyGZJFeAIDWtle9gAAAVA"]
[Thu Apr 23 07:29:57.273617 2026] [:error] [pid 64967:tid 64979] [client 89.251.0.145:36223] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aelZ9YAV4GfOOdX8QzoXBwAAAYo"]
[Thu Apr 23 07:29:59.434370 2026] [:error] [pid 42972:tid 43040] [client 89.251.0.134:40489] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aelZ98OAb-3sOknsk4clFQAAAFg"]
[Thu Apr 23 07:30:01.047209 2026] [:error] [pid 42971:tid 43009] [client 89.251.0.120:62989] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aelZ-TEP2_5RswrH8bGvtwAAABc"]
[Thu Apr 23 07:30:01.939025 2026] [:error] [pid 42972:tid 43030] [client 89.251.0.146:23875] File does not exist: /usr/local/apache/htdocs/suspended-page/testt.php
[Thu Apr 23 07:30:03.114695 2026] [:error] [pid 42972:tid 43019] [client 89.251.0.146:23875] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aelZ-8OAb-3sOknsk4clVwAAAEM"]
[Thu Apr 23 07:30:03.827021 2026] [:error] [pid 42971:tid 43003] [client 89.251.0.150:62721] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aelZ-zEP2_5RswrH8bGv0gAAABE"]
[Thu Apr 23 07:30:04.592810 2026] [:error] [pid 64967:tid 64987] [client 89.251.0.125:60005] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aelZ_IAV4GfOOdX8QzoXIAAAAZI"]
[Thu Apr 23 07:30:05.359144 2026] [:error] [pid 42972:tid 43020] [client 89.251.0.136:25987] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Thu Apr 23 07:30:06.513603 2026] [:error] [pid 42972:tid 43038] [client 89.251.0.136:25987] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aelZ_sOAb-3sOknsk4clbwAAAFY"]
[Thu Apr 23 07:30:07.138017 2026] [:error] [pid 65000:tid 65046] [client 89.251.0.141:32361] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php
[Thu Apr 23 07:30:07.910782 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.141:32361] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aelZ_76vRb9j6psK2Zaf9wAAAgU"]
[Thu Apr 23 07:30:08.616671 2026] [:error] [pid 42972:tid 43035] [client 89.251.0.146:20337] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aelaAMOAb-3sOknsk4cleAAAAFM"]
[Thu Apr 23 07:30:09.731207 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.128:27011] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aelaAb6vRb9j6psK2ZagCAAAAhc"]
[Thu Apr 23 07:30:10.631634 2026] [:error] [pid 42971:tid 43003] [client 89.251.0.116:41795] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aelaAjEP2_5RswrH8bGwDQAAABE"]
[Thu Apr 23 07:30:12.075546 2026] [:error] [pid 42973:tid 43055] [client 89.251.0.145:42863] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aelaBG6I0QqmmmLTHE3eEwAAAIw"]
[Thu Apr 23 07:30:13.061626 2026] [:error] [pid 59700:tid 59712] [client 89.251.0.116:25821] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aelaBZXyGZJFeAIDWtlfNQAAAUo"]
[Thu Apr 23 07:30:13.782817 2026] [:error] [pid 59700:tid 59720] [client 89.251.0.141:54565] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aelaBZXyGZJFeAIDWtlfQwAAAVI"]
[Thu Apr 23 07:30:15.166855 2026] [:error] [pid 25635:tid 25663] [client 89.251.0.151:36907] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aelaB8Rxv6UsgRGKB3LlbQAAARg"]
[Thu Apr 23 07:30:16.680372 2026] [:error] [pid 65000:tid 65043] [client 89.251.0.137:37709] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aelaCL6vRb9j6psK2ZagXAAAAgo"]
[Thu Apr 23 07:30:18.191396 2026] [:error] [pid 42971:tid 43007] [client 89.251.0.140:42309] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aelaCjEP2_5RswrH8bGwMwAAABU"]
[Thu Apr 23 07:30:19.257717 2026] [:error] [pid 65000:tid 65051] [client 89.251.0.133:45309] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aelaC76vRb9j6psK2ZagywAAAhI"]
[Thu Apr 23 07:30:20.362580 2026] [:error] [pid 42972:tid 43022] [client 89.251.0.132:48601] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aelaDMOAb-3sOknsk4cl1wAAAEY"]
[Thu Apr 23 07:30:22.091368 2026] [:error] [pid 42972:tid 43030] [client 89.251.0.133:51257] File does not exist: /usr/local/apache/htdocs/suspended-page/media-new.php
[Thu Apr 23 07:30:23.428302 2026] [:error] [pid 42972:tid 43033] [client 89.251.0.133:51257] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aelaD8OAb-3sOknsk4cmBAAAAFE"]
[Thu Apr 23 07:30:25.125140 2026] [:error] [pid 65000:tid 65053] [client 89.251.0.141:55919] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aelaEb6vRb9j6psK2ZahRwAAAhQ"]
[Thu Apr 23 07:30:26.096343 2026] [:error] [pid 65000:tid 65043] [client 89.251.0.144:62395] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Thu Apr 23 07:30:26.412600 2026] [:error] [pid 65000:tid 65037] [client 89.251.0.144:62395] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aelaEr6vRb9j6psK2ZahYwAAAgQ"]
[Thu Apr 23 07:30:28.851525 2026] [:error] [pid 42971:tid 42990] [client 89.251.0.117:57125] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aelaFDEP2_5RswrH8bGwhAAAAAQ"]
[Thu Apr 23 07:30:29.950647 2026] [:error] [pid 64967:tid 64985] [client 89.251.0.136:62109] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfus.php
[Thu Apr 23 07:30:30.379978 2026] [:error] [pid 64967:tid 64972] [client 89.251.0.136:62109] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aelaFoAV4GfOOdX8QzoXmwAAAYM"]
[Thu Apr 23 07:30:31.968372 2026] [:error] [pid 64998:tid 65006] [client 89.251.0.133:55339] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aelaF4V5EysYcTLjmwj9nwAAAcQ"]
[Thu Apr 23 07:30:32.662327 2026] [:error] [pid 59700:tid 59709] [client 89.251.0.114:57453] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Thu Apr 23 07:30:32.974456 2026] [:error] [pid 59700:tid 59722] [client 89.251.0.114:57453] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aelaGJXyGZJFeAIDWtlgKwAAAVQ"]
[Thu Apr 23 07:30:34.070764 2026] [:error] [pid 59700:tid 59722] [client 89.251.0.150:37943] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aelaGpXyGZJFeAIDWtlgNwAAAVQ"]
[Thu Apr 23 07:30:36.078491 2026] [:error] [pid 59700:tid 59702] [client 89.251.0.113:48079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Thu Apr 23 07:30:36.428493 2026] [:error] [pid 59700:tid 59713] [client 89.251.0.113:48079] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aelaHJXyGZJFeAIDWtlgTgAAAUs"]
[Thu Apr 23 07:30:38.151548 2026] [:error] [pid 65000:tid 65051] [client 89.251.0.116:23745] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aelaHr6vRb9j6psK2Zah5gAAAhI"]
[Thu Apr 23 07:30:38.838004 2026] [:error] [pid 42971:tid 43009] [client 89.251.0.121:20633] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mah.php
[Thu Apr 23 07:30:39.167366 2026] [:error] [pid 42971:tid 43005] [client 89.251.0.121:20633] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aelaHzEP2_5RswrH8bGwygAAABM"]
[Thu Apr 23 07:30:39.814604 2026] [:error] [pid 65000:tid 65032] [client 89.251.0.121:60263] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aelaH76vRb9j6psK2Zah7wAAAgM"]
[Thu Apr 23 07:30:40.402782 2026] [:error] [pid 65000:tid 65050] [client 89.251.0.127:42209] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-users.php
[Thu Apr 23 07:30:41.398489 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.127:42209] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aelaIb6vRb9j6psK2ZaiBgAAAgs"]
[Thu Apr 23 07:30:42.015555 2026] [:error] [pid 42971:tid 42993] [client 89.251.0.123:45775] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aelaIjEP2_5RswrH8bGw9QAAAAc"]
[Thu Apr 23 07:30:44.953477 2026] [:error] [pid 42973:tid 43044] [client 89.251.0.145:57377] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aelaJG6I0QqmmmLTHE3eXgAAAIE"]
[Thu Apr 23 07:30:45.588098 2026] [:error] [pid 59700:tid 59726] [client 89.251.0.139:63819] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aelaJZXyGZJFeAIDWtlgiwAAAVg"]
[Thu Apr 23 07:30:46.717842 2026] [:error] [pid 42972:tid 43033] [client 89.251.0.129:21093] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/log.php"] [unique_id "aelaJsOAb-3sOknsk4cmcQAAAFE"]
[Thu Apr 23 07:30:47.528498 2026] [:error] [pid 43083:tid 43106] [client 89.251.0.116:36313] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aelaJzC5hrvNXosL83LT1AAAANU"]
[Thu Apr 23 07:30:48.501156 2026] [:error] [pid 42971:tid 43008] [client 89.251.0.141:64631] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aelaKDEP2_5RswrH8bGxJgAAABY"]
[Thu Apr 23 07:30:49.325501 2026] [:error] [pid 42971:tid 43001] [client 89.251.0.148:35493] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aelaKTEP2_5RswrH8bGxMAAAAA8"]
[Thu Apr 23 07:30:51.456230 2026] [:error] [pid 65000:tid 65046] [client 89.251.0.128:50179] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aelaK76vRb9j6psK2ZaiiwAAAg0"]
[Thu Apr 23 07:30:52.696009 2026] [:error] [pid 43083:tid 43092] [client 89.251.0.144:28621] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aelaLDC5hrvNXosL83LUAQAAAMc"]
[Thu Apr 23 07:30:54.387632 2026] [:error] [pid 42972:tid 43034] [client 89.251.0.146:41167] File does not exist: /usr/local/apache/htdocs/suspended-page/top.php
[Thu Apr 23 07:30:54.817595 2026] [:error] [pid 42972:tid 43036] [client 89.251.0.146:41167] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aelaLsOAb-3sOknsk4cmpAAAAFQ"]
[Thu Apr 23 07:30:55.538660 2026] [:error] [pid 43083:tid 43100] [client 89.251.0.146:58823] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aelaLzC5hrvNXosL83LUGgAAAM8"]
[Thu Apr 23 07:30:56.875099 2026] [:error] [pid 59700:tid 59704] [client 89.251.0.150:29043] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aelaMJXyGZJFeAIDWtlg6AAAAUI"]
[Thu Apr 23 07:30:58.103142 2026] [:error] [pid 43083:tid 43101] [client 89.251.0.145:30965] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aelaMjC5hrvNXosL83LUMgAAANA"]
[Thu Apr 23 07:31:03.409952 2026] [:error] [pid 59700:tid 59716] [client 89.251.0.139:22613] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aelaN5XyGZJFeAIDWtlhFgAAAU4"]
[Thu Apr 23 07:31:05.107178 2026] [:error] [pid 64998:tid 65008] [client 89.251.0.133:25175] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aelaOYV5EysYcTLjmwj--wAAAcY"]
[Thu Apr 23 07:31:08.351913 2026] [:error] [pid 64967:tid 64978] [client 89.251.0.116:34941] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/file.php"] [unique_id "aelaPIAV4GfOOdX8QzoYPAAAAYk"]
[Thu Apr 23 07:31:09.430188 2026] [:error] [pid 64998:tid 65024] [client 89.251.0.113:58103] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aelaPYV5EysYcTLjmwj_JQAAAdY"]
[Thu Apr 23 07:31:10.416350 2026] [:error] [pid 42971:tid 43005] [client 89.251.0.133:37171] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/load.php"] [unique_id "aelaPjEP2_5RswrH8bGxlAAAABM"]
[Thu Apr 23 07:31:11.241444 2026] [:error] [pid 64967:tid 64989] [client 89.251.0.150:28245] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aelaP4AV4GfOOdX8QzoYRQAAAZQ"]
[Thu Apr 23 07:31:12.130147 2026] [:error] [pid 64998:tid 65020] [client 89.251.0.131:26879] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aelaQIV5EysYcTLjmwj_OgAAAdI"]
[Thu Apr 23 07:31:15.046459 2026] [:error] [pid 42973:tid 43063] [client 89.251.0.117:56331] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aelaQ26I0QqmmmLTHE3e2QAAAJQ"]
[Thu Apr 23 07:31:15.824138 2026] [:error] [pid 65000:tid 65055] [client 89.251.0.151:46763] File does not exist: /usr/local/apache/htdocs/suspended-page/setup-config.php
[Thu Apr 23 07:31:16.164532 2026] [:error] [pid 65000:tid 65040] [client 89.251.0.151:46763] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aelaRL6vRb9j6psK2ZakWgAAAgc"]
[Thu Apr 23 07:31:17.351587 2026] [:error] [pid 64967:tid 64987] [client 89.251.0.115:65171] File does not exist: /usr/local/apache/htdocs/suspended-page/type.php
[Thu Apr 23 07:31:17.658696 2026] [:error] [pid 64967:tid 64972] [client 89.251.0.115:65171] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aelaRYAV4GfOOdX8QzoYZwAAAYM"]
[Thu Apr 23 07:31:20.109055 2026] [:error] [pid 59700:tid 59724] [client 89.251.0.137:62987] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aelaSJXyGZJFeAIDWtlhhQAAAVY"]
[Thu Apr 23 07:31:20.852576 2026] [:error] [pid 65000:tid 65052] [client 89.251.0.146:61495] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aelaSL6vRb9j6psK2ZakqgAAAhM"]
[Thu Apr 23 07:31:23.723870 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.143:50545] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Thu Apr 23 07:31:25.488638 2026] [:error] [pid 65000:tid 65029] [client 89.251.0.143:50545] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aelaTb6vRb9j6psK2ZalBQAAAgA"]
[Thu Apr 23 07:31:26.580902 2026] [:error] [pid 42971:tid 43006] [client 89.251.0.125:47117] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aelaTjEP2_5RswrH8bGx1AAAABQ"]
[Thu Apr 23 07:31:28.918357 2026] [:error] [pid 65000:tid 65037] [client 89.251.0.124:57615] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aelaUL6vRb9j6psK2ZalRAAAAgQ"]
[Thu Apr 23 07:31:29.630303 2026] [:error] [pid 65000:tid 65051] [client 89.251.0.139:37621] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aelaUb6vRb9j6psK2ZalVAAAAhI"]
[Thu Apr 23 07:31:31.451868 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.114:57495] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aelaU76vRb9j6psK2ZalZwAAAhA"]
[Thu Apr 23 07:31:33.188973 2026] [:error] [pid 65000:tid 65050] [client 89.251.0.148:39873] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "aelaVb6vRb9j6psK2ZalfQAAAhE"]
[Thu Apr 23 07:31:36.379119 2026] [:error] [pid 42973:tid 43056] [client 89.251.0.129:62961] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ms-pie.php"] [unique_id "aelaWG6I0QqmmmLTHE3fKwAAAI0"]
[Thu Apr 23 07:31:38.650962 2026] [:error] [pid 42972:tid 43032] [client 89.251.0.145:34287] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aelaWsOAb-3sOknsk4cnZwAAAFA"]
[Thu Apr 23 07:31:40.669498 2026] [:error] [pid 59700:tid 59713] [client 89.251.0.142:59031] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/nav-menu.php"] [unique_id "aelaXJXyGZJFeAIDWtliFAAAAUs"]
[Thu Apr 23 07:31:41.416849 2026] [:error] [pid 65000:tid 65043] [client 89.251.0.129:26555] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/user.php"] [unique_id "aelaXb6vRb9j6psK2ZalpwAAAgo"]
[Thu Apr 23 07:31:47.142974 2026] [:error] [pid 42971:tid 43006] [client 89.251.0.124:55215] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "aelaYzEP2_5RswrH8bGynAAAABQ"]
[Thu Apr 23 07:31:47.868363 2026] [:error] [pid 43083:tid 43099] [client 89.251.0.129:58495] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "aelaYzC5hrvNXosL83LWFwAAAM4"]
[Thu Apr 23 07:31:48.581870 2026] [:error] [pid 42971:tid 42992] [client 89.251.0.126:20797] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aelaZDEP2_5RswrH8bGyqAAAAAY"]
[Thu Apr 23 07:31:51.830699 2026] [:error] [pid 64998:tid 65019] [client 89.251.0.128:37681] [client 89.251.0.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.128, incrementing brute counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aelaZ4V5EysYcTLjmwgA1gAAAdE"]
[Thu Apr 23 07:32:02.361612 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.129:65207] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aelacr6vRb9j6psK2ZamTQAAAgk"]
[Thu Apr 23 07:32:03.742828 2026] [:error] [pid 43083:tid 43099] [client 89.251.0.117:59133] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "aelaczC5hrvNXosL83LWgQAAAM4"]
[Thu Apr 23 07:32:04.415063 2026] [:error] [pid 64998:tid 65014] [client 89.251.0.128:22855] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "aeladIV5EysYcTLjmwgBYAAAAcw"]
[Thu Apr 23 07:32:08.969461 2026] [:error] [pid 42972:tid 43036] [client 89.251.0.146:50279] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "aelaeMOAb-3sOknsk4coBgAAAFQ"]
[Thu Apr 23 07:32:14.237079 2026] [:error] [pid 64967:tid 64990] [client 89.251.0.134:39729] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "aelafoAV4GfOOdX8QzoZtQAAAZU"]
[Thu Apr 23 07:32:15.895383 2026] [:error] [pid 42971:tid 42997] [client 89.251.0.145:62081] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "aelafzEP2_5RswrH8bGzbQAAAAs"]
[Thu Apr 23 07:32:23.539999 2026] [:error] [pid 64998:tid 65025] [client 89.251.0.134:31585] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aelah4V5EysYcTLjmwgCPgAAAdc"]
[Thu Apr 23 07:32:24.891912 2026] [:error] [pid 25635:tid 25653] [client 89.251.0.126:33769] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aelaiMRxv6UsgRGKB3Lm6gAAAQ4"]
[Thu Apr 23 07:32:25.952415 2026] [:error] [pid 42972:tid 43031] [client 89.251.0.140:28271] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aelaicOAb-3sOknsk4coOAAAAE8"]
[Thu Apr 23 07:32:26.904179 2026] [:error] [pid 42972:tid 43021] [client 89.251.0.124:33765] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "aelaisOAb-3sOknsk4coOwAAAEU"]
[Thu Apr 23 07:32:28.599778 2026] [:error] [pid 25635:tid 25657] [client 89.251.0.148:46103] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "aelajMRxv6UsgRGKB3Lm_AAAARI"]
[Thu Apr 23 07:32:29.422287 2026] [:error] [pid 65000:tid 65031] [client 89.251.0.117:47507] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "aelajb6vRb9j6psK2Zan5AAAAgI"]
[Thu Apr 23 07:32:33.088155 2026] [:error] [pid 64998:tid 65017] [client 89.251.0.127:21573] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aelakYV5EysYcTLjmwgCmAAAAc8"]
[Thu Apr 23 07:32:35.386288 2026] [:error] [pid 42971:tid 42994] [client 89.251.0.137:50711] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "aelakzEP2_5RswrH8bG0GwAAAAg"]
[Thu Apr 23 07:32:36.143780 2026] [:error] [pid 42972:tid 43034] [client 89.251.0.143:38239] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "aelalMOAb-3sOknsk4coYwAAAFI"]
[Thu Apr 23 07:33:17.545582 2026] [autoindex:error] [pid 64998:tid 65023] [client 89.251.0.137:30387] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:21:11.444029 2026] [:error] [pid 65000:tid 65045] [client 74.241.244.158:35270] File does not exist: /usr/local/apache/htdocs/suspended-page/aboutc.php
[Thu Apr 23 10:21:11.861626 2026] [:error] [pid 65000:tid 65050] [client 74.241.244.158:35270] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Thu Apr 23 10:21:12.203568 2026] [:error] [pid 65000:tid 65057] [client 74.241.244.158:35270] File does not exist: /usr/local/apache/htdocs/suspended-page/hroxw.php
[Thu Apr 23 10:21:12.544029 2026] [:error] [pid 65000:tid 65038] [client 74.241.244.158:35270] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Thu Apr 23 10:21:13.650487 2026] [:error] [pid 65000:tid 65055] [client 74.241.244.158:35270] File does not exist: /usr/local/apache/htdocs/suspended-page/set.php
[Thu Apr 23 10:21:14.758597 2026] [:error] [pid 65000:tid 65040] [client 74.241.244.158:35270] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Thu Apr 23 10:21:16.960396 2026] [:error] [pid 65000:tid 65057] [client 74.241.244.158:35270] File does not exist: /usr/local/apache/htdocs/suspended-page/ws57.php
[Thu Apr 23 10:21:17.376400 2026] [:error] [pid 65000:tid 65044] [client 74.241.244.158:35270] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Thu Apr 23 10:21:17.708253 2026] [:error] [pid 65000:tid 65040] [client 74.241.244.158:35270] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Thu Apr 23 10:21:18.056115 2026] [:error] [pid 65000:tid 65032] [client 74.241.244.158:35270] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "aemCHr6vRb9j6psK2ZYtrgAAAgM"]
[Thu Apr 23 10:21:18.777041 2026] [:error] [pid 42971:tid 42998] [client 74.241.244.158:35204] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "aemCHjEP2_5RswrH8bHtrwAAAAw"]
[Thu Apr 23 10:21:19.573394 2026] [:error] [pid 59700:tid 59717] [client 74.241.244.158:35318] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "aemCH5XyGZJFeAIDWtmt4wAAAU8"]
[Thu Apr 23 10:21:20.286829 2026] [:error] [pid 42971:tid 42993] [client 74.241.244.158:35217] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "aemCIDEP2_5RswrH8bHtsQAAAAc"]
[Thu Apr 23 10:21:22.142885 2026] [:error] [pid 65000:tid 65032] [client 74.241.244.158:35322] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aemCIr6vRb9j6psK2ZYtzwAAAgM"]
[Thu Apr 23 10:21:22.838422 2026] [:error] [pid 64998:tid 65019] [client 74.241.244.158:35290] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aemCIoV5EysYcTLjmwigBQAAAdE"]
[Thu Apr 23 10:21:23.768198 2026] [:error] [pid 64998:tid 65021] [client 74.241.244.158:35223] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aemCI4V5EysYcTLjmwigBwAAAdM"]
[Thu Apr 23 10:21:24.433399 2026] [:error] [pid 42973:tid 43046] [client 74.241.244.158:35206] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aemCJG6I0QqmmmLTHE0XXwAAAIM"]
[Thu Apr 23 10:21:25.064510 2026] [:error] [pid 42973:tid 43051] [client 74.241.244.158:35294] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aemCJW6I0QqmmmLTHE0XYQAAAIg"]
[Thu Apr 23 10:21:25.689573 2026] [:error] [pid 42973:tid 43052] [client 74.241.244.158:35225] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aemCJW6I0QqmmmLTHE0XYgAAAIk"]
[Thu Apr 23 10:21:26.281112 2026] [:error] [pid 42973:tid 43049] [client 74.241.244.158:35274] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aemCJm6I0QqmmmLTHE0XYwAAAIY"]
[Thu Apr 23 10:21:26.897551 2026] [:error] [pid 65000:tid 65031] [client 74.241.244.158:35306] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aemCJr6vRb9j6psK2ZYt6gAAAgI"]
[Thu Apr 23 10:21:27.519546 2026] [:error] [pid 42973:tid 43059] [client 74.241.244.158:35203] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aemCJ26I0QqmmmLTHE0XZgAAAJA"]
[Thu Apr 23 10:21:28.374690 2026] [:error] [pid 64967:tid 64980] [client 74.241.244.158:35202] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aemCKIAV4GfOOdX8Qzo-2AAAAYs"]
[Thu Apr 23 10:21:29.049074 2026] [:error] [pid 42973:tid 43065] [client 74.241.244.158:35313] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aemCKW6I0QqmmmLTHE0XaQAAAJY"]
[Thu Apr 23 10:21:29.668451 2026] [:error] [pid 42973:tid 43045] [client 74.241.244.158:35304] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aemCKW6I0QqmmmLTHE0XbAAAAII"]
[Thu Apr 23 10:21:30.360382 2026] [:error] [pid 64967:tid 64978] [client 74.241.244.158:35289] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "aemCKoAV4GfOOdX8Qzo-2gAAAYk"]
[Thu Apr 23 10:21:30.977735 2026] [:error] [pid 25635:tid 25647] [client 74.241.244.158:35275] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "aemCKsRxv6UsgRGKB3IIQQAAAQg"]
[Thu Apr 23 10:21:31.896962 2026] [:error] [pid 59700:tid 59716] [client 74.241.244.158:35326] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "aemCK5XyGZJFeAIDWtmt6gAAAU4"]
[Thu Apr 23 10:21:32.557668 2026] [:error] [pid 59700:tid 59713] [client 74.241.244.158:35245] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "aemCLJXyGZJFeAIDWtmt7AAAAUs"]
[Thu Apr 23 10:21:33.215810 2026] [:error] [pid 59700:tid 59703] [client 74.241.244.158:35300] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aemCLZXyGZJFeAIDWtmt7QAAAUE"]
[Thu Apr 23 10:21:34.730342 2026] [:error] [pid 43083:tid 43107] [client 74.241.244.158:35312] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aemCLjC5hrvNXosL83IuJwAAANY"]
[Thu Apr 23 10:21:35.825222 2026] [:error] [pid 42973:tid 43059] [client 74.241.244.158:35301] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aemCL26I0QqmmmLTHE0XcwAAAJA"]
[Thu Apr 23 10:21:36.899049 2026] [:error] [pid 42973:tid 43047] [client 74.241.244.158:35218] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aemCMG6I0QqmmmLTHE0XdQAAAIQ"]
[Thu Apr 23 10:21:38.874462 2026] [:error] [pid 59700:tid 59710] [client 74.241.244.158:35231] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aemCMpXyGZJFeAIDWtmt8gAAAUg"]
[Thu Apr 23 10:21:40.358298 2026] [:error] [pid 59700:tid 59707] [client 74.241.244.158:35286] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aemCNJXyGZJFeAIDWtmt9AAAAUU"]
[Thu Apr 23 10:21:41.014171 2026] [:error] [pid 59700:tid 59715] [client 74.241.244.158:35207] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aemCNZXyGZJFeAIDWtmt9gAAAU0"]
[Thu Apr 23 10:21:41.887460 2026] [:error] [pid 65000:tid 65038] [client 74.241.244.158:11201] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aemCNb6vRb9j6psK2ZYuCgAAAgU"]
[Thu Apr 23 10:21:42.574299 2026] [:error] [pid 46953:tid 46973] [client 74.241.244.158:35222] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "aemCNknlpdHh-P6wKbrY4QAAAlE"]
[Thu Apr 23 10:21:43.192556 2026] [:error] [pid 42971:tid 43009] [client 74.241.244.158:35209] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "aemCNzEP2_5RswrH8bHtuAAAABc"]
[Thu Apr 23 10:21:44.863318 2026] [:error] [pid 42973:tid 43054] [client 74.241.244.158:11210] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "aemCOG6I0QqmmmLTHE0XggAAAIs"]
[Thu Apr 23 10:21:45.606533 2026] [:error] [pid 64967:tid 64993] [client 74.241.244.158:35324] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "aemCOYAV4GfOOdX8Qzo-5wAAAZg"]
[Thu Apr 23 10:21:46.436042 2026] [:error] [pid 43083:tid 43104] [client 74.241.244.158:35208] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "aemCOjC5hrvNXosL83IuLgAAANM"]
[Thu Apr 23 10:21:47.238944 2026] [:error] [pid 42973:tid 43048] [client 74.241.244.158:35259] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "aemCO26I0QqmmmLTHE0XiwAAAIU"]
[Thu Apr 23 10:21:47.943422 2026] [:error] [pid 42973:tid 43067] [client 74.241.244.158:35269] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "aemCO26I0QqmmmLTHE0XjwAAAJg"]
[Thu Apr 23 10:21:48.594647 2026] [:error] [pid 46953:tid 46964] [client 74.241.244.158:35215] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "aemCPEnlpdHh-P6wKbrY5AAAAkg"]
[Thu Apr 23 10:21:49.297792 2026] [:error] [pid 42973:tid 43044] [client 74.241.244.158:35226] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bmi.php"] [unique_id "aemCPW6I0QqmmmLTHE0XkwAAAIE"]
[Thu Apr 23 10:21:51.215683 2026] [:error] [pid 42973:tid 43058] [client 74.241.244.158:35229] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bmi.php"] [unique_id "aemCP26I0QqmmmLTHE0XmQAAAI8"]
[Thu Apr 23 10:21:51.868021 2026] [:error] [pid 42973:tid 43067] [client 74.241.244.158:35230] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bmi.php"] [unique_id "aemCP26I0QqmmmLTHE0XnQAAAJg"]
[Thu Apr 23 10:21:52.632015 2026] [:error] [pid 42973:tid 43052] [client 74.241.244.158:35319] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bmi.php"] [unique_id "aemCQG6I0QqmmmLTHE0XoAAAAIk"]
[Thu Apr 23 10:21:53.450797 2026] [:error] [pid 42973:tid 43044] [client 74.241.244.158:35221] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aemCQW6I0QqmmmLTHE0XpAAAAIE"]
[Thu Apr 23 10:21:54.003048 2026] [:error] [pid 64998:tid 65008] [client 74.241.244.158:35243] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aemCQoV5EysYcTLjmwigJAAAAcY"]
[Thu Apr 23 10:21:54.547430 2026] [:error] [pid 65000:tid 65037] [client 74.241.244.158:35248] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aemCQr6vRb9j6psK2ZYuIAAAAgQ"]
[Thu Apr 23 10:21:55.263352 2026] [:error] [pid 42973:tid 43060] [client 74.241.244.158:35292] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aemCQ26I0QqmmmLTHE0XqAAAAJE"]
[Thu Apr 23 10:21:55.989492 2026] [:error] [pid 59700:tid 59713] [client 74.241.244.158:35288] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "aemCQ5XyGZJFeAIDWtmuCwAAAUs"]
[Thu Apr 23 10:21:56.877987 2026] [:error] [pid 64998:tid 65003] [client 74.241.244.158:35281] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "aemCRIV5EysYcTLjmwigJgAAAcE"]
[Thu Apr 23 10:21:57.666841 2026] [:error] [pid 65000:tid 65029] [client 74.241.244.158:11225] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "aemCRb6vRb9j6psK2ZYuKAAAAgA"]
[Thu Apr 23 10:21:58.393219 2026] [:error] [pid 42973:tid 43067] [client 74.241.244.158:35320] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "aemCRm6I0QqmmmLTHE0XrQAAAJg"]
[Thu Apr 23 10:21:59.180635 2026] [:error] [pid 42973:tid 43046] [client 74.241.244.158:11247] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aemCR26I0QqmmmLTHE0XsAAAAIM"]
[Thu Apr 23 10:21:59.898135 2026] [:error] [pid 65000:tid 65039] [client 74.241.244.158:35316] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aemCR76vRb9j6psK2ZYuMAAAAgY"]
[Thu Apr 23 10:22:01.000913 2026] [:error] [pid 65000:tid 65050] [client 74.241.244.158:35210] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aemCSL6vRb9j6psK2ZYuNQAAAhE"]
[Thu Apr 23 10:22:01.824679 2026] [:error] [pid 46953:tid 46962] [client 74.241.244.158:35314] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aemCSUnlpdHh-P6wKbrY5wAAAkY"]
[Thu Apr 23 10:22:02.430647 2026] [:error] [pid 64998:tid 65018] [client 74.241.244.158:35283] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aemCSoV5EysYcTLjmwigKQAAAdA"]
[Thu Apr 23 10:22:03.091843 2026] [:error] [pid 65000:tid 65047] [client 74.241.244.158:11207] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aemCS76vRb9j6psK2ZYuPQAAAg4"]
[Thu Apr 23 10:22:03.831113 2026] [:error] [pid 64998:tid 65022] [client 74.241.244.158:35295] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aemCS4V5EysYcTLjmwigKgAAAdQ"]
[Thu Apr 23 10:22:04.708897 2026] [:error] [pid 42973:tid 43056] [client 74.241.244.158:35271] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aemCTG6I0QqmmmLTHE0XwQAAAI0"]
[Thu Apr 23 10:22:05.279500 2026] [:error] [pid 42973:tid 43059] [client 74.241.244.158:35276] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/plugin-install.php"] [unique_id "aemCTW6I0QqmmmLTHE0XxAAAAJA"]
[Thu Apr 23 10:22:06.079686 2026] [:error] [pid 42973:tid 43050] [client 74.241.244.158:35280] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/plugin-install.php"] [unique_id "aemCTm6I0QqmmmLTHE0XyQAAAIc"]
[Thu Apr 23 10:22:07.049656 2026] [:error] [pid 65000:tid 65032] [client 74.241.244.158:35220] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/plugin-install.php"] [unique_id "aemCT76vRb9j6psK2ZYuSAAAAgM"]
[Thu Apr 23 10:22:08.320603 2026] [:error] [pid 42973:tid 43062] [client 74.241.244.158:35264] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/plugin-install.php"] [unique_id "aemCUG6I0QqmmmLTHE0X0AAAAJM"]
[Thu Apr 23 10:22:09.038163 2026] [:error] [pid 65000:tid 65046] [client 74.241.244.158:35201] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aemCUb6vRb9j6psK2ZYuTwAAAg0"]
[Thu Apr 23 10:22:09.682782 2026] [:error] [pid 64998:tid 65012] [client 74.241.244.158:35238] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aemCUYV5EysYcTLjmwigLgAAAco"]
[Thu Apr 23 10:22:10.328627 2026] [:error] [pid 64998:tid 65021] [client 74.241.244.158:35244] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aemCUoV5EysYcTLjmwigMAAAAdM"]
[Thu Apr 23 10:22:11.028779 2026] [:error] [pid 42973:tid 43051] [client 74.241.244.158:35254] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aemCU26I0QqmmmLTHE0X2AAAAIg"]
[Thu Apr 23 10:22:11.650256 2026] [:error] [pid 65000:tid 65038] [client 74.241.244.158:35234] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aemCU76vRb9j6psK2ZYuWQAAAgU"]
[Thu Apr 23 10:22:12.314888 2026] [:error] [pid 59700:tid 59710] [client 74.241.244.158:35263] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aemCVJXyGZJFeAIDWtmuFQAAAUg"]
[Thu Apr 23 10:22:12.974366 2026] [:error] [pid 42973:tid 43064] [client 74.241.244.158:35262] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aemCVG6I0QqmmmLTHE0X4AAAAJU"]
[Thu Apr 23 10:22:13.567106 2026] [:error] [pid 42973:tid 43049] [client 74.241.244.158:35257] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aemCVW6I0QqmmmLTHE0X4wAAAIY"]
[Thu Apr 23 10:22:14.137832 2026] [:error] [pid 42973:tid 43051] [client 74.241.244.158:35253] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aemCVm6I0QqmmmLTHE0X5QAAAIg"]
[Thu Apr 23 10:22:14.709973 2026] [:error] [pid 43083:tid 43108] [client 74.241.244.158:35214] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aemCVjC5hrvNXosL83IuMgAAANc"]
[Thu Apr 23 10:22:15.427968 2026] [:error] [pid 42973:tid 43064] [client 74.241.244.158:35272] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aemCV26I0QqmmmLTHE0X6wAAAJU"]
[Thu Apr 23 10:22:16.068663 2026] [:error] [pid 65000:tid 65044] [client 74.241.244.158:11216] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aemCWL6vRb9j6psK2ZYuZAAAAgs"]
[Thu Apr 23 10:22:16.622015 2026] [:error] [pid 42973:tid 43046] [client 74.241.244.158:11261] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aemCWG6I0QqmmmLTHE0X7gAAAIM"]
[Thu Apr 23 10:22:17.304882 2026] [:error] [pid 65000:tid 65049] [client 74.241.244.158:11236] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Thu Apr 23 10:22:17.614680 2026] [:error] [pid 65000:tid 65038] [client 74.241.244.158:11236] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Apr 23 10:22:18.327608 2026] [:error] [pid 65000:tid 65046] [client 74.241.244.158:11236] File does not exist: /usr/local/apache/htdocs/suspended-page/ws48.php
[Thu Apr 23 10:22:18.644439 2026] [:error] [pid 65000:tid 65039] [client 74.241.244.158:11236] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Thu Apr 23 10:22:18.951671 2026] [:error] [pid 65000:tid 65045] [client 74.241.244.158:11236] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Thu Apr 23 10:22:19.263844 2026] [:error] [pid 65000:tid 65051] [client 74.241.244.158:11236] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-p2r3q9c8k4.php
[Thu Apr 23 10:22:19.582681 2026] [:error] [pid 65000:tid 65052] [client 74.241.244.158:11236] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Thu Apr 23 10:22:19.888295 2026] [:error] [pid 65000:tid 65057] [client 74.241.244.158:11236] File does not exist: /usr/local/apache/htdocs/suspended-page/eetu.php
[Thu Apr 23 10:22:20.202814 2026] [:error] [pid 65000:tid 65056] [client 74.241.244.158:11236] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Thu Apr 23 10:22:20.508726 2026] [:error] [pid 65000:tid 65044] [client 74.241.244.158:11236] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Thu Apr 23 10:22:20.813810 2026] [:error] [pid 65000:tid 65043] [client 74.241.244.158:11236] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "aemCXL6vRb9j6psK2ZYueQAAAgo"]
[Thu Apr 23 10:22:21.379820 2026] [:error] [pid 65000:tid 65049] [client 74.241.244.158:11203] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "aemCXb6vRb9j6psK2ZYuewAAAhA"]
[Thu Apr 23 10:22:22.007771 2026] [:error] [pid 65000:tid 65048] [client 74.241.244.158:35287] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "aemCXr6vRb9j6psK2ZYufQAAAg8"]
[Thu Apr 23 10:22:22.631836 2026] [:error] [pid 42973:tid 43059] [client 74.241.244.158:35211] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "aemCXm6I0QqmmmLTHE0X-QAAAJA"]
[Thu Apr 23 10:22:23.307880 2026] [:error] [pid 59700:tid 59711] [client 74.241.244.158:11150] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xx.php"] [unique_id "aemCX5XyGZJFeAIDWtmuHQAAAUk"]
[Thu Apr 23 10:22:23.904361 2026] [:error] [pid 59700:tid 59726] [client 74.241.244.158:11215] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xx.php"] [unique_id "aemCX5XyGZJFeAIDWtmuHgAAAVg"]
[Thu Apr 23 10:22:24.489562 2026] [:error] [pid 59700:tid 59709] [client 74.241.244.158:35252] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xx.php"] [unique_id "aemCYJXyGZJFeAIDWtmuHwAAAUc"]
[Thu Apr 23 10:22:25.406250 2026] [:error] [pid 42971:tid 42993] [client 74.241.244.158:35250] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xx.php"] [unique_id "aemCYTEP2_5RswrH8bHtvAAAAAc"]
[Thu Apr 23 10:22:26.052680 2026] [:error] [pid 65000:tid 65048] [client 74.241.244.158:11254] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aemCYr6vRb9j6psK2ZYuiQAAAg8"]
[Thu Apr 23 10:22:26.824968 2026] [:error] [pid 65000:tid 65046] [client 74.241.244.158:35284] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aemCYr6vRb9j6psK2ZYujAAAAg0"]
[Thu Apr 23 10:22:27.420272 2026] [:error] [pid 65000:tid 65032] [client 74.241.244.158:35268] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aemCY76vRb9j6psK2ZYujgAAAgM"]
[Thu Apr 23 10:22:28.136984 2026] [:error] [pid 42973:tid 43061] [client 74.241.244.158:35258] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aemCZG6I0QqmmmLTHE0YCQAAAJI"]
[Thu Apr 23 10:22:29.679448 2026] [:error] [pid 65000:tid 65038] [client 74.241.244.158:35269] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aemCZb6vRb9j6psK2ZYumAAAAgU"]
[Thu Apr 23 10:22:30.358352 2026] [:error] [pid 65000:tid 65031] [client 74.241.244.158:35277] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aemCZr6vRb9j6psK2ZYunAAAAgI"]
[Thu Apr 23 10:22:31.021690 2026] [:error] [pid 65000:tid 65046] [client 74.241.244.158:11234] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aemCZ76vRb9j6psK2ZYuoQAAAg0"]
[Thu Apr 23 10:22:32.838649 2026] [:error] [pid 64998:tid 65010] [client 74.241.244.158:35295] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aemCaIV5EysYcTLjmwigQgAAAcg"]
[Thu Apr 23 10:22:33.677011 2026] [:error] [pid 65000:tid 65057] [client 74.241.244.158:11205] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aemCab6vRb9j6psK2ZYupgAAAhg"]
[Thu Apr 23 10:22:34.288951 2026] [:error] [pid 42973:tid 43050] [client 74.241.244.158:35205] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aemCam6I0QqmmmLTHE0YFQAAAIc"]
[Thu Apr 23 10:22:35.097895 2026] [:error] [pid 59700:tid 59717] [client 74.241.244.158:35303] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aemCa5XyGZJFeAIDWtmuJAAAAU8"]
[Thu Apr 23 10:22:36.069610 2026] [:error] [pid 65000:tid 65045] [client 74.241.244.158:35323] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aemCbL6vRb9j6psK2ZYuqwAAAgw"]
[Thu Apr 23 10:22:36.755154 2026] [:error] [pid 64998:tid 65022] [client 74.241.244.158:35317] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "aemCbIV5EysYcTLjmwigSQAAAdQ"]
[Thu Apr 23 10:22:37.610471 2026] [:error] [pid 65000:tid 65057] [client 74.241.244.158:35309] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "aemCbb6vRb9j6psK2ZYusQAAAhg"]
[Thu Apr 23 10:22:38.474836 2026] [:error] [pid 64998:tid 65007] [client 74.241.244.158:11230] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "aemCboV5EysYcTLjmwigSgAAAcU"]
[Thu Apr 23 10:22:39.362258 2026] [:error] [pid 65000:tid 65045] [client 74.241.244.158:11246] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "aemCb76vRb9j6psK2ZYutgAAAgw"]
[Thu Apr 23 10:22:40.134060 2026] [:error] [pid 59700:tid 59708] [client 74.241.244.158:35273] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Jcrop.php"] [unique_id "aemCcJXyGZJFeAIDWtmuKwAAAUY"]
[Thu Apr 23 10:22:41.096842 2026] [:error] [pid 64998:tid 65021] [client 74.241.244.158:35242] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Jcrop.php"] [unique_id "aemCcYV5EysYcTLjmwigSwAAAdM"]
[Thu Apr 23 10:22:41.901308 2026] [:error] [pid 64998:tid 65020] [client 74.241.244.158:11202] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Jcrop.php"] [unique_id "aemCcYV5EysYcTLjmwigTAAAAdI"]
[Thu Apr 23 10:22:42.617538 2026] [:error] [pid 65000:tid 65050] [client 74.241.244.158:11204] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Jcrop.php"] [unique_id "aemCcr6vRb9j6psK2ZYuwwAAAhE"]
[Thu Apr 23 10:22:43.323345 2026] [:error] [pid 65000:tid 65042] [client 74.241.244.158:35315] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aemCc76vRb9j6psK2ZYuxwAAAgk"]
[Thu Apr 23 10:22:43.949420 2026] [:error] [pid 64998:tid 65026] [client 74.241.244.158:35267] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aemCc4V5EysYcTLjmwigTQAAAdg"]
[Thu Apr 23 10:22:44.634694 2026] [:error] [pid 65000:tid 65048] [client 74.241.244.158:35256] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aemCdL6vRb9j6psK2ZYuzQAAAg8"]
[Thu Apr 23 10:22:45.272480 2026] [:error] [pid 42973:tid 43067] [client 74.241.244.158:35260] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aemCdW6I0QqmmmLTHE0YJgAAAJg"]
[Thu Apr 23 10:22:47.172252 2026] [:error] [pid 43083:tid 43088] [client 74.241.244.158:11213] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aemCdzC5hrvNXosL83IuNgAAAMM"]
[Thu Apr 23 10:22:48.024988 2026] [:error] [pid 65000:tid 65053] [client 74.241.244.158:11238] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aemCeL6vRb9j6psK2ZYu2gAAAhQ"]
[Thu Apr 23 10:22:48.848558 2026] [:error] [pid 65000:tid 65054] [client 74.241.244.158:11138] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aemCeL6vRb9j6psK2ZYu6QAAAhU"]
[Thu Apr 23 10:22:49.492940 2026] [:error] [pid 65000:tid 65041] [client 74.241.244.158:11251] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aemCeb6vRb9j6psK2ZYu8gAAAgg"]
[Thu Apr 23 10:22:50.171412 2026] [:error] [pid 65000:tid 65047] [client 74.241.244.158:11212] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aemCer6vRb9j6psK2ZYu_wAAAg4"]
[Thu Apr 23 10:22:50.797905 2026] [:error] [pid 65000:tid 65054] [client 74.241.244.158:11208] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aemCer6vRb9j6psK2ZYvDQAAAhU"]
[Thu Apr 23 10:22:51.509649 2026] [:error] [pid 42973:tid 43048] [client 74.241.244.158:35302] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aemCe26I0QqmmmLTHE0YMQAAAIU"]
[Thu Apr 23 10:22:52.179112 2026] [:error] [pid 65000:tid 65049] [client 74.241.244.158:35291] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aemCfL6vRb9j6psK2ZYvFgAAAhA"]
[Thu Apr 23 10:22:52.966736 2026] [:error] [pid 42973:tid 43047] [client 74.241.244.158:35298] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aemCfG6I0QqmmmLTHE0YMwAAAIQ"]
[Thu Apr 23 10:22:53.584920 2026] [:error] [pid 42973:tid 43060] [client 74.241.244.158:35296] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aemCfW6I0QqmmmLTHE0YNgAAAJE"]
[Thu Apr 23 10:22:54.138930 2026] [:error] [pid 42973:tid 43054] [client 74.241.244.158:35213] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aemCfm6I0QqmmmLTHE0YNwAAAIs"]
[Thu Apr 23 10:22:54.769833 2026] [:error] [pid 46953:tid 46976] [client 74.241.244.158:35216] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aemCfknlpdHh-P6wKbrY7wAAAlQ"]
[Thu Apr 23 10:22:55.488540 2026] [:error] [pid 65000:tid 65042] [client 74.241.244.158:11258] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aemCf76vRb9j6psK2ZYvGQAAAgk"]
[Thu Apr 23 10:22:56.201152 2026] [:error] [pid 59700:tid 59704] [client 74.241.244.158:35307] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aemCgJXyGZJFeAIDWtmuOwAAAUI"]
[Thu Apr 23 10:22:56.859596 2026] [:error] [pid 42973:tid 43056] [client 74.241.244.158:11244] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aemCgG6I0QqmmmLTHE0YQwAAAI0"]
[Thu Apr 23 10:22:57.598405 2026] [:error] [pid 42973:tid 43060] [client 74.241.244.158:11226] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aemCgW6I0QqmmmLTHE0YRwAAAJE"]
[Thu Apr 23 10:22:58.309580 2026] [:error] [pid 42973:tid 43051] [client 74.241.244.158:11227] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aemCgm6I0QqmmmLTHE0YTQAAAIg"]
[Thu Apr 23 10:22:59.208999 2026] [:error] [pid 65000:tid 65030] [client 74.241.244.158:11154] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aemCg76vRb9j6psK2ZYvKwAAAgE"]
[Thu Apr 23 10:22:59.993724 2026] [:error] [pid 65000:tid 65031] [client 74.241.244.158:11147] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aemCg76vRb9j6psK2ZYvNQAAAgI"]
[Thu Apr 23 10:23:00.612372 2026] [:error] [pid 65000:tid 65042] [client 74.241.244.158:11256] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aemChL6vRb9j6psK2ZYvOQAAAgk"]
[Thu Apr 23 10:23:01.208015 2026] [:error] [pid 42971:tid 42989] [client 74.241.244.158:35310] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tymn.php"] [unique_id "aemChTEP2_5RswrH8bHtvQAAAAM"]
[Thu Apr 23 10:23:01.849700 2026] [:error] [pid 42973:tid 43058] [client 74.241.244.158:35236] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tymn.php"] [unique_id "aemChW6I0QqmmmLTHE0YXQAAAI8"]
[Thu Apr 23 10:23:02.508003 2026] [:error] [pid 65000:tid 65057] [client 74.241.244.158:35232] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tymn.php"] [unique_id "aemChr6vRb9j6psK2ZYvPAAAAhg"]
[Thu Apr 23 10:23:03.424773 2026] [:error] [pid 42972:tid 43028] [client 74.241.244.158:35325] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tymn.php"] [unique_id "aemCh8OAb-3sOknsk4dTcQAAAEw"]
[Thu Apr 23 10:23:04.280910 2026] [:error] [pid 64967:tid 64986] [client 74.241.244.158:11241] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "aemCiIAV4GfOOdX8Qzo-7AAAAZE"]
[Thu Apr 23 10:23:05.304050 2026] [:error] [pid 65000:tid 65042] [client 74.241.244.158:11245] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "aemCib6vRb9j6psK2ZYvQQAAAgk"]
[Thu Apr 23 10:23:05.994927 2026] [:error] [pid 25635:tid 25657] [client 74.241.244.158:11140] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "aemCicRxv6UsgRGKB3IISQAAARI"]
[Thu Apr 23 10:23:06.779465 2026] [:error] [pid 64998:tid 65012] [client 74.241.244.158:35235] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "aemCioV5EysYcTLjmwigWAAAAco"]
[Thu Apr 23 10:23:07.752637 2026] [:error] [pid 65000:tid 65044] [client 74.241.244.158:11223] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aemCi76vRb9j6psK2ZYvRwAAAgs"]
[Thu Apr 23 10:23:08.771470 2026] [:error] [pid 65000:tid 65050] [client 74.241.244.158:11249] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aemCjL6vRb9j6psK2ZYvSwAAAhE"]
[Thu Apr 23 10:23:09.409752 2026] [:error] [pid 65000:tid 65056] [client 74.241.244.158:35251] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aemCjb6vRb9j6psK2ZYvTwAAAhc"]
[Thu Apr 23 10:23:10.458488 2026] [:error] [pid 65000:tid 65032] [client 74.241.244.158:11235] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aemCjr6vRb9j6psK2ZYvVQAAAgM"]
[Thu Apr 23 10:23:11.270824 2026] [:error] [pid 65000:tid 65040] [client 74.241.244.158:11222] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "aemCj76vRb9j6psK2ZYvWAAAAgc"]
[Thu Apr 23 10:23:12.047388 2026] [:error] [pid 65000:tid 65054] [client 74.241.244.158:35227] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "aemCkL6vRb9j6psK2ZYvWwAAAhU"]
[Thu Apr 23 10:23:12.633337 2026] [:error] [pid 65000:tid 65031] [client 74.241.244.158:35249] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "aemCkL6vRb9j6psK2ZYvXQAAAgI"]
[Thu Apr 23 10:23:13.308976 2026] [:error] [pid 65000:tid 65055] [client 74.241.244.158:35224] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "aemCkb6vRb9j6psK2ZYvXwAAAhY"]
[Thu Apr 23 10:23:14.155489 2026] [:error] [pid 42973:tid 43051] [client 74.241.244.158:35299] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "aemCkm6I0QqmmmLTHE0YdgAAAIg"]
[Thu Apr 23 10:23:14.903967 2026] [:error] [pid 65000:tid 65047] [client 74.241.244.158:11200] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "aemCkr6vRb9j6psK2ZYvYgAAAg4"]
[Thu Apr 23 10:23:15.688893 2026] [:error] [pid 42973:tid 43056] [client 74.241.244.158:35239] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "aemCk26I0QqmmmLTHE0YeQAAAI0"]
[Thu Apr 23 10:23:16.465219 2026] [:error] [pid 65000:tid 65054] [client 74.241.244.158:11221] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "aemClL6vRb9j6psK2ZYvagAAAhU"]
[Thu Apr 23 10:23:17.089076 2026] [:error] [pid 65000:tid 65037] [client 74.241.244.158:11258] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-class-atom.php"] [unique_id "aemClb6vRb9j6psK2ZYvawAAAgQ"]
[Thu Apr 23 10:23:17.785633 2026] [:error] [pid 64998:tid 65018] [client 74.241.244.158:11163] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-class-atom.php"] [unique_id "aemClYV5EysYcTLjmwigfQAAAdA"]
[Thu Apr 23 10:23:18.591775 2026] [:error] [pid 64998:tid 65023] [client 74.241.244.158:35237] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-class-atom.php"] [unique_id "aemCloV5EysYcTLjmwigfwAAAdU"]
[Thu Apr 23 10:23:19.417476 2026] [:error] [pid 43083:tid 43107] [client 74.241.244.158:35233] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-class-atom.php"] [unique_id "aemClzC5hrvNXosL83IuQQAAANY"]
[Thu Apr 23 10:23:20.112625 2026] [:error] [pid 42971:tid 42997] [client 74.241.244.158:35219] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Thu Apr 23 10:23:20.443253 2026] [:error] [pid 42971:tid 42995] [client 74.241.244.158:35219] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Thu Apr 23 10:23:20.742288 2026] [:error] [pid 42971:tid 42994] [client 74.241.244.158:35219] File does not exist: /usr/local/apache/htdocs/suspended-page/900.php
[Thu Apr 23 10:23:21.043196 2026] [:error] [pid 42971:tid 43008] [client 74.241.244.158:35219] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Thu Apr 23 10:23:21.354290 2026] [:error] [pid 42971:tid 43009] [client 74.241.244.158:35219] File does not exist: /usr/local/apache/htdocs/suspended-page/jk.php
[Thu Apr 23 10:23:21.654477 2026] [:error] [pid 42971:tid 43007] [client 74.241.244.158:35219] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Thu Apr 23 10:23:21.954439 2026] [:error] [pid 42971:tid 42992] [client 74.241.244.158:35219] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu Apr 23 10:23:22.254423 2026] [:error] [pid 42971:tid 42999] [client 74.241.244.158:35219] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Apr 23 10:23:22.554933 2026] [:error] [pid 42971:tid 43004] [client 74.241.244.158:35219] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Thu Apr 23 10:23:22.979873 2026] [:error] [pid 42971:tid 42998] [client 74.241.244.158:35219] File does not exist: /usr/local/apache/htdocs/suspended-page/mode.php
[Thu Apr 23 10:23:23.280776 2026] [:error] [pid 42971:tid 42993] [client 74.241.244.158:35219] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Apr 23 10:23:23.764663 2026] [:error] [pid 42971:tid 43002] [client 74.241.244.158:35219] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aemCmzEP2_5RswrH8bHt0QAAABA"]
[Thu Apr 23 10:23:24.553888 2026] [:error] [pid 42973:tid 43048] [client 74.241.244.158:35241] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aemCnG6I0QqmmmLTHE0YiwAAAIU"]
[Thu Apr 23 10:23:25.378429 2026] [:error] [pid 42973:tid 43064] [client 74.241.244.158:11162] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aemCnW6I0QqmmmLTHE0YjAAAAJU"]
[Thu Apr 23 10:23:26.136089 2026] [:error] [pid 43083:tid 43106] [client 74.241.244.158:11082] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aemCnjC5hrvNXosL83IuQgAAANU"]
[Thu Apr 23 10:23:26.901169 2026] [:error] [pid 59700:tid 59703] [client 74.241.244.158:11209] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "aemCnpXyGZJFeAIDWtmuVAAAAUE"]
[Thu Apr 23 10:23:27.748802 2026] [:error] [pid 42973:tid 43050] [client 74.241.244.158:11184] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "aemCn26I0QqmmmLTHE0YkQAAAIc"]
[Thu Apr 23 10:23:28.573398 2026] [:error] [pid 46953:tid 46964] [client 74.241.244.158:11257] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "aemCoEnlpdHh-P6wKbrZAAAAAkg"]
[Thu Apr 23 10:23:29.425015 2026] [:error] [pid 46953:tid 46981] [client 74.241.244.158:35282] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "aemCoUnlpdHh-P6wKbrZAQAAAlg"]
[Thu Apr 23 10:23:30.129818 2026] [:error] [pid 46953:tid 46975] [client 74.241.244.158:11175] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adoms.php"] [unique_id "aemCoknlpdHh-P6wKbrZAgAAAlM"]
[Thu Apr 23 10:23:31.045975 2026] [:error] [pid 42973:tid 43051] [client 74.241.244.158:35240] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adoms.php"] [unique_id "aemCo26I0QqmmmLTHE0YmgAAAIg"]
[Thu Apr 23 10:23:31.771477 2026] [:error] [pid 46953:tid 46957] [client 74.241.244.158:11262] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adoms.php"] [unique_id "aemCo0nlpdHh-P6wKbrZBQAAAkE"]
[Thu Apr 23 10:23:32.519115 2026] [:error] [pid 65000:tid 65040] [client 74.241.244.158:11260] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adoms.php"] [unique_id "aemCpL6vRb9j6psK2ZYveAAAAgc"]
[Thu Apr 23 10:23:33.449377 2026] [:error] [pid 42973:tid 43054] [client 74.241.244.158:11146] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/plugin-editor.php"] [unique_id "aemCpW6I0QqmmmLTHE0YowAAAIs"]
[Thu Apr 23 10:23:34.389479 2026] [:error] [pid 59700:tid 59718] [client 74.241.244.158:11252] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/plugin-editor.php"] [unique_id "aemCppXyGZJFeAIDWtmuVwAAAVA"]
[Thu Apr 23 10:23:35.148828 2026] [:error] [pid 59700:tid 59723] [client 74.241.244.158:35255] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/plugin-editor.php"] [unique_id "aemCp5XyGZJFeAIDWtmuWAAAAVU"]
[Thu Apr 23 10:23:35.956741 2026] [:error] [pid 42973:tid 43051] [client 74.241.244.158:35200] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/plugin-editor.php"] [unique_id "aemCp26I0QqmmmLTHE0YsAAAAIg"]
[Thu Apr 23 10:23:36.787464 2026] [:error] [pid 42973:tid 43065] [client 74.241.244.158:35305] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "aemCqG6I0QqmmmLTHE0YtQAAAJY"]
[Thu Apr 23 10:23:37.444445 2026] [:error] [pid 42973:tid 43054] [client 74.241.244.158:11229] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "aemCqW6I0QqmmmLTHE0YtgAAAIs"]
[Thu Apr 23 10:23:38.135919 2026] [:error] [pid 42973:tid 43062] [client 74.241.244.158:35279] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "aemCqm6I0QqmmmLTHE0YuAAAAJM"]
[Thu Apr 23 10:23:39.001375 2026] [:error] [pid 42973:tid 43053] [client 74.241.244.158:35228] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "aemCqm6I0QqmmmLTHE0YvgAAAIo"]
[Thu Apr 23 10:23:39.760894 2026] [:error] [pid 25635:tid 25653] [client 74.241.244.158:11170] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "aemCq8Rxv6UsgRGKB3IISwAAAQ4"]
[Thu Apr 23 10:23:40.433782 2026] [:error] [pid 65000:tid 65032] [client 74.241.244.158:11151] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "aemCrL6vRb9j6psK2ZYvfgAAAgM"]
[Thu Apr 23 10:23:41.245647 2026] [:error] [pid 65000:tid 65037] [client 74.241.244.158:35212] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "aemCrb6vRb9j6psK2ZYvggAAAgQ"]
[Thu Apr 23 10:23:41.957759 2026] [:error] [pid 42971:tid 42996] [client 74.241.244.158:35201] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "aemCrTEP2_5RswrH8bHt0gAAAAo"]
[Thu Apr 23 10:23:42.644258 2026] [:error] [pid 65000:tid 65030] [client 74.241.244.158:11176] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "aemCrr6vRb9j6psK2ZYvigAAAgE"]
[Thu Apr 23 10:23:43.235604 2026] [:error] [pid 65000:tid 65051] [client 74.241.244.158:11218] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "aemCr76vRb9j6psK2ZYvjAAAAhI"]
[Thu Apr 23 10:23:43.933415 2026] [:error] [pid 65000:tid 65032] [client 74.241.244.158:11206] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "aemCr76vRb9j6psK2ZYvjQAAAgM"]
[Thu Apr 23 10:23:44.779852 2026] [:error] [pid 65000:tid 65052] [client 74.241.244.158:11152] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "aemCsL6vRb9j6psK2ZYvkAAAAhM"]
[Thu Apr 23 10:23:45.542479 2026] [:error] [pid 59700:tid 59704] [client 74.241.244.158:11263] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aemCsZXyGZJFeAIDWtmuXAAAAUI"]
[Thu Apr 23 10:23:46.166793 2026] [:error] [pid 64998:tid 65024] [client 74.241.244.158:11220] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aemCsoV5EysYcTLjmwigogAAAdY"]
[Thu Apr 23 10:23:46.726150 2026] [:error] [pid 42973:tid 43064] [client 74.241.244.158:11160] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aemCsm6I0QqmmmLTHE0YwwAAAJU"]
[Thu Apr 23 10:23:47.349565 2026] [:error] [pid 65000:tid 65047] [client 74.241.244.158:11192] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aemCs76vRb9j6psK2ZYvmAAAAg4"]
[Thu Apr 23 10:23:48.408750 2026] [:error] [pid 42973:tid 43062] [client 74.241.244.158:11193] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/profile.php"] [unique_id "aemCtG6I0QqmmmLTHE0YxQAAAJM"]
[Thu Apr 23 10:23:49.133681 2026] [:error] [pid 64998:tid 65011] [client 74.241.244.158:11112] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/profile.php"] [unique_id "aemCtYV5EysYcTLjmwigpQAAAck"]
[Thu Apr 23 10:23:49.747329 2026] [:error] [pid 42971:tid 42988] [client 74.241.244.158:11137] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/profile.php"] [unique_id "aemCtTEP2_5RswrH8bHt1QAAAAI"]
[Thu Apr 23 10:23:50.336936 2026] [:error] [pid 59700:tid 59707] [client 74.241.244.158:11088] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/profile.php"] [unique_id "aemCtpXyGZJFeAIDWtmuYQAAAUU"]
[Thu Apr 23 10:23:50.874981 2026] [:error] [pid 65000:tid 65046] [client 74.241.244.158:11183] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gaza.php"] [unique_id "aemCtr6vRb9j6psK2ZYvowAAAg0"]
[Thu Apr 23 10:23:51.563498 2026] [:error] [pid 64998:tid 65026] [client 74.241.244.158:11211] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gaza.php"] [unique_id "aemCt4V5EysYcTLjmwigqQAAAdg"]
[Thu Apr 23 10:23:52.201104 2026] [:error] [pid 65000:tid 65049] [client 74.241.244.158:11240] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gaza.php"] [unique_id "aemCuL6vRb9j6psK2ZYvpwAAAhA"]
[Thu Apr 23 10:23:52.933630 2026] [:error] [pid 64998:tid 65015] [client 74.241.244.158:11077] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gaza.php"] [unique_id "aemCuIV5EysYcTLjmwigrwAAAc0"]
[Thu Apr 23 10:23:53.716752 2026] [:error] [pid 65000:tid 65046] [client 74.241.244.158:11076] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aemCub6vRb9j6psK2ZYvsAAAAg0"]
[Thu Apr 23 10:23:54.463394 2026] [:error] [pid 64998:tid 65008] [client 74.241.244.158:35293] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aemCuoV5EysYcTLjmwigswAAAcY"]
[Thu Apr 23 10:23:55.097589 2026] [:error] [pid 65000:tid 65054] [client 74.241.244.158:35246] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aemCu76vRb9j6psK2ZYvtgAAAhU"]
[Thu Apr 23 10:23:55.700004 2026] [:error] [pid 65000:tid 65044] [client 74.241.244.158:35278] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aemCu76vRb9j6psK2ZYvuAAAAgs"]
[Thu Apr 23 10:23:56.295913 2026] [:error] [pid 65000:tid 65037] [client 74.241.244.158:11217] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aemCvL6vRb9j6psK2ZYvvQAAAgQ"]
[Thu Apr 23 10:23:56.861948 2026] [:error] [pid 65000:tid 65042] [client 74.241.244.158:11178] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aemCvL6vRb9j6psK2ZYvwgAAAgk"]
[Thu Apr 23 10:23:57.445774 2026] [:error] [pid 65000:tid 65046] [client 74.241.244.158:11239] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aemCvb6vRb9j6psK2ZYvyAAAAg0"]
[Thu Apr 23 10:23:58.087404 2026] [:error] [pid 65000:tid 65030] [client 74.241.244.158:11219] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aemCvr6vRb9j6psK2ZYvzgAAAgE"]
[Thu Apr 23 10:23:58.828865 2026] [:error] [pid 64998:tid 65004] [client 74.241.244.158:11243] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "aemCvoV5EysYcTLjmwiguAAAAcI"]
[Thu Apr 23 10:23:59.524162 2026] [:error] [pid 65000:tid 65054] [client 74.241.244.158:35327] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "aemCv76vRb9j6psK2ZYv1gAAAhU"]
[Thu Apr 23 10:24:00.387195 2026] [:error] [pid 64998:tid 65006] [client 74.241.244.158:11237] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "aemCwIV5EysYcTLjmwigvAAAAcQ"]
[Thu Apr 23 10:24:01.154545 2026] [:error] [pid 42973:tid 43050] [client 74.241.244.158:11233] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "aemCwW6I0QqmmmLTHE0Y0wAAAIc"]
[Thu Apr 23 10:24:01.764924 2026] [:error] [pid 42973:tid 43058] [client 74.241.244.158:11198] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aemCwW6I0QqmmmLTHE0Y2AAAAI8"]
[Thu Apr 23 10:24:02.526933 2026] [:error] [pid 59700:tid 59720] [client 74.241.244.158:11166] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aemCwpXyGZJFeAIDWtmubAAAAVI"]
[Thu Apr 23 10:24:03.321807 2026] [:error] [pid 42973:tid 43059] [client 74.241.244.158:11008] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aemCw26I0QqmmmLTHE0Y3QAAAJA"]
[Thu Apr 23 10:24:04.044015 2026] [:error] [pid 64998:tid 65011] [client 74.241.244.158:11141] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aemCxIV5EysYcTLjmwigwgAAAck"]
[Thu Apr 23 10:24:04.731455 2026] [:error] [pid 64998:tid 65012] [client 74.241.244.158:11153] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/yw5bi63u.php"] [unique_id "aemCxIV5EysYcTLjmwigxAAAAco"]
[Thu Apr 23 10:24:05.301832 2026] [:error] [pid 64998:tid 65026] [client 74.241.244.158:11019] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/yw5bi63u.php"] [unique_id "aemCxYV5EysYcTLjmwigxgAAAdg"]
[Thu Apr 23 10:24:05.998435 2026] [:error] [pid 64998:tid 65004] [client 74.241.244.158:11242] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/yw5bi63u.php"] [unique_id "aemCxYV5EysYcTLjmwigxwAAAcI"]
[Thu Apr 23 10:24:06.653341 2026] [:error] [pid 64998:tid 65006] [client 74.241.244.158:11181] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/yw5bi63u.php"] [unique_id "aemCxoV5EysYcTLjmwigyQAAAcQ"]
[Thu Apr 23 10:24:08.478753 2026] [:error] [pid 42973:tid 43046] [client 74.241.244.158:11142] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aemCyG6I0QqmmmLTHE0Y5QAAAIM"]
[Thu Apr 23 10:24:09.359832 2026] [:error] [pid 65000:tid 65047] [client 74.241.244.158:35261] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aemCyb6vRb9j6psK2ZYv4AAAAg4"]
[Thu Apr 23 10:24:10.087707 2026] [:error] [pid 64967:tid 64976] [client 74.241.244.158:11144] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aemCyoAV4GfOOdX8Qzo_CgAAAYc"]
[Thu Apr 23 10:24:10.868270 2026] [:error] [pid 42971:tid 43007] [client 74.241.244.158:11173] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aemCyjEP2_5RswrH8bHt3gAAABU"]
[Thu Apr 23 10:24:11.797699 2026] [:error] [pid 42973:tid 43062] [client 74.241.244.158:11155] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aemCy26I0QqmmmLTHE0Y7wAAAJM"]
[Thu Apr 23 10:24:13.641471 2026] [:error] [pid 42973:tid 43054] [client 74.241.244.158:11186] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aemCzW6I0QqmmmLTHE0Y8gAAAIs"]
[Thu Apr 23 10:24:14.276793 2026] [:error] [pid 64998:tid 65009] [client 74.241.244.158:11081] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aemCzoV5EysYcTLjmwigzQAAAcc"]
[Thu Apr 23 10:24:15.064001 2026] [:error] [pid 64998:tid 65008] [client 74.241.244.158:11093] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aemCz4V5EysYcTLjmwigzwAAAcY"]
[Thu Apr 23 10:24:15.878914 2026] [:error] [pid 42973:tid 43045] [client 74.241.244.158:11232] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aemCz26I0QqmmmLTHE0Y9gAAAII"]
[Thu Apr 23 10:24:16.639165 2026] [:error] [pid 42973:tid 43044] [client 74.241.244.158:11086] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aemC0G6I0QqmmmLTHE0Y-AAAAIE"]
[Thu Apr 23 10:24:17.325357 2026] [:error] [pid 42971:tid 42996] [client 74.241.244.158:11084] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aemC0TEP2_5RswrH8bHt5gAAAAo"]
[Thu Apr 23 10:24:18.015490 2026] [:error] [pid 42973:tid 43049] [client 74.241.244.158:11250] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aemC0m6I0QqmmmLTHE0Y-QAAAIY"]
[Thu Apr 23 10:24:18.691527 2026] [:error] [pid 43083:tid 43087] [client 74.241.244.158:11085] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "aemC0jC5hrvNXosL83IuUAAAAMI"]
[Thu Apr 23 10:24:19.229866 2026] [:error] [pid 64967:tid 64993] [client 74.241.244.158:11164] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "aemC04AV4GfOOdX8Qzo_EAAAAZg"]
[Thu Apr 23 10:24:19.881911 2026] [:error] [pid 42971:tid 42988] [client 74.241.244.158:11224] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "aemC0zEP2_5RswrH8bHt6gAAAAI"]
[Thu Apr 23 10:24:20.750854 2026] [:error] [pid 42971:tid 42986] [client 74.241.244.158:11104] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "aemC1DEP2_5RswrH8bHt7QAAAAA"]
[Thu Apr 23 10:24:21.734517 2026] [:error] [pid 46953:tid 46967] [client 74.241.244.158:35285] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mk.php"] [unique_id "aemC1UnlpdHh-P6wKbrZIQAAAks"]
[Thu Apr 23 10:24:22.699494 2026] [:error] [pid 46953:tid 46965] [client 74.241.244.158:35247] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mk.php"] [unique_id "aemC1knlpdHh-P6wKbrZJQAAAkk"]
[Thu Apr 23 10:24:23.412010 2026] [:error] [pid 25635:tid 25648] [client 74.241.244.158:11255] File does not exist: /usr/local/apache/htdocs/suspended-page/mk.php
[Thu Apr 23 10:24:23.753808 2026] [:error] [pid 25635:tid 25662] [client 74.241.244.158:11255] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Thu Apr 23 10:24:24.096781 2026] [:error] [pid 25635:tid 25650] [client 74.241.244.158:11255] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Thu Apr 23 10:24:24.783989 2026] [:error] [pid 25635:tid 25663] [client 74.241.244.158:11255] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Thu Apr 23 10:24:25.144583 2026] [:error] [pid 25635:tid 25658] [client 74.241.244.158:11255] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Apr 23 10:24:25.496389 2026] [:error] [pid 25635:tid 25643] [client 74.241.244.158:11255] File does not exist: /usr/local/apache/htdocs/suspended-page/zoo.php
[Thu Apr 23 10:24:25.839562 2026] [:error] [pid 25635:tid 25645] [client 74.241.244.158:11255] File does not exist: /usr/local/apache/htdocs/suspended-page/admlo.php
[Thu Apr 23 10:24:26.201690 2026] [:error] [pid 25635:tid 25656] [client 74.241.244.158:11255] File does not exist: /usr/local/apache/htdocs/suspended-page/gcqoa.php
[Thu Apr 23 10:24:26.569351 2026] [:error] [pid 25635:tid 25646] [client 74.241.244.158:11255] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Thu Apr 23 10:24:26.913707 2026] [:error] [pid 25635:tid 25659] [client 74.241.244.158:11255] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Thu Apr 23 10:24:27.313978 2026] [:error] [pid 25635:tid 25641] [client 74.241.244.158:11255] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "aemC28Rxv6UsgRGKB3IIWgAAAQI"]
[Thu Apr 23 10:24:28.173145 2026] [:error] [pid 64998:tid 65021] [client 74.241.244.158:11253] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "aemC3IV5EysYcTLjmwig3QAAAdM"]
[Thu Apr 23 10:24:28.906521 2026] [:error] [pid 42973:tid 43057] [client 74.241.244.158:11168] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "aemC3G6I0QqmmmLTHE0ZBwAAAI4"]
[Thu Apr 23 10:24:29.721211 2026] [:error] [pid 42973:tid 43055] [client 74.241.244.158:11099] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "aemC3W6I0QqmmmLTHE0ZCwAAAIw"]
[Thu Apr 23 10:24:30.581061 2026] [:error] [pid 64998:tid 65021] [client 74.241.244.158:11107] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-class-api.php"] [unique_id "aemC3oV5EysYcTLjmwig6AAAAdM"]
[Thu Apr 23 10:24:31.307858 2026] [:error] [pid 42973:tid 43065] [client 74.241.244.158:11180] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-class-api.php"] [unique_id "aemC326I0QqmmmLTHE0ZEAAAAJY"]
[Thu Apr 23 10:24:32.089981 2026] [:error] [pid 64998:tid 65018] [client 74.241.244.158:11189] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-class-api.php"] [unique_id "aemC4IV5EysYcTLjmwig6gAAAdA"]
[Thu Apr 23 10:24:32.991642 2026] [:error] [pid 42972:tid 43023] [client 74.241.244.158:11073] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-class-api.php"] [unique_id "aemC4MOAb-3sOknsk4dTfQAAAEc"]
[Thu Apr 23 10:24:33.811242 2026] [:error] [pid 46953:tid 46956] [client 74.241.244.158:11167] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aemC4UnlpdHh-P6wKbrZLgAAAkA"]
[Thu Apr 23 10:24:34.639322 2026] [:error] [pid 65000:tid 65040] [client 74.241.244.158:11130] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aemC4r6vRb9j6psK2ZYv6wAAAgc"]
[Thu Apr 23 10:24:35.532664 2026] [:error] [pid 25635:tid 25657] [client 74.241.244.158:11117] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aemC48Rxv6UsgRGKB3IIXAAAARI"]
[Thu Apr 23 10:24:36.619784 2026] [:error] [pid 65000:tid 65046] [client 74.241.244.158:11191] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aemC5L6vRb9j6psK2ZYv8gAAAg0"]
[Thu Apr 23 10:24:37.523720 2026] [:error] [pid 65000:tid 65041] [client 74.241.244.158:11074] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aemC5b6vRb9j6psK2ZYv-QAAAgg"]
[Thu Apr 23 10:24:38.441510 2026] [:error] [pid 65000:tid 65040] [client 74.241.244.158:11087] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aemC5r6vRb9j6psK2ZYv_AAAAgc"]
[Thu Apr 23 10:24:39.480087 2026] [:error] [pid 65000:tid 65048] [client 74.241.244.158:11090] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aemC576vRb9j6psK2ZYwAgAAAg8"]
[Thu Apr 23 10:24:40.341333 2026] [:error] [pid 42973:tid 43053] [client 74.241.244.158:11194] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aemC6G6I0QqmmmLTHE0ZGgAAAIo"]
[Thu Apr 23 10:24:41.231800 2026] [:error] [pid 42971:tid 43005] [client 74.241.244.158:11185] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "aemC6TEP2_5RswrH8bHuFQAAABM"]
[Thu Apr 23 10:24:41.977536 2026] [:error] [pid 42973:tid 43050] [client 74.241.244.158:35308] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "aemC6W6I0QqmmmLTHE0ZGwAAAIc"]
[Thu Apr 23 10:24:42.678958 2026] [:error] [pid 64967:tid 64978] [client 74.241.244.158:11231] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "aemC6oAV4GfOOdX8Qzo_FAAAAYk"]
[Thu Apr 23 10:24:43.268965 2026] [:error] [pid 59700:tid 59713] [client 74.241.244.158:11169] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "aemC65XyGZJFeAIDWtmufAAAAUs"]
[Thu Apr 23 10:24:44.097941 2026] [:error] [pid 42972:tid 43034] [client 74.241.244.158:11075] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "aemC7MOAb-3sOknsk4dTgQAAAFI"]
[Thu Apr 23 10:24:44.728089 2026] [:error] [pid 42971:tid 42994] [client 74.241.244.158:11057] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "aemC7DEP2_5RswrH8bHuGgAAAAg"]
[Thu Apr 23 10:24:45.367324 2026] [:error] [pid 64967:tid 64986] [client 74.241.244.158:11078] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "aemC7YAV4GfOOdX8Qzo_FQAAAZE"]
[Thu Apr 23 10:24:46.121123 2026] [:error] [pid 65000:tid 65042] [client 74.241.244.158:11098] [client 74.241.244.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "aemC7r6vRb9j6psK2ZYwFAAAAgk"]
[Thu Apr 23 12:13:38.569082 2026] [:error] [pid 42973:tid 43062] [client 69.5.21.178:38974] [client 69.5.21.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aemccm6I0QqmmmLTHE09yAAAAJM"]
[Thu Apr 23 12:13:38.687214 2026] [:error] [pid 42973:tid 43043] [client 69.5.21.178:38982] [client 69.5.21.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "aemccm6I0QqmmmLTHE09yQAAAIA"]
[Thu Apr 23 17:46:08.669444 2026] [:error] [pid 46953:tid 46956] [client 160.30.179.124:42524] [client 160.30.179.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aenqYEnlpdHh-P6wKboUXwAAAkA"]
[Thu Apr 23 21:08:53.829733 2026] [:error] [pid 59700:tid 59723] [client 74.248.147.253:45647] [client 74.248.147.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeoZ5ZXyGZJFeAIDWtklzQAAAVU"]
[Thu Apr 23 21:08:55.382083 2026] [:error] [pid 65000:tid 65044] [client 74.248.147.253:45685] [client 74.248.147.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeoZ576vRb9j6psK2ZZ4tAAAAgs"]
[Thu Apr 23 21:08:57.029838 2026] [:error] [pid 46953:tid 46959] [client 74.248.147.253:1974] [client 74.248.147.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeoZ6UnlpdHh-P6wKbo1ggAAAkM"]
[Thu Apr 23 21:09:02.972562 2026] [:error] [pid 46953:tid 46974] [client 74.248.147.253:50048] [client 74.248.147.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeoZ7knlpdHh-P6wKbo1hgAAAlI"]
[Fri Apr 24 05:06:25.366401 2026] [:error] [pid 52129:tid 52157] [client 51.11.246.40:4749] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-post-data.php
[Fri Apr 24 05:06:25.607014 2026] [:error] [pid 52129:tid 52154] [client 51.11.246.40:4749] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Fri Apr 24 05:06:25.845906 2026] [:error] [pid 52129:tid 52146] [client 51.11.246.40:4749] File does not exist: /usr/local/apache/htdocs/suspended-page/1index.php
[Fri Apr 24 05:06:26.086178 2026] [:error] [pid 52129:tid 52150] [client 51.11.246.40:4749] File does not exist: /usr/local/apache/htdocs/suspended-page/kcs.php
[Fri Apr 24 05:06:26.326944 2026] [:error] [pid 52129:tid 52139] [client 51.11.246.40:4749] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Fri Apr 24 05:06:26.566074 2026] [:error] [pid 52129:tid 52149] [client 51.11.246.40:4749] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Apr 24 05:06:26.806557 2026] [:error] [pid 52129:tid 52145] [client 51.11.246.40:4749] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Fri Apr 24 07:29:05.093612 2026] [:error] [pid 19102:tid 19178] [client 74.248.36.12:52098] File does not exist: /usr/local/apache/htdocs/suspended-page/aboutc.php
[Fri Apr 24 07:29:05.368267 2026] [:error] [pid 19102:tid 19186] [client 74.248.36.12:52098] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Fri Apr 24 07:29:05.629473 2026] [:error] [pid 19102:tid 19169] [client 74.248.36.12:52098] File does not exist: /usr/local/apache/htdocs/suspended-page/hroxw.php
[Fri Apr 24 07:29:05.901398 2026] [:error] [pid 19102:tid 19183] [client 74.248.36.12:52098] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Fri Apr 24 07:29:06.163597 2026] [:error] [pid 19102:tid 19170] [client 74.248.36.12:52098] File does not exist: /usr/local/apache/htdocs/suspended-page/set.php
[Fri Apr 24 07:29:06.426469 2026] [:error] [pid 19102:tid 19165] [client 74.248.36.12:52098] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Fri Apr 24 07:29:06.971087 2026] [:error] [pid 19102:tid 19178] [client 74.248.36.12:52098] File does not exist: /usr/local/apache/htdocs/suspended-page/ws57.php
[Fri Apr 24 07:29:07.234608 2026] [:error] [pid 19102:tid 19186] [client 74.248.36.12:52098] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Fri Apr 24 07:29:07.497247 2026] [:error] [pid 19102:tid 19174] [client 74.248.36.12:52098] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri Apr 24 07:29:07.754817 2026] [:error] [pid 19102:tid 19172] [client 74.248.36.12:52098] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "aeqrQwDSgrbLEZbkqD7wRgAAAIg"]
[Fri Apr 24 07:29:08.734540 2026] [:error] [pid 19200:tid 19223] [client 74.248.36.12:52672] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "aeqrRDQ--M3-tsKAnhHW4wAAAM8"]
[Fri Apr 24 07:29:09.922575 2026] [:error] [pid 52129:tid 52139] [client 74.248.36.12:57753] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "aeqrReKCZKf8_u2LKiCzqwAAAQY"]
[Fri Apr 24 07:29:10.673940 2026] [:error] [pid 19102:tid 19174] [client 74.248.36.12:52147] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "aeqrRgDSgrbLEZbkqD7wVQAAAIo"]
[Fri Apr 24 07:29:14.932602 2026] [:error] [pid 19200:tid 19220] [client 74.248.36.12:57690] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aeqrSjQ--M3-tsKAnhHW8AAAAMw"]
[Fri Apr 24 07:29:16.058335 2026] [:error] [pid 19200:tid 19226] [client 74.248.36.12:57685] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aeqrTDQ--M3-tsKAnhHW9QAAANI"]
[Fri Apr 24 07:29:16.927009 2026] [:error] [pid 19101:tid 19145] [client 74.248.36.12:57720] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aeqrTGAHj9bEvrTgbO3xYwAAAEg"]
[Fri Apr 24 07:29:18.723923 2026] [:error] [pid 52129:tid 52139] [client 74.248.36.12:52146] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aeqrTuKCZKf8_u2LKiCz1wAAAQY"]
[Fri Apr 24 07:29:20.083476 2026] [:error] [pid 19102:tid 19167] [client 74.248.36.12:57728] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aeqrUADSgrbLEZbkqD7wcQAAAIM"]
[Fri Apr 24 07:29:27.160538 2026] [:error] [pid 52129:tid 52139] [client 74.248.36.12:57367] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aeqrV-KCZKf8_u2LKiC0DAAAAQY"]
[Fri Apr 24 07:29:33.655410 2026] [:error] [pid 19102:tid 19171] [client 74.248.36.12:57349] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aeqrXQDSgrbLEZbkqD7wxQAAAIc"]
[Fri Apr 24 07:29:36.698392 2026] [:error] [pid 52129:tid 52150] [client 74.248.36.12:57791] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aeqrYOKCZKf8_u2LKiC0TAAAARE"]
[Fri Apr 24 07:29:38.944299 2026] [:error] [pid 52129:tid 52155] [client 74.248.36.12:52112] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aeqrYuKCZKf8_u2LKiC0XwAAARY"]
[Fri Apr 24 07:29:40.484589 2026] [:error] [pid 19102:tid 19186] [client 74.248.36.12:57718] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aeqrZADSgrbLEZbkqD7w7AAAAJY"]
[Fri Apr 24 07:29:42.189980 2026] [:error] [pid 52129:tid 52156] [client 74.248.36.12:52694] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aeqrZuKCZKf8_u2LKiC0cQAAARc"]
[Fri Apr 24 07:29:43.041018 2026] [:error] [pid 19102:tid 19175] [client 74.248.36.12:57677] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "aeqrZwDSgrbLEZbkqD7w_gAAAIs"]
[Fri Apr 24 07:29:44.416361 2026] [:error] [pid 52129:tid 52141] [client 74.248.36.12:57706] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "aeqraOKCZKf8_u2LKiC0iQAAAQg"]
[Fri Apr 24 07:29:45.238120 2026] [:error] [pid 19200:tid 19220] [client 74.248.36.12:57759] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "aeqraTQ--M3-tsKAnhHXqQAAAMw"]
[Fri Apr 24 07:29:47.366774 2026] [:error] [pid 19101:tid 19148] [client 74.248.36.12:57780] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "aeqra2AHj9bEvrTgbO3x8QAAAEs"]
[Fri Apr 24 07:29:48.406786 2026] [:error] [pid 52129:tid 52155] [client 74.248.36.12:52686] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aeqrbOKCZKf8_u2LKiC0mwAAARY"]
[Fri Apr 24 07:29:49.154655 2026] [:error] [pid 19200:tid 19216] [client 74.248.36.12:52714] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aeqrbTQ--M3-tsKAnhHX3AAAAMg"]
[Fri Apr 24 07:29:50.945002 2026] [:error] [pid 19100:tid 19122] [client 74.248.36.12:52129] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aeqrbrF_hzQs4CqbifcpIgAAAAw"]
[Fri Apr 24 07:29:54.179310 2026] [:error] [pid 52129:tid 52156] [client 74.248.36.12:57762] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aeqrcuKCZKf8_u2LKiC0wgAAARc"]
[Fri Apr 24 07:29:57.507191 2026] [:error] [pid 19200:tid 19225] [client 74.248.36.12:52142] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aeqrdTQ--M3-tsKAnhHYFwAAANE"]
[Fri Apr 24 07:29:58.387688 2026] [:error] [pid 52129:tid 52142] [client 74.248.36.12:52734] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aeqrduKCZKf8_u2LKiC02wAAAQk"]
[Fri Apr 24 07:30:00.255146 2026] [:error] [pid 19100:tid 19129] [client 74.248.36.12:57743] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aeqreLF_hzQs4CqbifcpUAAAABM"]
[Fri Apr 24 07:30:01.451089 2026] [:error] [pid 52129:tid 52151] [client 74.248.36.12:57783] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aeqreeKCZKf8_u2LKiC1AAAAARI"]
[Fri Apr 24 07:30:03.167127 2026] [:error] [pid 19102:tid 19186] [client 74.248.36.12:57384] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "aeqrewDSgrbLEZbkqD7xQQAAAJY"]
[Fri Apr 24 07:30:04.411130 2026] [:error] [pid 52129:tid 52137] [client 74.248.36.12:57389] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "aeqrfOKCZKf8_u2LKiC1FgAAAQQ"]
[Fri Apr 24 07:30:06.872141 2026] [:error] [pid 19101:tid 19147] [client 74.248.36.12:57721] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "aeqrfmAHj9bEvrTgbO3yKAAAAEo"]
[Fri Apr 24 07:30:08.134875 2026] [:error] [pid 19200:tid 19212] [client 74.248.36.12:52685] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Fri Apr 24 07:30:08.418757 2026] [:error] [pid 19200:tid 19219] [client 74.248.36.12:52685] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Fri Apr 24 07:30:08.682729 2026] [:error] [pid 19200:tid 19218] [client 74.248.36.12:52685] File does not exist: /usr/local/apache/htdocs/suspended-page/bmi.php
[Fri Apr 24 07:30:08.948792 2026] [:error] [pid 19200:tid 19230] [client 74.248.36.12:52685] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Fri Apr 24 07:30:09.488081 2026] [:error] [pid 19200:tid 19212] [client 74.248.36.12:52685] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Fri Apr 24 07:30:09.997009 2026] [:error] [pid 19200:tid 19211] [client 74.248.36.12:52685] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Fri Apr 24 07:30:10.269346 2026] [:error] [pid 19200:tid 19226] [client 74.248.36.12:52685] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Fri Apr 24 07:30:10.792433 2026] [:error] [pid 19200:tid 19221] [client 74.248.36.12:52685] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kikikoko.php
[Fri Apr 24 07:30:11.055929 2026] [:error] [pid 19200:tid 19214] [client 74.248.36.12:52685] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Fri Apr 24 07:30:11.325615 2026] [:error] [pid 19200:tid 19230] [client 74.248.36.12:52685] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeqrgzQ--M3-tsKAnhHYjAAAANY"]
[Fri Apr 24 07:30:14.222513 2026] [:error] [pid 19102:tid 19182] [client 74.248.36.12:52729] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeqrhgDSgrbLEZbkqD7xZgAAAJI"]
[Fri Apr 24 07:30:16.410819 2026] [:error] [pid 19200:tid 19210] [client 74.248.36.12:52124] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeqriDQ--M3-tsKAnhHYnAAAAMI"]
[Fri Apr 24 07:30:17.913461 2026] [:error] [pid 52129:tid 52142] [client 74.248.36.12:52709] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeqrieKCZKf8_u2LKiC1QQAAAQk"]
[Fri Apr 24 07:30:19.050332 2026] [:error] [pid 19102:tid 19182] [client 74.248.36.12:52677] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "aeqriwDSgrbLEZbkqD7xeQAAAJI"]
[Fri Apr 24 07:30:22.014682 2026] [:error] [pid 19102:tid 19176] [client 74.248.36.12:52108] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "aeqrjgDSgrbLEZbkqD7xfwAAAIw"]
[Fri Apr 24 07:30:23.630581 2026] [:error] [pid 19101:tid 19153] [client 74.248.36.12:57683] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "aeqrj2AHj9bEvrTgbO3yXwAAAFA"]
[Fri Apr 24 07:30:24.802392 2026] [:error] [pid 19102:tid 19187] [client 74.248.36.12:52155] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "aeqrkADSgrbLEZbkqD7xiQAAAJc"]
[Fri Apr 24 07:30:26.466911 2026] [:error] [pid 19200:tid 19230] [client 74.248.36.12:57786] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeqrkjQ--M3-tsKAnhHYvQAAANY"]
[Fri Apr 24 07:30:28.099274 2026] [:error] [pid 19200:tid 19221] [client 74.248.36.12:52153] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeqrlDQ--M3-tsKAnhHYyAAAAM0"]
[Fri Apr 24 07:30:29.662295 2026] [:error] [pid 52129:tid 52144] [client 74.248.36.12:55544] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeqrleKCZKf8_u2LKiC1agAAAQs"]
[Fri Apr 24 07:30:31.143965 2026] [:error] [pid 19200:tid 19217] [client 74.248.36.12:52674] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeqrlzQ--M3-tsKAnhHY5AAAAMk"]
[Fri Apr 24 07:30:32.309477 2026] [:error] [pid 52129:tid 52133] [client 74.248.36.12:57751] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws48.php"] [unique_id "aeqrmOKCZKf8_u2LKiC1fgAAAQA"]
[Fri Apr 24 07:30:34.424484 2026] [:error] [pid 19200:tid 19224] [client 74.248.36.12:55512] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws48.php"] [unique_id "aeqrmjQ--M3-tsKAnhHY8gAAANA"]
[Fri Apr 24 07:30:38.745666 2026] [:error] [pid 19102:tid 19188] [client 74.248.36.12:52128] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws48.php"] [unique_id "aeqrngDSgrbLEZbkqD7xwgAAAJg"]
[Fri Apr 24 07:30:40.336070 2026] [:error] [pid 19200:tid 19232] [client 74.248.36.12:52138] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws48.php"] [unique_id "aeqroDQ--M3-tsKAnhHZCQAAANg"]
[Fri Apr 24 07:30:41.767875 2026] [:error] [pid 19102:tid 19171] [client 74.248.36.12:57779] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeqroQDSgrbLEZbkqD7x3wAAAIc"]
[Fri Apr 24 07:30:42.983621 2026] [:error] [pid 19102:tid 19176] [client 74.248.36.12:55503] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeqrogDSgrbLEZbkqD7x5QAAAIw"]
[Fri Apr 24 07:30:45.204643 2026] [:error] [pid 19100:tid 19130] [client 74.248.36.12:57712] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeqrpbF_hzQs4Cqbifcp3AAAABQ"]
[Fri Apr 24 07:30:49.453153 2026] [:error] [pid 19102:tid 19179] [client 74.248.36.12:57740] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeqrqQDSgrbLEZbkqD7yGAAAAI8"]
[Fri Apr 24 07:30:53.070671 2026] [:error] [pid 52129:tid 52142] [client 74.248.36.12:52134] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeqrreKCZKf8_u2LKiC11gAAAQk"]
[Fri Apr 24 07:30:56.256301 2026] [:error] [pid 19101:tid 19139] [client 74.248.36.12:57679] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeqrsGAHj9bEvrTgbO3ywwAAAEI"]
[Fri Apr 24 07:30:58.172341 2026] [:error] [pid 52129:tid 52136] [client 74.248.36.12:57668] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeqrsuKCZKf8_u2LKiC1_gAAAQM"]
[Fri Apr 24 07:30:59.732443 2026] [:error] [pid 19102:tid 19181] [client 74.248.36.12:52109] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeqrswDSgrbLEZbkqD7yXQAAAJE"]
[Fri Apr 24 07:31:01.470923 2026] [:error] [pid 19200:tid 19228] [client 74.248.36.12:57766] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeqrtTQ--M3-tsKAnhHZQAAAANQ"]
[Fri Apr 24 07:31:02.795373 2026] [:error] [pid 19101:tid 19148] [client 74.248.36.12:54896] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeqrtmAHj9bEvrTgbO3y3QAAAEs"]
[Fri Apr 24 07:31:04.540594 2026] [:error] [pid 19102:tid 19165] [client 74.248.36.12:57695] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeqruADSgrbLEZbkqD7ydgAAAIE"]
[Fri Apr 24 07:31:09.293700 2026] [:error] [pid 19200:tid 19225] [client 74.248.36.12:57771] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeqrvTQ--M3-tsKAnhHZaAAAANE"]
[Fri Apr 24 07:31:11.961638 2026] [:error] [pid 52129:tid 52151] [client 74.248.36.12:57750] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Fri Apr 24 07:31:12.233973 2026] [:error] [pid 52129:tid 52142] [client 74.248.36.12:57750] File does not exist: /usr/local/apache/htdocs/suspended-page/eetu.php
[Fri Apr 24 07:31:12.496566 2026] [:error] [pid 52129:tid 52153] [client 74.248.36.12:57750] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Fri Apr 24 07:31:12.759806 2026] [:error] [pid 52129:tid 52139] [client 74.248.36.12:57750] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Fri Apr 24 07:31:13.036813 2026] [:error] [pid 52129:tid 52148] [client 74.248.36.12:57750] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Fri Apr 24 07:31:13.298836 2026] [:error] [pid 52129:tid 52155] [client 74.248.36.12:57750] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Fri Apr 24 07:31:13.665643 2026] [:error] [pid 52129:tid 52144] [client 74.248.36.12:57750] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Fri Apr 24 07:31:13.927697 2026] [:error] [pid 52129:tid 52134] [client 74.248.36.12:57750] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Fri Apr 24 07:31:14.204663 2026] [:error] [pid 52129:tid 52145] [client 74.248.36.12:57750] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Fri Apr 24 07:31:14.467097 2026] [:error] [pid 52129:tid 52151] [client 74.248.36.12:57750] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Fri Apr 24 07:31:14.727459 2026] [:error] [pid 52129:tid 52142] [client 74.248.36.12:57750] File does not exist: /usr/local/apache/htdocs/suspended-page/Jcrop.php
[Fri Apr 24 07:31:15.760583 2026] [:error] [pid 52129:tid 52134] [client 74.248.36.12:57750] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aeqrw-KCZKf8_u2LKiC2dwAAAQE"]
[Fri Apr 24 07:31:17.308998 2026] [:error] [pid 19200:tid 19219] [client 74.248.36.12:55548] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aeqrxTQ--M3-tsKAnhHZrwAAAMs"]
[Fri Apr 24 07:31:18.425332 2026] [:error] [pid 52129:tid 52152] [client 74.248.36.12:57702] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aeqrxuKCZKf8_u2LKiC2iwAAARM"]
[Fri Apr 24 07:31:21.732686 2026] [:error] [pid 52129:tid 52146] [client 74.248.36.12:52681] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aeqryeKCZKf8_u2LKiC2mwAAAQ0"]
[Fri Apr 24 07:31:23.073737 2026] [:error] [pid 52129:tid 52156] [client 74.248.36.12:55537] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aeqry-KCZKf8_u2LKiC2pQAAARc"]
[Fri Apr 24 07:31:25.093464 2026] [:error] [pid 52129:tid 52156] [client 74.248.36.12:57406] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aeqrzeKCZKf8_u2LKiC2uAAAARc"]
[Fri Apr 24 07:31:26.209749 2026] [:error] [pid 52129:tid 52156] [client 74.248.36.12:52710] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aeqrzuKCZKf8_u2LKiC2yAAAARc"]
[Fri Apr 24 07:31:27.941829 2026] [:error] [pid 52129:tid 52155] [client 74.248.36.12:57703] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aeqrz-KCZKf8_u2LKiC23wAAARY"]
[Fri Apr 24 07:31:30.296190 2026] [:error] [pid 19102:tid 19171] [client 74.248.36.12:52673] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aeqr0gDSgrbLEZbkqD7yxQAAAIc"]
[Fri Apr 24 07:31:33.923121 2026] [:error] [pid 19200:tid 19212] [client 74.248.36.12:57722] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aeqr1TQ--M3-tsKAnhHZ6QAAAMQ"]
[Fri Apr 24 07:31:39.023749 2026] [:error] [pid 19101:tid 19153] [client 74.248.36.12:57673] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aeqr22AHj9bEvrTgbO3zPgAAAFA"]
[Fri Apr 24 07:31:43.212306 2026] [:error] [pid 19102:tid 19174] [client 74.248.36.12:55505] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aeqr3wDSgrbLEZbkqD7y7QAAAIo"]
[Fri Apr 24 07:31:44.468803 2026] [:error] [pid 19102:tid 19173] [client 74.248.36.12:52123] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeqr4ADSgrbLEZbkqD7y8wAAAIk"]
[Fri Apr 24 07:31:46.300598 2026] [:error] [pid 52129:tid 52152] [client 74.248.36.12:52099] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeqr4uKCZKf8_u2LKiC3ngAAARM"]
[Fri Apr 24 07:31:49.018632 2026] [:error] [pid 19102:tid 19172] [client 74.248.36.12:55549] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeqr5QDSgrbLEZbkqD7zEQAAAIg"]
[Fri Apr 24 07:31:50.318560 2026] [:error] [pid 19100:tid 19132] [client 74.248.36.12:57778] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeqr5rF_hzQs4CqbifcqkgAAABY"]
[Fri Apr 24 07:31:51.814393 2026] [:error] [pid 19200:tid 19230] [client 74.248.36.12:55499] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeqr5zQ--M3-tsKAnhHaRQAAANY"]
[Fri Apr 24 07:31:53.040295 2026] [:error] [pid 52129:tid 52157] [client 74.248.36.12:52148] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeqr6eKCZKf8_u2LKiC30gAAARg"]
[Fri Apr 24 07:31:54.439017 2026] [:error] [pid 19200:tid 19215] [client 74.248.36.12:57747] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeqr6jQ--M3-tsKAnhHaWgAAAMc"]
[Fri Apr 24 07:31:57.720938 2026] [:error] [pid 19100:tid 19133] [client 74.248.36.12:57731] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeqr7bF_hzQs4CqbifcqrQAAABc"]
[Fri Apr 24 07:31:59.261728 2026] [:error] [pid 52129:tid 52156] [client 74.248.36.12:57744] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeqr7-KCZKf8_u2LKiC4NgAAARc"]
[Fri Apr 24 07:32:01.130915 2026] [:error] [pid 19100:tid 19122] [client 74.248.36.12:57775] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeqr8bF_hzQs4CqbifcqugAAAAw"]
[Fri Apr 24 07:32:03.218046 2026] [:error] [pid 19100:tid 19125] [client 74.248.36.12:57760] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeqr87F_hzQs4CqbifcqyAAAAA8"]
[Fri Apr 24 07:32:04.196086 2026] [:error] [pid 52129:tid 52134] [client 74.248.36.12:57691] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeqr9OKCZKf8_u2LKiC4TQAAAQE"]
[Fri Apr 24 07:32:05.579011 2026] [:error] [pid 19200:tid 19219] [client 74.248.36.12:57380] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tymn.php"] [unique_id "aeqr9TQ--M3-tsKAnhHafgAAAMs"]
[Fri Apr 24 07:32:08.417470 2026] [:error] [pid 19102:tid 19167] [client 74.248.36.12:52690] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tymn.php"] [unique_id "aeqr-ADSgrbLEZbkqD7zYgAAAIM"]
[Fri Apr 24 07:32:09.389594 2026] [:error] [pid 19100:tid 19127] [client 74.248.36.12:53938] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tymn.php"] [unique_id "aeqr-bF_hzQs4Cqbifcq4AAAABE"]
[Fri Apr 24 07:32:10.314395 2026] [:error] [pid 19102:tid 19186] [client 74.248.36.12:55488] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tymn.php"] [unique_id "aeqr-gDSgrbLEZbkqD7zdQAAAJY"]
[Fri Apr 24 07:32:12.168954 2026] [:error] [pid 52129:tid 52133] [client 74.248.36.12:55489] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeqr_OKCZKf8_u2LKiC4eQAAAQA"]
[Fri Apr 24 07:32:15.398359 2026] [:error] [pid 19200:tid 19225] [client 74.248.36.12:57785] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Fri Apr 24 07:32:15.660314 2026] [:error] [pid 19200:tid 19224] [client 74.248.36.12:57785] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Fri Apr 24 07:32:15.985041 2026] [:error] [pid 19200:tid 19221] [client 74.248.36.12:57785] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Fri Apr 24 07:32:16.247655 2026] [:error] [pid 19200:tid 19208] [client 74.248.36.12:57785] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Fri Apr 24 07:32:16.567373 2026] [:error] [pid 19200:tid 19225] [client 74.248.36.12:57785] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class-atom.php
[Fri Apr 24 07:32:16.875811 2026] [:error] [pid 19200:tid 19218] [client 74.248.36.12:57785] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Fri Apr 24 07:32:17.468206 2026] [:error] [pid 19200:tid 19221] [client 74.248.36.12:57785] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Fri Apr 24 07:32:17.731718 2026] [:error] [pid 19200:tid 19227] [client 74.248.36.12:57785] File does not exist: /usr/local/apache/htdocs/suspended-page/900.php
[Fri Apr 24 07:32:17.993916 2026] [:error] [pid 19200:tid 19208] [client 74.248.36.12:57785] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Fri Apr 24 07:32:18.256097 2026] [:error] [pid 19200:tid 19217] [client 74.248.36.12:57785] File does not exist: /usr/local/apache/htdocs/suspended-page/jk.php
[Fri Apr 24 07:32:18.523550 2026] [:error] [pid 19200:tid 19222] [client 74.248.36.12:57785] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Fri Apr 24 07:32:18.799448 2026] [:error] [pid 19200:tid 19220] [client 74.248.36.12:57785] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aeqsAjQ--M3-tsKAnhHa7QAAAMw"]
[Fri Apr 24 07:32:20.977341 2026] [:error] [pid 19200:tid 19224] [client 74.248.36.12:57754] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aeqsBDQ--M3-tsKAnhHa8QAAANA"]
[Fri Apr 24 07:32:21.541292 2026] [:error] [pid 19101:tid 19150] [client 74.248.36.12:52096] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aeqsBWAHj9bEvrTgbO3zswAAAE0"]
[Fri Apr 24 07:32:22.905145 2026] [:error] [pid 19102:tid 19188] [client 74.248.36.12:55520] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aeqsBgDSgrbLEZbkqD7zuAAAAJg"]
[Fri Apr 24 07:32:24.247397 2026] [:error] [pid 19102:tid 19179] [client 74.248.36.12:57789] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mini.php"] [unique_id "aeqsCADSgrbLEZbkqD7zvgAAAI8"]
[Fri Apr 24 07:32:25.140076 2026] [:error] [pid 19101:tid 19159] [client 74.248.36.12:57694] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mini.php"] [unique_id "aeqsCWAHj9bEvrTgbO3zvwAAAFY"]
[Fri Apr 24 07:32:27.327840 2026] [:error] [pid 19200:tid 19224] [client 74.248.36.12:55532] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mini.php"] [unique_id "aeqsCzQ--M3-tsKAnhHbDgAAANA"]
[Fri Apr 24 07:32:28.331086 2026] [:error] [pid 19102:tid 19168] [client 74.248.36.12:57715] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mini.php"] [unique_id "aeqsDADSgrbLEZbkqD7zxwAAAIQ"]
[Fri Apr 24 07:32:29.896871 2026] [:error] [pid 19101:tid 19146] [client 74.248.36.12:55517] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeqsDWAHj9bEvrTgbO3zywAAAEk"]
[Fri Apr 24 07:32:30.627758 2026] [:error] [pid 19101:tid 19137] [client 74.248.36.12:57713] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeqsDmAHj9bEvrTgbO3zzwAAAEA"]
[Fri Apr 24 07:32:31.685544 2026] [:error] [pid 19200:tid 19217] [client 74.248.36.12:53922] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeqsDzQ--M3-tsKAnhHbOwAAAMk"]
[Fri Apr 24 07:32:33.048413 2026] [:error] [pid 19101:tid 19146] [client 74.248.36.12:57682] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeqsEWAHj9bEvrTgbO3z3wAAAEk"]
[Fri Apr 24 07:32:33.899365 2026] [:error] [pid 19200:tid 19226] [client 74.248.36.12:55545] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aeqsETQ--M3-tsKAnhHbXAAAANI"]
[Fri Apr 24 07:32:35.171631 2026] [:error] [pid 52129:tid 52141] [client 74.248.36.12:55518] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aeqsE-KCZKf8_u2LKiC5BAAAAQg"]
[Fri Apr 24 07:32:37.391893 2026] [:error] [pid 19101:tid 19155] [client 74.248.36.12:57724] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aeqsFWAHj9bEvrTgbO3z_AAAAFI"]
[Fri Apr 24 07:32:40.734329 2026] [:error] [pid 52129:tid 52154] [client 74.248.36.12:52158] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aeqsGOKCZKf8_u2LKiC5PgAAARU"]
[Fri Apr 24 07:32:43.273898 2026] [:error] [pid 52129:tid 52139] [client 74.248.36.12:52113] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aeqsG-KCZKf8_u2LKiC5YgAAAQY"]
[Fri Apr 24 07:32:45.253085 2026] [:error] [pid 52129:tid 52140] [client 74.248.36.12:52116] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aeqsHeKCZKf8_u2LKiC5ggAAAQc"]
[Fri Apr 24 07:32:47.650152 2026] [:error] [pid 19200:tid 19208] [client 74.248.36.12:57681] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aeqsHzQ--M3-tsKAnhHbkQAAAMA"]
[Fri Apr 24 07:32:49.782572 2026] [:error] [pid 52129:tid 52149] [client 74.248.36.12:52707] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aeqsIeKCZKf8_u2LKiC5wAAAARA"]
[Fri Apr 24 07:32:50.824379 2026] [:error] [pid 52129:tid 52139] [client 74.248.36.12:57739] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeqsIuKCZKf8_u2LKiC5wQAAAQY"]
[Fri Apr 24 07:32:52.966310 2026] [:error] [pid 19100:tid 19134] [client 74.248.36.12:57763] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeqsJLF_hzQs4CqbifcrYwAAABg"]
[Fri Apr 24 07:32:54.221853 2026] [:error] [pid 19102:tid 19183] [client 74.248.36.12:57675] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeqsJgDSgrbLEZbkqD70HgAAAJM"]
[Fri Apr 24 07:32:57.795888 2026] [:error] [pid 19200:tid 19220] [client 74.248.36.12:57366] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeqsKTQ--M3-tsKAnhHb5gAAAMw"]
[Fri Apr 24 07:33:01.655741 2026] [:error] [pid 19102:tid 19170] [client 74.248.36.12:53925] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "aeqsLQDSgrbLEZbkqD70UAAAAIY"]
[Fri Apr 24 07:33:03.773393 2026] [:error] [pid 19101:tid 19139] [client 74.248.36.12:52730] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "aeqsL2AHj9bEvrTgbO30aQAAAEI"]
[Fri Apr 24 07:33:06.935681 2026] [:error] [pid 19101:tid 19155] [client 74.248.36.12:57764] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "aeqsMmAHj9bEvrTgbO30egAAAFI"]
[Fri Apr 24 07:33:09.363376 2026] [:error] [pid 19100:tid 19116] [client 74.248.36.12:52702] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "aeqsNbF_hzQs4CqbifcrmwAAAAc"]
[Fri Apr 24 07:33:14.034150 2026] [:error] [pid 52129:tid 52147] [client 74.248.36.12:57693] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adoms.php"] [unique_id "aeqsOuKCZKf8_u2LKiC6XQAAAQ4"]
[Fri Apr 24 07:33:18.933698 2026] [:error] [pid 19101:tid 19150] [client 74.248.36.12:52713] File does not exist: /usr/local/apache/htdocs/suspended-page/adoms.php
[Fri Apr 24 07:33:19.195412 2026] [:error] [pid 19101:tid 19146] [client 74.248.36.12:52713] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-editor.php
[Fri Apr 24 07:33:19.471633 2026] [:error] [pid 19101:tid 19141] [client 74.248.36.12:52713] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Fri Apr 24 07:33:19.750201 2026] [:error] [pid 19101:tid 19147] [client 74.248.36.12:52713] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Fri Apr 24 07:33:20.013792 2026] [:error] [pid 19101:tid 19159] [client 74.248.36.12:52713] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Fri Apr 24 07:33:20.537292 2026] [:error] [pid 19101:tid 19148] [client 74.248.36.12:52713] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php
[Fri Apr 24 07:33:20.870317 2026] [:error] [pid 19101:tid 19152] [client 74.248.36.12:52713] File does not exist: /usr/local/apache/htdocs/suspended-page/gaza.php
[Fri Apr 24 07:33:21.143080 2026] [:error] [pid 19101:tid 19158] [client 74.248.36.12:52713] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Fri Apr 24 07:33:21.404419 2026] [:error] [pid 19101:tid 19143] [client 74.248.36.12:52713] File does not exist: /usr/local/apache/htdocs/suspended-page/aboute.php
[Fri Apr 24 07:33:21.666935 2026] [:error] [pid 19101:tid 19157] [client 74.248.36.12:52713] File does not exist: /usr/local/apache/htdocs/suspended-page/ws82.php
[Fri Apr 24 07:33:21.924993 2026] [:error] [pid 19101:tid 19156] [client 74.248.36.12:52713] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeqsQWAHj9bEvrTgbO306AAAAFM"]
[Fri Apr 24 07:33:23.142363 2026] [:error] [pid 19100:tid 19121] [client 74.248.36.12:54876] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeqsQ7F_hzQs4Cqbifcr0wAAAAs"]
[Fri Apr 24 07:33:24.717462 2026] [:error] [pid 52129:tid 52144] [client 74.248.36.12:55522] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeqsROKCZKf8_u2LKiC6uQAAAQs"]
[Fri Apr 24 07:33:27.202922 2026] [:error] [pid 19101:tid 19139] [client 74.248.36.12:57690] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeqsR2AHj9bEvrTgbO309AAAAEI"]
[Fri Apr 24 07:33:31.174651 2026] [:error] [pid 52129:tid 52150] [client 74.248.36.12:52147] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeqsS-KCZKf8_u2LKiC6zQAAARE"]
[Fri Apr 24 07:33:35.968121 2026] [:error] [pid 52129:tid 52136] [client 74.248.36.12:52722] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeqsT-KCZKf8_u2LKiC68gAAAQM"]
[Fri Apr 24 07:33:36.858319 2026] [:error] [pid 19200:tid 19222] [client 74.248.36.12:54900] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeqsUDQ--M3-tsKAnhHdAQAAAM4"]
[Fri Apr 24 07:33:38.838267 2026] [:error] [pid 19102:tid 19164] [client 74.248.36.12:52687] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeqsUgDSgrbLEZbkqD70_QAAAIA"]
[Fri Apr 24 07:33:39.623326 2026] [:error] [pid 52129:tid 52137] [client 74.248.36.12:52120] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aeqsU-KCZKf8_u2LKiC7CQAAAQQ"]
[Fri Apr 24 07:33:41.365140 2026] [:error] [pid 19100:tid 19124] [client 74.248.36.12:57719] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aeqsVbF_hzQs4CqbifcsAwAAAA4"]
[Fri Apr 24 07:33:42.521916 2026] [:error] [pid 19100:tid 19121] [client 74.248.36.12:52712] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aeqsVrF_hzQs4CqbifcsCgAAAAs"]
[Fri Apr 24 07:33:45.722373 2026] [:error] [pid 19200:tid 19230] [client 74.248.36.12:57717] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aeqsWTQ--M3-tsKAnhHdLAAAANY"]
[Fri Apr 24 07:33:49.006103 2026] [:error] [pid 52129:tid 52138] [client 74.248.36.12:57742] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aeqsXeKCZKf8_u2LKiC7SwAAAQU"]
[Fri Apr 24 07:33:49.946635 2026] [:error] [pid 19100:tid 19126] [client 74.248.36.12:57736] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aeqsXbF_hzQs4CqbifcsGQAAABA"]
[Fri Apr 24 07:33:51.021762 2026] [:error] [pid 19100:tid 19120] [client 74.248.36.12:57774] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aeqsX7F_hzQs4CqbifcsHQAAAAo"]
[Fri Apr 24 07:33:52.138741 2026] [:error] [pid 19100:tid 19131] [client 74.248.36.12:57680] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aeqsYLF_hzQs4CqbifcsJwAAABU"]
[Fri Apr 24 07:33:53.751320 2026] [:error] [pid 19101:tid 19140] [client 74.248.36.12:52723] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeqsYWAHj9bEvrTgbO31gwAAAEM"]
[Fri Apr 24 07:33:55.321587 2026] [:error] [pid 19101:tid 19141] [client 74.248.36.12:52126] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeqsY2AHj9bEvrTgbO31hwAAAEQ"]
[Fri Apr 24 07:33:58.112266 2026] [:error] [pid 19102:tid 19186] [client 74.248.36.12:52144] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeqsZgDSgrbLEZbkqD71UQAAAJY"]
[Fri Apr 24 07:33:59.346635 2026] [:error] [pid 19102:tid 19175] [client 74.248.36.12:57723] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeqsZwDSgrbLEZbkqD71YwAAAIs"]
[Fri Apr 24 07:34:00.359925 2026] [:error] [pid 52129:tid 52145] [client 74.248.36.12:57671] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "aeqsaOKCZKf8_u2LKiC78gAAAQw"]
[Fri Apr 24 07:34:01.312353 2026] [:error] [pid 19200:tid 19208] [client 74.248.36.12:52145] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "aeqsaTQ--M3-tsKAnhHdXwAAAMA"]
[Fri Apr 24 07:34:02.768695 2026] [:error] [pid 19102:tid 19186] [client 74.248.36.12:53907] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "aeqsagDSgrbLEZbkqD71lwAAAJY"]
[Fri Apr 24 07:34:04.256642 2026] [:error] [pid 19102:tid 19178] [client 74.248.36.12:52143] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "aeqsbADSgrbLEZbkqD71qgAAAI4"]
[Fri Apr 24 07:34:05.770483 2026] [:error] [pid 19102:tid 19172] [client 74.248.36.12:52121] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mk.php"] [unique_id "aeqsbQDSgrbLEZbkqD71wgAAAIg"]
[Fri Apr 24 07:34:06.889000 2026] [:error] [pid 19100:tid 19114] [client 74.248.36.12:54897] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mk.php"] [unique_id "aeqsbrF_hzQs4CqbifcsgwAAAAU"]
[Fri Apr 24 07:34:08.426374 2026] [:error] [pid 52129:tid 52156] [client 74.248.36.12:57696] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mk.php"] [unique_id "aeqscOKCZKf8_u2LKiC8cQAAARc"]
[Fri Apr 24 07:34:12.341105 2026] [:error] [pid 52129:tid 52154] [client 74.248.36.12:54953] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mk.php"] [unique_id "aeqsdOKCZKf8_u2LKiC8nQAAARU"]
[Fri Apr 24 07:34:13.825807 2026] [:error] [pid 52129:tid 52139] [client 74.248.36.12:52115] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeqsdeKCZKf8_u2LKiC8swAAAQY"]
[Fri Apr 24 07:34:16.182606 2026] [:error] [pid 19100:tid 19125] [client 74.248.36.12:57700] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeqseLF_hzQs4CqbifcsmwAAAA8"]
[Fri Apr 24 07:34:21.847121 2026] [:error] [pid 52129:tid 52140] [client 74.248.36.12:57773] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Fri Apr 24 07:34:22.133290 2026] [:error] [pid 52129:tid 52151] [client 74.248.36.12:57773] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Fri Apr 24 07:34:22.936518 2026] [:error] [pid 52129:tid 52140] [client 74.248.36.12:57773] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Fri Apr 24 07:34:23.363155 2026] [:error] [pid 52129:tid 52151] [client 74.248.36.12:57773] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Apr 24 07:34:23.666548 2026] [:error] [pid 52129:tid 52157] [client 74.248.36.12:57773] File does not exist: /usr/local/apache/htdocs/suspended-page/zoo.php
[Fri Apr 24 07:34:23.960872 2026] [:error] [pid 52129:tid 52147] [client 74.248.36.12:57773] File does not exist: /usr/local/apache/htdocs/suspended-page/admlo.php
[Fri Apr 24 07:34:24.251685 2026] [:error] [pid 52129:tid 52133] [client 74.248.36.12:57773] File does not exist: /usr/local/apache/htdocs/suspended-page/gcqoa.php
[Fri Apr 24 07:34:24.540493 2026] [:error] [pid 52129:tid 52144] [client 74.248.36.12:57773] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Fri Apr 24 07:34:24.827119 2026] [:error] [pid 52129:tid 52137] [client 74.248.36.12:57773] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Fri Apr 24 07:34:25.132481 2026] [:error] [pid 52129:tid 52146] [client 74.248.36.12:57773] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Fri Apr 24 07:34:25.416016 2026] [:error] [pid 52129:tid 52155] [client 74.248.36.12:57773] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class-api.php"] [unique_id "aeqsgeKCZKf8_u2LKiC9PwAAARY"]
[Fri Apr 24 07:34:29.749084 2026] [:error] [pid 19102:tid 19180] [client 74.248.36.12:52130] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class-api.php"] [unique_id "aeqshQDSgrbLEZbkqD72qwAAAJA"]
[Fri Apr 24 07:34:31.423532 2026] [:error] [pid 19200:tid 19210] [client 74.248.36.12:57788] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class-api.php"] [unique_id "aeqshzQ--M3-tsKAnhHd_QAAAMI"]
[Fri Apr 24 07:34:33.450382 2026] [:error] [pid 19200:tid 19232] [client 74.248.36.12:57709] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class-api.php"] [unique_id "aeqsiTQ--M3-tsKAnhHeEQAAANg"]
[Fri Apr 24 07:34:34.657217 2026] [:error] [pid 19102:tid 19179] [client 74.248.36.12:55529] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aeqsigDSgrbLEZbkqD72wQAAAI8"]
[Fri Apr 24 07:34:35.391338 2026] [:error] [pid 19100:tid 19123] [client 74.248.36.12:52711] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aeqsi7F_hzQs4Cqbifcs0AAAAA0"]
[Fri Apr 24 07:34:37.344692 2026] [:error] [pid 19200:tid 19231] [client 74.248.36.12:52708] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aeqsjTQ--M3-tsKAnhHeIQAAANc"]
[Fri Apr 24 07:34:38.622695 2026] [:error] [pid 19101:tid 19159] [client 74.248.36.12:55500] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aeqsjmAHj9bEvrTgbO32IQAAAFY"]
[Fri Apr 24 07:34:40.079388 2026] [:error] [pid 52129:tid 52148] [client 74.248.36.12:52151] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeqskOKCZKf8_u2LKiC9zwAAAQ8"]
[Fri Apr 24 07:34:42.908756 2026] [:error] [pid 19200:tid 19217] [client 74.248.36.12:55513] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeqskjQ--M3-tsKAnhHeOAAAAMk"]
[Fri Apr 24 07:34:45.124581 2026] [:error] [pid 19102:tid 19165] [client 74.248.36.12:52685] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeqslQDSgrbLEZbkqD72-gAAAIE"]
[Fri Apr 24 07:34:47.850923 2026] [:error] [pid 52129:tid 52146] [client 74.248.36.12:53939] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeqsl-KCZKf8_u2LKiC-OAAAAQ0"]
[Fri Apr 24 07:34:48.665505 2026] [:error] [pid 19200:tid 19217] [client 74.248.36.12:57767] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "aeqsmDQ--M3-tsKAnhHeaAAAAMk"]
[Fri Apr 24 07:34:50.867205 2026] [:error] [pid 19200:tid 19220] [client 74.248.36.12:57725] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "aeqsmjQ--M3-tsKAnhHeegAAAMw"]
[Fri Apr 24 07:34:53.415088 2026] [:error] [pid 19102:tid 19178] [client 74.248.36.12:55524] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "aeqsnQDSgrbLEZbkqD73FQAAAI4"]
[Fri Apr 24 07:34:54.139383 2026] [:error] [pid 19100:tid 19120] [client 74.248.36.12:53899] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "aeqsnrF_hzQs4CqbifctCwAAAAo"]
[Fri Apr 24 07:34:55.168948 2026] [:error] [pid 52129:tid 52153] [client 74.248.36.12:52704] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "aeqsn-KCZKf8_u2LKiC-bwAAARQ"]
[Fri Apr 24 07:34:56.927979 2026] [:error] [pid 19200:tid 19231] [client 74.248.36.12:57712] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "aeqsoDQ--M3-tsKAnhHepwAAANc"]
[Fri Apr 24 07:34:57.715808 2026] [:error] [pid 52129:tid 52149] [client 74.248.36.12:52721] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "aeqsoeKCZKf8_u2LKiC-hwAAARA"]
[Fri Apr 24 07:34:59.945886 2026] [:error] [pid 19102:tid 19164] [client 74.248.36.12:57727] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "aeqsowDSgrbLEZbkqD73KgAAAIA"]
[Fri Apr 24 09:09:25.605381 2026] [:error] [pid 19100:tid 19132] [client 104.28.208.60:42391] [client 104.28.208.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aerCxbF_hzQs4CqbifdfRwAAABY"]
[Fri Apr 24 09:09:45.642965 2026] [:error] [pid 19200:tid 19224] [client 104.28.161.139:56722] [client 104.28.161.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/style.php"] [unique_id "aerC2TQ--M3-tsKAnhEx7gAAANA"]
[Fri Apr 24 20:25:11.620445 2026] [:error] [pid 4177:tid 4186] [client 195.178.110.241:47600] [client 195.178.110.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aethJ32asKnvdrSe0x4AvgAAAYE"]
[Fri Apr 24 22:13:01.064213 2026] [:error] [pid 17721:tid 17785] [client 158.158.124.89:61283] File does not exist: /usr/local/apache/htdocs/suspended-page/G-In.php
[Fri Apr 24 22:13:01.327027 2026] [:error] [pid 17721:tid 17801] [client 158.158.124.89:61283] File does not exist: /usr/local/apache/htdocs/suspended-page/ox.php
[Fri Apr 24 22:13:01.588648 2026] [:error] [pid 17721:tid 17802] [client 158.158.124.89:61283] File does not exist: /usr/local/apache/htdocs/suspended-page/htto.php
[Fri Apr 24 22:13:01.851415 2026] [:error] [pid 17721:tid 17796] [client 158.158.124.89:61283] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Fri Apr 24 22:13:02.114819 2026] [:error] [pid 17721:tid 17788] [client 158.158.124.89:61283] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Apr 24 22:13:02.385838 2026] [:error] [pid 17721:tid 17791] [client 158.158.124.89:61283] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Fri Apr 24 22:13:02.649766 2026] [:error] [pid 17721:tid 17805] [client 158.158.124.89:61283] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Fri Apr 24 22:13:02.923066 2026] [:error] [pid 17721:tid 17804] [client 158.158.124.89:61283] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Fri Apr 24 22:13:03.185875 2026] [:error] [pid 17721:tid 17790] [client 158.158.124.89:61283] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Fri Apr 24 22:13:03.727126 2026] [:error] [pid 17721:tid 17795] [client 158.158.124.89:61283] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "aet6b-FXXkLeyDnfk_9PQwAAAA4"]
[Fri Apr 24 22:13:05.051515 2026] [:error] [pid 4177:tid 4192] [client 158.158.124.89:27975] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "aet6cX2asKnvdrSe0x5DfAAAAYc"]
[Fri Apr 24 22:13:07.050765 2026] [:error] [pid 4177:tid 4208] [client 158.158.124.89:15538] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "aet6c32asKnvdrSe0x5DgAAAAZc"]
[Fri Apr 24 22:13:10.561068 2026] [:error] [pid 17808:tid 17815] [client 158.158.124.89:49141] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "aet6duarbOEFI8qshvJUCgAAAEU"]
[Fri Apr 24 22:13:13.360531 2026] [:error] [pid 17808:tid 17813] [client 158.158.124.89:21119] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "aet6eearbOEFI8qshvJUGAAAAEM"]
[Fri Apr 24 22:13:14.648072 2026] [:error] [pid 17720:tid 17763] [client 158.158.124.89:60197] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "aet6euhlUs6BS3Ng7_XKpwAAAMk"]
[Fri Apr 24 22:13:16.612004 2026] [:error] [pid 17808:tid 17827] [client 158.158.124.89:21047] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "aet6fOarbOEFI8qshvJUKgAAAFE"]
[Fri Apr 24 22:13:19.405016 2026] [:error] [pid 4177:tid 4207] [client 158.158.124.89:15547] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "aet6f32asKnvdrSe0x5DlgAAAZY"]
[Fri Apr 24 22:13:21.289008 2026] [:error] [pid 22114:tid 22123] [client 158.158.124.89:49095] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkyac.php"] [unique_id "aet6gYAuWGz3WlMQjof7qAAAAQY"]
[Fri Apr 24 22:13:23.615388 2026] [:error] [pid 17720:tid 17765] [client 158.158.124.89:21085] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkyac.php"] [unique_id "aet6g-hlUs6BS3Ng7_XKuQAAAMs"]
[Fri Apr 24 22:13:25.416347 2026] [:error] [pid 17719:tid 17728] [client 158.158.124.89:8357] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkyac.php"] [unique_id "aet6hcTZ9gzEyL1BkPq68wAAAIE"]
[Fri Apr 24 22:13:27.386312 2026] [:error] [pid 17720:tid 17775] [client 158.158.124.89:18953] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkyac.php"] [unique_id "aet6h-hlUs6BS3Ng7_XKwAAAANU"]
[Fri Apr 24 22:13:29.966530 2026] [:error] [pid 17721:tid 17793] [client 158.158.124.89:20607] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "aet6ieFXXkLeyDnfk_9PWAAAAAw"]
[Fri Apr 24 22:13:31.855724 2026] [:error] [pid 17808:tid 17821] [client 158.158.124.89:61273] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "aet6i-arbOEFI8qshvJUQgAAAEs"]
[Fri Apr 24 22:13:38.073500 2026] [:error] [pid 17720:tid 17762] [client 158.158.124.89:21044] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "aet6kuhlUs6BS3Ng7_XK4gAAAMg"]
[Fri Apr 24 22:13:42.486516 2026] [:error] [pid 4177:tid 4199] [client 158.158.124.89:15501] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "aet6ln2asKnvdrSe0x5DyAAAAY4"]
[Fri Apr 24 22:13:44.685187 2026] [:error] [pid 17720:tid 17760] [client 158.158.124.89:39332] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aet6mOhlUs6BS3Ng7_XLBQAAAMY"]
[Fri Apr 24 22:13:46.053334 2026] [:error] [pid 17808:tid 17813] [client 158.158.124.89:21095] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aet6muarbOEFI8qshvJUUgAAAEM"]
[Fri Apr 24 22:13:47.339620 2026] [:error] [pid 4177:tid 4201] [client 158.158.124.89:18967] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aet6m32asKnvdrSe0x5DzQAAAZA"]
[Fri Apr 24 22:13:48.687821 2026] [:error] [pid 17721:tid 17787] [client 158.158.124.89:63036] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aet6nOFXXkLeyDnfk_9PZwAAAAY"]
[Fri Apr 24 22:13:51.001972 2026] [:error] [pid 22114:tid 22139] [client 158.158.124.89:62472] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aet6n4AuWGz3WlMQjof7swAAARY"]
[Fri Apr 24 22:13:52.633641 2026] [:error] [pid 17808:tid 17827] [client 158.158.124.89:47206] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aet6oOarbOEFI8qshvJUYAAAAFE"]
[Fri Apr 24 22:13:55.090120 2026] [:error] [pid 17808:tid 17820] [client 158.158.124.89:21057] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aet6o-arbOEFI8qshvJUaAAAAEo"]
[Fri Apr 24 22:13:57.012879 2026] [:error] [pid 4177:tid 4208] [client 158.158.124.89:21107] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aet6pX2asKnvdrSe0x5D2gAAAZc"]
[Fri Apr 24 22:13:59.311766 2026] [:error] [pid 17808:tid 17823] [client 158.158.124.89:28028] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aet6p-arbOEFI8qshvJUbgAAAE0"]
[Fri Apr 24 22:14:00.459644 2026] [:error] [pid 4177:tid 4201] [client 158.158.124.89:39337] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aet6qH2asKnvdrSe0x5D5gAAAZA"]
[Fri Apr 24 22:14:01.744572 2026] [:error] [pid 17719:tid 17739] [client 158.158.124.89:8375] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aet6qcTZ9gzEyL1BkPq6_wAAAIw"]
[Fri Apr 24 22:14:03.595761 2026] [:error] [pid 4177:tid 4191] [client 158.158.124.89:8377] File does not exist: /usr/local/apache/htdocs/suspended-page/n3yUmQ6Q9xwQ8ocdefault.php
[Fri Apr 24 22:14:03.870168 2026] [:error] [pid 4177:tid 4199] [client 158.158.124.89:8377] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri Apr 24 22:14:04.134150 2026] [:error] [pid 4177:tid 4198] [client 158.158.124.89:8377] File does not exist: /usr/local/apache/htdocs/suspended-page/ctex1.php
[Fri Apr 24 22:14:04.410999 2026] [:error] [pid 4177:tid 4190] [client 158.158.124.89:8377] File does not exist: /usr/local/apache/htdocs/suspended-page/lb.php
[Fri Apr 24 22:14:04.674715 2026] [:error] [pid 4177:tid 4193] [client 158.158.124.89:8377] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Fri Apr 24 22:14:04.938253 2026] [:error] [pid 4177:tid 4192] [client 158.158.124.89:8377] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Fri Apr 24 22:14:05.212914 2026] [:error] [pid 4177:tid 4204] [client 158.158.124.89:8377] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Fri Apr 24 22:14:05.489677 2026] [:error] [pid 4177:tid 4197] [client 158.158.124.89:8377] File does not exist: /usr/local/apache/htdocs/suspended-page/auth.php
[Fri Apr 24 22:14:05.753033 2026] [:error] [pid 4177:tid 4186] [client 158.158.124.89:8377] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Fri Apr 24 22:14:06.017098 2026] [:error] [pid 4177:tid 4195] [client 158.158.124.89:8377] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Apr 24 22:14:06.280792 2026] [:error] [pid 4177:tid 4196] [client 158.158.124.89:8377] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Fri Apr 24 22:14:06.550554 2026] [:error] [pid 4177:tid 4188] [client 158.158.124.89:8377] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aet6rn2asKnvdrSe0x5D_gAAAYM"]
[Fri Apr 24 22:14:09.404742 2026] [:error] [pid 4177:tid 4201] [client 158.158.124.89:49172] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aet6sX2asKnvdrSe0x5EAwAAAZA"]
[Fri Apr 24 22:14:10.459679 2026] [:error] [pid 14531:tid 14553] [client 158.158.124.89:34578] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aet6snfLU2gw-6KR-GbfWwAAAVQ"]
[Fri Apr 24 22:14:15.639989 2026] [:error] [pid 22114:tid 22127] [client 158.158.124.89:49206] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aet6t4AuWGz3WlMQjof70wAAAQo"]
[Fri Apr 24 22:14:16.813113 2026] [:error] [pid 17720:tid 17761] [client 158.158.124.89:30357] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aet6uOhlUs6BS3Ng7_XLJwAAAMc"]
[Fri Apr 24 22:14:18.198349 2026] [:error] [pid 17808:tid 17828] [client 158.158.124.89:8537] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aet6uuarbOEFI8qshvJUjwAAAFI"]
[Fri Apr 24 22:14:21.367846 2026] [:error] [pid 17720:tid 17766] [client 158.158.124.89:31665] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aet6vehlUs6BS3Ng7_XLMAAAAMw"]
[Fri Apr 24 22:14:25.275979 2026] [:error] [pid 17808:tid 17823] [client 158.158.124.89:8228] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aet6wearbOEFI8qshvJUpgAAAE0"]
[Fri Apr 24 22:14:26.872005 2026] [:error] [pid 4177:tid 4187] [client 158.158.124.89:8575] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aet6wn2asKnvdrSe0x5EDgAAAYI"]
[Fri Apr 24 22:14:30.129823 2026] [:error] [pid 17721:tid 17799] [client 158.158.124.89:36999] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aet6xuFXXkLeyDnfk_9PkwAAABI"]
[Fri Apr 24 22:14:32.948778 2026] [:error] [pid 14531:tid 14537] [client 158.158.124.89:38231] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aet6yHfLU2gw-6KR-GbfbgAAAUQ"]
[Fri Apr 24 22:14:34.420221 2026] [:error] [pid 14531:tid 14550] [client 158.158.124.89:56025] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aet6ynfLU2gw-6KR-GbfdQAAAVE"]
[Fri Apr 24 22:14:36.154756 2026] [:error] [pid 17720:tid 17763] [client 158.158.124.89:4422] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aet6zOhlUs6BS3Ng7_XLQgAAAMk"]
[Fri Apr 24 22:14:37.186763 2026] [:error] [pid 17808:tid 17828] [client 158.158.124.89:9434] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aet6zearbOEFI8qshvJUrAAAAFI"]
[Fri Apr 24 22:14:38.601932 2026] [:error] [pid 17720:tid 17775] [client 158.158.124.89:8773] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aet6zuhlUs6BS3Ng7_XLVgAAANU"]
[Fri Apr 24 22:14:39.316344 2026] [:error] [pid 17808:tid 17814] [client 158.158.124.89:22937] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aet6z-arbOEFI8qshvJUsgAAAEQ"]
[Fri Apr 24 22:14:41.044809 2026] [:error] [pid 17720:tid 17760] [client 158.158.124.89:20810] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aet60ehlUs6BS3Ng7_XLYgAAAMY"]
[Fri Apr 24 22:14:43.512359 2026] [:error] [pid 17719:tid 17740] [client 158.158.124.89:22231] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aet608TZ9gzEyL1BkPq7EgAAAI0"]
[Fri Apr 24 22:14:46.771811 2026] [:error] [pid 17720:tid 17774] [client 158.158.124.89:33923] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aet61uhlUs6BS3Ng7_XLgAAAANQ"]
[Fri Apr 24 22:14:48.578598 2026] [:error] [pid 17720:tid 17761] [client 158.158.124.89:9460] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aet62OhlUs6BS3Ng7_XLjAAAAMc"]
[Fri Apr 24 22:14:49.914370 2026] [:error] [pid 17720:tid 17760] [client 158.158.124.89:33452] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aet62ehlUs6BS3Ng7_XLlQAAAMY"]
[Fri Apr 24 22:14:51.638962 2026] [:error] [pid 17720:tid 17757] [client 158.158.124.89:53585] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aet62-hlUs6BS3Ng7_XLnwAAAMM"]
[Fri Apr 24 22:14:53.672367 2026] [:error] [pid 17808:tid 17814] [client 158.158.124.89:4740] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aet63earbOEFI8qshvJUwwAAAEQ"]
[Fri Apr 24 22:14:55.531434 2026] [:error] [pid 17808:tid 17822] [client 158.158.124.89:63068] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aet63-arbOEFI8qshvJUxgAAAEw"]
[Fri Apr 24 22:14:56.702335 2026] [:error] [pid 17720:tid 17767] [client 158.158.124.89:33459] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aet64OhlUs6BS3Ng7_XLrAAAAM0"]
[Fri Apr 24 22:14:58.850782 2026] [:error] [pid 17721:tid 17787] [client 158.158.124.89:17813] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aet64uFXXkLeyDnfk_9PrAAAAAY"]
[Fri Apr 24 22:15:01.697412 2026] [:error] [pid 22114:tid 22131] [client 158.158.124.89:36999] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aet65YAuWGz3WlMQjof78AAAAQ4"]
[Fri Apr 24 22:15:03.810873 2026] [:error] [pid 14531:tid 14552] [client 158.158.124.89:4768] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aet653fLU2gw-6KR-GbfhQAAAVM"]
[Fri Apr 24 22:15:06.058995 2026] [:error] [pid 4177:tid 4191] [client 158.158.124.89:24751] File does not exist: /usr/local/apache/htdocs/suspended-page/amwxl.php
[Fri Apr 24 22:15:07.262784 2026] [:error] [pid 4177:tid 4191] [client 158.158.124.89:24751] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Fri Apr 24 22:15:07.507323 2026] [:error] [pid 4177:tid 4199] [client 158.158.124.89:24751] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php
[Fri Apr 24 22:15:07.754782 2026] [:error] [pid 4177:tid 4190] [client 158.158.124.89:24751] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Fri Apr 24 22:15:08.008183 2026] [:error] [pid 4177:tid 4208] [client 158.158.124.89:24751] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Apr 24 22:15:08.257714 2026] [:error] [pid 4177:tid 4200] [client 158.158.124.89:24751] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Fri Apr 24 22:15:08.499517 2026] [:error] [pid 4177:tid 4203] [client 158.158.124.89:24751] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Fri Apr 24 22:15:08.756102 2026] [:error] [pid 4177:tid 4197] [client 158.158.124.89:24751] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Fri Apr 24 22:15:08.998830 2026] [:error] [pid 4177:tid 4194] [client 158.158.124.89:24751] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Fri Apr 24 22:15:09.247724 2026] [:error] [pid 4177:tid 4206] [client 158.158.124.89:24751] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Fri Apr 24 22:15:09.490378 2026] [:error] [pid 4177:tid 4191] [client 158.158.124.89:24751] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Fri Apr 24 22:15:09.729629 2026] [:error] [pid 4177:tid 4185] [client 158.158.124.89:24751] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aet67X2asKnvdrSe0x5EWQAAAYA"]
[Fri Apr 24 22:15:11.227490 2026] [:error] [pid 17808:tid 17825] [client 158.158.124.89:24014] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aet67-arbOEFI8qshvJU1gAAAE8"]
[Fri Apr 24 22:15:13.235117 2026] [:error] [pid 17808:tid 17827] [client 158.158.124.89:22935] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aet68earbOEFI8qshvJU2gAAAFE"]
[Fri Apr 24 22:15:15.413438 2026] [:error] [pid 14531:tid 14550] [client 158.158.124.89:9914] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aet683fLU2gw-6KR-GbfjQAAAVE"]
[Fri Apr 24 22:15:16.805018 2026] [:error] [pid 14531:tid 14553] [client 158.158.124.89:29080] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aet69HfLU2gw-6KR-GbfjgAAAVQ"]
[Fri Apr 24 22:15:19.555959 2026] [:error] [pid 22114:tid 22125] [client 158.158.124.89:50549] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aet694AuWGz3WlMQjof7-AAAAQg"]
[Fri Apr 24 22:15:20.967269 2026] [:error] [pid 14531:tid 14550] [client 158.158.124.89:28439] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aet6-HfLU2gw-6KR-GbfkwAAAVE"]
[Fri Apr 24 22:15:23.717648 2026] [:error] [pid 14531:tid 14537] [client 158.158.124.89:63219] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aet6-3fLU2gw-6KR-GbfmQAAAUQ"]
[Fri Apr 24 22:15:25.067473 2026] [:error] [pid 17719:tid 17747] [client 158.158.124.89:63222] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/koiy.php"] [unique_id "aet6_cTZ9gzEyL1BkPq7JwAAAJQ"]
[Fri Apr 24 22:15:26.742843 2026] [:error] [pid 17720:tid 17765] [client 158.158.124.89:18275] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/koiy.php"] [unique_id "aet6_uhlUs6BS3Ng7_XL7AAAAMs"]
[Fri Apr 24 22:15:27.843837 2026] [:error] [pid 17808:tid 17824] [client 158.158.124.89:23974] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/koiy.php"] [unique_id "aet6_-arbOEFI8qshvJU6QAAAE4"]
[Fri Apr 24 22:15:29.536802 2026] [:error] [pid 22114:tid 22124] [client 158.158.124.89:62989] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/koiy.php"] [unique_id "aet7AYAuWGz3WlMQjof8AQAAAQc"]
[Fri Apr 24 22:15:31.800526 2026] [:error] [pid 17808:tid 17820] [client 158.158.124.89:17006] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "aet7A-arbOEFI8qshvJU7gAAAEo"]
[Fri Apr 24 22:15:34.781891 2026] [:error] [pid 17808:tid 17825] [client 158.158.124.89:47221] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "aet7BuarbOEFI8qshvJU8wAAAE8"]
[Fri Apr 24 22:15:35.990807 2026] [:error] [pid 17720:tid 17765] [client 158.158.124.89:21408] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "aet7B-hlUs6BS3Ng7_XL9gAAAMs"]
[Fri Apr 24 22:15:37.945690 2026] [:error] [pid 14531:tid 14539] [client 158.158.124.89:23466] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "aet7CXfLU2gw-6KR-GbfsAAAAUY"]
[Fri Apr 24 22:15:40.075133 2026] [:error] [pid 4177:tid 4203] [client 158.158.124.89:48503] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aet7DH2asKnvdrSe0x5EeQAAAZI"]
[Fri Apr 24 22:15:41.738018 2026] [:error] [pid 17720:tid 17773] [client 158.158.124.89:20250] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aet7DehlUs6BS3Ng7_XL_QAAANM"]
[Fri Apr 24 22:15:44.351943 2026] [:error] [pid 4177:tid 4186] [client 158.158.124.89:23282] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aet7EH2asKnvdrSe0x5EhQAAAYE"]
[Fri Apr 24 22:15:48.954650 2026] [:error] [pid 17720:tid 17763] [client 158.158.124.89:31889] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aet7FOhlUs6BS3Ng7_XMFAAAAMk"]
[Fri Apr 24 22:15:50.968418 2026] [:error] [pid 17720:tid 17767] [client 158.158.124.89:51884] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "aet7FuhlUs6BS3Ng7_XMFwAAAM0"]
[Fri Apr 24 22:15:53.257105 2026] [:error] [pid 17720:tid 17763] [client 158.158.124.89:26175] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "aet7GehlUs6BS3Ng7_XMIAAAAMk"]
[Fri Apr 24 22:15:54.468046 2026] [:error] [pid 22114:tid 22126] [client 158.158.124.89:32498] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "aet7GoAuWGz3WlMQjof8DgAAAQk"]
[Fri Apr 24 22:15:55.361401 2026] [:error] [pid 17808:tid 17810] [client 158.158.124.89:31879] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "aet7G-arbOEFI8qshvJU_wAAAEA"]
[Fri Apr 24 22:15:56.831618 2026] [:error] [pid 17720:tid 17756] [client 158.158.124.89:23267] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aet7HOhlUs6BS3Ng7_XMKgAAAMI"]
[Fri Apr 24 22:15:58.389625 2026] [:error] [pid 4177:tid 4185] [client 158.158.124.89:56693] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aet7Hn2asKnvdrSe0x5EogAAAYA"]
[Fri Apr 24 22:15:59.602898 2026] [:error] [pid 4177:tid 4196] [client 158.158.124.89:31933] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aet7H32asKnvdrSe0x5EqgAAAYs"]
[Fri Apr 24 22:16:01.240625 2026] [:error] [pid 17720:tid 17754] [client 158.158.124.89:62316] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aet7IehlUs6BS3Ng7_XMOgAAAMA"]
[Fri Apr 24 22:16:02.541443 2026] [:error] [pid 17720:tid 17772] [client 158.158.124.89:18442] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aet7IuhlUs6BS3Ng7_XMQgAAANI"]
[Fri Apr 24 22:16:09.158868 2026] [:error] [pid 4177:tid 4205] [client 158.158.124.89:47862] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Fri Apr 24 22:16:09.422688 2026] [:error] [pid 4177:tid 4187] [client 158.158.124.89:47862] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Fri Apr 24 22:16:09.664524 2026] [:error] [pid 4177:tid 4196] [client 158.158.124.89:47862] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Fri Apr 24 22:16:09.912765 2026] [:error] [pid 4177:tid 4207] [client 158.158.124.89:47862] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Fri Apr 24 22:16:10.159851 2026] [:error] [pid 4177:tid 4198] [client 158.158.124.89:47862] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Fri Apr 24 22:16:10.402885 2026] [:error] [pid 4177:tid 4190] [client 158.158.124.89:47862] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Fri Apr 24 22:16:10.645748 2026] [:error] [pid 4177:tid 4205] [client 158.158.124.89:47862] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Fri Apr 24 22:16:10.888648 2026] [:error] [pid 4177:tid 4191] [client 158.158.124.89:47862] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Fri Apr 24 22:16:11.134945 2026] [:error] [pid 4177:tid 4204] [client 158.158.124.89:47862] File does not exist: /usr/local/apache/htdocs/suspended-page/t00l.php
[Fri Apr 24 22:16:11.380379 2026] [:error] [pid 4177:tid 4199] [client 158.158.124.89:47862] File does not exist: /usr/local/apache/htdocs/suspended-page/casp1.php
[Fri Apr 24 22:16:11.624155 2026] [:error] [pid 4177:tid 4202] [client 158.158.124.89:47862] File does not exist: /usr/local/apache/htdocs/suspended-page/acc.php
[Fri Apr 24 22:16:11.866693 2026] [:error] [pid 4177:tid 4187] [client 158.158.124.89:47862] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "aet7K32asKnvdrSe0x5ExwAAAYI"]
[Fri Apr 24 22:16:13.207369 2026] [:error] [pid 17719:tid 17728] [client 158.158.124.89:8674] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "aet7LcTZ9gzEyL1BkPq7XAAAAIE"]
[Fri Apr 24 22:16:16.500545 2026] [:error] [pid 17721:tid 17791] [client 158.158.124.89:15823] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "aet7MOFXXkLeyDnfk_9P7QAAAAo"]
[Fri Apr 24 22:16:26.419392 2026] [:error] [pid 17720:tid 17760] [client 158.158.124.89:57155] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "aet7OuhlUs6BS3Ng7_XMcwAAAMY"]
[Fri Apr 24 22:16:27.145215 2026] [:error] [pid 4177:tid 4206] [client 158.158.124.89:15569] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aet7O32asKnvdrSe0x5E5AAAAZU"]
[Fri Apr 24 22:16:28.429193 2026] [:error] [pid 17808:tid 17830] [client 158.158.124.89:22738] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aet7POarbOEFI8qshvJVFwAAAFQ"]
[Fri Apr 24 22:16:31.354297 2026] [:error] [pid 14531:tid 14535] [client 158.158.124.89:18528] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aet7P3fLU2gw-6KR-GbfzQAAAUI"]
[Fri Apr 24 22:16:32.235983 2026] [:error] [pid 17720:tid 17761] [client 158.158.124.89:31694] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aet7QOhlUs6BS3Ng7_XMhgAAAMc"]
[Fri Apr 24 22:16:33.370735 2026] [:error] [pid 14531:tid 14553] [client 158.158.124.89:57154] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "aet7QXfLU2gw-6KR-Gbf0QAAAVQ"]
[Fri Apr 24 22:16:36.107992 2026] [:error] [pid 14531:tid 14554] [client 158.158.124.89:35209] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "aet7RHfLU2gw-6KR-Gbf2AAAAVU"]
[Fri Apr 24 22:16:37.427308 2026] [:error] [pid 14531:tid 14536] [client 158.158.124.89:18548] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "aet7RXfLU2gw-6KR-Gbf3wAAAUM"]
[Fri Apr 24 22:16:38.788817 2026] [:error] [pid 14531:tid 14539] [client 158.158.124.89:47853] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "aet7RnfLU2gw-6KR-Gbf5wAAAUY"]
[Fri Apr 24 22:16:40.319456 2026] [:error] [pid 17719:tid 17749] [client 158.158.124.89:4120] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aet7SMTZ9gzEyL1BkPq7ZgAAAJY"]
[Fri Apr 24 22:16:42.553366 2026] [:error] [pid 17720:tid 17766] [client 158.158.124.89:49904] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aet7SuhlUs6BS3Ng7_XMrQAAAMw"]
[Fri Apr 24 22:16:46.212259 2026] [:error] [pid 17719:tid 17736] [client 158.158.124.89:23007] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aet7TsTZ9gzEyL1BkPq7hwAAAIk"]
[Fri Apr 24 22:16:57.523916 2026] [:error] [pid 4177:tid 4191] [client 158.158.124.89:53071] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "aet7WX2asKnvdrSe0x5FFQAAAYY"]
[Fri Apr 24 22:17:02.678551 2026] [:error] [pid 17720:tid 17772] [client 158.158.124.89:16585] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "aet7XuhlUs6BS3Ng7_XM7AAAANI"]
[Fri Apr 24 22:17:05.776845 2026] [:error] [pid 4177:tid 4196] [client 158.158.124.89:38231] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "aet7YX2asKnvdrSe0x5FKAAAAYs"]
[Fri Apr 24 22:17:08.818383 2026] [:error] [pid 17808:tid 17820] [client 158.158.124.89:55982] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "aet7ZOarbOEFI8qshvJVOwAAAEo"]
[Fri Apr 24 22:17:11.428474 2026] [:error] [pid 22114:tid 22130] [client 158.158.124.89:8391] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Fri Apr 24 22:17:11.669857 2026] [:error] [pid 22114:tid 22129] [client 158.158.124.89:8391] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Fri Apr 24 22:17:11.916693 2026] [:error] [pid 22114:tid 22140] [client 158.158.124.89:8391] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Fri Apr 24 22:17:12.161019 2026] [:error] [pid 22114:tid 22119] [client 158.158.124.89:8391] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Fri Apr 24 22:17:12.404917 2026] [:error] [pid 22114:tid 22125] [client 158.158.124.89:8391] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Fri Apr 24 22:17:12.648909 2026] [:error] [pid 22114:tid 22134] [client 158.158.124.89:8391] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Fri Apr 24 22:17:12.892926 2026] [:error] [pid 22114:tid 22120] [client 158.158.124.89:8391] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Fri Apr 24 22:17:13.135512 2026] [:error] [pid 22114:tid 22135] [client 158.158.124.89:8391] File does not exist: /usr/local/apache/htdocs/suspended-page/prosellers8.php
[Fri Apr 24 22:17:13.396767 2026] [:error] [pid 22114:tid 22123] [client 158.158.124.89:8391] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Fri Apr 24 22:17:13.640519 2026] [:error] [pid 22114:tid 22133] [client 158.158.124.89:8391] File does not exist: /usr/local/apache/htdocs/suspended-page/ww.php
[Fri Apr 24 22:17:13.883185 2026] [:error] [pid 22114:tid 22138] [client 158.158.124.89:8391] File does not exist: /usr/local/apache/htdocs/suspended-page/fsjzs.php
[Fri Apr 24 22:17:14.123577 2026] [:error] [pid 22114:tid 22117] [client 158.158.124.89:8391] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cwclass.php"] [unique_id "aet7aoAuWGz3WlMQjof8UwAAAQA"]
[Fri Apr 24 22:17:15.204428 2026] [:error] [pid 4177:tid 4196] [client 158.158.124.89:21807] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cwclass.php"] [unique_id "aet7a32asKnvdrSe0x5FNQAAAYs"]
[Fri Apr 24 22:17:16.306659 2026] [:error] [pid 17720:tid 17778] [client 158.158.124.89:49977] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cwclass.php"] [unique_id "aet7bOhlUs6BS3Ng7_XNGAAAANg"]
[Fri Apr 24 22:17:17.132522 2026] [:error] [pid 14531:tid 14547] [client 158.158.124.89:25679] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cwclass.php"] [unique_id "aet7bXfLU2gw-6KR-GbgNQAAAU4"]
[Fri Apr 24 22:17:17.914558 2026] [:error] [pid 22114:tid 22119] [client 158.158.124.89:49938] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit-tags.php"] [unique_id "aet7bYAuWGz3WlMQjof8VQAAAQI"]
[Fri Apr 24 22:17:18.728460 2026] [:error] [pid 17720:tid 17768] [client 158.158.124.89:55961] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit-tags.php"] [unique_id "aet7buhlUs6BS3Ng7_XNIwAAAM4"]
[Fri Apr 24 22:17:19.564507 2026] [:error] [pid 17721:tid 17781] [client 158.158.124.89:53062] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit-tags.php"] [unique_id "aet7b-FXXkLeyDnfk_9QOgAAAAA"]
[Fri Apr 24 22:17:20.070440 2026] [:error] [pid 22114:tid 22122] [client 158.158.124.89:10958] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit-tags.php"] [unique_id "aet7cIAuWGz3WlMQjof8WQAAAQU"]
[Fri Apr 24 22:17:21.391142 2026] [:error] [pid 17720:tid 17767] [client 158.158.124.89:10973] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "aet7cehlUs6BS3Ng7_XNKAAAAM0"]
[Fri Apr 24 22:17:23.441740 2026] [:error] [pid 14531:tid 14542] [client 158.158.124.89:30893] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "aet7c3fLU2gw-6KR-GbgPAAAAUk"]
[Fri Apr 24 22:17:25.354493 2026] [:error] [pid 17720:tid 17766] [client 158.158.124.89:10997] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "aet7dehlUs6BS3Ng7_XNNAAAAMw"]
[Fri Apr 24 22:17:26.232216 2026] [:error] [pid 17720:tid 17765] [client 158.158.124.89:21805] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "aet7duhlUs6BS3Ng7_XNNwAAAMs"]
[Fri Apr 24 22:17:27.139032 2026] [:error] [pid 14531:tid 14554] [client 158.158.124.89:21791] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aet7d3fLU2gw-6KR-GbgRgAAAVU"]
[Fri Apr 24 22:17:28.049773 2026] [:error] [pid 14531:tid 14551] [client 158.158.124.89:29158] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aet7eHfLU2gw-6KR-GbgTgAAAVI"]
[Fri Apr 24 22:17:32.516386 2026] [:error] [pid 4177:tid 4190] [client 158.158.124.89:4212] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aet7fH2asKnvdrSe0x5FUAAAAYU"]
[Fri Apr 24 22:17:34.399595 2026] [:error] [pid 17719:tid 17732] [client 158.158.124.89:4222] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aet7fsTZ9gzEyL1BkPq7nwAAAIU"]
[Fri Apr 24 22:17:37.612146 2026] [:error] [pid 17720:tid 17761] [client 158.158.124.89:4163] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aet7gehlUs6BS3Ng7_XNVQAAAMc"]
[Fri Apr 24 22:17:39.728869 2026] [:error] [pid 4177:tid 4207] [client 158.158.124.89:4964] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aet7g32asKnvdrSe0x5FUwAAAZY"]
[Fri Apr 24 22:17:43.631317 2026] [:error] [pid 17808:tid 17824] [client 158.158.124.89:21812] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aet7h-arbOEFI8qshvJVcwAAAE4"]
[Fri Apr 24 22:17:46.608757 2026] [:error] [pid 17720:tid 17774] [client 158.158.124.89:10975] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aet7iuhlUs6BS3Ng7_XNcgAAANQ"]
[Fri Apr 24 22:17:49.554818 2026] [:error] [pid 14531:tid 14545] [client 158.158.124.89:19796] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ai.php"] [unique_id "aet7jXfLU2gw-6KR-GbgcwAAAUw"]
[Fri Apr 24 22:17:53.721963 2026] [:error] [pid 17808:tid 17820] [client 158.158.124.89:18718] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ai.php"] [unique_id "aet7kearbOEFI8qshvJVhgAAAEo"]
[Fri Apr 24 22:17:58.138347 2026] [:error] [pid 17808:tid 17828] [client 158.158.124.89:18689] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ai.php"] [unique_id "aet7luarbOEFI8qshvJViwAAAFI"]
[Fri Apr 24 22:18:01.605526 2026] [:error] [pid 17721:tid 17801] [client 158.158.124.89:29150] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ai.php"] [unique_id "aet7meFXXkLeyDnfk_9QWAAAABQ"]
[Fri Apr 24 22:18:20.083910 2026] [:error] [pid 22114:tid 22137] [client 158.158.124.89:25668] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Fri Apr 24 22:18:20.347028 2026] [:error] [pid 22114:tid 22121] [client 158.158.124.89:25668] File does not exist: /usr/local/apache/htdocs/suspended-page/gk.php
[Fri Apr 24 22:18:20.610640 2026] [:error] [pid 22114:tid 22124] [client 158.158.124.89:25668] File does not exist: /usr/local/apache/htdocs/suspended-page/xmu.php
[Fri Apr 24 22:18:20.880923 2026] [:error] [pid 22114:tid 22140] [client 158.158.124.89:25668] File does not exist: /usr/local/apache/htdocs/suspended-page/sd.php
[Sat Apr 25 00:10:25.543821 2026] [:error] [pid 42792:tid 42831] [client 151.243.143.47:33934] [client 151.243.143.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aeuV8dNi9qR4GtafpfG53wAAAgk"]
[Sat Apr 25 00:10:25.582901 2026] [:error] [pid 42852:tid 42867] [client 151.243.143.47:33918] [client 151.243.143.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/HEAD"] [unique_id "aeuV8TMEwxhhak_EhMJlswAAAkw"]
[Sat Apr 25 00:53:35.140662 2026] [:error] [pid 42755:tid 42768] [client 45.45.237.225:49878] [client 45.45.237.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/HEAD"] [unique_id "aeugD9H7__k0j6aa6039cgAAAIs"]
[Sat Apr 25 00:53:35.149436 2026] [:error] [pid 42791:tid 42814] [client 45.45.237.225:49876] [client 45.45.237.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aeugD7KmN9doraCEWKXj8AAAAdM"]
[Sat Apr 25 10:08:18.302683 2026] [:error] [pid 44321:tid 44392] [client 20.214.230.200:4240] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Apr 25 10:08:18.448718 2026] [:error] [pid 44321:tid 44395] [client 20.214.230.200:4240] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat Apr 25 10:08:18.754797 2026] [:error] [pid 44321:tid 44384] [client 20.214.230.200:4240] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat Apr 25 10:08:18.899921 2026] [:error] [pid 44321:tid 44402] [client 20.214.230.200:4240] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Apr 25 10:08:19.192084 2026] [:error] [pid 44321:tid 44385] [client 20.214.230.200:4240] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sat Apr 25 10:08:19.345309 2026] [:error] [pid 44321:tid 44389] [client 20.214.230.200:4240] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Apr 25 10:08:19.489643 2026] [:error] [pid 44321:tid 44401] [client 20.214.230.200:4240] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sat Apr 25 10:08:19.921603 2026] [:error] [pid 44321:tid 44387] [client 20.214.230.200:4240] [client 20.214.230.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aewiE41b5lV-asWa_Y5fawAAAIQ"]
[Sat Apr 25 10:08:20.483110 2026] [:error] [pid 46083:tid 46097] [client 20.214.230.200:4598] [client 20.214.230.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aewiFDxw_Zq74vWdjmmZHwAAAQo"]
[Sat Apr 25 10:08:21.087929 2026] [:error] [pid 46083:tid 46089] [client 20.214.230.200:2274] [client 20.214.230.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aewiFTxw_Zq74vWdjmmZIgAAAQI"]
[Sat Apr 25 10:08:21.655134 2026] [:error] [pid 44321:tid 44384] [client 20.214.230.200:3352] [client 20.214.230.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aewiFY1b5lV-asWa_Y5fcwAAAIE"]
[Sat Apr 25 11:01:41.073888 2026] [:error] [pid 44320:tid 44374] [client 20.214.230.200:1881] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Apr 25 11:01:41.245145 2026] [:error] [pid 44320:tid 44357] [client 20.214.230.200:1881] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat Apr 25 11:01:41.520339 2026] [:error] [pid 44320:tid 44356] [client 20.214.230.200:1881] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat Apr 25 11:01:41.687181 2026] [:error] [pid 44320:tid 44365] [client 20.214.230.200:1881] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Apr 25 11:01:41.966760 2026] [:error] [pid 44320:tid 44380] [client 20.214.230.200:1881] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sat Apr 25 11:01:42.104687 2026] [:error] [pid 44320:tid 44377] [client 20.214.230.200:1881] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Apr 25 11:01:42.242301 2026] [:error] [pid 44320:tid 44378] [client 20.214.230.200:1881] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sat Apr 25 11:01:42.679208 2026] [:error] [pid 44320:tid 44359] [client 20.214.230.200:1881] [client 20.214.230.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aewuljmFqSpku_dij8imngAAAEM"]
[Sat Apr 25 11:01:43.219033 2026] [:error] [pid 44321:tid 44391] [client 20.214.230.200:3718] [client 20.214.230.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aewul41b5lV-asWa_Y5seQAAAIg"]
[Sat Apr 25 11:01:43.797844 2026] [:error] [pid 44321:tid 44386] [client 20.214.230.200:4303] [client 20.214.230.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aewul41b5lV-asWa_Y5segAAAIM"]
[Sat Apr 25 11:01:44.376811 2026] [:error] [pid 44320:tid 44362] [client 20.214.230.200:1948] [client 20.214.230.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aewumDmFqSpku_dij8imnwAAAEY"]
[Sat Apr 25 17:24:44.664077 2026] [:error] [pid 62804:tid 62815] [client 72.146.5.227:22419] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Sat Apr 25 17:24:44.932604 2026] [:error] [pid 62804:tid 62836] [client 72.146.5.227:22419] File does not exist: /usr/local/apache/htdocs/suspended-page/card.php
[Sat Apr 25 17:24:45.203947 2026] [:error] [pid 62804:tid 62822] [client 72.146.5.227:22419] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sat Apr 25 17:24:45.489772 2026] [:error] [pid 62804:tid 62830] [client 72.146.5.227:22419] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-lacoto.php
[Sat Apr 25 17:24:45.757650 2026] [:error] [pid 62804:tid 62820] [client 72.146.5.227:22419] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kikikoko.php
[Sat Apr 25 17:24:46.040337 2026] [:error] [pid 62804:tid 62826] [client 72.146.5.227:22419] File does not exist: /usr/local/apache/htdocs/suspended-page/ganja.php
[Sat Apr 25 17:24:46.315456 2026] [:error] [pid 62804:tid 62818] [client 72.146.5.227:22419] File does not exist: /usr/local/apache/htdocs/suspended-page/eetu.php
[Sat Apr 25 17:24:46.591683 2026] [:error] [pid 62804:tid 62814] [client 72.146.5.227:22419] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-X1s2e6h3p7.php
[Sat Apr 25 17:24:46.901865 2026] [:error] [pid 62804:tid 62827] [client 72.146.5.227:22419] File does not exist: /usr/local/apache/htdocs/suspended-page/dragonshell.php
[Sat Apr 25 17:24:47.171263 2026] [:error] [pid 62804:tid 62819] [client 72.146.5.227:22419] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Sat Apr 25 17:24:47.439394 2026] [:error] [pid 62804:tid 62831] [client 72.146.5.227:22419] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "aeyIX1cFrMNK-MrDXtPf3gAAARM"]
[Sat Apr 25 17:24:50.226849 2026] [:error] [pid 62630:tid 62687] [client 72.146.5.227:9224] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "aeyIYnCJIizbz7HiRHTFHQAAAEU"]
[Sat Apr 25 17:24:51.780967 2026] [:error] [pid 62804:tid 62826] [client 72.146.5.227:15984] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "aeyIY1cFrMNK-MrDXtPf5wAAAQ4"]
[Sat Apr 25 17:24:52.884791 2026] [:error] [pid 62631:tid 62720] [client 72.146.5.227:34476] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "aeyIZFqQlRXN7uR3kqhO2AAAAIo"]
[Sat Apr 25 17:24:54.192266 2026] [:error] [pid 62632:tid 62751] [client 72.146.5.227:19405] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "aeyIZgo5oFy5kfJhz1ZTVgAAAM4"]
[Sat Apr 25 17:24:55.230806 2026] [:error] [pid 62804:tid 62831] [client 72.146.5.227:9669] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "aeyIZ1cFrMNK-MrDXtPf8wAAARM"]
[Sat Apr 25 17:24:56.378492 2026] [:error] [pid 62804:tid 62826] [client 72.146.5.227:23083] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "aeyIaFcFrMNK-MrDXtPf9gAAAQ4"]
[Sat Apr 25 17:24:56.957657 2026] [:error] [pid 62804:tid 62815] [client 72.146.5.227:9270] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "aeyIaFcFrMNK-MrDXtPf-QAAAQM"]
[Sat Apr 25 17:24:57.898787 2026] [:error] [pid 62632:tid 62742] [client 72.146.5.227:9253] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "aeyIaQo5oFy5kfJhz1ZTYQAAAMU"]
[Sat Apr 25 17:24:58.848471 2026] [:error] [pid 62804:tid 62818] [client 72.146.5.227:21812] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "aeyIalcFrMNK-MrDXtPf_QAAAQY"]
[Sat Apr 25 17:24:59.716916 2026] [:error] [pid 62630:tid 62690] [client 72.146.5.227:18780] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "aeyIa3CJIizbz7HiRHTFIgAAAEg"]
[Sat Apr 25 17:25:00.600035 2026] [:error] [pid 62804:tid 62822] [client 72.146.5.227:18064] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "aeyIbFcFrMNK-MrDXtPgBAAAAQo"]
[Sat Apr 25 17:25:02.140450 2026] [:error] [pid 62632:tid 62756] [client 72.146.5.227:21809] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xroot.php"] [unique_id "aeyIbgo5oFy5kfJhz1ZTaQAAANM"]
[Sat Apr 25 17:25:04.110987 2026] [:error] [pid 62630:tid 62701] [client 72.146.5.227:9707] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xroot.php"] [unique_id "aeyIcHCJIizbz7HiRHTFLAAAAFM"]
[Sat Apr 25 17:25:07.633538 2026] [:error] [pid 62804:tid 62824] [client 72.146.5.227:18100] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xroot.php"] [unique_id "aeyIc1cFrMNK-MrDXtPgDwAAAQw"]
[Sat Apr 25 17:25:09.658683 2026] [:error] [pid 62631:tid 62717] [client 72.146.5.227:19417] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xroot.php"] [unique_id "aeyIdVqQlRXN7uR3kqhO9AAAAIc"]
[Sat Apr 25 17:25:10.526878 2026] [:error] [pid 62631:tid 62719] [client 72.146.5.227:9686] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeyIdlqQlRXN7uR3kqhO9gAAAIk"]
[Sat Apr 25 17:25:11.326051 2026] [:error] [pid 62631:tid 62716] [client 72.146.5.227:25132] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeyId1qQlRXN7uR3kqhO-QAAAIY"]
[Sat Apr 25 17:25:12.261878 2026] [:error] [pid 62631:tid 62721] [client 72.146.5.227:10217] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeyIeFqQlRXN7uR3kqhO-wAAAIs"]
[Sat Apr 25 17:25:13.542910 2026] [:error] [pid 62804:tid 62814] [client 72.146.5.227:23694] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeyIeVcFrMNK-MrDXtPgHQAAAQI"]
[Sat Apr 25 17:25:14.683530 2026] [:error] [pid 62804:tid 62816] [client 72.146.5.227:23052] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uwu.php"] [unique_id "aeyIelcFrMNK-MrDXtPgIAAAAQQ"]
[Sat Apr 25 17:25:16.238030 2026] [:error] [pid 62804:tid 62814] [client 72.146.5.227:23725] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uwu.php"] [unique_id "aeyIfFcFrMNK-MrDXtPgJAAAAQI"]
[Sat Apr 25 17:25:16.961106 2026] [:error] [pid 62632:tid 62738] [client 72.146.5.227:21775] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uwu.php"] [unique_id "aeyIfAo5oFy5kfJhz1ZTcwAAAME"]
[Sat Apr 25 17:25:17.949715 2026] [:error] [pid 62631:tid 62710] [client 72.146.5.227:9391] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeyIfVqQlRXN7uR3kqhPBwAAAIA"]
[Sat Apr 25 17:25:18.959114 2026] [:error] [pid 62632:tid 62756] [client 72.146.5.227:23742] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeyIfgo5oFy5kfJhz1ZTeQAAANM"]
[Sat Apr 25 17:25:20.217561 2026] [:error] [pid 62630:tid 62705] [client 72.146.5.227:19425] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeyIgHCJIizbz7HiRHTFNwAAAFc"]
[Sat Apr 25 17:25:22.102519 2026] [:error] [pid 62631:tid 62712] [client 72.146.5.227:16929] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeyIglqQlRXN7uR3kqhPDgAAAII"]
[Sat Apr 25 17:25:23.858292 2026] [:error] [pid 62804:tid 62823] [client 72.146.5.227:10208] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "aeyIg1cFrMNK-MrDXtPgLgAAAQs"]
[Sat Apr 25 17:25:25.349966 2026] [:error] [pid 62804:tid 62821] [client 72.146.5.227:21796] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "aeyIhVcFrMNK-MrDXtPgMQAAAQk"]
[Sat Apr 25 17:25:28.312124 2026] [:error] [pid 62804:tid 62829] [client 72.146.5.227:21763] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "aeyIiFcFrMNK-MrDXtPgOAAAARE"]
[Sat Apr 25 17:25:30.016278 2026] [:error] [pid 62804:tid 62821] [client 72.146.5.227:25147] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "aeyIilcFrMNK-MrDXtPgPgAAAQk"]
[Sat Apr 25 17:25:30.795913 2026] [:error] [pid 62631:tid 62732] [client 72.146.5.227:25128] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aeyIilqQlRXN7uR3kqhPFgAAAJY"]
[Sat Apr 25 17:25:32.595854 2026] [:error] [pid 62631:tid 62726] [client 72.146.5.227:9355] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aeyIjFqQlRXN7uR3kqhPGQAAAJA"]
[Sat Apr 25 17:25:33.830784 2026] [:error] [pid 62804:tid 62827] [client 72.146.5.227:26407] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aeyIjVcFrMNK-MrDXtPgSgAAAQ8"]
[Sat Apr 25 17:25:35.394977 2026] [:error] [pid 62804:tid 62836] [client 72.146.5.227:26456] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aeyIj1cFrMNK-MrDXtPgUwAAARg"]
[Sat Apr 25 17:25:36.485256 2026] [:error] [pid 62804:tid 62819] [client 72.146.5.227:21772] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "aeyIkFcFrMNK-MrDXtPgVgAAAQc"]
[Sat Apr 25 17:25:41.330066 2026] [:error] [pid 62631:tid 62722] [client 72.146.5.227:23805] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "aeyIlVqQlRXN7uR3kqhPIQAAAIw"]
[Sat Apr 25 17:25:42.236740 2026] [:error] [pid 62630:tid 62702] [client 72.146.5.227:16953] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "aeyIlnCJIizbz7HiRHTFSwAAAFQ"]
[Sat Apr 25 17:25:45.643491 2026] [:error] [pid 62804:tid 62820] [client 72.146.5.227:25100] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "aeyImVcFrMNK-MrDXtPgbAAAAQg"]
[Sat Apr 25 17:25:48.996069 2026] [:error] [pid 62632:tid 62745] [client 72.146.5.227:25152] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Sat Apr 25 17:25:49.248004 2026] [:error] [pid 62632:tid 62755] [client 72.146.5.227:25152] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Sat Apr 25 17:25:49.512576 2026] [:error] [pid 62632:tid 62759] [client 72.146.5.227:25152] File does not exist: /usr/local/apache/htdocs/suspended-page/amxloxxr.php
[Sat Apr 25 17:25:49.749791 2026] [:error] [pid 62632:tid 62739] [client 72.146.5.227:25152] File does not exist: /usr/local/apache/htdocs/suspended-page/qhupyoon.php
[Sat Apr 25 17:25:49.994766 2026] [:error] [pid 62632:tid 62750] [client 72.146.5.227:25152] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Sat Apr 25 17:25:50.230396 2026] [:error] [pid 62632:tid 62760] [client 72.146.5.227:25152] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Sat Apr 25 17:25:50.467832 2026] [:error] [pid 62632:tid 62754] [client 72.146.5.227:25152] File does not exist: /usr/local/apache/htdocs/suspended-page/6ap7e.php
[Sat Apr 25 17:25:50.703081 2026] [:error] [pid 62632:tid 62737] [client 72.146.5.227:25152] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Sat Apr 25 17:25:50.939218 2026] [:error] [pid 62632:tid 62758] [client 72.146.5.227:25152] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Sat Apr 25 17:25:51.202140 2026] [:error] [pid 62632:tid 62759] [client 72.146.5.227:25152] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Sat Apr 25 17:25:51.438544 2026] [:error] [pid 62632:tid 62752] [client 72.146.5.227:25152] File does not exist: /usr/local/apache/htdocs/suspended-page/zogy1.php
[Sat Apr 25 17:25:51.671512 2026] [:error] [pid 62632:tid 62760] [client 72.146.5.227:25152] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aeyInwo5oFy5kfJhz1ZT0QAAANc"]
[Sat Apr 25 17:26:02.736283 2026] [:error] [pid 62804:tid 62812] [client 72.146.5.227:25204] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aeyIqlcFrMNK-MrDXtPgjgAAAQA"]
[Sat Apr 25 17:26:05.107153 2026] [:error] [pid 62804:tid 62828] [client 72.146.5.227:26401] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aeyIrVcFrMNK-MrDXtPgmAAAARA"]
[Sat Apr 25 17:26:06.519002 2026] [:error] [pid 62631:tid 62717] [client 72.146.5.227:23789] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aeyIrlqQlRXN7uR3kqhPSAAAAIc"]
[Sat Apr 25 17:26:07.304847 2026] [:error] [pid 62804:tid 62813] [client 72.146.5.227:16956] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atkno.php"] [unique_id "aeyIr1cFrMNK-MrDXtPgpAAAAQE"]
[Sat Apr 25 17:26:09.309133 2026] [:error] [pid 62631:tid 62712] [client 72.146.5.227:10183] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atkno.php"] [unique_id "aeyIsVqQlRXN7uR3kqhPTwAAAII"]
[Sat Apr 25 17:26:10.499820 2026] [:error] [pid 62630:tid 62706] [client 72.146.5.227:16939] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atkno.php"] [unique_id "aeyIsnCJIizbz7HiRHTFaQAAAFg"]
[Sat Apr 25 17:26:11.747880 2026] [:error] [pid 62804:tid 62826] [client 72.146.5.227:28388] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atkno.php"] [unique_id "aeyIs1cFrMNK-MrDXtPgyAAAAQ4"]
[Sat Apr 25 17:26:12.786710 2026] [:error] [pid 62804:tid 62825] [client 72.146.5.227:23779] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "aeyItFcFrMNK-MrDXtPgzAAAAQ0"]
[Sat Apr 25 17:26:13.749888 2026] [:error] [pid 62632:tid 62755] [client 72.146.5.227:28411] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "aeyItQo5oFy5kfJhz1ZT_gAAANI"]
[Sat Apr 25 17:26:15.090709 2026] [:error] [pid 62632:tid 62747] [client 72.146.5.227:23710] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "aeyItwo5oFy5kfJhz1ZUBwAAAMo"]
[Sat Apr 25 17:26:16.257074 2026] [:error] [pid 62632:tid 62740] [client 72.146.5.227:27703] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "aeyIuAo5oFy5kfJhz1ZUDAAAAMM"]
[Sat Apr 25 17:26:17.023683 2026] [:error] [pid 62632:tid 62748] [client 72.146.5.227:26423] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "aeyIuQo5oFy5kfJhz1ZUEQAAAMs"]
[Sat Apr 25 17:26:18.470451 2026] [:error] [pid 62631:tid 62720] [client 72.146.5.227:25195] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "aeyIulqQlRXN7uR3kqhPVgAAAIo"]
[Sat Apr 25 17:26:20.980913 2026] [:error] [pid 62630:tid 62698] [client 72.146.5.227:16957] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "aeyIvHCJIizbz7HiRHTFegAAAFA"]
[Sat Apr 25 17:26:22.197975 2026] [:error] [pid 62631:tid 62724] [client 72.146.5.227:27675] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "aeyIvlqQlRXN7uR3kqhPZQAAAI4"]
[Sat Apr 25 17:26:22.716292 2026] [:error] [pid 62630:tid 62693] [client 72.146.5.227:27698] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpxl.php"] [unique_id "aeyIvnCJIizbz7HiRHTFfgAAAEs"]
[Sat Apr 25 17:26:24.750539 2026] [:error] [pid 62632:tid 62747] [client 72.146.5.227:25213] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpxl.php"] [unique_id "aeyIwAo5oFy5kfJhz1ZUOQAAAMo"]
[Sat Apr 25 17:26:27.781377 2026] [:error] [pid 62804:tid 62822] [client 72.146.5.227:16921] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpxl.php"] [unique_id "aeyIw1cFrMNK-MrDXtPg7wAAAQo"]
[Sat Apr 25 17:26:29.728712 2026] [:error] [pid 62804:tid 62836] [client 72.146.5.227:25182] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpxl.php"] [unique_id "aeyIxVcFrMNK-MrDXtPg9AAAARg"]
[Sat Apr 25 17:26:30.494406 2026] [:error] [pid 62804:tid 62812] [client 72.146.5.227:26377] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admlo.php"] [unique_id "aeyIxlcFrMNK-MrDXtPg-QAAAQA"]
[Sat Apr 25 17:26:31.636602 2026] [:error] [pid 62631:tid 62734] [client 72.146.5.227:23167] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admlo.php"] [unique_id "aeyIx1qQlRXN7uR3kqhPdwAAAJg"]
[Sat Apr 25 17:26:32.761700 2026] [:error] [pid 62632:tid 62750] [client 72.146.5.227:16931] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admlo.php"] [unique_id "aeyIyAo5oFy5kfJhz1ZURgAAAM0"]
[Sat Apr 25 17:26:33.930967 2026] [:error] [pid 62631:tid 62721] [client 72.146.5.227:9345] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admlo.php"] [unique_id "aeyIyVqQlRXN7uR3kqhPewAAAIs"]
[Sat Apr 25 17:26:35.003224 2026] [:error] [pid 62804:tid 62832] [client 72.146.5.227:25089] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f5.php"] [unique_id "aeyIy1cFrMNK-MrDXtPhCQAAARQ"]
[Sat Apr 25 17:26:35.861507 2026] [:error] [pid 62804:tid 62821] [client 72.146.5.227:27704] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f5.php"] [unique_id "aeyIy1cFrMNK-MrDXtPhDgAAAQk"]
[Sat Apr 25 17:26:36.780745 2026] [:error] [pid 62804:tid 62819] [client 72.146.5.227:25186] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f5.php"] [unique_id "aeyIzFcFrMNK-MrDXtPhEgAAAQc"]
[Sat Apr 25 17:26:37.601652 2026] [:error] [pid 62632:tid 62752] [client 72.146.5.227:26435] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f5.php"] [unique_id "aeyIzQo5oFy5kfJhz1ZUTwAAAM8"]
[Sat Apr 25 17:26:38.571637 2026] [:error] [pid 62804:tid 62815] [client 72.146.5.227:26455] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ptanf.php"] [unique_id "aeyIzlcFrMNK-MrDXtPhGQAAAQM"]
[Sat Apr 25 17:26:39.117557 2026] [:error] [pid 62804:tid 62819] [client 72.146.5.227:10183] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ptanf.php"] [unique_id "aeyIz1cFrMNK-MrDXtPhHAAAAQc"]
[Sat Apr 25 17:26:40.060302 2026] [:error] [pid 62630:tid 62698] [client 72.146.5.227:16945] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ptanf.php"] [unique_id "aeyI0HCJIizbz7HiRHTFkwAAAFA"]
[Sat Apr 25 17:26:40.876323 2026] [:error] [pid 62630:tid 62704] [client 72.146.5.227:16916] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ptanf.php"] [unique_id "aeyI0HCJIizbz7HiRHTFlQAAAFY"]
[Sat Apr 25 17:26:41.785687 2026] [:error] [pid 62804:tid 62823] [client 72.146.5.227:23135] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ctex1.php"] [unique_id "aeyI0VcFrMNK-MrDXtPhJwAAAQs"]
[Sat Apr 25 17:26:43.237842 2026] [:error] [pid 62804:tid 62825] [client 72.146.5.227:23767] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ctex1.php"] [unique_id "aeyI01cFrMNK-MrDXtPhLwAAAQ0"]
[Sat Apr 25 17:26:44.165576 2026] [:error] [pid 62630:tid 62690] [client 72.146.5.227:26484] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ctex1.php"] [unique_id "aeyI1HCJIizbz7HiRHTFnQAAAEg"]
[Sat Apr 25 17:26:48.740638 2026] [:error] [pid 62804:tid 62829] [client 72.146.5.227:28353] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ctex1.php"] [unique_id "aeyI2FcFrMNK-MrDXtPhTQAAARE"]
[Sat Apr 25 17:26:49.903783 2026] [:error] [pid 62804:tid 62817] [client 72.146.5.227:25138] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "aeyI2VcFrMNK-MrDXtPhUgAAAQU"]
[Sat Apr 25 17:26:50.651346 2026] [:error] [pid 62804:tid 62836] [client 72.146.5.227:26468] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "aeyI2lcFrMNK-MrDXtPhVgAAARg"]
[Sat Apr 25 17:26:53.565906 2026] [:error] [pid 62632:tid 62747] [client 72.146.5.227:26490] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Sat Apr 25 17:26:53.834382 2026] [:error] [pid 62632:tid 62752] [client 72.146.5.227:26490] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Sat Apr 25 17:26:54.102943 2026] [:error] [pid 62632:tid 62750] [client 72.146.5.227:26490] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Sat Apr 25 17:26:54.389212 2026] [:error] [pid 62632:tid 62761] [client 72.146.5.227:26490] File does not exist: /usr/local/apache/htdocs/suspended-page/axe.php
[Sat Apr 25 17:26:54.657543 2026] [:error] [pid 62632:tid 62737] [client 72.146.5.227:26490] File does not exist: /usr/local/apache/htdocs/suspended-page/index0.php
[Sat Apr 25 17:26:56.990215 2026] [:error] [pid 62632:tid 62757] [client 72.146.5.227:26490] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-01ul.php
[Sat Apr 25 17:26:57.350176 2026] [:error] [pid 62632:tid 62760] [client 72.146.5.227:26490] File does not exist: /usr/local/apache/htdocs/suspended-page/e3.php
[Sat Apr 25 17:26:57.619107 2026] [:error] [pid 62632:tid 62758] [client 72.146.5.227:26490] File does not exist: /usr/local/apache/htdocs/suspended-page/fkohd.php
[Sat Apr 25 17:26:58.403640 2026] [:error] [pid 62632:tid 62740] [client 72.146.5.227:26490] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Sat Apr 25 17:26:58.672033 2026] [:error] [pid 62632:tid 62747] [client 72.146.5.227:26490] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Sat Apr 25 17:26:58.939319 2026] [:error] [pid 62632:tid 62742] [client 72.146.5.227:26490] File does not exist: /usr/local/apache/htdocs/suspended-page/zo.php
[Sat Apr 25 17:26:59.297129 2026] [:error] [pid 62632:tid 62759] [client 72.146.5.227:26490] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "aeyI4wo5oFy5kfJhz1ZUfgAAANY"]
[Sat Apr 25 17:27:00.039784 2026] [:error] [pid 62630:tid 62696] [client 72.146.5.227:23108] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "aeyI5HCJIizbz7HiRHTFsgAAAE4"]
[Sat Apr 25 17:27:00.840106 2026] [:error] [pid 62630:tid 62705] [client 72.146.5.227:25212] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "aeyI5HCJIizbz7HiRHTFtgAAAFc"]
[Sat Apr 25 17:27:01.514459 2026] [:error] [pid 62631:tid 62722] [client 72.146.5.227:25123] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "aeyI5VqQlRXN7uR3kqhPmgAAAIw"]
[Sat Apr 25 17:27:03.684302 2026] [:error] [pid 62804:tid 62820] [client 72.146.5.227:23763] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/masks.php"] [unique_id "aeyI51cFrMNK-MrDXtPhfAAAAQg"]
[Sat Apr 25 17:27:06.340946 2026] [:error] [pid 62632:tid 62759] [client 72.146.5.227:25178] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/masks.php"] [unique_id "aeyI6go5oFy5kfJhz1ZUmAAAANY"]
[Sat Apr 25 17:27:07.849987 2026] [:error] [pid 62630:tid 62687] [client 72.146.5.227:28398] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/masks.php"] [unique_id "aeyI63CJIizbz7HiRHTFwwAAAEU"]
[Sat Apr 25 17:27:09.558024 2026] [:error] [pid 62804:tid 62814] [client 72.146.5.227:10179] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/masks.php"] [unique_id "aeyI7VcFrMNK-MrDXtPhowAAAQI"]
[Sat Apr 25 17:27:11.166463 2026] [:error] [pid 62804:tid 62826] [client 72.146.5.227:28412] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "aeyI71cFrMNK-MrDXtPhrgAAAQ4"]
[Sat Apr 25 17:27:12.212815 2026] [:error] [pid 62632:tid 62750] [client 72.146.5.227:9219] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "aeyI8Ao5oFy5kfJhz1ZUowAAAM0"]
[Sat Apr 25 17:27:13.184673 2026] [:error] [pid 62804:tid 62834] [client 72.146.5.227:23121] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "aeyI8VcFrMNK-MrDXtPhtgAAARY"]
[Sat Apr 25 17:27:13.933292 2026] [:error] [pid 62804:tid 62826] [client 72.146.5.227:23773] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "aeyI8VcFrMNK-MrDXtPhvAAAAQ4"]
[Sat Apr 25 17:27:15.280128 2026] [:error] [pid 62631:tid 62725] [client 72.146.5.227:25150] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "aeyI81qQlRXN7uR3kqhPvwAAAI8"]
[Sat Apr 25 17:27:16.223947 2026] [:error] [pid 62631:tid 62719] [client 72.146.5.227:16937] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "aeyI9FqQlRXN7uR3kqhPwAAAAIk"]
[Sat Apr 25 17:27:18.689366 2026] [:error] [pid 62632:tid 62746] [client 72.146.5.227:27697] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "aeyI9go5oFy5kfJhz1ZUsgAAAMk"]
[Sat Apr 25 17:27:20.878681 2026] [:error] [pid 62804:tid 62831] [client 72.146.5.227:9362] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "aeyI-FcFrMNK-MrDXtPh2gAAARM"]
[Sat Apr 25 17:27:22.193837 2026] [:error] [pid 62630:tid 62695] [client 72.146.5.227:26395] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeyI-nCJIizbz7HiRHTF0QAAAE0"]
[Sat Apr 25 17:27:22.780819 2026] [:error] [pid 62804:tid 62824] [client 72.146.5.227:9407] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeyI-lcFrMNK-MrDXtPh4AAAAQw"]
[Sat Apr 25 17:27:23.321590 2026] [:error] [pid 62631:tid 62727] [client 72.146.5.227:23748] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeyI-1qQlRXN7uR3kqhPzAAAAJE"]
[Sat Apr 25 17:27:24.085596 2026] [:error] [pid 62630:tid 62692] [client 72.146.5.227:9406] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeyI_HCJIizbz7HiRHTF0gAAAEo"]
[Sat Apr 25 17:27:25.078314 2026] [:error] [pid 62804:tid 62820] [client 72.146.5.227:23162] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vv.php"] [unique_id "aeyI_VcFrMNK-MrDXtPh8AAAAQg"]
[Sat Apr 25 17:27:26.609789 2026] [:error] [pid 62632:tid 62738] [client 72.146.5.227:18107] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vv.php"] [unique_id "aeyI_go5oFy5kfJhz1ZUwAAAAME"]
[Sat Apr 25 17:27:27.443436 2026] [:error] [pid 62631:tid 62729] [client 72.146.5.227:23131] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vv.php"] [unique_id "aeyI_1qQlRXN7uR3kqhP0QAAAJM"]
[Sat Apr 25 17:27:28.823507 2026] [:error] [pid 62804:tid 62836] [client 72.146.5.227:25166] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vv.php"] [unique_id "aeyJAFcFrMNK-MrDXtPh_wAAARg"]
[Sat Apr 25 17:27:30.952585 2026] [:error] [pid 62632:tid 62753] [client 72.146.5.227:26465] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpconf.php"] [unique_id "aeyJAgo5oFy5kfJhz1ZU5QAAANA"]
[Sat Apr 25 17:27:33.886734 2026] [:error] [pid 62804:tid 62825] [client 72.146.5.227:9388] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpconf.php"] [unique_id "aeyJBVcFrMNK-MrDXtPiEgAAAQ0"]
[Sat Apr 25 17:27:40.893585 2026] [:error] [pid 62804:tid 62820] [client 72.146.5.227:25167] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpconf.php"] [unique_id "aeyJDFcFrMNK-MrDXtPiMgAAAQg"]
[Sat Apr 25 17:27:44.514329 2026] [:error] [pid 62804:tid 62836] [client 72.146.5.227:26387] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpconf.php"] [unique_id "aeyJEFcFrMNK-MrDXtPiQAAAARg"]
[Sat Apr 25 17:27:45.068331 2026] [:error] [pid 62630:tid 62687] [client 72.146.5.227:26373] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeyJEXCJIizbz7HiRHTGOAAAAEU"]
[Sat Apr 25 17:27:45.998119 2026] [:error] [pid 62631:tid 62721] [client 72.146.5.227:25175] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeyJEVqQlRXN7uR3kqhP3wAAAIs"]
[Sat Apr 25 17:27:46.930801 2026] [:error] [pid 62631:tid 62716] [client 72.146.5.227:28392] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeyJElqQlRXN7uR3kqhP5AAAAIY"]
[Sat Apr 25 17:27:47.558793 2026] [:error] [pid 62632:tid 62760] [client 72.146.5.227:26417] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeyJEwo5oFy5kfJhz1ZVGgAAANc"]
[Sat Apr 25 17:27:51.406433 2026] [:error] [pid 62632:tid 62746] [client 72.146.5.227:26383] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-zx.php"] [unique_id "aeyJFwo5oFy5kfJhz1ZVKAAAAMk"]
[Sat Apr 25 17:27:55.800323 2026] [:error] [pid 62630:tid 62687] [client 72.146.5.227:16900] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-zx.php"] [unique_id "aeyJG3CJIizbz7HiRHTGRAAAAEU"]
[Sat Apr 25 17:27:57.271723 2026] [:error] [pid 62804:tid 62833] [client 72.146.5.227:25091] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-zx.php"] [unique_id "aeyJHVcFrMNK-MrDXtPiVgAAARU"]
[Sat Apr 25 17:27:58.659092 2026] [:error] [pid 62804:tid 62818] [client 72.146.5.227:28396] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-zx.php
[Sat Apr 25 17:27:58.895614 2026] [:error] [pid 62804:tid 62821] [client 72.146.5.227:28396] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Sat Apr 25 17:27:59.133405 2026] [:error] [pid 62804:tid 62823] [client 72.146.5.227:28396] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sat Apr 25 17:27:59.372615 2026] [:error] [pid 62804:tid 62815] [client 72.146.5.227:28396] File does not exist: /usr/local/apache/htdocs/suspended-page/iov.php
[Sat Apr 25 17:27:59.620450 2026] [:error] [pid 62804:tid 62828] [client 72.146.5.227:28396] File does not exist: /usr/local/apache/htdocs/suspended-page/jodohghi.php
[Sat Apr 25 17:27:59.857734 2026] [:error] [pid 62804:tid 62833] [client 72.146.5.227:28396] File does not exist: /usr/local/apache/htdocs/suspended-page/rendi59.php
[Sat Apr 25 17:28:00.095154 2026] [:error] [pid 62804:tid 62830] [client 72.146.5.227:28396] File does not exist: /usr/local/apache/htdocs/suspended-page/rivasqup.php
[Sat Apr 25 17:28:00.333927 2026] [:error] [pid 62804:tid 62824] [client 72.146.5.227:28396] File does not exist: /usr/local/apache/htdocs/suspended-page/mga.php
[Sat Apr 25 17:28:00.571828 2026] [:error] [pid 62804:tid 62812] [client 72.146.5.227:28396] File does not exist: /usr/local/apache/htdocs/suspended-page/dshtv.php
[Sat Apr 25 17:28:00.824292 2026] [:error] [pid 62804:tid 62820] [client 72.146.5.227:28396] File does not exist: /usr/local/apache/htdocs/suspended-page/sym403.php
[Sat Apr 25 17:28:01.073574 2026] [:error] [pid 62804:tid 62823] [client 72.146.5.227:28396] File does not exist: /usr/local/apache/htdocs/suspended-page/temp1.php
[Sat Apr 25 17:28:01.307536 2026] [:error] [pid 62804:tid 62819] [client 72.146.5.227:28396] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeyJIVcFrMNK-MrDXtPicgAAAQc"]
[Sat Apr 25 17:28:02.616650 2026] [:error] [pid 62632:tid 62745] [client 72.146.5.227:23146] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeyJIgo5oFy5kfJhz1ZVOwAAAMg"]
[Sat Apr 25 17:28:04.990807 2026] [:error] [pid 62632:tid 62758] [client 72.146.5.227:25171] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeyJJAo5oFy5kfJhz1ZVTQAAANU"]
[Sat Apr 25 17:28:05.973036 2026] [:error] [pid 62631:tid 62710] [client 72.146.5.227:26398] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeyJJVqQlRXN7uR3kqhQBAAAAIA"]
[Sat Apr 25 17:28:15.876667 2026] [:error] [pid 62632:tid 62758] [client 72.146.5.227:16919] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aeyJLwo5oFy5kfJhz1ZVfgAAANU"]
[Sat Apr 25 17:28:19.290194 2026] [:error] [pid 62631:tid 62727] [client 158.158.100.177:50677] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Sat Apr 25 17:28:19.634340 2026] [:error] [pid 62631:tid 62719] [client 158.158.100.177:50677] File does not exist: /usr/local/apache/htdocs/suspended-page/card.php
[Sat Apr 25 17:28:19.898300 2026] [:error] [pid 62631:tid 62716] [client 158.158.100.177:50677] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sat Apr 25 17:28:20.173332 2026] [:error] [pid 62630:tid 62702] [client 72.146.5.227:28352] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aeyJNHCJIizbz7HiRHTGaQAAAFQ"]
[Sat Apr 25 17:28:20.196191 2026] [:error] [pid 62631:tid 62721] [client 158.158.100.177:50677] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-lacoto.php
[Sat Apr 25 17:28:20.459679 2026] [:error] [pid 62631:tid 62714] [client 158.158.100.177:50677] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kikikoko.php
[Sat Apr 25 17:28:22.089741 2026] [:error] [pid 62632:tid 62749] [client 72.146.5.227:10186] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "aeyJNgo5oFy5kfJhz1ZVjgAAAMw"]
[Sat Apr 25 17:28:23.075204 2026] [:error] [pid 62631:tid 62724] [client 72.146.5.227:26413] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "aeyJN1qQlRXN7uR3kqhQHQAAAI4"]
[Sat Apr 25 17:28:23.712212 2026] [:error] [pid 62804:tid 62821] [client 72.146.5.227:27690] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "aeyJN1cFrMNK-MrDXtPisgAAAQk"]
[Sat Apr 25 17:28:24.970766 2026] [:error] [pid 62632:tid 62747] [client 72.146.5.227:23793] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "aeyJOAo5oFy5kfJhz1ZVkgAAAMo"]
[Sat Apr 25 17:28:26.275733 2026] [:error] [pid 62632:tid 62749] [client 72.146.5.227:27699] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bbny.php"] [unique_id "aeyJOgo5oFy5kfJhz1ZVmAAAAMw"]
[Sat Apr 25 17:28:28.069498 2026] [:error] [pid 62804:tid 62825] [client 72.146.5.227:27684] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bbny.php"] [unique_id "aeyJPFcFrMNK-MrDXtPixAAAAQ0"]
[Sat Apr 25 17:28:29.115284 2026] [:error] [pid 62631:tid 62725] [client 72.146.5.227:28369] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bbny.php"] [unique_id "aeyJPVqQlRXN7uR3kqhQIQAAAI8"]
[Sat Apr 25 17:28:31.209972 2026] [:error] [pid 62632:tid 62745] [client 72.146.5.227:26426] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bbny.php"] [unique_id "aeyJPwo5oFy5kfJhz1ZVoAAAAMg"]
[Sat Apr 25 17:28:33.273665 2026] [:error] [pid 62631:tid 62724] [client 72.146.5.227:23692] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "aeyJQVqQlRXN7uR3kqhQNgAAAI4"]
[Sat Apr 25 17:28:34.031544 2026] [:error] [pid 62632:tid 62753] [client 72.146.5.227:27655] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "aeyJQgo5oFy5kfJhz1ZVyQAAANA"]
[Sat Apr 25 17:28:34.765698 2026] [:error] [pid 62804:tid 62816] [client 72.146.5.227:26445] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "aeyJQlcFrMNK-MrDXtPi3AAAAQQ"]
[Sat Apr 25 17:28:35.969994 2026] [:error] [pid 62630:tid 62695] [client 72.146.5.227:25146] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "aeyJQ3CJIizbz7HiRHTGhgAAAE0"]
[Sat Apr 25 17:28:37.207591 2026] [:error] [pid 62804:tid 62826] [client 72.146.5.227:27678] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zhw.php"] [unique_id "aeyJRVcFrMNK-MrDXtPi4wAAAQ4"]
[Sat Apr 25 17:28:40.371734 2026] [:error] [pid 62804:tid 62820] [client 72.146.5.227:16913] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zhw.php"] [unique_id "aeyJSFcFrMNK-MrDXtPi8wAAAQg"]
[Sat Apr 25 17:28:43.989567 2026] [:error] [pid 62804:tid 62833] [client 72.146.5.227:27694] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zhw.php"] [unique_id "aeyJS1cFrMNK-MrDXtPjAAAAARU"]
[Sat Apr 25 17:28:46.684092 2026] [:error] [pid 62804:tid 62813] [client 72.146.5.227:27058] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zhw.php"] [unique_id "aeyJTlcFrMNK-MrDXtPjFAAAAQE"]
[Sat Apr 25 17:28:50.744013 2026] [:error] [pid 62804:tid 62818] [client 72.146.5.227:9726] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "aeyJUlcFrMNK-MrDXtPjJQAAAQY"]
[Sat Apr 25 17:28:53.398246 2026] [:error] [pid 62804:tid 62814] [client 72.146.5.227:9364] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "aeyJVVcFrMNK-MrDXtPjMgAAAQI"]
[Sat Apr 25 17:28:54.552413 2026] [:error] [pid 62630:tid 62706] [client 72.146.5.227:23751] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "aeyJVnCJIizbz7HiRHTGpwAAAFg"]
[Sat Apr 25 17:28:56.891606 2026] [:error] [pid 62804:tid 62823] [client 72.146.5.227:27041] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "aeyJWFcFrMNK-MrDXtPjPwAAAQs"]
[Sat Apr 25 17:28:57.595035 2026] [:error] [pid 62632:tid 62751] [client 72.146.5.227:23750] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "aeyJWQo5oFy5kfJhz1ZV4QAAAM4"]
[Sat Apr 25 17:28:58.878178 2026] [:error] [pid 62804:tid 62817] [client 72.146.5.227:9344] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "aeyJWlcFrMNK-MrDXtPjRgAAAQU"]
[Sat Apr 25 17:29:06.640483 2026] [:error] [pid 62804:tid 62819] [client 72.146.5.227:9347] File does not exist: /usr/local/apache/htdocs/suspended-page/ftde.php
[Sat Apr 25 17:29:06.924870 2026] [:error] [pid 62804:tid 62833] [client 72.146.5.227:9347] File does not exist: /usr/local/apache/htdocs/suspended-page/lov.php
[Sat Apr 25 17:29:07.190763 2026] [:error] [pid 62804:tid 62818] [client 72.146.5.227:9347] File does not exist: /usr/local/apache/htdocs/suspended-page/knw.php
[Sat Apr 25 17:29:07.457026 2026] [:error] [pid 62804:tid 62823] [client 72.146.5.227:9347] File does not exist: /usr/local/apache/htdocs/suspended-page/fi.php
[Sat Apr 25 17:29:07.725705 2026] [:error] [pid 62804:tid 62829] [client 72.146.5.227:9347] File does not exist: /usr/local/apache/htdocs/suspended-page/jlex.php
[Sat Apr 25 17:29:07.991118 2026] [:error] [pid 62804:tid 62834] [client 72.146.5.227:9347] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-k7djufwez2.php
[Sat Apr 25 17:29:08.260642 2026] [:error] [pid 62804:tid 62819] [client 72.146.5.227:9347] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-tiroto.php
[Sat Apr 25 17:29:08.546113 2026] [:error] [pid 62804:tid 62814] [client 72.146.5.227:9347] File does not exist: /usr/local/apache/htdocs/suspended-page/son.php
[Sat Apr 25 17:29:08.820315 2026] [:error] [pid 62804:tid 62833] [client 72.146.5.227:9347] File does not exist: /usr/local/apache/htdocs/suspended-page/99.php
[Sat Apr 25 17:29:09.089003 2026] [:error] [pid 62804:tid 62818] [client 72.146.5.227:9347] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Sat Apr 25 17:29:09.354741 2026] [:error] [pid 62804:tid 62830] [client 72.146.5.227:9347] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sat Apr 25 17:29:09.618299 2026] [:error] [pid 62804:tid 62815] [client 72.146.5.227:9347] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ay.php"] [unique_id "aeyJZVcFrMNK-MrDXtPjeAAAAQM"]
[Sat Apr 25 17:29:11.785850 2026] [:error] [pid 62632:tid 62750] [client 72.146.5.227:23804] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ay.php"] [unique_id "aeyJZwo5oFy5kfJhz1ZWBgAAAM0"]
[Sat Apr 25 17:29:12.882009 2026] [:error] [pid 62804:tid 62819] [client 72.146.5.227:9350] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ay.php"] [unique_id "aeyJaFcFrMNK-MrDXtPjiAAAAQc"]
[Sat Apr 25 17:29:18.948449 2026] [:error] [pid 62631:tid 62716] [client 158.158.100.177:31612] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-X1s2e6h3p7.php
[Sat Apr 25 17:29:19.414408 2026] [:error] [pid 62631:tid 62722] [client 158.158.100.177:31612] File does not exist: /usr/local/apache/htdocs/suspended-page/dragonshell.php
[Sat Apr 25 17:29:19.674272 2026] [:error] [pid 62631:tid 62715] [client 158.158.100.177:31612] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Sat Apr 25 17:29:20.478878 2026] [:error] [pid 62631:tid 62731] [client 158.158.100.177:31612] File does not exist: /usr/local/apache/htdocs/suspended-page/G-In.php
[Sat Apr 25 17:29:20.781873 2026] [:error] [pid 62631:tid 62717] [client 158.158.100.177:31612] File does not exist: /usr/local/apache/htdocs/suspended-page/aj11.php
[Sat Apr 25 17:29:21.036687 2026] [:error] [pid 62631:tid 62728] [client 158.158.100.177:31612] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "aeyJcVqQlRXN7uR3kqhQeQAAAJI"]
[Sat Apr 25 17:29:21.289564 2026] [:error] [pid 62632:tid 62754] [client 72.146.5.227:9359] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ay.php"] [unique_id "aeyJcQo5oFy5kfJhz1ZWLAAAANE"]
[Sat Apr 25 17:29:21.964506 2026] [:error] [pid 62632:tid 62749] [client 158.158.100.177:63066] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "aeyJcQo5oFy5kfJhz1ZWLgAAAMw"]
[Sat Apr 25 17:29:22.533613 2026] [:error] [pid 62631:tid 62718] [client 72.146.5.227:27687] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "aeyJclqQlRXN7uR3kqhQfwAAAIg"]
[Sat Apr 25 17:29:23.204944 2026] [:error] [pid 62631:tid 62714] [client 158.158.100.177:22929] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "aeyJc1qQlRXN7uR3kqhQhAAAAIQ"]
[Sat Apr 25 17:29:23.917159 2026] [:error] [pid 62630:tid 62693] [client 72.146.5.227:9352] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "aeyJc3CJIizbz7HiRHTGwQAAAEs"]
[Sat Apr 25 17:29:24.832616 2026] [:error] [pid 62630:tid 62690] [client 72.146.5.227:25199] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "aeyJdHCJIizbz7HiRHTGxQAAAEg"]
[Sat Apr 25 17:29:24.911882 2026] [:error] [pid 62631:tid 62733] [client 158.158.100.177:21003] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "aeyJdFqQlRXN7uR3kqhQhwAAAJc"]
[Sat Apr 25 17:29:25.644631 2026] [:error] [pid 62804:tid 62830] [client 158.158.100.177:35215] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xroot.php"] [unique_id "aeyJdVcFrMNK-MrDXtPjkwAAARI"]
[Sat Apr 25 17:29:26.323867 2026] [:error] [pid 62632:tid 62748] [client 72.146.5.227:26394] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "aeyJdgo5oFy5kfJhz1ZWMQAAAMs"]
[Sat Apr 25 17:29:27.363621 2026] [:error] [pid 62804:tid 62813] [client 72.146.5.227:23105] [client 72.146.5.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "aeyJd1cFrMNK-MrDXtPjlwAAAQE"]
[Sat Apr 25 17:29:28.174619 2026] [:error] [pid 62804:tid 62825] [client 72.146.5.227:25139] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "aeyJeFcFrMNK-MrDXtPjmgAAAQ0"]
[Sat Apr 25 17:29:30.758645 2026] [:error] [pid 62804:tid 62815] [client 72.146.5.227:26491] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "aeyJelcFrMNK-MrDXtPjpQAAAQM"]
[Sat Apr 25 17:29:31.939019 2026] [:error] [pid 62631:tid 62710] [client 158.158.100.177:40394] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xroot.php"] [unique_id "aeyJe1qQlRXN7uR3kqhQsQAAAIA"]
[Sat Apr 25 17:29:32.897270 2026] [:error] [pid 62804:tid 62828] [client 158.158.100.177:63072] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xroot.php"] [unique_id "aeyJfFcFrMNK-MrDXtPjrAAAARA"]
[Sat Apr 25 17:29:33.628481 2026] [:error] [pid 62632:tid 62747] [client 72.146.5.227:23141] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "aeyJfQo5oFy5kfJhz1ZWRAAAAMo"]
[Sat Apr 25 17:29:34.493490 2026] [:error] [pid 62631:tid 62720] [client 72.146.5.227:26409] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "aeyJflqQlRXN7uR3kqhQvgAAAIo"]
[Sat Apr 25 17:29:36.334740 2026] [:error] [pid 62630:tid 62685] [client 158.158.100.177:14616] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xroot.php"] [unique_id "aeyJgHCJIizbz7HiRHTG7QAAAEM"]
[Sat Apr 25 17:29:36.820638 2026] [:error] [pid 62630:tid 62684] [client 72.146.5.227:28415] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1a.php"] [unique_id "aeyJgHCJIizbz7HiRHTG8QAAAEI"]
[Sat Apr 25 17:29:38.337968 2026] [:error] [pid 62631:tid 62716] [client 158.158.100.177:35206] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeyJglqQlRXN7uR3kqhQzwAAAIY"]
[Sat Apr 25 17:29:39.421217 2026] [:error] [pid 62632:tid 62756] [client 72.146.5.227:33172] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1a.php"] [unique_id "aeyJgwo5oFy5kfJhz1ZWSgAAANM"]
[Sat Apr 25 17:29:41.156441 2026] [:error] [pid 62804:tid 62834] [client 158.158.100.177:2904] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeyJhVcFrMNK-MrDXtPjxQAAARY"]
[Sat Apr 25 17:29:42.379357 2026] [:error] [pid 62630:tid 62703] [client 72.146.5.227:31255] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1a.php"] [unique_id "aeyJhnCJIizbz7HiRHTG_AAAAFU"]
[Sat Apr 25 17:29:45.643210 2026] [:error] [pid 62630:tid 62689] [client 72.146.5.227:28339] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1a.php"] [unique_id "aeyJiXCJIizbz7HiRHTG_wAAAEc"]
[Sat Apr 25 17:29:45.900432 2026] [:error] [pid 62804:tid 62830] [client 158.158.100.177:2060] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeyJiVcFrMNK-MrDXtPj0wAAARI"]
[Sat Apr 25 17:29:49.001202 2026] [:error] [pid 62804:tid 62821] [client 72.146.5.227:33173] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aeyJjFcFrMNK-MrDXtPj2AAAAQk"]
[Sat Apr 25 17:29:50.253735 2026] [:error] [pid 62804:tid 62824] [client 158.158.100.177:63084] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeyJjlcFrMNK-MrDXtPj2wAAAQw"]
[Sat Apr 25 17:29:50.471420 2026] [:error] [pid 62631:tid 62724] [client 72.146.5.227:31306] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aeyJjlqQlRXN7uR3kqhQ5AAAAI4"]
[Sat Apr 25 17:29:51.521614 2026] [:error] [pid 62631:tid 62728] [client 72.146.5.227:31237] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aeyJj1qQlRXN7uR3kqhQ6AAAAJI"]
[Sat Apr 25 17:29:53.504799 2026] [:error] [pid 62804:tid 62835] [client 158.158.100.177:42357] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uwu.php"] [unique_id "aeyJkVcFrMNK-MrDXtPj6wAAARc"]
[Sat Apr 25 17:29:54.395546 2026] [:error] [pid 62804:tid 62830] [client 72.146.5.227:31924] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aeyJklcFrMNK-MrDXtPj7wAAARI"]
[Sat Apr 25 17:29:55.333392 2026] [:error] [pid 62804:tid 62825] [client 158.158.100.177:2797] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uwu.php"] [unique_id "aeyJk1cFrMNK-MrDXtPj9AAAAQ0"]
[Sat Apr 25 17:29:55.961978 2026] [:error] [pid 62804:tid 62816] [client 72.146.5.227:33845] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeyJk1cFrMNK-MrDXtPj9wAAAQQ"]
[Sat Apr 25 17:29:56.724439 2026] [:error] [pid 62630:tid 62703] [client 72.146.5.227:35790] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeyJlHCJIizbz7HiRHTHFAAAAFU"]
[Sat Apr 25 17:29:57.010494 2026] [:error] [pid 62804:tid 62834] [client 158.158.100.177:2276] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uwu.php"] [unique_id "aeyJlVcFrMNK-MrDXtPj_QAAARY"]
[Sat Apr 25 17:29:58.646107 2026] [:error] [pid 62632:tid 62741] [client 72.146.5.227:33253] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeyJlgo5oFy5kfJhz1ZWXAAAAMQ"]
[Sat Apr 25 17:29:59.375698 2026] [:error] [pid 62804:tid 62828] [client 158.158.100.177:48643] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uwu.php"] [unique_id "aeyJl1cFrMNK-MrDXtPkAwAAARA"]
[Sat Apr 25 17:29:59.456298 2026] [:error] [pid 62804:tid 62817] [client 72.146.5.227:33825] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeyJl1cFrMNK-MrDXtPkBAAAAQU"]
[Sat Apr 25 17:30:00.224689 2026] [:error] [pid 62804:tid 62835] [client 72.146.5.227:35821] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aeyJmFcFrMNK-MrDXtPkBwAAARc"]
[Sat Apr 25 17:30:00.484887 2026] [:error] [pid 62632:tid 62745] [client 158.158.100.177:55701] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeyJmAo5oFy5kfJhz1ZWXwAAAMg"]
[Sat Apr 25 17:30:01.167726 2026] [:error] [pid 62631:tid 62712] [client 158.158.100.177:2518] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeyJmVqQlRXN7uR3kqhQ9QAAAII"]
[Sat Apr 25 17:30:01.966714 2026] [:error] [pid 62631:tid 62730] [client 72.146.5.227:31324] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aeyJmVqQlRXN7uR3kqhQ9wAAAJQ"]
[Sat Apr 25 17:30:02.309969 2026] [:error] [pid 62631:tid 62733] [client 158.158.100.177:2815] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeyJmlqQlRXN7uR3kqhQ-QAAAJc"]
[Sat Apr 25 17:30:03.310729 2026] [:error] [pid 62630:tid 62701] [client 158.158.100.177:2779] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeyJm3CJIizbz7HiRHTHHgAAAFM"]
[Sat Apr 25 17:30:03.800249 2026] [:error] [pid 62630:tid 62689] [client 72.146.5.227:31895] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aeyJm3CJIizbz7HiRHTHIAAAAEc"]
[Sat Apr 25 17:30:04.581661 2026] [:error] [pid 62632:tid 62756] [client 158.158.100.177:57741] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "aeyJnAo5oFy5kfJhz1ZWYgAAANM"]
[Sat Apr 25 17:30:05.936049 2026] [:error] [pid 62630:tid 62699] [client 158.158.100.177:17877] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "aeyJnXCJIizbz7HiRHTHKAAAAFE"]
[Sat Apr 25 17:30:07.019202 2026] [:error] [pid 62804:tid 62829] [client 158.158.100.177:57760] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "aeyJn1cFrMNK-MrDXtPkEAAAARE"]
[Sat Apr 25 17:30:07.460452 2026] [:error] [pid 62630:tid 62701] [client 72.146.5.227:33800] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aeyJn3CJIizbz7HiRHTHLAAAAFM"]
[Sat Apr 25 17:30:07.901579 2026] [:error] [pid 62804:tid 62813] [client 158.158.100.177:38426] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "aeyJn1cFrMNK-MrDXtPkEQAAAQE"]
[Sat Apr 25 17:30:08.284910 2026] [:error] [pid 62632:tid 62753] [client 72.146.5.227:31877] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tramuibs.php"] [unique_id "aeyJoAo5oFy5kfJhz1ZWZwAAANA"]
[Sat Apr 25 17:30:09.022522 2026] [:error] [pid 62804:tid 62830] [client 158.158.100.177:2242] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aeyJoVcFrMNK-MrDXtPkFQAAARI"]
[Sat Apr 25 17:30:09.485958 2026] [:error] [pid 62632:tid 62752] [client 72.146.5.227:33236] File does not exist: /usr/local/apache/htdocs/suspended-page/tramuibs.php
[Sat Apr 25 17:30:09.722139 2026] [:error] [pid 62632:tid 62737] [client 72.146.5.227:33236] File does not exist: /usr/local/apache/htdocs/suspended-page/19.php
[Sat Apr 25 17:30:09.783905 2026] [:error] [pid 62632:tid 62739] [client 158.158.100.177:2524] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aeyJoQo5oFy5kfJhz1ZWbQAAAMI"]
[Sat Apr 25 17:30:10.006466 2026] [:error] [pid 62632:tid 62761] [client 72.146.5.227:33236] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Sat Apr 25 17:30:10.279067 2026] [:error] [pid 62632:tid 62749] [client 72.146.5.227:33236] File does not exist: /usr/local/apache/htdocs/suspended-page/bpxrn.php
[Sat Apr 25 17:30:10.515564 2026] [:error] [pid 62632:tid 62754] [client 72.146.5.227:33236] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Sat Apr 25 17:30:10.784116 2026] [:error] [pid 62632:tid 62759] [client 158.158.100.177:23641] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aeyJogo5oFy5kfJhz1ZWdAAAANY"]
[Sat Apr 25 17:30:10.894727 2026] [:error] [pid 62632:tid 62753] [client 72.146.5.227:33236] File does not exist: /usr/local/apache/htdocs/suspended-page/ws37.php
[Sat Apr 25 17:30:11.192787 2026] [:error] [pid 62632:tid 62743] [client 72.146.5.227:33236] File does not exist: /usr/local/apache/htdocs/suspended-page/sky.php
[Sat Apr 25 17:30:11.483291 2026] [:error] [pid 62632:tid 62737] [client 72.146.5.227:33236] File does not exist: /usr/local/apache/htdocs/suspended-page/bojcdooq.php
[Sat Apr 25 17:30:11.720919 2026] [:error] [pid 62632:tid 62751] [client 72.146.5.227:33236] File does not exist: /usr/local/apache/htdocs/suspended-page/zdd.php
[Sat Apr 25 17:30:11.997581 2026] [:error] [pid 62632:tid 62755] [client 72.146.5.227:33236] File does not exist: /usr/local/apache/htdocs/suspended-page/133.php
[Sat Apr 25 17:30:12.042176 2026] [:error] [pid 62630:tid 62701] [client 158.158.100.177:55720] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aeyJpHCJIizbz7HiRHTHMgAAAFM"]
[Sat Apr 25 17:30:12.234670 2026] [:error] [pid 62632:tid 62761] [client 72.146.5.227:33236] File does not exist: /usr/local/apache/htdocs/suspended-page/jq.php
[Sat Apr 25 17:30:12.474602 2026] [:error] [pid 62632:tid 62745] [client 72.146.5.227:33236] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cro.php"] [unique_id "aeyJpAo5oFy5kfJhz1ZWggAAAMg"]
[Sat Apr 25 17:30:13.859954 2026] [:error] [pid 62804:tid 62832] [client 158.158.100.177:38456] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "aeyJpVcFrMNK-MrDXtPkHAAAARQ"]
[Sat Apr 25 17:30:14.223937 2026] [:error] [pid 62630:tid 62687] [client 72.146.5.227:25828] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cro.php"] [unique_id "aeyJpnCJIizbz7HiRHTHNAAAAEU"]
[Sat Apr 25 17:30:15.164534 2026] [:error] [pid 62631:tid 62719] [client 158.158.100.177:38416] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "aeyJp1qQlRXN7uR3kqhQ_wAAAIk"]
[Sat Apr 25 17:30:16.186412 2026] [:error] [pid 62631:tid 62713] [client 72.146.5.227:35807] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cro.php"] [unique_id "aeyJqFqQlRXN7uR3kqhRBAAAAIM"]
[Sat Apr 25 17:30:16.406603 2026] [:error] [pid 62631:tid 62715] [client 158.158.100.177:15992] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "aeyJqFqQlRXN7uR3kqhRBgAAAIU"]
[Sat Apr 25 17:30:17.496646 2026] [:error] [pid 62804:tid 62812] [client 72.146.5.227:31251] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cro.php"] [unique_id "aeyJqVcFrMNK-MrDXtPkIQAAAQA"]
[Sat Apr 25 17:30:17.830544 2026] [:error] [pid 62631:tid 62727] [client 158.158.100.177:2260] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "aeyJqVqQlRXN7uR3kqhRBwAAAJE"]
[Sat Apr 25 17:30:19.198634 2026] [:error] [pid 62804:tid 62821] [client 158.158.100.177:48071] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aeyJq1cFrMNK-MrDXtPkJAAAAQk"]
[Sat Apr 25 17:30:20.327755 2026] [:error] [pid 62630:tid 62698] [client 72.146.5.227:33159] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wwx.php"] [unique_id "aeyJrHCJIizbz7HiRHTHPAAAAFA"]
[Sat Apr 25 17:30:20.418065 2026] [:error] [pid 62632:tid 62739] [client 158.158.100.177:48654] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Sat Apr 25 17:30:20.682222 2026] [:error] [pid 62632:tid 62745] [client 158.158.100.177:48654] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Sat Apr 25 17:30:20.970550 2026] [:error] [pid 62632:tid 62754] [client 158.158.100.177:48654] File does not exist: /usr/local/apache/htdocs/suspended-page/amxloxxr.php
[Sat Apr 25 17:30:21.234743 2026] [:error] [pid 62632:tid 62753] [client 158.158.100.177:48654] File does not exist: /usr/local/apache/htdocs/suspended-page/qhupyoon.php
[Sat Apr 25 17:30:21.708958 2026] [:error] [pid 62632:tid 62752] [client 158.158.100.177:48654] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Sat Apr 25 17:30:22.012520 2026] [:error] [pid 62804:tid 62817] [client 72.146.5.227:33167] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wwx.php"] [unique_id "aeyJrlcFrMNK-MrDXtPkKgAAAQU"]
[Sat Apr 25 17:30:22.017136 2026] [:error] [pid 62632:tid 62747] [client 158.158.100.177:48654] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Sat Apr 25 17:30:22.283460 2026] [:error] [pid 62632:tid 62748] [client 158.158.100.177:48654] File does not exist: /usr/local/apache/htdocs/suspended-page/6ap7e.php
[Sat Apr 25 17:30:22.546744 2026] [:error] [pid 62632:tid 62743] [client 158.158.100.177:48654] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Sat Apr 25 17:30:22.840205 2026] [:error] [pid 62632:tid 62737] [client 158.158.100.177:48654] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Sat Apr 25 17:30:23.757389 2026] [:error] [pid 62632:tid 62741] [client 72.146.5.227:25845] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wwx.php"] [unique_id "aeyJrwo5oFy5kfJhz1ZWmQAAAMQ"]
[Sat Apr 25 17:30:24.359573 2026] [:error] [pid 62632:tid 62737] [client 158.158.100.177:48654] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Sat Apr 25 17:30:24.625530 2026] [:error] [pid 62632:tid 62761] [client 158.158.100.177:48654] File does not exist: /usr/local/apache/htdocs/suspended-page/zogy1.php
[Sat Apr 25 17:30:24.885985 2026] [:error] [pid 62632:tid 62754] [client 158.158.100.177:48654] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aeyJsAo5oFy5kfJhz1ZWnwAAANE"]
[Sat Apr 25 17:30:26.107754 2026] [:error] [pid 62632:tid 62753] [client 158.158.100.177:15980] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aeyJsgo5oFy5kfJhz1ZWogAAANA"]
[Sat Apr 25 17:30:26.815811 2026] [:error] [pid 62804:tid 62828] [client 158.158.100.177:19727] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aeyJslcFrMNK-MrDXtPkMQAAARA"]
[Sat Apr 25 17:30:27.478026 2026] [:error] [pid 62804:tid 62818] [client 72.146.5.227:33178] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wwx.php"] [unique_id "aeyJs1cFrMNK-MrDXtPkNAAAAQY"]
[Sat Apr 25 17:30:28.085331 2026] [:error] [pid 62804:tid 62827] [client 158.158.100.177:34663] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aeyJtFcFrMNK-MrDXtPkNgAAAQ8"]
[Sat Apr 25 17:30:30.267196 2026] [:error] [pid 62632:tid 62756] [client 158.158.100.177:12059] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atkno.php"] [unique_id "aeyJtgo5oFy5kfJhz1ZWqwAAANM"]
[Sat Apr 25 17:30:33.386869 2026] [:error] [pid 62632:tid 62740] [client 158.158.100.177:2054] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atkno.php"] [unique_id "aeyJuQo5oFy5kfJhz1ZWrgAAAMM"]
[Sat Apr 25 17:30:34.384341 2026] [:error] [pid 62630:tid 62704] [client 158.158.100.177:40447] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atkno.php"] [unique_id "aeyJunCJIizbz7HiRHTHPwAAAFY"]
[Sat Apr 25 17:30:34.455608 2026] [:error] [pid 62631:tid 62720] [client 72.146.5.227:33230] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/trx24.php"] [unique_id "aeyJulqQlRXN7uR3kqhREQAAAIo"]
[Sat Apr 25 17:30:35.250099 2026] [:error] [pid 62631:tid 62721] [client 72.146.5.227:31907] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/trx24.php"] [unique_id "aeyJu1qQlRXN7uR3kqhREgAAAIs"]
[Sat Apr 25 17:30:36.094933 2026] [:error] [pid 62632:tid 62739] [client 72.146.5.227:33278] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/trx24.php"] [unique_id "aeyJvAo5oFy5kfJhz1ZWtwAAAMI"]
[Sat Apr 25 17:30:37.228129 2026] [:error] [pid 62632:tid 62737] [client 158.158.100.177:49319] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atkno.php"] [unique_id "aeyJvQo5oFy5kfJhz1ZWuQAAAMA"]
[Sat Apr 25 17:30:37.544712 2026] [:error] [pid 62632:tid 62738] [client 72.146.5.227:31981] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/trx24.php"] [unique_id "aeyJvQo5oFy5kfJhz1ZWugAAAME"]
[Sat Apr 25 17:30:38.190743 2026] [:error] [pid 62631:tid 62719] [client 158.158.100.177:54464] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "aeyJvlqQlRXN7uR3kqhRFwAAAIk"]
[Sat Apr 25 17:30:38.597517 2026] [:error] [pid 62632:tid 62761] [client 72.146.5.227:33201] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blox.php"] [unique_id "aeyJvgo5oFy5kfJhz1ZWvAAAANg"]
[Sat Apr 25 17:30:39.106062 2026] [:error] [pid 62804:tid 62824] [client 72.146.5.227:33853] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blox.php"] [unique_id "aeyJv1cFrMNK-MrDXtPkQgAAAQw"]
[Sat Apr 25 17:30:39.128190 2026] [:error] [pid 62804:tid 62815] [client 158.158.100.177:2179] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "aeyJv1cFrMNK-MrDXtPkQwAAAQM"]
[Sat Apr 25 17:30:40.111893 2026] [:error] [pid 62804:tid 62813] [client 72.146.5.227:25846] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blox.php"] [unique_id "aeyJwFcFrMNK-MrDXtPkRQAAAQE"]
[Sat Apr 25 17:30:40.139980 2026] [:error] [pid 62804:tid 62832] [client 158.158.100.177:21021] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "aeyJwFcFrMNK-MrDXtPkRgAAARQ"]
[Sat Apr 25 17:30:42.470886 2026] [:error] [pid 62630:tid 62698] [client 158.158.100.177:17203] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "aeyJwnCJIizbz7HiRHTHSAAAAFA"]
[Sat Apr 25 17:30:43.724958 2026] [:error] [pid 62804:tid 62814] [client 158.158.100.177:31610] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "aeyJw1cFrMNK-MrDXtPkSQAAAQI"]
[Sat Apr 25 17:30:44.498422 2026] [:error] [pid 62631:tid 62719] [client 72.146.5.227:31966] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blox.php"] [unique_id "aeyJxFqQlRXN7uR3kqhRHwAAAIk"]
[Sat Apr 25 17:30:45.740843 2026] [:error] [pid 62804:tid 62836] [client 72.146.5.227:33854] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/berax.php"] [unique_id "aeyJxVcFrMNK-MrDXtPkTwAAARg"]
[Sat Apr 25 17:30:45.879506 2026] [:error] [pid 62804:tid 62830] [client 158.158.100.177:61625] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "aeyJxVcFrMNK-MrDXtPkUQAAARI"]
[Sat Apr 25 17:30:46.856816 2026] [:error] [pid 62630:tid 62691] [client 158.158.100.177:32255] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "aeyJxnCJIizbz7HiRHTHTwAAAEk"]
[Sat Apr 25 17:30:47.929374 2026] [:error] [pid 62804:tid 62829] [client 72.146.5.227:31267] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/berax.php"] [unique_id "aeyJx1cFrMNK-MrDXtPkUwAAARE"]
[Sat Apr 25 17:30:48.660710 2026] [:error] [pid 62631:tid 62727] [client 158.158.100.177:13405] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "aeyJyFqQlRXN7uR3kqhRIQAAAJE"]
[Sat Apr 25 17:30:50.078036 2026] [:error] [pid 62631:tid 62720] [client 158.158.100.177:21038] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpxl.php"] [unique_id "aeyJylqQlRXN7uR3kqhRJAAAAIo"]
[Sat Apr 25 17:30:50.590148 2026] [:error] [pid 62631:tid 62711] [client 72.146.5.227:31303] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/berax.php"] [unique_id "aeyJylqQlRXN7uR3kqhRJQAAAIE"]
[Sat Apr 25 17:30:51.008230 2026] [:error] [pid 62804:tid 62826] [client 158.158.100.177:21046] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpxl.php"] [unique_id "aeyJy1cFrMNK-MrDXtPkVwAAAQ4"]
[Sat Apr 25 17:30:51.725938 2026] [:error] [pid 62804:tid 62813] [client 72.146.5.227:31902] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/berax.php"] [unique_id "aeyJy1cFrMNK-MrDXtPkWwAAAQE"]
[Sat Apr 25 17:30:52.538395 2026] [:error] [pid 62631:tid 62721] [client 158.158.100.177:61584] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpxl.php"] [unique_id "aeyJzFqQlRXN7uR3kqhRJwAAAIs"]
[Sat Apr 25 17:30:53.356435 2026] [:error] [pid 62631:tid 62734] [client 72.146.5.227:35832] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "aeyJzVqQlRXN7uR3kqhRKgAAAJg"]
[Sat Apr 25 17:30:54.451216 2026] [:error] [pid 62631:tid 62725] [client 158.158.100.177:21023] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpxl.php"] [unique_id "aeyJzlqQlRXN7uR3kqhRLgAAAI8"]
[Sat Apr 25 17:30:55.112032 2026] [:error] [pid 62632:tid 62758] [client 72.146.5.227:33274] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "aeyJzwo5oFy5kfJhz1ZWwwAAANU"]
[Sat Apr 25 17:30:56.191760 2026] [:error] [pid 62631:tid 62713] [client 158.158.100.177:53202] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admlo.php"] [unique_id "aeyJ0FqQlRXN7uR3kqhRLwAAAIM"]
[Sat Apr 25 17:30:57.433632 2026] [:error] [pid 62804:tid 62828] [client 158.158.100.177:53189] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admlo.php"] [unique_id "aeyJ0VcFrMNK-MrDXtPkYgAAARA"]
[Sat Apr 25 17:30:57.983838 2026] [:error] [pid 62632:tid 62739] [client 72.146.5.227:33824] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "aeyJ0Qo5oFy5kfJhz1ZWyQAAAMI"]
[Sat Apr 25 17:30:58.516020 2026] [:error] [pid 62630:tid 62705] [client 158.158.100.177:2229] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admlo.php"] [unique_id "aeyJ0nCJIizbz7HiRHTHWgAAAFc"]
[Sat Apr 25 17:31:00.008327 2026] [:error] [pid 62630:tid 62691] [client 158.158.100.177:31609] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admlo.php"] [unique_id "aeyJ1HCJIizbz7HiRHTHXQAAAEk"]
[Sat Apr 25 17:31:00.258805 2026] [:error] [pid 62632:tid 62737] [client 72.146.5.227:31972] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "aeyJ1Ao5oFy5kfJhz1ZWzQAAAMA"]
[Sat Apr 25 17:31:00.813545 2026] [:error] [pid 62632:tid 62748] [client 158.158.100.177:22966] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f5.php"] [unique_id "aeyJ1Ao5oFy5kfJhz1ZWzwAAAMs"]
[Sat Apr 25 17:31:01.286664 2026] [:error] [pid 62632:tid 62753] [client 72.146.5.227:31319] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cdxadmin.php"] [unique_id "aeyJ1Qo5oFy5kfJhz1ZW0QAAANA"]
[Sat Apr 25 17:31:01.639405 2026] [:error] [pid 62631:tid 62726] [client 158.158.100.177:21006] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f5.php"] [unique_id "aeyJ1VqQlRXN7uR3kqhRNwAAAJA"]
[Sat Apr 25 17:31:02.379003 2026] [:error] [pid 62631:tid 62717] [client 72.146.5.227:31300] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cdxadmin.php"] [unique_id "aeyJ1lqQlRXN7uR3kqhROQAAAIc"]
[Sat Apr 25 17:31:02.389725 2026] [:error] [pid 62632:tid 62749] [client 158.158.100.177:2223] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f5.php"] [unique_id "aeyJ1go5oFy5kfJhz1ZW1QAAAMw"]
[Sat Apr 25 17:31:03.164364 2026] [:error] [pid 62632:tid 62740] [client 158.158.100.177:32206] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f5.php"] [unique_id "aeyJ1wo5oFy5kfJhz1ZW1gAAAMM"]
[Sat Apr 25 17:31:03.186510 2026] [:error] [pid 62632:tid 62743] [client 72.146.5.227:33204] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cdxadmin.php"] [unique_id "aeyJ1wo5oFy5kfJhz1ZW1wAAAMY"]
[Sat Apr 25 17:31:03.858704 2026] [:error] [pid 62804:tid 62824] [client 72.146.5.227:28314] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cdxadmin.php"] [unique_id "aeyJ11cFrMNK-MrDXtPkZwAAAQw"]
[Sat Apr 25 17:31:03.895812 2026] [:error] [pid 62804:tid 62826] [client 158.158.100.177:24287] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ptanf.php"] [unique_id "aeyJ11cFrMNK-MrDXtPkaAAAAQ4"]
[Sat Apr 25 17:31:04.831456 2026] [:error] [pid 62631:tid 62716] [client 158.158.100.177:54435] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ptanf.php"] [unique_id "aeyJ2FqQlRXN7uR3kqhRPQAAAIY"]
[Sat Apr 25 17:31:05.338959 2026] [:error] [pid 62804:tid 62833] [client 72.146.5.227:25115] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dfre.php"] [unique_id "aeyJ2VcFrMNK-MrDXtPkagAAARU"]
[Sat Apr 25 17:31:06.162434 2026] [:error] [pid 62804:tid 62821] [client 158.158.100.177:22924] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ptanf.php"] [unique_id "aeyJ2lcFrMNK-MrDXtPkbQAAAQk"]
[Sat Apr 25 17:31:06.340141 2026] [:error] [pid 62631:tid 62727] [client 72.146.5.227:33799] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dfre.php"] [unique_id "aeyJ2lqQlRXN7uR3kqhRQQAAAJE"]
[Sat Apr 25 17:31:06.928730 2026] [:error] [pid 62804:tid 62830] [client 158.158.100.177:17196] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ptanf.php"] [unique_id "aeyJ2lcFrMNK-MrDXtPkcAAAARI"]
[Sat Apr 25 17:31:07.942520 2026] [:error] [pid 62804:tid 62815] [client 158.158.100.177:22959] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ctex1.php"] [unique_id "aeyJ21cFrMNK-MrDXtPkdQAAAQM"]
[Sat Apr 25 17:31:09.108725 2026] [:error] [pid 62804:tid 62821] [client 158.158.100.177:53193] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ctex1.php"] [unique_id "aeyJ3VcFrMNK-MrDXtPkegAAAQk"]
[Sat Apr 25 17:31:10.052282 2026] [:error] [pid 62804:tid 62816] [client 158.158.100.177:51847] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ctex1.php"] [unique_id "aeyJ3lcFrMNK-MrDXtPkfgAAAQQ"]
[Sat Apr 25 17:31:10.376921 2026] [:error] [pid 62630:tid 62684] [client 72.146.5.227:31305] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dfre.php"] [unique_id "aeyJ3nCJIizbz7HiRHTHYgAAAEI"]
[Sat Apr 25 17:31:12.064452 2026] [:error] [pid 62804:tid 62825] [client 72.146.5.227:25815] File does not exist: /usr/local/apache/htdocs/suspended-page/dfre.php
[Sat Apr 25 17:31:12.152944 2026] [:error] [pid 62804:tid 62834] [client 158.158.100.177:30962] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ctex1.php"] [unique_id "aeyJ4FcFrMNK-MrDXtPkggAAARY"]
[Sat Apr 25 17:31:13.143778 2026] [:error] [pid 62804:tid 62825] [client 72.146.5.227:25815] File does not exist: /usr/local/apache/htdocs/suspended-page/sko.php
[Sat Apr 25 17:31:13.385933 2026] [:error] [pid 62804:tid 62826] [client 72.146.5.227:25815] File does not exist: /usr/local/apache/htdocs/suspended-page/shorw.php
[Sat Apr 25 17:31:13.621150 2026] [:error] [pid 62804:tid 62834] [client 72.146.5.227:25815] File does not exist: /usr/local/apache/htdocs/suspended-page/shelp.php
[Sat Apr 25 17:31:13.875777 2026] [:error] [pid 62804:tid 62828] [client 72.146.5.227:25815] File does not exist: /usr/local/apache/htdocs/suspended-page/seyv.php
[Sat Apr 25 17:31:14.113867 2026] [:error] [pid 62804:tid 62816] [client 72.146.5.227:25815] File does not exist: /usr/local/apache/htdocs/suspended-page/sad821.php
[Sat Apr 25 17:31:14.367017 2026] [:error] [pid 62804:tid 62823] [client 72.146.5.227:25815] File does not exist: /usr/local/apache/htdocs/suspended-page/sad8210.php
[Sat Apr 25 17:31:15.413479 2026] [:error] [pid 62804:tid 62817] [client 158.158.100.177:30930] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "aeyJ41cFrMNK-MrDXtPkogAAAQU"]
[Sat Apr 25 17:31:16.015873 2026] [:error] [pid 62804:tid 62823] [client 72.146.5.227:25815] File does not exist: /usr/local/apache/htdocs/suspended-page/sad8rd1.php
[Sat Apr 25 17:31:16.234442 2026] [:error] [pid 62804:tid 62825] [client 158.158.100.177:54504] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "aeyJ5FcFrMNK-MrDXtPkqAAAAQ0"]
[Sat Apr 25 17:31:16.290659 2026] [:error] [pid 62804:tid 62819] [client 72.146.5.227:25815] File does not exist: /usr/local/apache/htdocs/suspended-page/saxzgf5.php
[Sat Apr 25 17:31:16.557621 2026] [:error] [pid 62804:tid 62829] [client 72.146.5.227:25815] File does not exist: /usr/local/apache/htdocs/suspended-page/saxzw9t.php
[Sat Apr 25 17:31:16.794488 2026] [:error] [pid 62804:tid 62824] [client 72.146.5.227:25815] File does not exist: /usr/local/apache/htdocs/suspended-page/sder5252u.php
[Sat Apr 25 17:31:17.027380 2026] [:error] [pid 62804:tid 62812] [client 72.146.5.227:25815] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sderty5u.php"] [unique_id "aeyJ5VcFrMNK-MrDXtPkswAAAQA"]
[Sat Apr 25 17:31:17.098405 2026] [:error] [pid 62804:tid 62836] [client 158.158.100.177:31599] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "aeyJ5VcFrMNK-MrDXtPktAAAARg"]
[Sat Apr 25 17:31:17.780743 2026] [:error] [pid 62804:tid 62825] [client 158.158.100.177:2178] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "aeyJ5VcFrMNK-MrDXtPktwAAAQ0"]
[Sat Apr 25 17:31:18.897896 2026] [:error] [pid 62804:tid 62815] [client 158.158.100.177:31589] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aeyJ5lcFrMNK-MrDXtPkvQAAAQM"]
[Sat Apr 25 17:31:19.842163 2026] [:error] [pid 62631:tid 62713] [client 158.158.100.177:22973] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aeyJ51qQlRXN7uR3kqhRSAAAAIM"]
[Sat Apr 25 17:31:20.656068 2026] [:error] [pid 62804:tid 62816] [client 158.158.100.177:2215] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aeyJ6FcFrMNK-MrDXtPkwAAAAQQ"]
[Sat Apr 25 17:31:21.417977 2026] [:error] [pid 62630:tid 62703] [client 72.146.5.227:31991] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sderty5u.php"] [unique_id "aeyJ6XCJIizbz7HiRHTHZwAAAFU"]
[Sat Apr 25 17:31:22.036919 2026] [:error] [pid 62804:tid 62834] [client 158.158.100.177:22972] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aeyJ6lcFrMNK-MrDXtPkwQAAARY"]
[Sat Apr 25 17:31:22.895741 2026] [:error] [pid 62630:tid 62688] [client 158.158.100.177:30933] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "aeyJ6nCJIizbz7HiRHTHawAAAEY"]
[Sat Apr 25 17:31:24.024168 2026] [:error] [pid 62804:tid 62829] [client 158.158.100.177:53200] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Sat Apr 25 17:31:24.508925 2026] [:error] [pid 62804:tid 62829] [client 158.158.100.177:53200] File does not exist: /usr/local/apache/htdocs/suspended-page/axe.php
[Sat Apr 25 17:31:24.803595 2026] [:error] [pid 62804:tid 62834] [client 158.158.100.177:53200] File does not exist: /usr/local/apache/htdocs/suspended-page/index0.php
[Sat Apr 25 17:31:24.844662 2026] [:error] [pid 62632:tid 62747] [client 72.146.5.227:29044] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sderty5u.php"] [unique_id "aeyJ7Ao5oFy5kfJhz1ZW_gAAAMo"]
[Sat Apr 25 17:31:25.144620 2026] [:error] [pid 62804:tid 62833] [client 158.158.100.177:53200] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-01ul.php
[Sat Apr 25 17:31:25.513133 2026] [:error] [pid 62804:tid 62822] [client 158.158.100.177:53200] File does not exist: /usr/local/apache/htdocs/suspended-page/e3.php
[Sat Apr 25 17:31:25.858452 2026] [:error] [pid 62804:tid 62820] [client 158.158.100.177:53200] File does not exist: /usr/local/apache/htdocs/suspended-page/fkohd.php
[Sat Apr 25 17:31:26.166531 2026] [:error] [pid 62804:tid 62821] [client 158.158.100.177:53200] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Sat Apr 25 17:31:26.425681 2026] [:error] [pid 62804:tid 62818] [client 158.158.100.177:53200] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Sat Apr 25 17:31:26.684037 2026] [:error] [pid 62804:tid 62815] [client 158.158.100.177:53200] File does not exist: /usr/local/apache/htdocs/suspended-page/zo.php
[Sat Apr 25 17:31:27.000914 2026] [:error] [pid 62804:tid 62828] [client 158.158.100.177:53200] File does not exist: /usr/local/apache/htdocs/suspended-page/xy.php
[Sat Apr 25 17:31:27.260783 2026] [:error] [pid 62804:tid 62825] [client 158.158.100.177:53200] File does not exist: /usr/local/apache/htdocs/suspended-page/masks.php
[Sat Apr 25 17:31:27.516152 2026] [:error] [pid 62804:tid 62826] [client 158.158.100.177:53200] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "aeyJ71cFrMNK-MrDXtPk1AAAAQ4"]
[Sat Apr 25 17:31:28.312944 2026] [:error] [pid 62630:tid 62693] [client 72.146.5.227:35837] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sderty5u.php"] [unique_id "aeyJ8HCJIizbz7HiRHTHbwAAAEs"]
[Sat Apr 25 17:31:28.366353 2026] [:error] [pid 62632:tid 62754] [client 158.158.100.177:17877] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "aeyJ8Ao5oFy5kfJhz1ZXCAAAANE"]
[Sat Apr 25 17:31:30.875438 2026] [:error] [pid 62804:tid 62813] [client 72.146.5.227:28998] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hilk.php"] [unique_id "aeyJ8lcFrMNK-MrDXtPk2gAAAQE"]
[Sat Apr 25 17:31:31.519954 2026] [:error] [pid 62804:tid 62825] [client 158.158.100.177:17172] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "aeyJ81cFrMNK-MrDXtPk3QAAAQ0"]
[Sat Apr 25 17:31:31.522301 2026] [:error] [pid 62804:tid 62835] [client 72.146.5.227:27649] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hilk.php"] [unique_id "aeyJ81cFrMNK-MrDXtPk3gAAARc"]
[Sat Apr 25 17:31:33.055617 2026] [:error] [pid 62804:tid 62834] [client 72.146.5.227:33179] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hilk.php"] [unique_id "aeyJ9VcFrMNK-MrDXtPk5gAAARY"]
[Sat Apr 25 17:31:33.059692 2026] [:error] [pid 62804:tid 62829] [client 158.158.100.177:22955] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "aeyJ9VcFrMNK-MrDXtPk5wAAARE"]
[Sat Apr 25 17:31:35.287495 2026] [:error] [pid 62632:tid 62737] [client 158.158.100.177:13416] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "aeyJ9wo5oFy5kfJhz1ZXDwAAAMA"]
[Sat Apr 25 17:31:37.699974 2026] [:error] [pid 62631:tid 62723] [client 158.158.100.177:53222] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "aeyJ-VqQlRXN7uR3kqhRYwAAAI0"]
[Sat Apr 25 17:31:41.356013 2026] [:error] [pid 62632:tid 62750] [client 158.158.100.177:15885] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "aeyJ_Qo5oFy5kfJhz1ZXLQAAAM0"]
[Sat Apr 25 17:31:43.123783 2026] [:error] [pid 62630:tid 62696] [client 158.158.100.177:31601] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "aeyJ_3CJIizbz7HiRHTHfwAAAE4"]
[Sat Apr 25 17:31:43.520935 2026] [:error] [pid 62631:tid 62718] [client 72.146.5.227:33847] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hilk.php"] [unique_id "aeyJ_1qQlRXN7uR3kqhRcgAAAIg"]
[Sat Apr 25 17:31:44.365418 2026] [:error] [pid 62630:tid 62693] [client 158.158.100.177:56621] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeyKAHCJIizbz7HiRHTHggAAAEs"]
[Sat Apr 25 17:31:45.004009 2026] [:error] [pid 62804:tid 62824] [client 72.146.5.227:25833] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/miso.php"] [unique_id "aeyKAVcFrMNK-MrDXtPlIAAAAQw"]
[Sat Apr 25 17:31:45.667095 2026] [:error] [pid 62804:tid 62828] [client 158.158.100.177:21013] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeyKAVcFrMNK-MrDXtPlKwAAARA"]
[Sat Apr 25 17:31:46.540626 2026] [:error] [pid 62630:tid 62689] [client 158.158.100.177:17160] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeyKAnCJIizbz7HiRHTHhgAAAEc"]
[Sat Apr 25 17:31:47.393535 2026] [:error] [pid 62632:tid 62759] [client 158.158.100.177:15896] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeyKAwo5oFy5kfJhz1ZXOgAAANY"]
[Sat Apr 25 17:31:48.168844 2026] [:error] [pid 62804:tid 62817] [client 158.158.100.177:31578] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vv.php"] [unique_id "aeyKBFcFrMNK-MrDXtPlOQAAAQU"]
[Sat Apr 25 17:31:48.839107 2026] [:error] [pid 62804:tid 62819] [client 158.158.100.177:21050] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vv.php"] [unique_id "aeyKBFcFrMNK-MrDXtPlPQAAAQc"]
[Sat Apr 25 17:31:49.596753 2026] [:error] [pid 62804:tid 62827] [client 158.158.100.177:2222] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vv.php"] [unique_id "aeyKBVcFrMNK-MrDXtPlQwAAAQ8"]
[Sat Apr 25 17:31:49.981622 2026] [:error] [pid 62804:tid 62814] [client 72.146.5.227:28291] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/miso.php"] [unique_id "aeyKBVcFrMNK-MrDXtPlRwAAAQI"]
[Sat Apr 25 17:31:50.567302 2026] [:error] [pid 62631:tid 62723] [client 158.158.100.177:22948] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vv.php"] [unique_id "aeyKBlqQlRXN7uR3kqhRhgAAAI0"]
[Sat Apr 25 17:31:51.727150 2026] [:error] [pid 62632:tid 62747] [client 158.158.100.177:35216] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpconf.php"] [unique_id "aeyKBwo5oFy5kfJhz1ZXRAAAAMo"]
[Sat Apr 25 17:31:52.073874 2026] [:error] [pid 62632:tid 62743] [client 72.146.5.227:28360] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/miso.php"] [unique_id "aeyKCAo5oFy5kfJhz1ZXRQAAAMY"]
[Sat Apr 25 17:31:52.513180 2026] [:error] [pid 62631:tid 62732] [client 158.158.100.177:60432] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpconf.php"] [unique_id "aeyKCFqQlRXN7uR3kqhRjAAAAJY"]
[Sat Apr 25 17:31:53.457173 2026] [:error] [pid 62804:tid 62813] [client 158.158.100.177:51896] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpconf.php"] [unique_id "aeyKCVcFrMNK-MrDXtPlUgAAAQE"]
[Sat Apr 25 17:31:54.606663 2026] [:error] [pid 62804:tid 62830] [client 158.158.100.177:54494] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpconf.php"] [unique_id "aeyKClcFrMNK-MrDXtPlVAAAARI"]
[Sat Apr 25 17:31:55.183018 2026] [:error] [pid 62632:tid 62749] [client 158.158.100.177:24270] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeyKCwo5oFy5kfJhz1ZXRgAAAMw"]
[Sat Apr 25 17:31:55.901733 2026] [:error] [pid 62804:tid 62818] [client 158.158.100.177:21054] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeyKC1cFrMNK-MrDXtPlWAAAAQY"]
[Sat Apr 25 17:31:56.461016 2026] [:error] [pid 62804:tid 62833] [client 158.158.100.177:54517] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeyKDFcFrMNK-MrDXtPlWwAAARU"]
[Sat Apr 25 17:31:57.202832 2026] [:error] [pid 62632:tid 62739] [client 158.158.100.177:61623] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeyKDQo5oFy5kfJhz1ZXSwAAAMI"]
[Sat Apr 25 17:31:58.365069 2026] [:error] [pid 62804:tid 62832] [client 158.158.100.177:24276] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-zx.php"] [unique_id "aeyKDlcFrMNK-MrDXtPlYQAAARQ"]
[Sat Apr 25 17:31:58.690138 2026] [:error] [pid 62804:tid 62818] [client 72.146.5.227:31958] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/miso.php"] [unique_id "aeyKDlcFrMNK-MrDXtPlYwAAAQY"]
[Sat Apr 25 17:31:59.260478 2026] [:error] [pid 62632:tid 62744] [client 158.158.100.177:21041] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-zx.php"] [unique_id "aeyKDwo5oFy5kfJhz1ZXUgAAAMc"]
[Sat Apr 25 17:32:00.512446 2026] [:error] [pid 62804:tid 62835] [client 158.158.100.177:15882] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-zx.php"] [unique_id "aeyKEFcFrMNK-MrDXtPlagAAARc"]
[Sat Apr 25 17:32:00.563815 2026] [:error] [pid 62804:tid 62812] [client 72.146.5.227:31281] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aeyKEFcFrMNK-MrDXtPlawAAAQA"]
[Sat Apr 25 17:32:02.537527 2026] [:error] [pid 62804:tid 62836] [client 158.158.100.177:57119] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-zx.php"] [unique_id "aeyKElcFrMNK-MrDXtPlcgAAARg"]
[Sat Apr 25 17:32:02.541943 2026] [:error] [pid 62804:tid 62830] [client 72.146.5.227:25805] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aeyKElcFrMNK-MrDXtPlcwAAARI"]
[Sat Apr 25 17:32:03.386098 2026] [:error] [pid 62804:tid 62814] [client 158.158.100.177:61569] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aeyKE1cFrMNK-MrDXtPleQAAAQI"]
[Sat Apr 25 17:32:04.704789 2026] [:error] [pid 62632:tid 62756] [client 158.158.100.177:51860] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aeyKFAo5oFy5kfJhz1ZXXwAAANM"]
[Sat Apr 25 17:32:05.496583 2026] [:error] [pid 62632:tid 62752] [client 72.146.5.227:33268] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aeyKFQo5oFy5kfJhz1ZXYgAAAM8"]
[Sat Apr 25 17:32:06.945501 2026] [:error] [pid 62804:tid 62815] [client 158.158.100.177:30951] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aeyKFlcFrMNK-MrDXtPliAAAAQM"]
[Sat Apr 25 17:32:08.474445 2026] [:error] [pid 62632:tid 62750] [client 72.146.5.227:31264] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aeyKGAo5oFy5kfJhz1ZXZgAAAM0"]
[Sat Apr 25 17:32:10.561063 2026] [:error] [pid 62804:tid 62820] [client 72.146.5.227:31892] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/checkout.php"] [unique_id "aeyKGlcFrMNK-MrDXtPlkAAAAQg"]
[Sat Apr 25 17:32:10.876518 2026] [:error] [pid 62804:tid 62829] [client 158.158.100.177:61587] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aeyKGlcFrMNK-MrDXtPllAAAARE"]
[Sat Apr 25 17:32:11.460024 2026] [:error] [pid 62804:tid 62825] [client 72.146.5.227:31246] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/checkout.php"] [unique_id "aeyKG1cFrMNK-MrDXtPlmAAAAQ0"]
[Sat Apr 25 17:32:12.605009 2026] [:error] [pid 62630:tid 62692] [client 72.146.5.227:31978] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/checkout.php"] [unique_id "aeyKHHCJIizbz7HiRHTHogAAAEo"]
[Sat Apr 25 17:32:12.944686 2026] [:error] [pid 62804:tid 62816] [client 158.158.100.177:21040] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "aeyKHFcFrMNK-MrDXtPlnQAAAQQ"]
[Sat Apr 25 17:32:13.480569 2026] [:error] [pid 62630:tid 62700] [client 72.146.5.227:35787] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/checkout.php"] [unique_id "aeyKHXCJIizbz7HiRHTHpAAAAFI"]
[Sat Apr 25 17:32:14.667331 2026] [:error] [pid 62804:tid 62817] [client 72.146.5.227:35792] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fictioner.php"] [unique_id "aeyKHlcFrMNK-MrDXtPlowAAAQU"]
[Sat Apr 25 17:32:15.554973 2026] [:error] [pid 62804:tid 62829] [client 158.158.100.177:59213] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "aeyKH1cFrMNK-MrDXtPlpwAAARE"]
[Sat Apr 25 17:32:15.933567 2026] [:error] [pid 62804:tid 62816] [client 72.146.5.227:25850] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fictioner.php"] [unique_id "aeyKH1cFrMNK-MrDXtPlqAAAAQQ"]
[Sat Apr 25 17:32:16.687047 2026] [:error] [pid 62632:tid 62756] [client 158.158.100.177:2093] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "aeyKIAo5oFy5kfJhz1ZXcAAAANM"]
[Sat Apr 25 17:32:16.856245 2026] [:error] [pid 62804:tid 62836] [client 72.146.5.227:23752] File does not exist: /usr/local/apache/htdocs/suspended-page/fictioner.php
[Sat Apr 25 17:32:17.327878 2026] [:error] [pid 62804:tid 62828] [client 72.146.5.227:23752] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Sat Apr 25 17:32:17.594637 2026] [:error] [pid 62804:tid 62821] [client 72.146.5.227:23752] File does not exist: /usr/local/apache/htdocs/suspended-page/xxa.php
[Sat Apr 25 17:32:17.752660 2026] [:error] [pid 62632:tid 62748] [client 158.158.100.177:2963] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "aeyKIQo5oFy5kfJhz1ZXdAAAAMs"]
[Sat Apr 25 17:32:17.860450 2026] [:error] [pid 62804:tid 62829] [client 72.146.5.227:23752] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Sat Apr 25 17:32:18.218182 2026] [:error] [pid 62804:tid 62812] [client 72.146.5.227:23752] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-asyn-upload.php
[Sat Apr 25 17:32:18.482925 2026] [:error] [pid 62804:tid 62826] [client 72.146.5.227:23752] File does not exist: /usr/local/apache/htdocs/suspended-page/redixsx.php
[Sat Apr 25 17:32:18.757020 2026] [:error] [pid 62804:tid 62813] [client 72.146.5.227:23752] File does not exist: /usr/local/apache/htdocs/suspended-page/alpha.php
[Sat Apr 25 17:32:18.878003 2026] [:error] [pid 62630:tid 62696] [client 158.158.100.177:54419] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/iov.php"] [unique_id "aeyKInCJIizbz7HiRHTHqgAAAE4"]
[Sat Apr 25 17:32:19.032625 2026] [:error] [pid 62804:tid 62823] [client 72.146.5.227:23752] File does not exist: /usr/local/apache/htdocs/suspended-page/bc.php
[Sat Apr 25 17:32:19.299948 2026] [:error] [pid 62804:tid 62819] [client 72.146.5.227:23752] File does not exist: /usr/local/apache/htdocs/suspended-page/67.php
[Sat Apr 25 17:32:19.793923 2026] [:error] [pid 62632:tid 62751] [client 158.158.100.177:54423] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/iov.php"] [unique_id "aeyKIwo5oFy5kfJhz1ZXdwAAAM4"]
[Sat Apr 25 17:32:19.805132 2026] [:error] [pid 62804:tid 62820] [client 72.146.5.227:23752] File does not exist: /usr/local/apache/htdocs/suspended-page/1mrX.php
[Sat Apr 25 17:32:20.112516 2026] [:error] [pid 62804:tid 62817] [client 72.146.5.227:23752] File does not exist: /usr/local/apache/htdocs/suspended-page/x402.php
[Sat Apr 25 17:32:20.421587 2026] [:error] [pid 62804:tid 62812] [client 72.146.5.227:23752] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/485.php"] [unique_id "aeyKJFcFrMNK-MrDXtPlvQAAAQA"]
[Sat Apr 25 17:32:20.606195 2026] [:error] [pid 62630:tid 62705] [client 158.158.100.177:31580] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/iov.php"] [unique_id "aeyKJHCJIizbz7HiRHTHqwAAAFc"]
[Sat Apr 25 17:32:21.458461 2026] [:error] [pid 62804:tid 62813] [client 158.158.100.177:54409] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/iov.php"] [unique_id "aeyKJVcFrMNK-MrDXtPlwQAAAQE"]
[Sat Apr 25 17:32:22.329990 2026] [:error] [pid 62804:tid 62821] [client 158.158.100.177:59205] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jodohghi.php"] [unique_id "aeyKJlcFrMNK-MrDXtPlxQAAAQk"]
[Sat Apr 25 17:32:23.101559 2026] [:error] [pid 62804:tid 62812] [client 72.146.5.227:29021] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/485.php"] [unique_id "aeyKJ1cFrMNK-MrDXtPlyAAAAQA"]
[Sat Apr 25 17:32:23.684677 2026] [:error] [pid 62631:tid 62712] [client 158.158.100.177:2974] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jodohghi.php"] [unique_id "aeyKJ1qQlRXN7uR3kqhRogAAAII"]
[Sat Apr 25 17:32:24.626625 2026] [:error] [pid 62631:tid 62711] [client 158.158.100.177:59250] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jodohghi.php"] [unique_id "aeyKKFqQlRXN7uR3kqhRpAAAAIE"]
[Sat Apr 25 17:32:24.786743 2026] [:error] [pid 62630:tid 62701] [client 72.146.5.227:31897] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/485.php"] [unique_id "aeyKKHCJIizbz7HiRHTHrQAAAFM"]
[Sat Apr 25 17:32:25.820619 2026] [:error] [pid 62632:tid 62738] [client 72.146.5.227:33180] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/485.php"] [unique_id "aeyKKQo5oFy5kfJhz1ZXewAAAME"]
[Sat Apr 25 17:32:25.877742 2026] [:error] [pid 62804:tid 62821] [client 158.158.100.177:30948] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jodohghi.php"] [unique_id "aeyKKVcFrMNK-MrDXtPlzwAAAQk"]
[Sat Apr 25 17:32:26.573452 2026] [:error] [pid 62631:tid 62717] [client 72.146.5.227:23108] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "aeyKKlqQlRXN7uR3kqhRqwAAAIc"]
[Sat Apr 25 17:32:26.713166 2026] [:error] [pid 62804:tid 62814] [client 158.158.100.177:56597] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rendi59.php"] [unique_id "aeyKKlcFrMNK-MrDXtPl0AAAAQI"]
[Sat Apr 25 17:32:27.211772 2026] [:error] [pid 62804:tid 62832] [client 72.146.5.227:31265] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "aeyKK1cFrMNK-MrDXtPl0gAAARQ"]
[Sat Apr 25 17:32:27.669383 2026] [:error] [pid 62632:tid 62752] [client 158.158.100.177:24274] File does not exist: /usr/local/apache/htdocs/suspended-page/rendi59.php
[Sat Apr 25 17:32:27.914107 2026] [:error] [pid 62632:tid 62758] [client 158.158.100.177:24274] File does not exist: /usr/local/apache/htdocs/suspended-page/rivasqup.php
[Sat Apr 25 17:32:28.171922 2026] [:error] [pid 62632:tid 62745] [client 158.158.100.177:24274] File does not exist: /usr/local/apache/htdocs/suspended-page/mga.php
[Sat Apr 25 17:32:28.443513 2026] [:error] [pid 62632:tid 62761] [client 158.158.100.177:24274] File does not exist: /usr/local/apache/htdocs/suspended-page/dshtv.php
[Sat Apr 25 17:32:28.695070 2026] [:error] [pid 62632:tid 62753] [client 158.158.100.177:24274] File does not exist: /usr/local/apache/htdocs/suspended-page/sym403.php
[Sat Apr 25 17:32:28.939876 2026] [:error] [pid 62632:tid 62750] [client 158.158.100.177:24274] File does not exist: /usr/local/apache/htdocs/suspended-page/temp1.php
[Sat Apr 25 17:32:29.231554 2026] [:error] [pid 62632:tid 62742] [client 158.158.100.177:24274] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sat Apr 25 17:32:29.287288 2026] [:error] [pid 62631:tid 62720] [client 72.146.5.227:28306] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "aeyKLVqQlRXN7uR3kqhRrQAAAIo"]
[Sat Apr 25 17:32:29.515603 2026] [:error] [pid 62632:tid 62744] [client 158.158.100.177:24274] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Apr 25 17:32:29.818525 2026] [:error] [pid 62632:tid 62737] [client 158.158.100.177:24274] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sat Apr 25 17:32:30.107816 2026] [:error] [pid 62632:tid 62738] [client 158.158.100.177:24274] File does not exist: /usr/local/apache/htdocs/suspended-page/bbny.php
[Sat Apr 25 17:32:30.441298 2026] [:error] [pid 62632:tid 62748] [client 158.158.100.177:24274] File does not exist: /usr/local/apache/htdocs/suspended-page/ggb.php
[Sat Apr 25 17:32:30.680955 2026] [:error] [pid 62632:tid 62760] [client 158.158.100.177:24274] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zhw.php"] [unique_id "aeyKLgo5oFy5kfJhz1ZXjwAAANc"]
[Sat Apr 25 17:32:31.792198 2026] [:error] [pid 62804:tid 62813] [client 72.146.5.227:31904] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "aeyKL1cFrMNK-MrDXtPl3QAAAQE"]
[Sat Apr 25 17:32:32.036312 2026] [:error] [pid 62804:tid 62830] [client 158.158.100.177:30974] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zhw.php"] [unique_id "aeyKMFcFrMNK-MrDXtPl3gAAARI"]
[Sat Apr 25 17:32:32.646911 2026] [:error] [pid 62804:tid 62816] [client 158.158.100.177:15873] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zhw.php"] [unique_id "aeyKMFcFrMNK-MrDXtPl4gAAAQQ"]
[Sat Apr 25 17:32:33.393416 2026] [:error] [pid 62804:tid 62825] [client 158.158.100.177:17162] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zhw.php"] [unique_id "aeyKMVcFrMNK-MrDXtPl5gAAAQ0"]
[Sat Apr 25 17:32:34.999724 2026] [:error] [pid 62632:tid 62746] [client 72.146.5.227:33826] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeyKMgo5oFy5kfJhz1ZXlQAAAMk"]
[Sat Apr 25 17:32:35.524805 2026] [:error] [pid 62631:tid 62728] [client 72.146.5.227:25802] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeyKM1qQlRXN7uR3kqhRsQAAAJI"]
[Sat Apr 25 17:32:37.525665 2026] [:error] [pid 62804:tid 62822] [client 72.146.5.227:25818] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeyKNVcFrMNK-MrDXtPl8wAAAQo"]
[Sat Apr 25 17:32:39.116419 2026] [:error] [pid 62632:tid 62752] [client 72.146.5.227:33227] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeyKNwo5oFy5kfJhz1ZXmQAAAM8"]
[Sat Apr 25 17:32:49.635467 2026] [:error] [pid 62632:tid 62758] [client 158.158.100.177:54444] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "aeyKQQo5oFy5kfJhz1ZXtgAAANU"]
[Sat Apr 25 17:32:51.864370 2026] [:error] [pid 62804:tid 62833] [client 158.158.100.177:56576] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "aeyKQ1cFrMNK-MrDXtPmUAAAARU"]
[Sat Apr 25 17:32:54.165382 2026] [:error] [pid 62804:tid 62822] [client 158.158.100.177:59204] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "aeyKRlcFrMNK-MrDXtPmWgAAAQo"]
[Sat Apr 25 17:32:55.455582 2026] [:error] [pid 62804:tid 62835] [client 158.158.100.177:30920] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "aeyKR1cFrMNK-MrDXtPmXQAAARc"]
[Sat Apr 25 17:32:56.108860 2026] [:error] [pid 62632:tid 62752] [client 158.158.100.177:57135] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lov.php"] [unique_id "aeyKSAo5oFy5kfJhz1ZX0QAAAM8"]
[Sat Apr 25 17:32:56.971845 2026] [:error] [pid 62631:tid 62722] [client 158.158.100.177:51899] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lov.php"] [unique_id "aeyKSFqQlRXN7uR3kqhRwgAAAIw"]
[Sat Apr 25 17:33:00.823032 2026] [:error] [pid 62631:tid 62729] [client 158.158.100.177:53213] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lov.php"] [unique_id "aeyKTFqQlRXN7uR3kqhRygAAAJM"]
[Sat Apr 25 17:33:01.590019 2026] [:error] [pid 62632:tid 62756] [client 158.158.100.177:64864] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lov.php"] [unique_id "aeyKTQo5oFy5kfJhz1ZX1gAAANM"]
[Sat Apr 25 17:33:02.208426 2026] [:error] [pid 62804:tid 62817] [client 158.158.100.177:24302] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/knw.php"] [unique_id "aeyKTlcFrMNK-MrDXtPmYwAAAQU"]
[Sat Apr 25 17:33:02.903822 2026] [:error] [pid 62804:tid 62821] [client 158.158.100.177:39706] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/knw.php"] [unique_id "aeyKTlcFrMNK-MrDXtPmZQAAAQk"]
[Sat Apr 25 17:33:03.564285 2026] [:error] [pid 62804:tid 62824] [client 158.158.100.177:59249] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/knw.php"] [unique_id "aeyKT1cFrMNK-MrDXtPmaAAAAQw"]
[Sat Apr 25 17:33:04.143581 2026] [:error] [pid 62804:tid 62818] [client 158.158.100.177:56611] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/knw.php"] [unique_id "aeyKUFcFrMNK-MrDXtPmaQAAAQY"]
[Sat Apr 25 17:33:04.984412 2026] [:error] [pid 62804:tid 62829] [client 158.158.100.177:49375] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aeyKUFcFrMNK-MrDXtPmawAAARE"]
[Sat Apr 25 17:33:05.621384 2026] [:error] [pid 62804:tid 62825] [client 158.158.100.177:3000] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aeyKUVcFrMNK-MrDXtPmbgAAAQ0"]
[Sat Apr 25 17:33:06.998568 2026] [:error] [pid 62804:tid 62821] [client 158.158.100.177:46829] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aeyKUlcFrMNK-MrDXtPmcwAAAQk"]
[Sat Apr 25 17:33:07.959863 2026] [:error] [pid 62804:tid 62819] [client 158.158.100.177:39716] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aeyKU1cFrMNK-MrDXtPmeQAAAQc"]
[Sat Apr 25 17:33:10.664410 2026] [:error] [pid 62630:tid 62692] [client 158.158.100.177:49384] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "aeyKVnCJIizbz7HiRHTH3gAAAEo"]
[Sat Apr 25 17:33:12.889855 2026] [:error] [pid 62804:tid 62833] [client 158.158.100.177:2611] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "aeyKWFcFrMNK-MrDXtPmnAAAARU"]
[Sat Apr 25 17:33:16.335315 2026] [:error] [pid 62630:tid 62695] [client 158.158.100.177:45462] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "aeyKXHCJIizbz7HiRHTH4wAAAE0"]
[Sat Apr 25 17:33:23.337315 2026] [:error] [pid 62804:tid 62831] [client 158.158.100.177:35954] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "aeyKY1cFrMNK-MrDXtPmsQAAARM"]
[Sat Apr 25 17:33:50.306779 2026] [:error] [pid 62631:tid 62723] [client 158.158.100.177:31496] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-tiroto.php
[Sat Apr 25 17:33:50.564944 2026] [:error] [pid 62631:tid 62732] [client 158.158.100.177:31496] File does not exist: /usr/local/apache/htdocs/suspended-page/son.php
[Sat Apr 25 17:33:50.883904 2026] [:error] [pid 62631:tid 62728] [client 158.158.100.177:31496] File does not exist: /usr/local/apache/htdocs/suspended-page/99.php
[Sat Apr 25 17:33:51.300281 2026] [:error] [pid 62631:tid 62724] [client 158.158.100.177:31496] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Sat Apr 25 17:33:51.807591 2026] [:error] [pid 62631:tid 62714] [client 158.158.100.177:31496] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sat Apr 25 17:33:52.066212 2026] [:error] [pid 62631:tid 62716] [client 158.158.100.177:31496] File does not exist: /usr/local/apache/htdocs/suspended-page/ay.php
[Sat Apr 25 17:33:52.520201 2026] [:error] [pid 62631:tid 62727] [client 158.158.100.177:31496] File does not exist: /usr/local/apache/htdocs/suspended-page/options.php
[Sat Apr 25 17:33:52.775883 2026] [:error] [pid 62631:tid 62734] [client 158.158.100.177:31496] [client 158.158.100.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "aeyKgFqQlRXN7uR3kqhSEwAAAJg"]
[Sat Apr 25 17:33:56.748212 2026] [:error] [pid 62631:tid 62717] [client 158.158.100.177:16537] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Sat Apr 25 17:33:57.014980 2026] [:error] [pid 62631:tid 62721] [client 158.158.100.177:16537] File does not exist: /usr/local/apache/htdocs/suspended-page/1a.php
[Sat Apr 25 17:33:57.291514 2026] [:error] [pid 62631:tid 62715] [client 158.158.100.177:16537] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Sat Apr 25 17:33:58.435625 2026] [:error] [pid 62631:tid 62712] [client 158.158.100.177:16537] File does not exist: /usr/local/apache/htdocs/suspended-page/file-kikikoko.php
[Sat Apr 25 17:33:58.704144 2026] [:error] [pid 62631:tid 62723] [client 158.158.100.177:16537] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aeyKhlqQlRXN7uR3kqhSHQAAAI0"]
[Sat Apr 25 17:34:01.227663 2026] [:error] [pid 62632:tid 62749] [client 158.158.100.177:41612] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aeyKiQo5oFy5kfJhz1ZYHQAAAMw"]
[Sat Apr 25 17:34:03.445126 2026] [:error] [pid 62632:tid 62750] [client 158.158.100.177:18461] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aeyKiwo5oFy5kfJhz1ZYIQAAAM0"]
[Sat Apr 25 17:34:04.598036 2026] [:error] [pid 62632:tid 62737] [client 158.158.100.177:17807] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aeyKjAo5oFy5kfJhz1ZYIwAAAMA"]
[Sat Apr 25 17:34:05.430287 2026] [:error] [pid 62632:tid 62753] [client 158.158.100.177:35875] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tramuibs.php"] [unique_id "aeyKjQo5oFy5kfJhz1ZYKgAAANA"]
[Sat Apr 25 17:34:07.357442 2026] [:error] [pid 62632:tid 62745] [client 158.158.100.177:12105] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tramuibs.php"] [unique_id "aeyKjwo5oFy5kfJhz1ZYLAAAAMg"]
[Sat Apr 25 17:34:09.389867 2026] [:error] [pid 62631:tid 62730] [client 158.158.100.177:59894] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tramuibs.php"] [unique_id "aeyKkVqQlRXN7uR3kqhSJQAAAJQ"]
[Sat Apr 25 17:34:10.670884 2026] [:error] [pid 62631:tid 62717] [client 158.158.100.177:41066] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tramuibs.php"] [unique_id "aeyKklqQlRXN7uR3kqhSLAAAAIc"]
[Sat Apr 25 17:34:11.741684 2026] [:error] [pid 62804:tid 62827] [client 158.158.100.177:23596] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "aeyKk1cFrMNK-MrDXtPm9gAAAQ8"]
[Sat Apr 25 17:34:12.442205 2026] [:error] [pid 62631:tid 62725] [client 158.158.100.177:18448] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "aeyKlFqQlRXN7uR3kqhSNwAAAI8"]
[Sat Apr 25 17:34:13.662430 2026] [:error] [pid 62631:tid 62723] [client 158.158.100.177:26576] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "aeyKlVqQlRXN7uR3kqhSRQAAAI0"]
[Sat Apr 25 17:34:17.765782 2026] [:error] [pid 62804:tid 62826] [client 158.158.100.177:41080] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "aeyKmVcFrMNK-MrDXtPnFgAAAQ4"]
[Sat Apr 25 17:34:20.166534 2026] [:error] [pid 62804:tid 62821] [client 158.158.100.177:37832] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "aeyKnFcFrMNK-MrDXtPnGQAAAQk"]
[Sat Apr 25 17:34:20.950406 2026] [:error] [pid 62630:tid 62694] [client 158.158.100.177:41051] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "aeyKnHCJIizbz7HiRHTIHQAAAEw"]
[Sat Apr 25 17:34:21.904371 2026] [:error] [pid 62630:tid 62702] [client 158.158.100.177:43604] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "aeyKnXCJIizbz7HiRHTIHwAAAFQ"]
[Sat Apr 25 17:34:22.610316 2026] [:error] [pid 62804:tid 62830] [client 158.158.100.177:30230] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "aeyKnlcFrMNK-MrDXtPnHQAAARI"]
[Sat Apr 25 17:34:24.149839 2026] [:error] [pid 62804:tid 62827] [client 158.158.100.177:30219] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bpxrn.php"] [unique_id "aeyKoFcFrMNK-MrDXtPnIwAAAQ8"]
[Sat Apr 25 17:34:25.584261 2026] [:error] [pid 62630:tid 62682] [client 158.158.100.177:65453] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bpxrn.php"] [unique_id "aeyKoXCJIizbz7HiRHTIJwAAAEA"]
[Sat Apr 25 17:34:26.241879 2026] [:error] [pid 62631:tid 62723] [client 158.158.100.177:21072] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bpxrn.php"] [unique_id "aeyKolqQlRXN7uR3kqhSWwAAAI0"]
[Sat Apr 25 17:34:27.090644 2026] [:error] [pid 62804:tid 62831] [client 158.158.100.177:41076] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bpxrn.php"] [unique_id "aeyKo1cFrMNK-MrDXtPnKwAAARM"]
[Sat Apr 25 17:34:28.133179 2026] [:error] [pid 62630:tid 62686] [client 158.158.100.177:47417] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aeyKpHCJIizbz7HiRHTIKgAAAEQ"]
[Sat Apr 25 17:34:28.749746 2026] [:error] [pid 62804:tid 62814] [client 158.158.100.177:21067] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aeyKpFcFrMNK-MrDXtPnMgAAAQI"]
[Sat Apr 25 17:34:29.832039 2026] [:error] [pid 62804:tid 62828] [client 158.158.100.177:28482] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aeyKpVcFrMNK-MrDXtPnOQAAARA"]
[Sat Apr 25 17:34:31.177545 2026] [:error] [pid 62804:tid 62823] [client 158.158.100.177:25514] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aeyKp1cFrMNK-MrDXtPnPQAAAQs"]
[Sat Apr 25 17:34:31.909626 2026] [:error] [pid 62804:tid 62829] [client 158.158.100.177:30238] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws37.php"] [unique_id "aeyKp1cFrMNK-MrDXtPnQAAAARE"]
[Sat Apr 25 17:34:32.691132 2026] [:error] [pid 62631:tid 62729] [client 158.158.100.177:41067] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws37.php"] [unique_id "aeyKqFqQlRXN7uR3kqhSYAAAAJM"]
[Sat Apr 25 17:34:33.599812 2026] [:error] [pid 62632:tid 62753] [client 158.158.100.177:41040] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws37.php"] [unique_id "aeyKqQo5oFy5kfJhz1ZYZgAAANA"]
[Sat Apr 25 17:34:34.525127 2026] [:error] [pid 62631:tid 62711] [client 158.158.100.177:47405] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws37.php"] [unique_id "aeyKqlqQlRXN7uR3kqhSZAAAAIE"]
[Sat Apr 25 17:34:35.509583 2026] [:error] [pid 62804:tid 62812] [client 158.158.100.177:58429] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "aeyKq1cFrMNK-MrDXtPnRwAAAQA"]
[Sat Apr 25 17:34:36.441147 2026] [:error] [pid 62631:tid 62722] [client 158.158.100.177:28495] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "aeyKrFqQlRXN7uR3kqhSaAAAAIw"]
[Sat Apr 25 17:34:37.080621 2026] [:error] [pid 62632:tid 62747] [client 158.158.100.177:21108] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "aeyKrQo5oFy5kfJhz1ZYcAAAAMo"]
[Sat Apr 25 17:34:37.798630 2026] [:error] [pid 62804:tid 62835] [client 158.158.100.177:29808] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "aeyKrVcFrMNK-MrDXtPnTgAAARc"]
[Sat Apr 25 17:34:39.033269 2026] [:error] [pid 62632:tid 62740] [client 158.158.100.177:37857] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bojcdooq.php"] [unique_id "aeyKrwo5oFy5kfJhz1ZYdQAAAMM"]
[Sat Apr 25 17:34:39.914393 2026] [:error] [pid 62630:tid 62686] [client 158.158.100.177:30246] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bojcdooq.php"] [unique_id "aeyKr3CJIizbz7HiRHTIMQAAAEQ"]
[Sat Apr 25 17:34:40.681998 2026] [:error] [pid 62632:tid 62756] [client 158.158.100.177:30267] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bojcdooq.php"] [unique_id "aeyKsAo5oFy5kfJhz1ZYfQAAANM"]
[Sat Apr 25 17:34:41.592838 2026] [:error] [pid 62632:tid 62749] [client 158.158.100.177:59800] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bojcdooq.php"] [unique_id "aeyKsQo5oFy5kfJhz1ZYgAAAAMw"]
[Sat Apr 25 17:34:42.634237 2026] [:error] [pid 62632:tid 62753] [client 158.158.100.177:46200] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zdd.php"] [unique_id "aeyKsgo5oFy5kfJhz1ZYgwAAANA"]
[Sat Apr 25 17:34:43.253889 2026] [:error] [pid 62804:tid 62817] [client 158.158.100.177:46154] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zdd.php"] [unique_id "aeyKs1cFrMNK-MrDXtPnWwAAAQU"]
[Sat Apr 25 17:34:44.037409 2026] [:error] [pid 62631:tid 62719] [client 158.158.100.177:25505] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zdd.php"] [unique_id "aeyKtFqQlRXN7uR3kqhScAAAAIk"]
[Sat Apr 25 17:34:44.657158 2026] [:error] [pid 62630:tid 62696] [client 158.158.100.177:58400] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zdd.php"] [unique_id "aeyKtHCJIizbz7HiRHTINwAAAE4"]
[Sat Apr 25 17:34:45.606668 2026] [:error] [pid 62631:tid 62727] [client 158.158.100.177:27875] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/133.php"] [unique_id "aeyKtVqQlRXN7uR3kqhSdQAAAJE"]
[Sat Apr 25 17:34:46.307616 2026] [:error] [pid 62631:tid 62729] [client 158.158.100.177:25512] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/133.php"] [unique_id "aeyKtlqQlRXN7uR3kqhSdgAAAJM"]
[Sat Apr 25 17:34:46.920483 2026] [:error] [pid 62632:tid 62754] [client 158.158.100.177:28486] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/133.php"] [unique_id "aeyKtgo5oFy5kfJhz1ZYjwAAANE"]
[Sat Apr 25 17:34:47.913209 2026] [:error] [pid 62804:tid 62819] [client 158.158.100.177:46189] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/133.php"] [unique_id "aeyKt1cFrMNK-MrDXtPnZQAAAQc"]
[Sat Apr 25 17:34:48.608040 2026] [:error] [pid 62630:tid 62686] [client 158.158.100.177:37852] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jq.php"] [unique_id "aeyKuHCJIizbz7HiRHTIPAAAAEQ"]
[Sat Apr 25 17:34:49.344107 2026] [:error] [pid 62804:tid 62827] [client 158.158.100.177:29807] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jq.php"] [unique_id "aeyKuVcFrMNK-MrDXtPnaQAAAQ8"]
[Sat Apr 25 17:34:50.892433 2026] [:error] [pid 62632:tid 62756] [client 158.158.100.177:58408] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jq.php"] [unique_id "aeyKugo5oFy5kfJhz1ZYmgAAANM"]
[Sat Apr 25 17:34:53.119210 2026] [:error] [pid 62632:tid 62752] [client 158.158.100.177:59812] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jq.php"] [unique_id "aeyKvQo5oFy5kfJhz1ZYoAAAAM8"]
[Sat Apr 25 17:34:57.222448 2026] [:error] [pid 62804:tid 62818] [client 158.158.100.177:59827] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cro.php"] [unique_id "aeyKwVcFrMNK-MrDXtPnhgAAAQY"]
[Sat Apr 25 17:34:58.744044 2026] [:error] [pid 62632:tid 62739] [client 158.158.100.177:64166] File does not exist: /usr/local/apache/htdocs/suspended-page/cro.php
[Sat Apr 25 17:34:58.988993 2026] [:error] [pid 62632:tid 62748] [client 158.158.100.177:64166] File does not exist: /usr/local/apache/htdocs/suspended-page/wwx.php
[Sat Apr 25 17:34:59.238763 2026] [:error] [pid 62632:tid 62744] [client 158.158.100.177:64166] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Sat Apr 25 17:34:59.481531 2026] [:error] [pid 62632:tid 62752] [client 158.158.100.177:64166] File does not exist: /usr/local/apache/htdocs/suspended-page/blox.php
[Sat Apr 25 17:34:59.723333 2026] [:error] [pid 62632:tid 62758] [client 158.158.100.177:64166] File does not exist: /usr/local/apache/htdocs/suspended-page/berax.php
[Sat Apr 25 17:35:00.003507 2026] [:error] [pid 62632:tid 62746] [client 158.158.100.177:64166] File does not exist: /usr/local/apache/htdocs/suspended-page/bkxzo.php
[Sat Apr 25 17:35:00.260952 2026] [:error] [pid 62632:tid 62739] [client 158.158.100.177:64166] File does not exist: /usr/local/apache/htdocs/suspended-page/cdxadmin.php
[Sat Apr 25 17:35:00.545867 2026] [:error] [pid 62632:tid 62748] [client 158.158.100.177:64166] File does not exist: /usr/local/apache/htdocs/suspended-page/dfre.php
[Sat Apr 25 17:35:00.789755 2026] [:error] [pid 62632:tid 62744] [client 158.158.100.177:64166] File does not exist: /usr/local/apache/htdocs/suspended-page/sko.php
[Sat Apr 25 17:35:01.031616 2026] [:error] [pid 62632:tid 62757] [client 158.158.100.177:64166] File does not exist: /usr/local/apache/htdocs/suspended-page/shorw.php
[Sat Apr 25 17:35:01.311493 2026] [:error] [pid 62632:tid 62752] [client 158.158.100.177:64166] File does not exist: /usr/local/apache/htdocs/suspended-page/shelp.php
[Sat Apr 25 17:35:01.555418 2026] [:error] [pid 62632:tid 62758] [client 158.158.100.177:64166] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/seyv.php"] [unique_id "aeyKxQo5oFy5kfJhz1ZYwAAAANU"]
[Sat Apr 25 17:35:06.593139 2026] [:error] [pid 62804:tid 62831] [client 158.158.100.177:14692] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/seyv.php"] [unique_id "aeyKylcFrMNK-MrDXtPnoQAAARM"]
[Sat Apr 25 17:35:10.744185 2026] [:error] [pid 62804:tid 62833] [client 158.158.100.177:29760] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/seyv.php"] [unique_id "aeyKzlcFrMNK-MrDXtPnsQAAARU"]
[Sat Apr 25 17:35:11.882555 2026] [:error] [pid 62804:tid 62829] [client 158.158.100.177:27249] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/seyv.php"] [unique_id "aeyKz1cFrMNK-MrDXtPntwAAARE"]
[Sat Apr 25 17:35:12.822952 2026] [:error] [pid 62631:tid 62717] [client 158.158.100.177:27231] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sad821.php"] [unique_id "aeyK0FqQlRXN7uR3kqhSjwAAAIc"]
[Sat Apr 25 17:35:13.598481 2026] [:error] [pid 62804:tid 62827] [client 158.158.100.177:2742] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sad821.php"] [unique_id "aeyK0VcFrMNK-MrDXtPnvgAAAQ8"]
[Sat Apr 25 17:35:15.094259 2026] [:error] [pid 62631:tid 62713] [client 158.158.100.177:62113] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sad821.php"] [unique_id "aeyK01qQlRXN7uR3kqhSlAAAAIM"]
[Sat Apr 25 17:35:16.872753 2026] [:error] [pid 62632:tid 62758] [client 158.158.100.177:55048] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sad821.php"] [unique_id "aeyK1Ao5oFy5kfJhz1ZY4AAAANU"]
[Sat Apr 25 17:35:18.098608 2026] [:error] [pid 62632:tid 62755] [client 158.158.100.177:51962] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sad8210.php"] [unique_id "aeyK1go5oFy5kfJhz1ZY4gAAANI"]
[Sat Apr 25 17:35:19.309181 2026] [:error] [pid 62804:tid 62816] [client 158.158.100.177:62081] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sad8210.php"] [unique_id "aeyK11cFrMNK-MrDXtPnzwAAAQQ"]
[Sat Apr 25 17:35:22.036637 2026] [:error] [pid 62804:tid 62826] [client 158.158.100.177:62484] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sad8210.php"] [unique_id "aeyK2lcFrMNK-MrDXtPn1QAAAQ4"]
[Sat Apr 25 17:35:23.649085 2026] [:error] [pid 62632:tid 62755] [client 158.158.100.177:51288] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sad8210.php"] [unique_id "aeyK2wo5oFy5kfJhz1ZY6gAAANI"]
[Sat Apr 25 17:35:25.307797 2026] [:error] [pid 62631:tid 62730] [client 158.158.100.177:2713] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sad8rd1.php"] [unique_id "aeyK3VqQlRXN7uR3kqhSrQAAAJQ"]
[Sat Apr 25 17:35:28.294301 2026] [:error] [pid 62804:tid 62813] [client 158.158.100.177:2716] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sad8rd1.php"] [unique_id "aeyK4FcFrMNK-MrDXtPn5QAAAQE"]
[Sat Apr 25 17:35:31.161996 2026] [:error] [pid 62804:tid 62824] [client 158.158.100.177:46777] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sad8rd1.php"] [unique_id "aeyK41cFrMNK-MrDXtPn7gAAAQw"]
[Sat Apr 25 17:35:35.121132 2026] [:error] [pid 62804:tid 62816] [client 158.158.100.177:2723] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sad8rd1.php"] [unique_id "aeyK51cFrMNK-MrDXtPoAAAAAQQ"]
[Sat Apr 25 17:35:36.058582 2026] [:error] [pid 62632:tid 62749] [client 158.158.100.177:27206] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saxzgf5.php"] [unique_id "aeyK6Ao5oFy5kfJhz1ZY-gAAAMw"]
[Sat Apr 25 17:35:39.608620 2026] [:error] [pid 62630:tid 62704] [client 158.158.100.177:14693] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saxzgf5.php"] [unique_id "aeyK63CJIizbz7HiRHTIVwAAAFY"]
[Sat Apr 25 17:35:42.758373 2026] [:error] [pid 62630:tid 62686] [client 158.158.100.177:26572] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saxzgf5.php"] [unique_id "aeyK7nCJIizbz7HiRHTIWAAAAEQ"]
[Sat Apr 25 17:35:44.934868 2026] [:error] [pid 62632:tid 62754] [client 158.158.100.177:21732] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saxzgf5.php"] [unique_id "aeyK8Ao5oFy5kfJhz1ZZDgAAANE"]
[Sat Apr 25 17:35:46.972016 2026] [:error] [pid 62630:tid 62701] [client 158.158.100.177:55150] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saxzw9t.php"] [unique_id "aeyK8nCJIizbz7HiRHTIXgAAAFM"]
[Sat Apr 25 17:35:48.174621 2026] [:error] [pid 62632:tid 62754] [client 158.158.100.177:39787] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saxzw9t.php"] [unique_id "aeyK9Ao5oFy5kfJhz1ZZFgAAANE"]
[Sat Apr 25 17:35:51.837058 2026] [:error] [pid 62631:tid 62717] [client 158.158.100.177:18487] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saxzw9t.php"] [unique_id "aeyK91qQlRXN7uR3kqhS1wAAAIc"]
[Sat Apr 25 17:35:56.684101 2026] [:error] [pid 62804:tid 62818] [client 158.158.100.177:55138] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saxzw9t.php"] [unique_id "aeyK_FcFrMNK-MrDXtPoMQAAAQY"]
[Sat Apr 25 17:36:00.227884 2026] [:error] [pid 62631:tid 62721] [client 158.158.100.177:36575] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sder5252u.php"] [unique_id "aeyLAFqQlRXN7uR3kqhS6gAAAIs"]
[Sat Apr 25 17:36:02.952743 2026] [:error] [pid 62630:tid 62695] [client 158.158.100.177:15352] File does not exist: /usr/local/apache/htdocs/suspended-page/sder5252u.php
[Sat Apr 25 17:36:03.219374 2026] [:error] [pid 62630:tid 62706] [client 158.158.100.177:15352] File does not exist: /usr/local/apache/htdocs/suspended-page/sderty5u.php
[Sat Apr 25 17:36:03.489410 2026] [:error] [pid 62630:tid 62687] [client 158.158.100.177:15352] File does not exist: /usr/local/apache/htdocs/suspended-page/hilk.php
[Sat Apr 25 17:36:05.168606 2026] [:error] [pid 62630:tid 62687] [client 158.158.100.177:15352] File does not exist: /usr/local/apache/htdocs/suspended-page/miso.php
[Sat Apr 25 17:36:05.464001 2026] [:error] [pid 62630:tid 62703] [client 158.158.100.177:15352] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Sat Apr 25 17:36:05.765134 2026] [:error] [pid 62630:tid 62683] [client 158.158.100.177:15352] File does not exist: /usr/local/apache/htdocs/suspended-page/checkout.php
[Sat Apr 25 17:36:06.273399 2026] [:error] [pid 62630:tid 62692] [client 158.158.100.177:15352] File does not exist: /usr/local/apache/htdocs/suspended-page/fictioner.php
[Sat Apr 25 17:36:06.724426 2026] [:error] [pid 62630:tid 62696] [client 158.158.100.177:15352] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Sat Apr 25 17:36:07.083289 2026] [:error] [pid 62630:tid 62695] [client 158.158.100.177:15352] File does not exist: /usr/local/apache/htdocs/suspended-page/xxa.php
[Sat Apr 25 17:36:07.414331 2026] [:error] [pid 62630:tid 62706] [client 158.158.100.177:15352] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Sat Apr 25 17:36:07.728356 2026] [:error] [pid 62630:tid 62700] [client 158.158.100.177:15352] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-asyn-upload.php
[Sat Apr 25 17:36:08.230144 2026] [:error] [pid 62630:tid 62686] [client 158.158.100.177:15352] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/redixsx.php"] [unique_id "aeyLCHCJIizbz7HiRHTIfQAAAEQ"]
[Sat Apr 25 17:36:09.444746 2026] [:error] [pid 62804:tid 62833] [client 158.158.100.177:17836] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/redixsx.php"] [unique_id "aeyLCVcFrMNK-MrDXtPoQAAAARU"]
[Sat Apr 25 17:36:11.349893 2026] [:error] [pid 62630:tid 62700] [client 158.158.100.177:55145] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/redixsx.php"] [unique_id "aeyLC3CJIizbz7HiRHTIhAAAAFI"]
[Sat Apr 25 17:36:14.284538 2026] [:error] [pid 62630:tid 62701] [client 158.158.100.177:15310] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/redixsx.php"] [unique_id "aeyLDnCJIizbz7HiRHTIhwAAAFM"]
[Sat Apr 25 17:36:16.941655 2026] [:error] [pid 62804:tid 62829] [client 158.158.100.177:19087] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aeyLEFcFrMNK-MrDXtPoXQAAARE"]
[Sat Apr 25 17:36:17.596456 2026] [:error] [pid 62631:tid 62725] [client 158.158.100.177:30909] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aeyLEVqQlRXN7uR3kqhS_AAAAI8"]
[Sat Apr 25 17:36:18.622274 2026] [:error] [pid 62632:tid 62761] [client 158.158.100.177:44824] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aeyLEgo5oFy5kfJhz1ZZRQAAANg"]
[Sat Apr 25 17:36:19.434542 2026] [:error] [pid 62804:tid 62817] [client 158.158.100.177:55167] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aeyLE1cFrMNK-MrDXtPoZAAAAQU"]
[Sat Apr 25 17:36:20.152810 2026] [:error] [pid 62631:tid 62717] [client 158.158.100.177:17812] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "aeyLFFqQlRXN7uR3kqhS_gAAAIc"]
[Sat Apr 25 17:36:21.125544 2026] [:error] [pid 62804:tid 62828] [client 158.158.100.177:17833] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "aeyLFVcFrMNK-MrDXtPoZwAAARA"]
[Sat Apr 25 17:36:22.233687 2026] [:error] [pid 62804:tid 62835] [client 158.158.100.177:21747] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "aeyLFlcFrMNK-MrDXtPoagAAARc"]
[Sat Apr 25 17:36:23.169713 2026] [:error] [pid 62631:tid 62713] [client 158.158.100.177:30894] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "aeyLF1qQlRXN7uR3kqhS_wAAAIM"]
[Sat Apr 25 17:36:24.072765 2026] [:error] [pid 62632:tid 62745] [client 158.158.100.177:59841] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/67.php"] [unique_id "aeyLGAo5oFy5kfJhz1ZZTwAAAMg"]
[Sat Apr 25 17:36:25.810487 2026] [:error] [pid 62630:tid 62688] [client 158.158.100.177:24955] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/67.php"] [unique_id "aeyLGXCJIizbz7HiRHTIkwAAAEY"]
[Sat Apr 25 17:36:26.941565 2026] [:error] [pid 62632:tid 62757] [client 158.158.100.177:15317] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/67.php"] [unique_id "aeyLGgo5oFy5kfJhz1ZZVgAAANQ"]
[Sat Apr 25 17:36:28.461025 2026] [:error] [pid 62631:tid 62734] [client 158.158.100.177:19156] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/67.php"] [unique_id "aeyLHFqQlRXN7uR3kqhTAgAAAJg"]
[Sat Apr 25 17:36:30.139850 2026] [:error] [pid 62804:tid 62822] [client 158.158.100.177:19160] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1mrX.php"] [unique_id "aeyLHlcFrMNK-MrDXtPoegAAAQo"]
[Sat Apr 25 17:36:31.261559 2026] [:error] [pid 62632:tid 62754] [client 158.158.100.177:24931] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1mrX.php"] [unique_id "aeyLHwo5oFy5kfJhz1ZZXAAAANE"]
[Sat Apr 25 17:36:32.172623 2026] [:error] [pid 62804:tid 62831] [client 158.158.100.177:59891] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1mrX.php"] [unique_id "aeyLIFcFrMNK-MrDXtPoewAAARM"]
[Sat Apr 25 17:36:33.455957 2026] [:error] [pid 62804:tid 62819] [client 158.158.100.177:29702] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1mrX.php"] [unique_id "aeyLIVcFrMNK-MrDXtPofwAAAQc"]
[Sat Apr 25 17:36:34.623188 2026] [:error] [pid 62804:tid 62829] [client 158.158.100.177:19119] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x402.php"] [unique_id "aeyLIlcFrMNK-MrDXtPohAAAARE"]
[Sat Apr 25 17:36:40.968839 2026] [:error] [pid 62631:tid 62727] [client 158.158.100.177:24898] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x402.php"] [unique_id "aeyLKFqQlRXN7uR3kqhTFgAAAJE"]
[Sat Apr 25 17:36:44.326921 2026] [:error] [pid 62630:tid 62685] [client 158.158.100.177:53169] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x402.php"] [unique_id "aeyLLHCJIizbz7HiRHTImQAAAEM"]
[Sat Apr 25 17:36:45.575112 2026] [:error] [pid 62632:tid 62759] [client 158.158.100.177:59852] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x402.php"] [unique_id "aeyLLQo5oFy5kfJhz1ZZcgAAANY"]
[Sat Apr 25 17:36:53.014143 2026] [:error] [pid 62632:tid 62740] [client 158.158.100.177:21741] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/485.php"] [unique_id "aeyLNQo5oFy5kfJhz1ZZdgAAAMM"]
[Sat Apr 25 17:36:55.200623 2026] [:error] [pid 62632:tid 62752] [client 158.158.100.177:21702] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/485.php"] [unique_id "aeyLNwo5oFy5kfJhz1ZZhwAAAM8"]
[Sat Apr 25 17:36:57.985568 2026] [:error] [pid 62632:tid 62753] [client 158.158.100.177:56643] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/485.php"] [unique_id "aeyLOQo5oFy5kfJhz1ZZmQAAANA"]
[Sat Apr 25 17:36:59.783189 2026] [:error] [pid 62632:tid 62744] [client 158.158.100.177:17830] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/485.php"] [unique_id "aeyLOwo5oFy5kfJhz1ZZpgAAAMc"]
[Sat Apr 25 17:37:01.872096 2026] [:error] [pid 62804:tid 62816] [client 158.158.100.177:36606] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "aeyLPVcFrMNK-MrDXtPpEgAAAQQ"]
[Sat Apr 25 17:37:02.911413 2026] [:error] [pid 62804:tid 62824] [client 158.158.100.177:17844] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "aeyLPlcFrMNK-MrDXtPpFgAAAQw"]
[Sat Apr 25 17:37:03.780569 2026] [:error] [pid 62630:tid 62682] [client 158.158.100.177:29702] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "aeyLP3CJIizbz7HiRHTIrwAAAEA"]
[Sat Apr 25 17:37:04.613117 2026] [:error] [pid 62630:tid 62683] [client 158.158.100.177:29737] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "aeyLQHCJIizbz7HiRHTIsgAAAEE"]
[Sat Apr 25 17:37:05.470091 2026] [:error] [pid 62632:tid 62748] [client 158.158.100.177:29717] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeyLQQo5oFy5kfJhz1ZZwAAAAMs"]
[Sat Apr 25 17:37:06.506010 2026] [:error] [pid 62632:tid 62753] [client 158.158.100.177:30852] [client 158.158.100.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeyLQgo5oFy5kfJhz1ZZygAAANA"]
[Sat Apr 25 17:37:08.855497 2026] [:error] [pid 62631:tid 62710] [client 158.158.100.177:19140] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Sun Apr 26 00:35:44.318019 2026] [:error] [pid 59897:tid 59936] [client 52.253.104.46:6208] File does not exist: /usr/local/apache/htdocs/suspended-page/php8.php
[Sun Apr 26 00:35:44.436252 2026] [:error] [pid 59897:tid 59933] [client 52.253.104.46:6208] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Apr 26 00:35:44.555531 2026] [:error] [pid 59897:tid 59950] [client 52.253.104.46:6208] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Apr 26 00:35:44.673588 2026] [:error] [pid 59897:tid 59932] [client 52.253.104.46:6208] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Sun Apr 26 00:35:44.816195 2026] [:error] [pid 59897:tid 59946] [client 52.253.104.46:6208] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sun Apr 26 00:35:45.050729 2026] [:error] [pid 59897:tid 59949] [client 52.253.104.46:6208] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Apr 26 00:35:45.171911 2026] [:error] [pid 59897:tid 59940] [client 52.253.104.46:6208] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Apr 26 00:35:45.408990 2026] [:error] [pid 59897:tid 59943] [client 52.253.104.46:6208] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sun Apr 26 00:35:45.640444 2026] [:error] [pid 59897:tid 59941] [client 52.253.104.46:6208] [client 52.253.104.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeztYfBrrkdzpEbmK4ey1AAAAI4"]
[Sun Apr 26 00:35:46.122913 2026] [:error] [pid 3212:tid 3214] [client 52.253.104.46:3076] [client 52.253.104.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeztYvg-28TY8_YLtUecpgAAAQA"]
[Sun Apr 26 00:35:46.584218 2026] [:error] [pid 3212:tid 3232] [client 52.253.104.46:6228] [client 52.253.104.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeztYvg-28TY8_YLtUecrQAAARI"]
[Sun Apr 26 00:35:47.117023 2026] [:error] [pid 59985:tid 60006] [client 52.253.104.46:3105] [client 52.253.104.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeztYwF_zDvEhKvyTH7sBQAAABM"]
[Sun Apr 26 00:53:23.011010 2026] [:error] [pid 59896:tid 59911] [client 185.198.240.154:35117] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Apr 26 00:53:23.349451 2026] [:error] [pid 59896:tid 59900] [client 185.198.240.154:35117] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sun Apr 26 00:53:23.584519 2026] [:error] [pid 59896:tid 59913] [client 185.198.240.154:35117] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Apr 26 00:53:23.809449 2026] [:error] [pid 59896:tid 59910] [client 185.198.240.154:35117] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Apr 26 00:53:24.093656 2026] [:error] [pid 59896:tid 59902] [client 185.198.240.154:35117] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Apr 26 00:53:24.358395 2026] [:error] [pid 59896:tid 59909] [client 185.198.240.154:35117] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Apr 26 00:53:24.834957 2026] [:error] [pid 59896:tid 59920] [client 185.198.240.154:35117] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Apr 26 00:53:25.204592 2026] [:error] [pid 59896:tid 59912] [client 185.198.240.154:35117] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Apr 26 00:53:26.539052 2026] [:error] [pid 59896:tid 59905] [client 185.198.240.154:35117] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Apr 26 00:53:27.275334 2026] [:error] [pid 59896:tid 59914] [client 185.198.240.154:35117] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sun Apr 26 00:53:27.624247 2026] [:error] [pid 59896:tid 59908] [client 185.198.240.154:35117] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Apr 26 00:53:27.991875 2026] [:error] [pid 59896:tid 59921] [client 185.198.240.154:35117] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Apr 26 00:53:28.271949 2026] [:error] [pid 59896:tid 59918] [client 185.198.240.154:35117] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Apr 26 00:53:28.597126 2026] [:error] [pid 59896:tid 59912] [client 185.198.240.154:35117] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sun Apr 26 00:53:28.815135 2026] [:error] [pid 59896:tid 59915] [client 185.198.240.154:35117] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Apr 26 00:53:29.127957 2026] [:error] [pid 59896:tid 59911] [client 185.198.240.154:35117] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sun Apr 26 00:53:29.357843 2026] [:error] [pid 59896:tid 59905] [client 185.198.240.154:35117] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Apr 26 00:53:29.623748 2026] [:error] [pid 59896:tid 59902] [client 185.198.240.154:35117] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Sun Apr 26 00:53:36.758819 2026] [:error] [pid 59896:tid 59906] [client 185.198.240.154:35117] [client 185.198.240.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aezxkLLLzhtkd-OXUgBFiAAAAEY"]
[Sun Apr 26 01:26:28.782830 2026] [:error] [pid 59896:tid 59920] [client 212.47.78.126:49690] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "aez5RLLLzhtkd-OXUgBSogAAAFQ"]
[Sun Apr 26 01:26:29.390455 2026] [:error] [pid 3212:tid 3234] [client 212.47.78.126:56537] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "aez5Rfg-28TY8_YLtUe51wAAARQ"]
[Sun Apr 26 01:26:29.954682 2026] [:error] [pid 59896:tid 59913] [client 212.47.78.126:52733] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media/system/js/core.js"] [unique_id "aez5RbLLzhtkd-OXUgBSowAAAE0"]
[Sun Apr 26 08:47:20.487880 2026] [:error] [pid 8385:tid 8441] [client 52.253.104.46:3284] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Apr 26 08:47:20.722303 2026] [autoindex:error] [pid 8385:tid 8434] [client 52.253.104.46:3284] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 08:47:21.541300 2026] [:error] [pid 8385:tid 8431] [client 52.253.104.46:3284] [client 52.253.104.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "ae1gmTOy7_J84Wx3-ox86AAAAEc"]
[Sun Apr 26 08:47:22.001171 2026] [:error] [pid 8390:tid 8462] [client 52.253.104.46:3213] [client 52.253.104.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "ae1gmYGPtFK_i9p5yxRJrAAAAIs"]
[Sun Apr 26 08:47:22.458496 2026] [:error] [pid 8390:tid 8451] [client 52.253.104.46:3270] [client 52.253.104.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "ae1gmoGPtFK_i9p5yxRJrQAAAIA"]
[Sun Apr 26 08:47:22.924986 2026] [:error] [pid 8383:tid 8412] [client 52.253.104.46:3216] [client 52.253.104.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "ae1gmtFa2S3EsATMdWPU5wAAAA8"]
[Sun Apr 26 10:21:50.205931 2026] [:error] [pid 13137:tid 13156] [client 20.111.40.172:14100] File does not exist: /usr/local/apache/htdocs/suspended-page/png.php
[Sun Apr 26 10:21:50.451384 2026] [:error] [pid 13137:tid 13160] [client 20.111.40.172:14100] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-x7.php
[Sun Apr 26 10:21:50.692166 2026] [:error] [pid 13137:tid 13164] [client 20.111.40.172:14100] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Sun Apr 26 10:21:50.932692 2026] [:error] [pid 13137:tid 13151] [client 20.111.40.172:14100] File does not exist: /usr/local/apache/htdocs/suspended-page/AxAo.php
[Sun Apr 26 10:21:51.171361 2026] [:error] [pid 13137:tid 13143] [client 20.111.40.172:14100] File does not exist: /usr/local/apache/htdocs/suspended-page/siln.php
[Sun Apr 26 10:21:51.411839 2026] [:error] [pid 13137:tid 13157] [client 20.111.40.172:14100] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Sun Apr 26 10:21:51.652277 2026] [:error] [pid 13137:tid 13140] [client 20.111.40.172:14100] File does not exist: /usr/local/apache/htdocs/suspended-page/about3.php
[Sun Apr 26 10:21:51.891311 2026] [:error] [pid 13137:tid 13158] [client 20.111.40.172:14100] File does not exist: /usr/local/apache/htdocs/suspended-page/raw.php
[Sun Apr 26 10:21:52.136184 2026] [:error] [pid 13137:tid 13149] [client 20.111.40.172:14100] File does not exist: /usr/local/apache/htdocs/suspended-page/puvil.php
[Sun Apr 26 10:21:52.384532 2026] [:error] [pid 13137:tid 13153] [client 20.111.40.172:14100] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sun Apr 26 10:21:52.630021 2026] [:error] [pid 13137:tid 13155] [client 20.111.40.172:14100] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tmpls.php"] [unique_id "ae12wN0RB4J0o4h5neENtQAAAg4"]
[Sun Apr 26 10:21:53.130705 2026] [:error] [pid 16515:tid 16542] [client 20.111.40.172:14416] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tmpls.php"] [unique_id "ae12wVtDrUmgHSvpuLzrPAAAAlg"]
[Sun Apr 26 10:21:53.661065 2026] [:error] [pid 8390:tid 8451] [client 20.111.40.172:14417] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tmpls.php"] [unique_id "ae12wYGPtFK_i9p5yxR6mAAAAIA"]
[Sun Apr 26 10:21:54.165195 2026] [:error] [pid 16515:tid 16537] [client 20.111.40.172:14085] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tmpls.php"] [unique_id "ae12wltDrUmgHSvpuLzrQAAAAlM"]
[Sun Apr 26 10:21:54.638140 2026] [:error] [pid 22572:tid 22583] [client 20.111.40.172:14400] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3.php"] [unique_id "ae12wtXOViWCFU-pZzCi_wAAAUU"]
[Sun Apr 26 10:21:55.109858 2026] [:error] [pid 8383:tid 8419] [client 20.111.40.172:14086] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3.php"] [unique_id "ae12w9Fa2S3EsATMdWPfHgAAABY"]
[Sun Apr 26 10:21:55.582202 2026] [:error] [pid 8385:tid 8447] [client 20.111.40.172:14411] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3.php"] [unique_id "ae12wzOy7_J84Wx3-oyM2gAAAFc"]
[Sun Apr 26 10:21:56.078761 2026] [:error] [pid 16515:tid 16521] [client 20.111.40.172:14412] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3.php"] [unique_id "ae12xFtDrUmgHSvpuLzrRQAAAkM"]
[Sun Apr 26 10:21:56.549874 2026] [:error] [pid 22572:tid 22601] [client 20.111.40.172:14110] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-aaa.php"] [unique_id "ae12xNXOViWCFU-pZzCjAQAAAVc"]
[Sun Apr 26 10:21:57.020394 2026] [:error] [pid 16515:tid 16522] [client 20.111.40.172:14138] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-aaa.php"] [unique_id "ae12xVtDrUmgHSvpuLzrRgAAAkQ"]
[Sun Apr 26 10:21:57.492920 2026] [:error] [pid 8390:tid 8465] [client 20.111.40.172:14142] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-aaa.php"] [unique_id "ae12xYGPtFK_i9p5yxR6owAAAI4"]
[Sun Apr 26 10:21:57.964626 2026] [:error] [pid 8390:tid 8452] [client 20.111.40.172:14128] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-aaa.php"] [unique_id "ae12xYGPtFK_i9p5yxR6pQAAAIE"]
[Sun Apr 26 10:21:58.468143 2026] [:error] [pid 8385:tid 8443] [client 20.111.40.172:14143] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ae12xjOy7_J84Wx3-oyM3wAAAFM"]
[Sun Apr 26 10:21:58.992855 2026] [:error] [pid 8491:tid 8512] [client 20.111.40.172:14082] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ae12xiq7I7e6CJooQM3C6gAAAM0"]
[Sun Apr 26 10:22:00.079153 2026] [:error] [pid 22573:tid 22615] [client 20.111.40.172:14102] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ae12yHB3EmQlD4yKUt9bfgAAAYg"]
[Sun Apr 26 10:22:02.926968 2026] [:error] [pid 22572:tid 22579] [client 20.111.40.172:14459] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ae12ytXOViWCFU-pZzCjEQAAAUE"]
[Sun Apr 26 10:22:03.557792 2026] [:error] [pid 8491:tid 8511] [client 20.111.40.172:14116] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ae12yyq7I7e6CJooQM3C8wAAAMw"]
[Sun Apr 26 10:22:04.094374 2026] [:error] [pid 8491:tid 8523] [client 20.111.40.172:14414] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ae12zCq7I7e6CJooQM3C9gAAANc"]
[Sun Apr 26 10:22:04.647308 2026] [:error] [pid 13197:tid 13244] [client 20.111.40.172:14113] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ae12zN3kktFKdSxTrBumtwAAAsw"]
[Sun Apr 26 10:22:05.172509 2026] [:error] [pid 8383:tid 8415] [client 20.111.40.172:14108] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ae12zdFa2S3EsATMdWPfIwAAABI"]
[Sun Apr 26 10:22:05.691338 2026] [:error] [pid 8385:tid 8447] [client 20.111.40.172:14402] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ae12zTOy7_J84Wx3-oyM5AAAAFc"]
[Sun Apr 26 10:22:06.271685 2026] [:error] [pid 13197:tid 13242] [client 20.111.40.172:14123] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ae12zt3kktFKdSxTrBumugAAAss"]
[Sun Apr 26 10:22:06.836709 2026] [:error] [pid 13137:tid 13149] [client 20.111.40.172:14410] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ae12zt0RB4J0o4h5neENygAAAgk"]
[Sun Apr 26 10:22:07.357030 2026] [:error] [pid 8383:tid 8421] [client 20.111.40.172:14430] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ae12z9Fa2S3EsATMdWPfJwAAABg"]
[Sun Apr 26 10:22:07.903095 2026] [:error] [pid 8383:tid 8418] [client 20.111.40.172:14092] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-xrm.php"] [unique_id "ae12z9Fa2S3EsATMdWPfKgAAABU"]
[Sun Apr 26 10:22:08.505001 2026] [:error] [pid 16515:tid 16530] [client 20.111.40.172:14094] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-xrm.php"] [unique_id "ae120FtDrUmgHSvpuLzrSgAAAkw"]
[Sun Apr 26 10:22:09.038432 2026] [:error] [pid 16515:tid 16541] [client 20.111.40.172:14091] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-xrm.php"] [unique_id "ae120VtDrUmgHSvpuLzrSwAAAlc"]
[Sun Apr 26 10:22:09.555045 2026] [:error] [pid 13137:tid 13157] [client 20.111.40.172:14403] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-xrm.php"] [unique_id "ae120d0RB4J0o4h5neENzgAAAhA"]
[Sun Apr 26 10:22:10.102697 2026] [:error] [pid 8383:tid 8408] [client 20.111.40.172:14139] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-asudo.php"] [unique_id "ae120tFa2S3EsATMdWPfLQAAAAs"]
[Sun Apr 26 10:22:10.617796 2026] [:error] [pid 13197:tid 13232] [client 20.111.40.172:14131] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-asudo.php"] [unique_id "ae120t3kktFKdSxTrBumwAAAAsE"]
[Sun Apr 26 10:22:11.136065 2026] [:error] [pid 22572:tid 22599] [client 20.111.40.172:14360] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-asudo.php"] [unique_id "ae1209XOViWCFU-pZzCjGwAAAVU"]
[Sun Apr 26 10:22:11.668001 2026] [:error] [pid 16574:tid 16639] [client 20.111.40.172:14106] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-asudo.php"] [unique_id "ae12035MsX8wRQr99nYMwQAAA1Y"]
[Sun Apr 26 10:22:12.147702 2026] [:error] [pid 16574:tid 16631] [client 20.111.40.172:14424] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wdone1.php"] [unique_id "ae121H5MsX8wRQr99nYMxQAAA1I"]
[Sun Apr 26 10:22:12.666780 2026] [:error] [pid 8491:tid 8519] [client 20.111.40.172:14435] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wdone1.php"] [unique_id "ae121Cq7I7e6CJooQM3DCAAAANQ"]
[Sun Apr 26 10:22:13.171170 2026] [:error] [pid 16515:tid 16522] [client 20.111.40.172:14081] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wdone1.php"] [unique_id "ae121VtDrUmgHSvpuLzrTgAAAkQ"]
[Sun Apr 26 10:22:13.690490 2026] [:error] [pid 16574:tid 16612] [client 20.111.40.172:14107] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wdone1.php"] [unique_id "ae121X5MsX8wRQr99nYMzQAAA0g"]
[Sun Apr 26 10:22:14.197983 2026] [:error] [pid 22572:tid 22595] [client 20.111.40.172:14134] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file3.php"] [unique_id "ae121tXOViWCFU-pZzCjHwAAAVE"]
[Sun Apr 26 10:22:14.709280 2026] [:error] [pid 8385:tid 8430] [client 20.111.40.172:14118] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file3.php"] [unique_id "ae121jOy7_J84Wx3-oyM6gAAAEY"]
[Sun Apr 26 10:22:15.193368 2026] [:error] [pid 8390:tid 8465] [client 20.111.40.172:14114] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file3.php"] [unique_id "ae1214GPtFK_i9p5yxR6uQAAAI4"]
[Sun Apr 26 10:22:15.696535 2026] [:error] [pid 13137:tid 13144] [client 20.111.40.172:14096] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file3.php"] [unique_id "ae12190RB4J0o4h5neEN0gAAAgQ"]
[Sun Apr 26 10:22:16.221955 2026] [:error] [pid 13197:tid 13246] [client 20.111.40.172:14133] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "ae122N3kktFKdSxTrBumyQAAAs4"]
[Sun Apr 26 10:22:16.740063 2026] [:error] [pid 8390:tid 8464] [client 20.111.40.172:14348] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "ae122IGPtFK_i9p5yxR6vgAAAI0"]
[Sun Apr 26 10:22:17.212007 2026] [:error] [pid 13197:tid 13251] [client 20.111.40.172:14406] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "ae122d3kktFKdSxTrBumzAAAAtM"]
[Sun Apr 26 10:22:17.750972 2026] [:error] [pid 22573:tid 22629] [client 20.111.40.172:14084] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "ae122XB3EmQlD4yKUt9blwAAAZY"]
[Sun Apr 26 10:22:18.260591 2026] [:error] [pid 22573:tid 22607] [client 20.111.40.172:14095] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blox.php"] [unique_id "ae122nB3EmQlD4yKUt9bmgAAAYE"]
[Sun Apr 26 10:22:18.738458 2026] [:error] [pid 8390:tid 8463] [client 20.111.40.172:14420] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blox.php"] [unique_id "ae122oGPtFK_i9p5yxR6wgAAAIw"]
[Sun Apr 26 10:22:19.244067 2026] [:error] [pid 13197:tid 13250] [client 20.111.40.172:14136] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blox.php"] [unique_id "ae12293kktFKdSxTrBum0gAAAtI"]
[Sun Apr 26 10:22:19.818517 2026] [:error] [pid 8390:tid 8472] [client 20.111.40.172:14104] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blox.php"] [unique_id "ae1224GPtFK_i9p5yxR6xwAAAJU"]
[Sun Apr 26 10:22:20.465043 2026] [:error] [pid 22573:tid 22628] [client 20.111.40.172:14409] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "ae123HB3EmQlD4yKUt9bowAAAZU"]
[Sun Apr 26 10:22:21.110212 2026] [:error] [pid 8390:tid 8460] [client 20.111.40.172:14373] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "ae123YGPtFK_i9p5yxR60wAAAIk"]
[Sun Apr 26 10:22:21.592689 2026] [:error] [pid 8390:tid 8468] [client 20.111.40.172:14089] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "ae123YGPtFK_i9p5yxR62QAAAJE"]
[Sun Apr 26 10:22:22.097671 2026] [:error] [pid 8390:tid 8474] [client 20.111.40.172:14111] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "ae123oGPtFK_i9p5yxR63QAAAJc"]
[Sun Apr 26 10:22:22.622536 2026] [:error] [pid 8390:tid 8451] [client 20.111.40.172:14098] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "ae123oGPtFK_i9p5yxR64gAAAIA"]
[Sun Apr 26 10:22:23.136483 2026] [:error] [pid 8390:tid 8468] [client 20.111.40.172:14099] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "ae1234GPtFK_i9p5yxR66AAAAJE"]
[Sun Apr 26 10:22:23.650920 2026] [:error] [pid 8390:tid 8471] [client 20.111.40.172:14413] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "ae1234GPtFK_i9p5yxR67gAAAJQ"]
[Sun Apr 26 10:22:24.190348 2026] [:error] [pid 13197:tid 13234] [client 20.111.40.172:14130] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "ae124N3kktFKdSxTrBum1QAAAsM"]
[Sun Apr 26 10:22:24.687988 2026] [:error] [pid 22572:tid 22581] [client 20.111.40.172:14112] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelap.php"] [unique_id "ae124NXOViWCFU-pZzCjOQAAAUM"]
[Sun Apr 26 10:22:25.186155 2026] [:error] [pid 8385:tid 8435] [client 20.111.40.172:14429] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelap.php"] [unique_id "ae124TOy7_J84Wx3-oyM7QAAAEs"]
[Sun Apr 26 10:22:25.688278 2026] [:error] [pid 22573:tid 22626] [client 20.111.40.172:14418] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelap.php"] [unique_id "ae124XB3EmQlD4yKUt9bqQAAAZM"]
[Sun Apr 26 10:22:26.201756 2026] [:error] [pid 13197:tid 13253] [client 20.111.40.172:14115] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gelap.php"] [unique_id "ae124t3kktFKdSxTrBum1wAAAtU"]
[Sun Apr 26 10:22:26.705830 2026] [:error] [pid 16515:tid 16540] [client 20.111.40.172:14437] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1vx.php"] [unique_id "ae124ltDrUmgHSvpuLzrVgAAAlY"]
[Sun Apr 26 10:22:27.209363 2026] [:error] [pid 22572:tid 22592] [client 20.111.40.172:14126] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1vx.php"] [unique_id "ae1249XOViWCFU-pZzCjQwAAAU4"]
[Sun Apr 26 10:22:27.861065 2026] [:error] [pid 22572:tid 22583] [client 20.111.40.172:14423] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1vx.php"] [unique_id "ae1249XOViWCFU-pZzCjSQAAAUU"]
[Sun Apr 26 10:22:28.430865 2026] [:error] [pid 22572:tid 22601] [client 20.111.40.172:14121] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1vx.php"] [unique_id "ae125NXOViWCFU-pZzCjTAAAAVc"]
[Sun Apr 26 10:22:29.070831 2026] [:error] [pid 16515:tid 16522] [client 20.111.40.172:14120] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "ae125VtDrUmgHSvpuLzrWAAAAkQ"]
[Sun Apr 26 10:22:29.625904 2026] [:error] [pid 8385:tid 8440] [client 20.111.40.172:14109] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "ae125TOy7_J84Wx3-oyM8wAAAFA"]
[Sun Apr 26 10:22:30.162132 2026] [:error] [pid 13137:tid 13143] [client 20.111.40.172:14451] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "ae125t0RB4J0o4h5neEN3QAAAgM"]
[Sun Apr 26 10:22:30.757796 2026] [:error] [pid 22572:tid 22598] [client 20.111.40.172:14129] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "ae125tXOViWCFU-pZzCjWQAAAVQ"]
[Sun Apr 26 10:22:31.311776 2026] [:error] [pid 8390:tid 8467] [client 20.111.40.172:14105] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ae1254GPtFK_i9p5yxR6-gAAAJA"]
[Sun Apr 26 10:22:31.961174 2026] [:error] [pid 8385:tid 8441] [client 20.111.40.172:14132] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ae125zOy7_J84Wx3-oyM9gAAAFE"]
[Sun Apr 26 10:22:32.522246 2026] [:error] [pid 16515:tid 16537] [client 20.111.40.172:14438] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ae126FtDrUmgHSvpuLzrYQAAAlM"]
[Sun Apr 26 10:22:33.001325 2026] [:error] [pid 8385:tid 8429] [client 20.111.40.172:14408] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ae126TOy7_J84Wx3-oyM9wAAAEU"]
[Sun Apr 26 10:22:33.511799 2026] [:error] [pid 16574:tid 16609] [client 20.111.40.172:14404] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ae126X5MsX8wRQr99nYM2wAAA0U"]
[Sun Apr 26 10:22:34.027751 2026] [:error] [pid 16515:tid 16540] [client 20.111.40.172:14431] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ae126ltDrUmgHSvpuLzrYwAAAlY"]
[Sun Apr 26 10:22:34.594720 2026] [:error] [pid 16515:tid 16528] [client 20.111.40.172:14419] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ae126ltDrUmgHSvpuLzrZAAAAko"]
[Sun Apr 26 10:22:35.150304 2026] [:error] [pid 13137:tid 13149] [client 20.111.40.172:14407] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ae12690RB4J0o4h5neEN4wAAAgk"]
[Sun Apr 26 10:22:35.655888 2026] [:error] [pid 8383:tid 8416] [client 20.111.40.172:14345] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oylki.php"] [unique_id "ae1269Fa2S3EsATMdWPfQgAAABM"]
[Sun Apr 26 10:22:36.177997 2026] [:error] [pid 16574:tid 16629] [client 20.111.40.172:14117] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oylki.php"] [unique_id "ae127H5MsX8wRQr99nYM4gAAA1E"]
[Sun Apr 26 10:22:36.715459 2026] [:error] [pid 13137:tid 13162] [client 20.111.40.172:14461] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oylki.php"] [unique_id "ae127N0RB4J0o4h5neEN6QAAAhU"]
[Sun Apr 26 10:22:37.191881 2026] [:error] [pid 22573:tid 22608] [client 20.111.40.172:14358] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oylki.php"] [unique_id "ae127XB3EmQlD4yKUt9brAAAAYI"]
[Sun Apr 26 10:22:37.674181 2026] [:error] [pid 8390:tid 8451] [client 20.111.40.172:14346] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about25.php"] [unique_id "ae127YGPtFK_i9p5yxR7BwAAAIA"]
[Sun Apr 26 10:22:38.211341 2026] [:error] [pid 8390:tid 8459] [client 20.111.40.172:14119] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about25.php"] [unique_id "ae127oGPtFK_i9p5yxR7DAAAAIg"]
[Sun Apr 26 10:22:38.724910 2026] [:error] [pid 8390:tid 8455] [client 20.111.40.172:14458] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about25.php"] [unique_id "ae127oGPtFK_i9p5yxR7EAAAAIQ"]
[Sun Apr 26 10:22:39.232521 2026] [:error] [pid 13137:tid 13154] [client 20.111.40.172:14401] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about25.php"] [unique_id "ae12790RB4J0o4h5neEN9wAAAg0"]
[Sun Apr 26 10:22:39.764152 2026] [:error] [pid 16574:tid 16609] [client 20.111.40.172:14137] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/path.php"] [unique_id "ae12735MsX8wRQr99nYM4wAAA0U"]
[Sun Apr 26 10:22:40.279797 2026] [:error] [pid 16515:tid 16521] [client 20.111.40.172:14354] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/path.php"] [unique_id "ae128FtDrUmgHSvpuLzrZQAAAkM"]
[Sun Apr 26 10:22:40.777742 2026] [:error] [pid 8390:tid 8457] [client 20.111.40.172:14433] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/path.php"] [unique_id "ae128IGPtFK_i9p5yxR7KwAAAIY"]
[Sun Apr 26 10:22:41.311689 2026] [:error] [pid 8390:tid 8474] [client 20.111.40.172:14378] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/path.php"] [unique_id "ae128YGPtFK_i9p5yxR7MgAAAJc"]
[Sun Apr 26 10:22:41.850064 2026] [:error] [pid 16515:tid 16519] [client 20.111.40.172:14289] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ae128VtDrUmgHSvpuLzraAAAAkE"]
[Sun Apr 26 10:22:42.389972 2026] [:error] [pid 13197:tid 13248] [client 20.111.40.172:14274] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ae128t3kktFKdSxTrBum6wAAAtA"]
[Sun Apr 26 10:22:42.929816 2026] [:error] [pid 13137:tid 13142] [client 20.111.40.172:14135] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ae128t0RB4J0o4h5neEOAAAAAgI"]
[Sun Apr 26 10:22:43.472684 2026] [:error] [pid 8385:tid 8448] [client 20.111.40.172:14351] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/r4f_1.php"] [unique_id "ae128zOy7_J84Wx3-oyNAgAAAFg"]
[Sun Apr 26 10:22:43.976219 2026] [:error] [pid 8385:tid 8439] [client 20.111.40.172:14362] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "ae128zOy7_J84Wx3-oyNBAAAAE8"]
[Sun Apr 26 10:22:44.451278 2026] [:error] [pid 8390:tid 8451] [client 20.111.40.172:14344] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "ae129IGPtFK_i9p5yxR7QAAAAIA"]
[Sun Apr 26 10:22:44.958303 2026] [:error] [pid 8385:tid 8436] [client 20.111.40.172:14367] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "ae129DOy7_J84Wx3-oyNCAAAAEw"]
[Sun Apr 26 10:22:45.471252 2026] [:error] [pid 8385:tid 8432] [client 20.111.40.172:14356] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "ae129TOy7_J84Wx3-oyNCwAAAEg"]
[Sun Apr 26 10:22:45.946036 2026] [:error] [pid 8390:tid 8467] [client 20.111.40.172:14080] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "ae129YGPtFK_i9p5yxR7QwAAAJA"]
[Sun Apr 26 10:22:46.471558 2026] [:error] [pid 13197:tid 13239] [client 20.111.40.172:14443] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "ae129t3kktFKdSxTrBum7wAAAsg"]
[Sun Apr 26 10:22:46.947429 2026] [:error] [pid 8390:tid 8461] [client 20.111.40.172:14421] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "ae129oGPtFK_i9p5yxR7RgAAAIo"]
[Sun Apr 26 10:22:47.449323 2026] [:error] [pid 22573:tid 22620] [client 20.111.40.172:14454] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "ae1293B3EmQlD4yKUt9buQAAAY0"]
[Sun Apr 26 10:22:47.948566 2026] [:error] [pid 8390:tid 8474] [client 20.111.40.172:14286] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "ae1294GPtFK_i9p5yxR7TAAAAJc"]
[Sun Apr 26 10:22:48.446402 2026] [:error] [pid 22573:tid 22623] [client 20.111.40.172:14427] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "ae12-HB3EmQlD4yKUt9bvgAAAZA"]
[Sun Apr 26 10:22:48.947085 2026] [:error] [pid 22573:tid 22612] [client 20.111.40.172:14415] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "ae12-HB3EmQlD4yKUt9bwgAAAYY"]
[Sun Apr 26 10:22:49.455003 2026] [:error] [pid 22573:tid 22609] [client 20.111.40.172:14439] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "ae12-XB3EmQlD4yKUt9bxwAAAYM"]
[Sun Apr 26 10:22:49.993959 2026] [:error] [pid 8390:tid 8474] [client 20.111.40.172:14101] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mans.php"] [unique_id "ae12-YGPtFK_i9p5yxR7WQAAAJc"]
[Sun Apr 26 10:22:50.497837 2026] [:error] [pid 22573:tid 22616] [client 20.111.40.172:14371] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mans.php"] [unique_id "ae12-nB3EmQlD4yKUt9bzQAAAYk"]
[Sun Apr 26 10:22:51.003463 2026] [:error] [pid 22573:tid 22610] [client 20.111.40.172:14462] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mans.php"] [unique_id "ae12-3B3EmQlD4yKUt9b0QAAAYQ"]
[Sun Apr 26 10:22:51.507994 2026] [:error] [pid 8390:tid 8472] [client 20.111.40.172:14440] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mans.php"] [unique_id "ae12-4GPtFK_i9p5yxR7XAAAAJU"]
[Sun Apr 26 10:22:51.996157 2026] [:error] [pid 8390:tid 8468] [client 20.111.40.172:14127] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file30.php"] [unique_id "ae12-4GPtFK_i9p5yxR7XgAAAJE"]
[Sun Apr 26 10:22:52.470512 2026] [:error] [pid 8385:tid 8443] [client 20.111.40.172:14425] File does not exist: /usr/local/apache/htdocs/suspended-page/file30.php
[Sun Apr 26 10:22:52.710027 2026] [:error] [pid 8385:tid 8437] [client 20.111.40.172:14425] File does not exist: /usr/local/apache/htdocs/suspended-page/zxin.php
[Sun Apr 26 10:22:52.948749 2026] [:error] [pid 8385:tid 8432] [client 20.111.40.172:14425] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Apr 26 10:22:53.197111 2026] [:error] [pid 8385:tid 8427] [client 20.111.40.172:14425] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-at.php
[Sun Apr 26 10:22:53.435900 2026] [:error] [pid 8385:tid 8433] [client 20.111.40.172:14425] File does not exist: /usr/local/apache/htdocs/suspended-page/hk.php
[Sun Apr 26 10:22:53.674469 2026] [:error] [pid 8385:tid 8444] [client 20.111.40.172:14425] File does not exist: /usr/local/apache/htdocs/suspended-page/lco.php
[Sun Apr 26 10:22:53.912329 2026] [:error] [pid 8385:tid 8445] [client 20.111.40.172:14425] File does not exist: /usr/local/apache/htdocs/suspended-page/fun.php
[Sun Apr 26 10:22:54.150820 2026] [:error] [pid 8385:tid 8431] [client 20.111.40.172:14425] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Sun Apr 26 10:22:54.389098 2026] [:error] [pid 8385:tid 8426] [client 20.111.40.172:14425] File does not exist: /usr/local/apache/htdocs/suspended-page/huyaa.php
[Sun Apr 26 10:22:54.626217 2026] [:error] [pid 8385:tid 8447] [client 20.111.40.172:14425] File does not exist: /usr/local/apache/htdocs/suspended-page/te.php
[Sun Apr 26 10:22:54.876867 2026] [:error] [pid 8385:tid 8424] [client 20.111.40.172:14425] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Apr 26 10:22:55.112246 2026] [:error] [pid 8385:tid 8448] [client 20.111.40.172:14425] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-2019.php"] [unique_id "ae12_zOy7_J84Wx3-oyNIQAAAFg"]
[Sun Apr 26 10:22:55.615947 2026] [:error] [pid 8390:tid 8469] [client 20.111.40.172:14389] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-2019.php"] [unique_id "ae12_4GPtFK_i9p5yxR7bQAAAJI"]
[Sun Apr 26 10:22:56.171163 2026] [:error] [pid 8390:tid 8456] [client 20.111.40.172:14361] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-2019.php"] [unique_id "ae13AIGPtFK_i9p5yxR7dAAAAIU"]
[Sun Apr 26 10:22:56.641036 2026] [:error] [pid 16515:tid 16542] [client 20.111.40.172:14363] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-2019.php"] [unique_id "ae13AFtDrUmgHSvpuLzrbgAAAlg"]
[Sun Apr 26 10:22:57.146478 2026] [:error] [pid 13197:tid 13231] [client 20.111.40.172:14291] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/X57.php"] [unique_id "ae13Ad3kktFKdSxTrBum9QAAAsA"]
[Sun Apr 26 10:22:57.678472 2026] [:error] [pid 8390:tid 8465] [client 20.111.40.172:14275] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/X57.php"] [unique_id "ae13AYGPtFK_i9p5yxR7ggAAAI4"]
[Sun Apr 26 10:22:58.206391 2026] [:error] [pid 13137:tid 13157] [client 20.111.40.172:14141] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/X57.php"] [unique_id "ae13At0RB4J0o4h5neEOAgAAAhA"]
[Sun Apr 26 10:22:58.704621 2026] [:error] [pid 22573:tid 22625] [client 20.111.40.172:14446] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/X57.php"] [unique_id "ae13AnB3EmQlD4yKUt9b3wAAAZI"]
[Sun Apr 26 10:22:59.189609 2026] [:error] [pid 22573:tid 22626] [client 20.111.40.172:14450] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "ae13A3B3EmQlD4yKUt9b4QAAAZM"]
[Sun Apr 26 10:22:59.662675 2026] [:error] [pid 22573:tid 22612] [client 20.111.40.172:14336] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "ae13A3B3EmQlD4yKUt9b5AAAAYY"]
[Sun Apr 26 10:23:00.136899 2026] [:error] [pid 22573:tid 22630] [client 20.111.40.172:14140] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "ae13BHB3EmQlD4yKUt9b5wAAAZc"]
[Sun Apr 26 10:23:00.615183 2026] [:error] [pid 8491:tid 8520] [client 20.111.40.172:14337] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "ae13BCq7I7e6CJooQM3DFgAAANU"]
[Sun Apr 26 10:23:01.119186 2026] [:error] [pid 22573:tid 22609] [client 20.111.40.172:14347] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "ae13BXB3EmQlD4yKUt9b7AAAAYM"]
[Sun Apr 26 10:23:01.668284 2026] [:error] [pid 8385:tid 8443] [client 20.111.40.172:14455] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "ae13BTOy7_J84Wx3-oyNIwAAAFM"]
[Sun Apr 26 10:23:02.193892 2026] [:error] [pid 8491:tid 8501] [client 20.111.40.172:14093] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "ae13Biq7I7e6CJooQM3DGgAAAMI"]
[Sun Apr 26 10:23:02.696757 2026] [:error] [pid 8383:tid 8411] [client 20.111.40.172:14449] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "ae13BtFa2S3EsATMdWPfUwAAAA4"]
[Sun Apr 26 10:23:03.169304 2026] [:error] [pid 16515:tid 16522] [client 20.111.40.172:14350] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "ae13B1tDrUmgHSvpuLzrdQAAAkQ"]
[Sun Apr 26 10:23:03.674146 2026] [:error] [pid 8383:tid 8401] [client 20.111.40.172:14297] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "ae13B9Fa2S3EsATMdWPfWQAAAAQ"]
[Sun Apr 26 10:23:04.178591 2026] [:error] [pid 13137:tid 13159] [client 20.111.40.172:14343] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "ae13CN0RB4J0o4h5neEOBgAAAhI"]
[Sun Apr 26 10:23:04.650248 2026] [:error] [pid 13137:tid 13144] [client 20.111.40.172:14460] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "ae13CN0RB4J0o4h5neEOBwAAAgQ"]
[Sun Apr 26 10:23:05.154886 2026] [:error] [pid 8383:tid 8415] [client 20.111.40.172:14227] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file4.php"] [unique_id "ae13CdFa2S3EsATMdWPfYAAAABI"]
[Sun Apr 26 10:23:05.686556 2026] [:error] [pid 13137:tid 13145] [client 20.111.40.172:14339] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file4.php"] [unique_id "ae13Cd0RB4J0o4h5neEOCgAAAgU"]
[Sun Apr 26 10:23:06.209424 2026] [:error] [pid 13137:tid 13155] [client 20.111.40.172:14382] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file4.php"] [unique_id "ae13Ct0RB4J0o4h5neEODAAAAg4"]
[Sun Apr 26 10:23:06.739819 2026] [:error] [pid 22573:tid 22620] [client 20.111.40.172:14355] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file4.php"] [unique_id "ae13CnB3EmQlD4yKUt9b9gAAAY0"]
[Sun Apr 26 10:23:07.276309 2026] [:error] [pid 22573:tid 22606] [client 20.111.40.172:14283] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "ae13C3B3EmQlD4yKUt9b-AAAAYA"]
[Sun Apr 26 10:23:07.779250 2026] [:error] [pid 16515:tid 16518] [client 20.111.40.172:14338] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "ae13C1tDrUmgHSvpuLzrfQAAAkA"]
[Sun Apr 26 10:23:08.275897 2026] [:error] [pid 22572:tid 22591] [client 20.111.40.172:14339] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "ae13DNXOViWCFU-pZzCjZAAAAU0"]
[Sun Apr 26 10:23:08.774014 2026] [:error] [pid 8390:tid 8453] [client 20.111.40.172:14103] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "ae13DIGPtFK_i9p5yxR7igAAAII"]
[Sun Apr 26 10:23:09.279570 2026] [:error] [pid 8390:tid 8452] [client 20.111.40.172:14342] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/usep.php"] [unique_id "ae13DYGPtFK_i9p5yxR7jgAAAIE"]
[Sun Apr 26 10:23:09.811414 2026] [:error] [pid 13197:tid 13242] [client 20.111.40.172:14379] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/usep.php"] [unique_id "ae13Dd3kktFKdSxTrBum-AAAAss"]
[Sun Apr 26 10:23:10.309538 2026] [:error] [pid 13137:tid 13165] [client 20.111.40.172:14442] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/usep.php"] [unique_id "ae13Dt0RB4J0o4h5neEOEgAAAhg"]
[Sun Apr 26 10:23:10.780421 2026] [:error] [pid 13197:tid 13249] [client 20.111.40.172:14087] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/usep.php"] [unique_id "ae13Dt3kktFKdSxTrBum-QAAAtE"]
[Sun Apr 26 10:23:11.253205 2026] [:error] [pid 13197:tid 13233] [client 20.111.40.172:14368] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "ae13D93kktFKdSxTrBum-wAAAsI"]
[Sun Apr 26 10:23:11.731901 2026] [:error] [pid 16574:tid 16633] [client 20.111.40.172:14396] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "ae13D35MsX8wRQr99nYM8wAAA1M"]
[Sun Apr 26 10:23:12.203160 2026] [:error] [pid 8390:tid 8464] [client 20.111.40.172:14457] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "ae13EIGPtFK_i9p5yxR7lQAAAI0"]
[Sun Apr 26 10:23:12.676417 2026] [:error] [pid 22572:tid 22579] [client 20.111.40.172:14364] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "ae13ENXOViWCFU-pZzCjZwAAAUE"]
[Sun Apr 26 10:23:13.153407 2026] [:error] [pid 16574:tid 16629] [client 20.111.40.172:14272] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "ae13EX5MsX8wRQr99nYM9QAAA1E"]
[Sun Apr 26 10:23:13.648498 2026] [:error] [pid 8385:tid 8437] [client 20.111.40.172:14453] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "ae13ETOy7_J84Wx3-oyNNAAAAE0"]
[Sun Apr 26 10:23:14.121691 2026] [:error] [pid 13137:tid 13164] [client 20.111.40.172:14392] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "ae13Et0RB4J0o4h5neEOGwAAAhc"]
[Sun Apr 26 10:23:14.624664 2026] [:error] [pid 8385:tid 8426] [client 20.111.40.172:14374] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "ae13EjOy7_J84Wx3-oyNOgAAAEI"]
[Sun Apr 26 10:23:15.166215 2026] [:error] [pid 8383:tid 8413] [client 20.111.40.172:14405] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp4.php"] [unique_id "ae13E9Fa2S3EsATMdWPfZAAAABA"]
[Sun Apr 26 10:23:15.708940 2026] [:error] [pid 8385:tid 8448] [client 20.111.40.172:14359] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp4.php"] [unique_id "ae13EzOy7_J84Wx3-oyNPAAAAFg"]
[Sun Apr 26 10:23:16.213240 2026] [:error] [pid 13137:tid 13141] [client 20.111.40.172:14387] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp4.php"] [unique_id "ae13FN0RB4J0o4h5neEOJAAAAgE"]
[Sun Apr 26 10:23:16.686371 2026] [:error] [pid 13137:tid 13148] [client 20.111.40.172:14353] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp4.php"] [unique_id "ae13FN0RB4J0o4h5neEOKAAAAgg"]
[Sun Apr 26 10:23:17.193470 2026] [:error] [pid 8385:tid 8439] [client 20.111.40.172:14369] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ae13FTOy7_J84Wx3-oyNQAAAAE8"]
[Sun Apr 26 10:23:17.731801 2026] [:error] [pid 13137:tid 13142] [client 20.111.40.172:14340] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ae13Fd0RB4J0o4h5neEOMAAAAgI"]
[Sun Apr 26 10:23:18.237279 2026] [:error] [pid 16515:tid 16535] [client 20.111.40.172:14438] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ae13FltDrUmgHSvpuLzrgQAAAlE"]
[Sun Apr 26 10:23:18.710386 2026] [:error] [pid 16515:tid 16542] [client 20.111.40.172:14381] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ae13FltDrUmgHSvpuLzrggAAAlg"]
[Sun Apr 26 10:23:19.189709 2026] [:error] [pid 22572:tid 22600] [client 20.111.40.172:14122] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mamzi.php"] [unique_id "ae13F9XOViWCFU-pZzCjbgAAAVY"]
[Sun Apr 26 10:23:19.662867 2026] [:error] [pid 8385:tid 8436] [client 20.111.40.172:14441] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mamzi.php"] [unique_id "ae13FzOy7_J84Wx3-oyNSAAAAEw"]
[Sun Apr 26 10:23:20.139377 2026] [:error] [pid 13197:tid 13251] [client 20.111.40.172:14309] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mamzi.php"] [unique_id "ae13GN3kktFKdSxTrBunAQAAAtM"]
[Sun Apr 26 10:23:20.611104 2026] [:error] [pid 8385:tid 8426] [client 20.111.40.172:14399] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mamzi.php"] [unique_id "ae13GDOy7_J84Wx3-oyNTgAAAEI"]
[Sun Apr 26 10:23:21.089739 2026] [:error] [pid 8383:tid 8420] [client 20.111.40.172:14306] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpls.php"] [unique_id "ae13GdFa2S3EsATMdWPfaQAAABc"]
[Sun Apr 26 10:23:21.593805 2026] [:error] [pid 8491:tid 8503] [client 20.111.40.172:14366] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpls.php"] [unique_id "ae13GSq7I7e6CJooQM3DKAAAAMQ"]
[Sun Apr 26 10:23:22.100171 2026] [:error] [pid 13137:tid 13147] [client 20.111.40.172:14090] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpls.php"] [unique_id "ae13Gt0RB4J0o4h5neEOOQAAAgc"]
[Sun Apr 26 10:23:22.604653 2026] [:error] [pid 8491:tid 8518] [client 20.111.40.172:14332] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpls.php"] [unique_id "ae13Giq7I7e6CJooQM3DKQAAANM"]
[Sun Apr 26 10:23:23.109689 2026] [:error] [pid 13197:tid 13248] [client 20.111.40.172:14380] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xrp.php"] [unique_id "ae13G93kktFKdSxTrBunAwAAAtA"]
[Sun Apr 26 10:23:23.608944 2026] [:error] [pid 13137:tid 13158] [client 20.111.40.172:14463] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xrp.php"] [unique_id "ae13G90RB4J0o4h5neEOPQAAAhE"]
[Sun Apr 26 10:23:24.132879 2026] [:error] [pid 8385:tid 8446] [client 20.111.40.172:14298] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xrp.php"] [unique_id "ae13HDOy7_J84Wx3-oyNWAAAAFY"]
[Sun Apr 26 10:23:24.695090 2026] [:error] [pid 13197:tid 13236] [client 20.111.40.172:14282] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xrp.php"] [unique_id "ae13HN3kktFKdSxTrBunBAAAAsU"]
[Sun Apr 26 10:23:25.200880 2026] [:error] [pid 22573:tid 22629] [client 20.111.40.172:14377] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v2.php"] [unique_id "ae13HXB3EmQlD4yKUt9cAAAAAZY"]
[Sun Apr 26 10:23:25.707360 2026] [:error] [pid 8385:tid 8431] [client 20.111.40.172:14397] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v2.php"] [unique_id "ae13HTOy7_J84Wx3-oyNXAAAAEc"]
[Sun Apr 26 10:23:26.216080 2026] [:error] [pid 13197:tid 13249] [client 20.111.40.172:14328] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v2.php"] [unique_id "ae13Ht3kktFKdSxTrBunCQAAAtE"]
[Sun Apr 26 10:23:26.686463 2026] [:error] [pid 8385:tid 8439] [client 20.111.40.172:14314] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v2.php"] [unique_id "ae13HjOy7_J84Wx3-oyNXgAAAE8"]
[Sun Apr 26 10:23:27.189835 2026] [:error] [pid 13197:tid 13252] [client 20.111.40.172:14315] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-acc.php"] [unique_id "ae13H93kktFKdSxTrBunDQAAAtQ"]
[Sun Apr 26 10:23:27.693971 2026] [:error] [pid 22572:tid 22595] [client 20.111.40.172:14308] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-acc.php"] [unique_id "ae13H9XOViWCFU-pZzCjdwAAAVE"]
[Sun Apr 26 10:23:28.191133 2026] [:error] [pid 8390:tid 8451] [client 20.111.40.172:14447] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-acc.php"] [unique_id "ae13IIGPtFK_i9p5yxR7oAAAAIA"]
[Sun Apr 26 10:23:28.688981 2026] [:error] [pid 22572:tid 22587] [client 20.111.40.172:14341] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-acc.php"] [unique_id "ae13INXOViWCFU-pZzCjewAAAUk"]
[Sun Apr 26 10:23:29.160367 2026] [:error] [pid 13137:tid 13140] [client 20.111.40.172:14306] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "ae13Id0RB4J0o4h5neEOQgAAAgA"]
[Sun Apr 26 10:23:29.632938 2026] [:error] [pid 13137:tid 13146] [client 20.111.40.172:14349] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "ae13Id0RB4J0o4h5neEORQAAAgY"]
[Sun Apr 26 10:23:30.105701 2026] [:error] [pid 13137:tid 13149] [client 20.111.40.172:14317] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "ae13It0RB4J0o4h5neEOSgAAAgk"]
[Sun Apr 26 10:23:30.589034 2026] [:error] [pid 8385:tid 8446] [client 20.111.40.172:14393] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "ae13IjOy7_J84Wx3-oyNYgAAAFY"]
[Sun Apr 26 10:23:31.095850 2026] [:error] [pid 13197:tid 13244] [client 20.111.40.172:14278] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/031.php"] [unique_id "ae13I93kktFKdSxTrBunEAAAAsw"]
[Sun Apr 26 10:23:31.632472 2026] [:error] [pid 8390:tid 8457] [client 20.111.40.172:14124] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/031.php"] [unique_id "ae13I4GPtFK_i9p5yxR7pwAAAIY"]
[Sun Apr 26 10:23:32.171071 2026] [:error] [pid 16515:tid 16536] [client 20.111.40.172:14269] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/031.php"] [unique_id "ae13JFtDrUmgHSvpuLzrlAAAAlI"]
[Sun Apr 26 10:23:32.709601 2026] [:error] [pid 8385:tid 8435] [client 20.111.40.172:14444] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/031.php"] [unique_id "ae13JDOy7_J84Wx3-oyNaAAAAEs"]
[Sun Apr 26 10:23:33.214788 2026] [:error] [pid 8385:tid 8442] [client 20.111.40.172:14395] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "ae13JTOy7_J84Wx3-oyNagAAAFI"]
[Sun Apr 26 10:23:33.685669 2026] [:error] [pid 13137:tid 13152] [client 20.111.40.172:14300] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "ae13Jd0RB4J0o4h5neEOUQAAAgs"]
[Sun Apr 26 10:23:34.163201 2026] [:error] [pid 8385:tid 8430] [client 20.111.40.172:14219] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "ae13JjOy7_J84Wx3-oyNbQAAAEY"]
[Sun Apr 26 10:23:34.633807 2026] [:error] [pid 22572:tid 22590] [client 20.111.40.172:14434] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "ae13JtXOViWCFU-pZzCjfwAAAUw"]
[Sun Apr 26 10:23:35.104441 2026] [:error] [pid 16574:tid 16614] [client 20.111.40.172:14432] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-xx.php"] [unique_id "ae13J35MsX8wRQr99nYM-gAAA0o"]
[Sun Apr 26 10:23:35.604447 2026] [:error] [pid 22573:tid 22620] [client 20.111.40.172:14327] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-xx.php"] [unique_id "ae13J3B3EmQlD4yKUt9cCgAAAY0"]
[Sun Apr 26 10:23:36.136445 2026] [:error] [pid 22572:tid 22589] [client 20.111.40.172:14254] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-xx.php"] [unique_id "ae13KNXOViWCFU-pZzCjgQAAAUs"]
[Sun Apr 26 10:23:36.641952 2026] [:error] [pid 22572:tid 22598] [client 20.111.40.172:14280] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-xx.php"] [unique_id "ae13KNXOViWCFU-pZzCjgwAAAVQ"]
[Sun Apr 26 10:23:37.146609 2026] [:error] [pid 8390:tid 8464] [client 20.111.40.172:14285] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/testo.php"] [unique_id "ae13KYGPtFK_i9p5yxR7rQAAAI0"]
[Sun Apr 26 10:23:37.653346 2026] [:error] [pid 16515:tid 16535] [client 20.111.40.172:14352] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/testo.php"] [unique_id "ae13KVtDrUmgHSvpuLzrngAAAlE"]
[Sun Apr 26 10:23:38.159742 2026] [:error] [pid 8385:tid 8434] [client 20.111.40.172:14088] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/testo.php"] [unique_id "ae13KjOy7_J84Wx3-oyNcQAAAEo"]
[Sun Apr 26 10:23:38.666622 2026] [:error] [pid 8385:tid 8433] [client 20.111.40.172:14299] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/testo.php"] [unique_id "ae13KjOy7_J84Wx3-oyNcwAAAEk"]
[Sun Apr 26 10:23:39.137998 2026] [:error] [pid 8385:tid 8435] [client 20.111.40.172:14236] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/row.php"] [unique_id "ae13KzOy7_J84Wx3-oyNeQAAAEs"]
[Sun Apr 26 10:23:39.609113 2026] [:error] [pid 8383:tid 8397] [client 20.111.40.172:14277] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/row.php"] [unique_id "ae13K9Fa2S3EsATMdWPfgAAAAAA"]
[Sun Apr 26 10:23:40.081216 2026] [:error] [pid 22573:tid 22616] [client 20.111.40.172:14290] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/row.php"] [unique_id "ae13LHB3EmQlD4yKUt9cDwAAAYk"]
[Sun Apr 26 10:23:40.552436 2026] [:error] [pid 8390:tid 8475] [client 20.111.40.172:14083] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/row.php"] [unique_id "ae13LIGPtFK_i9p5yxR7sgAAAJg"]
[Sun Apr 26 10:23:41.050686 2026] [:error] [pid 16515:tid 16525] [client 20.111.40.172:14391] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ae13LVtDrUmgHSvpuLzrowAAAkc"]
[Sun Apr 26 10:23:41.549060 2026] [:error] [pid 8390:tid 8458] [client 20.111.40.172:14456] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ae13LYGPtFK_i9p5yxR7tAAAAIc"]
[Sun Apr 26 10:23:42.055056 2026] [:error] [pid 22573:tid 22608] [client 20.111.40.172:14220] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ae13LnB3EmQlD4yKUt9cFQAAAYI"]
[Sun Apr 26 10:23:42.562336 2026] [:error] [pid 22573:tid 22615] [client 20.111.40.172:14234] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ae13LnB3EmQlD4yKUt9cFgAAAYg"]
[Sun Apr 26 10:23:43.034915 2026] [:error] [pid 8383:tid 8419] [client 20.111.40.172:14125] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-conflg.php"] [unique_id "ae13L9Fa2S3EsATMdWPfgQAAABY"]
[Sun Apr 26 10:23:43.540619 2026] [:error] [pid 13197:tid 13239] [client 20.111.40.172:14436] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-conflg.php"] [unique_id "ae13L93kktFKdSxTrBunHQAAAsg"]
[Sun Apr 26 10:23:44.045981 2026] [:error] [pid 22573:tid 22627] [client 20.111.40.172:14221] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-conflg.php"] [unique_id "ae13MHB3EmQlD4yKUt9cHQAAAZQ"]
[Sun Apr 26 10:23:44.516960 2026] [:error] [pid 22573:tid 22606] [client 20.111.40.172:14326] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-conflg.php"] [unique_id "ae13MHB3EmQlD4yKUt9cIQAAAYA"]
[Sun Apr 26 10:23:44.987406 2026] [:error] [pid 22572:tid 22586] [client 20.111.40.172:14325] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "ae13MNXOViWCFU-pZzCjigAAAUg"]
[Sun Apr 26 10:23:45.483330 2026] [:error] [pid 22573:tid 22630] [client 20.111.40.172:14212] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "ae13MXB3EmQlD4yKUt9cJgAAAZc"]
[Sun Apr 26 10:23:46.010134 2026] [:error] [pid 13197:tid 13236] [client 20.111.40.172:14319] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "ae13Mt3kktFKdSxTrBunJwAAAsU"]
[Sun Apr 26 10:23:46.505827 2026] [:error] [pid 16515:tid 16520] [client 20.111.40.172:14445] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "ae13MltDrUmgHSvpuLzrqgAAAkI"]
[Sun Apr 26 10:23:47.016867 2026] [:error] [pid 22572:tid 22600] [client 20.111.40.172:14385] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jmfi2.php"] [unique_id "ae13M9XOViWCFU-pZzCjjQAAAVY"]
[Sun Apr 26 10:23:47.522340 2026] [:error] [pid 16515:tid 16531] [client 20.111.40.172:14330] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jmfi2.php"] [unique_id "ae13M1tDrUmgHSvpuLzrrAAAAk0"]
[Sun Apr 26 10:23:47.995847 2026] [:error] [pid 8491:tid 8500] [client 20.111.40.172:14384] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jmfi2.php"] [unique_id "ae13Myq7I7e6CJooQM3DSQAAAME"]
[Sun Apr 26 10:23:48.467191 2026] [:error] [pid 8385:tid 8445] [client 20.111.40.172:14388] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jmfi2.php"] [unique_id "ae13NDOy7_J84Wx3-oyNhQAAAFU"]
[Sun Apr 26 10:23:48.971047 2026] [:error] [pid 22572:tid 22593] [client 20.111.40.172:14097] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-Blogs.php"] [unique_id "ae13NNXOViWCFU-pZzCjkQAAAU8"]
[Sun Apr 26 10:23:49.473736 2026] [:error] [pid 22572:tid 22579] [client 20.111.40.172:14237] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-Blogs.php"] [unique_id "ae13NdXOViWCFU-pZzCjlAAAAUE"]
[Sun Apr 26 10:23:49.952195 2026] [:error] [pid 8390:tid 8459] [client 20.111.40.172:14426] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-Blogs.php"] [unique_id "ae13NYGPtFK_i9p5yxR7ygAAAIg"]
[Sun Apr 26 10:23:50.462010 2026] [:error] [pid 16515:tid 16526] [client 20.111.40.172:14242] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-Blogs.php"] [unique_id "ae13NltDrUmgHSvpuLzrrwAAAkg"]
[Sun Apr 26 10:23:50.986321 2026] [:error] [pid 8385:tid 8437] [client 20.111.40.172:14448] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "ae13NjOy7_J84Wx3-oyNiAAAAE0"]
[Sun Apr 26 10:23:51.474963 2026] [:error] [pid 13197:tid 13253] [client 20.111.40.172:14313] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "ae13N93kktFKdSxTrBunOAAAAtU"]
[Sun Apr 26 10:23:51.949137 2026] [:error] [pid 8390:tid 8475] [client 20.111.40.172:14228] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "ae13N4GPtFK_i9p5yxR7zwAAAJg"]
[Sun Apr 26 10:23:52.466806 2026] [:error] [pid 8390:tid 8453] [client 20.111.40.172:14246] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "ae13OIGPtFK_i9p5yxR70wAAAII"]
[Sun Apr 26 10:23:53.027874 2026] [:error] [pid 16574:tid 16613] [client 20.111.40.172:14428] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "ae13OX5MsX8wRQr99nYNAwAAA0k"]
[Sun Apr 26 10:23:53.608109 2026] [:error] [pid 8491:tid 8523] [client 20.111.40.172:14303] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "ae13OSq7I7e6CJooQM3DTgAAANc"]
[Sun Apr 26 10:23:54.087633 2026] [:error] [pid 22572:tid 22588] [client 20.111.40.172:14258] File does not exist: /usr/local/apache/htdocs/suspended-page/mds.php
[Sun Apr 26 10:23:54.327304 2026] [:error] [pid 22572:tid 22578] [client 20.111.40.172:14258] File does not exist: /usr/local/apache/htdocs/suspended-page/hey.php
[Sun Apr 26 10:23:54.569823 2026] [:error] [pid 22572:tid 22593] [client 20.111.40.172:14258] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Sun Apr 26 10:23:54.811211 2026] [:error] [pid 22572:tid 22597] [client 20.111.40.172:14258] File does not exist: /usr/local/apache/htdocs/suspended-page/h.php
[Sun Apr 26 10:23:55.049691 2026] [:error] [pid 22572:tid 22598] [client 20.111.40.172:14258] File does not exist: /usr/local/apache/htdocs/suspended-page/bdroot.php
[Sun Apr 26 10:23:55.288647 2026] [:error] [pid 22572:tid 22579] [client 20.111.40.172:14258] File does not exist: /usr/local/apache/htdocs/suspended-page/class-config.php
[Sun Apr 26 10:23:55.527002 2026] [:error] [pid 22572:tid 22602] [client 20.111.40.172:14258] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Apr 26 10:23:55.765715 2026] [:error] [pid 22572:tid 22596] [client 20.111.40.172:14258] File does not exist: /usr/local/apache/htdocs/suspended-page/444.php
[Sun Apr 26 10:23:56.006104 2026] [:error] [pid 22572:tid 22601] [client 20.111.40.172:14258] File does not exist: /usr/local/apache/htdocs/suspended-page/bnm.php
[Sun Apr 26 10:23:56.245433 2026] [:error] [pid 22572:tid 22587] [client 20.111.40.172:14258] File does not exist: /usr/local/apache/htdocs/suspended-page/himu.php
[Sun Apr 26 10:23:56.510856 2026] [:error] [pid 22572:tid 22588] [client 20.111.40.172:14258] File does not exist: /usr/local/apache/htdocs/suspended-page/ccou.php
[Sun Apr 26 10:23:56.746809 2026] [:error] [pid 22572:tid 22600] [client 20.111.40.172:14258] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "ae13PNXOViWCFU-pZzCjqQAAAVY"]
[Sun Apr 26 10:23:57.281311 2026] [:error] [pid 8385:tid 8447] [client 20.111.40.172:14287] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "ae13PTOy7_J84Wx3-oyNjgAAAFc"]
[Sun Apr 26 10:23:57.787523 2026] [:error] [pid 8390:tid 8469] [client 20.111.40.172:14292] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "ae13PYGPtFK_i9p5yxR78AAAAJI"]
[Sun Apr 26 10:23:58.448936 2026] [:error] [pid 8383:tid 8413] [client 20.111.40.172:14329] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "ae13PtFa2S3EsATMdWPfhAAAABA"]
[Sun Apr 26 10:23:58.921137 2026] [:error] [pid 22572:tid 22579] [client 20.111.40.172:14157] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hans.php"] [unique_id "ae13PtXOViWCFU-pZzCjsAAAAUE"]
[Sun Apr 26 10:23:59.392972 2026] [:error] [pid 22572:tid 22582] [client 20.111.40.172:14365] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hans.php"] [unique_id "ae13P9XOViWCFU-pZzCjsgAAAUQ"]
[Sun Apr 26 10:23:59.864113 2026] [:error] [pid 22572:tid 22599] [client 20.111.40.172:14233] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hans.php"] [unique_id "ae13P9XOViWCFU-pZzCjtAAAAVU"]
[Sun Apr 26 10:24:00.348591 2026] [:error] [pid 8390:tid 8473] [client 20.111.40.172:14304] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hans.php"] [unique_id "ae13QIGPtFK_i9p5yxR7-AAAAJY"]
[Sun Apr 26 10:24:00.822159 2026] [:error] [pid 22572:tid 22596] [client 20.111.40.172:14305] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lgr.php"] [unique_id "ae13QNXOViWCFU-pZzCjtQAAAVI"]
[Sun Apr 26 10:24:01.322647 2026] [:error] [pid 8390:tid 8465] [client 20.111.40.172:14334] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lgr.php"] [unique_id "ae13QYGPtFK_i9p5yxR7_gAAAI4"]
[Sun Apr 26 10:24:01.822552 2026] [:error] [pid 16515:tid 16536] [client 20.111.40.172:14218] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lgr.php"] [unique_id "ae13QVtDrUmgHSvpuLzrvwAAAlI"]
[Sun Apr 26 10:24:02.327013 2026] [:error] [pid 8390:tid 8470] [client 20.111.40.172:14294] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lgr.php"] [unique_id "ae13QoGPtFK_i9p5yxR8AgAAAJM"]
[Sun Apr 26 10:24:02.831757 2026] [:error] [pid 16574:tid 16623] [client 20.111.40.172:14248] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "ae13Qn5MsX8wRQr99nYNBAAAA04"]
[Sun Apr 26 10:24:03.330869 2026] [:error] [pid 8491:tid 8505] [client 20.111.40.172:14310] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "ae13Qyq7I7e6CJooQM3DVwAAAMY"]
[Sun Apr 26 10:24:03.828415 2026] [:error] [pid 13197:tid 13245] [client 20.111.40.172:14295] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "ae13Q93kktFKdSxTrBunRgAAAs0"]
[Sun Apr 26 10:24:04.335293 2026] [:error] [pid 13197:tid 13238] [client 20.111.40.172:14288] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/an7.php"] [unique_id "ae13RN3kktFKdSxTrBunSwAAAsc"]
[Sun Apr 26 10:24:04.841222 2026] [:error] [pid 8390:tid 8460] [client 20.111.40.172:14370] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file1.php"] [unique_id "ae13RIGPtFK_i9p5yxR8BAAAAIk"]
[Sun Apr 26 10:24:05.381128 2026] [:error] [pid 8390:tid 8455] [client 20.111.40.172:14452] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file1.php"] [unique_id "ae13RYGPtFK_i9p5yxR8CQAAAIQ"]
[Sun Apr 26 10:24:05.885814 2026] [:error] [pid 8390:tid 8457] [client 20.111.40.172:14276] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file1.php"] [unique_id "ae13RYGPtFK_i9p5yxR8DgAAAIY"]
[Sun Apr 26 10:24:06.359781 2026] [:error] [pid 8390:tid 8466] [client 20.111.40.172:14376] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file1.php"] [unique_id "ae13RoGPtFK_i9p5yxR8FgAAAI8"]
[Sun Apr 26 10:24:06.837486 2026] [:error] [pid 8390:tid 8475] [client 20.111.40.172:14261] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/luxe.php"] [unique_id "ae13RoGPtFK_i9p5yxR8GQAAAJg"]
[Sun Apr 26 10:24:07.351392 2026] [:error] [pid 16515:tid 16525] [client 20.111.40.172:14281] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/luxe.php"] [unique_id "ae13R1tDrUmgHSvpuLzrxAAAAkc"]
[Sun Apr 26 10:24:07.849672 2026] [:error] [pid 13197:tid 13240] [client 20.111.40.172:14208] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/luxe.php"] [unique_id "ae13R93kktFKdSxTrBunUAAAAsk"]
[Sun Apr 26 10:24:08.355995 2026] [:error] [pid 8390:tid 8452] [client 20.111.40.172:14155] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/luxe.php"] [unique_id "ae13SIGPtFK_i9p5yxR8HwAAAIE"]
[Sun Apr 26 10:24:08.908577 2026] [:error] [pid 8385:tid 8432] [client 20.111.40.172:14239] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp_ok.php"] [unique_id "ae13SDOy7_J84Wx3-oyNkgAAAEg"]
[Sun Apr 26 10:24:09.445510 2026] [:error] [pid 8385:tid 8430] [client 20.111.40.172:14216] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp_ok.php"] [unique_id "ae13STOy7_J84Wx3-oyNlQAAAEY"]
[Sun Apr 26 10:24:09.962389 2026] [:error] [pid 22572:tid 22593] [client 20.111.40.172:14284] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp_ok.php"] [unique_id "ae13SdXOViWCFU-pZzCjzAAAAU8"]
[Sun Apr 26 10:24:10.434277 2026] [:error] [pid 8385:tid 8434] [client 20.111.40.172:14268] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp_ok.php"] [unique_id "ae13SjOy7_J84Wx3-oyNnQAAAEo"]
[Sun Apr 26 10:24:10.933108 2026] [:error] [pid 8390:tid 8462] [client 20.111.40.172:14386] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ae13SoGPtFK_i9p5yxR8IgAAAIs"]
[Sun Apr 26 10:24:11.479993 2026] [:error] [pid 22572:tid 22585] [client 20.111.40.172:14263] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ae13S9XOViWCFU-pZzCj0QAAAUc"]
[Sun Apr 26 10:24:12.020246 2026] [:error] [pid 22573:tid 22624] [client 20.111.40.172:14144] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ae13THB3EmQlD4yKUt9cRwAAAZE"]
[Sun Apr 26 10:24:12.552472 2026] [:error] [pid 22573:tid 22620] [client 20.111.40.172:14301] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ae13THB3EmQlD4yKUt9cTQAAAY0"]
[Sun Apr 26 10:24:13.083321 2026] [:error] [pid 8390:tid 8468] [client 20.111.40.172:14357] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ae13TYGPtFK_i9p5yxR8JQAAAJE"]
[Sun Apr 26 10:24:13.590410 2026] [:error] [pid 13137:tid 13154] [client 20.111.40.172:14267] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ae13Td0RB4J0o4h5neEOawAAAg0"]
[Sun Apr 26 10:24:14.093769 2026] [:error] [pid 13197:tid 13233] [client 20.111.40.172:14222] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ae13Tt3kktFKdSxTrBunVgAAAsI"]
[Sun Apr 26 10:24:14.598305 2026] [:error] [pid 22572:tid 22593] [client 20.111.40.172:14320] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "ae13TtXOViWCFU-pZzCj1gAAAU8"]
[Sun Apr 26 10:24:15.095619 2026] [:error] [pid 8383:tid 8406] [client 20.111.40.172:14223] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xtt.php"] [unique_id "ae13T9Fa2S3EsATMdWPfjgAAAAk"]
[Sun Apr 26 10:24:15.594094 2026] [:error] [pid 16515:tid 16520] [client 20.111.40.172:14146] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xtt.php"] [unique_id "ae13T1tDrUmgHSvpuLzrzgAAAkI"]
[Sun Apr 26 10:24:16.098158 2026] [:error] [pid 16515:tid 16538] [client 20.111.40.172:14235] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xtt.php"] [unique_id "ae13UFtDrUmgHSvpuLzr0QAAAlQ"]
[Sun Apr 26 10:24:16.604784 2026] [:error] [pid 8491:tid 8502] [client 20.111.40.172:14025] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xtt.php"] [unique_id "ae13UCq7I7e6CJooQM3DXwAAAMM"]
[Sun Apr 26 10:24:17.111411 2026] [:error] [pid 8390:tid 8467] [client 20.111.40.172:14252] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/autoload_classmap.php"] [unique_id "ae13UYGPtFK_i9p5yxR8JwAAAJA"]
[Sun Apr 26 10:24:17.648365 2026] [:error] [pid 8383:tid 8400] [client 20.111.40.172:14375] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/autoload_classmap.php"] [unique_id "ae13UdFa2S3EsATMdWPfjwAAAAM"]
[Sun Apr 26 10:24:18.177936 2026] [:error] [pid 8390:tid 8453] [client 20.111.40.172:14394] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/autoload_classmap.php"] [unique_id "ae13UoGPtFK_i9p5yxR8KQAAAII"]
[Sun Apr 26 10:24:18.678528 2026] [:error] [pid 8390:tid 8474] [client 20.111.40.172:14209] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/autoload_classmap.php"] [unique_id "ae13UoGPtFK_i9p5yxR8LAAAAJc"]
[Sun Apr 26 10:24:19.159781 2026] [:error] [pid 8385:tid 8432] [client 20.111.40.172:14311] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "ae13UzOy7_J84Wx3-oyNowAAAEg"]
[Sun Apr 26 10:24:19.636744 2026] [:error] [pid 8390:tid 8454] [client 20.111.40.172:14240] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "ae13U4GPtFK_i9p5yxR8NAAAAIM"]
[Sun Apr 26 10:24:20.134033 2026] [:error] [pid 8390:tid 8456] [client 20.111.40.172:14259] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "ae13VIGPtFK_i9p5yxR8OAAAAIU"]
[Sun Apr 26 10:24:20.653504 2026] [:error] [pid 13197:tid 13247] [client 20.111.40.172:14210] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "ae13VN3kktFKdSxTrBunXQAAAs8"]
[Sun Apr 26 10:24:21.126435 2026] [:error] [pid 22573:tid 22610] [client 20.111.40.172:14255] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zicgg.php"] [unique_id "ae13VXB3EmQlD4yKUt9cUgAAAYQ"]
[Sun Apr 26 10:24:21.597314 2026] [:error] [pid 22573:tid 22628] [client 20.111.40.172:14390] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zicgg.php"] [unique_id "ae13VXB3EmQlD4yKUt9cVQAAAZU"]
[Sun Apr 26 10:24:22.070863 2026] [:error] [pid 22573:tid 22613] [client 20.111.40.172:14260] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zicgg.php"] [unique_id "ae13VnB3EmQlD4yKUt9cVgAAAYc"]
[Sun Apr 26 10:24:22.543146 2026] [:error] [pid 8491:tid 8516] [client 20.111.40.172:14335] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zicgg.php"] [unique_id "ae13Viq7I7e6CJooQM3DdAAAANE"]
[Sun Apr 26 10:24:23.063931 2026] [:error] [pid 8491:tid 8510] [client 20.111.40.172:14168] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pouhg.php"] [unique_id "ae13Vyq7I7e6CJooQM3DdgAAAMs"]
[Sun Apr 26 10:24:23.601171 2026] [:error] [pid 8491:tid 8514] [client 20.111.40.172:14436] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pouhg.php"] [unique_id "ae13Vyq7I7e6CJooQM3DeAAAAM8"]
[Sun Apr 26 10:24:24.145588 2026] [:error] [pid 8390:tid 8469] [client 20.111.40.172:14331] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pouhg.php"] [unique_id "ae13WIGPtFK_i9p5yxR8QAAAAJI"]
[Sun Apr 26 10:24:24.643310 2026] [:error] [pid 16574:tid 16609] [client 20.111.40.172:14229] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pouhg.php"] [unique_id "ae13WH5MsX8wRQr99nYNDAAAA0U"]
[Sun Apr 26 10:24:25.116535 2026] [:error] [pid 22572:tid 22589] [client 20.111.40.172:14213] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file88.php"] [unique_id "ae13WdXOViWCFU-pZzCj3AAAAUs"]
[Sun Apr 26 10:24:25.588476 2026] [:error] [pid 22573:tid 22612] [client 20.111.40.172:14244] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file88.php"] [unique_id "ae13WXB3EmQlD4yKUt9cXAAAAYY"]
[Sun Apr 26 10:24:26.091615 2026] [:error] [pid 22573:tid 22623] [client 20.111.40.172:14302] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file88.php"] [unique_id "ae13WnB3EmQlD4yKUt9cXwAAAZA"]
[Sun Apr 26 10:24:26.599913 2026] [:error] [pid 22573:tid 22618] [client 20.111.40.172:14152] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file88.php"] [unique_id "ae13WnB3EmQlD4yKUt9cYwAAAYs"]
[Sun Apr 26 10:24:27.072120 2026] [:error] [pid 22573:tid 22608] [client 20.111.40.172:14158] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xenon1337.php"] [unique_id "ae13W3B3EmQlD4yKUt9cZQAAAYI"]
[Sun Apr 26 10:24:27.544673 2026] [:error] [pid 8491:tid 8508] [client 20.111.40.172:14257] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xenon1337.php"] [unique_id "ae13Wyq7I7e6CJooQM3DggAAAMk"]
[Sun Apr 26 10:24:28.053844 2026] [:error] [pid 8385:tid 8424] [client 20.111.40.172:14241] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xenon1337.php"] [unique_id "ae13XDOy7_J84Wx3-oyNpwAAAEA"]
[Sun Apr 26 10:24:28.647385 2026] [:error] [pid 22573:tid 22606] [client 20.111.40.172:14145] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xenon1337.php"] [unique_id "ae13XHB3EmQlD4yKUt9cbwAAAYA"]
[Sun Apr 26 10:24:29.145394 2026] [:error] [pid 13137:tid 13143] [client 20.111.40.172:14195] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1index.php"] [unique_id "ae13Xd0RB4J0o4h5neEOdQAAAgM"]
[Sun Apr 26 10:24:29.655801 2026] [:error] [pid 8385:tid 8434] [client 20.111.40.172:14264] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1index.php"] [unique_id "ae13XTOy7_J84Wx3-oyNqQAAAEo"]
[Sun Apr 26 10:24:30.155291 2026] [:error] [pid 22573:tid 22624] [client 20.111.40.172:14279] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1index.php"] [unique_id "ae13XnB3EmQlD4yKUt9cegAAAZE"]
[Sun Apr 26 10:24:30.689396 2026] [:error] [pid 22573:tid 22629] [client 20.111.40.172:14312] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1index.php"] [unique_id "ae13XnB3EmQlD4yKUt9cfAAAAZY"]
[Sun Apr 26 10:24:31.227440 2026] [:error] [pid 22573:tid 22619] [client 20.111.40.172:14297] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ae13X3B3EmQlD4yKUt9cgQAAAYw"]
[Sun Apr 26 10:24:31.735821 2026] [:error] [pid 22573:tid 22611] [client 20.111.40.172:14214] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ae13X3B3EmQlD4yKUt9chAAAAYU"]
[Sun Apr 26 10:24:32.240549 2026] [:error] [pid 16574:tid 16625] [client 20.111.40.172:14232] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ae13YH5MsX8wRQr99nYNDQAAA08"]
[Sun Apr 26 10:24:32.748575 2026] [:error] [pid 22572:tid 22598] [client 20.111.40.172:14178] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ae13YNXOViWCFU-pZzCj5wAAAVQ"]
[Sun Apr 26 10:24:33.218689 2026] [:error] [pid 22572:tid 22578] [client 20.111.40.172:14247] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ae13YdXOViWCFU-pZzCj6gAAAUA"]
[Sun Apr 26 10:24:33.724570 2026] [:error] [pid 22572:tid 22586] [client 20.111.40.172:14273] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ae13YdXOViWCFU-pZzCj8QAAAUg"]
[Sun Apr 26 10:24:34.266660 2026] [:error] [pid 13197:tid 13232] [client 20.111.40.172:14197] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ae13Yt3kktFKdSxTrBunXwAAAsE"]
[Sun Apr 26 10:24:34.804649 2026] [:error] [pid 16515:tid 16536] [client 20.111.40.172:14159] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ae13YltDrUmgHSvpuLzr1wAAAlI"]
[Sun Apr 26 10:24:35.342653 2026] [:error] [pid 22573:tid 22622] [client 20.111.40.172:14215] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cache.php"] [unique_id "ae13Y3B3EmQlD4yKUt9ckQAAAY8"]
[Sun Apr 26 10:24:35.885714 2026] [:error] [pid 8491:tid 8508] [client 20.111.40.172:14270] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cache.php"] [unique_id "ae13Yyq7I7e6CJooQM3DjAAAAMk"]
[Sun Apr 26 10:24:36.390162 2026] [:error] [pid 8385:tid 8427] [client 20.111.40.172:14225] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cache.php"] [unique_id "ae13ZDOy7_J84Wx3-oyNqwAAAEM"]
[Sun Apr 26 10:24:36.897949 2026] [:error] [pid 22573:tid 22625] [client 20.111.40.172:14172] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cache.php"] [unique_id "ae13ZHB3EmQlD4yKUt9clgAAAZI"]
[Sun Apr 26 10:24:37.443851 2026] [:error] [pid 8390:tid 8471] [client 20.111.40.172:14226] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "ae13ZYGPtFK_i9p5yxR8WAAAAJQ"]
[Sun Apr 26 10:24:37.989829 2026] [:error] [pid 13197:tid 13235] [client 20.111.40.172:14231] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "ae13Zd3kktFKdSxTrBunYQAAAsQ"]
[Sun Apr 26 10:24:38.527809 2026] [:error] [pid 22572:tid 22595] [client 20.111.40.172:14046] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "ae13ZtXOViWCFU-pZzCj-QAAAVE"]
[Sun Apr 26 10:24:39.074341 2026] [:error] [pid 13137:tid 13155] [client 20.111.40.172:14230] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "ae13Z90RB4J0o4h5neEOiAAAAg4"]
[Sun Apr 26 10:24:39.604792 2026] [:error] [pid 13137:tid 13162] [client 20.111.40.172:14167] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "ae13Z90RB4J0o4h5neEOjQAAAhU"]
[Sun Apr 26 10:24:40.124225 2026] [:error] [pid 13137:tid 13142] [client 20.111.40.172:14398] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "ae13aN0RB4J0o4h5neEOkwAAAgI"]
[Sun Apr 26 10:24:40.634187 2026] [:error] [pid 8390:tid 8451] [client 20.111.40.172:14293] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "ae13aIGPtFK_i9p5yxR8YAAAAIA"]
[Sun Apr 26 10:24:41.140633 2026] [:error] [pid 16515:tid 16520] [client 20.111.40.172:14238] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "ae13aVtDrUmgHSvpuLzr3QAAAkI"]
[Sun Apr 26 10:24:41.671775 2026] [:error] [pid 13137:tid 13158] [client 20.111.40.172:14307] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cvrvk.php"] [unique_id "ae13ad0RB4J0o4h5neEOmwAAAhE"]
[Sun Apr 26 10:24:42.220673 2026] [:error] [pid 22572:tid 22596] [client 20.111.40.172:14161] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cvrvk.php"] [unique_id "ae13atXOViWCFU-pZzCkAQAAAVI"]
[Sun Apr 26 10:24:42.760385 2026] [:error] [pid 22572:tid 22585] [client 20.111.40.172:14266] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cvrvk.php"] [unique_id "ae13atXOViWCFU-pZzCkAwAAAUc"]
[Sun Apr 26 10:24:43.298453 2026] [:error] [pid 8390:tid 8461] [client 20.111.40.172:14193] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cvrvk.php"] [unique_id "ae13a4GPtFK_i9p5yxR8aQAAAIo"]
[Sun Apr 26 10:24:43.834888 2026] [:error] [pid 8390:tid 8472] [client 20.111.40.172:14018] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp.php"] [unique_id "ae13a4GPtFK_i9p5yxR8bwAAAJU"]
[Sun Apr 26 10:24:44.340358 2026] [:error] [pid 8390:tid 8460] [client 20.111.40.172:14316] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp.php"] [unique_id "ae13bIGPtFK_i9p5yxR8cwAAAIk"]
[Sun Apr 26 10:24:44.811620 2026] [:error] [pid 22572:tid 22597] [client 20.111.40.172:14187] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp.php"] [unique_id "ae13bNXOViWCFU-pZzCkCQAAAVM"]
[Sun Apr 26 10:24:45.310863 2026] [:error] [pid 8390:tid 8474] [client 20.111.40.172:14323] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp.php"] [unique_id "ae13bYGPtFK_i9p5yxR8dQAAAJc"]
[Sun Apr 26 10:24:45.835423 2026] [:error] [pid 8385:tid 8432] [client 20.111.40.172:14182] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "ae13bTOy7_J84Wx3-oyNrwAAAEg"]
[Sun Apr 26 10:24:46.335150 2026] [:error] [pid 8385:tid 8443] [client 20.111.40.172:14243] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "ae13bjOy7_J84Wx3-oyNsQAAAFM"]
[Sun Apr 26 10:24:46.805986 2026] [:error] [pid 8390:tid 8456] [client 20.111.40.172:14175] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "ae13boGPtFK_i9p5yxR8ewAAAIU"]
[Sun Apr 26 10:24:47.276582 2026] [:error] [pid 8390:tid 8457] [client 20.111.40.172:14318] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "ae13b4GPtFK_i9p5yxR8fgAAAIY"]
[Sun Apr 26 10:24:47.746879 2026] [:error] [pid 22572:tid 22594] [client 20.111.40.172:14041] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hello.php"] [unique_id "ae13b9XOViWCFU-pZzCkFwAAAVA"]
[Sun Apr 26 10:24:48.217601 2026] [:error] [pid 22573:tid 22613] [client 20.111.40.172:14151] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hello.php"] [unique_id "ae13cHB3EmQlD4yKUt9cpQAAAYc"]
[Sun Apr 26 10:24:48.697767 2026] [:error] [pid 22573:tid 22607] [client 20.111.40.172:14170] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hello.php"] [unique_id "ae13cHB3EmQlD4yKUt9cpwAAAYE"]
[Sun Apr 26 10:24:49.195348 2026] [:error] [pid 8385:tid 8433] [client 20.111.40.172:14190] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hello.php"] [unique_id "ae13cTOy7_J84Wx3-oyNvQAAAEk"]
[Sun Apr 26 10:24:49.729987 2026] [:error] [pid 8385:tid 8426] [client 20.111.40.172:14250] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ae13cTOy7_J84Wx3-oyNwgAAAEI"]
[Sun Apr 26 10:24:50.232499 2026] [:error] [pid 16574:tid 16627] [client 20.111.40.172:14199] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ae13cn5MsX8wRQr99nYNFgAAA1A"]
[Sun Apr 26 10:24:50.737526 2026] [:error] [pid 22573:tid 22606] [client 20.111.40.172:14198] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ae13cnB3EmQlD4yKUt9cqQAAAYA"]
[Sun Apr 26 10:24:51.248166 2026] [:error] [pid 22573:tid 22631] [client 20.111.40.172:14037] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ae13c3B3EmQlD4yKUt9cqgAAAZg"]
[Sun Apr 26 10:24:51.718700 2026] [:error] [pid 8491:tid 8504] [client 20.111.40.172:14321] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lti.php"] [unique_id "ae13cyq7I7e6CJooQM3DoAAAAMU"]
[Sun Apr 26 10:24:52.195508 2026] [:error] [pid 8491:tid 8507] [client 20.111.40.172:14224] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lti.php"] [unique_id "ae13dCq7I7e6CJooQM3DogAAAMg"]
[Sun Apr 26 10:24:52.698833 2026] [:error] [pid 22573:tid 22616] [client 20.111.40.172:14322] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lti.php"] [unique_id "ae13dHB3EmQlD4yKUt9crgAAAYk"]
[Sun Apr 26 10:24:53.197485 2026] [:error] [pid 8390:tid 8453] [client 20.111.40.172:14027] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lti.php"] [unique_id "ae13dYGPtFK_i9p5yxR8iwAAAII"]
[Sun Apr 26 10:24:53.668612 2026] [:error] [pid 8390:tid 8467] [client 20.111.40.172:14205] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ae13dYGPtFK_i9p5yxR8jwAAAJA"]
[Sun Apr 26 10:24:54.139318 2026] [:error] [pid 8491:tid 8524] [client 20.111.40.172:14183] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ae13diq7I7e6CJooQM3DqwAAANg"]
[Sun Apr 26 10:24:54.615812 2026] [:error] [pid 16574:tid 16616] [client 20.111.40.172:14217] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ae13dn5MsX8wRQr99nYNIwAAA0s"]
[Sun Apr 26 10:24:55.100155 2026] [:error] [pid 22572:tid 22596] [client 20.111.40.172:14196] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ae13d9XOViWCFU-pZzCkJAAAAVI"]
[Sun Apr 26 10:24:55.572146 2026] [:error] [pid 8390:tid 8462] [client 20.111.40.172:14166] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shellalfa.php"] [unique_id "ae13d4GPtFK_i9p5yxR8lQAAAIs"]
[Sun Apr 26 10:24:56.051328 2026] [:error] [pid 8390:tid 8451] [client 20.111.40.172:13977] File does not exist: /usr/local/apache/htdocs/suspended-page/shellalfa.php
[Sun Apr 26 10:24:56.292577 2026] [:error] [pid 8390:tid 8469] [client 20.111.40.172:13977] File does not exist: /usr/local/apache/htdocs/suspended-page/bless11.php
[Sun Apr 26 10:24:56.531612 2026] [:error] [pid 8390:tid 8471] [client 20.111.40.172:13977] File does not exist: /usr/local/apache/htdocs/suspended-page/xmu.php
[Sun Apr 26 10:24:56.770887 2026] [:error] [pid 8390:tid 8474] [client 20.111.40.172:13977] File does not exist: /usr/local/apache/htdocs/suspended-page/shelp.php
[Sun Apr 26 10:24:57.009685 2026] [:error] [pid 8390:tid 8458] [client 20.111.40.172:13977] File does not exist: /usr/local/apache/htdocs/suspended-page/xda.php
[Sun Apr 26 10:24:58.514880 2026] [:error] [pid 8390:tid 8458] [client 20.111.40.172:13977] File does not exist: /usr/local/apache/htdocs/suspended-page/pucci.php
[Sun Apr 26 10:24:58.753462 2026] [:error] [pid 8390:tid 8453] [client 20.111.40.172:13977] File does not exist: /usr/local/apache/htdocs/suspended-page/app.php
[Sun Apr 26 10:24:58.992310 2026] [:error] [pid 8390:tid 8465] [client 20.111.40.172:13977] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sun Apr 26 10:24:59.232166 2026] [:error] [pid 8390:tid 8471] [client 20.111.40.172:13977] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Sun Apr 26 10:24:59.471731 2026] [:error] [pid 8390:tid 8456] [client 20.111.40.172:13977] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Sun Apr 26 10:24:59.711451 2026] [:error] [pid 8390:tid 8474] [client 20.111.40.172:13977] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Sun Apr 26 10:24:59.963987 2026] [:error] [pid 8390:tid 8454] [client 20.111.40.172:13977] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mws.php"] [unique_id "ae13e4GPtFK_i9p5yxR8tgAAAIM"]
[Sun Apr 26 10:25:00.482840 2026] [:error] [pid 22573:tid 22630] [client 20.111.40.172:14265] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mws.php"] [unique_id "ae13fHB3EmQlD4yKUt9cyQAAAZc"]
[Sun Apr 26 10:25:01.013921 2026] [:error] [pid 22572:tid 22601] [client 20.111.40.172:14148] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mws.php"] [unique_id "ae13fdXOViWCFU-pZzCkLQAAAVc"]
[Sun Apr 26 10:25:01.514664 2026] [:error] [pid 22573:tid 22609] [client 20.111.40.172:14203] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mws.php"] [unique_id "ae13fXB3EmQlD4yKUt9czAAAAYM"]
[Sun Apr 26 10:25:01.985547 2026] [:error] [pid 16515:tid 16532] [client 20.111.40.172:14169] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file9.php"] [unique_id "ae13fVtDrUmgHSvpuLzr7AAAAk4"]
[Sun Apr 26 10:25:02.489506 2026] [:error] [pid 16515:tid 16542] [client 20.111.40.172:14021] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file9.php"] [unique_id "ae13fltDrUmgHSvpuLzr7wAAAlg"]
[Sun Apr 26 10:25:02.997115 2026] [:error] [pid 8390:tid 8464] [client 20.111.40.172:14035] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file9.php"] [unique_id "ae13foGPtFK_i9p5yxR8uAAAAI0"]
[Sun Apr 26 10:25:03.472554 2026] [:error] [pid 8390:tid 8455] [client 20.111.40.172:14149] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file9.php"] [unique_id "ae13f4GPtFK_i9p5yxR8vgAAAIQ"]
[Sun Apr 26 10:25:03.942880 2026] [:error] [pid 8390:tid 8451] [client 20.111.40.172:14173] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ff1.php"] [unique_id "ae13f4GPtFK_i9p5yxR8wwAAAIA"]
[Sun Apr 26 10:25:04.414403 2026] [:error] [pid 13137:tid 13161] [client 20.111.40.172:14191] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ff1.php"] [unique_id "ae13gN0RB4J0o4h5neEOvQAAAhQ"]
[Sun Apr 26 10:25:04.888428 2026] [:error] [pid 8390:tid 8456] [client 20.111.40.172:14162] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ff1.php"] [unique_id "ae13gIGPtFK_i9p5yxR8yQAAAIU"]
[Sun Apr 26 10:25:05.380374 2026] [:error] [pid 16515:tid 16539] [client 20.111.40.172:14271] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ff1.php"] [unique_id "ae13gVtDrUmgHSvpuLzr9gAAAlU"]
[Sun Apr 26 10:25:05.885607 2026] [:error] [pid 13137:tid 13163] [client 20.111.40.172:14186] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ae13gd0RB4J0o4h5neEOwgAAAhY"]
[Sun Apr 26 10:25:06.426995 2026] [:error] [pid 8390:tid 8454] [client 20.111.40.172:14200] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ae13goGPtFK_i9p5yxR8zgAAAIM"]
[Sun Apr 26 10:25:06.963726 2026] [:error] [pid 16515:tid 16531] [client 20.111.40.172:14160] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ae13gltDrUmgHSvpuLzsAAAAAk0"]
[Sun Apr 26 10:25:07.505118 2026] [:error] [pid 22572:tid 22598] [client 20.111.40.172:14060] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ae13g9XOViWCFU-pZzCkMwAAAVQ"]
[Sun Apr 26 10:25:08.031441 2026] [:error] [pid 8390:tid 8466] [client 20.111.40.172:14153] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "ae13hIGPtFK_i9p5yxR81wAAAI8"]
[Sun Apr 26 10:25:08.531961 2026] [:error] [pid 8390:tid 8464] [client 20.111.40.172:14038] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "ae13hIGPtFK_i9p5yxR82wAAAI0"]
[Sun Apr 26 10:25:09.035412 2026] [:error] [pid 13197:tid 13246] [client 20.111.40.172:14253] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "ae13hd3kktFKdSxTrBunZwAAAs4"]
[Sun Apr 26 10:25:09.514979 2026] [:error] [pid 8390:tid 8460] [client 20.111.40.172:14150] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "ae13hYGPtFK_i9p5yxR83gAAAIk"]
[Sun Apr 26 10:25:09.997091 2026] [:error] [pid 8390:tid 8458] [client 20.111.40.172:14372] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/06.php"] [unique_id "ae13hYGPtFK_i9p5yxR84QAAAIc"]
[Sun Apr 26 10:25:10.507823 2026] [:error] [pid 8390:tid 8456] [client 20.111.40.172:14181] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/06.php"] [unique_id "ae13hoGPtFK_i9p5yxR84wAAAIU"]
[Sun Apr 26 10:25:11.039928 2026] [:error] [pid 22572:tid 22585] [client 20.111.40.172:14045] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/06.php"] [unique_id "ae13h9XOViWCFU-pZzCkNgAAAUc"]
[Sun Apr 26 10:25:11.563655 2026] [:error] [pid 8390:tid 8457] [client 20.111.40.172:14383] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/06.php"] [unique_id "ae13h4GPtFK_i9p5yxR85wAAAIY"]
[Sun Apr 26 10:25:12.060008 2026] [:error] [pid 16515:tid 16529] [client 20.111.40.172:14028] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell20211028.php"] [unique_id "ae13iFtDrUmgHSvpuLzsCwAAAks"]
[Sun Apr 26 10:25:12.563442 2026] [:error] [pid 13137:tid 13162] [client 20.111.40.172:14174] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell20211028.php"] [unique_id "ae13iN0RB4J0o4h5neEOzAAAAhU"]
[Sun Apr 26 10:25:13.102144 2026] [:error] [pid 13137:tid 13165] [client 20.111.40.172:14072] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell20211028.php"] [unique_id "ae13id0RB4J0o4h5neEOzgAAAhg"]
[Sun Apr 26 10:25:13.633208 2026] [:error] [pid 8390:tid 8452] [client 20.111.40.172:14185] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell20211028.php"] [unique_id "ae13iYGPtFK_i9p5yxR86wAAAIE"]
[Sun Apr 26 10:25:14.165777 2026] [:error] [pid 22573:tid 22619] [client 20.111.40.172:14188] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/owl.php"] [unique_id "ae13inB3EmQlD4yKUt9czwAAAYw"]
[Sun Apr 26 10:25:14.666996 2026] [:error] [pid 16515:tid 16532] [client 20.111.40.172:14207] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/owl.php"] [unique_id "ae13iltDrUmgHSvpuLzsFQAAAk4"]
[Sun Apr 26 10:25:15.139670 2026] [:error] [pid 8385:tid 8437] [client 20.111.40.172:14020] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/owl.php"] [unique_id "ae13izOy7_J84Wx3-oyN0gAAAE0"]
[Sun Apr 26 10:25:15.645157 2026] [:error] [pid 16515:tid 16531] [client 20.111.40.172:13961] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/owl.php"] [unique_id "ae13i1tDrUmgHSvpuLzsFwAAAk0"]
[Sun Apr 26 10:25:16.148940 2026] [:error] [pid 22573:tid 22615] [client 20.111.40.172:14194] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "ae13jHB3EmQlD4yKUt9c0wAAAYg"]
[Sun Apr 26 10:25:16.619530 2026] [:error] [pid 22573:tid 22612] [client 20.111.40.172:14147] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "ae13jHB3EmQlD4yKUt9c2QAAAYY"]
[Sun Apr 26 10:25:17.118399 2026] [:error] [pid 22573:tid 22625] [client 20.111.40.172:14165] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "ae13jXB3EmQlD4yKUt9c3AAAAZI"]
[Sun Apr 26 10:25:17.650767 2026] [:error] [pid 22573:tid 22631] [client 20.111.40.172:14204] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "ae13jXB3EmQlD4yKUt9c3gAAAZg"]
[Sun Apr 26 10:25:18.156583 2026] [:error] [pid 22573:tid 22623] [client 20.111.40.172:13957] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file59.php"] [unique_id "ae13jnB3EmQlD4yKUt9c4gAAAZA"]
[Sun Apr 26 10:25:18.629047 2026] [:error] [pid 8383:tid 8419] [client 20.111.40.172:14154] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file59.php"] [unique_id "ae13jtFa2S3EsATMdWPfoAAAABY"]
[Sun Apr 26 10:25:19.127848 2026] [:error] [pid 8383:tid 8403] [client 20.111.40.172:14262] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file59.php"] [unique_id "ae13j9Fa2S3EsATMdWPfowAAAAY"]
[Sun Apr 26 10:25:19.658329 2026] [:error] [pid 22573:tid 22628] [client 20.111.40.172:14059] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file59.php"] [unique_id "ae13j3B3EmQlD4yKUt9c5wAAAZU"]
[Sun Apr 26 10:25:20.163171 2026] [:error] [pid 13197:tid 13252] [client 20.111.40.172:14333] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "ae13kN3kktFKdSxTrBunagAAAtQ"]
[Sun Apr 26 10:25:20.663174 2026] [:error] [pid 8390:tid 8462] [client 20.111.40.172:14206] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "ae13kIGPtFK_i9p5yxR88AAAAIs"]
[Sun Apr 26 10:25:21.160037 2026] [:error] [pid 22572:tid 22578] [client 20.111.40.172:14324] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "ae13kdXOViWCFU-pZzCkPgAAAUA"]
[Sun Apr 26 10:25:21.657786 2026] [:error] [pid 8383:tid 8410] [client 20.111.40.172:14063] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "ae13kdFa2S3EsATMdWPfpQAAAA0"]
[Sun Apr 26 10:25:22.154612 2026] [:error] [pid 22573:tid 22617] [client 20.111.40.172:14179] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "ae13knB3EmQlD4yKUt9c7gAAAYo"]
[Sun Apr 26 10:25:22.625415 2026] [:error] [pid 8385:tid 8439] [client 20.111.40.172:14201] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "ae13kjOy7_J84Wx3-oyN3QAAAE8"]
[Sun Apr 26 10:25:23.129519 2026] [:error] [pid 16574:tid 16627] [client 20.111.40.172:14064] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "ae13k35MsX8wRQr99nYNLQAAA1A"]
[Sun Apr 26 10:25:23.634554 2026] [:error] [pid 16574:tid 16635] [client 20.111.40.172:14057] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "ae13k35MsX8wRQr99nYNLwAAA1Q"]
[Sun Apr 26 10:25:24.142373 2026] [:error] [pid 16574:tid 16639] [client 20.111.40.172:14013] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/clirp.php"] [unique_id "ae13lH5MsX8wRQr99nYNMQAAA1Y"]
[Sun Apr 26 10:25:24.676992 2026] [:error] [pid 8383:tid 8401] [client 20.111.40.172:14211] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/clirp.php"] [unique_id "ae13lNFa2S3EsATMdWPfrQAAAAQ"]
[Sun Apr 26 10:25:25.183099 2026] [:error] [pid 22573:tid 22625] [client 20.111.40.172:13954] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/clirp.php"] [unique_id "ae13lXB3EmQlD4yKUt9c-QAAAZI"]
[Sun Apr 26 10:25:25.681157 2026] [:error] [pid 16574:tid 16643] [client 20.111.40.172:14026] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/clirp.php"] [unique_id "ae13lX5MsX8wRQr99nYNMwAAA1g"]
[Sun Apr 26 10:25:26.238903 2026] [:error] [pid 16574:tid 16608] [client 20.111.40.172:14005] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "ae13ln5MsX8wRQr99nYNNQAAA0Q"]
[Sun Apr 26 10:25:26.770289 2026] [:error] [pid 13137:tid 13159] [client 20.111.40.172:13980] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "ae13lt0RB4J0o4h5neEO3gAAAhI"]
[Sun Apr 26 10:25:27.302204 2026] [:error] [pid 22573:tid 22629] [client 20.111.40.172:14047] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "ae13l3B3EmQlD4yKUt9dAwAAAZY"]
[Sun Apr 26 10:25:27.819318 2026] [:error] [pid 22573:tid 22613] [client 20.111.40.172:14071] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "ae13l3B3EmQlD4yKUt9dBwAAAYc"]
[Sun Apr 26 10:25:28.298942 2026] [:error] [pid 16574:tid 16616] [client 20.111.40.172:14039] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wkdec.php"] [unique_id "ae13mH5MsX8wRQr99nYNOgAAA0s"]
[Sun Apr 26 10:25:28.781789 2026] [:error] [pid 8385:tid 8429] [client 20.111.40.172:14202] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wkdec.php"] [unique_id "ae13mDOy7_J84Wx3-oyN4QAAAEU"]
[Sun Apr 26 10:25:29.261648 2026] [:error] [pid 8383:tid 8404] [client 20.111.40.172:14249] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wkdec.php"] [unique_id "ae13mdFa2S3EsATMdWPfswAAAAc"]
[Sun Apr 26 10:25:29.815591 2026] [:error] [pid 8383:tid 8412] [client 20.111.40.172:14000] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wkdec.php"] [unique_id "ae13mdFa2S3EsATMdWPftAAAAA8"]
[Sun Apr 26 10:25:30.320956 2026] [:error] [pid 16574:tid 16637] [client 20.111.40.172:13965] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "ae13mn5MsX8wRQr99nYNQAAAA1U"]
[Sun Apr 26 10:25:30.858126 2026] [:error] [pid 8390:tid 8467] [client 20.111.40.172:14017] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "ae13moGPtFK_i9p5yxR88wAAAJA"]
[Sun Apr 26 10:25:31.359392 2026] [:error] [pid 8390:tid 8451] [client 20.111.40.172:14022] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "ae13m4GPtFK_i9p5yxR89gAAAIA"]
[Sun Apr 26 10:25:31.838089 2026] [:error] [pid 22573:tid 22617] [client 20.111.40.172:13982] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "ae13m3B3EmQlD4yKUt9dDwAAAYo"]
[Sun Apr 26 10:25:32.349247 2026] [:error] [pid 13137:tid 13161] [client 20.111.40.172:13986] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "ae13nN0RB4J0o4h5neEO4QAAAhQ"]
[Sun Apr 26 10:25:32.886709 2026] [:error] [pid 22573:tid 22628] [client 20.111.40.172:14251] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "ae13nHB3EmQlD4yKUt9dEgAAAZU"]
[Sun Apr 26 10:25:33.419006 2026] [:error] [pid 22572:tid 22596] [client 20.111.40.172:14245] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "ae13ndXOViWCFU-pZzCkSQAAAVI"]
[Sun Apr 26 10:25:33.949710 2026] [:error] [pid 22573:tid 22629] [client 20.111.40.172:14422] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "ae13nXB3EmQlD4yKUt9dGQAAAZY"]
[Sun Apr 26 10:25:34.447355 2026] [:error] [pid 8390:tid 8473] [client 20.111.40.172:14031] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless5.php"] [unique_id "ae13noGPtFK_i9p5yxR8_AAAAJY"]
[Sun Apr 26 10:25:34.919318 2026] [:error] [pid 13137:tid 13157] [client 20.111.40.172:14029] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless5.php"] [unique_id "ae13nt0RB4J0o4h5neEO4wAAAhA"]
[Sun Apr 26 10:25:35.391356 2026] [:error] [pid 8390:tid 8468] [client 20.111.40.172:14031] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless5.php"] [unique_id "ae13n4GPtFK_i9p5yxR8_QAAAJE"]
[Sun Apr 26 10:25:35.895520 2026] [:error] [pid 16574:tid 16609] [client 20.111.40.172:14070] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless5.php"] [unique_id "ae13n35MsX8wRQr99nYNRAAAA0U"]
[Sun Apr 26 10:25:36.442803 2026] [:error] [pid 13137:tid 13154] [client 20.111.40.172:14079] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "ae13oN0RB4J0o4h5neEO6gAAAg0"]
[Sun Apr 26 10:25:36.948557 2026] [:error] [pid 8390:tid 8471] [client 20.111.40.172:13972] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "ae13oIGPtFK_i9p5yxR9AAAAAJQ"]
[Sun Apr 26 10:25:37.421008 2026] [:error] [pid 13137:tid 13140] [client 20.111.40.172:14024] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "ae13od0RB4J0o4h5neEO7AAAAgA"]
[Sun Apr 26 10:25:37.925121 2026] [:error] [pid 22573:tid 22626] [client 20.111.40.172:14156] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "ae13oXB3EmQlD4yKUt9dLgAAAZM"]
[Sun Apr 26 10:25:38.435528 2026] [:error] [pid 13137:tid 13147] [client 20.111.40.172:14256] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "ae13ot0RB4J0o4h5neEO8AAAAgc"]
[Sun Apr 26 10:25:38.910777 2026] [:error] [pid 8491:tid 8508] [client 20.111.40.172:13979] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "ae13oiq7I7e6CJooQM3DwAAAAMk"]
[Sun Apr 26 10:25:39.382077 2026] [:error] [pid 8385:tid 8428] [client 20.111.40.172:14034] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "ae13ozOy7_J84Wx3-oyN-gAAAEQ"]
[Sun Apr 26 10:25:39.853816 2026] [:error] [pid 16515:tid 16518] [client 20.111.40.172:14042] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "ae13o1tDrUmgHSvpuLzsJwAAAkA"]
[Sun Apr 26 10:25:40.360302 2026] [:error] [pid 16515:tid 16530] [client 20.111.40.172:14032] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ae13pFtDrUmgHSvpuLzsKAAAAkw"]
[Sun Apr 26 10:25:40.898552 2026] [:error] [pid 8390:tid 8455] [client 20.111.40.172:13895] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ae13pIGPtFK_i9p5yxR9AwAAAIQ"]
[Sun Apr 26 10:25:41.398834 2026] [:error] [pid 8390:tid 8464] [client 20.111.40.172:14043] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ae13pYGPtFK_i9p5yxR9BgAAAI0"]
[Sun Apr 26 10:25:41.896120 2026] [:error] [pid 8491:tid 8515] [client 20.111.40.172:14023] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ae13pSq7I7e6CJooQM3DxAAAANA"]
[Sun Apr 26 10:25:42.410207 2026] [:error] [pid 8491:tid 8518] [client 20.111.40.172:14056] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-cliner.php"] [unique_id "ae13piq7I7e6CJooQM3DyQAAANM"]
[Sun Apr 26 10:25:42.943972 2026] [:error] [pid 16574:tid 16610] [client 20.111.40.172:14171] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-cliner.php"] [unique_id "ae13pn5MsX8wRQr99nYNSwAAA0Y"]
[Sun Apr 26 10:25:43.452643 2026] [:error] [pid 8390:tid 8473] [client 20.111.40.172:14073] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-cliner.php"] [unique_id "ae13p4GPtFK_i9p5yxR9CQAAAJY"]
[Sun Apr 26 10:25:43.960011 2026] [:error] [pid 22573:tid 22622] [client 20.111.40.172:14067] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-cliner.php"] [unique_id "ae13p3B3EmQlD4yKUt9dPQAAAY8"]
[Sun Apr 26 10:25:44.505462 2026] [:error] [pid 22573:tid 22613] [client 20.111.40.172:13988] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "ae13qHB3EmQlD4yKUt9dQgAAAYc"]
[Sun Apr 26 10:25:45.037022 2026] [:error] [pid 13137:tid 13148] [client 20.111.40.172:14176] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "ae13qd0RB4J0o4h5neEO8wAAAgg"]
[Sun Apr 26 10:25:45.551840 2026] [:error] [pid 8390:tid 8461] [client 20.111.40.172:13970] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "ae13qYGPtFK_i9p5yxR9DAAAAIo"]
[Sun Apr 26 10:25:46.062779 2026] [:error] [pid 16515:tid 16533] [client 20.111.40.172:13899] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "ae13qltDrUmgHSvpuLzsNAAAAk8"]
[Sun Apr 26 10:25:46.590298 2026] [:error] [pid 8390:tid 8460] [client 20.111.40.172:14050] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ae13qoGPtFK_i9p5yxR9EwAAAIk"]
[Sun Apr 26 10:25:47.116542 2026] [:error] [pid 8390:tid 8475] [client 20.111.40.172:14189] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ae13q4GPtFK_i9p5yxR9GQAAAJg"]
[Sun Apr 26 10:25:47.615346 2026] [:error] [pid 8390:tid 8460] [client 20.111.40.172:13974] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ae13q4GPtFK_i9p5yxR9OwAAAIk"]
[Sun Apr 26 10:25:48.113971 2026] [:error] [pid 16574:tid 16623] [client 20.111.40.172:14019] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ae13rH5MsX8wRQr99nYNTgAAA04"]
[Sun Apr 26 10:25:48.623880 2026] [:error] [pid 8390:tid 8452] [client 20.111.40.172:13973] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "ae13rIGPtFK_i9p5yxR9fAAAAIE"]
[Sun Apr 26 10:25:49.095351 2026] [:error] [pid 16515:tid 16537] [client 20.111.40.172:14051] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "ae13rVtDrUmgHSvpuLzseQAAAlM"]
[Sun Apr 26 10:25:49.566392 2026] [:error] [pid 8390:tid 8454] [client 20.111.40.172:13912] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "ae13rYGPtFK_i9p5yxR9hgAAAIM"]
[Sun Apr 26 10:25:50.039772 2026] [:error] [pid 22573:tid 22611] [client 20.111.40.172:14069] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "ae13rnB3EmQlD4yKUt9dTgAAAYU"]
[Sun Apr 26 10:25:50.555713 2026] [:error] [pid 8390:tid 8463] [client 20.111.40.172:14065] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ae13roGPtFK_i9p5yxR9lAAAAIw"]
[Sun Apr 26 10:25:51.075706 2026] [:error] [pid 13197:tid 13248] [client 20.111.40.172:14184] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ae13r93kktFKdSxTrBunfwAAAtA"]
[Sun Apr 26 10:25:51.625945 2026] [:error] [pid 22572:tid 22586] [client 20.111.40.172:13963] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ae13r9XOViWCFU-pZzCkWwAAAUg"]
[Sun Apr 26 10:25:52.169596 2026] [:error] [pid 13137:tid 13152] [client 20.111.40.172:14164] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ae13sN0RB4J0o4h5neEO9gAAAgs"]
[Sun Apr 26 10:25:52.710040 2026] [:error] [pid 8390:tid 8458] [client 20.111.40.172:14030] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/forbidals.php"] [unique_id "ae13sIGPtFK_i9p5yxR9nQAAAIc"]
[Sun Apr 26 10:25:53.257531 2026] [:error] [pid 13137:tid 13147] [client 20.111.40.172:13971] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/forbidals.php"] [unique_id "ae13sd0RB4J0o4h5neEO9wAAAgc"]
[Sun Apr 26 10:25:53.788849 2026] [:error] [pid 22573:tid 22607] [client 20.111.40.172:13896] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/forbidals.php"] [unique_id "ae13sXB3EmQlD4yKUt9dUwAAAYE"]
[Sun Apr 26 10:25:54.290728 2026] [:error] [pid 22573:tid 22626] [client 20.111.40.172:14049] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/forbidals.php"] [unique_id "ae13snB3EmQlD4yKUt9dVwAAAZM"]
[Sun Apr 26 10:25:54.763648 2026] [:error] [pid 22573:tid 22631] [client 20.111.40.172:14048] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zzkhe.php"] [unique_id "ae13snB3EmQlD4yKUt9dWgAAAZg"]
[Sun Apr 26 10:25:55.236884 2026] [:error] [pid 16515:tid 16522] [client 20.111.40.172:14054] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zzkhe.php"] [unique_id "ae13s1tDrUmgHSvpuLzshgAAAkQ"]
[Sun Apr 26 10:25:55.736833 2026] [:error] [pid 22572:tid 22590] [client 20.111.40.172:14033] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zzkhe.php"] [unique_id "ae13s9XOViWCFU-pZzCkZQAAAUw"]
[Sun Apr 26 10:25:56.247592 2026] [:error] [pid 22572:tid 22586] [client 20.111.40.172:13894] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zzkhe.php"] [unique_id "ae13tNXOViWCFU-pZzCkagAAAUg"]
[Sun Apr 26 10:25:56.755135 2026] [:error] [pid 22572:tid 22586] [client 20.111.40.172:14006] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-xm.php"] [unique_id "ae13tNXOViWCFU-pZzCkgAAAAUg"]
[Sun Apr 26 10:25:57.310707 2026] [:error] [pid 8390:tid 8468] [client 20.111.40.172:13975] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-xm.php"] [unique_id "ae13tYGPtFK_i9p5yxR9tQAAAJE"]
[Sun Apr 26 10:25:57.814416 2026] [:error] [pid 22573:tid 22619] [client 20.111.40.172:14192] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-xm.php"] [unique_id "ae13tXB3EmQlD4yKUt9dXAAAAYw"]
[Sun Apr 26 10:25:58.313798 2026] [:error] [pid 22573:tid 22607] [client 20.111.40.172:13958] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-xm.php"] [unique_id "ae13tnB3EmQlD4yKUt9dXgAAAYE"]
[Sun Apr 26 10:25:58.838054 2026] [:error] [pid 8390:tid 8475] [client 20.111.40.172:14058] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cc13.php"] [unique_id "ae13toGPtFK_i9p5yxR9vwAAAJg"]
[Sun Apr 26 10:25:59.344478 2026] [:error] [pid 8390:tid 8456] [client 20.111.40.172:14296] File does not exist: /usr/local/apache/htdocs/suspended-page/cc13.php
[Sun Apr 26 10:25:59.584111 2026] [:error] [pid 8390:tid 8454] [client 20.111.40.172:14296] File does not exist: /usr/local/apache/htdocs/suspended-page/yas.php
[Sun Apr 26 10:25:59.823609 2026] [:error] [pid 8390:tid 8462] [client 20.111.40.172:14296] File does not exist: /usr/local/apache/htdocs/suspended-page/tires.php
[Sun Apr 26 10:26:00.064566 2026] [:error] [pid 8390:tid 8460] [client 20.111.40.172:14296] File does not exist: /usr/local/apache/htdocs/suspended-page/asas.php
[Sun Apr 26 10:26:00.306531 2026] [:error] [pid 8390:tid 8472] [client 20.111.40.172:14296] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Sun Apr 26 10:26:00.548458 2026] [:error] [pid 8390:tid 8465] [client 20.111.40.172:14296] File does not exist: /usr/local/apache/htdocs/suspended-page/yellow.php
[Sun Apr 26 10:26:00.795557 2026] [:error] [pid 8390:tid 8470] [client 20.111.40.172:14296] File does not exist: /usr/local/apache/htdocs/suspended-page/wuasr.php
[Sun Apr 26 10:26:01.035775 2026] [:error] [pid 8390:tid 8464] [client 20.111.40.172:14296] File does not exist: /usr/local/apache/htdocs/suspended-page/lala.php
[Sun Apr 26 10:26:01.279080 2026] [:error] [pid 8390:tid 8457] [client 20.111.40.172:14296] File does not exist: /usr/local/apache/htdocs/suspended-page/sko.php
[Sun Apr 26 10:26:01.523635 2026] [:error] [pid 8390:tid 8454] [client 20.111.40.172:14296] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Sun Apr 26 10:26:01.763558 2026] [:error] [pid 8390:tid 8459] [client 20.111.40.172:14296] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Sun Apr 26 10:26:02.003051 2026] [:error] [pid 8390:tid 8462] [client 20.111.40.172:14296] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fileas.php"] [unique_id "ae13uoGPtFK_i9p5yxR92AAAAIs"]
[Sun Apr 26 10:26:02.509747 2026] [:error] [pid 13137:tid 13142] [client 20.111.40.172:13978] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fileas.php"] [unique_id "ae13ut0RB4J0o4h5neEO-wAAAgI"]
[Sun Apr 26 10:26:03.017174 2026] [:error] [pid 16515:tid 16521] [client 20.111.40.172:13999] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fileas.php"] [unique_id "ae13u1tDrUmgHSvpuLzsjwAAAkM"]
[Sun Apr 26 10:26:03.514456 2026] [:error] [pid 22572:tid 22580] [client 20.111.40.172:14416] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fileas.php"] [unique_id "ae13u9XOViWCFU-pZzCkqAAAAUI"]
[Sun Apr 26 10:26:04.012081 2026] [:error] [pid 13137:tid 13155] [client 20.111.40.172:14066] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system.php"] [unique_id "ae13vN0RB4J0o4h5neEO_gAAAg4"]
[Sun Apr 26 10:26:04.529856 2026] [:error] [pid 13137:tid 13157] [client 20.111.40.172:13893] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system.php"] [unique_id "ae13vN0RB4J0o4h5neEPAQAAAhA"]
[Sun Apr 26 10:26:05.074181 2026] [:error] [pid 16515:tid 16533] [client 20.111.40.172:13955] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system.php"] [unique_id "ae13vVtDrUmgHSvpuLzslQAAAk8"]
[Sun Apr 26 10:26:05.603930 2026] [:error] [pid 16515:tid 16518] [client 20.111.40.172:14177] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/system.php"] [unique_id "ae13vVtDrUmgHSvpuLzslgAAAkA"]
[Sun Apr 26 10:26:06.076821 2026] [:error] [pid 22573:tid 22608] [client 20.111.40.172:14016] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "ae13vnB3EmQlD4yKUt9dcAAAAYI"]
[Sun Apr 26 10:26:06.593381 2026] [:error] [pid 8491:tid 8502] [client 20.111.40.172:13914] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "ae13viq7I7e6CJooQM3D1gAAAMM"]
[Sun Apr 26 10:26:07.068346 2026] [:error] [pid 22572:tid 22582] [client 20.111.40.172:13939] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "ae13v9XOViWCFU-pZzCksQAAAUQ"]
[Sun Apr 26 10:26:07.550513 2026] [:error] [pid 22572:tid 22579] [client 20.111.40.172:14036] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "ae13v9XOViWCFU-pZzCksgAAAUE"]
[Sun Apr 26 10:26:08.071607 2026] [:error] [pid 16574:tid 16611] [client 20.111.40.172:14011] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wolv2.php"] [unique_id "ae13wH5MsX8wRQr99nYNVAAAA0c"]
[Sun Apr 26 10:26:08.593737 2026] [:error] [pid 22572:tid 22580] [client 20.111.40.172:14411] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wolv2.php"] [unique_id "ae13wNXOViWCFU-pZzCkuAAAAUI"]
[Sun Apr 26 10:26:09.119019 2026] [:error] [pid 8390:tid 8462] [client 20.111.40.172:14061] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wolv2.php"] [unique_id "ae13wYGPtFK_i9p5yxR95QAAAIs"]
[Sun Apr 26 10:26:09.630057 2026] [:error] [pid 8390:tid 8460] [client 20.111.40.172:13928] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wolv2.php"] [unique_id "ae13wYGPtFK_i9p5yxR96QAAAIk"]
[Sun Apr 26 10:26:10.228614 2026] [:error] [pid 16515:tid 16534] [client 20.111.40.172:13917] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-db.php"] [unique_id "ae13wltDrUmgHSvpuLzsnwAAAlA"]
[Sun Apr 26 10:26:10.736101 2026] [:error] [pid 22573:tid 22610] [client 20.111.40.172:13996] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-db.php"] [unique_id "ae13wnB3EmQlD4yKUt9deAAAAYQ"]
[Sun Apr 26 10:26:11.236558 2026] [:error] [pid 8491:tid 8517] [client 20.111.40.172:13969] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-db.php"] [unique_id "ae13wyq7I7e6CJooQM3D3AAAANI"]
[Sun Apr 26 10:26:11.768852 2026] [:error] [pid 8390:tid 8466] [client 20.111.40.172:14116] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-db.php"] [unique_id "ae13w4GPtFK_i9p5yxR96gAAAI8"]
[Sun Apr 26 10:26:12.304659 2026] [:error] [pid 8390:tid 8469] [client 20.111.40.172:13990] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-sx10.php"] [unique_id "ae13xIGPtFK_i9p5yxR96wAAAJI"]
[Sun Apr 26 10:26:12.828528 2026] [:error] [pid 8390:tid 8465] [client 20.111.40.172:13905] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-sx10.php"] [unique_id "ae13xIGPtFK_i9p5yxR97wAAAI4"]
[Sun Apr 26 10:26:13.334374 2026] [:error] [pid 8390:tid 8462] [client 20.111.40.172:14012] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-sx10.php"] [unique_id "ae13xYGPtFK_i9p5yxR99QAAAIs"]
[Sun Apr 26 10:26:13.840294 2026] [:error] [pid 8491:tid 8511] [client 20.111.40.172:13995] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-sx10.php"] [unique_id "ae13xSq7I7e6CJooQM3D3QAAAMw"]
[Sun Apr 26 10:26:14.364852 2026] [:error] [pid 22572:tid 22597] [client 20.111.40.172:14128] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xml.php"] [unique_id "ae13xtXOViWCFU-pZzCkxQAAAVM"]
[Sun Apr 26 10:26:14.840555 2026] [:error] [pid 8385:tid 8425] [client 20.111.40.172:13959] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xml.php"] [unique_id "ae13xjOy7_J84Wx3-oyOFwAAAEE"]
[Sun Apr 26 10:26:15.340383 2026] [:error] [pid 8491:tid 8506] [client 20.111.40.172:13964] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xml.php"] [unique_id "ae13xyq7I7e6CJooQM3D3gAAAMc"]
[Sun Apr 26 10:26:15.875858 2026] [:error] [pid 8385:tid 8433] [client 20.111.40.172:14417] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xml.php"] [unique_id "ae13xzOy7_J84Wx3-oyOGwAAAEk"]
[Sun Apr 26 10:26:16.406893 2026] [:error] [pid 13137:tid 13160] [client 20.111.40.172:14077] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/moon3.php"] [unique_id "ae13yN0RB4J0o4h5neEPBgAAAhM"]
[Sun Apr 26 10:26:16.930899 2026] [:error] [pid 8385:tid 8427] [client 20.111.40.172:14143] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/moon3.php"] [unique_id "ae13yDOy7_J84Wx3-oyOIAAAAEM"]
[Sun Apr 26 10:26:17.453538 2026] [:error] [pid 22572:tid 22583] [client 20.111.40.172:13989] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/moon3.php"] [unique_id "ae13ydXOViWCFU-pZzCkyAAAAUU"]
[Sun Apr 26 10:26:17.951929 2026] [:error] [pid 22573:tid 22618] [client 20.111.40.172:14094] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/moon3.php"] [unique_id "ae13yXB3EmQlD4yKUt9dfQAAAYs"]
[Sun Apr 26 10:26:18.451915 2026] [:error] [pid 8385:tid 8428] [client 20.111.40.172:13983] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "ae13yjOy7_J84Wx3-oyOIQAAAEQ"]
[Sun Apr 26 10:26:18.962539 2026] [:error] [pid 22572:tid 22586] [client 20.111.40.172:13893] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "ae13ytXOViWCFU-pZzCkywAAAUg"]
[Sun Apr 26 10:26:19.494726 2026] [:error] [pid 8390:tid 8468] [client 20.111.40.172:14414] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "ae13y4GPtFK_i9p5yxR-AAAAAJE"]
[Sun Apr 26 10:26:19.998429 2026] [:error] [pid 13137:tid 13155] [client 20.111.40.172:14086] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "ae13y90RB4J0o4h5neEPBwAAAg4"]
[Sun Apr 26 10:26:20.478447 2026] [:error] [pid 22573:tid 22607] [client 20.111.40.172:14110] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "ae13zHB3EmQlD4yKUt9dgQAAAYE"]
[Sun Apr 26 10:26:20.950278 2026] [:error] [pid 8390:tid 8470] [client 20.111.40.172:14078] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "ae13zIGPtFK_i9p5yxR-CAAAAJM"]
[Sun Apr 26 10:26:21.420151 2026] [:error] [pid 22572:tid 22585] [client 20.111.40.172:14443] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "ae13zdXOViWCFU-pZzCk0gAAAUc"]
[Sun Apr 26 10:26:21.918295 2026] [:error] [pid 8383:tid 8417] [client 20.111.40.172:14402] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "ae13zdFa2S3EsATMdWPf0QAAABQ"]
[Sun Apr 26 10:26:22.449054 2026] [:error] [pid 8491:tid 8499] [client 20.111.40.172:14107] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/revealability.php"] [unique_id "ae13ziq7I7e6CJooQM3D4QAAAMA"]
[Sun Apr 26 10:26:22.959829 2026] [:error] [pid 16574:tid 16613] [client 20.111.40.172:13943] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/revealability.php"] [unique_id "ae13zn5MsX8wRQr99nYNWAAAA0k"]
[Sun Apr 26 10:26:23.457344 2026] [:error] [pid 8383:tid 8407] [client 20.111.40.172:14092] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/revealability.php"] [unique_id "ae13z9Fa2S3EsATMdWPf0gAAAAo"]
[Sun Apr 26 10:26:23.954572 2026] [:error] [pid 22572:tid 22588] [client 20.111.40.172:14076] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/revealability.php"] [unique_id "ae13z9XOViWCFU-pZzCk1AAAAUo"]
[Sun Apr 26 10:26:24.425341 2026] [:error] [pid 22573:tid 22611] [client 20.111.40.172:14406] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "ae130HB3EmQlD4yKUt9dgwAAAYU"]
[Sun Apr 26 10:26:24.897541 2026] [:error] [pid 13197:tid 13255] [client 20.111.40.172:13888] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "ae130N3kktFKdSxTrBunjQAAAtc"]
[Sun Apr 26 10:26:25.423357 2026] [:error] [pid 13197:tid 13251] [client 20.111.40.172:14009] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "ae130d3kktFKdSxTrBunjgAAAtM"]
[Sun Apr 26 10:26:25.921041 2026] [:error] [pid 22573:tid 22615] [client 20.111.40.172:14100] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "ae130XB3EmQlD4yKUt9diAAAAYg"]
[Sun Apr 26 10:26:26.444546 2026] [:error] [pid 13197:tid 13231] [client 20.111.40.172:13966] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packed.php"] [unique_id "ae130t3kktFKdSxTrBunjwAAAsA"]
[Sun Apr 26 10:26:26.943723 2026] [:error] [pid 13197:tid 13248] [client 20.111.40.172:14096] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packed.php"] [unique_id "ae130t3kktFKdSxTrBunkQAAAtA"]
[Sun Apr 26 10:26:27.446794 2026] [:error] [pid 22572:tid 22582] [client 20.111.40.172:14430] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packed.php"] [unique_id "ae1309XOViWCFU-pZzCk2AAAAUQ"]
[Sun Apr 26 10:26:27.917489 2026] [:error] [pid 13197:tid 13247] [client 20.111.40.172:14459] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packed.php"] [unique_id "ae13093kktFKdSxTrBunlQAAAs8"]
[Sun Apr 26 10:26:28.406861 2026] [:error] [pid 13137:tid 13152] [client 20.111.40.172:14163] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ae131N0RB4J0o4h5neEPEAAAAgs"]
[Sun Apr 26 10:26:28.911022 2026] [:error] [pid 13197:tid 13244] [client 20.111.40.172:14118] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ae131N3kktFKdSxTrBunlwAAAsw"]
[Sun Apr 26 10:26:29.416844 2026] [:error] [pid 16574:tid 16604] [client 20.111.40.172:14123] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ae131X5MsX8wRQr99nYNWwAAA0A"]
[Sun Apr 26 10:26:29.921651 2026] [:error] [pid 22572:tid 22602] [client 20.111.40.172:13987] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ae131dXOViWCFU-pZzCk2wAAAVg"]
[Sun Apr 26 10:26:30.424701 2026] [:error] [pid 8385:tid 8434] [client 20.111.40.172:14062] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccu.php"] [unique_id "ae131jOy7_J84Wx3-oyOJQAAAEo"]
[Sun Apr 26 10:26:30.949993 2026] [:error] [pid 13197:tid 13240] [client 20.111.40.172:14403] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccu.php"] [unique_id "ae131t3kktFKdSxTrBunnAAAAsk"]
[Sun Apr 26 10:26:31.504592 2026] [:error] [pid 8385:tid 8427] [client 20.111.40.172:14435] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccu.php"] [unique_id "ae131zOy7_J84Wx3-oyOJgAAAEM"]
[Sun Apr 26 10:26:32.036820 2026] [:error] [pid 8390:tid 8456] [client 20.111.40.172:14269] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccu.php"] [unique_id "ae132IGPtFK_i9p5yxR-GgAAAIU"]
[Sun Apr 26 10:26:32.561766 2026] [:error] [pid 8390:tid 8453] [client 20.111.40.172:14418] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ffile.php"] [unique_id "ae132IGPtFK_i9p5yxR-HwAAAII"]
[Sun Apr 26 10:26:33.059516 2026] [:error] [pid 8390:tid 8465] [client 20.111.40.172:13998] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ffile.php"] [unique_id "ae132YGPtFK_i9p5yxR-IQAAAI4"]
[Sun Apr 26 10:26:33.531188 2026] [:error] [pid 8390:tid 8459] [client 20.111.40.172:13953] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ffile.php"] [unique_id "ae132YGPtFK_i9p5yxR-KAAAAIg"]
[Sun Apr 26 10:26:34.029137 2026] [:error] [pid 8385:tid 8444] [client 20.111.40.172:14044] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ffile.php"] [unique_id "ae132jOy7_J84Wx3-oyOJwAAAFQ"]
[Sun Apr 26 10:26:34.537413 2026] [:error] [pid 22572:tid 22593] [client 20.111.40.172:13968] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.1.php"] [unique_id "ae132tXOViWCFU-pZzCk3wAAAU8"]
[Sun Apr 26 10:26:35.036285 2026] [:error] [pid 22572:tid 22596] [client 20.111.40.172:14008] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.1.php"] [unique_id "ae1329XOViWCFU-pZzCk4gAAAVI"]
[Sun Apr 26 10:26:35.506784 2026] [:error] [pid 22572:tid 22589] [client 20.111.40.172:14114] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.1.php"] [unique_id "ae1329XOViWCFU-pZzCk5gAAAUs"]
[Sun Apr 26 10:26:36.003149 2026] [:error] [pid 16574:tid 16619] [client 20.111.40.172:14410] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.1.php"] [unique_id "ae133H5MsX8wRQr99nYNXwAAA0w"]
[Sun Apr 26 10:26:36.500060 2026] [:error] [pid 16574:tid 16611] [client 20.111.40.172:14142] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "ae133H5MsX8wRQr99nYNYQAAA0c"]
[Sun Apr 26 10:26:36.996617 2026] [:error] [pid 8385:tid 8446] [client 20.111.40.172:13915] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "ae133DOy7_J84Wx3-oyOKgAAAFY"]
[Sun Apr 26 10:26:37.516904 2026] [:error] [pid 8491:tid 8499] [client 20.111.40.172:13910] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "ae133Sq7I7e6CJooQM3D9wAAAMA"]
[Sun Apr 26 10:26:38.024904 2026] [:error] [pid 8491:tid 8512] [client 20.111.40.172:14105] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "ae133iq7I7e6CJooQM3D-gAAAM0"]
[Sun Apr 26 10:26:38.532558 2026] [:error] [pid 13137:tid 13157] [client 20.111.40.172:14429] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/academy.php"] [unique_id "ae133t0RB4J0o4h5neEPEgAAAhA"]
[Sun Apr 26 10:26:39.007647 2026] [:error] [pid 8390:tid 8454] [client 20.111.40.172:14089] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/academy.php"] [unique_id "ae1334GPtFK_i9p5yxR-OgAAAIM"]
[Sun Apr 26 10:26:39.513518 2026] [:error] [pid 22573:tid 22620] [client 20.111.40.172:13924] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/academy.php"] [unique_id "ae1333B3EmQlD4yKUt9dkQAAAY0"]
[Sun Apr 26 10:26:40.023157 2026] [:error] [pid 8385:tid 8440] [client 20.111.40.172:14400] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/academy.php"] [unique_id "ae134DOy7_J84Wx3-oyOLQAAAFA"]
[Sun Apr 26 10:26:40.529725 2026] [:error] [pid 16574:tid 16612] [client 20.111.40.172:14098] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-xml.php"] [unique_id "ae134H5MsX8wRQr99nYNYwAAA0g"]
[Sun Apr 26 10:26:41.037650 2026] [:error] [pid 13137:tid 13159] [client 20.111.40.172:13929] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-xml.php"] [unique_id "ae134d0RB4J0o4h5neEPHgAAAhI"]
[Sun Apr 26 10:26:41.535722 2026] [:error] [pid 16574:tid 16637] [client 20.111.40.172:13984] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-xml.php"] [unique_id "ae134X5MsX8wRQr99nYNZgAAA1U"]
[Sun Apr 26 10:26:42.034204 2026] [:error] [pid 22573:tid 22608] [client 20.111.40.172:14108] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-xml.php"] [unique_id "ae134nB3EmQlD4yKUt9dlgAAAYI"]
[Sun Apr 26 10:26:42.538864 2026] [:error] [pid 8385:tid 8430] [client 20.111.40.172:14113] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "ae134jOy7_J84Wx3-oyOMgAAAEY"]
[Sun Apr 26 10:26:43.072046 2026] [:error] [pid 13137:tid 13155] [client 20.111.40.172:14112] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "ae13490RB4J0o4h5neEPJAAAAg4"]
[Sun Apr 26 10:26:43.571377 2026] [:error] [pid 8491:tid 8501] [client 20.111.40.172:14095] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "ae134yq7I7e6CJooQM3D_gAAAMI"]
[Sun Apr 26 10:26:44.041868 2026] [:error] [pid 16515:tid 16542] [client 20.111.40.172:13930] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "ae135FtDrUmgHSvpuLzstQAAAlg"]
[Sun Apr 26 10:26:44.515788 2026] [:error] [pid 8390:tid 8465] [client 20.111.40.172:14404] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "ae135IGPtFK_i9p5yxR-PwAAAI4"]
[Sun Apr 26 10:26:44.986936 2026] [:error] [pid 8385:tid 8436] [client 20.111.40.172:14373] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "ae135DOy7_J84Wx3-oyONwAAAEw"]
[Sun Apr 26 10:26:45.457021 2026] [:error] [pid 8385:tid 8445] [client 20.111.40.172:14081] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "ae135TOy7_J84Wx3-oyOOAAAAFU"]
[Sun Apr 26 10:26:45.961804 2026] [:error] [pid 8390:tid 8471] [client 20.111.40.172:14413] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "ae135YGPtFK_i9p5yxR-SAAAAJQ"]
[Sun Apr 26 10:26:46.493457 2026] [:error] [pid 8390:tid 8456] [client 20.111.40.172:14401] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "ae135oGPtFK_i9p5yxR-TQAAAIU"]
[Sun Apr 26 10:26:47.037297 2026] [:error] [pid 22573:tid 22619] [client 20.111.40.172:13956] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "ae1353B3EmQlD4yKUt9dtAAAAYw"]
[Sun Apr 26 10:26:47.545672 2026] [:error] [pid 16515:tid 16525] [client 20.111.40.172:14345] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "ae1351tDrUmgHSvpuLzsugAAAkc"]
[Sun Apr 26 10:26:48.043461 2026] [:error] [pid 13137:tid 13145] [client 20.111.40.172:14431] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "ae136N0RB4J0o4h5neEPNQAAAgU"]
[Sun Apr 26 10:26:48.552954 2026] [:error] [pid 16574:tid 16604] [client 20.111.40.172:14162] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "ae136H5MsX8wRQr99nYNcQAAA0A"]
[Sun Apr 26 10:26:49.056908 2026] [:error] [pid 22573:tid 22607] [client 20.111.40.172:14120] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "ae136XB3EmQlD4yKUt9dvQAAAYE"]
[Sun Apr 26 10:26:49.582074 2026] [:error] [pid 22572:tid 22597] [client 20.111.40.172:14115] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "ae136dXOViWCFU-pZzCk-wAAAVM"]
[Sun Apr 26 10:26:50.080906 2026] [:error] [pid 16515:tid 16540] [client 20.111.40.172:13934] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "ae136ltDrUmgHSvpuLzsvQAAAlY"]
[Sun Apr 26 10:26:50.579602 2026] [:error] [pid 8491:tid 8512] [client 20.111.40.172:13932] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/opts.php"] [unique_id "ae136iq7I7e6CJooQM3EBAAAAM0"]
[Sun Apr 26 10:26:51.083346 2026] [:error] [pid 13137:tid 13156] [client 20.111.40.172:14137] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/opts.php"] [unique_id "ae13690RB4J0o4h5neEPOgAAAg8"]
[Sun Apr 26 10:26:51.587781 2026] [:error] [pid 22572:tid 22595] [client 20.111.40.172:14420] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/opts.php"] [unique_id "ae1369XOViWCFU-pZzClAQAAAVE"]
[Sun Apr 26 10:26:52.086606 2026] [:error] [pid 8390:tid 8453] [client 20.111.40.172:14133] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/opts.php"] [unique_id "ae137IGPtFK_i9p5yxR-WgAAAII"]
[Sun Apr 26 10:26:52.587193 2026] [:error] [pid 8390:tid 8474] [client 20.111.40.172:13900] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ouh.php"] [unique_id "ae137IGPtFK_i9p5yxR-XQAAAJc"]
[Sun Apr 26 10:26:53.086064 2026] [:error] [pid 8383:tid 8417] [client 20.111.40.172:14074] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ouh.php"] [unique_id "ae137dFa2S3EsATMdWPgOgAAABQ"]
[Sun Apr 26 10:26:53.584994 2026] [:error] [pid 8390:tid 8457] [client 20.111.40.172:13903] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ouh.php"] [unique_id "ae137YGPtFK_i9p5yxR-YwAAAIY"]
[Sun Apr 26 10:26:54.092286 2026] [:error] [pid 16515:tid 16534] [client 20.111.40.172:14367] [client 20.111.40.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ouh.php"] [unique_id "ae137ltDrUmgHSvpuLzsvgAAAlA"]
[Sun Apr 26 13:04:01.882262 2026] [:error] [pid 22572:tid 22580] [client 20.9.69.97:58204] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Sun Apr 26 13:04:02.108390 2026] [:error] [pid 22572:tid 22594] [client 20.9.69.97:58204] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Apr 26 13:04:02.491047 2026] [:error] [pid 22572:tid 22588] [client 20.9.69.97:58204] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Sun Apr 26 13:04:02.687773 2026] [:error] [pid 22572:tid 22582] [client 20.9.69.97:58204] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Sun Apr 26 13:04:02.899826 2026] [:error] [pid 22572:tid 22601] [client 20.9.69.97:58204] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Apr 26 13:04:03.113809 2026] [:error] [pid 22572:tid 22590] [client 20.9.69.97:58204] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Sun Apr 26 13:04:03.303797 2026] [:error] [pid 22572:tid 22595] [client 20.9.69.97:58204] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Sun Apr 26 13:04:03.685280 2026] [:error] [pid 22572:tid 22586] [client 20.9.69.97:58204] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Sun Apr 26 13:04:03.874541 2026] [:error] [pid 22572:tid 22602] [client 20.9.69.97:58204] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx1.php"] [unique_id "ae2cw9XOViWCFU-pZzDRIAAAAVg"]
[Sun Apr 26 13:04:04.573667 2026] [:error] [pid 22572:tid 22579] [client 20.9.69.97:58148] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx1.php"] [unique_id "ae2cxNXOViWCFU-pZzDRIwAAAUE"]
[Sun Apr 26 13:04:05.019321 2026] [:error] [pid 13137:tid 13156] [client 20.9.69.97:58198] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx1.php"] [unique_id "ae2cxd0RB4J0o4h5neEvmgAAAg8"]
[Sun Apr 26 13:04:05.644778 2026] [:error] [pid 22572:tid 22592] [client 20.9.69.97:58190] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx1.php"] [unique_id "ae2cxdXOViWCFU-pZzDRKAAAAU4"]
[Sun Apr 26 13:04:06.385411 2026] [:error] [pid 22572:tid 22581] [client 20.9.69.97:58182] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xv.php"] [unique_id "ae2cxtXOViWCFU-pZzDRKgAAAUM"]
[Sun Apr 26 13:04:07.047469 2026] [:error] [pid 22572:tid 22591] [client 20.9.69.97:58152] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xv.php"] [unique_id "ae2cx9XOViWCFU-pZzDRKwAAAU0"]
[Sun Apr 26 13:04:07.739315 2026] [:error] [pid 13137:tid 13152] [client 20.9.69.97:58225] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xv.php"] [unique_id "ae2cx90RB4J0o4h5neEvnQAAAgs"]
[Sun Apr 26 13:04:08.435427 2026] [:error] [pid 22573:tid 22618] [client 20.9.69.97:58123] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xv.php"] [unique_id "ae2cyHB3EmQlD4yKUt-UFwAAAYs"]
[Sun Apr 26 13:04:09.141306 2026] [:error] [pid 22572:tid 22592] [client 20.9.69.97:58140] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x56.php"] [unique_id "ae2cydXOViWCFU-pZzDRMgAAAU4"]
[Sun Apr 26 13:04:10.005572 2026] [:error] [pid 22572:tid 22584] [client 20.9.69.97:58215] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x56.php"] [unique_id "ae2cytXOViWCFU-pZzDRNQAAAUY"]
[Sun Apr 26 13:04:10.732416 2026] [:error] [pid 22573:tid 22609] [client 20.9.69.97:3706] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x56.php"] [unique_id "ae2cynB3EmQlD4yKUt-UIAAAAYM"]
[Sun Apr 26 13:04:11.876701 2026] [:error] [pid 22572:tid 22594] [client 20.9.69.97:58234] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x56.php"] [unique_id "ae2cy9XOViWCFU-pZzDROQAAAVA"]
[Sun Apr 26 13:04:13.013325 2026] [:error] [pid 8390:tid 8465] [client 20.9.69.97:58180] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/htaccess.php"] [unique_id "ae2czYGPtFK_i9p5yxTIrQAAAI4"]
[Sun Apr 26 13:04:13.557785 2026] [:error] [pid 8491:tid 8509] [client 20.9.69.97:58183] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/htaccess.php"] [unique_id "ae2czSq7I7e6CJooQM3WfwAAAMo"]
[Sun Apr 26 13:04:14.945048 2026] [:error] [pid 13197:tid 13233] [client 20.9.69.97:58185] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/htaccess.php"] [unique_id "ae2czt3kktFKdSxTrBu2NAAAAsI"]
[Sun Apr 26 13:04:15.701996 2026] [:error] [pid 22572:tid 22587] [client 20.9.69.97:58151] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/htaccess.php"] [unique_id "ae2cz9XOViWCFU-pZzDROgAAAUk"]
[Sun Apr 26 13:04:17.126142 2026] [:error] [pid 8385:tid 8435] [client 20.9.69.97:58149] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/readme.php"] [unique_id "ae2c0TOy7_J84Wx3-oyi-wAAAEs"]
[Sun Apr 26 13:04:18.069086 2026] [:error] [pid 8385:tid 8442] [client 20.9.69.97:58146] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/readme.php"] [unique_id "ae2c0jOy7_J84Wx3-oyi_gAAAFI"]
[Sun Apr 26 13:04:19.233335 2026] [:error] [pid 8390:tid 8463] [client 20.9.69.97:58115] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/readme.php"] [unique_id "ae2c04GPtFK_i9p5yxTIswAAAIw"]
[Sun Apr 26 13:04:20.658903 2026] [:error] [pid 22573:tid 22606] [client 20.9.69.97:58184] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/readme.php"] [unique_id "ae2c1HB3EmQlD4yKUt-ULAAAAYA"]
[Sun Apr 26 13:04:23.383513 2026] [:error] [pid 8491:tid 8524] [client 20.9.69.97:58205] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x50.php"] [unique_id "ae2c1yq7I7e6CJooQM3WhwAAANg"]
[Sun Apr 26 13:04:24.800855 2026] [:error] [pid 16515:tid 16533] [client 20.9.69.97:3656] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x50.php"] [unique_id "ae2c2FtDrUmgHSvpuLwFkAAAAk8"]
[Sun Apr 26 13:04:26.252753 2026] [:error] [pid 22573:tid 22609] [client 20.9.69.97:3676] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x50.php"] [unique_id "ae2c2nB3EmQlD4yKUt-UMgAAAYM"]
[Sun Apr 26 13:04:27.331004 2026] [:error] [pid 22573:tid 22629] [client 45.45.237.225:46108] [client 45.45.237.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ae2c23B3EmQlD4yKUt-UOAAAAZY"]
[Sun Apr 26 13:04:27.713307 2026] [:error] [pid 8383:tid 8421] [client 20.9.69.97:58194] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x50.php"] [unique_id "ae2c29Fa2S3EsATMdWPscgAAABg"]
[Sun Apr 26 13:04:27.828182 2026] [:error] [pid 16515:tid 16534] [client 45.45.237.225:45644] [client 45.45.237.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "ae2c21tDrUmgHSvpuLwFkQAAAlA"]
[Sun Apr 26 13:04:27.850130 2026] [:error] [pid 13137:tid 13163] [client 45.45.237.225:45710] [client 45.45.237.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.old"] [unique_id "ae2c290RB4J0o4h5neEvnwAAAhY"]
[Sun Apr 26 13:04:27.850248 2026] [:error] [pid 13197:tid 13247] [client 45.45.237.225:45694] [client 45.45.237.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "ae2c293kktFKdSxTrBu2OgAAAs8"]
[Sun Apr 26 13:04:28.074511 2026] [:error] [pid 8390:tid 8464] [client 45.45.237.225:45662] [client 45.45.237.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.bak"] [unique_id "ae2c3IGPtFK_i9p5yxTIzgAAAI0"]
[Sun Apr 26 13:04:28.102015 2026] [:error] [pid 16515:tid 16528] [client 45.45.237.225:45634] [client 45.45.237.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-config.php.bak"] [unique_id "ae2c3FtDrUmgHSvpuLwFkwAAAko"]
[Sun Apr 26 13:04:28.114035 2026] [:error] [pid 8383:tid 8418] [client 45.45.237.225:45678] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.aws/credentials"] [unique_id "ae2c3NFa2S3EsATMdWPsdQAAABU"]
[Sun Apr 26 13:04:28.124323 2026] [:error] [pid 22573:tid 22615] [client 45.45.237.225:45702] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aws-exports.js"] [unique_id "ae2c3HB3EmQlD4yKUt-UPAAAAYg"]
[Sun Apr 26 13:04:28.125125 2026] [:error] [pid 22573:tid 22609] [client 45.45.237.225:45696] [client 45.45.237.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ae2c3HB3EmQlD4yKUt-UPQAAAYM"]
[Sun Apr 26 13:04:28.125665 2026] [:error] [pid 13197:tid 13254] [client 45.45.237.225:45660] [client 45.45.237.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-config.php"] [unique_id "ae2c3N3kktFKdSxTrBu2PAAAAtY"]
[Sun Apr 26 13:04:28.318169 2026] [:error] [pid 16574:tid 16606] [client 45.45.237.225:45786] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/application.properties"] [unique_id "ae2c3H5MsX8wRQr99nYX8QAAA0I"]
[Sun Apr 26 13:04:28.336530 2026] [:error] [pid 16574:tid 16608] [client 45.45.237.225:45812] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/application.yml"] [unique_id "ae2c3H5MsX8wRQr99nYX8gAAA0Q"]
[Sun Apr 26 13:04:28.336913 2026] [:error] [pid 8385:tid 8430] [client 45.45.237.225:45800] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.npmrc"] [unique_id "ae2c3DOy7_J84Wx3-oyjAgAAAEY"]
[Sun Apr 26 13:04:29.237209 2026] [:error] [pid 16515:tid 16519] [client 45.45.237.225:46122] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/package.json"] [unique_id "ae2c3VtDrUmgHSvpuLwFlAAAAkE"]
[Sun Apr 26 13:04:29.237209 2026] [:error] [pid 8383:tid 8418] [client 45.45.237.225:46096] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.aws/credentials"] [unique_id "ae2c3dFa2S3EsATMdWPsfAAAABU"]
[Sun Apr 26 13:04:29.246695 2026] [:error] [pid 16515:tid 16529] [client 45.45.237.225:46212] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amplify/team-provider-info.json"] [unique_id "ae2c3VtDrUmgHSvpuLwFlQAAAks"]
[Sun Apr 26 13:04:29.247608 2026] [:error] [pid 8383:tid 8400] [client 45.45.237.225:46174] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/api/config"] [unique_id "ae2c3dFa2S3EsATMdWPsfQAAAAM"]
[Sun Apr 26 13:04:29.247861 2026] [:error] [pid 8385:tid 8434] [client 45.45.237.225:46274] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aws-exports.js"] [unique_id "ae2c3TOy7_J84Wx3-oyjDAAAAEo"]
[Sun Apr 26 13:04:29.247983 2026] [:error] [pid 16515:tid 16540] [client 45.45.237.225:46146] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/settings.py"] [unique_id "ae2c3VtDrUmgHSvpuLwFlgAAAlY"]
[Sun Apr 26 13:04:29.256831 2026] [:error] [pid 16515:tid 16539] [client 45.45.237.225:46236] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/docker-compose.yml"] [unique_id "ae2c3VtDrUmgHSvpuLwFlwAAAlU"]
[Sun Apr 26 13:04:29.257559 2026] [:error] [pid 22572:tid 22584] [client 45.45.237.225:46162] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/application.properties"] [unique_id "ae2c3dXOViWCFU-pZzDRRgAAAUY"]
[Sun Apr 26 13:04:29.280916 2026] [:error] [pid 16574:tid 16616] [client 45.45.237.225:46118] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/application.yml"] [unique_id "ae2c3X5MsX8wRQr99nYX9AAAA0s"]
[Sun Apr 26 13:04:29.281187 2026] [:error] [pid 13137:tid 13151] [client 45.45.237.225:46086] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.npmrc"] [unique_id "ae2c3d0RB4J0o4h5neEvowAAAgo"]
[Sun Apr 26 13:04:29.333915 2026] [:error] [pid 22572:tid 22601] [client 20.9.69.97:58112] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fv.php"] [unique_id "ae2c3dXOViWCFU-pZzDRSQAAAVc"]
[Sun Apr 26 13:04:29.482818 2026] [:error] [pid 22572:tid 22589] [client 45.45.237.225:46204] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/package.json"] [unique_id "ae2c3dXOViWCFU-pZzDRTAAAAUs"]
[Sun Apr 26 13:04:29.483175 2026] [:error] [pid 22572:tid 22602] [client 45.45.237.225:46262] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.aws/credentials"] [unique_id "ae2c3dXOViWCFU-pZzDRTQAAAVg"]
[Sun Apr 26 13:04:29.493317 2026] [:error] [pid 22572:tid 22598] [client 45.45.237.225:46084] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aws-exports.js"] [unique_id "ae2c3dXOViWCFU-pZzDRTgAAAVQ"]
[Sun Apr 26 13:04:29.496568 2026] [:error] [pid 13137:tid 13149] [client 45.45.237.225:46068] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amplify/team-provider-info.json"] [unique_id "ae2c3d0RB4J0o4h5neEvpAAAAgk"]
[Sun Apr 26 13:04:29.497588 2026] [:error] [pid 22572:tid 22587] [client 45.45.237.225:46110] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/api/config"] [unique_id "ae2c3dXOViWCFU-pZzDRTwAAAUk"]
[Sun Apr 26 13:04:29.497584 2026] [:error] [pid 16515:tid 16524] [client 45.45.237.225:46252] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/settings.py"] [unique_id "ae2c3VtDrUmgHSvpuLwFmAAAAkY"]
[Sun Apr 26 13:04:29.503206 2026] [:error] [pid 22572:tid 22586] [client 45.45.237.225:46194] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/docker-compose.yml"] [unique_id "ae2c3dXOViWCFU-pZzDRUAAAAUg"]
[Sun Apr 26 13:04:29.508187 2026] [:error] [pid 16515:tid 16541] [client 45.45.237.225:46180] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/application.properties"] [unique_id "ae2c3VtDrUmgHSvpuLwFmQAAAlc"]
[Sun Apr 26 13:04:29.539596 2026] [:error] [pid 13137:tid 13160] [client 45.45.237.225:46134] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/application.yml"] [unique_id "ae2c3d0RB4J0o4h5neEvpgAAAhM"]
[Sun Apr 26 13:04:29.540715 2026] [:error] [pid 22573:tid 22618] [client 45.45.237.225:46222] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.npmrc"] [unique_id "ae2c3XB3EmQlD4yKUt-UQQAAAYs"]
[Sun Apr 26 13:04:29.741933 2026] [:error] [pid 13137:tid 13153] [client 45.45.237.225:46278] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/package.json"] [unique_id "ae2c3d0RB4J0o4h5neEvpwAAAgw"]
[Sun Apr 26 13:04:31.600083 2026] [:error] [pid 13137:tid 13145] [client 20.9.69.97:58134] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fv.php"] [unique_id "ae2c390RB4J0o4h5neEvqAAAAgU"]
[Sun Apr 26 13:04:32.603751 2026] [:error] [pid 13137:tid 13141] [client 20.9.69.97:3705] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fv.php"] [unique_id "ae2c4N0RB4J0o4h5neEvqQAAAgE"]
[Sun Apr 26 13:04:34.147846 2026] [:error] [pid 22572:tid 22600] [client 20.9.69.97:58208] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fv.php"] [unique_id "ae2c4tXOViWCFU-pZzDRVwAAAVY"]
[Sun Apr 26 13:04:35.302328 2026] [:error] [pid 22572:tid 22587] [client 20.9.69.97:58145] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ae2c49XOViWCFU-pZzDRWwAAAUk"]
[Sun Apr 26 13:04:36.736570 2026] [:error] [pid 16515:tid 16522] [client 20.9.69.97:58153] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ae2c5FtDrUmgHSvpuLwFnQAAAkQ"]
[Sun Apr 26 13:04:37.643331 2026] [:error] [pid 13197:tid 13232] [client 20.9.69.97:58179] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ae2c5d3kktFKdSxTrBu2QwAAAsE"]
[Sun Apr 26 13:04:38.527642 2026] [:error] [pid 16515:tid 16520] [client 20.9.69.97:58135] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ae2c5ltDrUmgHSvpuLwFngAAAkI"]
[Sun Apr 26 13:04:39.173781 2026] [:error] [pid 16574:tid 16633] [client 20.9.69.97:3657] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lsd.php"] [unique_id "ae2c535MsX8wRQr99nYX9wAAA1M"]
[Sun Apr 26 13:04:39.963006 2026] [:error] [pid 8385:tid 8438] [client 20.9.69.97:58232] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lsd.php"] [unique_id "ae2c5zOy7_J84Wx3-oyjEAAAAE4"]
[Sun Apr 26 13:04:40.548341 2026] [:error] [pid 8390:tid 8473] [client 20.9.69.97:58125] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lsd.php"] [unique_id "ae2c6IGPtFK_i9p5yxTI2gAAAJY"]
[Sun Apr 26 13:04:41.397375 2026] [:error] [pid 8390:tid 8458] [client 20.9.69.97:58163] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lsd.php"] [unique_id "ae2c6YGPtFK_i9p5yxTI2wAAAIc"]
[Sun Apr 26 13:04:41.862391 2026] [:error] [pid 22573:tid 22611] [client 20.9.69.97:58158] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "ae2c6XB3EmQlD4yKUt-USAAAAYU"]
[Sun Apr 26 13:04:42.493610 2026] [:error] [pid 8383:tid 8417] [client 20.9.69.97:3648] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "ae2c6tFa2S3EsATMdWPsfwAAABQ"]
[Sun Apr 26 13:04:43.082273 2026] [:error] [pid 8491:tid 8515] [client 20.9.69.97:58237] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "ae2c6yq7I7e6CJooQM3WkQAAANA"]
[Sun Apr 26 13:04:43.880531 2026] [:error] [pid 13137:tid 13142] [client 20.9.69.97:58132] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "ae2c690RB4J0o4h5neEvsQAAAgI"]
[Sun Apr 26 13:04:44.430598 2026] [:error] [pid 8390:tid 8465] [client 20.9.69.97:58224] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ae2c7IGPtFK_i9p5yxTI3wAAAI4"]
[Sun Apr 26 13:04:45.290888 2026] [:error] [pid 8390:tid 8467] [client 20.9.69.97:58209] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ae2c7YGPtFK_i9p5yxTI4gAAAJA"]
[Sun Apr 26 13:04:46.307953 2026] [:error] [pid 13137:tid 13152] [client 20.9.69.97:58137] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ae2c7t0RB4J0o4h5neEvsgAAAgs"]
[Sun Apr 26 13:04:47.075464 2026] [:error] [pid 8390:tid 8462] [client 20.9.69.97:58118] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ae2c74GPtFK_i9p5yxTI6AAAAIs"]
[Sun Apr 26 13:04:47.516636 2026] [:error] [pid 8390:tid 8459] [client 20.9.69.97:3703] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gtc.php"] [unique_id "ae2c74GPtFK_i9p5yxTI6wAAAIg"]
[Sun Apr 26 13:04:48.118304 2026] [:error] [pid 22573:tid 22630] [client 20.9.69.97:58176] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gtc.php"] [unique_id "ae2c8HB3EmQlD4yKUt-USgAAAZc"]
[Sun Apr 26 13:04:48.611039 2026] [:error] [pid 8390:tid 8470] [client 20.9.69.97:58122] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gtc.php"] [unique_id "ae2c8IGPtFK_i9p5yxTI7gAAAJM"]
[Sun Apr 26 13:04:49.060325 2026] [:error] [pid 22572:tid 22600] [client 20.9.69.97:58173] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gtc.php"] [unique_id "ae2c8dXOViWCFU-pZzDRYQAAAVY"]
[Sun Apr 26 13:04:49.664477 2026] [:error] [pid 8390:tid 8474] [client 20.9.69.97:58171] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atx.php"] [unique_id "ae2c8YGPtFK_i9p5yxTI8QAAAJc"]
[Sun Apr 26 13:04:50.398662 2026] [:error] [pid 8385:tid 8433] [client 20.9.69.97:58136] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atx.php"] [unique_id "ae2c8jOy7_J84Wx3-oyjFwAAAEk"]
[Sun Apr 26 13:04:51.293500 2026] [:error] [pid 16515:tid 16541] [client 20.9.69.97:58188] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atx.php"] [unique_id "ae2c81tDrUmgHSvpuLwFpAAAAlc"]
[Sun Apr 26 13:04:51.964779 2026] [:error] [pid 8390:tid 8468] [client 20.9.69.97:58217] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atx.php"] [unique_id "ae2c84GPtFK_i9p5yxTI9gAAAJE"]
[Sun Apr 26 13:04:52.488083 2026] [:error] [pid 8390:tid 8466] [client 20.9.69.97:58172] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z60.php"] [unique_id "ae2c9IGPtFK_i9p5yxTI-AAAAI8"]
[Sun Apr 26 13:04:53.077512 2026] [:error] [pid 8385:tid 8438] [client 20.9.69.97:58165] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z60.php"] [unique_id "ae2c9TOy7_J84Wx3-oyjGgAAAE4"]
[Sun Apr 26 13:04:53.919566 2026] [:error] [pid 8385:tid 8435] [client 20.9.69.97:58157] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z60.php"] [unique_id "ae2c9TOy7_J84Wx3-oyjHAAAAEs"]
[Sun Apr 26 13:04:54.635272 2026] [:error] [pid 8385:tid 8436] [client 20.9.69.97:3682] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z60.php"] [unique_id "ae2c9jOy7_J84Wx3-oyjHgAAAEw"]
[Sun Apr 26 13:04:55.505192 2026] [:error] [pid 16574:tid 16612] [client 20.9.69.97:58229] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ae2c935MsX8wRQr99nYX_AAAA0g"]
[Sun Apr 26 13:04:56.326924 2026] [:error] [pid 16574:tid 16610] [client 20.9.69.97:3668] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ae2c-H5MsX8wRQr99nYX_gAAA0Y"]
[Sun Apr 26 13:04:57.410785 2026] [:error] [pid 8390:tid 8469] [client 20.9.69.97:3678] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ae2c-YGPtFK_i9p5yxTI_QAAAJI"]
[Sun Apr 26 13:04:58.623414 2026] [:error] [pid 8390:tid 8456] [client 20.9.69.97:58236] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ae2c-oGPtFK_i9p5yxTJBAAAAIU"]
[Sun Apr 26 13:05:00.335789 2026] [:error] [pid 8390:tid 8453] [client 20.9.69.97:58191] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "ae2c_IGPtFK_i9p5yxTJCQAAAII"]
[Sun Apr 26 13:05:02.269438 2026] [:error] [pid 8390:tid 8463] [client 20.9.69.97:58124] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "ae2c_oGPtFK_i9p5yxTJEQAAAIw"]
[Sun Apr 26 13:05:03.708455 2026] [:error] [pid 8390:tid 8468] [client 20.9.69.97:58201] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Sun Apr 26 13:05:03.902132 2026] [:error] [pid 8390:tid 8467] [client 20.9.69.97:58201] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Apr 26 13:05:04.688326 2026] [:error] [pid 8390:tid 8453] [client 20.9.69.97:58201] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sun Apr 26 13:05:04.950157 2026] [:error] [pid 8390:tid 8459] [client 20.9.69.97:58201] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sun Apr 26 13:05:05.142313 2026] [:error] [pid 8390:tid 8475] [client 20.9.69.97:58201] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sun Apr 26 13:05:05.334649 2026] [:error] [pid 8390:tid 8467] [client 20.9.69.97:58201] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Apr 26 13:05:05.601749 2026] [:error] [pid 8390:tid 8454] [client 20.9.69.97:58201] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sun Apr 26 13:05:05.793946 2026] [:error] [pid 8390:tid 8473] [client 20.9.69.97:58201] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Sun Apr 26 13:05:05.996406 2026] [:error] [pid 8390:tid 8451] [client 20.9.69.97:58201] [client 20.9.69.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ae2dAYGPtFK_i9p5yxTJKwAAAIA"]
[Sun Apr 26 13:05:07.216223 2026] [:error] [pid 8385:tid 8447] [client 20.9.69.97:56708] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Sun Apr 26 13:05:07.834014 2026] [:error] [pid 8385:tid 8429] [client 20.9.69.97:56708] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "ae2dAzOy7_J84Wx3-oyjJQAAAEU"]
[Sun Apr 26 13:05:08.821399 2026] [:error] [pid 8385:tid 8430] [client 20.9.69.97:58116] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "ae2dBDOy7_J84Wx3-oyjMAAAAEY"]
[Sun Apr 26 13:05:09.630742 2026] [:error] [pid 8385:tid 8443] [client 20.9.69.97:58177] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "ae2dBTOy7_J84Wx3-oyjOAAAAFM"]
[Sun Apr 26 13:05:10.396581 2026] [:error] [pid 13197:tid 13231] [client 20.9.69.97:3661] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "ae2dBt3kktFKdSxTrBu2SgAAAsA"]
[Sun Apr 26 13:05:10.922025 2026] [:error] [pid 22573:tid 22630] [client 20.9.69.97:58126] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ae2dBnB3EmQlD4yKUt-UUwAAAZc"]
[Sun Apr 26 13:05:11.442092 2026] [:error] [pid 22573:tid 22615] [client 20.9.69.97:58200] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ae2dB3B3EmQlD4yKUt-UVQAAAYg"]
[Sun Apr 26 13:05:12.025462 2026] [:error] [pid 22572:tid 22592] [client 20.9.69.97:3690] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ae2dCNXOViWCFU-pZzDRbAAAAU4"]
[Sun Apr 26 13:05:12.761738 2026] [:error] [pid 22572:tid 22600] [client 20.9.69.97:58231] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ae2dCNXOViWCFU-pZzDRbQAAAVY"]
[Sun Apr 26 13:05:13.395039 2026] [:error] [pid 13197:tid 13248] [client 20.9.69.97:58128] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ae2dCd3kktFKdSxTrBu2SwAAAtA"]
[Sun Apr 26 13:05:13.951304 2026] [:error] [pid 13197:tid 13241] [client 20.9.69.97:58154] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ae2dCd3kktFKdSxTrBu2TQAAAso"]
[Sun Apr 26 13:05:14.435667 2026] [:error] [pid 13137:tid 13162] [client 20.9.69.97:58195] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ae2dCt0RB4J0o4h5neEvvQAAAhU"]
[Sun Apr 26 13:05:14.881509 2026] [:error] [pid 22572:tid 22589] [client 20.9.69.97:58202] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ae2dCtXOViWCFU-pZzDRcQAAAUs"]
[Sun Apr 26 13:05:15.473913 2026] [:error] [pid 22573:tid 22623] [client 20.9.69.97:58239] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ae2dC3B3EmQlD4yKUt-UWAAAAZA"]
[Sun Apr 26 13:05:16.272628 2026] [:error] [pid 22572:tid 22580] [client 20.9.69.97:3684] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ae2dDNXOViWCFU-pZzDRdwAAAUI"]
[Sun Apr 26 13:05:17.231087 2026] [:error] [pid 13137:tid 13157] [client 20.9.69.97:58211] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ae2dDd0RB4J0o4h5neEvvwAAAhA"]
[Sun Apr 26 13:05:17.934602 2026] [:error] [pid 13137:tid 13161] [client 20.9.69.97:58227] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ae2dDd0RB4J0o4h5neEvwgAAAhQ"]
[Sun Apr 26 13:05:18.441693 2026] [:error] [pid 22573:tid 22625] [client 20.9.69.97:58222] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ae2dDnB3EmQlD4yKUt-UXgAAAZI"]
[Sun Apr 26 13:05:19.114125 2026] [:error] [pid 22572:tid 22599] [client 20.9.69.97:58159] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ae2dD9XOViWCFU-pZzDRegAAAVU"]
[Sun Apr 26 13:05:19.861496 2026] [:error] [pid 13197:tid 13232] [client 20.9.69.97:56775] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ae2dD93kktFKdSxTrBu2TwAAAsE"]
[Sun Apr 26 13:05:20.597712 2026] [:error] [pid 8383:tid 8400] [client 20.9.69.97:58168] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ae2dENFa2S3EsATMdWPshgAAAAM"]
[Sun Apr 26 13:05:21.105480 2026] [:error] [pid 16574:tid 16641] [client 20.9.69.97:58175] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ae2dEX5MsX8wRQr99nYYAgAAA1c"]
[Sun Apr 26 13:05:21.731814 2026] [:error] [pid 8390:tid 8463] [client 20.9.69.97:58207] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ae2dEYGPtFK_i9p5yxTJNQAAAIw"]
[Sun Apr 26 13:05:22.876120 2026] [:error] [pid 22573:tid 22630] [client 20.9.69.97:3685] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ae2dEnB3EmQlD4yKUt-UZAAAAZc"]
[Sun Apr 26 13:05:23.920054 2026] [:error] [pid 22572:tid 22582] [client 20.9.69.97:58218] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ae2dE9XOViWCFU-pZzDRfwAAAUQ"]
[Sun Apr 26 13:05:25.359119 2026] [:error] [pid 8383:tid 8417] [client 20.9.69.97:3687] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/index.php"] [unique_id "ae2dFdFa2S3EsATMdWPsiAAAABQ"]
[Sun Apr 26 13:05:26.185501 2026] [:error] [pid 22572:tid 22589] [client 20.9.69.97:56770] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/index.php"] [unique_id "ae2dFtXOViWCFU-pZzDRhAAAAUs"]
[Sun Apr 26 13:05:26.648138 2026] [:error] [pid 22572:tid 22598] [client 20.9.69.97:58196] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/index.php"] [unique_id "ae2dFtXOViWCFU-pZzDRhgAAAVQ"]
[Sun Apr 26 13:05:27.063157 2026] [:error] [pid 22573:tid 22620] [client 20.9.69.97:58226] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/index.php"] [unique_id "ae2dF3B3EmQlD4yKUt-UZgAAAY0"]
[Sun Apr 26 13:05:27.527496 2026] [:error] [pid 22573:tid 22612] [client 20.9.69.97:56789] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ae2dF3B3EmQlD4yKUt-UaAAAAYY"]
[Sun Apr 26 13:05:28.657460 2026] [:error] [pid 13137:tid 13146] [client 20.9.69.97:3652] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ae2dGN0RB4J0o4h5neEvyQAAAgY"]
[Sun Apr 26 13:05:29.527944 2026] [:error] [pid 8383:tid 8420] [client 20.9.69.97:58156] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ae2dGdFa2S3EsATMdWPsjAAAABc"]
[Sun Apr 26 13:05:30.191738 2026] [:error] [pid 8383:tid 8398] [client 20.9.69.97:58129] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ae2dGtFa2S3EsATMdWPsjQAAAAE"]
[Sun Apr 26 13:05:30.868571 2026] [:error] [pid 8383:tid 8412] [client 20.9.69.97:58203] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ae2dGtFa2S3EsATMdWPsjwAAAA8"]
[Sun Apr 26 13:05:31.672732 2026] [:error] [pid 8390:tid 8467] [client 20.9.69.97:3702] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ae2dG4GPtFK_i9p5yxTJPwAAAJA"]
[Sun Apr 26 13:05:32.553648 2026] [:error] [pid 22573:tid 22630] [client 20.9.69.97:3681] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ae2dHHB3EmQlD4yKUt-UbAAAAZc"]
[Sun Apr 26 13:05:33.449541 2026] [:error] [pid 13137:tid 13143] [client 20.9.69.97:58181] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ae2dHd0RB4J0o4h5neEv1AAAAgM"]
[Sun Apr 26 13:05:34.016550 2026] [:error] [pid 13197:tid 13250] [client 20.9.69.97:58206] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ae2dHt3kktFKdSxTrBu2UAAAAtI"]
[Sun Apr 26 13:05:34.470141 2026] [:error] [pid 22572:tid 22579] [client 20.9.69.97:56803] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ae2dHtXOViWCFU-pZzDRjQAAAUE"]
[Sun Apr 26 13:05:35.094023 2026] [:error] [pid 22573:tid 22624] [client 20.9.69.97:58216] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ae2dH3B3EmQlD4yKUt-UbgAAAZE"]
[Sun Apr 26 13:05:35.599811 2026] [:error] [pid 22573:tid 22611] [client 20.9.69.97:58127] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ae2dH3B3EmQlD4yKUt-UcgAAAYU"]
[Sun Apr 26 13:05:36.297611 2026] [:error] [pid 13137:tid 13158] [client 20.9.69.97:3698] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "ae2dIN0RB4J0o4h5neEv2AAAAhE"]
[Sun Apr 26 13:05:37.315223 2026] [:error] [pid 22573:tid 22619] [client 20.9.69.97:3683] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "ae2dIXB3EmQlD4yKUt-UdAAAAYw"]
[Sun Apr 26 13:05:38.284774 2026] [:error] [pid 22572:tid 22581] [client 20.9.69.97:58210] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "ae2dItXOViWCFU-pZzDRkAAAAUM"]
[Sun Apr 26 13:05:39.271688 2026] [:error] [pid 13137:tid 13164] [client 20.9.69.97:58127] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "ae2dI90RB4J0o4h5neEv2gAAAhc"]
[Sun Apr 26 13:05:40.521334 2026] [:error] [pid 22572:tid 22602] [client 20.9.69.97:56784] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/autoload_classmap.php"] [unique_id "ae2dJNXOViWCFU-pZzDRmAAAAVg"]
[Sun Apr 26 13:05:42.440576 2026] [:error] [pid 16515:tid 16518] [client 20.9.69.97:58113] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/autoload_classmap.php"] [unique_id "ae2dJltDrUmgHSvpuLwFrQAAAkA"]
[Sun Apr 26 13:05:43.086903 2026] [:error] [pid 16515:tid 16521] [client 20.9.69.97:58220] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/autoload_classmap.php"] [unique_id "ae2dJ1tDrUmgHSvpuLwFrwAAAkM"]
[Sun Apr 26 13:05:44.448082 2026] [:error] [pid 8390:tid 8470] [client 20.9.69.97:58117] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/autoload_classmap.php"] [unique_id "ae2dKIGPtFK_i9p5yxTJSgAAAJM"]
[Sun Apr 26 13:05:46.300860 2026] [:error] [pid 8491:tid 8509] [client 20.9.69.97:56795] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ae2dKiq7I7e6CJooQM3WmgAAAMo"]
[Sun Apr 26 13:05:47.847355 2026] [:error] [pid 8491:tid 8520] [client 20.9.69.97:58121] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ae2dKyq7I7e6CJooQM3WmwAAANU"]
[Sun Apr 26 13:05:49.496567 2026] [:error] [pid 8390:tid 8454] [client 20.9.69.97:56717] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ae2dLYGPtFK_i9p5yxTJVQAAAIM"]
[Sun Apr 26 13:05:50.654999 2026] [:error] [pid 22573:tid 22608] [client 20.9.69.97:58199] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ae2dLnB3EmQlD4yKUt-UgAAAAYI"]
[Sun Apr 26 13:05:51.989497 2026] [:error] [pid 8383:tid 8407] [client 20.9.69.97:56714] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ae2dL9Fa2S3EsATMdWPslwAAAAo"]
[Sun Apr 26 13:05:53.158513 2026] [:error] [pid 16515:tid 16520] [client 20.9.69.97:58139] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ae2dMVtDrUmgHSvpuLwFtgAAAkI"]
[Sun Apr 26 13:05:53.763590 2026] [:error] [pid 16515:tid 16532] [client 20.9.69.97:58174] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ae2dMVtDrUmgHSvpuLwFtwAAAk4"]
[Sun Apr 26 13:05:54.489649 2026] [:error] [pid 13137:tid 13156] [client 20.9.69.97:3664] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ae2dMt0RB4J0o4h5neEv3QAAAg8"]
[Sun Apr 26 13:05:55.412330 2026] [:error] [pid 8390:tid 8461] [client 20.9.69.97:56796] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ae2dM4GPtFK_i9p5yxTJXgAAAIo"]
[Sun Apr 26 13:05:56.200443 2026] [:error] [pid 16574:tid 16633] [client 20.9.69.97:58120] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ae2dNH5MsX8wRQr99nYYCQAAA1M"]
[Sun Apr 26 13:05:56.663217 2026] [:error] [pid 16515:tid 16525] [client 20.9.69.97:58164] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ae2dNFtDrUmgHSvpuLwFuwAAAkc"]
[Sun Apr 26 13:05:57.277695 2026] [:error] [pid 13137:tid 13159] [client 20.9.69.97:56716] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ae2dNd0RB4J0o4h5neEv3wAAAhI"]
[Sun Apr 26 13:05:57.940870 2026] [:error] [pid 13197:tid 13234] [client 20.9.69.97:58228] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "ae2dNd3kktFKdSxTrBu2VgAAAsM"]
[Sun Apr 26 13:05:58.662597 2026] [:error] [pid 13197:tid 13248] [client 20.9.69.97:58130] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "ae2dNt3kktFKdSxTrBu2WQAAAtA"]
[Sun Apr 26 13:05:59.331476 2026] [:error] [pid 8491:tid 8524] [client 20.9.69.97:58214] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "ae2dNyq7I7e6CJooQM3WqgAAANg"]
[Sun Apr 26 13:06:00.169920 2026] [:error] [pid 22573:tid 22627] [client 20.9.69.97:3651] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "ae2dOHB3EmQlD4yKUt-UhgAAAZQ"]
[Sun Apr 26 13:06:03.733091 2026] [:error] [pid 16515:tid 16537] [client 20.9.69.97:58166] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ae2dO1tDrUmgHSvpuLwFwQAAAlM"]
[Sun Apr 26 13:06:04.444793 2026] [:error] [pid 8385:tid 8428] [client 20.9.69.97:3693] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ae2dPDOy7_J84Wx3-oyjRgAAAEQ"]
[Sun Apr 26 13:06:05.748843 2026] [:error] [pid 8385:tid 8431] [client 20.9.69.97:3686] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ae2dPTOy7_J84Wx3-oyjRwAAAEc"]
[Sun Apr 26 13:06:08.392060 2026] [:error] [pid 16515:tid 16525] [client 20.9.69.97:58167] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Apr 26 13:06:09.826409 2026] [:error] [pid 16515:tid 16525] [client 20.9.69.97:58167] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Apr 26 13:06:10.208289 2026] [:error] [pid 16515:tid 16531] [client 20.9.69.97:58167] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Sun Apr 26 13:06:10.400816 2026] [:error] [pid 16515:tid 16527] [client 20.9.69.97:58167] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Sun Apr 26 13:06:10.785920 2026] [:error] [pid 16515:tid 16519] [client 20.9.69.97:58167] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php
[Sun Apr 26 13:06:11.525180 2026] [:error] [pid 16515:tid 16540] [client 20.9.69.97:58167] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ae2dQ1tDrUmgHSvpuLwFzgAAAlY"]
[Sun Apr 26 13:06:13.342286 2026] [:error] [pid 13137:tid 13143] [client 20.9.69.97:58144] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ae2dRd0RB4J0o4h5neEv8gAAAgM"]
[Sun Apr 26 13:06:15.665943 2026] [:error] [pid 22572:tid 22595] [client 20.9.69.97:3709] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ae2dR9XOViWCFU-pZzDRowAAAVE"]
[Sun Apr 26 13:06:17.599405 2026] [:error] [pid 8385:tid 8435] [client 20.9.69.97:58189] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ae2dSTOy7_J84Wx3-oyjSgAAAEs"]
[Sun Apr 26 13:06:20.250982 2026] [:error] [pid 8383:tid 8417] [client 20.9.69.97:3701] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ae2dTNFa2S3EsATMdWPsoQAAABQ"]
[Sun Apr 26 13:06:22.158780 2026] [:error] [pid 8385:tid 8439] [client 20.9.69.97:3673] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ae2dTjOy7_J84Wx3-oyjUAAAAE8"]
[Sun Apr 26 13:06:23.111352 2026] [:error] [pid 8390:tid 8475] [client 20.9.69.97:3669] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ae2dT4GPtFK_i9p5yxTJdAAAAJg"]
[Sun Apr 26 13:06:24.230094 2026] [:error] [pid 8383:tid 8407] [client 20.9.69.97:56821] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ae2dUNFa2S3EsATMdWPsogAAAAo"]
[Sun Apr 26 13:06:25.160382 2026] [:error] [pid 16515:tid 16537] [client 20.9.69.97:58114] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byp.php"] [unique_id "ae2dUVtDrUmgHSvpuLwF0QAAAlM"]
[Sun Apr 26 13:06:26.152500 2026] [:error] [pid 16515:tid 16526] [client 20.9.69.97:58197] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byp.php"] [unique_id "ae2dUltDrUmgHSvpuLwF1QAAAkg"]
[Sun Apr 26 13:06:26.813414 2026] [:error] [pid 8383:tid 8414] [client 20.9.69.97:3692] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byp.php"] [unique_id "ae2dUtFa2S3EsATMdWPspAAAABE"]
[Sun Apr 26 13:06:27.400511 2026] [:error] [pid 22572:tid 22598] [client 20.9.69.97:3655] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/byp.php"] [unique_id "ae2dU9XOViWCFU-pZzDRpwAAAVQ"]
[Sun Apr 26 13:06:28.155921 2026] [:error] [pid 22572:tid 22583] [client 20.9.69.97:56771] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "ae2dVNXOViWCFU-pZzDRqgAAAUU"]
[Sun Apr 26 13:06:28.738516 2026] [:error] [pid 22572:tid 22597] [client 20.9.69.97:58230] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "ae2dVNXOViWCFU-pZzDRrAAAAVM"]
[Sun Apr 26 13:06:29.263228 2026] [:error] [pid 8491:tid 8514] [client 20.9.69.97:3671] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "ae2dVSq7I7e6CJooQM3WuAAAAM8"]
[Sun Apr 26 13:06:29.750109 2026] [:error] [pid 22572:tid 22581] [client 20.9.69.97:56830] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "ae2dVdXOViWCFU-pZzDRrgAAAUM"]
[Sun Apr 26 13:06:30.250872 2026] [:error] [pid 8383:tid 8399] [client 20.9.69.97:3667] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.well-known/index.php"] [unique_id "ae2dVtFa2S3EsATMdWPspgAAAAI"]
[Sun Apr 26 13:06:31.021617 2026] [:error] [pid 8390:tid 8470] [client 20.9.69.97:58141] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.well-known/index.php"] [unique_id "ae2dV4GPtFK_i9p5yxTJfgAAAJM"]
[Sun Apr 26 13:06:31.937736 2026] [:error] [pid 22572:tid 22584] [client 20.9.69.97:56814] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.well-known/index.php"] [unique_id "ae2dV9XOViWCFU-pZzDRtQAAAUY"]
[Sun Apr 26 13:06:32.733746 2026] [:error] [pid 22572:tid 22601] [client 20.9.69.97:3649] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.well-known/index.php"] [unique_id "ae2dWNXOViWCFU-pZzDRtwAAAVc"]
[Sun Apr 26 13:06:33.406834 2026] [:error] [pid 8390:tid 8474] [client 20.9.69.97:3665] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "ae2dWYGPtFK_i9p5yxTJgAAAAJc"]
[Sun Apr 26 13:06:33.881796 2026] [:error] [pid 8390:tid 8472] [client 20.9.69.97:3704] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "ae2dWYGPtFK_i9p5yxTJgQAAAJU"]
[Sun Apr 26 13:06:34.417870 2026] [:error] [pid 13137:tid 13140] [client 20.9.69.97:56704] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "ae2dWt0RB4J0o4h5neEv-gAAAgA"]
[Sun Apr 26 13:06:35.133971 2026] [:error] [pid 22572:tid 22598] [client 20.9.69.97:58142] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "ae2dW9XOViWCFU-pZzDRwAAAAVQ"]
[Sun Apr 26 13:06:35.690826 2026] [:error] [pid 22572:tid 22591] [client 20.9.69.97:58138] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/about.php"] [unique_id "ae2dW9XOViWCFU-pZzDRwgAAAU0"]
[Sun Apr 26 13:06:36.825169 2026] [:error] [pid 8491:tid 8521] [client 20.9.69.97:3662] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/about.php"] [unique_id "ae2dXCq7I7e6CJooQM3WuQAAANY"]
[Sun Apr 26 13:06:37.635580 2026] [:error] [pid 22572:tid 22579] [client 20.9.69.97:58235] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/about.php"] [unique_id "ae2dXdXOViWCFU-pZzDRygAAAUE"]
[Sun Apr 26 13:06:38.611660 2026] [:error] [pid 8491:tid 8504] [client 20.9.69.97:3677] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/about.php"] [unique_id "ae2dXiq7I7e6CJooQM3WugAAAMU"]
[Sun Apr 26 13:06:39.691468 2026] [:error] [pid 22573:tid 22606] [client 20.9.69.97:56802] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gmo.php"] [unique_id "ae2dX3B3EmQlD4yKUt-UjgAAAYA"]
[Sun Apr 26 13:06:40.658714 2026] [:error] [pid 22573:tid 22627] [client 20.9.69.97:58131] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gmo.php"] [unique_id "ae2dYHB3EmQlD4yKUt-UkQAAAZQ"]
[Sun Apr 26 13:06:41.606699 2026] [:error] [pid 16515:tid 16522] [client 20.9.69.97:3691] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gmo.php"] [unique_id "ae2dYVtDrUmgHSvpuLwF2wAAAkQ"]
[Sun Apr 26 13:06:42.722955 2026] [:error] [pid 8390:tid 8467] [client 20.9.69.97:58212] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gmo.php"] [unique_id "ae2dYoGPtFK_i9p5yxTJiAAAAJA"]
[Sun Apr 26 13:06:43.576862 2026] [:error] [pid 8390:tid 8459] [client 20.9.69.97:56794] [client 20.9.69.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ae2dY4GPtFK_i9p5yxTJjAAAAIg"]
[Sun Apr 26 13:06:44.333879 2026] [:error] [pid 8390:tid 8452] [client 20.9.69.97:56736] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css/index.php"] [unique_id "ae2dZIGPtFK_i9p5yxTJjQAAAIE"]
[Sun Apr 26 13:06:45.017072 2026] [:error] [pid 8491:tid 8502] [client 20.9.69.97:56778] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css/index.php"] [unique_id "ae2dZSq7I7e6CJooQM3WvAAAAMM"]
[Sun Apr 26 13:06:45.821340 2026] [:error] [pid 8385:tid 8435] [client 20.9.69.97:56822] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css/index.php"] [unique_id "ae2dZTOy7_J84Wx3-oyjUwAAAEs"]
[Sun Apr 26 13:06:46.545810 2026] [:error] [pid 13197:tid 13246] [client 20.9.69.97:58133] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/css/index.php"] [unique_id "ae2dZt3kktFKdSxTrBu2YAAAAs4"]
[Sun Apr 26 13:06:47.724902 2026] [:error] [pid 8390:tid 8468] [client 20.9.69.97:56783] [client 20.9.69.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "ae2dZ4GPtFK_i9p5yxTJkAAAAJE"]
[Sun Apr 26 13:06:48.377652 2026] [:error] [pid 8385:tid 8440] [client 20.9.69.97:56716] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "ae2daDOy7_J84Wx3-oyjVwAAAFA"]
[Sun Apr 26 13:06:49.010960 2026] [:error] [pid 8385:tid 8437] [client 20.9.69.97:3658] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "ae2daTOy7_J84Wx3-oyjWgAAAE0"]
[Sun Apr 26 13:06:49.709584 2026] [:error] [pid 16574:tid 16627] [client 20.9.69.97:58193] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "ae2daX5MsX8wRQr99nYYEgAAA1A"]
[Sun Apr 26 13:06:50.627311 2026] [:error] [pid 8383:tid 8406] [client 20.9.69.97:58143] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "ae2datFa2S3EsATMdWPsqwAAAAk"]
[Sun Apr 26 13:06:51.179201 2026] [:error] [pid 8390:tid 8460] [client 20.9.69.97:56782] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ae2da4GPtFK_i9p5yxTJlwAAAIk"]
[Sun Apr 26 13:06:51.787825 2026] [:error] [pid 13197:tid 13240] [client 20.9.69.97:58238] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ae2da93kktFKdSxTrBu2YwAAAsk"]
[Sun Apr 26 13:06:52.387125 2026] [:error] [pid 13137:tid 13164] [client 20.9.69.97:56773] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ae2dbN0RB4J0o4h5neEwAQAAAhc"]
[Sun Apr 26 13:06:52.961033 2026] [:error] [pid 8390:tid 8474] [client 20.9.69.97:58169] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ae2dbIGPtFK_i9p5yxTJmgAAAJc"]
[Sun Apr 26 13:06:53.763398 2026] [:error] [pid 8491:tid 8510] [client 20.9.69.97:56781] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ae2dbSq7I7e6CJooQM3WvQAAAMs"]
[Sun Apr 26 13:06:54.471763 2026] [:error] [pid 8390:tid 8454] [client 20.9.69.97:56772] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ae2dboGPtFK_i9p5yxTJnwAAAIM"]
[Sun Apr 26 13:06:55.138878 2026] [:error] [pid 8390:tid 8452] [client 20.9.69.97:3659] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ae2db4GPtFK_i9p5yxTJoAAAAIE"]
[Sun Apr 26 13:06:55.747416 2026] [:error] [pid 13137:tid 13162] [client 20.9.69.97:56756] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ae2db90RB4J0o4h5neEwBgAAAhU"]
[Sun Apr 26 13:06:56.294855 2026] [:error] [pid 22572:tid 22580] [client 20.9.69.97:58147] [client 20.9.69.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "ae2dcNXOViWCFU-pZzDR1QAAAUI"]
[Sun Apr 26 13:06:56.904491 2026] [:error] [pid 16574:tid 16639] [client 20.9.69.97:58162] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "ae2dcH5MsX8wRQr99nYYEwAAA1Y"]
[Sun Apr 26 13:06:57.365317 2026] [:error] [pid 16574:tid 16623] [client 20.9.69.97:58155] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "ae2dcX5MsX8wRQr99nYYFQAAA04"]
[Sun Apr 26 13:06:58.099771 2026] [:error] [pid 8390:tid 8458] [client 20.9.69.97:3650] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "ae2dcoGPtFK_i9p5yxTJpwAAAIc"]
[Sun Apr 26 13:06:58.964619 2026] [:error] [pid 22573:tid 22611] [client 20.9.69.97:58233] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "ae2dcnB3EmQlD4yKUt-UlQAAAYU"]
[Sun Apr 26 13:06:59.615465 2026] [:error] [pid 8383:tid 8404] [client 20.9.69.97:3654] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "ae2dc9Fa2S3EsATMdWPsrwAAAAc"]
[Sun Apr 26 13:07:00.111000 2026] [:error] [pid 8390:tid 8465] [client 20.9.69.97:56799] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "ae2ddIGPtFK_i9p5yxTJqAAAAI4"]
[Sun Apr 26 13:07:00.758026 2026] [:error] [pid 8383:tid 8405] [client 20.9.69.97:56786] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "ae2ddNFa2S3EsATMdWPssAAAAAg"]
[Sun Apr 26 13:07:01.385763 2026] [:error] [pid 8390:tid 8462] [client 20.9.69.97:3675] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "ae2ddYGPtFK_i9p5yxTJrAAAAIs"]
[Sun Apr 26 13:07:01.863845 2026] [:error] [pid 8390:tid 8470] [client 20.9.69.97:3679] [client 20.9.69.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "ae2ddYGPtFK_i9p5yxTJrgAAAJM"]
[Sun Apr 26 13:07:02.496915 2026] [:error] [pid 8390:tid 8452] [client 20.9.69.97:3663] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ww1.php"] [unique_id "ae2ddoGPtFK_i9p5yxTJsAAAAIE"]
[Sun Apr 26 13:07:03.246556 2026] [:error] [pid 8390:tid 8457] [client 20.9.69.97:58223] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ww1.php"] [unique_id "ae2dd4GPtFK_i9p5yxTJsQAAAIY"]
[Sun Apr 26 13:07:04.168782 2026] [:error] [pid 8491:tid 8505] [client 20.9.69.97:56710] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ww1.php"] [unique_id "ae2deCq7I7e6CJooQM3WwgAAAMY"]
[Sun Apr 26 13:07:05.082143 2026] [:error] [pid 8491:tid 8516] [client 20.9.69.97:56732] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about/function.php"] [unique_id "ae2deSq7I7e6CJooQM3WyQAAANE"]
[Sun Apr 26 13:07:06.061098 2026] [:error] [pid 22572:tid 22591] [client 20.9.69.97:56779] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about/function.php"] [unique_id "ae2detXOViWCFU-pZzDR4gAAAU0"]
[Sun Apr 26 13:07:06.723305 2026] [:error] [pid 8385:tid 8446] [client 20.9.69.97:56705] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about/function.php"] [unique_id "ae2dejOy7_J84Wx3-oyjYwAAAFY"]
[Sun Apr 26 13:07:07.272940 2026] [:error] [pid 8385:tid 8439] [client 20.9.69.97:56827] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about/function.php"] [unique_id "ae2dezOy7_J84Wx3-oyjZQAAAE8"]
[Sun Apr 26 13:07:07.870760 2026] [:error] [pid 8491:tid 8507] [client 20.9.69.97:58119] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/function.php"] [unique_id "ae2deyq7I7e6CJooQM3W5QAAAMg"]
[Sun Apr 26 13:07:08.585976 2026] [:error] [pid 8491:tid 8501] [client 20.9.69.97:3660] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/function.php"] [unique_id "ae2dfCq7I7e6CJooQM3W7gAAAMI"]
[Sun Apr 26 13:07:09.252484 2026] [:error] [pid 8385:tid 8438] [client 20.9.69.97:56718] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/function.php"] [unique_id "ae2dfTOy7_J84Wx3-oyjcQAAAE4"]
[Sun Apr 26 13:07:09.940121 2026] [:error] [pid 8385:tid 8448] [client 20.9.69.97:56713] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/function.php"] [unique_id "ae2dfTOy7_J84Wx3-oyjdgAAAFg"]
[Sun Apr 26 13:07:10.555133 2026] [:error] [pid 22572:tid 22596] [client 20.9.69.97:3694] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ae2dftXOViWCFU-pZzDR-AAAAVI"]
[Sun Apr 26 13:07:11.646534 2026] [:error] [pid 22572:tid 22582] [client 20.9.69.97:58186] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sun Apr 26 13:07:12.043813 2026] [:error] [pid 22572:tid 22584] [client 20.9.69.97:58186] File does not exist: /usr/local/apache/htdocs/suspended-page/security.php
[Sun Apr 26 13:07:12.803363 2026] [:error] [pid 22572:tid 22585] [client 20.9.69.97:58186] [client 20.9.69.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "ae2dgNXOViWCFU-pZzDSCAAAAUc"]
[Sun Apr 26 13:07:14.367701 2026] [:error] [pid 13137:tid 13140] [client 20.9.69.97:56816] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "ae2dgt0RB4J0o4h5neEwDwAAAgA"]
[Sun Apr 26 13:07:14.811198 2026] [:error] [pid 8390:tid 8471] [client 20.9.69.97:56818] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "ae2dgoGPtFK_i9p5yxTJywAAAJQ"]
[Sun Apr 26 13:07:15.322045 2026] [:error] [pid 22572:tid 22598] [client 20.9.69.97:56797] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "ae2dg9XOViWCFU-pZzDSCQAAAVQ"]
[Sun Apr 26 13:07:15.734180 2026] [:error] [pid 22572:tid 22599] [client 20.9.69.97:56806] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "ae2dg9XOViWCFU-pZzDSCwAAAVU"]
[Sun Apr 26 13:07:16.189337 2026] [:error] [pid 22573:tid 22627] [client 20.9.69.97:58160] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.well-known/log.php"] [unique_id "ae2dhHB3EmQlD4yKUt-UmAAAAZQ"]
[Sun Apr 26 13:07:16.684493 2026] [:error] [pid 22573:tid 22608] [client 20.9.69.97:56762] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.well-known/log.php"] [unique_id "ae2dhHB3EmQlD4yKUt-UmQAAAYI"]
[Sun Apr 26 13:07:17.183118 2026] [:error] [pid 22573:tid 22623] [client 20.9.69.97:56829] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.well-known/log.php"] [unique_id "ae2dhXB3EmQlD4yKUt-UmgAAAZA"]
[Sun Apr 26 13:07:17.903391 2026] [:error] [pid 22573:tid 22630] [client 20.9.69.97:58219] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.well-known/log.php"] [unique_id "ae2dhXB3EmQlD4yKUt-UmwAAAZc"]
[Sun Apr 26 13:07:18.629541 2026] [:error] [pid 8390:tid 8456] [client 20.9.69.97:3708] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ae2dhoGPtFK_i9p5yxTJzQAAAIU"]
[Sun Apr 26 13:07:19.182107 2026] [:error] [pid 8390:tid 8470] [client 20.9.69.97:58213] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ae2dh4GPtFK_i9p5yxTJ0AAAAJM"]
[Sun Apr 26 13:07:19.691699 2026] [:error] [pid 8390:tid 8466] [client 20.9.69.97:56807] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ae2dh4GPtFK_i9p5yxTJ0gAAAI8"]
[Sun Apr 26 13:07:20.426834 2026] [:error] [pid 16515:tid 16541] [client 20.9.69.97:3707] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ae2diFtDrUmgHSvpuLwF4AAAAlc"]
[Sun Apr 26 13:07:20.942984 2026] [:error] [pid 22573:tid 22619] [client 20.9.69.97:56823] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless5.php"] [unique_id "ae2diHB3EmQlD4yKUt-UnQAAAYw"]
[Sun Apr 26 13:07:21.340903 2026] [:error] [pid 8390:tid 8474] [client 20.9.69.97:3697] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless5.php"] [unique_id "ae2diYGPtFK_i9p5yxTJ1gAAAJc"]
[Sun Apr 26 13:07:21.778734 2026] [:error] [pid 8385:tid 8431] [client 20.9.69.97:56793] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless5.php"] [unique_id "ae2diTOy7_J84Wx3-oyjeQAAAEc"]
[Sun Apr 26 13:07:22.261348 2026] [:error] [pid 8390:tid 8460] [client 20.9.69.97:3672] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless5.php"] [unique_id "ae2dioGPtFK_i9p5yxTJ2wAAAIk"]
[Sun Apr 26 13:07:22.949879 2026] [:error] [pid 16515:tid 16524] [client 20.9.69.97:56826] [client 20.9.69.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ae2diltDrUmgHSvpuLwF4gAAAkY"]
[Sun Apr 26 13:07:23.436581 2026] [:error] [pid 22573:tid 22625] [client 20.9.69.97:56812] [client 20.9.69.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "ae2di3B3EmQlD4yKUt-UoAAAAZI"]
[Sun Apr 26 13:07:24.165973 2026] [:error] [pid 8390:tid 8461] [client 20.9.69.97:56744] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "ae2djIGPtFK_i9p5yxTJ3wAAAIo"]
[Sun Apr 26 13:07:24.742530 2026] [:error] [pid 8390:tid 8465] [client 20.9.69.97:56764] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "ae2djIGPtFK_i9p5yxTJ4gAAAI4"]
[Sun Apr 26 13:07:25.489082 2026] [:error] [pid 8390:tid 8471] [client 20.9.69.97:56791] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "ae2djYGPtFK_i9p5yxTJ5QAAAJQ"]
[Sun Apr 26 13:07:26.077395 2026] [:error] [pid 16515:tid 16533] [client 20.9.69.97:3687] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "ae2djltDrUmgHSvpuLwF5wAAAk8"]
[Sun Apr 26 13:07:26.573887 2026] [:error] [pid 8390:tid 8467] [client 20.9.69.97:56729] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "ae2djoGPtFK_i9p5yxTJ6QAAAJA"]
[Sun Apr 26 13:07:27.067777 2026] [:error] [pid 8390:tid 8473] [client 20.9.69.97:58192] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "ae2dj4GPtFK_i9p5yxTJ7QAAAJY"]
[Sun Apr 26 13:07:27.620614 2026] [:error] [pid 8390:tid 8471] [client 20.9.69.97:56817] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "ae2dj4GPtFK_i9p5yxTJ7gAAAJQ"]
[Sun Apr 26 13:07:28.531151 2026] [:error] [pid 16515:tid 16541] [client 20.9.69.97:3699] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "ae2dkFtDrUmgHSvpuLwF6wAAAlc"]
[Sun Apr 26 13:07:29.065863 2026] [:error] [pid 8390:tid 8454] [client 20.9.69.97:56808] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o1.php"] [unique_id "ae2dkYGPtFK_i9p5yxTJ8wAAAIM"]
[Sun Apr 26 13:07:29.927582 2026] [:error] [pid 8390:tid 8462] [client 20.9.69.97:56777] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o1.php"] [unique_id "ae2dkYGPtFK_i9p5yxTJ9wAAAIs"]
[Sun Apr 26 13:07:30.417687 2026] [:error] [pid 8390:tid 8457] [client 20.9.69.97:56741] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o1.php"] [unique_id "ae2dkoGPtFK_i9p5yxTJ-gAAAIY"]
[Sun Apr 26 13:07:31.063949 2026] [:error] [pid 8390:tid 8451] [client 20.9.69.97:4035] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o1.php"] [unique_id "ae2dk4GPtFK_i9p5yxTJ_QAAAIA"]
[Sun Apr 26 13:07:31.963846 2026] [:error] [pid 13137:tid 13148] [client 20.9.69.97:56748] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/juuuu.php"] [unique_id "ae2dk90RB4J0o4h5neEwEAAAAgg"]
[Sun Apr 26 13:07:33.110290 2026] [:error] [pid 22573:tid 22629] [client 20.9.69.97:4033] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/juuuu.php"] [unique_id "ae2dlXB3EmQlD4yKUt-UogAAAZY"]
[Sun Apr 26 13:07:33.625355 2026] [:error] [pid 8491:tid 8504] [client 20.9.69.97:56769] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/juuuu.php"] [unique_id "ae2dlSq7I7e6CJooQM3XDgAAAMU"]
[Sun Apr 26 13:07:34.356931 2026] [:error] [pid 8390:tid 8471] [client 20.9.69.97:56737] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/juuuu.php"] [unique_id "ae2dloGPtFK_i9p5yxTKAgAAAJQ"]
[Sun Apr 26 13:07:35.280537 2026] [:error] [pid 8390:tid 8459] [client 20.9.69.97:56805] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ha.php"] [unique_id "ae2dl4GPtFK_i9p5yxTKBgAAAIg"]
[Sun Apr 26 13:07:36.161129 2026] [:error] [pid 13197:tid 13239] [client 20.9.69.97:4032] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ha.php"] [unique_id "ae2dmN3kktFKdSxTrBu2ZQAAAsg"]
[Sun Apr 26 13:07:37.067397 2026] [:error] [pid 13197:tid 13234] [client 20.9.69.97:58178] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ha.php"] [unique_id "ae2dmd3kktFKdSxTrBu2ZwAAAsM"]
[Sun Apr 26 13:07:38.393738 2026] [:error] [pid 22573:tid 22629] [client 20.9.69.97:56711] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ha.php"] [unique_id "ae2dmnB3EmQlD4yKUt-UpwAAAZY"]
[Sun Apr 26 13:07:39.872918 2026] [:error] [pid 13137:tid 13151] [client 20.9.69.97:56809] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "ae2dm90RB4J0o4h5neEwFgAAAgo"]
[Sun Apr 26 13:07:40.889254 2026] [:error] [pid 22573:tid 22610] [client 20.9.69.97:56726] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "ae2dnHB3EmQlD4yKUt-UxwAAAYQ"]
[Sun Apr 26 13:07:41.915874 2026] [:error] [pid 22572:tid 22597] [client 20.9.69.97:3680] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "ae2dndXOViWCFU-pZzDSFAAAAVM"]
[Sun Apr 26 13:07:42.653241 2026] [:error] [pid 13137:tid 13164] [client 20.9.69.97:56811] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "ae2dnt0RB4J0o4h5neEwGAAAAhc"]
[Sun Apr 26 13:07:43.061107 2026] [:error] [pid 13137:tid 13160] [client 20.9.69.97:3696] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "ae2dn90RB4J0o4h5neEwGQAAAhM"]
[Sun Apr 26 13:07:43.609961 2026] [:error] [pid 22572:tid 22594] [client 20.9.69.97:58161] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "ae2dn9XOViWCFU-pZzDSFgAAAVA"]
[Sun Apr 26 13:07:44.064586 2026] [:error] [pid 22572:tid 22592] [client 20.9.69.97:56815] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "ae2doNXOViWCFU-pZzDSGAAAAU4"]
[Sun Apr 26 13:07:44.654300 2026] [:error] [pid 22572:tid 22602] [client 20.9.69.97:56723] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "ae2doNXOViWCFU-pZzDSGgAAAVg"]
[Sun Apr 26 13:07:45.158628 2026] [:error] [pid 13197:tid 13248] [client 20.9.69.97:3695] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/04.php"] [unique_id "ae2dod3kktFKdSxTrBu2aQAAAtA"]
[Sun Apr 26 13:07:46.092661 2026] [:error] [pid 16574:tid 16605] [client 20.9.69.97:56724] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/04.php"] [unique_id "ae2don5MsX8wRQr99nYYHQAAA0E"]
[Sun Apr 26 13:07:46.958380 2026] [:error] [pid 16574:tid 16641] [client 20.9.69.97:56787] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/04.php"] [unique_id "ae2don5MsX8wRQr99nYYHgAAA1c"]
[Sun Apr 26 13:07:47.494060 2026] [:error] [pid 22572:tid 22585] [client 20.9.69.97:3689] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/04.php"] [unique_id "ae2do9XOViWCFU-pZzDSHgAAAUc"]
[Sun Apr 26 13:07:48.299765 2026] [:error] [pid 8491:tid 8506] [client 20.9.69.97:56819] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "ae2dpCq7I7e6CJooQM3XFwAAAMc"]
[Sun Apr 26 13:07:48.935468 2026] [:error] [pid 8383:tid 8413] [client 20.9.69.97:58170] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "ae2dpNFa2S3EsATMdWPsvQAAABA"]
[Sun Apr 26 13:07:49.771457 2026] [:error] [pid 16515:tid 16532] [client 20.9.69.97:56792] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "ae2dpVtDrUmgHSvpuLwF7QAAAk4"]
[Sun Apr 26 13:07:50.352779 2026] [:error] [pid 22573:tid 22607] [client 20.9.69.97:4089] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "ae2dpnB3EmQlD4yKUt-UzwAAAYE"]
[Sun Apr 26 13:07:50.874008 2026] [:error] [pid 13137:tid 13141] [client 20.9.69.97:56742] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/520.php"] [unique_id "ae2dpt0RB4J0o4h5neEwHQAAAgE"]
[Sun Apr 26 13:07:51.390485 2026] [:error] [pid 8385:tid 8426] [client 20.9.69.97:56798] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/520.php"] [unique_id "ae2dpzOy7_J84Wx3-oyjfwAAAEI"]
[Sun Apr 26 13:07:51.947899 2026] [:error] [pid 8385:tid 8437] [client 20.9.69.97:3670] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/520.php"] [unique_id "ae2dpzOy7_J84Wx3-oyjgQAAAE0"]
[Sun Apr 26 13:07:52.491643 2026] [:error] [pid 22572:tid 22599] [client 20.9.69.97:56751] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/520.php"] [unique_id "ae2dqNXOViWCFU-pZzDSIAAAAVU"]
[Sun Apr 26 13:07:53.128562 2026] [:error] [pid 22572:tid 22586] [client 20.9.69.97:56758] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ar.php"] [unique_id "ae2dqdXOViWCFU-pZzDSIgAAAUg"]
[Sun Apr 26 13:07:53.622023 2026] [:error] [pid 13137:tid 13147] [client 20.9.69.97:56790] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ar.php"] [unique_id "ae2dqd0RB4J0o4h5neEwIQAAAgc"]
[Sun Apr 26 13:07:54.052823 2026] [:error] [pid 22573:tid 22611] [client 20.9.69.97:56800] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ar.php"] [unique_id "ae2dqnB3EmQlD4yKUt-U0gAAAYU"]
[Sun Apr 26 13:07:54.591182 2026] [:error] [pid 22573:tid 22631] [client 20.9.69.97:4058] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ar.php"] [unique_id "ae2dqnB3EmQlD4yKUt-U1QAAAZg"]
[Sun Apr 26 13:07:55.047869 2026] [:error] [pid 8390:tid 8453] [client 20.9.69.97:56765] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x.php"] [unique_id "ae2dq4GPtFK_i9p5yxTKGQAAAII"]
[Sun Apr 26 13:07:55.440927 2026] [:error] [pid 8390:tid 8464] [client 20.9.69.97:58201] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x.php"] [unique_id "ae2dq4GPtFK_i9p5yxTKGwAAAI0"]
[Sun Apr 26 13:07:55.857861 2026] [:error] [pid 13137:tid 13144] [client 20.9.69.97:56753] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x.php"] [unique_id "ae2dq90RB4J0o4h5neEwIwAAAgQ"]
[Sun Apr 26 13:07:56.476245 2026] [:error] [pid 8385:tid 8428] [client 20.9.69.97:56735] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x.php"] [unique_id "ae2drDOy7_J84Wx3-oyjhQAAAEQ"]
[Sun Apr 26 13:07:57.022534 2026] [:error] [pid 22573:tid 22626] [client 20.9.69.97:4061] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xx.php"] [unique_id "ae2drXB3EmQlD4yKUt-U2QAAAZM"]
[Sun Apr 26 13:07:57.690338 2026] [:error] [pid 8385:tid 8427] [client 20.9.69.97:4034] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xx.php"] [unique_id "ae2drTOy7_J84Wx3-oyjhgAAAEM"]
[Sun Apr 26 13:07:58.334841 2026] [:error] [pid 8390:tid 8474] [client 20.9.69.97:56738] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xx.php"] [unique_id "ae2droGPtFK_i9p5yxTKIAAAAJc"]
[Sun Apr 26 13:07:58.912075 2026] [:error] [pid 22573:tid 22617] [client 20.9.69.97:56776] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xx.php"] [unique_id "ae2drnB3EmQlD4yKUt-U2gAAAYo"]
[Sun Apr 26 13:07:59.545828 2026] [:error] [pid 8385:tid 8434] [client 20.9.69.97:4077] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass4.php"] [unique_id "ae2drzOy7_J84Wx3-oyjiAAAAEo"]
[Sun Apr 26 13:08:00.042490 2026] [:error] [pid 13137:tid 13159] [client 20.9.69.97:56788] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass4.php"] [unique_id "ae2dsN0RB4J0o4h5neEwKQAAAhI"]
[Sun Apr 26 13:08:00.522379 2026] [:error] [pid 8385:tid 8442] [client 20.9.69.97:56733] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass4.php"] [unique_id "ae2dsDOy7_J84Wx3-oyjiQAAAFI"]
[Sun Apr 26 13:08:01.025052 2026] [:error] [pid 8385:tid 8443] [client 20.9.69.97:58150] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass4.php"] [unique_id "ae2dsTOy7_J84Wx3-oyjigAAAFM"]
[Sun Apr 26 13:08:01.503942 2026] [:error] [pid 13137:tid 13149] [client 20.9.69.97:4037] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2clas.php"] [unique_id "ae2dsd0RB4J0o4h5neEwKgAAAgk"]
[Sun Apr 26 13:08:01.942197 2026] [:error] [pid 8385:tid 8447] [client 20.9.69.97:56825] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2clas.php"] [unique_id "ae2dsTOy7_J84Wx3-oyjiwAAAFc"]
[Sun Apr 26 13:08:02.403953 2026] [:error] [pid 8390:tid 8465] [client 20.9.69.97:56755] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2clas.php"] [unique_id "ae2dsoGPtFK_i9p5yxTKIQAAAI4"]
[Sun Apr 26 13:08:02.858478 2026] [:error] [pid 22573:tid 22612] [client 20.9.69.97:3674] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2clas.php"] [unique_id "ae2dsnB3EmQlD4yKUt-U4AAAAYY"]
[Sun Apr 26 13:08:03.344687 2026] [:error] [pid 8390:tid 8454] [client 20.9.69.97:56800] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ave.php"] [unique_id "ae2ds4GPtFK_i9p5yxTKIwAAAIM"]
[Sun Apr 26 13:08:03.841182 2026] [:error] [pid 13137:tid 13158] [client 20.9.69.97:4040] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ave.php"] [unique_id "ae2ds90RB4J0o4h5neEwLQAAAhE"]
[Sun Apr 26 13:08:04.279835 2026] [:error] [pid 16574:tid 16605] [client 20.9.69.97:56749] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ave.php"] [unique_id "ae2dtH5MsX8wRQr99nYYJQAAA0E"]
[Sun Apr 26 13:08:10.791730 2026] [:error] [pid 16515:tid 16522] [client 20.9.69.97:3653] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ave.php"] [unique_id "ae2dultDrUmgHSvpuLwF9QAAAkQ"]
[Sun Apr 26 13:08:11.610685 2026] [:error] [pid 16515:tid 16530] [client 20.9.69.97:4005] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wrt.php"] [unique_id "ae2du1tDrUmgHSvpuLwF-AAAAkw"]
[Sun Apr 26 13:08:13.133916 2026] [:error] [pid 8385:tid 8424] [client 20.9.69.97:58152] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wrt.php"] [unique_id "ae2dvTOy7_J84Wx3-oyjkAAAAEA"]
[Sun Apr 26 13:08:14.014487 2026] [:error] [pid 8491:tid 8500] [client 20.9.69.97:58190] File does not exist: /usr/local/apache/htdocs/suspended-page/wrt.php
[Sun Apr 26 13:08:14.243838 2026] [:error] [pid 8491:tid 8505] [client 20.9.69.97:58190] File does not exist: /usr/local/apache/htdocs/suspended-page/bibil.php
[Sun Apr 26 13:08:14.442221 2026] [:error] [pid 8491:tid 8509] [client 20.9.69.97:58190] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sun Apr 26 13:08:14.631019 2026] [:error] [pid 8491:tid 8523] [client 20.9.69.97:58190] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Sun Apr 26 13:08:15.163988 2026] [:error] [pid 8491:tid 8520] [client 20.9.69.97:58190] File does not exist: /usr/local/apache/htdocs/suspended-page/file7.php
[Sun Apr 26 13:08:15.797357 2026] [:error] [pid 8491:tid 8508] [client 20.9.69.97:58190] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Apr 26 13:08:16.180820 2026] [:error] [pid 8491:tid 8503] [client 20.9.69.97:58190] File does not exist: /usr/local/apache/htdocs/suspended-page/nox.php
[Sun Apr 26 13:08:16.369351 2026] [:error] [pid 8491:tid 8501] [client 20.9.69.97:58190] File does not exist: /usr/local/apache/htdocs/suspended-page/file48.php
[Sun Apr 26 13:08:16.572764 2026] [:error] [pid 8491:tid 8511] [client 20.9.69.97:58190] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Apr 26 13:08:16.811405 2026] [:error] [pid 8491:tid 8521] [client 20.9.69.97:58190] File does not exist: /usr/local/apache/htdocs/suspended-page/class9.php
[Sun Apr 26 13:08:17.005339 2026] [:error] [pid 8491:tid 8506] [client 20.9.69.97:58190] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/la.php"] [unique_id "ae2dwSq7I7e6CJooQM3XKAAAAMc"]
[Sun Apr 26 13:08:18.193020 2026] [:error] [pid 22573:tid 22610] [client 20.9.69.97:58221] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/la.php"] [unique_id "ae2dwnB3EmQlD4yKUt-U5gAAAYQ"]
[Sun Apr 26 13:08:18.897788 2026] [:error] [pid 22573:tid 22628] [client 20.9.69.97:58140] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/la.php"] [unique_id "ae2dwnB3EmQlD4yKUt-U6QAAAZU"]
[Sun Apr 26 13:08:19.685866 2026] [:error] [pid 22573:tid 22609] [client 20.9.69.97:3972] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/la.php"] [unique_id "ae2dw3B3EmQlD4yKUt-U7AAAAYM"]
[Sun Apr 26 13:08:20.405208 2026] [:error] [pid 22573:tid 22617] [client 20.9.69.97:4042] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ae2dxHB3EmQlD4yKUt-U7QAAAYo"]
[Sun Apr 26 13:08:20.826788 2026] [:error] [pid 22573:tid 22630] [client 20.9.69.97:56774] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ae2dxHB3EmQlD4yKUt-U8QAAAZc"]
[Sun Apr 26 13:08:21.280100 2026] [:error] [pid 22573:tid 22607] [client 20.9.69.97:56761] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ae2dxXB3EmQlD4yKUt-U8wAAAYE"]
[Sun Apr 26 13:08:21.699338 2026] [:error] [pid 22573:tid 22631] [client 20.9.69.97:56767] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ae2dxXB3EmQlD4yKUt-U9QAAAZg"]
[Sun Apr 26 13:08:22.142219 2026] [:error] [pid 22573:tid 22627] [client 20.9.69.97:56804] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccou.php"] [unique_id "ae2dxnB3EmQlD4yKUt-U9wAAAZQ"]
[Sun Apr 26 13:08:22.657681 2026] [:error] [pid 22573:tid 22612] [client 20.9.69.97:4045] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccou.php"] [unique_id "ae2dxnB3EmQlD4yKUt-U-gAAAYY"]
[Sun Apr 26 13:08:23.188618 2026] [:error] [pid 22573:tid 22619] [client 20.9.69.97:58225] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccou.php"] [unique_id "ae2dx3B3EmQlD4yKUt-U_QAAAYw"]
[Sun Apr 26 13:08:23.609657 2026] [:error] [pid 22573:tid 22617] [client 20.9.69.97:58123] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccou.php"] [unique_id "ae2dx3B3EmQlD4yKUt-VAQAAAYo"]
[Sun Apr 26 13:08:24.326390 2026] [:error] [pid 22573:tid 22620] [client 20.9.69.97:4026] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ae2dyHB3EmQlD4yKUt-VAwAAAY0"]
[Sun Apr 26 13:08:25.063868 2026] [:error] [pid 22573:tid 22629] [client 20.9.69.97:4070] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ae2dyXB3EmQlD4yKUt-VBgAAAZY"]
[Sun Apr 26 13:08:25.767940 2026] [:error] [pid 22573:tid 22630] [client 20.9.69.97:3666] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ae2dyXB3EmQlD4yKUt-VCwAAAZc"]
[Sun Apr 26 13:08:26.696156 2026] [:error] [pid 22573:tid 22610] [client 20.9.69.97:3976] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ae2dynB3EmQlD4yKUt-VEgAAAYQ"]
[Sun Apr 26 13:08:27.612673 2026] [:error] [pid 22573:tid 22629] [client 20.9.69.97:56722] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ae2dy3B3EmQlD4yKUt-VGAAAAZY"]
[Sun Apr 26 13:08:28.369698 2026] [:error] [pid 22572:tid 22593] [client 20.9.69.97:4066] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ae2dzNXOViWCFU-pZzDSLQAAAU8"]
[Sun Apr 26 13:08:29.349641 2026] [:error] [pid 22572:tid 22583] [client 20.9.69.97:56707] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ae2dzdXOViWCFU-pZzDSLgAAAUU"]
[Sun Apr 26 13:08:30.024364 2026] [:error] [pid 8390:tid 8452] [client 20.9.69.97:3676] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ae2dzoGPtFK_i9p5yxTKLQAAAIE"]
[Sun Apr 26 13:08:31.311544 2026] [:error] [pid 8390:tid 8463] [client 20.9.69.97:4064] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file9.php"] [unique_id "ae2dz4GPtFK_i9p5yxTKLwAAAIw"]
[Sun Apr 26 13:08:32.607462 2026] [:error] [pid 8390:tid 8467] [client 20.9.69.97:56813] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file9.php"] [unique_id "ae2d0IGPtFK_i9p5yxTKNAAAAJA"]
[Sun Apr 26 13:08:33.629519 2026] [:error] [pid 16515:tid 16520] [client 20.9.69.97:3700] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file9.php"] [unique_id "ae2d0VtDrUmgHSvpuLwF_AAAAkI"]
[Sun Apr 26 13:08:35.029009 2026] [:error] [pid 22572:tid 22580] [client 20.9.69.97:56706] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file9.php"] [unique_id "ae2d09XOViWCFU-pZzDSMAAAAUI"]
[Sun Apr 26 13:08:37.112723 2026] [:error] [pid 22572:tid 22579] [client 20.9.69.97:58182] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ac.php"] [unique_id "ae2d1dXOViWCFU-pZzDSMwAAAUE"]
[Sun Apr 26 13:08:38.290979 2026] [:error] [pid 8390:tid 8467] [client 20.9.69.97:56760] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ac.php"] [unique_id "ae2d1oGPtFK_i9p5yxTKNwAAAJA"]
[Sun Apr 26 13:08:39.805484 2026] [:error] [pid 8491:tid 8504] [client 20.9.69.97:56720] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ac.php"] [unique_id "ae2d1yq7I7e6CJooQM3XKwAAAMU"]
[Sun Apr 26 13:08:40.750932 2026] [:error] [pid 8491:tid 8512] [client 20.9.69.97:56801] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ac.php"] [unique_id "ae2d2Cq7I7e6CJooQM3XLAAAAM0"]
[Sun Apr 26 13:08:41.355971 2026] [:error] [pid 8491:tid 8500] [client 20.9.69.97:3971] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ae2d2Sq7I7e6CJooQM3XLQAAAME"]
[Sun Apr 26 13:08:42.180551 2026] [:error] [pid 22573:tid 22611] [client 20.9.69.97:3711] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ae2d2nB3EmQlD4yKUt-VKgAAAYU"]
[Sun Apr 26 13:08:42.841668 2026] [:error] [pid 22572:tid 22593] [client 20.9.69.97:4036] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ae2d2tXOViWCFU-pZzDSNwAAAU8"]
[Sun Apr 26 13:08:43.364009 2026] [:error] [pid 8383:tid 8408] [client 20.9.69.97:58215] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ae2d29Fa2S3EsATMdWPsyAAAAAs"]
[Sun Apr 26 13:08:43.844873 2026] [:error] [pid 8385:tid 8427] [client 20.9.69.97:3984] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pop.php"] [unique_id "ae2d2zOy7_J84Wx3-oyjmwAAAEM"]
[Sun Apr 26 13:08:45.069356 2026] [:error] [pid 22572:tid 22588] [client 20.9.69.97:58145] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pop.php"] [unique_id "ae2d3dXOViWCFU-pZzDSOQAAAUo"]
[Sun Apr 26 13:08:45.631261 2026] [:error] [pid 16515:tid 16533] [client 20.9.69.97:56785] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pop.php"] [unique_id "ae2d3VtDrUmgHSvpuLwF_wAAAk8"]
[Sun Apr 26 13:08:46.600371 2026] [:error] [pid 8390:tid 8471] [client 20.9.69.97:56768] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pop.php"] [unique_id "ae2d3oGPtFK_i9p5yxTKRwAAAJQ"]
[Sun Apr 26 13:08:47.018941 2026] [:error] [pid 8390:tid 8468] [client 20.9.69.97:4078] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/az.php"] [unique_id "ae2d34GPtFK_i9p5yxTKSAAAAJE"]
[Sun Apr 26 13:08:47.450947 2026] [:error] [pid 8390:tid 8460] [client 20.9.69.97:3999] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/az.php"] [unique_id "ae2d34GPtFK_i9p5yxTKTQAAAIk"]
[Sun Apr 26 13:08:48.115976 2026] [:error] [pid 22572:tid 22578] [client 20.9.69.97:56731] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/az.php"] [unique_id "ae2d4NXOViWCFU-pZzDSOwAAAUA"]
[Sun Apr 26 13:08:48.783961 2026] [:error] [pid 22572:tid 22589] [client 20.9.69.97:56727] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/az.php"] [unique_id "ae2d4NXOViWCFU-pZzDSPQAAAUs"]
[Sun Apr 26 13:08:49.442650 2026] [:error] [pid 16515:tid 16539] [client 20.9.69.97:56719] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xaz.php"] [unique_id "ae2d4VtDrUmgHSvpuLwGAwAAAlU"]
[Sun Apr 26 13:08:50.164677 2026] [:error] [pid 16515:tid 16542] [client 20.9.69.97:56715] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xaz.php"] [unique_id "ae2d4ltDrUmgHSvpuLwGCAAAAlg"]
[Sun Apr 26 13:08:50.699974 2026] [:error] [pid 13137:tid 13140] [client 20.9.69.97:56730] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xaz.php"] [unique_id "ae2d4t0RB4J0o4h5neEwPgAAAgA"]
[Sun Apr 26 13:08:51.363860 2026] [:error] [pid 13137:tid 13143] [client 20.9.69.97:58185] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xaz.php"] [unique_id "ae2d490RB4J0o4h5neEwQgAAAgM"]
[Sun Apr 26 13:08:52.037500 2026] [:error] [pid 16515:tid 16520] [client 20.9.69.97:4041] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/up4.php"] [unique_id "ae2d5FtDrUmgHSvpuLwGCQAAAkI"]
[Sun Apr 26 13:08:52.663047 2026] [:error] [pid 13197:tid 13233] [client 20.9.69.97:58134] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/up4.php"] [unique_id "ae2d5N3kktFKdSxTrBu2eAAAAsI"]
[Sun Apr 26 13:08:53.236464 2026] [:error] [pid 22572:tid 22593] [client 20.9.69.97:3705] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/up4.php"] [unique_id "ae2d5dXOViWCFU-pZzDSQAAAAU8"]
[Sun Apr 26 13:08:53.843726 2026] [:error] [pid 8385:tid 8440] [client 20.9.69.97:58118] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/up4.php"] [unique_id "ae2d5TOy7_J84Wx3-oyjoAAAAFA"]
[Sun Apr 26 13:08:54.450791 2026] [:error] [pid 8491:tid 8516] [client 20.9.69.97:3656] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1aa.php"] [unique_id "ae2d5iq7I7e6CJooQM3XNAAAANE"]
[Sun Apr 26 13:08:55.410983 2026] [:error] [pid 16574:tid 16627] [client 20.9.69.97:3706] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1aa.php"] [unique_id "ae2d535MsX8wRQr99nYYLQAAA1A"]
[Sun Apr 26 13:08:56.321306 2026] [:error] [pid 16515:tid 16533] [client 20.9.69.97:3710] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1aa.php"] [unique_id "ae2d6FtDrUmgHSvpuLwGCgAAAk8"]
[Sun Apr 26 13:08:57.096324 2026] [:error] [pid 13137:tid 13148] [client 20.9.69.97:58135] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1aa.php"] [unique_id "ae2d6d0RB4J0o4h5neEwRgAAAgg"]
[Sun Apr 26 13:08:57.970390 2026] [:error] [pid 13137:tid 13165] [client 20.9.69.97:58204] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "ae2d6d0RB4J0o4h5neEwSQAAAhg"]
[Sun Apr 26 13:08:58.521796 2026] [:error] [pid 13137:tid 13147] [client 20.9.69.97:58183] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "ae2d6t0RB4J0o4h5neEwSgAAAgc"]
[Sun Apr 26 13:08:58.945666 2026] [:error] [pid 13137:tid 13163] [client 20.9.69.97:58148] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "ae2d6t0RB4J0o4h5neEwTAAAAhY"]
[Sun Apr 26 13:08:59.428460 2026] [:error] [pid 16515:tid 16527] [client 20.9.69.97:56740] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "ae2d61tDrUmgHSvpuLwGDQAAAkk"]
[Sun Apr 26 13:08:59.869953 2026] [:error] [pid 13137:tid 13151] [client 20.9.69.97:3975] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtz.php"] [unique_id "ae2d690RB4J0o4h5neEwTQAAAgo"]
[Sun Apr 26 13:09:00.396740 2026] [:error] [pid 22572:tid 22587] [client 20.9.69.97:58217] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtz.php"] [unique_id "ae2d7NXOViWCFU-pZzDSSQAAAUk"]
[Sun Apr 26 13:09:00.953172 2026] [:error] [pid 13137:tid 13164] [client 20.9.69.97:4030] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtz.php"] [unique_id "ae2d7N0RB4J0o4h5neEwTwAAAhc"]
[Sun Apr 26 13:09:01.636675 2026] [:error] [pid 22572:tid 22597] [client 20.9.69.97:4048] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtz.php"] [unique_id "ae2d7dXOViWCFU-pZzDSSwAAAVM"]
[Sun Apr 26 13:09:02.117012 2026] [:error] [pid 22572:tid 22581] [client 20.9.69.97:58183] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/galex.php"] [unique_id "ae2d7tXOViWCFU-pZzDSTQAAAUM"]
[Sun Apr 26 13:09:02.553887 2026] [:error] [pid 8390:tid 8452] [client 20.9.69.97:56824] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/galex.php"] [unique_id "ae2d7oGPtFK_i9p5yxTKVwAAAIE"]
[Sun Apr 26 13:09:03.250256 2026] [:error] [pid 8390:tid 8467] [client 20.9.69.97:58237] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/galex.php"] [unique_id "ae2d74GPtFK_i9p5yxTKWAAAAJA"]
[Sun Apr 26 13:09:03.947522 2026] [:error] [pid 22572:tid 22587] [client 20.9.69.97:58172] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/galex.php"] [unique_id "ae2d79XOViWCFU-pZzDSUgAAAUk"]
[Sun Apr 26 13:09:04.981095 2026] [:error] [pid 22572:tid 22581] [client 20.9.69.97:3969] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xb.php"] [unique_id "ae2d8NXOViWCFU-pZzDSVgAAAUM"]
[Sun Apr 26 13:09:05.860638 2026] [:error] [pid 8390:tid 8458] [client 20.9.69.97:58209] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xb.php"] [unique_id "ae2d8YGPtFK_i9p5yxTKXAAAAIc"]
[Sun Apr 26 13:09:06.640516 2026] [:error] [pid 22572:tid 22589] [client 20.9.69.97:4075] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xb.php"] [unique_id "ae2d8tXOViWCFU-pZzDSWgAAAUs"]
[Sun Apr 26 13:09:07.416308 2026] [:error] [pid 16574:tid 16605] [client 20.9.69.97:58224] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xb.php"] [unique_id "ae2d835MsX8wRQr99nYYLgAAA0E"]
[Sun Apr 26 13:09:08.205039 2026] [:error] [pid 8385:tid 8441] [client 20.9.69.97:58194] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ova.php"] [unique_id "ae2d9DOy7_J84Wx3-oyjowAAAFE"]
[Sun Apr 26 13:09:08.948641 2026] [:error] [pid 16515:tid 16534] [client 20.9.69.97:58137] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ova.php"] [unique_id "ae2d9FtDrUmgHSvpuLwGDwAAAlA"]
[Sun Apr 26 13:09:09.548777 2026] [:error] [pid 22572:tid 22591] [client 20.9.69.97:3688] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ova.php"] [unique_id "ae2d9dXOViWCFU-pZzDSXgAAAU0"]
[Sun Apr 26 13:09:10.839137 2026] [:error] [pid 22572:tid 22600] [client 20.9.69.97:56831] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ova.php"] [unique_id "ae2d9tXOViWCFU-pZzDSXwAAAVY"]
[Sun Apr 26 13:09:11.910828 2026] [:error] [pid 13137:tid 13156] [client 20.9.69.97:58125] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "ae2d990RB4J0o4h5neEwVgAAAg8"]
[Sun Apr 26 13:09:12.594421 2026] [:error] [pid 16515:tid 16523] [client 20.9.69.97:58198] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "ae2d-FtDrUmgHSvpuLwGEQAAAkU"]
[Sun Apr 26 13:09:13.479761 2026] [:error] [pid 8390:tid 8456] [client 20.9.69.97:58153] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "ae2d-YGPtFK_i9p5yxTKaQAAAIU"]
[Sun Apr 26 13:09:13.993206 2026] [:error] [pid 8390:tid 8469] [client 20.9.69.97:56766] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "ae2d-YGPtFK_i9p5yxTKbAAAAJI"]
[Sun Apr 26 13:09:14.516805 2026] [:error] [pid 8390:tid 8463] [client 20.9.69.97:3970] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "ae2d-oGPtFK_i9p5yxTKbQAAAIw"]
[Sun Apr 26 13:09:15.004980 2026] [:error] [pid 8390:tid 8473] [client 20.9.69.97:58116] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "ae2d-4GPtFK_i9p5yxTKbwAAAJY"]
[Sun Apr 26 13:09:15.678197 2026] [:error] [pid 16574:tid 16637] [client 20.9.69.97:3703] [client 20.9.69.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "ae2d-35MsX8wRQr99nYYMAAAA1U"]
[Sun Apr 26 13:09:16.124306 2026] [:error] [pid 8390:tid 8471] [client 20.9.69.97:58205] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Sun Apr 26 13:09:16.313438 2026] [:error] [pid 8390:tid 8453] [client 20.9.69.97:58205] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Sun Apr 26 13:09:16.661280 2026] [:error] [pid 8390:tid 8475] [client 20.9.69.97:58205] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Sun Apr 26 13:09:16.851730 2026] [:error] [pid 8390:tid 8460] [client 20.9.69.97:58205] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Apr 26 13:09:17.106091 2026] [:error] [pid 8390:tid 8470] [client 20.9.69.97:58205] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php
[Sun Apr 26 13:09:17.318593 2026] [:error] [pid 8390:tid 8452] [client 20.9.69.97:58205] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Sun Apr 26 13:09:17.543070 2026] [:error] [pid 8390:tid 8463] [client 20.9.69.97:58205] File does not exist: /usr/local/apache/htdocs/suspended-page/sites.php
[Sun Apr 26 13:09:17.732470 2026] [:error] [pid 8390:tid 8473] [client 20.9.69.97:58205] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sun Apr 26 13:09:17.923104 2026] [:error] [pid 8390:tid 8465] [client 20.9.69.97:58205] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Sun Apr 26 13:09:18.118259 2026] [:error] [pid 8390:tid 8459] [client 20.9.69.97:58205] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Apr 26 19:56:16.650055 2026] [:error] [pid 8383:tid 8409] [client 135.225.32.40:58915] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Sun Apr 26 19:56:16.925334 2026] [:error] [pid 8383:tid 8402] [client 135.225.32.40:58915] File does not exist: /usr/local/apache/htdocs/suspended-page/ox.php
[Sun Apr 26 19:56:17.221615 2026] [:error] [pid 8383:tid 8418] [client 135.225.32.40:58915] File does not exist: /usr/local/apache/htdocs/suspended-page/htto.php
[Sun Apr 26 19:56:17.560885 2026] [:error] [pid 8383:tid 8419] [client 135.225.32.40:58915] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Sun Apr 26 19:56:18.019535 2026] [:error] [pid 8383:tid 8413] [client 135.225.32.40:58915] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sun Apr 26 19:56:18.287611 2026] [:error] [pid 8383:tid 8398] [client 135.225.32.40:58915] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Sun Apr 26 19:56:18.557540 2026] [:error] [pid 8383:tid 8415] [client 135.225.32.40:58915] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Sun Apr 26 19:56:18.826405 2026] [:error] [pid 8383:tid 8417] [client 135.225.32.40:58915] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Sun Apr 26 19:56:19.094563 2026] [:error] [pid 8383:tid 8400] [client 135.225.32.40:58915] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Sun Apr 26 19:56:19.744220 2026] [:error] [pid 8383:tid 8402] [client 135.225.32.40:58915] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "ae39Y9Fa2S3EsATMdWNI-wAAAAU"]
[Sun Apr 26 19:56:20.821248 2026] [:error] [pid 13197:tid 13237] [client 135.225.32.40:51373] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "ae39ZN3kktFKdSxTrBvUfAAAAsY"]
[Sun Apr 26 19:56:21.630973 2026] [:error] [pid 22573:tid 22625] [client 135.225.32.40:54005] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "ae39ZXB3EmQlD4yKUt_3jAAAAZI"]
[Sun Apr 26 19:56:22.581472 2026] [:error] [pid 22572:tid 22596] [client 135.225.32.40:7391] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "ae39ZtXOViWCFU-pZzAjFwAAAVI"]
[Sun Apr 26 19:56:23.638857 2026] [:error] [pid 22573:tid 22627] [client 135.225.32.40:58935] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "ae39Z3B3EmQlD4yKUt_3jgAAAZQ"]
[Sun Apr 26 19:56:24.538922 2026] [:error] [pid 22573:tid 22617] [client 135.225.32.40:7967] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "ae39aHB3EmQlD4yKUt_3kQAAAYo"]
[Sun Apr 26 19:56:25.279986 2026] [:error] [pid 8383:tid 8404] [client 135.225.32.40:7973] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "ae39adFa2S3EsATMdWNJAAAAAAc"]
[Sun Apr 26 19:56:26.762462 2026] [:error] [pid 8383:tid 8412] [client 135.225.32.40:50691] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "ae39atFa2S3EsATMdWNJBwAAAA8"]
[Sun Apr 26 19:56:28.398842 2026] [:error] [pid 8383:tid 8409] [client 135.225.32.40:51384] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkyac.php"] [unique_id "ae39bNFa2S3EsATMdWNJEAAAAAw"]
[Sun Apr 26 19:56:29.350949 2026] [:error] [pid 8390:tid 8457] [client 135.225.32.40:7407] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkyac.php"] [unique_id "ae39bYGPtFK_i9p5yxRZjwAAAIY"]
[Sun Apr 26 19:56:35.443641 2026] [:error] [pid 13197:tid 13255] [client 135.225.32.40:51348] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkyac.php"] [unique_id "ae39c93kktFKdSxTrBvUfwAAAtc"]
[Sun Apr 26 19:56:39.775100 2026] [:error] [pid 16515:tid 16523] [client 135.225.32.40:7419] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bkyac.php"] [unique_id "ae39d1tDrUmgHSvpuLw-xAAAAkU"]
[Sun Apr 26 19:56:43.253737 2026] [:error] [pid 8383:tid 8409] [client 135.225.32.40:53973] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "ae39e9Fa2S3EsATMdWNJMQAAAAw"]
[Sun Apr 26 19:56:48.981333 2026] [:error] [pid 22572:tid 22593] [client 135.225.32.40:51409] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "ae39gNXOViWCFU-pZzAjJAAAAU8"]
[Sun Apr 26 19:56:57.395570 2026] [:error] [pid 8383:tid 8419] [client 135.225.32.40:53996] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae39idFa2S3EsATMdWNJTgAAABY"]
[Sun Apr 26 19:57:02.365166 2026] [:error] [pid 22572:tid 22581] [client 135.225.32.40:54011] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae39jtXOViWCFU-pZzAjMgAAAUM"]
[Sun Apr 26 19:57:03.955836 2026] [:error] [pid 8383:tid 8398] [client 135.225.32.40:50713] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae39j9Fa2S3EsATMdWNJUgAAAAE"]
[Sun Apr 26 19:57:11.242340 2026] [:error] [pid 22572:tid 22595] [client 135.225.32.40:7958] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae39l9XOViWCFU-pZzAjNQAAAVE"]
[Sun Apr 26 19:57:14.363171 2026] [:error] [pid 16515:tid 16530] [client 135.225.32.40:51378] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "ae39mltDrUmgHSvpuLw-0QAAAkw"]
[Sun Apr 26 19:57:15.699978 2026] [:error] [pid 8390:tid 8461] [client 135.225.32.40:58940] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "ae39m4GPtFK_i9p5yxRZvQAAAIo"]
[Sun Apr 26 19:57:20.083752 2026] [:error] [pid 13197:tid 13241] [client 135.225.32.40:50731] File does not exist: /usr/local/apache/htdocs/suspended-page/7logs.php
[Sun Apr 26 19:57:20.372870 2026] [:error] [pid 13197:tid 13256] [client 135.225.32.40:50731] File does not exist: /usr/local/apache/htdocs/suspended-page/n3yUmQ6Q9xwQ8ocdefault.php
[Sun Apr 26 19:57:20.638407 2026] [:error] [pid 13197:tid 13248] [client 135.225.32.40:50731] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sun Apr 26 19:57:20.919899 2026] [:error] [pid 13197:tid 13232] [client 135.225.32.40:50731] File does not exist: /usr/local/apache/htdocs/suspended-page/ctex1.php
[Sun Apr 26 19:57:21.185677 2026] [:error] [pid 13197:tid 13251] [client 135.225.32.40:50731] File does not exist: /usr/local/apache/htdocs/suspended-page/lb.php
[Sun Apr 26 19:57:21.452381 2026] [:error] [pid 13197:tid 13234] [client 135.225.32.40:50731] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Sun Apr 26 19:57:21.721912 2026] [:error] [pid 13197:tid 13254] [client 135.225.32.40:50731] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Sun Apr 26 19:57:22.196739 2026] [:error] [pid 13197:tid 13239] [client 135.225.32.40:50731] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Sun Apr 26 19:57:22.463253 2026] [:error] [pid 13197:tid 13237] [client 135.225.32.40:50731] File does not exist: /usr/local/apache/htdocs/suspended-page/auth.php
[Sun Apr 26 19:57:22.729353 2026] [:error] [pid 13197:tid 13233] [client 135.225.32.40:50731] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Sun Apr 26 19:57:23.002938 2026] [:error] [pid 13197:tid 13231] [client 135.225.32.40:50731] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Apr 26 19:57:23.284537 2026] [:error] [pid 13197:tid 13247] [client 135.225.32.40:50731] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "ae39o93kktFKdSxTrBvUjwAAAs8"]
[Sun Apr 26 19:57:27.072504 2026] [:error] [pid 13137:tid 13147] [client 135.225.32.40:58900] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "ae39p90RB4J0o4h5neFyCgAAAgc"]
[Sun Apr 26 19:57:32.359862 2026] [:error] [pid 16515:tid 16541] [client 135.225.32.40:58934] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "ae39rFtDrUmgHSvpuLw-1wAAAlc"]
[Sun Apr 26 19:57:41.160682 2026] [:error] [pid 8390:tid 8458] [client 135.225.32.40:50732] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "ae39tYGPtFK_i9p5yxRZywAAAIc"]
[Sun Apr 26 19:57:44.358329 2026] [:error] [pid 8383:tid 8418] [client 135.225.32.40:7372] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "ae39uNFa2S3EsATMdWNJbQAAABU"]
[Sun Apr 26 19:57:49.630416 2026] [:error] [pid 8383:tid 8411] [client 135.225.32.40:58920] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "ae39vdFa2S3EsATMdWNJbwAAAA4"]
[Sun Apr 26 19:57:54.338010 2026] [:error] [pid 8385:tid 8426] [client 135.225.32.40:58884] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "ae39wjOy7_J84Wx3-ozQJwAAAEI"]
[Sun Apr 26 19:57:55.748848 2026] [:error] [pid 13197:tid 13247] [client 135.225.32.40:50722] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ae39w93kktFKdSxTrBvUlwAAAs8"]
[Sun Apr 26 19:57:57.653003 2026] [:error] [pid 16574:tid 16623] [client 135.225.32.40:58880] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ae39xX5MsX8wRQr99nY0_QAAA04"]
[Sun Apr 26 19:57:58.511013 2026] [:error] [pid 8491:tid 8518] [client 135.225.32.40:51358] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ae39xiq7I7e6CJooQM39cwAAANM"]
[Sun Apr 26 19:57:59.874152 2026] [:error] [pid 13137:tid 13146] [client 135.225.32.40:54015] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ae39x90RB4J0o4h5neFyFwAAAgY"]
[Sun Apr 26 19:58:03.105815 2026] [:error] [pid 22573:tid 22619] [client 135.225.32.40:7953] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae39y3B3EmQlD4yKUt_3-wAAAYw"]
[Sun Apr 26 19:58:08.616040 2026] [:error] [pid 8383:tid 8415] [client 135.225.32.40:7943] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae390NFa2S3EsATMdWNJewAAABI"]
[Sun Apr 26 19:58:13.583775 2026] [:error] [pid 8383:tid 8402] [client 135.225.32.40:7998] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae391dFa2S3EsATMdWNJgQAAAAU"]
[Sun Apr 26 19:58:16.997087 2026] [:error] [pid 22572:tid 22590] [client 135.225.32.40:58928] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "ae392NXOViWCFU-pZzAjngAAAUw"]
[Sun Apr 26 19:58:19.755786 2026] [:error] [pid 13197:tid 13240] [client 135.225.32.40:50729] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "ae39293kktFKdSxTrBvUqwAAAsk"]
[Sun Apr 26 19:58:24.569808 2026] [:error] [pid 13137:tid 13141] [client 135.225.32.40:51362] File does not exist: /usr/local/apache/htdocs/suspended-page/bfil.php
[Sun Apr 26 19:58:24.841864 2026] [:error] [pid 13137:tid 13148] [client 135.225.32.40:51362] File does not exist: /usr/local/apache/htdocs/suspended-page/abrand.php
[Sun Apr 26 19:58:25.109903 2026] [:error] [pid 13137:tid 13156] [client 135.225.32.40:51362] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Sun Apr 26 19:58:25.378284 2026] [:error] [pid 13137:tid 13165] [client 135.225.32.40:51362] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Apr 26 19:58:25.644684 2026] [:error] [pid 13137:tid 13155] [client 135.225.32.40:51362] File does not exist: /usr/local/apache/htdocs/suspended-page/amwxl.php
[Sun Apr 26 19:58:25.934549 2026] [:error] [pid 13137:tid 13142] [client 135.225.32.40:51362] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Sun Apr 26 19:58:26.211555 2026] [:error] [pid 13137:tid 13145] [client 135.225.32.40:51362] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php
[Sun Apr 26 19:58:26.484514 2026] [:error] [pid 13137:tid 13151] [client 135.225.32.40:51362] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Sun Apr 26 19:58:26.752746 2026] [:error] [pid 13137:tid 13147] [client 135.225.32.40:51362] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Apr 26 19:58:27.034800 2026] [:error] [pid 13137:tid 13154] [client 135.225.32.40:51362] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Sun Apr 26 19:58:27.303583 2026] [:error] [pid 13137:tid 13162] [client 135.225.32.40:51362] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Sun Apr 26 19:58:27.608466 2026] [:error] [pid 13137:tid 13161] [client 135.225.32.40:51362] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rip.php"] [unique_id "ae39490RB4J0o4h5neFyKwAAAhQ"]
[Sun Apr 26 19:58:38.353522 2026] [:error] [pid 22573:tid 22610] [client 135.225.32.40:58936] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rip.php"] [unique_id "ae397nB3EmQlD4yKUt_4HQAAAYQ"]
[Sun Apr 26 19:58:41.501695 2026] [:error] [pid 16515:tid 16524] [client 135.225.32.40:51364] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rip.php"] [unique_id "ae398VtDrUmgHSvpuLw_BAAAAkY"]
[Sun Apr 26 19:58:43.541577 2026] [:error] [pid 22572:tid 22602] [client 135.225.32.40:50745] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "ae3989XOViWCFU-pZzAj-QAAAVg"]
[Sun Apr 26 19:58:45.213595 2026] [:error] [pid 22573:tid 22615] [client 135.225.32.40:51357] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "ae399XB3EmQlD4yKUt_4KwAAAYg"]
[Sun Apr 26 19:58:48.746863 2026] [:error] [pid 8383:tid 8406] [client 135.225.32.40:7951] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "ae39-NFa2S3EsATMdWNJngAAAAk"]
[Sun Apr 26 19:58:51.661345 2026] [:error] [pid 8390:tid 8454] [client 135.225.32.40:7942] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "ae39-4GPtFK_i9p5yxRapAAAAIM"]
[Sun Apr 26 19:59:02.594340 2026] [:error] [pid 8390:tid 8451] [client 135.225.32.40:50703] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ae3-BoGPtFK_i9p5yxRa2wAAAIA"]
[Sun Apr 26 19:59:05.802698 2026] [:error] [pid 8383:tid 8416] [client 135.225.32.40:53976] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ae3-CdFa2S3EsATMdWNJqwAAABM"]
[Sun Apr 26 19:59:09.580299 2026] [:error] [pid 8383:tid 8418] [client 135.225.32.40:51337] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "ae3-DdFa2S3EsATMdWNJtAAAABU"]
[Sun Apr 26 19:59:17.596009 2026] [:error] [pid 8491:tid 8514] [client 135.225.32.40:7371] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "ae3-FSq7I7e6CJooQM39kgAAAM8"]
[Sun Apr 26 19:59:25.497999 2026] [:error] [pid 22573:tid 22612] [client 135.225.32.40:58917] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "ae3-HXB3EmQlD4yKUt_4TgAAAYY"]
[Sun Apr 26 19:59:27.498914 2026] [:error] [pid 8390:tid 8466] [client 135.225.32.40:7410] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Sun Apr 26 19:59:27.788450 2026] [:error] [pid 8390:tid 8465] [client 135.225.32.40:7410] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Sun Apr 26 19:59:28.072514 2026] [:error] [pid 8390:tid 8474] [client 135.225.32.40:7410] File does not exist: /usr/local/apache/htdocs/suspended-page/koiy.php
[Sun Apr 26 19:59:28.357504 2026] [:error] [pid 8390:tid 8467] [client 135.225.32.40:7410] File does not exist: /usr/local/apache/htdocs/suspended-page/albin.php
[Sun Apr 26 19:59:28.646391 2026] [:error] [pid 8390:tid 8451] [client 135.225.32.40:7410] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sun Apr 26 19:59:29.218100 2026] [:error] [pid 8390:tid 8453] [client 135.225.32.40:7410] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Sun Apr 26 19:59:29.515659 2026] [:error] [pid 8390:tid 8455] [client 135.225.32.40:7410] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Sun Apr 26 19:59:29.801892 2026] [:error] [pid 8390:tid 8471] [client 135.225.32.40:7410] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Sun Apr 26 19:59:30.086446 2026] [:error] [pid 8390:tid 8468] [client 135.225.32.40:7410] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Sun Apr 26 19:59:30.370195 2026] [:error] [pid 8390:tid 8457] [client 135.225.32.40:7410] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Sun Apr 26 19:59:30.671050 2026] [:error] [pid 8390:tid 8456] [client 135.225.32.40:7410] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "ae3-IoGPtFK_i9p5yxRbDAAAAIU"]
[Sun Apr 26 19:59:33.239266 2026] [:error] [pid 13197:tid 13255] [client 135.225.32.40:7950] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "ae3-Jd3kktFKdSxTrBvU3AAAAtc"]
[Sun Apr 26 19:59:36.228845 2026] [:error] [pid 8491:tid 8504] [client 135.225.32.40:51349] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "ae3-KCq7I7e6CJooQM39mQAAAMU"]
[Sun Apr 26 19:59:39.127486 2026] [:error] [pid 8383:tid 8421] [client 135.225.32.40:7978] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "ae3-K9Fa2S3EsATMdWNJxQAAABg"]
[Sun Apr 26 19:59:44.024328 2026] [:error] [pid 22572:tid 22591] [client 135.225.32.40:58882] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "ae3-MNXOViWCFU-pZzAkMAAAAU0"]
[Sun Apr 26 19:59:46.704720 2026] [:error] [pid 8491:tid 8511] [client 135.225.32.40:58891] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "ae3-Miq7I7e6CJooQM39oAAAAMw"]
[Sun Apr 26 19:59:49.695125 2026] [:error] [pid 8383:tid 8412] [client 135.225.32.40:58887] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "ae3-NdFa2S3EsATMdWNJ1gAAAA8"]
[Sun Apr 26 19:59:54.039571 2026] [:error] [pid 22572:tid 22597] [client 135.225.32.40:7991] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "ae3-OtXOViWCFU-pZzAkNQAAAVM"]
[Sun Apr 26 19:59:56.491580 2026] [:error] [pid 8390:tid 8462] [client 135.225.32.40:58911] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "ae3-PIGPtFK_i9p5yxRbIgAAAIs"]
[Sun Apr 26 19:59:59.896965 2026] [:error] [pid 22572:tid 22590] [client 135.225.32.40:7836] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "ae3-P9XOViWCFU-pZzAkNwAAAUw"]
[Sun Apr 26 20:00:06.458398 2026] [:error] [pid 8390:tid 8473] [client 135.225.32.40:7368] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "ae3-RoGPtFK_i9p5yxRbNQAAAJY"]
[Sun Apr 26 20:00:11.936191 2026] [:error] [pid 8383:tid 8401] [client 135.225.32.40:51353] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "ae3-S9Fa2S3EsATMdWNJ9AAAAAQ"]
[Sun Apr 26 20:00:12.718598 2026] [:error] [pid 22573:tid 22606] [client 135.225.32.40:58931] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "ae3-THB3EmQlD4yKUt_4UgAAAYA"]
[Sun Apr 26 20:00:17.318444 2026] [:error] [pid 13137:tid 13159] [client 135.225.32.40:54000] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "ae3-Ud0RB4J0o4h5neFyhwAAAhI"]
[Sun Apr 26 20:00:36.279701 2026] [:error] [pid 8383:tid 8416] [client 135.225.32.40:51386] File does not exist: /usr/local/apache/htdocs/suspended-page/t00l.php
[Sun Apr 26 20:00:36.554520 2026] [:error] [pid 8383:tid 8404] [client 135.225.32.40:51386] File does not exist: /usr/local/apache/htdocs/suspended-page/casp1.php
[Sun Apr 26 20:00:36.826140 2026] [:error] [pid 8383:tid 8405] [client 135.225.32.40:51386] File does not exist: /usr/local/apache/htdocs/suspended-page/acc.php
[Sun Apr 26 20:00:37.110024 2026] [:error] [pid 8383:tid 8415] [client 135.225.32.40:51386] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Sun Apr 26 20:00:37.394053 2026] [:error] [pid 8383:tid 8400] [client 135.225.32.40:51386] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Sun Apr 26 20:00:37.695790 2026] [:error] [pid 8383:tid 8402] [client 135.225.32.40:51386] File does not exist: /usr/local/apache/htdocs/suspended-page/packsin1.php
[Sun Apr 26 20:00:37.961662 2026] [:error] [pid 8383:tid 8398] [client 135.225.32.40:51386] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Sun Apr 26 20:00:38.234084 2026] [:error] [pid 8383:tid 8418] [client 135.225.32.40:51386] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Sun Apr 26 20:00:38.508127 2026] [:error] [pid 8383:tid 8397] [client 135.225.32.40:51386] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Sun Apr 26 20:00:38.840490 2026] [:error] [pid 8383:tid 8409] [client 135.225.32.40:51386] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Sun Apr 26 20:00:39.119440 2026] [:error] [pid 8383:tid 8419] [client 135.225.32.40:51386] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Sun Apr 26 20:00:39.382510 2026] [:error] [pid 8383:tid 8407] [client 135.225.32.40:51386] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "ae3-Z9Fa2S3EsATMdWNKDgAAAAo"]
[Sun Apr 26 20:00:43.154704 2026] [:error] [pid 8390:tid 8465] [client 135.225.32.40:51439] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "ae3-a4GPtFK_i9p5yxRbTgAAAI4"]
[Sun Apr 26 20:00:46.377483 2026] [:error] [pid 8390:tid 8463] [client 135.225.32.40:51394] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "ae3-boGPtFK_i9p5yxRbVAAAAIw"]
[Sun Apr 26 20:00:48.631858 2026] [:error] [pid 8390:tid 8457] [client 135.225.32.40:51345] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "ae3-cIGPtFK_i9p5yxRbWQAAAIY"]
[Sun Apr 26 20:00:54.053989 2026] [:error] [pid 8383:tid 8411] [client 135.225.32.40:51384] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ae3-dtFa2S3EsATMdWNKFgAAAA4"]
[Sun Apr 26 20:00:59.951632 2026] [:error] [pid 22573:tid 22607] [client 135.225.32.40:7993] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ae3-e3B3EmQlD4yKUt_4dQAAAYE"]
[Sun Apr 26 20:01:01.996607 2026] [:error] [pid 8390:tid 8458] [client 135.225.32.40:7374] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ae3-fYGPtFK_i9p5yxRbbwAAAIc"]
[Sun Apr 26 20:01:05.213889 2026] [:error] [pid 22573:tid 22621] [client 135.225.32.40:50750] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ae3-gXB3EmQlD4yKUt_4egAAAY4"]
[Sun Apr 26 20:01:06.402793 2026] [:error] [pid 22573:tid 22627] [client 135.225.32.40:58937] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ae3-gnB3EmQlD4yKUt_4fAAAAZQ"]
[Sun Apr 26 20:01:07.478566 2026] [:error] [pid 13197:tid 13250] [client 135.225.32.40:50717] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ae3-g93kktFKdSxTrBvU5wAAAtI"]
[Sun Apr 26 20:01:08.780877 2026] [:error] [pid 13197:tid 13253] [client 135.225.32.40:54012] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ae3-hN3kktFKdSxTrBvU6AAAAtU"]
[Sun Apr 26 20:01:10.593767 2026] [:error] [pid 22573:tid 22606] [client 135.225.32.40:7391] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ae3-hnB3EmQlD4yKUt_4gAAAAYA"]
[Sun Apr 26 20:01:12.041512 2026] [:error] [pid 13137:tid 13146] [client 135.225.32.40:7970] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ae3-iN0RB4J0o4h5neFymgAAAgY"]
[Sun Apr 26 20:01:14.247121 2026] [:error] [pid 8383:tid 8402] [client 135.225.32.40:7415] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ae3-itFa2S3EsATMdWNKIQAAAAU"]
[Sun Apr 26 20:01:14.986518 2026] [:error] [pid 8383:tid 8398] [client 135.225.32.40:7392] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ae3-itFa2S3EsATMdWNKIwAAAAE"]
[Sun Apr 26 20:01:16.680143 2026] [:error] [pid 8383:tid 8414] [client 135.225.32.40:53968] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/prosellers8.php"] [unique_id "ae3-jNFa2S3EsATMdWNKJQAAABE"]
[Sun Apr 26 20:01:17.510645 2026] [:error] [pid 16574:tid 16604] [client 135.225.32.40:50718] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/prosellers8.php"] [unique_id "ae3-jX5MsX8wRQr99nY1FwAAA0A"]
[Sun Apr 26 20:01:18.740563 2026] [:error] [pid 16574:tid 16635] [client 135.225.32.40:53972] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/prosellers8.php"] [unique_id "ae3-jn5MsX8wRQr99nY1GAAAA1Q"]
[Sun Apr 26 20:01:21.501531 2026] [:error] [pid 8383:tid 8408] [client 135.225.32.40:53963] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/prosellers8.php"] [unique_id "ae3-kdFa2S3EsATMdWNKKgAAAAs"]
[Sun Apr 26 20:01:23.980095 2026] [:error] [pid 8390:tid 8461] [client 135.225.32.40:53999] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shop.php"] [unique_id "ae3-k4GPtFK_i9p5yxRbewAAAIo"]
[Sun Apr 26 20:01:27.605271 2026] [:error] [pid 8383:tid 8399] [client 135.225.32.40:7397] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shop.php"] [unique_id "ae3-l9Fa2S3EsATMdWNKMwAAAAI"]
[Sun Apr 26 20:01:35.601011 2026] [:error] [pid 8383:tid 8418] [client 135.225.32.40:58881] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shop.php"] [unique_id "ae3-n9Fa2S3EsATMdWNKOwAAABU"]
[Sun Apr 26 20:01:46.081928 2026] [:error] [pid 8390:tid 8465] [client 135.225.32.40:51363] File does not exist: /usr/local/apache/htdocs/suspended-page/ww.php
[Sun Apr 26 20:01:46.365433 2026] [:error] [pid 8390:tid 8467] [client 135.225.32.40:51363] File does not exist: /usr/local/apache/htdocs/suspended-page/fsjzs.php
[Sun Apr 26 20:01:46.648934 2026] [:error] [pid 8390:tid 8454] [client 135.225.32.40:51363] File does not exist: /usr/local/apache/htdocs/suspended-page/cwclass.php
[Sun Apr 26 20:01:46.945938 2026] [:error] [pid 8390:tid 8470] [client 135.225.32.40:51363] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Sun Apr 26 20:01:48.330794 2026] [:error] [pid 8390:tid 8470] [client 135.225.32.40:51363] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sun Apr 26 20:01:48.632778 2026] [:error] [pid 8390:tid 8471] [client 135.225.32.40:51363] File does not exist: /usr/local/apache/htdocs/suspended-page/zoper1.php
[Sun Apr 26 20:01:48.952448 2026] [:error] [pid 8390:tid 8463] [client 135.225.32.40:51363] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Sun Apr 26 20:01:49.264106 2026] [:error] [pid 8390:tid 8473] [client 135.225.32.40:51363] File does not exist: /usr/local/apache/htdocs/suspended-page/ai.php
[Sun Apr 26 20:01:49.728706 2026] [:error] [pid 8390:tid 8456] [client 135.225.32.40:51363] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Sun Apr 26 20:01:50.182637 2026] [:error] [pid 8390:tid 8451] [client 135.225.32.40:51363] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Sun Apr 26 20:01:50.619154 2026] [:error] [pid 8390:tid 8466] [client 135.225.32.40:51363] File does not exist: /usr/local/apache/htdocs/suspended-page/gk.php
[Sun Apr 26 20:01:50.904914 2026] [:error] [pid 8390:tid 8458] [client 135.225.32.40:51363] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "ae3-roGPtFK_i9p5yxRbpgAAAIc"]
[Sun Apr 26 20:01:52.100270 2026] [:error] [pid 22572:tid 22601] [client 135.225.32.40:58883] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "ae3-sNXOViWCFU-pZzAklgAAAVc"]
[Sun Apr 26 20:01:54.184523 2026] [:error] [pid 8390:tid 8455] [client 135.225.32.40:54007] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "ae3-soGPtFK_i9p5yxRbrQAAAIQ"]
[Sun Apr 26 20:01:56.267103 2026] [:error] [pid 16515:tid 16520] [client 135.225.32.40:58921] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "ae3-tFtDrUmgHSvpuLw_XQAAAkI"]
[Sun Apr 26 20:02:01.195387 2026] [:error] [pid 22573:tid 22627] [client 135.225.32.40:58934] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sd.php"] [unique_id "ae3-uXB3EmQlD4yKUt_4mAAAAZQ"]
[Sun Apr 26 20:02:08.827120 2026] [:error] [pid 8390:tid 8463] [client 135.225.32.40:51389] [client 135.225.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sd.php"] [unique_id "ae3-wIGPtFK_i9p5yxRbywAAAIw"]
[Sun Apr 26 23:52:41.513796 2026] [:error] [pid 8385:tid 8425] [client 20.89.19.162:3176] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Apr 26 23:52:41.630822 2026] [:error] [pid 8385:tid 8430] [client 20.89.19.162:3176] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Apr 26 23:52:41.865396 2026] [:error] [pid 8385:tid 8428] [client 20.89.19.162:3176] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sun Apr 26 23:52:41.982740 2026] [:error] [pid 8385:tid 8435] [client 20.89.19.162:3176] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Apr 26 23:52:42.220761 2026] [:error] [pid 8385:tid 8448] [client 20.89.19.162:3176] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sun Apr 26 23:52:42.338063 2026] [:error] [pid 8385:tid 8426] [client 20.89.19.162:3176] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Apr 26 23:52:42.455020 2026] [:error] [pid 8385:tid 8427] [client 20.89.19.162:3176] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sun Apr 26 23:52:42.804782 2026] [:error] [pid 8385:tid 8424] [client 20.89.19.162:3176] [client 20.89.19.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ae40yjOy7_J84Wx3-ozrZQAAAEA"]
[Sun Apr 26 23:52:43.287157 2026] [:error] [pid 8383:tid 8405] [client 20.89.19.162:5466] [client 20.89.19.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ae40y9Fa2S3EsATMdWOWMwAAAAg"]
[Sun Apr 26 23:52:43.746807 2026] [:error] [pid 13137:tid 13164] [client 20.89.19.162:3155] [client 20.89.19.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ae40y90RB4J0o4h5neGgWwAAAhc"]
[Sun Apr 26 23:52:44.203721 2026] [:error] [pid 13137:tid 13143] [client 20.89.19.162:3197] [client 20.89.19.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ae40zN0RB4J0o4h5neGgXgAAAgM"]
[Mon Apr 27 04:12:56.031898 2026] [:error] [pid 22645:tid 22660] [client 4.217.194.63:4406] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon Apr 27 04:12:56.175248 2026] [:error] [pid 22645:tid 22675] [client 4.217.194.63:4406] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon Apr 27 04:12:56.450349 2026] [:error] [pid 22645:tid 22670] [client 4.217.194.63:4406] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Mon Apr 27 04:12:56.623912 2026] [:error] [pid 22645:tid 22663] [client 4.217.194.63:4406] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Apr 27 04:12:56.909752 2026] [:error] [pid 22645:tid 22673] [client 4.217.194.63:4406] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Mon Apr 27 04:12:57.061168 2026] [:error] [pid 22645:tid 22667] [client 4.217.194.63:4406] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Mon Apr 27 04:12:57.201572 2026] [:error] [pid 22645:tid 22659] [client 4.217.194.63:4406] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Mon Apr 27 04:12:57.625474 2026] [:error] [pid 22645:tid 22671] [client 4.217.194.63:4406] [client 4.217.194.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ae5xyX-Pq2r302zQbMaCDQAAABA"]
[Mon Apr 27 04:12:58.198525 2026] [:error] [pid 22645:tid 22672] [client 4.217.194.63:4383] [client 4.217.194.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ae5xyn-Pq2r302zQbMaCDwAAABE"]
[Mon Apr 27 04:12:58.750575 2026] [:error] [pid 22751:tid 22776] [client 4.217.194.63:5330] [client 4.217.194.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ae5xyic0tCpVyVdFok9hygAAANY"]
[Mon Apr 27 04:12:59.328713 2026] [:error] [pid 22646:tid 22686] [client 4.217.194.63:3373] [client 4.217.194.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ae5xy4k_HyZhTP6AYadjbAAAAEM"]
[Mon Apr 27 05:41:19.217477 2026] [:error] [pid 22751:tid 22773] [client 20.220.233.65:24565] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Mon Apr 27 05:41:19.425104 2026] [:error] [pid 22751:tid 22772] [client 20.220.233.65:24565] File does not exist: /usr/local/apache/htdocs/suspended-page/asus.php
[Mon Apr 27 05:41:19.634900 2026] [:error] [pid 22751:tid 22763] [client 20.220.233.65:24565] File does not exist: /usr/local/apache/htdocs/suspended-page/environment.php
[Mon Apr 27 05:41:19.848066 2026] [:error] [pid 22751:tid 22769] [client 20.220.233.65:24565] File does not exist: /usr/local/apache/htdocs/suspended-page/pinfo.php
[Mon Apr 27 05:41:20.055820 2026] [:error] [pid 22751:tid 22762] [client 20.220.233.65:24565] File does not exist: /usr/local/apache/htdocs/suspended-page/aws.php
[Mon Apr 27 05:41:20.269110 2026] [:error] [pid 22751:tid 22776] [client 20.220.233.65:24565] File does not exist: /usr/local/apache/htdocs/suspended-page/ayk.php
[Mon Apr 27 05:41:20.478443 2026] [:error] [pid 22751:tid 22760] [client 20.220.233.65:24565] File does not exist: /usr/local/apache/htdocs/suspended-page/kcs.php
[Mon Apr 27 05:41:20.690269 2026] [:error] [pid 22751:tid 22753] [client 20.220.233.65:24565] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Mon Apr 27 09:07:00.497160 2026] [:error] [pid 7056:tid 7082] [client 20.89.19.162:3453] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Mon Apr 27 09:07:02.338460 2026] [:error] [pid 7056:tid 7073] [client 20.89.19.162:3453] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Mon Apr 27 09:07:02.578713 2026] [:error] [pid 7056:tid 7074] [client 20.89.19.162:3453] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Mon Apr 27 09:07:02.698799 2026] [:error] [pid 7056:tid 7067] [client 20.89.19.162:3453] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Mon Apr 27 09:07:02.817974 2026] [:error] [pid 7056:tid 7060] [client 20.89.19.162:3453] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Mon Apr 27 09:07:02.949969 2026] [:error] [pid 7056:tid 7080] [client 20.89.19.162:3453] [client 20.89.19.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/120f9.php"] [unique_id "ae62tiaiHlvwyvjHbety8QAAARU"]
[Mon Apr 27 09:07:03.423014 2026] [:error] [pid 7056:tid 7063] [client 20.89.19.162:3347] [client 20.89.19.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/120f9.php"] [unique_id "ae62tyaiHlvwyvjHbety8gAAAQQ"]
[Mon Apr 27 09:07:03.900142 2026] [:error] [pid 6971:tid 7022] [client 20.89.19.162:4544] [client 20.89.19.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/120f9.php"] [unique_id "ae62t7Oap7jCIaP4nNPXhAAAANU"]
[Mon Apr 27 09:07:04.364401 2026] [:error] [pid 7056:tid 7076] [client 20.89.19.162:4601] [client 20.89.19.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/120f9.php"] [unique_id "ae62uCaiHlvwyvjHbety9AAAARE"]
[Tue Apr 28 05:08:01.607941 2026] [:error] [pid 14578:tid 14621] [client 20.91.220.89:7487] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue Apr 28 05:08:01.874813 2026] [:error] [pid 14578:tid 14619] [client 20.91.220.89:7487] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue Apr 28 05:08:02.428680 2026] [:error] [pid 14578:tid 14623] [client 20.91.220.89:7487] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Tue Apr 28 05:08:02.696675 2026] [:error] [pid 14578:tid 14630] [client 20.91.220.89:7487] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Apr 28 05:08:03.229685 2026] [:error] [pid 14578:tid 14620] [client 20.91.220.89:7487] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Tue Apr 28 05:08:03.496510 2026] [:error] [pid 14578:tid 14637] [client 20.91.220.89:7487] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Tue Apr 28 05:08:03.763166 2026] [:error] [pid 14578:tid 14636] [client 20.91.220.89:7487] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Tue Apr 28 05:08:04.657412 2026] [:error] [pid 14578:tid 14615] [client 20.91.220.89:7487] [client 20.91.220.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ae_QNOngo3AwIJgfSHH2LwAAAEI"]
[Tue Apr 28 05:08:05.741414 2026] [:error] [pid 14686:tid 14706] [client 20.91.220.89:16409] [client 20.91.220.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ae_QNe-YPF1Xm7uiWQ4e0wAAANE"]
[Tue Apr 28 05:08:06.852341 2026] [:error] [pid 56602:tid 56623] [client 20.91.220.89:13073] [client 20.91.220.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ae_QNvCwhMxzNW_lZSwdLwAAARM"]
[Tue Apr 28 05:08:07.931977 2026] [:error] [pid 56602:tid 56624] [client 20.91.220.89:4784] [client 20.91.220.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ae_QN_CwhMxzNW_lZSwdMQAAARQ"]
[Tue Apr 28 06:50:35.364480 2026] [:error] [pid 14577:tid 14602] [client 4.232.90.232:39632] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue Apr 28 06:50:35.602099 2026] [:error] [pid 14577:tid 14592] [client 4.232.90.232:39632] File does not exist: /usr/local/apache/htdocs/suspended-page/3369.php
[Tue Apr 28 06:50:35.838794 2026] [:error] [pid 14577:tid 14609] [client 4.232.90.232:39632] File does not exist: /usr/local/apache/htdocs/suspended-page/mg.php
[Tue Apr 28 06:50:36.079694 2026] [:error] [pid 14577:tid 14589] [client 4.232.90.232:39632] File does not exist: /usr/local/apache/htdocs/suspended-page/file-kikikoko.php
[Tue Apr 28 06:50:36.316049 2026] [:error] [pid 14577:tid 14597] [client 4.232.90.232:39632] File does not exist: /usr/local/apache/htdocs/suspended-page/spawns.php
[Tue Apr 28 06:50:36.562250 2026] [:error] [pid 14577:tid 14604] [client 4.232.90.232:39632] File does not exist: /usr/local/apache/htdocs/suspended-page/t3s.php
[Tue Apr 28 06:50:36.801457 2026] [:error] [pid 14577:tid 14605] [client 4.232.90.232:39632] File does not exist: /usr/local/apache/htdocs/suspended-page/uwu.php
[Tue Apr 28 06:50:37.047336 2026] [:error] [pid 14577:tid 14610] [client 4.232.90.232:39632] File does not exist: /usr/local/apache/htdocs/suspended-page/uwa.php
[Tue Apr 28 06:50:37.284307 2026] [:error] [pid 14577:tid 14598] [client 4.232.90.232:39632] File does not exist: /usr/local/apache/htdocs/suspended-page/crgio.php
[Tue Apr 28 06:50:37.526163 2026] [:error] [pid 14577:tid 14587] [client 4.232.90.232:39632] File does not exist: /usr/local/apache/htdocs/suspended-page/geforce.php
[Tue Apr 28 06:50:37.768108 2026] [:error] [pid 14577:tid 14588] [client 4.232.90.232:39632] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "ae_oPSzBH-jwzlgiBdHBYgAAAAI"]
[Tue Apr 28 06:50:39.204792 2026] [:error] [pid 14578:tid 14613] [client 4.232.90.232:8316] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "ae_oP-ngo3AwIJgfSHEZ2gAAAEA"]
[Tue Apr 28 06:50:40.198274 2026] [:error] [pid 14686:tid 14689] [client 4.232.90.232:16846] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "ae_oQO-YPF1Xm7uiWQ42dQAAAMA"]
[Tue Apr 28 06:50:41.071153 2026] [:error] [pid 14577:tid 14591] [client 4.232.90.232:30280] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "ae_oQSzBH-jwzlgiBdHBagAAAAU"]
[Tue Apr 28 06:50:42.164580 2026] [:error] [pid 14577:tid 14605] [client 4.232.90.232:31395] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/77.php"] [unique_id "ae_oQizBH-jwzlgiBdHBdAAAABM"]
[Tue Apr 28 06:50:43.955870 2026] [:error] [pid 14579:tid 14648] [client 4.232.90.232:31406] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/77.php"] [unique_id "ae_oQxrUiOG83qKKuuD4lgAAAIg"]
[Tue Apr 28 06:50:44.532250 2026] [:error] [pid 14686:tid 14707] [client 4.232.90.232:28065] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/77.php"] [unique_id "ae_oRO-YPF1Xm7uiWQ42dgAAANI"]
[Tue Apr 28 06:50:46.059182 2026] [:error] [pid 6746:tid 6748] [client 4.232.90.232:28054] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/77.php"] [unique_id "ae_oRruStsbXtMDpzS-hDgAAAUA"]
[Tue Apr 28 06:50:47.544861 2026] [:error] [pid 6746:tid 6763] [client 4.232.90.232:31410] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.sghb.php"] [unique_id "ae_oR7uStsbXtMDpzS-hEwAAAU8"]
[Tue Apr 28 06:50:49.016468 2026] [:error] [pid 56602:tid 56623] [client 4.232.90.232:17086] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.sghb.php"] [unique_id "ae_oSfCwhMxzNW_lZSw_bAAAARM"]
[Tue Apr 28 06:50:49.936049 2026] [:error] [pid 14579:tid 14649] [client 4.232.90.232:45661] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.sghb.php"] [unique_id "ae_oSRrUiOG83qKKuuD4tQAAAIk"]
[Tue Apr 28 06:50:50.467124 2026] [:error] [pid 14686:tid 14694] [client 4.232.90.232:44003] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.sghb.php"] [unique_id "ae_oSu-YPF1Xm7uiWQ42egAAAMU"]
[Tue Apr 28 06:50:51.455498 2026] [:error] [pid 14577:tid 14597] [client 4.232.90.232:41156] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoko.php"] [unique_id "ae_oSyzBH-jwzlgiBdHBnQAAAAs"]
[Tue Apr 28 06:50:52.553325 2026] [:error] [pid 6746:tid 6769] [client 4.232.90.232:40315] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoko.php"] [unique_id "ae_oTLuStsbXtMDpzS-hFgAAAVU"]
[Tue Apr 28 06:50:53.543120 2026] [:error] [pid 14578:tid 14627] [client 4.232.90.232:23737] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoko.php"] [unique_id "ae_oTengo3AwIJgfSHEZ9QAAAE4"]
[Tue Apr 28 06:50:54.768965 2026] [:error] [pid 6746:tid 6761] [client 4.232.90.232:28051] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoko.php"] [unique_id "ae_oTruStsbXtMDpzS-hFwAAAU0"]
[Tue Apr 28 06:50:55.538460 2026] [:error] [pid 56602:tid 56622] [client 4.232.90.232:40284] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/solo1.php"] [unique_id "ae_oT_CwhMxzNW_lZSw_fAAAARI"]
[Tue Apr 28 06:50:56.518567 2026] [:error] [pid 14579:tid 14663] [client 4.232.90.232:31360] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/solo1.php"] [unique_id "ae_oUBrUiOG83qKKuuD4uAAAAJc"]
[Tue Apr 28 06:50:57.436997 2026] [:error] [pid 6746:tid 6748] [client 4.232.90.232:24278] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/solo1.php"] [unique_id "ae_oUbuStsbXtMDpzS-hHAAAAUA"]
[Tue Apr 28 06:50:59.031609 2026] [:error] [pid 14577:tid 14600] [client 4.232.90.232:17043] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/solo1.php"] [unique_id "ae_oUyzBH-jwzlgiBdHBpAAAAA4"]
[Tue Apr 28 06:51:00.334196 2026] [:error] [pid 14577:tid 14591] [client 4.232.90.232:41210] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/locales.php"] [unique_id "ae_oVCzBH-jwzlgiBdHBqAAAAAU"]
[Tue Apr 28 06:51:01.030697 2026] [:error] [pid 14578:tid 14627] [client 4.232.90.232:24759] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/locales.php"] [unique_id "ae_oVengo3AwIJgfSHEZ_QAAAE4"]
[Tue Apr 28 06:51:01.872881 2026] [:error] [pid 56602:tid 56604] [client 4.232.90.232:8472] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/locales.php"] [unique_id "ae_oVfCwhMxzNW_lZSw_ggAAAQA"]
[Tue Apr 28 06:51:02.785976 2026] [:error] [pid 14686:tid 14708] [client 4.232.90.232:24758] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/locales.php"] [unique_id "ae_oVu-YPF1Xm7uiWQ42hwAAANM"]
[Tue Apr 28 06:51:03.784315 2026] [:error] [pid 14686:tid 14695] [client 4.232.90.232:45063] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "ae_oV--YPF1Xm7uiWQ42iAAAAMY"]
[Tue Apr 28 06:51:04.510430 2026] [:error] [pid 14578:tid 14623] [client 4.232.90.232:45062] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "ae_oWOngo3AwIJgfSHEZ_gAAAEo"]
[Tue Apr 28 06:51:05.508283 2026] [:error] [pid 14578:tid 14618] [client 4.232.90.232:30724] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "ae_oWengo3AwIJgfSHEaAAAAAEU"]
[Tue Apr 28 06:51:06.051144 2026] [:error] [pid 14579:tid 14640] [client 4.232.90.232:26347] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "ae_oWhrUiOG83qKKuuD4vwAAAIA"]
[Tue Apr 28 06:51:06.925064 2026] [:error] [pid 14577:tid 14608] [client 4.232.90.232:8508] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pucci.php"] [unique_id "ae_oWizBH-jwzlgiBdHBrwAAABY"]
[Tue Apr 28 06:51:07.760644 2026] [:error] [pid 6746:tid 6758] [client 4.232.90.232:8490] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pucci.php"] [unique_id "ae_oW7uStsbXtMDpzS-hJQAAAUo"]
[Tue Apr 28 06:51:08.392764 2026] [:error] [pid 14578:tid 14625] [client 4.232.90.232:30776] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pucci.php"] [unique_id "ae_oXOngo3AwIJgfSHEaAQAAAEw"]
[Tue Apr 28 06:51:09.300103 2026] [:error] [pid 14578:tid 14626] [client 4.232.90.232:32782] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pucci.php"] [unique_id "ae_oXengo3AwIJgfSHEaAgAAAE0"]
[Tue Apr 28 06:51:10.357086 2026] [:error] [pid 14686:tid 14697] [client 4.232.90.232:23714] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae_oXu-YPF1Xm7uiWQ42iwAAAMg"]
[Tue Apr 28 06:51:11.316202 2026] [:error] [pid 14686:tid 14698] [client 4.232.90.232:24796] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae_oX--YPF1Xm7uiWQ42jAAAAMk"]
[Tue Apr 28 06:51:12.358881 2026] [:error] [pid 14577:tid 14608] [client 4.232.90.232:8495] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae_oYCzBH-jwzlgiBdHBugAAABY"]
[Tue Apr 28 06:51:13.738874 2026] [:error] [pid 56602:tid 56611] [client 4.232.90.232:24303] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae_oYfCwhMxzNW_lZSw_jAAAAQc"]
[Tue Apr 28 06:51:14.579310 2026] [:error] [pid 14577:tid 14599] [client 4.232.90.232:30995] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "ae_oYizBH-jwzlgiBdHBvAAAAA0"]
[Tue Apr 28 06:51:16.244381 2026] [:error] [pid 14686:tid 14708] [client 4.232.90.232:45113] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "ae_oZO-YPF1Xm7uiWQ42lwAAANM"]
[Tue Apr 28 06:51:17.143688 2026] [:error] [pid 14579:tid 14642] [client 4.232.90.232:32799] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "ae_oZRrUiOG83qKKuuD4xQAAAII"]
[Tue Apr 28 06:51:17.817743 2026] [:error] [pid 14579:tid 14655] [client 4.232.90.232:32728] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "ae_oZRrUiOG83qKKuuD4ygAAAI8"]
[Tue Apr 28 06:51:18.722074 2026] [:error] [pid 14686:tid 14690] [client 4.232.90.232:26341] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae_oZu-YPF1Xm7uiWQ42oQAAAME"]
[Tue Apr 28 06:51:19.384581 2026] [:error] [pid 14686:tid 14711] [client 4.232.90.232:31029] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae_oZ--YPF1Xm7uiWQ42pAAAANY"]
[Tue Apr 28 06:51:20.328000 2026] [:error] [pid 14577:tid 14610] [client 4.232.90.232:32720] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae_oaCzBH-jwzlgiBdHBwAAAABg"]
[Tue Apr 28 06:51:21.349155 2026] [:error] [pid 14578:tid 14629] [client 4.232.90.232:31028] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae_oaengo3AwIJgfSHEaDwAAAFA"]
[Tue Apr 28 06:51:22.550592 2026] [:error] [pid 14578:tid 14624] [client 4.232.90.232:32821] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "ae_oaungo3AwIJgfSHEaEwAAAEs"]
[Tue Apr 28 06:51:23.595409 2026] [:error] [pid 14578:tid 14623] [client 4.232.90.232:32781] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "ae_oa-ngo3AwIJgfSHEaFwAAAEo"]
[Tue Apr 28 06:51:24.355812 2026] [:error] [pid 14578:tid 14615] [client 4.232.90.232:8665] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "ae_obOngo3AwIJgfSHEaGwAAAEI"]
[Tue Apr 28 06:51:25.354597 2026] [:error] [pid 56602:tid 56612] [client 4.232.90.232:22911] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "ae_obfCwhMxzNW_lZSw_jwAAAQg"]
[Tue Apr 28 06:51:26.396351 2026] [:error] [pid 56602:tid 56610] [client 4.232.90.232:21314] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "ae_obvCwhMxzNW_lZSw_kQAAAQY"]
[Tue Apr 28 06:51:27.240665 2026] [:error] [pid 14686:tid 14699] [client 4.232.90.232:50107] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "ae_ob--YPF1Xm7uiWQ42ugAAAMo"]
[Tue Apr 28 06:51:28.848958 2026] [:error] [pid 14578:tid 14615] [client 4.232.90.232:50048] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "ae_ocOngo3AwIJgfSHEaKQAAAEI"]
[Tue Apr 28 06:51:29.843788 2026] [:error] [pid 14578:tid 14614] [client 4.232.90.232:27742] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "ae_ocengo3AwIJgfSHEaNgAAAEE"]
[Tue Apr 28 06:51:30.687321 2026] [:error] [pid 14578:tid 14632] [client 4.232.90.232:26622] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no20.php"] [unique_id "ae_ocungo3AwIJgfSHEaQAAAAFM"]
[Tue Apr 28 06:51:31.751127 2026] [:error] [pid 14578:tid 14627] [client 4.232.90.232:26614] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no20.php"] [unique_id "ae_oc-ngo3AwIJgfSHEaTgAAAE4"]
[Tue Apr 28 06:51:32.759579 2026] [:error] [pid 14577:tid 14606] [client 4.232.90.232:8864] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no20.php"] [unique_id "ae_odCzBH-jwzlgiBdHB0AAAABQ"]
[Tue Apr 28 06:51:33.680492 2026] [:error] [pid 14686:tid 14696] [client 4.232.90.232:20085] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no20.php"] [unique_id "ae_ode-YPF1Xm7uiWQ42zAAAAMc"]
[Tue Apr 28 06:51:34.762334 2026] [:error] [pid 14577:tid 14588] [client 4.232.90.232:43030] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yasnu.php"] [unique_id "ae_odizBH-jwzlgiBdHB2wAAAAI"]
[Tue Apr 28 06:51:35.405997 2026] [:error] [pid 14577:tid 14605] [client 4.232.90.232:20080] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yasnu.php"] [unique_id "ae_odyzBH-jwzlgiBdHB4AAAABM"]
[Tue Apr 28 06:51:35.934590 2026] [:error] [pid 6746:tid 6749] [client 4.232.90.232:25207] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yasnu.php"] [unique_id "ae_od7uStsbXtMDpzS-hRwAAAUE"]
[Tue Apr 28 06:51:36.615574 2026] [:error] [pid 56602:tid 56617] [client 4.232.90.232:26268] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yasnu.php"] [unique_id "ae_oePCwhMxzNW_lZSw_lAAAAQ0"]
[Tue Apr 28 06:51:37.663052 2026] [:error] [pid 56602:tid 56609] [client 4.232.90.232:25578] File does not exist: /usr/local/apache/htdocs/suspended-page/sl.php
[Tue Apr 28 06:51:37.910696 2026] [:error] [pid 56602:tid 56615] [client 4.232.90.232:25578] File does not exist: /usr/local/apache/htdocs/suspended-page/vuln.php
[Tue Apr 28 06:51:38.149691 2026] [:error] [pid 56602:tid 56620] [client 4.232.90.232:25578] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-temp.php
[Tue Apr 28 06:51:39.073019 2026] [:error] [pid 56602:tid 56626] [client 4.232.90.232:25578] File does not exist: /usr/local/apache/htdocs/suspended-page/class-bda.php
[Tue Apr 28 06:51:40.603600 2026] [:error] [pid 56602:tid 56626] [client 4.232.90.232:25578] File does not exist: /usr/local/apache/htdocs/suspended-page/bhm.php
[Tue Apr 28 06:51:40.843384 2026] [:error] [pid 56602:tid 56613] [client 4.232.90.232:25578] File does not exist: /usr/local/apache/htdocs/suspended-page/xmu.php
[Tue Apr 28 06:51:41.079477 2026] [:error] [pid 56602:tid 56612] [client 4.232.90.232:25578] File does not exist: /usr/local/apache/htdocs/suspended-page/ref.php
[Tue Apr 28 06:51:41.316555 2026] [:error] [pid 56602:tid 56610] [client 4.232.90.232:25578] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-xme.php
[Tue Apr 28 06:51:41.559998 2026] [:error] [pid 56602:tid 56619] [client 4.232.90.232:25578] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Tue Apr 28 06:51:41.793201 2026] [:error] [pid 56602:tid 56621] [client 4.232.90.232:25578] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "ae_offCwhMxzNW_lZSw_qAAAARE"]
[Tue Apr 28 06:51:42.975249 2026] [:error] [pid 14578:tid 14633] [client 4.232.90.232:29372] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "ae_ofungo3AwIJgfSHEaiAAAAFQ"]
[Tue Apr 28 06:51:43.710773 2026] [:error] [pid 56602:tid 56624] [client 4.232.90.232:28968] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "ae_of_CwhMxzNW_lZSw_qQAAARQ"]
[Tue Apr 28 06:51:44.802674 2026] [:error] [pid 14578:tid 14635] [client 4.232.90.232:29358] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "ae_ogOngo3AwIJgfSHEaogAAAFY"]
[Tue Apr 28 06:51:46.000612 2026] [:error] [pid 56602:tid 56622] [client 4.232.90.232:41752] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "ae_ogfCwhMxzNW_lZSw_qwAAARI"]
[Tue Apr 28 06:51:46.807894 2026] [:error] [pid 14577:tid 14604] [client 4.232.90.232:40782] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "ae_ogizBH-jwzlgiBdHCAAAAABI"]
[Tue Apr 28 06:51:47.556283 2026] [:error] [pid 6746:tid 6759] [client 4.232.90.232:29330] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "ae_og7uStsbXtMDpzS-hYQAAAUs"]
[Tue Apr 28 06:51:48.344266 2026] [:error] [pid 14577:tid 14587] [client 4.232.90.232:8725] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "ae_ohCzBH-jwzlgiBdHCDAAAAAE"]
[Tue Apr 28 06:51:49.324287 2026] [:error] [pid 56602:tid 56610] [client 4.232.90.232:22064] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "ae_ohfCwhMxzNW_lZSw_tgAAAQY"]
[Tue Apr 28 06:51:50.364712 2026] [:error] [pid 6746:tid 6761] [client 4.232.90.232:34942] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "ae_ohruStsbXtMDpzS-haAAAAU0"]
[Tue Apr 28 06:51:50.961337 2026] [:error] [pid 14578:tid 14628] [client 4.232.90.232:8604] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "ae_ohungo3AwIJgfSHEa7wAAAE8"]
[Tue Apr 28 06:51:52.645220 2026] [:error] [pid 6746:tid 6757] [client 4.232.90.232:9032] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "ae_oiLuStsbXtMDpzS-hbAAAAUk"]
[Tue Apr 28 06:51:53.591759 2026] [:error] [pid 6746:tid 6750] [client 4.232.90.232:24548] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae_oibuStsbXtMDpzS-hcAAAAUI"]
[Tue Apr 28 06:51:54.806753 2026] [:error] [pid 14577:tid 14600] [client 4.232.90.232:24201] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae_oiizBH-jwzlgiBdHCLgAAAA4"]
[Tue Apr 28 06:51:55.686552 2026] [:error] [pid 56602:tid 56606] [client 4.232.90.232:38556] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae_oi_CwhMxzNW_lZSw_vwAAAQI"]
[Tue Apr 28 06:51:56.530484 2026] [:error] [pid 6746:tid 6768] [client 4.232.90.232:24213] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae_ojLuStsbXtMDpzS-hdAAAAVQ"]
[Tue Apr 28 06:51:57.664006 2026] [:error] [pid 14686:tid 14713] [client 4.232.90.232:38559] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ae_oje-YPF1Xm7uiWQ427gAAANg"]
[Tue Apr 28 06:51:58.703207 2026] [:error] [pid 14578:tid 14619] [client 4.232.90.232:44525] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ae_ojungo3AwIJgfSHEbTgAAAEY"]
[Tue Apr 28 06:51:59.665780 2026] [:error] [pid 14577:tid 14608] [client 4.232.90.232:38530] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ae_ojyzBH-jwzlgiBdHCRQAAABY"]
[Tue Apr 28 06:52:00.593191 2026] [:error] [pid 14686:tid 14700] [client 4.232.90.232:24549] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ae_okO-YPF1Xm7uiWQ428gAAAMs"]
[Tue Apr 28 06:52:01.594362 2026] [:error] [pid 14578:tid 14622] [client 4.232.90.232:44490] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "ae_okengo3AwIJgfSHEbdwAAAEk"]
[Tue Apr 28 06:52:03.081917 2026] [:error] [pid 14578:tid 14613] [client 4.232.90.232:24233] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "ae_ok-ngo3AwIJgfSHEbgAAAAEA"]
[Tue Apr 28 06:52:04.529512 2026] [:error] [pid 14577:tid 14608] [client 4.232.90.232:24518] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "ae_olCzBH-jwzlgiBdHCVQAAABY"]
[Tue Apr 28 06:52:05.681292 2026] [:error] [pid 14578:tid 14618] [client 4.232.90.232:35869] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "ae_olengo3AwIJgfSHEbmQAAAEU"]
[Tue Apr 28 06:52:07.504558 2026] [:error] [pid 6746:tid 6768] [client 4.232.90.232:49396] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/huya.php"] [unique_id "ae_ol7uStsbXtMDpzS-hgAAAAVQ"]
[Tue Apr 28 06:52:08.298626 2026] [:error] [pid 14578:tid 14613] [client 4.232.90.232:44501] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/huya.php"] [unique_id "ae_omOngo3AwIJgfSHEbpQAAAEA"]
[Tue Apr 28 06:52:08.940496 2026] [:error] [pid 6746:tid 6772] [client 4.232.90.232:8912] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/huya.php"] [unique_id "ae_omLuStsbXtMDpzS-hhQAAAVg"]
[Tue Apr 28 06:52:10.076772 2026] [:error] [pid 6746:tid 6765] [client 4.232.90.232:44494] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/huya.php"] [unique_id "ae_omruStsbXtMDpzS-hiQAAAVE"]
[Tue Apr 28 06:52:11.712622 2026] [:error] [pid 14578:tid 14628] [client 4.232.90.232:24525] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "ae_om-ngo3AwIJgfSHEbwgAAAE8"]
[Tue Apr 28 06:52:12.973243 2026] [:error] [pid 14578:tid 14634] [client 4.232.90.232:9041] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "ae_onOngo3AwIJgfSHEb3AAAAFU"]
[Tue Apr 28 06:52:13.515125 2026] [:error] [pid 14686:tid 14699] [client 4.232.90.232:38580] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "ae_one-YPF1Xm7uiWQ42-wAAAMo"]
[Tue Apr 28 06:52:14.432466 2026] [:error] [pid 14578:tid 14628] [client 4.232.90.232:26537] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "ae_onungo3AwIJgfSHEb-QAAAE8"]
[Tue Apr 28 06:52:15.749650 2026] [:error] [pid 14578:tid 14618] [client 4.232.90.232:8901] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "ae_on-ngo3AwIJgfSHEcDAAAAEU"]
[Tue Apr 28 06:52:16.636513 2026] [:error] [pid 14578:tid 14635] [client 4.232.90.232:24220] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "ae_ooOngo3AwIJgfSHEcGwAAAFY"]
[Tue Apr 28 06:52:18.267116 2026] [:error] [pid 14579:tid 14662] [client 4.232.90.232:38553] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "ae_oohrUiOG83qKKuuD5lwAAAJY"]
[Tue Apr 28 06:52:19.195920 2026] [:error] [pid 14577:tid 14598] [client 4.232.90.232:19306] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "ae_ooyzBH-jwzlgiBdHCaQAAAAw"]
[Tue Apr 28 06:52:20.608667 2026] [:error] [pid 14579:tid 14646] [client 4.232.90.232:49392] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ewp.php"] [unique_id "ae_opBrUiOG83qKKuuD5mQAAAIY"]
[Tue Apr 28 06:52:22.765883 2026] [:error] [pid 14578:tid 14620] [client 4.232.90.232:8750] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ewp.php"] [unique_id "ae_opungo3AwIJgfSHEcXAAAAEc"]
[Tue Apr 28 06:52:24.220833 2026] [:error] [pid 6746:tid 6757] [client 4.232.90.232:22035] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ewp.php"] [unique_id "ae_oqLuStsbXtMDpzS-h8QAAAUk"]
[Tue Apr 28 06:52:24.829911 2026] [:error] [pid 14577:tid 14603] [client 4.232.90.232:8723] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ewp.php"] [unique_id "ae_oqCzBH-jwzlgiBdHCeAAAABE"]
[Tue Apr 28 06:52:26.061637 2026] [:error] [pid 14577:tid 14602] [client 4.232.90.232:50643] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ae_oqizBH-jwzlgiBdHCfAAAABA"]
[Tue Apr 28 06:52:27.382005 2026] [:error] [pid 14578:tid 14635] [client 4.232.90.232:22492] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ae_oq-ngo3AwIJgfSHEcdwAAAFY"]
[Tue Apr 28 06:52:28.564295 2026] [:error] [pid 56602:tid 56627] [client 4.232.90.232:30226] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ae_orPCwhMxzNW_lZSw_6QAAARc"]
[Tue Apr 28 06:52:31.222867 2026] [:error] [pid 14577:tid 14598] [client 4.232.90.232:20708] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ae_oryzBH-jwzlgiBdHCjQAAAAw"]
[Tue Apr 28 06:52:32.388344 2026] [:error] [pid 14577:tid 14588] [client 4.232.90.232:30784] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "ae_osCzBH-jwzlgiBdHCkAAAAAI"]
[Tue Apr 28 06:52:33.428735 2026] [:error] [pid 14578:tid 14626] [client 4.232.90.232:30844] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "ae_osengo3AwIJgfSHEcxwAAAE0"]
[Tue Apr 28 06:52:34.721204 2026] [:error] [pid 14686:tid 14690] [client 4.232.90.232:20673] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "ae_osu-YPF1Xm7uiWQ43DAAAAME"]
[Tue Apr 28 06:52:35.538770 2026] [:error] [pid 14577:tid 14606] [client 4.232.90.232:33470] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "ae_osyzBH-jwzlgiBdHCoAAAABQ"]
[Tue Apr 28 06:52:36.736544 2026] [:error] [pid 14578:tid 14629] [client 4.232.90.232:21644] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "ae_otOngo3AwIJgfSHEc4QAAAFA"]
[Tue Apr 28 06:52:38.111502 2026] [:error] [pid 14578:tid 14616] [client 4.232.90.232:27306] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "ae_otungo3AwIJgfSHEc4gAAAEM"]
[Tue Apr 28 06:52:39.507972 2026] [:error] [pid 14578:tid 14628] [client 4.232.90.232:30997] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "ae_ot-ngo3AwIJgfSHEc6gAAAE8"]
[Tue Apr 28 06:52:40.720776 2026] [:error] [pid 6746:tid 6762] [client 4.232.90.232:31027] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "ae_ouLuStsbXtMDpzS-icgAAAU4"]
[Tue Apr 28 06:52:42.128924 2026] [:error] [pid 56602:tid 56608] [client 4.232.90.232:8315] File does not exist: /usr/local/apache/htdocs/suspended-page/awa.php
[Tue Apr 28 06:52:42.459635 2026] [:error] [pid 56602:tid 56620] [client 4.232.90.232:8315] File does not exist: /usr/local/apache/htdocs/suspended-page/popo.php
[Tue Apr 28 06:52:42.836472 2026] [:error] [pid 56602:tid 56626] [client 4.232.90.232:8315] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php
[Tue Apr 28 06:52:43.075163 2026] [:error] [pid 56602:tid 56606] [client 4.232.90.232:8315] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Tue Apr 28 06:52:43.314414 2026] [:error] [pid 56602:tid 56612] [client 4.232.90.232:8315] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Tue Apr 28 06:52:43.793624 2026] [:error] [pid 56602:tid 56623] [client 4.232.90.232:8315] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Tue Apr 28 06:52:44.030085 2026] [:error] [pid 56602:tid 56616] [client 4.232.90.232:8315] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Tue Apr 28 06:52:44.282829 2026] [:error] [pid 56602:tid 56615] [client 4.232.90.232:8315] File does not exist: /usr/local/apache/htdocs/suspended-page/seo.php
[Tue Apr 28 06:52:44.521386 2026] [:error] [pid 56602:tid 56625] [client 4.232.90.232:8315] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Tue Apr 28 06:52:44.759081 2026] [:error] [pid 56602:tid 56620] [client 4.232.90.232:8315] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Tue Apr 28 06:52:44.997995 2026] [:error] [pid 56602:tid 56617] [client 4.232.90.232:8315] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ae_ovPCwhMxzNW_lZSxAHAAAAQ0"]
[Tue Apr 28 06:52:46.222313 2026] [:error] [pid 14577:tid 14598] [client 4.232.90.232:39672] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ae_ovizBH-jwzlgiBdHCsQAAAAw"]
[Tue Apr 28 06:52:46.936032 2026] [:error] [pid 56602:tid 56606] [client 4.232.90.232:16871] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ae_ovvCwhMxzNW_lZSxAHwAAAQI"]
[Tue Apr 28 06:52:47.543658 2026] [:error] [pid 14579:tid 14648] [client 4.232.90.232:30277] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ae_ovxrUiOG83qKKuuD5twAAAIg"]
[Tue Apr 28 06:52:48.948495 2026] [:error] [pid 56602:tid 56623] [client 4.232.90.232:8312] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ae_owPCwhMxzNW_lZSxAJQAAARM"]
[Tue Apr 28 06:52:49.626250 2026] [:error] [pid 6746:tid 6748] [client 4.232.90.232:20027] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ae_owbuStsbXtMDpzS-iiAAAAUA"]
[Tue Apr 28 06:52:50.592132 2026] [:error] [pid 6746:tid 6749] [client 4.232.90.232:39627] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ae_owruStsbXtMDpzS-iiQAAAUE"]
[Tue Apr 28 06:52:51.997503 2026] [:error] [pid 6746:tid 6753] [client 4.232.90.232:21726] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ae_ow7uStsbXtMDpzS-ijQAAAUU"]
[Tue Apr 28 06:52:55.236148 2026] [:error] [pid 14578:tid 14613] [client 4.232.90.232:29890] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "ae_ox-ngo3AwIJgfSHEdDwAAAEA"]
[Tue Apr 28 06:52:56.093119 2026] [:error] [pid 14579:tid 14663] [client 4.232.90.232:21674] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "ae_oyBrUiOG83qKKuuD5wQAAAJc"]
[Tue Apr 28 06:52:57.248160 2026] [:error] [pid 14579:tid 14640] [client 4.232.90.232:30327] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "ae_oyRrUiOG83qKKuuD5xQAAAIA"]
[Tue Apr 28 06:52:59.131772 2026] [:error] [pid 14577:tid 14597] [client 4.232.90.232:29942] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "ae_oyyzBH-jwzlgiBdHC0wAAAAs"]
[Tue Apr 28 06:53:00.605523 2026] [:error] [pid 14577:tid 14608] [client 4.232.90.232:45037] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "ae_ozCzBH-jwzlgiBdHC2gAAABY"]
[Tue Apr 28 06:53:01.772388 2026] [:error] [pid 14577:tid 14593] [client 4.232.90.232:39657] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "ae_ozSzBH-jwzlgiBdHC4AAAAAc"]
[Tue Apr 28 06:53:02.437093 2026] [:error] [pid 6746:tid 6755] [client 4.232.90.232:30322] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "ae_ozruStsbXtMDpzS-imwAAAUc"]
[Tue Apr 28 06:53:03.263190 2026] [:error] [pid 14578:tid 14628] [client 4.232.90.232:40257] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "ae_oz-ngo3AwIJgfSHEdNQAAAE8"]
[Tue Apr 28 06:53:04.790432 2026] [:error] [pid 14577:tid 14608] [client 4.232.90.232:8292] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "ae_o0CzBH-jwzlgiBdHC7AAAABY"]
[Tue Apr 28 06:53:05.849117 2026] [:error] [pid 14577:tid 14607] [client 4.232.90.232:39674] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "ae_o0SzBH-jwzlgiBdHC8wAAABU"]
[Tue Apr 28 06:53:06.502937 2026] [:error] [pid 6746:tid 6771] [client 4.232.90.232:21677] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "ae_o0ruStsbXtMDpzS-irgAAAVc"]
[Tue Apr 28 06:53:07.366801 2026] [:error] [pid 14577:tid 14603] [client 4.232.90.232:21650] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "ae_o0yzBH-jwzlgiBdHC9gAAABE"]
[Tue Apr 28 06:53:08.242298 2026] [:error] [pid 14577:tid 14608] [client 4.232.90.232:39636] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "ae_o1CzBH-jwzlgiBdHC-AAAABY"]
[Tue Apr 28 06:53:09.797869 2026] [:error] [pid 14578:tid 14616] [client 4.232.90.232:8282] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "ae_o1engo3AwIJgfSHEdSgAAAEM"]
[Tue Apr 28 06:53:10.611536 2026] [:error] [pid 14577:tid 14607] [client 4.232.90.232:29937] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "ae_o1izBH-jwzlgiBdHC_gAAABU"]
[Tue Apr 28 06:53:11.259079 2026] [:error] [pid 14579:tid 14652] [client 4.232.90.232:45025] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "ae_o1xrUiOG83qKKuuD53wAAAIw"]
[Tue Apr 28 06:53:12.012213 2026] [:error] [pid 14578:tid 14614] [client 4.232.90.232:39663] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "ae_o2Ongo3AwIJgfSHEdZgAAAEE"]
[Tue Apr 28 06:53:12.640457 2026] [:error] [pid 14578:tid 14626] [client 4.232.90.232:34374] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "ae_o2Ongo3AwIJgfSHEdbwAAAE0"]
[Tue Apr 28 06:53:13.407525 2026] [:error] [pid 6746:tid 6750] [client 4.232.90.232:39659] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "ae_o2buStsbXtMDpzS-i0AAAAUI"]
[Tue Apr 28 06:53:14.215132 2026] [:error] [pid 56602:tid 56618] [client 4.232.90.232:8307] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "ae_o2vCwhMxzNW_lZSxARwAAAQ4"]
[Tue Apr 28 06:53:14.805730 2026] [:error] [pid 14578:tid 14616] [client 4.232.90.232:39653] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "ae_o2ungo3AwIJgfSHEdhQAAAEM"]
[Tue Apr 28 06:53:15.447151 2026] [:error] [pid 14577:tid 14601] [client 4.232.90.232:19988] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "ae_o2yzBH-jwzlgiBdHDGwAAAA8"]
[Tue Apr 28 06:53:16.159672 2026] [:error] [pid 14577:tid 14605] [client 4.232.90.232:8271] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "ae_o3CzBH-jwzlgiBdHDHgAAABM"]
[Tue Apr 28 06:53:16.830684 2026] [:error] [pid 56602:tid 56623] [client 4.232.90.232:39647] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "ae_o3PCwhMxzNW_lZSxATgAAARM"]
[Tue Apr 28 06:53:17.594760 2026] [:error] [pid 14686:tid 14692] [client 4.232.90.232:29911] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "ae_o3e-YPF1Xm7uiWQ43UwAAAMM"]
[Tue Apr 28 06:53:18.717445 2026] [:error] [pid 14579:tid 14656] [client 4.232.90.232:21751] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "ae_o3hrUiOG83qKKuuD6BwAAAJA"]
[Tue Apr 28 06:53:19.467916 2026] [:error] [pid 14577:tid 14586] [client 4.232.90.232:19992] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "ae_o3yzBH-jwzlgiBdHDMgAAAAA"]
[Tue Apr 28 06:53:20.190640 2026] [:error] [pid 6746:tid 6750] [client 4.232.90.232:30287] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "ae_o4LuStsbXtMDpzS-i7QAAAUI"]
[Tue Apr 28 06:53:20.902089 2026] [:error] [pid 6746:tid 6761] [client 4.232.90.232:34410] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ae_o4LuStsbXtMDpzS-i8AAAAU0"]
[Tue Apr 28 06:53:21.797768 2026] [:error] [pid 14578:tid 14623] [client 4.232.90.232:34380] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "ae_o4engo3AwIJgfSHEdvAAAAEo"]
[Tue Apr 28 06:53:22.878531 2026] [:error] [pid 56602:tid 56612] [client 4.232.90.232:30335] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "ae_o4vCwhMxzNW_lZSxAUwAAAQg"]
[Tue Apr 28 06:53:23.455554 2026] [:error] [pid 14577:tid 14602] [client 4.232.90.232:20017] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "ae_o4yzBH-jwzlgiBdHDPgAAABA"]
[Tue Apr 28 06:53:24.053389 2026] [:error] [pid 56602:tid 56621] [client 4.232.90.232:16859] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "ae_o5PCwhMxzNW_lZSxAVQAAARE"]
[Tue Apr 28 06:53:24.567565 2026] [:error] [pid 14686:tid 14708] [client 4.232.90.232:29935] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "ae_o5O-YPF1Xm7uiWQ43ZwAAANM"]
[Tue Apr 28 06:53:25.395470 2026] [:error] [pid 6746:tid 6760] [client 4.232.90.232:19990] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "ae_o5buStsbXtMDpzS-i-AAAAUw"]
[Tue Apr 28 06:53:26.358913 2026] [:error] [pid 14578:tid 14615] [client 4.232.90.232:16863] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "ae_o5ungo3AwIJgfSHEdzgAAAEI"]
[Tue Apr 28 06:53:27.191009 2026] [:error] [pid 14578:tid 14634] [client 4.232.90.232:21666] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "ae_o5-ngo3AwIJgfSHEd1QAAAFU"]
[Tue Apr 28 06:53:28.274728 2026] [:error] [pid 14578:tid 14629] [client 4.232.90.232:20013] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "ae_o6Ongo3AwIJgfSHEd2AAAAFA"]
[Tue Apr 28 06:53:29.064730 2026] [:error] [pid 14578:tid 14630] [client 4.232.90.232:20694] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "ae_o6engo3AwIJgfSHEd3AAAAFE"]
[Tue Apr 28 06:53:30.395251 2026] [:error] [pid 6746:tid 6752] [client 4.232.90.232:21736] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "ae_o6ruStsbXtMDpzS-jAQAAAUQ"]
[Tue Apr 28 06:53:31.216114 2026] [:error] [pid 14578:tid 14613] [client 4.232.90.232:21743] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "ae_o6-ngo3AwIJgfSHEd3QAAAEA"]
[Tue Apr 28 06:53:31.905413 2026] [:error] [pid 14579:tid 14663] [client 4.232.90.232:16878] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ae_o6xrUiOG83qKKuuD6DwAAAJc"]
[Tue Apr 28 06:53:32.462405 2026] [:error] [pid 14579:tid 14642] [client 4.232.90.232:45041] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ae_o7BrUiOG83qKKuuD6EAAAAII"]
[Tue Apr 28 06:53:33.256842 2026] [:error] [pid 56602:tid 56604] [client 4.232.90.232:21740] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ae_o7fCwhMxzNW_lZSxAVgAAAQA"]
[Tue Apr 28 06:53:34.155908 2026] [:error] [pid 14686:tid 14689] [client 4.232.90.232:21752] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ae_o7u-YPF1Xm7uiWQ43bQAAAMA"]
[Tue Apr 28 06:53:35.180415 2026] [:error] [pid 14579:tid 14657] [client 4.232.90.232:30328] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "ae_o7xrUiOG83qKKuuD6FAAAAJE"]
[Tue Apr 28 06:53:36.469206 2026] [:error] [pid 14577:tid 14593] [client 4.232.90.232:16860] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "ae_o8CzBH-jwzlgiBdHDRwAAAAc"]
[Tue Apr 28 06:53:37.233421 2026] [:error] [pid 14579:tid 14659] [client 4.232.90.232:34415] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "ae_o8RrUiOG83qKKuuD6FwAAAJM"]
[Tue Apr 28 06:53:38.017511 2026] [:error] [pid 56602:tid 56610] [client 4.232.90.232:21737] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "ae_o8vCwhMxzNW_lZSxAXgAAAQY"]
[Tue Apr 28 06:53:38.640180 2026] [:error] [pid 14686:tid 14709] [client 4.232.90.232:8260] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "ae_o8u-YPF1Xm7uiWQ43dQAAANQ"]
[Tue Apr 28 06:53:39.247013 2026] [:error] [pid 14579:tid 14643] [client 4.232.90.232:16852] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "ae_o8xrUiOG83qKKuuD6GAAAAIM"]
[Tue Apr 28 06:53:40.238427 2026] [:error] [pid 14579:tid 14656] [client 4.232.90.232:20686] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "ae_o9BrUiOG83qKKuuD6GQAAAJA"]
[Tue Apr 28 06:53:40.954203 2026] [:error] [pid 14578:tid 14627] [client 4.232.90.232:20018] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "ae_o9Ongo3AwIJgfSHEd4wAAAE4"]
[Tue Apr 28 06:53:41.500003 2026] [:error] [pid 14578:tid 14630] [client 4.232.90.232:34403] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "ae_o9engo3AwIJgfSHEd5AAAAFE"]
[Tue Apr 28 06:53:42.074978 2026] [:error] [pid 14579:tid 14660] [client 4.232.90.232:29915] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "ae_o9hrUiOG83qKKuuD6GgAAAJQ"]
[Tue Apr 28 06:53:42.595824 2026] [:error] [pid 14579:tid 14652] [client 4.232.90.232:20635] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "ae_o9hrUiOG83qKKuuD6HAAAAIw"]
[Tue Apr 28 06:53:43.141150 2026] [:error] [pid 56602:tid 56614] [client 4.232.90.232:20666] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "ae_o9_CwhMxzNW_lZSxAZwAAAQo"]
[Tue Apr 28 06:53:43.711879 2026] [:error] [pid 56602:tid 56621] [client 4.232.90.232:20705] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "ae_o9_CwhMxzNW_lZSxAaAAAARE"]
[Tue Apr 28 06:53:44.269528 2026] [:error] [pid 6746:tid 6765] [client 4.232.90.232:20644] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Tue Apr 28 06:53:44.506536 2026] [:error] [pid 6746:tid 6749] [client 4.232.90.232:20644] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Apr 28 06:53:44.747682 2026] [:error] [pid 6746:tid 6754] [client 4.232.90.232:20644] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Tue Apr 28 06:53:44.987628 2026] [:error] [pid 6746:tid 6750] [client 4.232.90.232:20644] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Tue Apr 28 06:53:45.224534 2026] [:error] [pid 6746:tid 6769] [client 4.232.90.232:20644] File does not exist: /usr/local/apache/htdocs/suspended-page/no1.php
[Tue Apr 28 06:53:45.463154 2026] [:error] [pid 6746:tid 6752] [client 4.232.90.232:20644] File does not exist: /usr/local/apache/htdocs/suspended-page/w2025.php
[Tue Apr 28 06:53:45.707190 2026] [:error] [pid 6746:tid 6763] [client 4.232.90.232:20644] File does not exist: /usr/local/apache/htdocs/suspended-page/fvvff.php
[Tue Apr 28 06:53:45.946634 2026] [:error] [pid 6746:tid 6761] [client 4.232.90.232:20644] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Tue Apr 28 06:53:46.190672 2026] [:error] [pid 6746:tid 6766] [client 4.232.90.232:20644] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Tue Apr 28 06:53:46.428018 2026] [:error] [pid 6746:tid 6755] [client 4.232.90.232:20644] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue Apr 28 06:53:46.902436 2026] [:error] [pid 6746:tid 6748] [client 4.232.90.232:20644] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "ae_o-ruStsbXtMDpzS-jFQAAAUA"]
[Tue Apr 28 06:53:47.405058 2026] [:error] [pid 56602:tid 56624] [client 4.232.90.232:30333] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "ae_o-_CwhMxzNW_lZSxAbwAAARQ"]
[Tue Apr 28 06:53:47.895470 2026] [:error] [pid 14577:tid 14588] [client 4.232.90.232:21651] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "ae_o-yzBH-jwzlgiBdHDSwAAAAI"]
[Tue Apr 28 06:53:48.391781 2026] [:error] [pid 14578:tid 14618] [client 4.232.90.232:19997] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "ae_o_Ongo3AwIJgfSHEd6QAAAEU"]
[Tue Apr 28 06:53:48.907935 2026] [:error] [pid 14577:tid 14608] [client 4.232.90.232:39639] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "ae_o_CzBH-jwzlgiBdHDTQAAABY"]
[Tue Apr 28 06:53:49.428012 2026] [:error] [pid 14686:tid 14705] [client 4.232.90.232:20711] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "ae_o_e-YPF1Xm7uiWQ43ggAAANA"]
[Tue Apr 28 06:53:49.936748 2026] [:error] [pid 14577:tid 14600] [client 4.232.90.232:20710] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "ae_o_SzBH-jwzlgiBdHDTgAAAA4"]
[Tue Apr 28 06:53:50.424427 2026] [:error] [pid 56602:tid 56622] [client 4.232.90.232:20612] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "ae_o_vCwhMxzNW_lZSxAdQAAARI"]
[Tue Apr 28 06:53:50.920132 2026] [:error] [pid 56602:tid 56614] [client 4.232.90.232:29920] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "ae_o_vCwhMxzNW_lZSxAeAAAAQo"]
[Tue Apr 28 06:53:51.433710 2026] [:error] [pid 56602:tid 56616] [client 4.232.90.232:20029] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "ae_o__CwhMxzNW_lZSxAewAAAQw"]
[Tue Apr 28 06:53:52.016940 2026] [:error] [pid 14577:tid 14605] [client 4.232.90.232:21742] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "ae_pACzBH-jwzlgiBdHDUgAAABM"]
[Tue Apr 28 06:53:52.497965 2026] [:error] [pid 56602:tid 56625] [client 4.232.90.232:20654] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "ae_pAPCwhMxzNW_lZSxAfwAAARU"]
[Tue Apr 28 06:53:53.000122 2026] [:error] [pid 56602:tid 56608] [client 4.232.90.232:20732] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ae_pAPCwhMxzNW_lZSxAgAAAAQQ"]
[Tue Apr 28 06:53:53.502421 2026] [:error] [pid 14577:tid 14593] [client 4.232.90.232:20684] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ae_pASzBH-jwzlgiBdHDUwAAAAc"]
[Tue Apr 28 06:53:53.985448 2026] [:error] [pid 14577:tid 14609] [client 4.232.90.232:16884] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ae_pASzBH-jwzlgiBdHDVQAAABc"]
[Tue Apr 28 06:53:54.452286 2026] [:error] [pid 14577:tid 14610] [client 4.232.90.232:23976] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ae_pAizBH-jwzlgiBdHDWAAAABg"]
[Tue Apr 28 06:53:54.955005 2026] [:error] [pid 14577:tid 14599] [client 4.232.90.232:29943] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "ae_pAizBH-jwzlgiBdHDWgAAAA0"]
[Tue Apr 28 06:53:55.421450 2026] [:error] [pid 56602:tid 56620] [client 4.232.90.232:21746] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "ae_pA_CwhMxzNW_lZSxAhQAAARA"]
[Tue Apr 28 06:53:55.900873 2026] [:error] [pid 6746:tid 6759] [client 4.232.90.232:16856] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "ae_pA7uStsbXtMDpzS-jGAAAAUs"]
[Tue Apr 28 06:53:56.396915 2026] [:error] [pid 14577:tid 14603] [client 4.232.90.232:30331] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "ae_pBCzBH-jwzlgiBdHDXgAAABE"]
[Tue Apr 28 06:53:56.865408 2026] [:error] [pid 6746:tid 6770] [client 4.232.90.232:34417] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "ae_pBLuStsbXtMDpzS-jHAAAAVY"]
[Tue Apr 28 06:53:57.338846 2026] [:error] [pid 14579:tid 14641] [client 4.232.90.232:34387] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "ae_pBRrUiOG83qKKuuD6KQAAAIE"]
[Tue Apr 28 06:53:57.808038 2026] [:error] [pid 14577:tid 14596] [client 4.232.90.232:39617] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "ae_pBSzBH-jwzlgiBdHDYgAAAAo"]
[Tue Apr 28 06:53:58.274555 2026] [:error] [pid 14577:tid 14605] [client 4.232.90.232:39658] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "ae_pBizBH-jwzlgiBdHDYwAAABM"]
[Tue Apr 28 06:53:58.744325 2026] [:error] [pid 14579:tid 14644] [client 4.232.90.232:19986] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae_pBhrUiOG83qKKuuD6MQAAAIQ"]
[Tue Apr 28 06:53:59.217104 2026] [:error] [pid 14577:tid 14609] [client 4.232.90.232:20647] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae_pByzBH-jwzlgiBdHDZgAAABc"]
[Tue Apr 28 06:53:59.685419 2026] [:error] [pid 14577:tid 14590] [client 4.232.90.232:20703] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae_pByzBH-jwzlgiBdHDaQAAAAQ"]
[Tue Apr 28 06:54:00.154581 2026] [:error] [pid 14577:tid 14598] [client 4.232.90.232:16838] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae_pCCzBH-jwzlgiBdHDeAAAAAw"]
[Tue Apr 28 06:54:00.623932 2026] [:error] [pid 6746:tid 6761] [client 4.232.90.232:21699] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "ae_pCLuStsbXtMDpzS-jIgAAAU0"]
[Tue Apr 28 06:54:01.098201 2026] [:error] [pid 14578:tid 14621] [client 4.232.90.232:39655] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "ae_pCengo3AwIJgfSHEd7QAAAEg"]
[Tue Apr 28 06:54:01.566654 2026] [:error] [pid 14578:tid 14636] [client 4.232.90.232:16845] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "ae_pCengo3AwIJgfSHEd7wAAAFc"]
[Tue Apr 28 06:54:02.032471 2026] [:error] [pid 14577:tid 14596] [client 4.232.90.232:20015] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "ae_pCizBH-jwzlgiBdHDvwAAAAo"]
[Tue Apr 28 06:54:02.498137 2026] [:error] [pid 6746:tid 6748] [client 4.232.90.232:23947] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ae_pCruStsbXtMDpzS-jJQAAAUA"]
[Tue Apr 28 06:54:02.962622 2026] [:error] [pid 14577:tid 14601] [client 4.232.90.232:29926] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ae_pCizBH-jwzlgiBdHD7AAAAA8"]
[Tue Apr 28 06:54:03.429578 2026] [:error] [pid 14686:tid 14711] [client 4.232.90.232:19996] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ae_pC--YPF1Xm7uiWQ43mgAAANY"]
[Tue Apr 28 06:54:03.894726 2026] [:error] [pid 14579:tid 14642] [client 4.232.90.232:19981] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ae_pCxrUiOG83qKKuuD6dQAAAII"]
[Tue Apr 28 06:54:04.360461 2026] [:error] [pid 6746:tid 6760] [client 4.232.90.232:16864] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae_pDLuStsbXtMDpzS-jKAAAAUw"]
[Tue Apr 28 06:54:04.825446 2026] [:error] [pid 6746:tid 6768] [client 4.232.90.232:29936] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae_pDLuStsbXtMDpzS-jKQAAAVQ"]
[Tue Apr 28 06:54:05.294288 2026] [:error] [pid 14578:tid 14635] [client 4.232.90.232:31400] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae_pDengo3AwIJgfSHEeBAAAAFY"]
[Tue Apr 28 06:54:05.763182 2026] [:error] [pid 6746:tid 6762] [client 4.232.90.232:39621] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae_pDbuStsbXtMDpzS-jKgAAAU4"]
[Tue Apr 28 06:54:06.234850 2026] [:error] [pid 6746:tid 6749] [client 4.232.90.232:20696] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "ae_pDruStsbXtMDpzS-jKwAAAUE"]
[Tue Apr 28 06:54:06.703298 2026] [:error] [pid 6746:tid 6750] [client 4.232.90.232:23948] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "ae_pDruStsbXtMDpzS-jLAAAAUI"]
[Tue Apr 28 06:54:07.190255 2026] [:error] [pid 56602:tid 56615] [client 4.232.90.232:34419] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "ae_pD_CwhMxzNW_lZSxAjQAAAQs"]
[Tue Apr 28 06:54:07.679490 2026] [:error] [pid 14579:tid 14642] [client 4.232.90.232:20698] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "ae_pDxrUiOG83qKKuuD6gQAAAII"]
[Tue Apr 28 06:54:08.167993 2026] [:error] [pid 14577:tid 14601] [client 4.232.90.232:20671] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "ae_pECzBH-jwzlgiBdHEIgAAAA8"]
[Tue Apr 28 06:54:08.634504 2026] [:error] [pid 14578:tid 14620] [client 4.232.90.232:21692] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "ae_pEOngo3AwIJgfSHEeEAAAAEc"]
[Tue Apr 28 06:54:09.190887 2026] [:error] [pid 14578:tid 14626] [client 4.232.90.232:34396] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "ae_pEengo3AwIJgfSHEeFAAAAE0"]
[Tue Apr 28 06:54:09.677420 2026] [:error] [pid 14578:tid 14618] [client 4.232.90.232:28050] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "ae_pEengo3AwIJgfSHEeGQAAAEU"]
[Tue Apr 28 06:54:10.153683 2026] [:error] [pid 14578:tid 14620] [client 4.232.90.232:23980] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ae_pEungo3AwIJgfSHEeIQAAAEc"]
[Tue Apr 28 06:54:10.619062 2026] [:error] [pid 14578:tid 14628] [client 4.232.90.232:40304] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ae_pEungo3AwIJgfSHEeKgAAAE8"]
[Tue Apr 28 06:54:11.113446 2026] [:error] [pid 14577:tid 14588] [client 4.232.90.232:21653] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ae_pEyzBH-jwzlgiBdHEJQAAAAI"]
[Tue Apr 28 06:54:11.658116 2026] [:error] [pid 6746:tid 6759] [client 4.232.90.232:45016] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ae_pE7uStsbXtMDpzS-jMgAAAUs"]
[Tue Apr 28 06:54:12.167486 2026] [:error] [pid 14577:tid 14605] [client 4.232.90.232:39670] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_pFCzBH-jwzlgiBdHEKgAAABM"]
[Tue Apr 28 06:54:12.686282 2026] [:error] [pid 14578:tid 14631] [client 4.232.90.232:21673] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_pFOngo3AwIJgfSHEemgAAAFI"]
[Tue Apr 28 06:54:13.231344 2026] [:error] [pid 56602:tid 56628] [client 4.232.90.232:23937] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_pFfCwhMxzNW_lZSxAjgAAARg"]
[Tue Apr 28 06:54:13.759731 2026] [:error] [pid 14579:tid 14643] [client 4.232.90.232:21659] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_pFRrUiOG83qKKuuD6jwAAAIM"]
[Tue Apr 28 06:54:14.262972 2026] [:error] [pid 14578:tid 14620] [client 4.232.90.232:29020] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "ae_pFungo3AwIJgfSHEe4gAAAEc"]
[Tue Apr 28 06:54:14.780539 2026] [:error] [pid 56602:tid 56617] [client 4.232.90.232:34425] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "ae_pFvCwhMxzNW_lZSxAkAAAAQ0"]
[Tue Apr 28 06:54:15.312690 2026] [:error] [pid 56602:tid 56613] [client 4.232.90.232:8774] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "ae_pF_CwhMxzNW_lZSxAkgAAAQk"]
[Tue Apr 28 06:54:15.843402 2026] [:error] [pid 14577:tid 14590] [client 4.232.90.232:50029] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "ae_pFyzBH-jwzlgiBdHENgAAAAQ"]
[Tue Apr 28 06:54:16.384087 2026] [:error] [pid 14578:tid 14624] [client 4.232.90.232:33978] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "ae_pGOngo3AwIJgfSHEe7QAAAEs"]
[Tue Apr 28 06:54:16.951162 2026] [:error] [pid 14577:tid 14604] [client 4.232.90.232:33931] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "ae_pGCzBH-jwzlgiBdHEOAAAABI"]
[Tue Apr 28 06:54:17.458443 2026] [:error] [pid 56602:tid 56625] [client 4.232.90.232:42947] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "ae_pGfCwhMxzNW_lZSxAkwAAARU"]
[Tue Apr 28 06:54:17.964210 2026] [:error] [pid 14686:tid 14712] [client 4.232.90.232:25527] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "ae_pGe-YPF1Xm7uiWQ43zwAAANc"]
[Tue Apr 28 06:54:18.491640 2026] [:error] [pid 14577:tid 14589] [client 4.232.90.232:41710] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "ae_pGizBH-jwzlgiBdHEOwAAAAM"]
[Tue Apr 28 06:54:19.000987 2026] [:error] [pid 14577:tid 14596] [client 4.232.90.232:43568] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "ae_pGizBH-jwzlgiBdHEPQAAAAo"]
[Tue Apr 28 06:54:19.490679 2026] [:error] [pid 14578:tid 14634] [client 4.232.90.232:20937] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "ae_pG-ngo3AwIJgfSHEe8wAAAFU"]
[Tue Apr 28 06:54:19.955491 2026] [:error] [pid 14686:tid 14713] [client 4.232.90.232:40377] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "ae_pG--YPF1Xm7uiWQ430QAAANg"]
[Tue Apr 28 06:54:20.423264 2026] [:error] [pid 6746:tid 6769] [client 4.232.90.232:40342] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "ae_pHLuStsbXtMDpzS-jNgAAAVU"]
[Tue Apr 28 06:54:21.013442 2026] [:error] [pid 6746:tid 6763] [client 4.232.90.232:40368] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "ae_pHbuStsbXtMDpzS-jNwAAAU8"]
[Tue Apr 28 06:54:21.503691 2026] [:error] [pid 14578:tid 14632] [client 4.232.90.232:24008] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "ae_pHengo3AwIJgfSHEe9wAAAFM"]
[Tue Apr 28 06:54:22.035120 2026] [:error] [pid 14578:tid 14627] [client 4.232.90.232:40368] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "ae_pHungo3AwIJgfSHEe-AAAAE4"]
[Tue Apr 28 06:54:22.541956 2026] [:error] [pid 14578:tid 14623] [client 4.232.90.232:39076] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ae_pHungo3AwIJgfSHEe_gAAAEo"]
[Tue Apr 28 06:54:23.059411 2026] [:error] [pid 14579:tid 14664] [client 4.232.90.232:50690] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ae_pHxrUiOG83qKKuuD6kwAAAJg"]
[Tue Apr 28 06:54:23.574489 2026] [:error] [pid 14578:tid 14636] [client 4.232.90.232:24033] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ae_pH-ngo3AwIJgfSHEfAwAAAFc"]
[Tue Apr 28 06:54:24.098534 2026] [:error] [pid 14686:tid 14709] [client 4.232.90.232:50014] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ae_pIO-YPF1Xm7uiWQ431QAAANQ"]
[Tue Apr 28 06:54:24.612934 2026] [:error] [pid 14577:tid 14588] [client 4.232.90.232:19215] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ae_pICzBH-jwzlgiBdHERgAAAAI"]
[Tue Apr 28 06:54:25.098621 2026] [:error] [pid 6746:tid 6749] [client 4.232.90.232:50730] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ae_pIbuStsbXtMDpzS-jRQAAAUE"]
[Tue Apr 28 06:54:25.566811 2026] [:error] [pid 14578:tid 14628] [client 4.232.90.232:35279] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ae_pIengo3AwIJgfSHEfEgAAAE8"]
[Tue Apr 28 06:54:26.057863 2026] [:error] [pid 14578:tid 14626] [client 4.232.90.232:49457] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ae_pIungo3AwIJgfSHEfFAAAAE0"]
[Tue Apr 28 06:54:26.527291 2026] [:error] [pid 6746:tid 6769] [client 4.232.90.232:29439] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "ae_pIruStsbXtMDpzS-jSQAAAVU"]
[Tue Apr 28 06:54:26.995185 2026] [:error] [pid 56602:tid 56607] [client 4.232.90.232:50730] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "ae_pIvCwhMxzNW_lZSxAqAAAAQM"]
[Tue Apr 28 06:54:27.498218 2026] [:error] [pid 14579:tid 14640] [client 4.232.90.232:29427] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "ae_pIxrUiOG83qKKuuD6lAAAAIA"]
[Tue Apr 28 06:54:28.048004 2026] [:error] [pid 56602:tid 56624] [client 4.232.90.232:35367] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "ae_pJPCwhMxzNW_lZSxAqgAAARQ"]
[Tue Apr 28 06:54:28.554648 2026] [:error] [pid 14577:tid 14593] [client 4.232.90.232:24508] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "ae_pJCzBH-jwzlgiBdHERwAAAAc"]
[Tue Apr 28 06:54:29.055788 2026] [:error] [pid 14578:tid 14615] [client 4.232.90.232:35280] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "ae_pJengo3AwIJgfSHEfHAAAAEI"]
[Tue Apr 28 06:54:29.595428 2026] [:error] [pid 14577:tid 14589] [client 4.232.90.232:19223] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "ae_pJSzBH-jwzlgiBdHESgAAAAM"]
[Tue Apr 28 06:54:30.150151 2026] [:error] [pid 6746:tid 6754] [client 4.232.90.232:35320] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "ae_pJruStsbXtMDpzS-jTwAAAUY"]
[Tue Apr 28 06:54:30.647617 2026] [:error] [pid 56602:tid 56605] [client 4.232.90.232:39056] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "ae_pJvCwhMxzNW_lZSxArAAAAQE"]
[Tue Apr 28 06:54:31.130771 2026] [:error] [pid 14686:tid 14701] [client 4.232.90.232:19242] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "ae_pJ--YPF1Xm7uiWQ431wAAAMw"]
[Tue Apr 28 06:54:31.628668 2026] [:error] [pid 6746:tid 6749] [client 4.232.90.232:35312] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "ae_pJ7uStsbXtMDpzS-jVgAAAUE"]
[Tue Apr 28 06:54:32.138101 2026] [:error] [pid 6746:tid 6752] [client 4.232.90.232:35317] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "ae_pKLuStsbXtMDpzS-jWAAAAUQ"]
[Tue Apr 28 06:54:32.619276 2026] [:error] [pid 6746:tid 6766] [client 4.232.90.232:38512] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "ae_pKLuStsbXtMDpzS-jXAAAAVI"]
[Tue Apr 28 06:54:33.093425 2026] [:error] [pid 6746:tid 6768] [client 4.232.90.232:38468] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "ae_pKbuStsbXtMDpzS-jYQAAAVQ"]
[Tue Apr 28 06:54:33.591739 2026] [:error] [pid 56602:tid 56619] [client 4.232.90.232:9177] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "ae_pKfCwhMxzNW_lZSxAtAAAAQ8"]
[Tue Apr 28 06:54:34.087916 2026] [:error] [pid 14578:tid 14634] [client 4.232.90.232:24457] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "ae_pKungo3AwIJgfSHEfKQAAAFU"]
[Tue Apr 28 06:54:34.593460 2026] [:error] [pid 14577:tid 14610] [client 4.232.90.232:41236] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ae_pKizBH-jwzlgiBdHEUAAAABg"]
[Tue Apr 28 06:54:35.153053 2026] [:error] [pid 6746:tid 6763] [client 4.232.90.232:33904] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ae_pK7uStsbXtMDpzS-jaQAAAU8"]
[Tue Apr 28 06:54:35.668310 2026] [:error] [pid 14578:tid 14624] [client 4.232.90.232:41225] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ae_pK-ngo3AwIJgfSHEfLwAAAEs"]
[Tue Apr 28 06:54:36.137326 2026] [:error] [pid 14577:tid 14604] [client 4.232.90.232:9176] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ae_pLCzBH-jwzlgiBdHEVAAAABI"]
[Tue Apr 28 06:54:36.604167 2026] [:error] [pid 14578:tid 14637] [client 4.232.90.232:26753] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "ae_pLOngo3AwIJgfSHEfMwAAAFg"]
[Tue Apr 28 06:54:37.103478 2026] [:error] [pid 14577:tid 14592] [client 4.232.90.232:26773] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "ae_pLSzBH-jwzlgiBdHEVwAAAAY"]
[Tue Apr 28 06:54:37.607066 2026] [:error] [pid 14578:tid 14634] [client 4.232.90.232:42055] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "ae_pLengo3AwIJgfSHEfNwAAAFU"]
[Tue Apr 28 06:54:38.106220 2026] [:error] [pid 14578:tid 14626] [client 4.232.90.232:20433] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "ae_pLungo3AwIJgfSHEfOQAAAE0"]
[Tue Apr 28 06:54:38.632929 2026] [:error] [pid 14577:tid 14596] [client 4.232.90.232:9198] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ae_pLizBH-jwzlgiBdHEXAAAAAo"]
[Tue Apr 28 06:54:39.159867 2026] [:error] [pid 14577:tid 14610] [client 4.232.90.232:9168] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ae_pLyzBH-jwzlgiBdHEXwAAABg"]
[Tue Apr 28 06:54:39.663161 2026] [:error] [pid 14577:tid 14594] [client 4.232.90.232:19641] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ae_pLyzBH-jwzlgiBdHEZQAAAAg"]
[Tue Apr 28 06:54:40.169728 2026] [:error] [pid 56602:tid 56625] [client 4.232.90.232:33887] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ae_pMPCwhMxzNW_lZSxAvAAAARU"]
[Tue Apr 28 06:54:40.678688 2026] [:error] [pid 14579:tid 14655] [client 4.232.90.232:38525] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "ae_pMBrUiOG83qKKuuD6lwAAAI8"]
[Tue Apr 28 06:54:41.146332 2026] [:error] [pid 14579:tid 14649] [client 4.232.90.232:9171] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "ae_pMRrUiOG83qKKuuD6mAAAAIk"]
[Tue Apr 28 06:54:41.615938 2026] [:error] [pid 6746:tid 6769] [client 4.232.90.232:23239] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "ae_pMbuStsbXtMDpzS-jdAAAAVU"]
[Tue Apr 28 06:54:42.082144 2026] [:error] [pid 14578:tid 14617] [client 4.232.90.232:9173] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "ae_pMungo3AwIJgfSHEfRgAAAEQ"]
[Tue Apr 28 06:54:42.548176 2026] [:error] [pid 56602:tid 56613] [client 4.232.90.232:19642] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ae_pMvCwhMxzNW_lZSxAvwAAAQk"]
[Tue Apr 28 06:54:43.013418 2026] [:error] [pid 56602:tid 56605] [client 4.232.90.232:9157] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ae_pM_CwhMxzNW_lZSxAwAAAAQE"]
[Tue Apr 28 06:54:43.507776 2026] [:error] [pid 6746:tid 6771] [client 4.232.90.232:38507] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ae_pM7uStsbXtMDpzS-jfgAAAVc"]
[Tue Apr 28 06:54:44.044540 2026] [:error] [pid 56602:tid 56626] [client 4.232.90.232:26782] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ae_pNPCwhMxzNW_lZSxAwwAAARY"]
[Tue Apr 28 06:54:44.570495 2026] [:error] [pid 14578:tid 14627] [client 4.232.90.232:23253] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ae_pNOngo3AwIJgfSHEfYAAAAE4"]
[Tue Apr 28 06:54:45.066074 2026] [:error] [pid 14686:tid 14696] [client 4.232.90.232:9163] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ae_pNe-YPF1Xm7uiWQ437QAAAMc"]
[Tue Apr 28 06:54:45.531178 2026] [:error] [pid 56602:tid 56628] [client 4.232.90.232:8373] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ae_pNfCwhMxzNW_lZSxAxwAAARg"]
[Tue Apr 28 06:54:45.995373 2026] [:error] [pid 6746:tid 6772] [client 4.232.90.232:38520] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ae_pNbuStsbXtMDpzS-jiwAAAVg"]
[Tue Apr 28 06:54:46.464051 2026] [:error] [pid 56602:tid 56614] [client 4.232.90.232:19610] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Tue Apr 28 06:54:46.943143 2026] [:error] [pid 56602:tid 56621] [client 4.232.90.232:19610] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Tue Apr 28 06:54:47.180379 2026] [:error] [pid 56602:tid 56613] [client 4.232.90.232:19610] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Tue Apr 28 06:54:47.422501 2026] [:error] [pid 56602:tid 56608] [client 4.232.90.232:19610] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Tue Apr 28 06:54:47.903670 2026] [:error] [pid 56602:tid 56615] [client 4.232.90.232:19610] [client 4.232.90.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ae_pN_CwhMxzNW_lZSxA1AAAAQs"]
[Tue Apr 28 06:54:48.374697 2026] [:error] [pid 14577:tid 14593] [client 4.232.90.232:8377] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Tue Apr 28 06:54:49.088553 2026] [:error] [pid 14577:tid 14594] [client 4.232.90.232:8377] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Tue Apr 28 06:54:49.327581 2026] [:error] [pid 14577:tid 14608] [client 4.232.90.232:8377] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Tue Apr 28 06:54:49.562070 2026] [:error] [pid 14577:tid 14601] [client 4.232.90.232:8377] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "ae_pOSzBH-jwzlgiBdHEuQAAAA8"]
[Tue Apr 28 06:54:50.029735 2026] [:error] [pid 14579:tid 14648] [client 4.232.90.232:8353] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "ae_pOhrUiOG83qKKuuD6pwAAAIg"]
[Tue Apr 28 06:54:50.495505 2026] [:error] [pid 6746:tid 6759] [client 4.232.90.232:23255] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "ae_pOruStsbXtMDpzS-jjgAAAUs"]
[Tue Apr 28 06:54:50.991750 2026] [:error] [pid 14578:tid 14625] [client 4.232.90.232:22789] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "ae_pOungo3AwIJgfSHEfgAAAAEw"]
[Tue Apr 28 06:54:51.488671 2026] [:error] [pid 14578:tid 14613] [client 4.232.90.232:19611] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "ae_pO-ngo3AwIJgfSHEfhAAAAEA"]
[Tue Apr 28 06:54:52.001596 2026] [:error] [pid 14578:tid 14614] [client 4.232.90.232:8355] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "ae_pPOngo3AwIJgfSHEfiAAAAEE"]
[Tue Apr 28 06:54:52.504568 2026] [:error] [pid 14577:tid 14587] [client 4.232.90.232:26815] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "ae_pPCzBH-jwzlgiBdHEvgAAAAE"]
[Tue Apr 28 06:54:52.972880 2026] [:error] [pid 14577:tid 14602] [client 4.232.90.232:8372] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "ae_pPCzBH-jwzlgiBdHEvwAAABA"]
[Tue Apr 28 06:54:53.469805 2026] [:error] [pid 6746:tid 6749] [client 4.232.90.232:8365] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae_pPbuStsbXtMDpzS-jkQAAAUE"]
[Tue Apr 28 06:54:53.966404 2026] [:error] [pid 6746:tid 6763] [client 4.232.90.232:41259] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae_pPbuStsbXtMDpzS-jlAAAAU8"]
[Tue Apr 28 06:54:54.487877 2026] [:error] [pid 6746:tid 6751] [client 4.232.90.232:41279] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae_pPruStsbXtMDpzS-jmAAAAUM"]
[Tue Apr 28 06:54:55.026918 2026] [:error] [pid 14579:tid 14663] [client 4.232.90.232:23277] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae_pPxrUiOG83qKKuuD6qAAAAJc"]
[Tue Apr 28 06:54:55.554136 2026] [:error] [pid 6746:tid 6770] [client 4.232.90.232:9099] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "ae_pP7uStsbXtMDpzS-jngAAAVY"]
[Tue Apr 28 06:54:56.050580 2026] [:error] [pid 14686:tid 14698] [client 4.232.90.232:41240] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "ae_pQO-YPF1Xm7uiWQ43-gAAAMk"]
[Tue Apr 28 06:54:56.560047 2026] [:error] [pid 14578:tid 14634] [client 4.232.90.232:22787] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "ae_pQOngo3AwIJgfSHEfmAAAAFU"]
[Tue Apr 28 06:54:57.059469 2026] [:error] [pid 14686:tid 14695] [client 4.232.90.232:8325] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "ae_pQe-YPF1Xm7uiWQ43-wAAAMY"]
[Tue Apr 28 06:54:57.562141 2026] [:error] [pid 14579:tid 14653] [client 4.232.90.232:22806] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae_pQRrUiOG83qKKuuD6rgAAAI0"]
[Tue Apr 28 06:54:58.031642 2026] [:error] [pid 14579:tid 14642] [client 4.232.90.232:8338] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae_pQhrUiOG83qKKuuD6rwAAAII"]
[Tue Apr 28 06:54:58.511140 2026] [:error] [pid 14578:tid 14627] [client 4.232.90.232:23285] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae_pQungo3AwIJgfSHEfmwAAAE4"]
[Tue Apr 28 06:54:59.045991 2026] [:error] [pid 14578:tid 14621] [client 4.232.90.232:38511] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae_pQ-ngo3AwIJgfSHEfngAAAEg"]
[Tue Apr 28 06:54:59.549839 2026] [:error] [pid 14578:tid 14626] [client 4.232.90.232:9101] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "ae_pQ-ngo3AwIJgfSHEfoAAAAE0"]
[Tue Apr 28 06:55:00.019313 2026] [:error] [pid 14579:tid 14640] [client 4.232.90.232:42086] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "ae_pRBrUiOG83qKKuuD6swAAAIA"]
[Tue Apr 28 06:55:00.500582 2026] [:error] [pid 14579:tid 14662] [client 4.232.90.232:39686] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "ae_pRBrUiOG83qKKuuD6twAAAJY"]
[Tue Apr 28 06:55:00.992396 2026] [:error] [pid 14579:tid 14646] [client 4.232.90.232:41219] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "ae_pRBrUiOG83qKKuuD6vAAAAIY"]
[Tue Apr 28 06:55:01.509770 2026] [:error] [pid 6746:tid 6754] [client 4.232.90.232:9009] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "ae_pRbuStsbXtMDpzS-jpwAAAUY"]
[Tue Apr 28 06:55:02.014578 2026] [:error] [pid 6746:tid 6752] [client 4.232.90.232:23506] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "ae_pRruStsbXtMDpzS-jqAAAAUQ"]
[Tue Apr 28 06:55:02.487784 2026] [:error] [pid 14579:tid 14659] [client 4.232.90.232:23509] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "ae_pRhrUiOG83qKKuuD6xQAAAJM"]
[Tue Apr 28 06:55:02.952492 2026] [:error] [pid 14686:tid 14697] [client 4.232.90.232:9013] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "ae_pRu-YPF1Xm7uiWQ44AAAAAMg"]
[Tue Apr 28 06:55:03.419676 2026] [:error] [pid 14579:tid 14655] [client 4.232.90.232:27658] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ae_pRxrUiOG83qKKuuD6xwAAAI8"]
[Tue Apr 28 06:55:03.925105 2026] [:error] [pid 56602:tid 56610] [client 4.232.90.232:23532] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ae_pR_CwhMxzNW_lZSxA6QAAAQY"]
[Tue Apr 28 06:55:04.461774 2026] [:error] [pid 6746:tid 6766] [client 4.232.90.232:35821] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ae_pSLuStsbXtMDpzS-jsgAAAVI"]
[Tue Apr 28 06:55:04.988900 2026] [:error] [pid 6746:tid 6768] [client 4.232.90.232:23521] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "ae_pSLuStsbXtMDpzS-jugAAAVQ"]
[Tue Apr 28 06:55:05.523399 2026] [:error] [pid 14578:tid 14629] [client 4.232.90.232:29873] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "ae_pSengo3AwIJgfSHEftAAAAFA"]
[Tue Apr 28 06:55:06.025512 2026] [:error] [pid 14577:tid 14607] [client 4.232.90.232:39699] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "ae_pSizBH-jwzlgiBdHEzgAAABU"]
[Tue Apr 28 06:55:06.500790 2026] [:error] [pid 14578:tid 14615] [client 4.232.90.232:39696] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "ae_pSungo3AwIJgfSHEftQAAAEI"]
[Tue Apr 28 06:55:06.999397 2026] [:error] [pid 14686:tid 14707] [client 4.232.90.232:23521] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "ae_pSu-YPF1Xm7uiWQ44GwAAANI"]
[Tue Apr 28 06:55:07.526587 2026] [:error] [pid 56602:tid 56610] [client 4.232.90.232:23488] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "ae_pS_CwhMxzNW_lZSxA_wAAAQY"]
[Tue Apr 28 06:55:08.034969 2026] [:error] [pid 14686:tid 14698] [client 4.232.90.232:23257] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "ae_pTO-YPF1Xm7uiWQ44IwAAAMk"]
[Tue Apr 28 06:55:08.504291 2026] [:error] [pid 14686:tid 14713] [client 4.232.90.232:22838] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "ae_pTO-YPF1Xm7uiWQ44JgAAANg"]
[Tue Apr 28 06:55:08.974548 2026] [:error] [pid 14577:tid 14610] [client 4.232.90.232:42095] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "ae_pTCzBH-jwzlgiBdHE0QAAABg"]
[Tue Apr 28 06:55:09.447020 2026] [:error] [pid 14577:tid 14605] [client 4.232.90.232:22837] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ae_pTSzBH-jwzlgiBdHE0wAAABM"]
[Tue Apr 28 06:55:09.989803 2026] [:error] [pid 14578:tid 14631] [client 4.232.90.232:29852] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ae_pTengo3AwIJgfSHEfzwAAAFI"]
[Tue Apr 28 06:55:10.515883 2026] [:error] [pid 14578:tid 14624] [client 4.232.90.232:23523] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ae_pTungo3AwIJgfSHEf0AAAAEs"]
[Tue Apr 28 06:55:11.013368 2026] [:error] [pid 14578:tid 14626] [client 4.232.90.232:22831] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ae_pT-ngo3AwIJgfSHEf0QAAAE0"]
[Tue Apr 28 06:55:11.485010 2026] [:error] [pid 56602:tid 56613] [client 4.232.90.232:27665] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "ae_pT_CwhMxzNW_lZSxBGgAAAQk"]
[Tue Apr 28 06:55:11.988789 2026] [:error] [pid 6746:tid 6760] [client 4.232.90.232:22808] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "ae_pT7uStsbXtMDpzS-j9gAAAUw"]
[Tue Apr 28 06:55:12.490195 2026] [:error] [pid 6746:tid 6766] [client 4.232.90.232:23546] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "ae_pULuStsbXtMDpzS-j-gAAAVI"]
[Tue Apr 28 06:55:12.958699 2026] [:error] [pid 14578:tid 14625] [client 4.232.90.232:27705] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "ae_pUOngo3AwIJgfSHEf0gAAAEw"]
[Tue Apr 28 06:55:13.455036 2026] [:error] [pid 14578:tid 14616] [client 4.232.90.232:27668] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "ae_pUengo3AwIJgfSHEf1QAAAEM"]
[Tue Apr 28 06:55:13.956325 2026] [:error] [pid 14578:tid 14631] [client 4.232.90.232:9019] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "ae_pUengo3AwIJgfSHEf2gAAAFI"]
[Tue Apr 28 06:55:14.433905 2026] [:error] [pid 14579:tid 14660] [client 4.232.90.232:9091] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "ae_pUhrUiOG83qKKuuD66AAAAJQ"]
[Tue Apr 28 06:55:14.900053 2026] [:error] [pid 14577:tid 14597] [client 4.232.90.232:23498] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "ae_pUizBH-jwzlgiBdHE3gAAAAs"]
[Tue Apr 28 06:55:15.407775 2026] [:error] [pid 14579:tid 14656] [client 4.232.90.232:9147] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "ae_pUxrUiOG83qKKuuD66gAAAJA"]
[Tue Apr 28 06:55:15.924065 2026] [:error] [pid 14579:tid 14662] [client 4.232.90.232:35824] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "ae_pUxrUiOG83qKKuuD66wAAAJY"]
[Tue Apr 28 06:55:16.398956 2026] [:error] [pid 14577:tid 14600] [client 4.232.90.232:39680] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "ae_pVCzBH-jwzlgiBdHE3wAAAA4"]
[Tue Apr 28 06:55:16.919271 2026] [:error] [pid 14579:tid 14649] [client 4.232.90.232:8825] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "ae_pVBrUiOG83qKKuuD67wAAAIk"]
[Tue Apr 28 06:55:17.446184 2026] [:error] [pid 14577:tid 14593] [client 4.232.90.232:29879] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "ae_pVSzBH-jwzlgiBdHE4gAAAAc"]
[Tue Apr 28 06:55:17.961152 2026] [:error] [pid 6746:tid 6762] [client 4.232.90.232:9102] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "ae_pVbuStsbXtMDpzS-kAAAAAU4"]
[Tue Apr 28 06:55:18.430723 2026] [:error] [pid 14686:tid 14709] [client 4.232.90.232:8968] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "ae_pVu-YPF1Xm7uiWQ44RAAAANQ"]
[Tue Apr 28 06:55:18.936302 2026] [:error] [pid 14686:tid 14704] [client 4.232.90.232:22826] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "ae_pVu-YPF1Xm7uiWQ44RgAAAM8"]
[Tue Apr 28 06:55:19.465642 2026] [:error] [pid 14577:tid 14590] [client 4.232.90.232:39742] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ae_pVyzBH-jwzlgiBdHE5QAAAAQ"]
[Tue Apr 28 06:55:19.967293 2026] [:error] [pid 14578:tid 14635] [client 4.232.90.232:29830] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ae_pV-ngo3AwIJgfSHEf7QAAAFY"]
[Tue Apr 28 06:55:20.464885 2026] [:error] [pid 14686:tid 14708] [client 4.232.90.232:35803] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ae_pWO-YPF1Xm7uiWQ44SAAAANM"]
[Tue Apr 28 06:55:20.994691 2026] [:error] [pid 14578:tid 14618] [client 4.232.90.232:23542] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ae_pWOngo3AwIJgfSHEf8AAAAEU"]
[Tue Apr 28 06:55:21.521529 2026] [:error] [pid 14578:tid 14623] [client 4.232.90.232:40844] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae_pWengo3AwIJgfSHEf8wAAAEo"]
[Tue Apr 28 06:55:22.017847 2026] [:error] [pid 14578:tid 14627] [client 4.232.90.232:40847] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae_pWungo3AwIJgfSHEf9gAAAE4"]
[Tue Apr 28 06:55:22.488957 2026] [:error] [pid 56602:tid 56607] [client 4.232.90.232:40833] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae_pWvCwhMxzNW_lZSxBNwAAAQM"]
[Tue Apr 28 06:55:22.955524 2026] [:error] [pid 14578:tid 14631] [client 4.232.90.232:31309] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae_pWungo3AwIJgfSHEf_AAAAFI"]
[Tue Apr 28 06:55:23.459353 2026] [:error] [pid 56602:tid 56628] [client 4.232.90.232:22825] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ae_pW_CwhMxzNW_lZSxBPQAAARg"]
[Tue Apr 28 06:55:23.956109 2026] [:error] [pid 56602:tid 56611] [client 4.232.90.232:28503] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ae_pW_CwhMxzNW_lZSxBQQAAAQc"]
[Tue Apr 28 06:55:24.438943 2026] [:error] [pid 6746:tid 6770] [client 4.232.90.232:27671] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ae_pXLuStsbXtMDpzS-kEwAAAVY"]
[Tue Apr 28 06:55:24.939822 2026] [:error] [pid 14578:tid 14615] [client 4.232.90.232:35808] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ae_pXOngo3AwIJgfSHEgBwAAAEI"]
[Tue Apr 28 14:14:06.146708 2026] [:error] [pid 33864:tid 33869] [client 20.91.220.89:2853] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Tue Apr 28 14:14:08.638442 2026] [:error] [pid 33864:tid 33878] [client 20.91.220.89:2853] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Tue Apr 28 14:14:09.215302 2026] [:error] [pid 33864:tid 33872] [client 20.91.220.89:2853] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Tue Apr 28 14:14:09.512992 2026] [:error] [pid 33864:tid 33890] [client 20.91.220.89:2853] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Apr 28 14:14:09.791497 2026] [:error] [pid 33864:tid 33874] [client 20.91.220.89:2853] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Tue Apr 28 14:14:10.073015 2026] [:error] [pid 33864:tid 33867] [client 20.91.220.89:2853] [client 20.91.220.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/120f9.php"] [unique_id "afBQMjXchLGZ4QggCsnhkwAAAIE"]
[Tue Apr 28 14:14:11.378313 2026] [:error] [pid 2741:tid 2763] [client 20.91.220.89:16765] [client 20.91.220.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/120f9.php"] [unique_id "afBQM_p92FeOz1h6ILyI9AAAAVE"]
[Tue Apr 28 14:14:12.539679 2026] [:error] [pid 33777:tid 33844] [client 20.91.220.89:16722] [client 20.91.220.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/120f9.php"] [unique_id "afBQNLXUCFWqmordGGJPFgAAAQk"]
[Tue Apr 28 14:14:13.767255 2026] [:error] [pid 2741:tid 2751] [client 20.91.220.89:11403] [client 20.91.220.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/120f9.php"] [unique_id "afBQNfp92FeOz1h6ILyI9wAAAUU"]
[Tue Apr 28 14:16:42.580671 2026] [:error] [pid 50889:tid 50901] [client 20.44.177.173:15202] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Apr 28 14:16:42.701567 2026] [:error] [pid 50889:tid 50894] [client 20.44.177.173:15202] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue Apr 28 14:16:42.819096 2026] [:error] [pid 50889:tid 50896] [client 20.44.177.173:15202] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue Apr 28 14:16:42.944771 2026] [:error] [pid 50889:tid 50914] [client 20.44.177.173:15202] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Tue Apr 28 14:16:43.062479 2026] [:error] [pid 50889:tid 50903] [client 20.44.177.173:15202] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Tue Apr 28 14:16:43.179780 2026] [:error] [pid 50889:tid 50893] [client 20.44.177.173:15202] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Tue Apr 28 14:16:43.297104 2026] [:error] [pid 50889:tid 50910] [client 20.44.177.173:15202] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Tue Apr 28 14:16:43.539693 2026] [:error] [pid 50889:tid 50906] [client 20.44.177.173:15202] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Tue Apr 28 14:16:43.657842 2026] [:error] [pid 50889:tid 50897] [client 20.44.177.173:15202] File does not exist: /usr/local/apache/htdocs/suspended-page/file3.php
[Tue Apr 28 14:16:43.775526 2026] [:error] [pid 50889:tid 50898] [client 20.44.177.173:15202] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Tue Apr 28 14:16:43.889491 2026] [:error] [pid 50889:tid 50902] [client 20.44.177.173:15202] [client 20.44.177.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "afBQy4zszBr00txEzGj5LAAAAAo"]
[Tue Apr 28 14:16:44.352017 2026] [:error] [pid 33777:tid 33848] [client 20.44.177.173:16789] [client 20.44.177.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "afBQzLXUCFWqmordGGJQqgAAAQ0"]
[Tue Apr 28 14:16:44.815687 2026] [:error] [pid 33864:tid 33879] [client 20.44.177.173:7016] [client 20.44.177.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "afBQzDXchLGZ4QggCsniMgAAAI0"]
[Tue Apr 28 14:16:45.350386 2026] [:error] [pid 2741:tid 2764] [client 20.44.177.173:15228] [client 20.44.177.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "afBQzfp92FeOz1h6ILyJ-gAAAVI"]
[Tue Apr 28 14:34:10.601690 2026] [:error] [pid 33864:tid 33866] [client 65.111.6.32:54603] [client 65.111.6.32] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.windfcau.windfarmcoolants.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/s3cmd.ini"] [unique_id "afBU4jXchLGZ4QggCsnmaAAAAIA"]
[Tue Apr 28 23:58:48.985113 2026] [:error] [pid 33776:tid 33831] [client 34.11.130.72:35464] [client 34.11.130.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "afDZOF-bEJ2CKP3iKABU3gAAAFc"]
[Wed Apr 29 12:10:42.065223 2026] [:error] [pid 61540:tid 61584] [client 216.26.245.10:45883] [client 216.26.245.10] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfcau.windfarmcoolants.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/s3cmd.ini"] [unique_id "afGEwuQ8cJB7pQslzIeqoAAAAIs"]
[Wed Apr 29 22:19:00.495559 2026] [:error] [pid 21138:tid 21214] [client 4.211.173.68:15836] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php
[Wed Apr 29 22:19:00.750684 2026] [:error] [pid 21138:tid 21217] [client 4.211.173.68:15836] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Wed Apr 29 22:19:00.997881 2026] [:error] [pid 21138:tid 21211] [client 4.211.173.68:15836] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Wed Apr 29 22:19:01.236734 2026] [:error] [pid 21138:tid 21220] [client 4.211.173.68:15836] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Wed Apr 29 22:19:01.475616 2026] [:error] [pid 21138:tid 21213] [client 4.211.173.68:15836] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Wed Apr 29 22:19:01.714485 2026] [:error] [pid 21138:tid 21200] [client 4.211.173.68:15836] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Wed Apr 29 22:19:01.953511 2026] [:error] [pid 21138:tid 21206] [client 4.211.173.68:15836] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Wed Apr 29 22:19:02.192613 2026] [:error] [pid 21138:tid 21202] [client 4.211.173.68:15836] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Wed Apr 29 22:19:02.430874 2026] [:error] [pid 21138:tid 21205] [client 4.211.173.68:15836] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Apr 29 22:19:02.669150 2026] [:error] [pid 21138:tid 21212] [client 4.211.173.68:15836] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Apr 29 22:19:03.181742 2026] [:error] [pid 21138:tid 21196] [client 4.211.173.68:15836] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afITV5uzwUiyMeUnp338gQAAAQA"]
[Wed Apr 29 22:19:04.145617 2026] [:error] [pid 21137:tid 21170] [client 4.211.173.68:2128] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afITWPw-HnaioFPIurVrBwAAAAE"]
[Wed Apr 29 22:19:05.205942 2026] [:error] [pid 21137:tid 21169] [client 4.211.173.68:15863] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afITWfw-HnaioFPIurVrCAAAAAA"]
[Wed Apr 29 22:19:06.267252 2026] [:error] [pid 21536:tid 21548] [client 4.211.173.68:15798] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afITWiREaVkH9P5H_LQxRwAAAIo"]
[Wed Apr 29 22:29:58.917112 2026] [:error] [pid 47618:tid 47645] [client 4.211.173.68:15705] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php
[Wed Apr 29 22:29:59.157060 2026] [:error] [pid 47618:tid 47637] [client 4.211.173.68:15705] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Wed Apr 29 22:29:59.428526 2026] [:error] [pid 47618:tid 47626] [client 4.211.173.68:15705] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Wed Apr 29 22:29:59.666280 2026] [:error] [pid 47618:tid 47644] [client 4.211.173.68:15705] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Wed Apr 29 22:29:59.903260 2026] [:error] [pid 47618:tid 47632] [client 4.211.173.68:15705] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Wed Apr 29 22:30:00.142605 2026] [:error] [pid 47618:tid 47633] [client 4.211.173.68:15705] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Wed Apr 29 22:30:00.384883 2026] [:error] [pid 47618:tid 47623] [client 4.211.173.68:15705] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Wed Apr 29 22:30:00.645370 2026] [:error] [pid 47618:tid 47643] [client 4.211.173.68:15705] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Wed Apr 29 22:30:00.882795 2026] [:error] [pid 47618:tid 47627] [client 4.211.173.68:15705] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Apr 29 22:30:01.119659 2026] [:error] [pid 47618:tid 47635] [client 4.211.173.68:15705] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Apr 29 22:30:01.591165 2026] [:error] [pid 47618:tid 47628] [client 4.211.173.68:15705] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afIV6XHYUSxIrhce2OAu-AAAAUc"]
[Wed Apr 29 22:30:02.597161 2026] [:error] [pid 21536:tid 21559] [client 4.211.173.68:21325] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afIV6iREaVkH9P5H_LQyUQAAAJU"]
[Wed Apr 29 22:30:03.631248 2026] [:error] [pid 21227:tid 21251] [client 4.211.173.68:14887] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afIV68B3c6U5AGPPsXqcKwAAANI"]
[Wed Apr 29 22:30:04.664636 2026] [:error] [pid 21536:tid 21544] [client 4.211.173.68:18092] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afIV7CREaVkH9P5H_LQyUgAAAIY"]
[Thu Apr 30 05:00:11.592820 2026] [:error] [pid 52436:tid 52459] [client 4.211.173.68:16048] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Thu Apr 30 05:00:11.831422 2026] [:error] [pid 52436:tid 52460] [client 4.211.173.68:16048] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 30 05:00:12.308071 2026] [:error] [pid 52436:tid 52447] [client 4.211.173.68:16048] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Thu Apr 30 05:00:12.785205 2026] [:error] [pid 52436:tid 52458] [client 4.211.173.68:16048] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Apr 30 05:00:13.023783 2026] [:error] [pid 52436:tid 52445] [client 4.211.173.68:16048] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Apr 30 05:00:13.262209 2026] [:error] [pid 52436:tid 52444] [client 4.211.173.68:16048] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Thu Apr 30 05:00:13.500631 2026] [:error] [pid 52436:tid 52456] [client 4.211.173.68:16048] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Apr 30 05:00:13.739548 2026] [:error] [pid 52436:tid 52441] [client 4.211.173.68:16048] File does not exist: /usr/local/apache/htdocs/suspended-page/meta.php
[Thu Apr 30 05:00:13.974897 2026] [:error] [pid 52436:tid 52457] [client 4.211.173.68:16048] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afJxXQLFWPk_P7AfE8fXBQAAAVI"]
[Thu Apr 30 05:00:14.919265 2026] [:error] [pid 52436:tid 52449] [client 4.211.173.68:16297] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afJxXgLFWPk_P7AfE8fXBgAAAUo"]
[Thu Apr 30 05:00:15.945503 2026] [:error] [pid 18220:tid 18238] [client 4.211.173.68:23088] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afJxX8yESVSfAPebmxbhBAAAAM8"]
[Thu Apr 30 05:00:16.918045 2026] [:error] [pid 52350:tid 52364] [client 4.211.173.68:16125] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afJxYP1j4GHE9hm7bfcrHgAAAQY"]
[Thu Apr 30 05:11:39.502803 2026] [:error] [pid 52350:tid 52374] [client 4.211.173.68:1097] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Thu Apr 30 05:11:39.741832 2026] [:error] [pid 52350:tid 52373] [client 4.211.173.68:1097] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 30 05:11:40.226905 2026] [:error] [pid 52350:tid 52361] [client 4.211.173.68:1097] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Thu Apr 30 05:11:40.706812 2026] [:error] [pid 52350:tid 52377] [client 4.211.173.68:1097] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Apr 30 05:11:40.946315 2026] [:error] [pid 52350:tid 52362] [client 4.211.173.68:1097] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Apr 30 05:11:41.187058 2026] [:error] [pid 52350:tid 52375] [client 4.211.173.68:1097] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Thu Apr 30 05:11:41.432671 2026] [:error] [pid 52350:tid 52369] [client 4.211.173.68:1097] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Apr 30 05:11:41.671636 2026] [:error] [pid 52350:tid 52364] [client 4.211.173.68:1097] File does not exist: /usr/local/apache/htdocs/suspended-page/meta.php
[Thu Apr 30 05:11:41.907556 2026] [:error] [pid 52350:tid 52376] [client 4.211.173.68:1097] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afJ0Df1j4GHE9hm7bfcs5QAAARI"]
[Thu Apr 30 05:11:42.853090 2026] [:error] [pid 52350:tid 52357] [client 4.211.173.68:21110] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afJ0Dv1j4GHE9hm7bfcs5gAAAQA"]
[Thu Apr 30 05:11:43.881602 2026] [:error] [pid 52350:tid 52368] [client 4.211.173.68:22336] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afJ0D_1j4GHE9hm7bfcs6QAAAQo"]
[Thu Apr 30 05:11:44.962862 2026] [:error] [pid 18113:tid 18180] [client 4.211.173.68:22364] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afJ0EHiIjwsVGkvz5IlOAAAAAIM"]
[Thu Apr 30 10:24:47.146682 2026] [:error] [pid 53641:tid 53675] [client 129.159.56.14:48844] [client 129.159.56.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "afK9b2C119wja3QGeAGSnAAAAZc"]
[Thu Apr 30 11:09:57.330232 2026] [:error] [pid 18112:tid 18165] [client 4.211.173.68:16268] [client 4.211.173.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.211.173.68, incrementing ddos counter"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "afLIBSUrJv3y8j6Lm1vawgAAAE8"]
[Thu Apr 30 11:09:57.333644 2026] [:error] [pid 18112:tid 18165] [client 4.211.173.68:16268] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Apr 30 11:09:57.809054 2026] [:error] [pid 18112:tid 18151] [client 4.211.173.68:16268] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 30 11:09:58.058220 2026] [:error] [pid 18112:tid 18163] [client 4.211.173.68:16268] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Apr 30 11:09:58.533035 2026] [:error] [pid 18112:tid 18152] [client 4.211.173.68:16268] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Thu Apr 30 11:09:58.771470 2026] [:error] [pid 18112:tid 18162] [client 4.211.173.68:16268] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Thu Apr 30 11:09:59.029132 2026] [:error] [pid 18112:tid 18170] [client 4.211.173.68:16268] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Thu Apr 30 11:09:59.979093 2026] [:error] [pid 18112:tid 18158] [client 4.211.173.68:16268] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bak.php"] [unique_id "afLIByUrJv3y8j6Lm1vazQAAAEg"]
[Thu Apr 30 11:10:01.297999 2026] [:error] [pid 18111:tid 18129] [client 4.211.173.68:15576] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bak.php"] [unique_id "afLICWctLbxB7Q1_oK3Q0wAAAAc"]
[Thu Apr 30 11:10:02.743383 2026] [:error] [pid 18111:tid 18137] [client 4.211.173.68:13996] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bak.php"] [unique_id "afLICmctLbxB7Q1_oK3Q1wAAAA8"]
[Thu Apr 30 11:10:03.918767 2026] [:error] [pid 53641:tid 53658] [client 4.211.173.68:19777] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bak.php"] [unique_id "afLIC2C119wja3QGeAGdHAAAAYY"]
[Thu Apr 30 11:23:18.357668 2026] [:error] [pid 18113:tid 18180] [client 4.211.173.68:17330] [client 4.211.173.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.211.173.68, incrementing ddos counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "afLLJniIjwsVGkvz5IlxywAAAIM"]
[Thu Apr 30 11:23:18.359931 2026] [:error] [pid 18113:tid 18180] [client 4.211.173.68:17330] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Apr 30 11:23:18.890594 2026] [:error] [pid 18113:tid 18198] [client 4.211.173.68:17330] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 30 11:23:19.156666 2026] [:error] [pid 18113:tid 18177] [client 4.211.173.68:17330] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Apr 30 11:23:19.690019 2026] [:error] [pid 18113:tid 18195] [client 4.211.173.68:17330] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Thu Apr 30 11:23:19.956383 2026] [:error] [pid 18113:tid 18193] [client 4.211.173.68:17330] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Thu Apr 30 11:23:20.221652 2026] [:error] [pid 18113:tid 18179] [client 4.211.173.68:17330] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Thu Apr 30 11:23:21.286992 2026] [:error] [pid 18113:tid 18182] [client 4.211.173.68:17330] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bak.php"] [unique_id "afLLKXiIjwsVGkvz5Ilx2AAAAIU"]
[Thu Apr 30 11:23:22.340984 2026] [:error] [pid 52350:tid 52376] [client 4.211.173.68:18602] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bak.php"] [unique_id "afLLKv1j4GHE9hm7bfdz_wAAARI"]
[Thu Apr 30 11:23:23.389630 2026] [:error] [pid 52350:tid 52366] [client 4.211.173.68:14664] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bak.php"] [unique_id "afLLK_1j4GHE9hm7bfd0BgAAAQg"]
[Thu Apr 30 11:23:24.363498 2026] [:error] [pid 18112:tid 18173] [client 4.211.173.68:15963] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bak.php"] [unique_id "afLLLCUrJv3y8j6Lm1vc1QAAAFc"]
[Fri May 01 05:15:02.754037 2026] [:error] [pid 6046:tid 6092] [client 104.28.246.115:12848] [client 104.28.246.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "afPGVoyBrpmb1HMIbiTGhAAAAYg"]
[Fri May 01 22:28:15.193457 2026] [:error] [pid 24995:tid 25018] [client 34.106.245.234:49358] [client 34.106.245.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "afS4f-dJG9WB_Q_ne0vACwAAAFM"]
[Sat May 02 08:59:57.397727 2026] [:error] [pid 53435:tid 53472] [client 172.245.214.61:34942] [client 172.245.214.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "afVMjYDmp7_z8QkjSzNZ7AAAAEA"]
[Sat May 02 08:59:57.564425 2026] [:error] [pid 53435:tid 53494] [client 172.245.214.61:35026] [client 172.245.214.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/api/.env"] [unique_id "afVMjYDmp7_z8QkjSzNZ7gAAAFY"]
[Sat May 02 08:59:57.565445 2026] [:error] [pid 53435:tid 53493] [client 172.245.214.61:35028] [client 172.245.214.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/.env"] [unique_id "afVMjYDmp7_z8QkjSzNZ8AAAAFU"]
[Sat May 02 08:59:57.565506 2026] [:error] [pid 21339:tid 21352] [client 172.245.214.61:35042] [client 172.245.214.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/backend/.env"] [unique_id "afVMjQN2KhHZavn0Te1lQAAAAYs"]
[Sat May 02 08:59:57.566028 2026] [:error] [pid 53435:tid 53478] [client 172.245.214.61:35160] [client 172.245.214.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-config.php~"] [unique_id "afVMjYDmp7_z8QkjSzNZ8QAAAEY"]
[Sat May 02 08:59:57.566657 2026] [:error] [pid 21339:tid 21359] [client 172.245.214.61:35174] [client 172.245.214.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-config.bak"] [unique_id "afVMjQN2KhHZavn0Te1lQQAAAZI"]
[Sat May 02 08:59:58.943386 2026] [:error] [pid 21339:tid 21360] [client 172.245.214.61:35016] [client 172.245.214.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app/.env"] [unique_id "afVMjgN2KhHZavn0Te1lQgAAAZM"]
[Sat May 02 08:59:59.409416 2026] [:error] [pid 21339:tid 21363] [client 172.245.214.61:34930] [client 172.245.214.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "afVMjwN2KhHZavn0Te1lRAAAAZY"]
[Sat May 02 08:59:59.411871 2026] [:error] [pid 53435:tid 53481] [client 172.245.214.61:34996] [client 172.245.214.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.example"] [unique_id "afVMj4Dmp7_z8QkjSzNZ9QAAAEk"]
[Sat May 02 08:59:59.418538 2026] [:error] [pid 21339:tid 21351] [client 172.245.214.61:35126] [client 172.245.214.61] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfcau.windfarmcoolants.com.au|F|2"] [data ".tfstate.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/terraform.tfstate.backup"] [unique_id "afVMjwN2KhHZavn0Te1lRQAAAYo"]
[Sat May 02 08:59:59.420979 2026] [:error] [pid 11894:tid 11901] [client 172.245.214.61:35056] [client 172.245.214.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "afVMjzHh6DQF1tkXIKyC2wAAAUQ"]
[Sat May 02 08:59:59.431913 2026] [:error] [pid 21339:tid 21345] [client 172.245.214.61:34948] [client 172.245.214.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.development"] [unique_id "afVMjwN2KhHZavn0Te1lRgAAAYQ"]
[Sat May 02 08:59:59.434262 2026] [:error] [pid 53435:tid 53480] [client 172.245.214.61:35038] [client 172.245.214.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/.env"] [unique_id "afVMj4Dmp7_z8QkjSzNZ-QAAAEg"]
[Sat May 02 08:59:59.434755 2026] [:error] [pid 53434:tid 53446] [client 172.245.214.61:34984] [client 172.245.214.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.production.bak"] [unique_id "afVMj-9BXmRQcbfsxlwBJwAAAAM"]
[Sat May 02 08:59:59.435268 2026] [:error] [pid 53435:tid 53476] [client 172.245.214.61:34968] [client 172.245.214.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.backup"] [unique_id "afVMj4Dmp7_z8QkjSzNZ-gAAAEQ"]
[Sat May 02 08:59:59.435491 2026] [:error] [pid 21339:tid 21355] [client 172.245.214.61:34924] [client 172.245.214.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "afVMjwN2KhHZavn0Te1lRwAAAY4"]
[Sat May 02 08:59:59.435550 2026] [:error] [pid 11894:tid 11909] [client 172.245.214.61:34958] [client 172.245.214.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.bak"] [unique_id "afVMjzHh6DQF1tkXIKyC3AAAAUw"]
[Sat May 02 08:59:59.436060 2026] [:error] [pid 11894:tid 11913] [client 172.245.214.61:34964] [client 172.245.214.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.old"] [unique_id "afVMjzHh6DQF1tkXIKyC3QAAAVA"]
[Sat May 02 14:49:09.572617 2026] [:error] [pid 11894:tid 11920] [client 104.207.62.151:41887] [client 104.207.62.151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "afWeZTHh6DQF1tkXIKywMgAAAVc"]
[Sun May 03 06:40:53.793964 2026] [:error] [pid 40386:tid 40397] [client 172.173.121.85:62139] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afZ9dVHJDYRXUf3IbRTOOwAAAMk"]
[Sun May 03 06:40:55.858994 2026] [:error] [pid 37126:tid 37172] [client 172.173.121.85:55239] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afZ9d_R_A42N-LtDyrvTiQAAABM"]
[Sun May 03 06:40:57.549921 2026] [:error] [pid 40456:tid 40480] [client 172.173.121.85:55281] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afZ9eTSujTvwdzEkjSe-HwAAAZY"]
[Sun May 03 06:41:00.126499 2026] [:error] [pid 37127:tid 37207] [client 172.173.121.85:11578] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afZ9fP8khJXb5O5aWVXKdwAAAFU"]
[Sun May 03 19:22:21.134310 2026] [:error] [pid 34432:tid 34443] [client 192.3.179.120:35534] [client 192.3.179.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "afcv7Z73JKVQ0wlof4JiuwAAAck"]
[Sun May 03 19:22:22.038875 2026] [:error] [pid 37130:tid 37225] [client 192.3.179.120:37212] [client 192.3.179.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app/.env"] [unique_id "afcv7qIu7bmXKXicRk-GdAAAAIw"]
[Sun May 03 19:22:22.192474 2026] [:error] [pid 34432:tid 34451] [client 192.3.179.120:37220] [client 192.3.179.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/api/.env"] [unique_id "afcv7p73JKVQ0wlof4JiwQAAAdE"]
[Sun May 03 19:22:22.200274 2026] [:error] [pid 34432:tid 34436] [client 192.3.179.120:37222] [client 192.3.179.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/backend/.env"] [unique_id "afcv7p73JKVQ0wlof4JiwgAAAcI"]
[Sun May 03 19:22:22.323726 2026] [:error] [pid 34432:tid 34437] [client 192.3.179.120:37184] [client 192.3.179.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "afcv7p73JKVQ0wlof4JixAAAAcM"]
[Sun May 03 19:22:22.345500 2026] [:error] [pid 34432:tid 34445] [client 192.3.179.120:37192] [client 192.3.179.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "afcv7p73JKVQ0wlof4JixQAAAcs"]
[Mon May 04 01:25:59.748005 2026] [:error] [pid 54535:tid 54554] [client 34.6.134.138:52350] [client 34.6.134.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "afeFJ_Ryz79iR-ntJRIh0QAAAhE"]
[Mon May 04 08:15:16.856386 2026] [:error] [pid 12051:tid 12077] [client 20.48.152.116:39218] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Mon May 04 08:15:17.062512 2026] [:error] [pid 12051:tid 12059] [client 20.48.152.116:39218] [client 20.48.152.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "afflFerVB-w_PyOHK6kzygAAAUY"]
[Mon May 04 08:15:17.895006 2026] [:error] [pid 11958:tid 11964] [client 20.48.152.116:41934] [client 20.48.152.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "afflFTAK_o2NLEdfAUkpIQAAAEM"]
[Mon May 04 08:15:18.742249 2026] [:error] [pid 11959:tid 11989] [client 20.48.152.116:35811] [client 20.48.152.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "afflFgojk2nvxs7h5KvIIwAAAME"]
[Mon May 04 08:15:19.606956 2026] [:error] [pid 12051:tid 12068] [client 20.48.152.116:35779] [client 20.48.152.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "afflF-rVB-w_PyOHK6k0BgAAAU8"]
[Mon May 04 09:54:03.230906 2026] [:error] [pid 33186:tid 33206] [client 20.9.90.138:27733] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Mon May 04 09:54:03.421374 2026] [:error] [pid 33186:tid 33195] [client 20.9.90.138:27733] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Mon May 04 09:54:03.632347 2026] [:error] [pid 33186:tid 33198] [client 20.9.90.138:27733] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aff8O7qlqe0DcmBS9VztyQAAAAk"]
[Mon May 04 09:54:04.383863 2026] [:error] [pid 12051:tid 12060] [client 20.9.90.138:15238] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aff8POrVB-w_PyOHK6leHgAAAUc"]
[Mon May 04 09:54:05.168163 2026] [:error] [pid 12051:tid 12071] [client 20.9.90.138:27773] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aff8PerVB-w_PyOHK6leKAAAAVI"]
[Mon May 04 09:54:05.916666 2026] [:error] [pid 12051:tid 12060] [client 20.9.90.138:15260] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aff8PerVB-w_PyOHK6leLwAAAUc"]
[Mon May 04 13:48:40.160755 2026] [:error] [pid 12022:tid 12025] [client 52.147.5.166:4551] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php
[Mon May 04 13:48:40.179770 2026] [:error] [pid 12022:tid 12037] [client 52.147.5.166:4551] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Mon May 04 13:48:40.216823 2026] [:error] [pid 12022:tid 12028] [client 52.147.5.166:4551] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Mon May 04 13:48:40.235926 2026] [:error] [pid 12022:tid 12045] [client 52.147.5.166:4551] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Mon May 04 13:48:40.254919 2026] [:error] [pid 12022:tid 12044] [client 52.147.5.166:4551] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Mon May 04 13:48:40.274069 2026] [:error] [pid 12022:tid 12031] [client 52.147.5.166:4551] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Mon May 04 13:48:40.291980 2026] [:error] [pid 12022:tid 12024] [client 52.147.5.166:4551] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Mon May 04 13:48:40.310646 2026] [:error] [pid 12022:tid 12027] [client 52.147.5.166:4551] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Mon May 04 13:48:40.329386 2026] [:error] [pid 12022:tid 12033] [client 52.147.5.166:4551] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon May 04 13:48:40.347859 2026] [:error] [pid 12022:tid 12032] [client 52.147.5.166:4551] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon May 04 13:48:40.382392 2026] [:error] [pid 12022:tid 12043] [client 52.147.5.166:4551] [client 52.147.5.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afgzOEVhgvCNKBWnaTKPqgAAAJM"]
[Mon May 04 13:48:40.447664 2026] [:error] [pid 64610:tid 64614] [client 52.147.5.166:4556] [client 52.147.5.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afgzOGhJ7aZW62UOoWhljgAAAQI"]
[Mon May 04 13:48:40.542411 2026] [:error] [pid 64610:tid 64612] [client 52.147.5.166:1384] [client 52.147.5.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afgzOGhJ7aZW62UOoWhljwAAAQA"]
[Mon May 04 13:48:40.601342 2026] [:error] [pid 64610:tid 64620] [client 52.147.5.166:1404] [client 52.147.5.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afgzOGhJ7aZW62UOoWhlkAAAAQg"]
[Mon May 04 16:19:36.348138 2026] [:error] [pid 3341:tid 3359] [client 20.214.182.132:3368] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon May 04 16:19:36.499383 2026] [:error] [pid 3341:tid 3368] [client 20.214.182.132:3368] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon May 04 16:19:36.823739 2026] [:error] [pid 3341:tid 3353] [client 20.214.182.132:3368] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Mon May 04 16:19:37.002412 2026] [:error] [pid 3341:tid 3366] [client 20.214.182.132:3368] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon May 04 16:19:37.382347 2026] [:error] [pid 3341:tid 3360] [client 20.214.182.132:3368] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Mon May 04 16:19:37.532659 2026] [:error] [pid 3341:tid 3350] [client 20.214.182.132:3368] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Mon May 04 16:19:37.682340 2026] [:error] [pid 3341:tid 3352] [client 20.214.182.132:3368] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Mon May 04 16:19:38.162729 2026] [:error] [pid 3341:tid 3345] [client 20.214.182.132:3368] [client 20.214.182.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "afhWmk9o3_LordU0wW73JAAAAIE"]
[Mon May 04 16:19:38.840757 2026] [:error] [pid 61043:tid 61075] [client 20.214.182.132:3364] [client 20.214.182.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "afhWmp8-LwtfURjiAbB2ugAAAEA"]
[Mon May 04 16:19:39.499746 2026] [:error] [pid 61150:tid 61160] [client 20.214.182.132:2263] [client 20.214.182.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "afhWm-8QXWVLiwIGVpdJcgAAAUc"]
[Mon May 04 16:19:40.194364 2026] [:error] [pid 61150:tid 61161] [client 20.214.182.132:3362] [client 20.214.182.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "afhWnO8QXWVLiwIGVpdJcwAAAUg"]
[Mon May 04 17:10:52.557827 2026] [:error] [pid 61043:tid 61079] [client 209.87.169.212:59267] [client 209.87.169.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afhinJ8-LwtfURjiAbCQSwAAAEQ"]
[Mon May 04 23:07:19.305572 2026] [:error] [pid 3341:tid 3345] [client 34.74.139.90:35278] [client 34.74.139.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "afi2J09o3_LordU0wW6NIQAAAIE"]
[Tue May 05 05:20:52.176389 2026] [:error] [pid 39178:tid 39204] [client 20.29.119.89:30712] File does not exist: /usr/local/apache/htdocs/suspended-page/yellow.php
[Tue May 05 05:20:52.367578 2026] [:error] [pid 39178:tid 39193] [client 20.29.119.89:30712] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-thi.php
[Tue May 05 05:20:52.559390 2026] [:error] [pid 39178:tid 39184] [client 20.29.119.89:30712] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-slss.php
[Tue May 05 05:20:52.751347 2026] [:error] [pid 39178:tid 39200] [client 20.29.119.89:30712] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Tue May 05 05:20:52.943377 2026] [:error] [pid 39178:tid 39185] [client 20.29.119.89:30712] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Tue May 05 05:20:53.134596 2026] [:error] [pid 39178:tid 39196] [client 20.29.119.89:30712] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Tue May 05 05:20:53.326998 2026] [:error] [pid 39178:tid 39189] [client 20.29.119.89:30712] File does not exist: /usr/local/apache/htdocs/suspended-page/revealability.php
[Tue May 05 05:20:53.518863 2026] [:error] [pid 39178:tid 39180] [client 20.29.119.89:30712] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php
[Tue May 05 05:20:53.709951 2026] [:error] [pid 39178:tid 39195] [client 20.29.119.89:30712] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Tue May 05 05:20:53.901509 2026] [:error] [pid 39178:tid 39187] [client 20.29.119.89:30712] File does not exist: /usr/local/apache/htdocs/suspended-page/file30.php
[Tue May 05 05:20:54.089795 2026] [:error] [pid 39178:tid 39183] [client 20.29.119.89:30712] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/forbidals.php"] [unique_id "afkNtjaPrgTaiOD_15s0bgAAAMM"]
[Tue May 05 05:20:54.467047 2026] [:error] [pid 41055:tid 41065] [client 20.29.119.89:30708] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/forbidals.php"] [unique_id "afkNtiepFwKgA_SKOHirTAAAAQc"]
[Tue May 05 05:20:54.843102 2026] [:error] [pid 39178:tid 39198] [client 20.29.119.89:30716] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/forbidals.php"] [unique_id "afkNtjaPrgTaiOD_15s0cQAAANI"]
[Tue May 05 05:20:55.215876 2026] [:error] [pid 39178:tid 39193] [client 20.29.119.89:30686] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/forbidals.php"] [unique_id "afkNtzaPrgTaiOD_15s0cgAAAM0"]
[Tue May 05 05:20:55.590638 2026] [:error] [pid 39072:tid 39108] [client 20.29.119.89:30602] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-firewall.php"] [unique_id "afkNt_olSHl4aAnrIovYowAAAEE"]
[Tue May 05 05:20:55.966501 2026] [:error] [pid 41055:tid 41075] [client 20.29.119.89:30699] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-firewall.php"] [unique_id "afkNtyepFwKgA_SKOHirTQAAARE"]
[Tue May 05 05:20:56.342175 2026] [:error] [pid 39073:tid 39158] [client 20.29.119.89:30603] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-firewall.php"] [unique_id "afkNuP0kT1BNjk46BkcU6QAAAJg"]
[Tue May 05 05:20:56.729548 2026] [:error] [pid 39178:tid 39184] [client 20.29.119.89:30666] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-firewall.php"] [unique_id "afkNuDaPrgTaiOD_15s0dgAAAMQ"]
[Tue May 05 05:20:57.105163 2026] [:error] [pid 39073:tid 39155] [client 20.29.119.89:30609] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "afkNuf0kT1BNjk46BkcU7AAAAJU"]
[Tue May 05 05:20:57.479885 2026] [:error] [pid 39071:tid 39086] [client 20.29.119.89:30607] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "afkNuYvmnRMz9gRzix1WFAAAAAY"]
[Tue May 05 05:20:57.852319 2026] [:error] [pid 39072:tid 39130] [client 20.29.119.89:30703] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "afkNufolSHl4aAnrIovYpAAAAFc"]
[Tue May 05 05:20:58.224701 2026] [:error] [pid 39071:tid 39082] [client 20.29.119.89:30670] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "afkNuovmnRMz9gRzix1WFQAAAAI"]
[Tue May 05 05:20:58.598706 2026] [:error] [pid 39073:tid 39136] [client 20.29.119.89:30718] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell20211028.php"] [unique_id "afkNuv0kT1BNjk46BkcU7wAAAII"]
[Tue May 05 05:20:58.972968 2026] [:error] [pid 39073:tid 39141] [client 20.29.119.89:30694] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell20211028.php"] [unique_id "afkNuv0kT1BNjk46BkcU8AAAAIc"]
[Tue May 05 05:20:59.347839 2026] [:error] [pid 39073:tid 39137] [client 20.29.119.89:30598] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell20211028.php"] [unique_id "afkNu_0kT1BNjk46BkcU8wAAAIM"]
[Tue May 05 05:20:59.725674 2026] [:error] [pid 39073:tid 39146] [client 20.29.119.89:30715] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell20211028.php"] [unique_id "afkNu_0kT1BNjk46BkcU9QAAAIw"]
[Tue May 05 05:21:00.097565 2026] [:error] [pid 39178:tid 39187] [client 20.29.119.89:30693] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wuasr.php"] [unique_id "afkNvDaPrgTaiOD_15s0dwAAAMc"]
[Tue May 05 05:21:00.483815 2026] [:error] [pid 39071:tid 39103] [client 20.29.119.89:30705] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wuasr.php"] [unique_id "afkNvIvmnRMz9gRzix1WFwAAABc"]
[Tue May 05 05:21:00.859852 2026] [:error] [pid 39073:tid 39153] [client 20.29.119.89:30709] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wuasr.php"] [unique_id "afkNvP0kT1BNjk46BkcU-QAAAJM"]
[Tue May 05 05:21:01.232175 2026] [:error] [pid 39073:tid 39147] [client 20.29.119.89:30618] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wuasr.php"] [unique_id "afkNvf0kT1BNjk46BkcU-wAAAI0"]
[Tue May 05 05:21:01.610467 2026] [:error] [pid 39178:tid 39191] [client 20.29.119.89:30593] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1index.php"] [unique_id "afkNvTaPrgTaiOD_15s0eAAAAMs"]
[Tue May 05 05:21:01.984405 2026] [:error] [pid 41055:tid 41072] [client 20.29.119.89:30683] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1index.php"] [unique_id "afkNvSepFwKgA_SKOHirTwAAAQ4"]
[Tue May 05 05:21:02.368459 2026] [:error] [pid 41055:tid 41069] [client 20.29.119.89:30692] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1index.php"] [unique_id "afkNviepFwKgA_SKOHirUAAAAQs"]
[Tue May 05 05:21:02.740278 2026] [:error] [pid 39178:tid 39201] [client 20.29.119.89:30676] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1index.php"] [unique_id "afkNvjaPrgTaiOD_15s0egAAANU"]
[Tue May 05 05:21:03.122593 2026] [:error] [pid 41055:tid 41073] [client 20.29.119.89:30558] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ff1.php"] [unique_id "afkNvyepFwKgA_SKOHirUgAAAQ8"]
[Tue May 05 05:21:03.496981 2026] [:error] [pid 39178:tid 39190] [client 20.29.119.89:30700] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ff1.php"] [unique_id "afkNvzaPrgTaiOD_15s0fAAAAMo"]
[Tue May 05 05:21:03.872716 2026] [:error] [pid 39072:tid 39107] [client 20.29.119.89:30592] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ff1.php"] [unique_id "afkNv_olSHl4aAnrIovYpwAAAEA"]
[Tue May 05 05:21:04.245225 2026] [:error] [pid 41055:tid 41058] [client 20.29.119.89:30613] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ff1.php"] [unique_id "afkNwCepFwKgA_SKOHirUwAAAQA"]
[Tue May 05 05:21:04.619852 2026] [:error] [pid 39178:tid 39203] [client 20.29.119.89:30531] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "afkNwDaPrgTaiOD_15s0gAAAANc"]
[Tue May 05 05:21:04.995101 2026] [:error] [pid 39178:tid 39180] [client 20.29.119.89:30706] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "afkNwDaPrgTaiOD_15s0gQAAAMA"]
[Tue May 05 05:21:05.371001 2026] [:error] [pid 39178:tid 39195] [client 20.29.119.89:30535] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "afkNwTaPrgTaiOD_15s0gwAAAM8"]
[Tue May 05 05:21:05.757667 2026] [:error] [pid 39178:tid 39197] [client 20.29.119.89:30687] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "afkNwTaPrgTaiOD_15s0hAAAANE"]
[Tue May 05 05:21:06.137430 2026] [:error] [pid 39073:tid 39143] [client 20.29.119.89:30632] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x.php"] [unique_id "afkNwv0kT1BNjk46BkcVAAAAAIk"]
[Tue May 05 05:21:06.509580 2026] [:error] [pid 41055:tid 41071] [client 20.29.119.89:30654] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x.php"] [unique_id "afkNwiepFwKgA_SKOHirVgAAAQ0"]
[Tue May 05 05:21:06.884455 2026] [:error] [pid 39071:tid 39099] [client 20.29.119.89:30608] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x.php"] [unique_id "afkNwovmnRMz9gRzix1WHAAAABM"]
[Tue May 05 05:21:07.261164 2026] [:error] [pid 39071:tid 39104] [client 20.29.119.89:30667] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x.php"] [unique_id "afkNw4vmnRMz9gRzix1WHQAAABg"]
[Tue May 05 05:21:07.638466 2026] [:error] [pid 39073:tid 39149] [client 20.29.119.89:30671] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "afkNw_0kT1BNjk46BkcVAgAAAI8"]
[Tue May 05 05:21:08.027338 2026] [:error] [pid 39071:tid 39083] [client 20.29.119.89:30534] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "afkNxIvmnRMz9gRzix1WHgAAAAM"]
[Tue May 05 05:21:08.400641 2026] [:error] [pid 39071:tid 39094] [client 20.29.119.89:30696] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "afkNxIvmnRMz9gRzix1WIAAAAA4"]
[Tue May 05 05:21:08.778833 2026] [:error] [pid 39072:tid 39117] [client 20.29.119.89:30600] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "afkNxPolSHl4aAnrIovYqgAAAEo"]
[Tue May 05 05:21:09.155984 2026] [:error] [pid 41055:tid 41080] [client 20.29.119.89:30612] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "afkNxSepFwKgA_SKOHirWAAAARY"]
[Tue May 05 05:21:09.536583 2026] [:error] [pid 41055:tid 41075] [client 20.29.119.89:30669] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "afkNxSepFwKgA_SKOHirWgAAARE"]
[Tue May 05 05:21:09.922283 2026] [:error] [pid 39178:tid 39201] [client 20.29.119.89:30672] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "afkNxTaPrgTaiOD_15s0hgAAANU"]
[Tue May 05 05:21:10.302556 2026] [:error] [pid 39073:tid 39135] [client 20.29.119.89:30642] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "afkNxv0kT1BNjk46BkcVBQAAAIE"]
[Tue May 05 05:21:10.676537 2026] [:error] [pid 39073:tid 39153] [client 20.29.119.89:30638] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "afkNxv0kT1BNjk46BkcVBgAAAJM"]
[Tue May 05 05:21:11.053607 2026] [:error] [pid 41055:tid 41068] [client 20.29.119.89:30668] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "afkNxyepFwKgA_SKOHirXgAAAQo"]
[Tue May 05 05:21:11.431541 2026] [:error] [pid 39073:tid 39142] [client 20.29.119.89:30665] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "afkNx_0kT1BNjk46BkcVBwAAAIg"]
[Tue May 05 05:21:11.805755 2026] [:error] [pid 41055:tid 41063] [client 20.29.119.89:30678] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "afkNxyepFwKgA_SKOHirYAAAAQU"]
[Tue May 05 05:21:12.183568 2026] [:error] [pid 39073:tid 39157] [client 20.29.119.89:30657] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fun.php"] [unique_id "afkNyP0kT1BNjk46BkcVCAAAAJc"]
[Tue May 05 05:21:12.563365 2026] [:error] [pid 41055:tid 41074] [client 20.29.119.89:30717] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fun.php"] [unique_id "afkNyCepFwKgA_SKOHirYgAAARA"]
[Tue May 05 05:21:12.935113 2026] [:error] [pid 41055:tid 41067] [client 20.29.119.89:30691] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fun.php"] [unique_id "afkNyCepFwKgA_SKOHirYwAAAQk"]
[Tue May 05 05:21:13.327979 2026] [:error] [pid 41055:tid 41082] [client 20.29.119.89:30677] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fun.php"] [unique_id "afkNySepFwKgA_SKOHirZQAAARg"]
[Tue May 05 05:21:13.705156 2026] [:error] [pid 41055:tid 41081] [client 20.29.119.89:30697] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "afkNySepFwKgA_SKOHiraAAAARc"]
[Tue May 05 05:21:14.084720 2026] [:error] [pid 39178:tid 39180] [client 20.29.119.89:30636] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "afkNyjaPrgTaiOD_15s0iAAAAMA"]
[Tue May 05 05:21:14.467202 2026] [:error] [pid 39073:tid 39140] [client 20.29.119.89:30616] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "afkNyv0kT1BNjk46BkcVCgAAAIY"]
[Tue May 05 05:21:14.842825 2026] [:error] [pid 41055:tid 41062] [client 20.29.119.89:30594] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "afkNyiepFwKgA_SKOHiragAAAQQ"]
[Tue May 05 05:21:15.214663 2026] [:error] [pid 41055:tid 41060] [client 20.29.119.89:30633] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afkNyyepFwKgA_SKOHirawAAAQI"]
[Tue May 05 05:21:15.591351 2026] [:error] [pid 41055:tid 41079] [client 20.29.119.89:30630] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afkNyyepFwKgA_SKOHirbAAAARU"]
[Tue May 05 05:21:15.968393 2026] [:error] [pid 39073:tid 39156] [client 20.29.119.89:30680] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afkNy_0kT1BNjk46BkcVDwAAAJY"]
[Tue May 05 05:21:16.341887 2026] [:error] [pid 39178:tid 39192] [client 20.29.119.89:30611] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afkNzDaPrgTaiOD_15s0igAAAMw"]
[Tue May 05 05:21:16.716216 2026] [:error] [pid 39178:tid 39186] [client 20.29.119.89:30704] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "afkNzDaPrgTaiOD_15s0kQAAAMY"]
[Tue May 05 05:21:17.094425 2026] [:error] [pid 39072:tid 39120] [client 20.29.119.89:30539] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "afkNzfolSHl4aAnrIovYtQAAAE0"]
[Tue May 05 05:21:17.475153 2026] [:error] [pid 41055:tid 41082] [client 20.29.119.89:30544] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "afkNzSepFwKgA_SKOHirbwAAARg"]
[Tue May 05 05:21:17.852239 2026] [:error] [pid 41055:tid 41058] [client 20.29.119.89:30689] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "afkNzSepFwKgA_SKOHircAAAAQA"]
[Tue May 05 05:21:18.232194 2026] [:error] [pid 39071:tid 39101] [client 20.29.119.89:30711] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/explorer/index_.php"] [unique_id "afkNzovmnRMz9gRzix1WIQAAABU"]
[Tue May 05 05:21:18.617817 2026] [:error] [pid 39178:tid 39181] [client 20.29.119.89:30564] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/explorer/index_.php"] [unique_id "afkNzjaPrgTaiOD_15s0ogAAAME"]
[Tue May 05 05:21:18.991846 2026] [:error] [pid 39178:tid 39191] [client 20.29.119.89:30710] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/explorer/index_.php"] [unique_id "afkNzjaPrgTaiOD_15s0qAAAAMs"]
[Tue May 05 05:21:19.378874 2026] [:error] [pid 39178:tid 39185] [client 20.29.119.89:30641] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/explorer/index_.php"] [unique_id "afkNzzaPrgTaiOD_15s0rgAAAMU"]
[Tue May 05 05:21:19.757316 2026] [:error] [pid 39072:tid 39114] [client 20.29.119.89:30597] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "afkNz_olSHl4aAnrIovYvgAAAEc"]
[Tue May 05 05:21:20.131429 2026] [:error] [pid 39072:tid 39110] [client 20.29.119.89:30604] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "afkN0PolSHl4aAnrIovYwAAAAEM"]
[Tue May 05 05:21:20.509592 2026] [:error] [pid 39072:tid 39126] [client 20.29.119.89:30556] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "afkN0PolSHl4aAnrIovYwwAAAFM"]
[Tue May 05 05:21:20.883085 2026] [:error] [pid 41055:tid 41079] [client 20.29.119.89:30619] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "afkN0CepFwKgA_SKOHircwAAARU"]
[Tue May 05 05:21:21.268145 2026] [:error] [pid 41055:tid 41059] [client 20.29.119.89:30673] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "afkN0SepFwKgA_SKOHirdAAAAQE"]
[Tue May 05 05:21:21.642103 2026] [:error] [pid 39072:tid 39121] [client 20.29.119.89:30719] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "afkN0folSHl4aAnrIovYxAAAAE4"]
[Tue May 05 05:21:22.032376 2026] [:error] [pid 41055:tid 41063] [client 20.29.119.89:30625] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "afkN0iepFwKgA_SKOHirdgAAAQU"]
[Tue May 05 05:21:22.410820 2026] [:error] [pid 41055:tid 41064] [client 20.29.119.89:30615] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "afkN0iepFwKgA_SKOHirdwAAAQY"]
[Tue May 05 05:21:22.784311 2026] [:error] [pid 41055:tid 41074] [client 20.29.119.89:30623] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afkN0iepFwKgA_SKOHireAAAARA"]
[Tue May 05 05:21:23.156121 2026] [:error] [pid 39072:tid 39118] [client 20.29.119.89:30610] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afkN0_olSHl4aAnrIovYxwAAAEs"]
[Tue May 05 05:21:23.532332 2026] [:error] [pid 39073:tid 39149] [client 20.29.119.89:30688] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afkN0_0kT1BNjk46BkcVFQAAAI8"]
[Tue May 05 05:21:23.913021 2026] [:error] [pid 39071:tid 39093] [client 20.29.119.89:30631] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afkN04vmnRMz9gRzix1WIwAAAA0"]
[Tue May 05 05:21:24.294898 2026] [:error] [pid 41055:tid 41071] [client 20.29.119.89:30543] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afkN1CepFwKgA_SKOHirewAAAQ0"]
[Tue May 05 05:21:24.673154 2026] [:error] [pid 41055:tid 41066] [client 20.29.119.89:30626] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afkN1CepFwKgA_SKOHirfAAAAQg"]
[Tue May 05 05:21:25.048597 2026] [:error] [pid 39073:tid 39144] [client 20.29.119.89:30651] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afkN1f0kT1BNjk46BkcVFgAAAIo"]
[Tue May 05 05:21:25.425931 2026] [:error] [pid 39071:tid 39103] [client 20.29.119.89:30573] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afkN1YvmnRMz9gRzix1WJAAAABc"]
[Tue May 05 05:21:25.806380 2026] [:error] [pid 41055:tid 41075] [client 20.29.119.89:30649] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "afkN1SepFwKgA_SKOHirfQAAARE"]
[Tue May 05 05:21:26.188612 2026] [:error] [pid 41055:tid 41062] [client 20.29.119.89:30532] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "afkN1iepFwKgA_SKOHirfgAAAQQ"]
[Tue May 05 05:21:26.562744 2026] [:error] [pid 39073:tid 39153] [client 20.29.119.89:30552] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "afkN1v0kT1BNjk46BkcVGAAAAJM"]
[Tue May 05 05:21:26.942413 2026] [:error] [pid 39073:tid 39146] [client 20.29.119.89:30682] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "afkN1v0kT1BNjk46BkcVGQAAAIw"]
[Tue May 05 05:21:27.315263 2026] [:error] [pid 39072:tid 39108] [client 20.29.119.89:30528] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app.php"] [unique_id "afkN1_olSHl4aAnrIovYywAAAEE"]
[Tue May 05 05:21:27.694006 2026] [:error] [pid 39178:tid 39186] [client 20.29.119.89:30679] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app.php"] [unique_id "afkN1zaPrgTaiOD_15s0xAAAAMY"]
[Tue May 05 05:21:28.074366 2026] [:error] [pid 39071:tid 39099] [client 20.29.119.89:30605] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app.php"] [unique_id "afkN2IvmnRMz9gRzix1WKQAAABM"]
[Tue May 05 05:21:28.452041 2026] [:error] [pid 39071:tid 39104] [client 20.29.119.89:30606] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app.php"] [unique_id "afkN2IvmnRMz9gRzix1WKgAAABg"]
[Tue May 05 05:21:28.829158 2026] [:error] [pid 41055:tid 41078] [client 20.29.119.89:30557] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "afkN2CepFwKgA_SKOHirgQAAARQ"]
[Tue May 05 05:21:29.205857 2026] [:error] [pid 41055:tid 41063] [client 20.29.119.89:30515] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "afkN2SepFwKgA_SKOHirggAAAQU"]
[Tue May 05 05:21:29.590437 2026] [:error] [pid 41055:tid 41074] [client 20.29.119.89:30621] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "afkN2SepFwKgA_SKOHirhQAAARA"]
[Tue May 05 05:21:29.965968 2026] [:error] [pid 39073:tid 39150] [client 20.29.119.89:30662] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "afkN2f0kT1BNjk46BkcVHAAAAJA"]
[Tue May 05 05:21:30.345316 2026] [:error] [pid 39073:tid 39140] [client 20.29.119.89:30596] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file59.php"] [unique_id "afkN2v0kT1BNjk46BkcVHQAAAIY"]
[Tue May 05 05:21:30.723980 2026] [:error] [pid 39073:tid 39139] [client 20.29.119.89:30629] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file59.php"] [unique_id "afkN2v0kT1BNjk46BkcVHwAAAIU"]
[Tue May 05 05:21:31.100651 2026] [:error] [pid 39071:tid 39102] [client 20.29.119.89:30529] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file59.php"] [unique_id "afkN24vmnRMz9gRzix1WLQAAABY"]
[Tue May 05 05:21:31.485055 2026] [:error] [pid 39073:tid 39158] [client 20.29.119.89:30685] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file59.php"] [unique_id "afkN2_0kT1BNjk46BkcVIQAAAJg"]
[Tue May 05 05:21:31.867640 2026] [:error] [pid 39073:tid 39136] [client 20.29.119.89:30655] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "afkN2_0kT1BNjk46BkcVIgAAAII"]
[Tue May 05 05:21:32.238477 2026] [:error] [pid 41055:tid 41062] [client 20.29.119.89:30634] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "afkN3CepFwKgA_SKOHiriwAAAQQ"]
[Tue May 05 05:21:32.615218 2026] [:error] [pid 41055:tid 41077] [client 20.29.119.89:30537] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "afkN3CepFwKgA_SKOHirjQAAARM"]
[Tue May 05 05:21:32.994196 2026] [:error] [pid 39073:tid 39152] [client 20.29.119.89:30561] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "afkN3P0kT1BNjk46BkcVJAAAAJI"]
[Tue May 05 05:21:33.367801 2026] [:error] [pid 39071:tid 39081] [client 20.29.119.89:30540] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lala.php"] [unique_id "afkN3YvmnRMz9gRzix1WLgAAAAE"]
[Tue May 05 05:21:33.764339 2026] [:error] [pid 41055:tid 41059] [client 20.29.119.89:30653] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lala.php"] [unique_id "afkN3SepFwKgA_SKOHirjwAAAQE"]
[Tue May 05 05:21:34.138663 2026] [:error] [pid 41055:tid 41063] [client 20.29.119.89:30508] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lala.php"] [unique_id "afkN3iepFwKgA_SKOHirkQAAAQU"]
[Tue May 05 05:21:34.518070 2026] [:error] [pid 41055:tid 41072] [client 20.29.119.89:30533] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lala.php"] [unique_id "afkN3iepFwKgA_SKOHirkwAAAQ4"]
[Tue May 05 05:21:34.899515 2026] [:error] [pid 41055:tid 41067] [client 20.29.119.89:30661] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-at.php"] [unique_id "afkN3iepFwKgA_SKOHirlAAAAQk"]
[Tue May 05 05:21:35.274960 2026] [:error] [pid 39073:tid 39147] [client 20.29.119.89:30652] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-at.php"] [unique_id "afkN3_0kT1BNjk46BkcVKAAAAI0"]
[Tue May 05 05:21:35.656783 2026] [:error] [pid 39178:tid 39194] [client 20.29.119.89:30620] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-at.php"] [unique_id "afkN3zaPrgTaiOD_15s0yQAAAM4"]
[Tue May 05 05:21:36.035977 2026] [:error] [pid 41055:tid 41058] [client 20.29.119.89:30707] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-at.php"] [unique_id "afkN4CepFwKgA_SKOHirlwAAAQA"]
[Tue May 05 05:21:36.424722 2026] [:error] [pid 41055:tid 41075] [client 20.29.119.89:30659] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "afkN4CepFwKgA_SKOHirmAAAARE"]
[Tue May 05 05:21:36.807402 2026] [:error] [pid 39073:tid 39137] [client 20.29.119.89:30690] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "afkN4P0kT1BNjk46BkcVKQAAAIM"]
[Tue May 05 05:21:37.182603 2026] [:error] [pid 39072:tid 39117] [client 20.29.119.89:30601] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "afkN4folSHl4aAnrIovY0AAAAEo"]
[Tue May 05 05:21:37.562945 2026] [:error] [pid 41055:tid 41077] [client 20.29.119.89:30576] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "afkN4SepFwKgA_SKOHirmwAAARM"]
[Tue May 05 05:21:37.944081 2026] [:error] [pid 39072:tid 39110] [client 20.29.119.89:30695] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sys.php"] [unique_id "afkN4folSHl4aAnrIovY0gAAAEM"]
[Tue May 05 05:21:38.321438 2026] [:error] [pid 39178:tid 39191] [client 20.29.119.89:30614] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sys.php"] [unique_id "afkN4jaPrgTaiOD_15s0zwAAAMs"]
[Tue May 05 05:21:38.702608 2026] [:error] [pid 41055:tid 41067] [client 20.29.119.89:30681] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sys.php"] [unique_id "afkN4iepFwKgA_SKOHirnQAAAQk"]
[Tue May 05 05:21:39.091293 2026] [:error] [pid 39073:tid 39148] [client 20.29.119.89:30566] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sys.php"] [unique_id "afkN4_0kT1BNjk46BkcVLAAAAI4"]
[Tue May 05 05:21:39.468472 2026] [:error] [pid 39073:tid 39149] [client 20.29.119.89:30698] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "afkN4_0kT1BNjk46BkcVLQAAAI8"]
[Tue May 05 05:21:39.854774 2026] [:error] [pid 39073:tid 39146] [client 20.29.119.89:30578] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "afkN4_0kT1BNjk46BkcVLwAAAIw"]
[Tue May 05 05:21:40.231163 2026] [:error] [pid 41055:tid 41058] [client 20.29.119.89:30569] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "afkN5CepFwKgA_SKOHiroQAAAQA"]
[Tue May 05 05:21:40.613397 2026] [:error] [pid 39178:tid 39184] [client 20.29.119.89:30663] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "afkN5DaPrgTaiOD_15s00AAAAMQ"]
[Tue May 05 05:21:40.993691 2026] [:error] [pid 39178:tid 39201] [client 20.29.119.89:30541] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "afkN5DaPrgTaiOD_15s00QAAANU"]
[Tue May 05 05:21:41.386055 2026] [:error] [pid 39178:tid 39190] [client 20.29.119.89:30547] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "afkN5TaPrgTaiOD_15s00gAAAMo"]
[Tue May 05 05:21:41.768542 2026] [:error] [pid 39178:tid 39203] [client 20.29.119.89:30645] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "afkN5TaPrgTaiOD_15s00wAAANc"]
[Tue May 05 05:21:42.152766 2026] [:error] [pid 41055:tid 41077] [client 20.29.119.89:30595] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "afkN5iepFwKgA_SKOHirpgAAARM"]
[Tue May 05 05:21:42.538843 2026] [:error] [pid 41055:tid 41059] [client 20.29.119.89:30567] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "afkN5iepFwKgA_SKOHirpwAAAQE"]
[Tue May 05 05:21:42.924193 2026] [:error] [pid 39071:tid 39080] [client 20.29.119.89:30559] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "afkN5ovmnRMz9gRzix1WNwAAAAA"]
[Tue May 05 05:21:43.303485 2026] [:error] [pid 39073:tid 39139] [client 20.29.119.89:30560] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "afkN5_0kT1BNjk46BkcVNQAAAIU"]
[Tue May 05 05:21:43.690201 2026] [:error] [pid 39071:tid 39091] [client 20.29.119.89:30555] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "afkN54vmnRMz9gRzix1WPQAAAAs"]
[Tue May 05 05:21:44.069698 2026] [:error] [pid 39071:tid 39101] [client 20.29.119.89:30580] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "afkN6IvmnRMz9gRzix1WPwAAABU"]
[Tue May 05 05:21:44.445456 2026] [:error] [pid 39073:tid 39149] [client 20.29.119.89:30646] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "afkN6P0kT1BNjk46BkcVOAAAAI8"]
[Tue May 05 05:21:44.818648 2026] [:error] [pid 41055:tid 41072] [client 20.29.119.89:30562] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "afkN6CepFwKgA_SKOHirqgAAAQ4"]
[Tue May 05 05:21:45.200283 2026] [:error] [pid 39178:tid 39194] [client 20.29.119.89:30639] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "afkN6TaPrgTaiOD_15s01QAAAM4"]
[Tue May 05 05:21:45.581063 2026] [:error] [pid 39073:tid 39144] [client 20.29.119.89:30658] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "afkN6f0kT1BNjk46BkcVOgAAAIo"]
[Tue May 05 05:21:45.967996 2026] [:error] [pid 39071:tid 39098] [client 20.29.119.89:30475] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "afkN6YvmnRMz9gRzix1WRAAAABI"]
[Tue May 05 05:21:46.340879 2026] [:error] [pid 39178:tid 39200] [client 20.29.119.89:30648] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "afkN6jaPrgTaiOD_15s01gAAANQ"]
[Tue May 05 05:21:46.743293 2026] [:error] [pid 39073:tid 39135] [client 20.29.119.89:30565] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "afkN6v0kT1BNjk46BkcVPAAAAIE"]
[Tue May 05 05:21:47.133829 2026] [:error] [pid 39071:tid 39084] [client 20.29.119.89:30637] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "afkN64vmnRMz9gRzix1WRgAAAAQ"]
[Tue May 05 05:21:47.515796 2026] [:error] [pid 39071:tid 39096] [client 20.29.119.89:30617] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "afkN64vmnRMz9gRzix1WRwAAABA"]
[Tue May 05 05:21:47.891777 2026] [:error] [pid 39178:tid 39186] [client 20.29.119.89:30553] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "afkN6zaPrgTaiOD_15s02AAAAMY"]
[Tue May 05 05:21:48.281598 2026] [:error] [pid 39071:tid 39102] [client 20.29.119.89:30545] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "afkN7IvmnRMz9gRzix1WSAAAABY"]
[Tue May 05 05:21:48.658809 2026] [:error] [pid 41055:tid 41070] [client 20.29.119.89:30548] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccou.php"] [unique_id "afkN7CepFwKgA_SKOHirrQAAAQw"]
[Tue May 05 05:21:49.051002 2026] [:error] [pid 39071:tid 39094] [client 20.29.119.89:30627] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccou.php"] [unique_id "afkN7YvmnRMz9gRzix1WSgAAAA4"]
[Tue May 05 05:21:49.437768 2026] [:error] [pid 41055:tid 41079] [client 20.29.119.89:30589] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccou.php"] [unique_id "afkN7SepFwKgA_SKOHirrgAAARU"]
[Tue May 05 05:21:49.826404 2026] [:error] [pid 41055:tid 41071] [client 20.29.119.89:30471] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccou.php"] [unique_id "afkN7SepFwKgA_SKOHirsAAAAQ0"]
[Tue May 05 05:21:50.210288 2026] [:error] [pid 41055:tid 41069] [client 20.29.119.89:30674] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "afkN7iepFwKgA_SKOHirsgAAAQs"]
[Tue May 05 05:21:50.591690 2026] [:error] [pid 41055:tid 41076] [client 20.29.119.89:30479] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "afkN7iepFwKgA_SKOHirtAAAARI"]
[Tue May 05 05:21:50.968358 2026] [:error] [pid 41055:tid 41073] [client 20.29.119.89:30701] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "afkN7iepFwKgA_SKOHirtQAAAQ8"]
[Tue May 05 05:21:51.353434 2026] [:error] [pid 39071:tid 39103] [client 20.29.119.89:30405] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "afkN74vmnRMz9gRzix1WTAAAABc"]
[Tue May 05 05:21:51.740253 2026] [:error] [pid 39071:tid 39088] [client 20.29.119.89:30469] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "afkN74vmnRMz9gRzix1WTgAAAAg"]
[Tue May 05 05:21:52.123880 2026] [:error] [pid 39178:tid 39180] [client 20.29.119.89:30702] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "afkN8DaPrgTaiOD_15s05QAAAMA"]
[Tue May 05 05:21:52.504319 2026] [:error] [pid 39072:tid 39115] [client 20.29.119.89:30488] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "afkN8PolSHl4aAnrIovY2gAAAEg"]
[Tue May 05 05:21:52.882189 2026] [:error] [pid 39178:tid 39194] [client 20.29.119.89:30587] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "afkN8DaPrgTaiOD_15s05wAAAM4"]
[Tue May 05 05:21:53.264225 2026] [:error] [pid 39072:tid 39126] [client 20.29.119.89:30464] File does not exist: /usr/local/apache/htdocs/suspended-page/xda.php
[Tue May 05 05:21:53.455957 2026] [:error] [pid 39072:tid 39125] [client 20.29.119.89:30464] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Tue May 05 07:53:52.668847 2026] [:error] [pid 39072:tid 39112] [client 45.86.200.81:33341] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue May 05 07:53:52.956986 2026] [:error] [pid 39072:tid 39123] [client 45.86.200.81:33341] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Tue May 05 07:53:53.236076 2026] [:error] [pid 39072:tid 39120] [client 45.86.200.81:33341] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue May 05 07:53:53.526814 2026] [:error] [pid 39072:tid 39122] [client 45.86.200.81:33341] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Tue May 05 07:53:53.810946 2026] [:error] [pid 39072:tid 39130] [client 45.86.200.81:33341] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue May 05 07:53:54.091087 2026] [:error] [pid 39072:tid 39114] [client 45.86.200.81:33341] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue May 05 07:53:54.375109 2026] [:error] [pid 39072:tid 39115] [client 45.86.200.81:33341] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue May 05 07:53:54.649087 2026] [:error] [pid 39072:tid 39131] [client 45.86.200.81:33341] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Tue May 05 07:53:54.999588 2026] [:error] [pid 39071:tid 39090] [client 45.86.200.101:40237] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue May 05 07:53:55.208946 2026] [:error] [pid 39072:tid 39112] [client 45.86.200.81:33341] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Tue May 05 07:53:55.292353 2026] [:error] [pid 39071:tid 39096] [client 45.86.200.101:40237] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Tue May 05 07:53:55.485977 2026] [:error] [pid 39072:tid 39123] [client 45.86.200.81:33341] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Tue May 05 07:53:55.772853 2026] [:error] [pid 39072:tid 39117] [client 45.86.200.81:33341] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue May 05 07:53:56.057703 2026] [:error] [pid 39072:tid 39125] [client 45.86.200.81:33341] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Tue May 05 07:53:56.334151 2026] [:error] [pid 39072:tid 39121] [client 45.86.200.81:33341] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Tue May 05 07:53:56.621439 2026] [:error] [pid 39072:tid 39108] [client 45.86.200.81:33341] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Tue May 05 07:53:56.899125 2026] [:error] [pid 39072:tid 39109] [client 45.86.200.81:33341] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Tue May 05 07:53:57.191055 2026] [:error] [pid 39072:tid 39122] [client 45.86.200.81:33341] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Tue May 05 07:53:57.471168 2026] [:error] [pid 39072:tid 39122] [client 45.86.200.81:33341] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Tue May 05 07:53:57.767511 2026] [:error] [pid 39072:tid 39126] [client 45.86.200.81:33341] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Tue May 05 07:54:09.330645 2026] [:error] [pid 39071:tid 39096] [client 45.86.200.101:40237] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue May 05 07:54:17.002927 2026] [:error] [pid 39072:tid 39128] [client 45.86.200.81:33341] [client 45.86.200.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "afkxqfolSHl4aAnrIoto4AAAAFU"]
[Tue May 05 07:54:31.196033 2026] [autoindex:error] [pid 53856:tid 53881] [client 45.86.200.57:54123] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:54:32.970944 2026] [:error] [pid 39178:tid 39183] [client 45.86.200.111:39697] [client 45.86.200.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "afkxuDaPrgTaiOD_15vm6QAAAMM"]
[Tue May 05 12:09:22.857451 2026] [:error] [pid 25835:tid 25851] [client 20.219.129.186:3287] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php
[Tue May 05 12:09:23.012516 2026] [:error] [pid 25835:tid 25837] [client 20.219.129.186:3287] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Tue May 05 12:09:23.154270 2026] [:error] [pid 25835:tid 25855] [client 20.219.129.186:3287] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue May 05 12:09:23.319692 2026] [:error] [pid 25835:tid 25857] [client 20.219.129.186:3287] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Tue May 05 12:09:23.461337 2026] [:error] [pid 25835:tid 25854] [client 20.219.129.186:3287] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Tue May 05 12:09:23.607770 2026] [:error] [pid 25835:tid 25842] [client 20.219.129.186:3287] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Tue May 05 12:09:23.751576 2026] [:error] [pid 25835:tid 25843] [client 20.219.129.186:3287] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Tue May 05 12:09:23.906023 2026] [:error] [pid 25835:tid 25861] [client 20.219.129.186:3287] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Tue May 05 12:09:24.047617 2026] [:error] [pid 25835:tid 25856] [client 20.219.129.186:3287] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue May 05 12:09:24.189214 2026] [:error] [pid 25835:tid 25851] [client 20.219.129.186:3287] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue May 05 12:09:24.469899 2026] [:error] [pid 25835:tid 25852] [client 20.219.129.186:3287] [client 20.219.129.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afltdFDT5nGJyh1439xerQAAAQ8"]
[Tue May 05 12:09:25.041113 2026] [:error] [pid 25743:tid 25771] [client 20.219.129.186:3178] [client 20.219.129.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afltdW-PCMRhF5DdUnN8sQAAABg"]
[Tue May 05 12:09:25.614604 2026] [:error] [pid 25835:tid 25843] [client 20.219.129.186:6328] [client 20.219.129.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afltdVDT5nGJyh1439xeswAAAQY"]
[Tue May 05 12:09:26.178065 2026] [:error] [pid 25835:tid 25849] [client 20.219.129.186:6302] [client 20.219.129.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afltdlDT5nGJyh1439xetwAAAQw"]
[Tue May 05 15:58:28.987851 2026] [:error] [pid 25745:tid 25807] [client 4.230.137.131:2886] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php
[Tue May 05 15:58:29.142148 2026] [:error] [pid 25745:tid 25824] [client 4.230.137.131:2886] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Tue May 05 15:58:29.295643 2026] [:error] [pid 25745:tid 25825] [client 4.230.137.131:2886] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue May 05 15:58:29.450209 2026] [:error] [pid 25745:tid 25801] [client 4.230.137.131:2886] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Tue May 05 15:58:29.603300 2026] [:error] [pid 25745:tid 25823] [client 4.230.137.131:2886] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Tue May 05 15:58:29.772652 2026] [:error] [pid 25745:tid 25804] [client 4.230.137.131:2886] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Tue May 05 15:58:29.949499 2026] [:error] [pid 25745:tid 25812] [client 4.230.137.131:2886] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Tue May 05 15:58:30.131949 2026] [:error] [pid 25745:tid 25821] [client 4.230.137.131:2886] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Tue May 05 15:58:30.313158 2026] [:error] [pid 25745:tid 25814] [client 4.230.137.131:2886] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue May 05 15:58:30.493385 2026] [:error] [pid 25745:tid 25813] [client 4.230.137.131:2886] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue May 05 15:58:30.850399 2026] [:error] [pid 25745:tid 25817] [client 4.230.137.131:2886] [client 4.230.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afmjJpsd7hb7vrvCNBkcdQAAANA"]
[Tue May 05 15:58:31.443170 2026] [:error] [pid 25835:tid 25856] [client 4.230.137.131:1622] [client 4.230.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afmjJ1DT5nGJyh1439yrgwAAARM"]
[Tue May 05 15:58:32.144760 2026] [:error] [pid 25745:tid 25802] [client 4.230.137.131:1669] [client 4.230.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afmjKJsd7hb7vrvCNBkcdgAAAME"]
[Tue May 05 15:58:32.807527 2026] [:error] [pid 54732:tid 54739] [client 4.230.137.131:2487] [client 4.230.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afmjKLGgYlDOb3nfuJTUlQAAAEU"]
[Tue May 05 22:24:52.955948 2026] [:error] [pid 25743:tid 25765] [client 20.28.242.40:1630] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Tue May 05 22:24:52.973153 2026] [:error] [pid 25743:tid 25763] [client 20.28.242.40:1630] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Tue May 05 22:24:53.010184 2026] [:error] [pid 25743:tid 25752] [client 20.28.242.40:1630] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue May 05 22:24:53.046946 2026] [:error] [pid 25743:tid 25750] [client 20.28.242.40:1630] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Tue May 05 22:24:53.097032 2026] [:error] [pid 25743:tid 25769] [client 20.28.242.40:1630] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue May 05 22:24:53.115023 2026] [:error] [pid 25743:tid 25755] [client 20.28.242.40:1630] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Tue May 05 22:24:53.132179 2026] [:error] [pid 25743:tid 25768] [client 20.28.242.40:1630] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue May 05 22:24:53.148529 2026] [:error] [pid 25743:tid 25747] [client 20.28.242.40:1630] File does not exist: /usr/local/apache/htdocs/suspended-page/meta.php
[Tue May 05 22:24:53.162873 2026] [:error] [pid 25743:tid 25754] [client 20.28.242.40:1630] [client 20.28.242.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afn9tW-PCMRhF5DdUnMEYgAAAAc"]
[Tue May 05 22:24:53.224729 2026] [:error] [pid 25743:tid 25764] [client 20.28.242.40:1844] [client 20.28.242.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afn9tW-PCMRhF5DdUnMEYwAAABE"]
[Tue May 05 22:24:53.287004 2026] [:error] [pid 25743:tid 25760] [client 20.28.242.40:1620] [client 20.28.242.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afn9tW-PCMRhF5DdUnMEZAAAAA0"]
[Tue May 05 22:24:53.401475 2026] [:error] [pid 25744:tid 25775] [client 20.28.242.40:1616] [client 20.28.242.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afn9tSR8IuyzjkW06OMGYwAAAIE"]
[Wed May 06 11:04:11.292840 2026] [:error] [pid 482:tid 503] [client 157.245.178.152:60993] [client 157.245.178.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.178.152, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "afqvq8xs8HOc_nWgOW69iQAAAdM"]
[Wed May 06 11:04:11.297365 2026] [:error] [pid 482:tid 503] [client 157.245.178.152:60993] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed May 06 15:11:11.697025 2026] [:error] [pid 9789:tid 9813] [client 129.159.56.14:55732] [client 129.159.56.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "afrpjz_YStPJSCHPkUVcYQAAAFY"]
[Thu May 07 04:48:55.371151 2026] [:error] [pid 29710:tid 29727] [client 20.104.207.18:57828] File does not exist: /usr/local/apache/htdocs/suspended-page/nyan.php
[Thu May 07 04:48:55.578854 2026] [:error] [pid 29710:tid 29719] [client 20.104.207.18:57828] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-k7djufwez2.php
[Thu May 07 04:48:55.795122 2026] [:error] [pid 29710:tid 29721] [client 20.104.207.18:57828] File does not exist: /usr/local/apache/htdocs/suspended-page/bc.php
[Thu May 07 04:48:56.011260 2026] [:error] [pid 29710:tid 29728] [client 20.104.207.18:57828] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu May 07 04:48:56.219777 2026] [:error] [pid 29710:tid 29732] [client 20.104.207.18:57828] File does not exist: /usr/local/apache/htdocs/suspended-page/casp1.php
[Thu May 07 04:48:56.428678 2026] [:error] [pid 29710:tid 29733] [client 20.104.207.18:57828] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Thu May 07 04:48:56.636111 2026] [:error] [pid 29710:tid 29725] [client 20.104.207.18:57828] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Thu May 07 04:48:56.843168 2026] [:error] [pid 29710:tid 29720] [client 20.104.207.18:57828] File does not exist: /usr/local/apache/htdocs/suspended-page/xxa.php
[Thu May 07 04:48:57.052163 2026] [:error] [pid 29710:tid 29736] [client 20.104.207.18:57828] File does not exist: /usr/local/apache/htdocs/suspended-page/3369.php
[Thu May 07 04:48:57.260862 2026] [:error] [pid 29710:tid 29716] [client 20.104.207.18:57828] File does not exist: /usr/local/apache/htdocs/suspended-page/dostshell.php
[Thu May 07 04:48:57.465610 2026] [:error] [pid 29710:tid 29726] [client 20.104.207.18:57828] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "afupOf0atTQld9Y2ht_JjwAAAM4"]
[Thu May 07 04:48:57.883714 2026] [:error] [pid 29710:tid 29734] [client 20.104.207.18:57805] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "afupOf0atTQld9Y2ht_JmwAAANY"]
[Thu May 07 04:48:58.328105 2026] [:error] [pid 29710:tid 29726] [client 20.104.207.18:57815] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "afupOv0atTQld9Y2ht_JowAAAM4"]
[Thu May 07 04:48:58.762976 2026] [:error] [pid 29606:tid 29661] [client 20.104.207.18:56995] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "afupOhR5HjZ1PlSAiKtVBwAAAFQ"]
[Thu May 07 04:48:59.177010 2026] [:error] [pid 29710:tid 29712] [client 20.104.207.18:57037] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index0.php"] [unique_id "afupO_0atTQld9Y2ht_JtQAAAMA"]
[Thu May 07 04:48:59.599593 2026] [:error] [pid 29710:tid 29719] [client 20.104.207.18:57035] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index0.php"] [unique_id "afupO_0atTQld9Y2ht_JvAAAAMc"]
[Thu May 07 04:49:00.011574 2026] [:error] [pid 29710:tid 29733] [client 20.104.207.18:57026] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index0.php"] [unique_id "afupPP0atTQld9Y2ht_JwQAAANU"]
[Thu May 07 04:49:00.466913 2026] [:error] [pid 29605:tid 29630] [client 20.104.207.18:57069] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index0.php"] [unique_id "afupPInxrTjETioEY0TUfwAAABA"]
[Thu May 07 04:49:00.881603 2026] [:error] [pid 29710:tid 29736] [client 20.104.207.18:56960] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "afupPP0atTQld9Y2ht_JxQAAANg"]
[Thu May 07 04:49:01.303389 2026] [:error] [pid 4539:tid 4542] [client 20.104.207.18:57046] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "afupPYPEZE1565sDGnwIUgAAAQE"]
[Thu May 07 04:49:01.723713 2026] [:error] [pid 29710:tid 29715] [client 20.104.207.18:56994] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "afupPf0atTQld9Y2ht_J0QAAAMM"]
[Thu May 07 04:49:02.137868 2026] [:error] [pid 4539:tid 4550] [client 20.104.207.18:57836] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "afupPoPEZE1565sDGnwIVgAAAQk"]
[Thu May 07 04:49:02.585086 2026] [:error] [pid 4539:tid 4561] [client 20.104.207.18:57043] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "afupPoPEZE1565sDGnwIWgAAARQ"]
[Thu May 07 04:49:03.046720 2026] [:error] [pid 4539:tid 4564] [client 20.104.207.18:57799] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "afupP4PEZE1565sDGnwIXwAAARc"]
[Thu May 07 04:49:03.498202 2026] [:error] [pid 29606:tid 29658] [client 20.104.207.18:57030] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "afupPxR5HjZ1PlSAiKtVCwAAAFE"]
[Thu May 07 04:49:03.931639 2026] [:error] [pid 29605:tid 29638] [client 20.104.207.18:57841] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "afupP4nxrTjETioEY0TUggAAABg"]
[Thu May 07 04:49:04.378442 2026] [:error] [pid 29607:tid 29676] [client 20.104.207.18:57747] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "afupQKbP7TJOAh7WSUNXVgAAAIg"]
[Thu May 07 04:49:04.822526 2026] [:error] [pid 29606:tid 29654] [client 20.104.207.18:57071] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "afupQBR5HjZ1PlSAiKtVDQAAAE0"]
[Thu May 07 04:49:05.238416 2026] [:error] [pid 4539:tid 4557] [client 20.104.207.18:57833] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "afupQYPEZE1565sDGnwIYgAAARA"]
[Thu May 07 04:49:05.694811 2026] [:error] [pid 4539:tid 4552] [client 20.104.207.18:57785] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "afupQYPEZE1565sDGnwIZgAAAQs"]
[Thu May 07 04:49:06.168826 2026] [:error] [pid 29606:tid 29655] [client 20.104.207.18:57789] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "afupQhR5HjZ1PlSAiKtVDwAAAE4"]
[Thu May 07 04:49:06.622826 2026] [:error] [pid 4539:tid 4542] [client 20.104.207.18:57845] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "afupQoPEZE1565sDGnwIawAAAQE"]
[Thu May 07 04:49:07.106688 2026] [:error] [pid 29606:tid 29652] [client 20.104.207.18:53835] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "afupQxR5HjZ1PlSAiKtVEQAAAEs"]
[Thu May 07 04:49:07.615359 2026] [:error] [pid 29606:tid 29663] [client 20.104.207.18:57749] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "afupQxR5HjZ1PlSAiKtVEwAAAFY"]
[Thu May 07 04:49:08.039883 2026] [:error] [pid 29606:tid 29653] [client 20.104.207.18:57013] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "afupRBR5HjZ1PlSAiKtVFAAAAEw"]
[Thu May 07 04:49:08.483852 2026] [:error] [pid 4539:tid 4545] [client 20.104.207.18:57079] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "afupRIPEZE1565sDGnwIbwAAAQQ"]
[Thu May 07 04:49:08.897925 2026] [:error] [pid 4539:tid 4546] [client 20.104.207.18:53856] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "afupRIPEZE1565sDGnwIcAAAAQU"]
[Thu May 07 04:49:09.321086 2026] [:error] [pid 29607:tid 29690] [client 20.104.207.18:56987] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "afupRabP7TJOAh7WSUNXXAAAAJY"]
[Thu May 07 04:49:09.752217 2026] [:error] [pid 29607:tid 29677] [client 20.104.207.18:57034] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "afupRabP7TJOAh7WSUNXXwAAAIk"]
[Thu May 07 04:49:10.176722 2026] [:error] [pid 29710:tid 29721] [client 20.104.207.18:57036] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "afupRv0atTQld9Y2ht_J9wAAAMk"]
[Thu May 07 04:49:10.610537 2026] [:error] [pid 29607:tid 29681] [client 20.104.207.18:57817] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "afupRqbP7TJOAh7WSUNXZAAAAI0"]
[Thu May 07 04:49:11.024461 2026] [:error] [pid 29605:tid 29615] [client 20.104.207.18:57039] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "afupR4nxrTjETioEY0TUjgAAAAE"]
[Thu May 07 04:49:11.465061 2026] [:error] [pid 29607:tid 29671] [client 20.104.207.18:57073] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "afupR6bP7TJOAh7WSUNXZwAAAIM"]
[Thu May 07 04:49:11.879924 2026] [:error] [pid 4539:tid 4553] [client 20.104.207.18:57018] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "afupR4PEZE1565sDGnwIegAAAQw"]
[Thu May 07 04:49:12.306693 2026] [:error] [pid 29605:tid 29630] [client 20.104.207.18:57855] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "afupSInxrTjETioEY0TUjwAAABA"]
[Thu May 07 04:49:12.721784 2026] [:error] [pid 29710:tid 29730] [client 20.104.207.18:53872] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "afupSP0atTQld9Y2ht_J_AAAANI"]
[Thu May 07 04:49:13.138526 2026] [:error] [pid 29710:tid 29712] [client 20.104.207.18:57796] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "afupSf0atTQld9Y2ht_KAAAAAMA"]
[Thu May 07 04:49:13.556009 2026] [:error] [pid 29605:tid 29623] [client 20.104.207.18:57015] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "afupSYnxrTjETioEY0TUkgAAAAk"]
[Thu May 07 04:49:13.991682 2026] [:error] [pid 29605:tid 29624] [client 20.104.207.18:57769] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "afupSYnxrTjETioEY0TUkwAAAAo"]
[Thu May 07 04:49:14.410807 2026] [:error] [pid 29606:tid 29655] [client 20.104.207.18:57783] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "afupShR5HjZ1PlSAiKtVGwAAAE4"]
[Thu May 07 04:49:14.916044 2026] [:error] [pid 29710:tid 29731] [client 20.104.207.18:57790] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "afupSv0atTQld9Y2ht_KBwAAANM"]
[Thu May 07 04:49:15.330942 2026] [:error] [pid 29605:tid 29614] [client 20.104.207.18:57032] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "afupS4nxrTjETioEY0TUlwAAAAA"]
[Thu May 07 04:49:15.745268 2026] [:error] [pid 4539:tid 4563] [client 20.104.207.18:57070] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "afupS4PEZE1565sDGnwIfgAAARY"]
[Thu May 07 04:49:16.161906 2026] [:error] [pid 29607:tid 29687] [client 20.104.207.18:56986] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "afupTKbP7TJOAh7WSUNXbwAAAJM"]
[Thu May 07 04:49:16.596079 2026] [:error] [pid 29605:tid 29631] [client 20.104.207.18:53822] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cdxadmin.php"] [unique_id "afupTInxrTjETioEY0TUmAAAABE"]
[Thu May 07 04:49:17.071080 2026] [:error] [pid 29607:tid 29682] [client 20.104.207.18:48104] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cdxadmin.php"] [unique_id "afupTabP7TJOAh7WSUNXcQAAAI4"]
[Thu May 07 04:49:17.484276 2026] [:error] [pid 4539:tid 4542] [client 20.104.207.18:56991] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cdxadmin.php"] [unique_id "afupTYPEZE1565sDGnwIgQAAAQE"]
[Thu May 07 04:49:17.908453 2026] [:error] [pid 29607:tid 29680] [client 20.104.207.18:56988] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cdxadmin.php"] [unique_id "afupTabP7TJOAh7WSUNXdgAAAIw"]
[Thu May 07 04:49:18.340817 2026] [:error] [pid 4539:tid 4556] [client 20.104.207.18:57843] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "afupToPEZE1565sDGnwIhAAAAQ8"]
[Thu May 07 04:49:18.783947 2026] [:error] [pid 29607:tid 29691] [client 20.104.207.18:57740] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "afupTqbP7TJOAh7WSUNXeAAAAJc"]
[Thu May 07 04:49:19.208008 2026] [:error] [pid 29607:tid 29688] [client 20.104.207.18:57732] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "afupT6bP7TJOAh7WSUNXeQAAAJQ"]
[Thu May 07 04:49:19.633856 2026] [:error] [pid 29607:tid 29690] [client 20.104.207.18:57772] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "afupT6bP7TJOAh7WSUNXewAAAJY"]
[Thu May 07 04:49:20.074246 2026] [:error] [pid 4539:tid 4557] [client 20.104.207.18:57762] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "afupUIPEZE1565sDGnwIiAAAARA"]
[Thu May 07 04:49:20.489697 2026] [:error] [pid 29607:tid 29678] [client 20.104.207.18:57793] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "afupUKbP7TJOAh7WSUNXfAAAAIo"]
[Thu May 07 04:49:20.951554 2026] [:error] [pid 29606:tid 29649] [client 20.104.207.18:53881] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "afupUBR5HjZ1PlSAiKtVJAAAAEg"]
[Thu May 07 04:49:21.364826 2026] [:error] [pid 29606:tid 29641] [client 20.104.207.18:56993] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "afupURR5HjZ1PlSAiKtVJgAAAEA"]
[Thu May 07 04:49:21.779088 2026] [:error] [pid 29710:tid 29716] [client 20.104.207.18:53886] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "afupUf0atTQld9Y2ht_KEAAAAMQ"]
[Thu May 07 04:49:22.200011 2026] [:error] [pid 29606:tid 29655] [client 20.104.207.18:57002] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "afupUhR5HjZ1PlSAiKtVKQAAAE4"]
[Thu May 07 04:49:22.638767 2026] [:error] [pid 29606:tid 29660] [client 20.104.207.18:57800] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "afupUhR5HjZ1PlSAiKtVLAAAAFM"]
[Thu May 07 04:49:23.063278 2026] [:error] [pid 29606:tid 29651] [client 20.104.207.18:48004] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "afupUxR5HjZ1PlSAiKtVLwAAAEo"]
[Thu May 07 04:49:23.491153 2026] [:error] [pid 29606:tid 29657] [client 20.104.207.18:56976] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afupUxR5HjZ1PlSAiKtVMQAAAFA"]
[Thu May 07 04:49:23.938881 2026] [:error] [pid 29607:tid 29668] [client 20.104.207.18:57798] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afupU6bP7TJOAh7WSUNXgQAAAIA"]
[Thu May 07 04:49:24.352817 2026] [:error] [pid 29606:tid 29659] [client 20.104.207.18:57053] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afupVBR5HjZ1PlSAiKtVOAAAAFI"]
[Thu May 07 04:49:24.766013 2026] [:error] [pid 29606:tid 29662] [client 20.104.207.18:57058] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afupVBR5HjZ1PlSAiKtVOgAAAFU"]
[Thu May 07 04:49:25.217531 2026] [:error] [pid 29605:tid 29623] [client 20.104.207.18:53772] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "afupVYnxrTjETioEY0TUoAAAAAk"]
[Thu May 07 04:49:25.630874 2026] [:error] [pid 29710:tid 29732] [client 20.104.207.18:56972] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "afupVf0atTQld9Y2ht_KEwAAANQ"]
[Thu May 07 04:49:26.047956 2026] [:error] [pid 4539:tid 4548] [client 20.104.207.18:57756] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "afupVoPEZE1565sDGnwIkAAAAQc"]
[Thu May 07 04:49:26.475193 2026] [:error] [pid 4539:tid 4545] [client 20.104.207.18:56969] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "afupVoPEZE1565sDGnwIkgAAAQQ"]
[Thu May 07 04:49:26.904986 2026] [:error] [pid 4539:tid 4549] [client 20.104.207.18:57787] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-tiroto.php"] [unique_id "afupVoPEZE1565sDGnwIlQAAAQg"]
[Thu May 07 04:49:27.371763 2026] [:error] [pid 29607:tid 29692] [client 20.104.207.18:57020] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-tiroto.php"] [unique_id "afupV6bP7TJOAh7WSUNXhAAAAJg"]
[Thu May 07 04:49:27.791298 2026] [:error] [pid 29607:tid 29676] [client 20.104.207.18:57011] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-tiroto.php"] [unique_id "afupV6bP7TJOAh7WSUNXhwAAAIg"]
[Thu May 07 04:49:28.253930 2026] [:error] [pid 4539:tid 4554] [client 20.104.207.18:56992] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-tiroto.php"] [unique_id "afupWIPEZE1565sDGnwIngAAAQ0"]
[Thu May 07 04:49:28.679318 2026] [:error] [pid 4539:tid 4541] [client 20.104.207.18:57008] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "afupWIPEZE1565sDGnwInwAAAQA"]
[Thu May 07 04:49:29.096364 2026] [:error] [pid 4539:tid 4561] [client 20.104.207.18:57741] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "afupWYPEZE1565sDGnwIogAAARQ"]
[Thu May 07 04:49:29.616682 2026] [:error] [pid 4539:tid 4548] [client 20.104.207.18:57006] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "afupWYPEZE1565sDGnwIpQAAAQc"]
[Thu May 07 04:49:30.035076 2026] [:error] [pid 29606:tid 29646] [client 20.104.207.18:57781] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "afupWhR5HjZ1PlSAiKtVPgAAAEU"]
[Thu May 07 04:49:30.490203 2026] [:error] [pid 29710:tid 29720] [client 20.104.207.18:57810] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "afupWv0atTQld9Y2ht_KFQAAAMg"]
[Thu May 07 04:49:30.926622 2026] [:error] [pid 29607:tid 29685] [client 20.104.207.18:57774] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "afupWqbP7TJOAh7WSUNXjgAAAJE"]
[Thu May 07 04:49:31.354064 2026] [:error] [pid 29607:tid 29689] [client 20.104.207.18:53786] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "afupW6bP7TJOAh7WSUNXkQAAAJU"]
[Thu May 07 04:49:31.787035 2026] [:error] [pid 29606:tid 29645] [client 20.104.207.18:57766] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "afupWxR5HjZ1PlSAiKtVQwAAAEQ"]
[Thu May 07 04:49:32.222370 2026] [:error] [pid 29606:tid 29644] [client 20.104.207.18:57060] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "afupXBR5HjZ1PlSAiKtVRQAAAEM"]
[Thu May 07 04:49:32.650465 2026] [:error] [pid 29607:tid 29688] [client 20.104.207.18:56978] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "afupXKbP7TJOAh7WSUNXlwAAAJQ"]
[Thu May 07 04:49:33.079761 2026] [:error] [pid 29710:tid 29717] [client 20.104.207.18:53804] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "afupXf0atTQld9Y2ht_KGAAAAMU"]
[Thu May 07 04:49:33.558805 2026] [:error] [pid 29605:tid 29621] [client 20.104.207.18:57745] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "afupXYnxrTjETioEY0TUpAAAAAc"]
[Thu May 07 04:49:33.985520 2026] [:error] [pid 29606:tid 29648] [client 20.104.207.18:57021] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "afupXRR5HjZ1PlSAiKtVSQAAAEc"]
[Thu May 07 04:49:34.399909 2026] [:error] [pid 29710:tid 29723] [client 20.104.207.18:53771] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "afupXv0atTQld9Y2ht_KHAAAAMs"]
[Thu May 07 04:49:34.845941 2026] [:error] [pid 29710:tid 29731] [client 20.104.207.18:53861] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "afupXv0atTQld9Y2ht_KHwAAANM"]
[Thu May 07 04:49:35.262136 2026] [:error] [pid 29710:tid 29721] [client 20.104.207.18:57016] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "afupX_0atTQld9Y2ht_KIgAAAMk"]
[Thu May 07 04:49:35.701005 2026] [:error] [pid 29607:tid 29679] [client 20.104.207.18:57795] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mifta.php"] [unique_id "afupX6bP7TJOAh7WSUNXmgAAAIs"]
[Thu May 07 04:49:36.132679 2026] [:error] [pid 29710:tid 29730] [client 20.104.207.18:57017] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mifta.php"] [unique_id "afupYP0atTQld9Y2ht_KJQAAANI"]
[Thu May 07 04:49:36.609915 2026] [:error] [pid 29710:tid 29714] [client 20.104.207.18:57754] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mifta.php"] [unique_id "afupYP0atTQld9Y2ht_KJwAAAMI"]
[Thu May 07 04:49:37.067550 2026] [:error] [pid 29710:tid 29717] [client 20.104.207.18:57816] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mifta.php"] [unique_id "afupYf0atTQld9Y2ht_KKgAAAMU"]
[Thu May 07 04:49:37.530843 2026] [:error] [pid 4539:tid 4541] [client 20.104.207.18:48106] [client 20.104.207.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "afupYYPEZE1565sDGnwIqwAAAQA"]
[Thu May 07 04:49:37.947832 2026] [:error] [pid 29710:tid 29713] [client 20.104.207.18:57074] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "afupYf0atTQld9Y2ht_KLwAAAME"]
[Thu May 07 04:49:38.434774 2026] [:error] [pid 29607:tid 29690] [client 20.104.207.18:53827] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "afupYqbP7TJOAh7WSUNXmwAAAJY"]
[Thu May 07 04:49:38.956701 2026] [:error] [pid 29710:tid 29735] [client 20.104.207.18:56990] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "afupYv0atTQld9Y2ht_KMgAAANc"]
[Thu May 07 04:49:39.421687 2026] [:error] [pid 29710:tid 29721] [client 20.104.207.18:56964] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "afupY_0atTQld9Y2ht_KMwAAAMk"]
[Thu May 07 04:49:39.846082 2026] [:error] [pid 4539:tid 4547] [client 20.104.207.18:57075] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "afupY4PEZE1565sDGnwIrwAAAQY"]
[Thu May 07 04:49:40.266563 2026] [:error] [pid 29607:tid 29681] [client 20.104.207.18:57797] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "afupZKbP7TJOAh7WSUNXowAAAI0"]
[Thu May 07 04:49:40.729343 2026] [:error] [pid 29607:tid 29679] [client 20.104.207.18:57755] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "afupZKbP7TJOAh7WSUNXpQAAAIs"]
[Thu May 07 04:49:41.181689 2026] [:error] [pid 4539:tid 4549] [client 20.104.207.18:57085] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "afupZYPEZE1565sDGnwIswAAAQg"]
[Thu May 07 04:49:41.619025 2026] [:error] [pid 29607:tid 29669] [client 20.104.207.18:57005] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "afupZabP7TJOAh7WSUNXpwAAAIE"]
[Thu May 07 04:49:42.089183 2026] [:error] [pid 29607:tid 29689] [client 20.104.207.18:57033] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "afupZqbP7TJOAh7WSUNXqQAAAJU"]
[Thu May 07 04:49:42.512569 2026] [:error] [pid 29607:tid 29675] [client 20.104.207.18:53853] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "afupZqbP7TJOAh7WSUNXrAAAAIc"]
[Thu May 07 04:49:42.987405 2026] [:error] [pid 29607:tid 29671] [client 20.104.207.18:57802] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "afupZqbP7TJOAh7WSUNXrgAAAIM"]
[Thu May 07 04:49:43.418908 2026] [:error] [pid 4539:tid 4551] [client 20.104.207.18:57792] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "afupZ4PEZE1565sDGnwItwAAAQo"]
[Thu May 07 04:49:43.844940 2026] [:error] [pid 29605:tid 29616] [client 20.104.207.18:48090] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "afupZ4nxrTjETioEY0TUqgAAAAI"]
[Thu May 07 04:49:44.265380 2026] [:error] [pid 29607:tid 29685] [client 20.104.207.18:53831] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "afupaKbP7TJOAh7WSUNXvQAAAJE"]
[Thu May 07 04:49:44.715313 2026] [:error] [pid 29710:tid 29716] [client 20.104.207.18:53875] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "afupaP0atTQld9Y2ht_KOQAAAMQ"]
[Thu May 07 04:49:45.194717 2026] [:error] [pid 4539:tid 4564] [client 20.104.207.18:53761] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "afupaYPEZE1565sDGnwIuQAAARc"]
[Thu May 07 04:49:45.653851 2026] [:error] [pid 29607:tid 29670] [client 20.104.207.18:53801] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "afupaabP7TJOAh7WSUNXygAAAII"]
[Thu May 07 04:49:46.096055 2026] [:error] [pid 29607:tid 29669] [client 20.104.207.18:57072] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "afupaqbP7TJOAh7WSUNXzwAAAIE"]
[Thu May 07 04:49:46.541556 2026] [:error] [pid 29607:tid 29668] [client 20.104.207.18:57837] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "afupaqbP7TJOAh7WSUNX0AAAAIA"]
[Thu May 07 04:49:46.975059 2026] [:error] [pid 4539:tid 4548] [client 20.104.207.18:53780] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "afupaoPEZE1565sDGnwIvQAAAQc"]
[Thu May 07 04:49:47.419842 2026] [:error] [pid 4539:tid 4556] [client 20.104.207.18:53832] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "afupa4PEZE1565sDGnwIwAAAAQ8"]
[Thu May 07 04:49:47.848565 2026] [:error] [pid 29605:tid 29628] [client 20.104.207.18:57051] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "afupa4nxrTjETioEY0TUrgAAAA4"]
[Thu May 07 04:49:48.289853 2026] [:error] [pid 29606:tid 29645] [client 20.104.207.18:57027] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "afupbBR5HjZ1PlSAiKtVUAAAAEQ"]
[Thu May 07 04:49:48.708924 2026] [:error] [pid 4539:tid 4549] [client 20.104.207.18:53851] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "afupbIPEZE1565sDGnwIwgAAAQg"]
[Thu May 07 04:49:49.147461 2026] [:error] [pid 4539:tid 4553] [client 20.104.207.18:57835] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "afupbYPEZE1565sDGnwIxAAAAQw"]
[Thu May 07 04:49:49.571933 2026] [:error] [pid 4539:tid 4550] [client 20.104.207.18:57803] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "afupbYPEZE1565sDGnwIxwAAAQk"]
[Thu May 07 04:49:49.986679 2026] [:error] [pid 4539:tid 4546] [client 20.104.207.18:56981] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "afupbYPEZE1565sDGnwIyQAAAQU"]
[Thu May 07 04:49:50.438607 2026] [:error] [pid 29710:tid 29722] [client 20.104.207.18:53768] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/son.php"] [unique_id "afupbv0atTQld9Y2ht_KQgAAAMo"]
[Thu May 07 04:49:50.851789 2026] [:error] [pid 29606:tid 29663] [client 20.104.207.18:57829] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/son.php"] [unique_id "afupbhR5HjZ1PlSAiKtVUwAAAFY"]
[Thu May 07 04:49:51.265214 2026] [:error] [pid 29710:tid 29735] [client 20.104.207.18:48048] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/son.php"] [unique_id "afupb_0atTQld9Y2ht_KRgAAANc"]
[Thu May 07 04:49:51.681519 2026] [:error] [pid 29710:tid 29729] [client 20.104.207.18:56999] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/son.php"] [unique_id "afupb_0atTQld9Y2ht_KSQAAANE"]
[Thu May 07 04:49:52.096946 2026] [:error] [pid 29607:tid 29692] [client 20.104.207.18:57764] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "afupcKbP7TJOAh7WSUNX5AAAAJg"]
[Thu May 07 04:49:52.509787 2026] [:error] [pid 29607:tid 29683] [client 20.104.207.18:56998] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "afupcKbP7TJOAh7WSUNX5QAAAI8"]
[Thu May 07 04:49:52.924249 2026] [:error] [pid 29710:tid 29736] [client 20.104.207.18:57826] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "afupcP0atTQld9Y2ht_KUQAAANg"]
[Thu May 07 04:49:53.340462 2026] [:error] [pid 4539:tid 4547] [client 20.104.207.18:57055] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "afupcYPEZE1565sDGnwIywAAAQY"]
[Thu May 07 04:49:53.806202 2026] [:error] [pid 29710:tid 29720] [client 20.104.207.18:57823] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zo.php"] [unique_id "afupcf0atTQld9Y2ht_KUgAAAMg"]
[Thu May 07 04:49:54.229859 2026] [:error] [pid 29710:tid 29718] [client 20.104.207.18:57751] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zo.php"] [unique_id "afupcv0atTQld9Y2ht_KVAAAAMY"]
[Thu May 07 04:49:54.682437 2026] [:error] [pid 29607:tid 29669] [client 20.104.207.18:56977] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zo.php"] [unique_id "afupcqbP7TJOAh7WSUNX7AAAAIE"]
[Thu May 07 04:49:55.100767 2026] [:error] [pid 4539:tid 4549] [client 20.104.207.18:48103] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zo.php"] [unique_id "afupc4PEZE1565sDGnwIzQAAAQg"]
[Thu May 07 04:49:55.516822 2026] [:error] [pid 4539:tid 4557] [client 20.104.207.18:57067] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "afupc4PEZE1565sDGnwI0AAAARA"]
[Thu May 07 04:49:55.934209 2026] [:error] [pid 29710:tid 29721] [client 20.104.207.18:57730] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "afupc_0atTQld9Y2ht_KWQAAAMk"]
[Thu May 07 04:49:56.346379 2026] [:error] [pid 4539:tid 4555] [client 20.104.207.18:57077] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "afupdIPEZE1565sDGnwI1gAAAQ4"]
[Thu May 07 04:49:56.817690 2026] [:error] [pid 29607:tid 29688] [client 20.104.207.18:53867] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "afupdKbP7TJOAh7WSUNX7gAAAJQ"]
[Thu May 07 04:49:57.233428 2026] [:error] [pid 29710:tid 29732] [client 20.104.207.18:57777] [client 20.104.207.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "afupdf0atTQld9Y2ht_KXgAAANQ"]
[Thu May 07 04:49:59.260917 2026] [:error] [pid 29607:tid 29670] [client 20.104.207.18:57844] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Thu May 07 04:49:59.472538 2026] [:error] [pid 29607:tid 29678] [client 20.104.207.18:57844] File does not exist: /usr/local/apache/htdocs/suspended-page/s1.php
[Thu May 07 04:49:59.686857 2026] [:error] [pid 29607:tid 29676] [client 20.104.207.18:57844] File does not exist: /usr/local/apache/htdocs/suspended-page/de.php
[Thu May 07 04:49:59.903695 2026] [:error] [pid 29607:tid 29681] [client 20.104.207.18:57844] File does not exist: /usr/local/apache/htdocs/suspended-page/axe.php
[Thu May 07 04:50:00.115446 2026] [:error] [pid 29607:tid 29687] [client 20.104.207.18:57844] File does not exist: /usr/local/apache/htdocs/suspended-page/roksad1.php
[Thu May 07 04:50:00.327965 2026] [:error] [pid 29607:tid 29679] [client 20.104.207.18:57844] File does not exist: /usr/local/apache/htdocs/suspended-page/aj11.php
[Thu May 07 04:50:00.539394 2026] [:error] [pid 29607:tid 29685] [client 20.104.207.18:57844] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Thu May 07 04:50:00.751790 2026] [:error] [pid 29607:tid 29669] [client 20.104.207.18:57844] File does not exist: /usr/local/apache/htdocs/suspended-page/1a.php
[Thu May 07 04:50:00.963920 2026] [:error] [pid 29607:tid 29672] [client 20.104.207.18:57844] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Thu May 07 04:50:01.175937 2026] [:error] [pid 29607:tid 29677] [client 20.104.207.18:57844] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Thu May 07 04:50:01.389969 2026] [:error] [pid 29607:tid 29689] [client 20.104.207.18:57844] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu May 07 04:50:01.598565 2026] [:error] [pid 29607:tid 29668] [client 20.104.207.18:57844] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "afupeabP7TJOAh7WSUNYAgAAAIA"]
[Thu May 07 04:50:02.028595 2026] [:error] [pid 29605:tid 29621] [client 20.104.207.18:57737] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "afupeonxrTjETioEY0TUxAAAAAc"]
[Thu May 07 04:50:02.458838 2026] [:error] [pid 29710:tid 29731] [client 20.104.207.18:48079] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "afupev0atTQld9Y2ht_KawAAANM"]
[Thu May 07 04:50:02.935086 2026] [:error] [pid 4539:tid 4542] [client 20.104.207.18:57003] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "afupeoPEZE1565sDGnwI1wAAAQE"]
[Thu May 07 04:50:03.426366 2026] [:error] [pid 29607:tid 29690] [client 20.104.207.18:57031] [client 20.104.207.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "afupe6bP7TJOAh7WSUNYAwAAAJY"]
[Thu May 07 04:50:03.846788 2026] [:error] [pid 29710:tid 29735] [client 20.104.207.18:53883] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "afupe_0atTQld9Y2ht_KbQAAANc"]
[Thu May 07 04:50:04.356271 2026] [:error] [pid 29606:tid 29646] [client 20.104.207.18:53836] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "afupfBR5HjZ1PlSAiKtVVgAAAEU"]
[Thu May 07 04:50:04.819958 2026] [:error] [pid 29606:tid 29659] [client 20.104.207.18:57804] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "afupfBR5HjZ1PlSAiKtVWQAAAFI"]
[Thu May 07 04:50:05.319950 2026] [:error] [pid 29606:tid 29654] [client 20.104.207.18:57047] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "afupfRR5HjZ1PlSAiKtVXQAAAE0"]
[Thu May 07 04:50:05.769544 2026] [:error] [pid 29605:tid 29615] [client 20.104.207.18:53879] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "afupfYnxrTjETioEY0TUyAAAAAE"]
[Thu May 07 04:50:06.224150 2026] [:error] [pid 4539:tid 4553] [client 20.104.207.18:48030] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "afupfoPEZE1565sDGnwI3AAAAQw"]
[Thu May 07 04:50:06.668663 2026] [:error] [pid 29710:tid 29723] [client 20.104.207.18:57001] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "afupfv0atTQld9Y2ht_KcQAAAMs"]
[Thu May 07 04:50:07.096294 2026] [:error] [pid 29710:tid 29716] [client 20.104.207.18:53849] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "afupf_0atTQld9Y2ht_KdgAAAMQ"]
[Thu May 07 04:50:07.561874 2026] [:error] [pid 29606:tid 29665] [client 20.104.207.18:57854] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "afupfxR5HjZ1PlSAiKtVYQAAAFg"]
[Thu May 07 04:50:08.086389 2026] [:error] [pid 29710:tid 29725] [client 20.104.207.18:56980] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "afupgP0atTQld9Y2ht_KegAAAM0"]
[Thu May 07 04:50:08.637083 2026] [:error] [pid 4539:tid 4551] [client 20.104.207.18:53860] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "afupgIPEZE1565sDGnwI3wAAAQo"]
[Thu May 07 04:50:09.104544 2026] [:error] [pid 29710:tid 29726] [client 20.104.207.18:53869] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "afupgf0atTQld9Y2ht_KfQAAAM4"]
[Thu May 07 04:50:09.592896 2026] [:error] [pid 4539:tid 4541] [client 20.104.207.18:57029] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "afupgYPEZE1565sDGnwI6AAAAQA"]
[Thu May 07 04:50:10.050646 2026] [:error] [pid 29606:tid 29645] [client 20.104.207.18:56997] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "afupghR5HjZ1PlSAiKtVZAAAAEQ"]
[Thu May 07 04:50:10.501373 2026] [:error] [pid 29606:tid 29651] [client 20.104.207.18:56966] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "afupghR5HjZ1PlSAiKtVZwAAAEo"]
[Thu May 07 04:50:10.998313 2026] [:error] [pid 29606:tid 29657] [client 20.104.207.18:48081] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "afupghR5HjZ1PlSAiKtVaAAAAFA"]
[Thu May 07 04:50:11.436887 2026] [:error] [pid 29710:tid 29715] [client 20.104.207.18:57743] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "afupg_0atTQld9Y2ht_KgAAAAMM"]
[Thu May 07 04:50:11.900315 2026] [:error] [pid 29710:tid 29736] [client 20.104.207.18:57086] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "afupg_0atTQld9Y2ht_KggAAANg"]
[Thu May 07 04:50:12.401638 2026] [:error] [pid 29710:tid 29731] [client 20.104.207.18:57748] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "afuphP0atTQld9Y2ht_KgwAAANM"]
[Thu May 07 04:50:12.852118 2026] [:error] [pid 29710:tid 29721] [client 20.104.207.18:57082] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "afuphP0atTQld9Y2ht_KhQAAAMk"]
[Thu May 07 04:50:13.398456 2026] [:error] [pid 29606:tid 29654] [client 20.104.207.18:53854] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "afuphRR5HjZ1PlSAiKtVcAAAAE0"]
[Thu May 07 04:50:13.822273 2026] [:error] [pid 29606:tid 29665] [client 20.104.207.18:57023] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "afuphRR5HjZ1PlSAiKtVcgAAAFg"]
[Thu May 07 04:50:14.264041 2026] [:error] [pid 29710:tid 29713] [client 20.104.207.18:53823] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "afuphv0atTQld9Y2ht_KiAAAAME"]
[Thu May 07 04:50:14.695999 2026] [:error] [pid 29710:tid 29716] [client 20.104.207.18:57742] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "afuphv0atTQld9Y2ht_KiQAAAMQ"]
[Thu May 07 04:50:15.169010 2026] [:error] [pid 29606:tid 29657] [client 20.104.207.18:53777] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "afuphxR5HjZ1PlSAiKtVeAAAAFA"]
[Thu May 07 04:50:15.612968 2026] [:error] [pid 4539:tid 4561] [client 20.104.207.18:57056] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "afuph4PEZE1565sDGnwI-QAAARQ"]
[Thu May 07 04:50:16.062013 2026] [:error] [pid 29710:tid 29714] [client 20.104.207.18:57064] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "afupiP0atTQld9Y2ht_KjAAAAMI"]
[Thu May 07 04:50:16.481264 2026] [:error] [pid 29710:tid 29731] [client 20.104.207.18:57025] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "afupiP0atTQld9Y2ht_KjQAAANM"]
[Thu May 07 04:50:16.927148 2026] [:error] [pid 29606:tid 29665] [client 20.104.207.18:53830] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "afupiBR5HjZ1PlSAiKtVhAAAAFg"]
[Thu May 07 04:50:17.365111 2026] [:error] [pid 29607:tid 29689] [client 20.104.207.18:56974] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "afupiabP7TJOAh7WSUNYBgAAAJU"]
[Thu May 07 04:50:17.810699 2026] [:error] [pid 29607:tid 29688] [client 20.104.207.18:53844] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "afupiabP7TJOAh7WSUNYCAAAAJQ"]
[Thu May 07 04:50:18.239894 2026] [:error] [pid 29710:tid 29720] [client 20.104.207.18:57767] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ganja.php"] [unique_id "afupiv0atTQld9Y2ht_KjgAAAMg"]
[Thu May 07 04:50:18.655302 2026] [:error] [pid 29605:tid 29621] [client 20.104.207.18:48111] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ganja.php"] [unique_id "afupionxrTjETioEY0TUywAAAAc"]
[Thu May 07 04:50:19.097534 2026] [:error] [pid 29605:tid 29636] [client 20.104.207.18:53865] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ganja.php"] [unique_id "afupi4nxrTjETioEY0TUzQAAABY"]
[Thu May 07 04:50:19.546516 2026] [:error] [pid 29606:tid 29652] [client 20.104.207.18:48011] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ganja.php"] [unique_id "afupixR5HjZ1PlSAiKtVjQAAAEs"]
[Thu May 07 04:50:19.983382 2026] [:error] [pid 29606:tid 29643] [client 20.104.207.18:48109] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "afupixR5HjZ1PlSAiKtVjwAAAEI"]
[Thu May 07 04:50:20.416378 2026] [:error] [pid 29606:tid 29660] [client 20.104.207.18:57807] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "afupjBR5HjZ1PlSAiKtVkgAAAFM"]
[Thu May 07 04:50:20.880189 2026] [:error] [pid 29607:tid 29675] [client 20.104.207.18:48083] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "afupjKbP7TJOAh7WSUNYDAAAAIc"]
[Thu May 07 04:50:21.333959 2026] [:error] [pid 4539:tid 4555] [client 20.104.207.18:56984] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "afupjYPEZE1565sDGnwJBAAAAQ4"]
[Thu May 07 04:50:21.791210 2026] [:error] [pid 29710:tid 29724] [client 20.104.207.18:48117] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "afupjf0atTQld9Y2ht_KkAAAAMw"]
[Thu May 07 04:50:22.233539 2026] [:error] [pid 29607:tid 29684] [client 20.104.207.18:57752] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "afupjqbP7TJOAh7WSUNYEQAAAJA"]
[Thu May 07 04:50:22.742832 2026] [:error] [pid 29607:tid 29676] [client 20.104.207.18:57760] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "afupjqbP7TJOAh7WSUNYEgAAAIg"]
[Thu May 07 04:50:23.184497 2026] [:error] [pid 29607:tid 29673] [client 20.104.207.18:53833] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "afupj6bP7TJOAh7WSUNYEwAAAIU"]
[Thu May 07 04:50:23.614588 2026] [:error] [pid 29605:tid 29638] [client 20.104.207.18:57083] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "afupj4nxrTjETioEY0TU1AAAABg"]
[Thu May 07 04:50:24.084513 2026] [:error] [pid 4539:tid 4550] [client 20.104.207.18:57024] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "afupkIPEZE1565sDGnwJBwAAAQk"]
[Thu May 07 04:50:24.558122 2026] [:error] [pid 29710:tid 29716] [client 20.104.207.18:57739] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "afupkP0atTQld9Y2ht_KlAAAAMQ"]
[Thu May 07 04:50:25.064304 2026] [:error] [pid 4539:tid 4560] [client 20.104.207.18:56971] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "afupkYPEZE1565sDGnwJDQAAARM"]
[Thu May 07 04:50:25.495577 2026] [:error] [pid 4539:tid 4545] [client 20.104.207.18:53846] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "afupkYPEZE1565sDGnwJEAAAAQQ"]
[Thu May 07 04:50:25.948919 2026] [:error] [pid 29607:tid 29672] [client 20.104.207.18:53764] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "afupkabP7TJOAh7WSUNYGAAAAIQ"]
[Thu May 07 04:50:26.383847 2026] [:error] [pid 29605:tid 29616] [client 20.104.207.18:57776] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "afupkonxrTjETioEY0TU1wAAAAI"]
[Thu May 07 04:50:26.844420 2026] [:error] [pid 29607:tid 29671] [client 20.104.207.18:57010] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "afupkqbP7TJOAh7WSUNYHAAAAIM"]
[Thu May 07 04:50:27.279860 2026] [:error] [pid 29710:tid 29736] [client 20.104.207.18:53825] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "afupk_0atTQld9Y2ht_KlgAAANg"]
[Thu May 07 04:50:27.711088 2026] [:error] [pid 29607:tid 29692] [client 20.104.207.18:57773] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "afupk6bP7TJOAh7WSUNYIgAAAJg"]
[Thu May 07 04:50:28.137109 2026] [:error] [pid 29607:tid 29683] [client 20.104.207.18:57771] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "afuplKbP7TJOAh7WSUNYJgAAAI8"]
[Thu May 07 04:50:28.605838 2026] [:error] [pid 29607:tid 29680] [client 20.104.207.18:53775] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "afuplKbP7TJOAh7WSUNYKQAAAIw"]
[Thu May 07 04:50:29.095159 2026] [:error] [pid 4539:tid 4565] [client 20.104.207.18:48101] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "afuplYPEZE1565sDGnwJGQAAARg"]
[Thu May 07 04:50:29.556471 2026] [:error] [pid 4539:tid 4550] [client 20.104.207.18:57779] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "afuplYPEZE1565sDGnwJGgAAAQk"]
[Thu May 07 04:50:30.005250 2026] [:error] [pid 29605:tid 29636] [client 20.104.207.18:53878] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "afuplonxrTjETioEY0TU3QAAABY"]
[Thu May 07 04:50:30.466081 2026] [:error] [pid 29607:tid 29677] [client 20.104.207.18:56963] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "afuplqbP7TJOAh7WSUNYLQAAAIk"]
[Thu May 07 04:50:30.948991 2026] [:error] [pid 29710:tid 29719] [client 20.104.207.18:57022] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "afuplv0atTQld9Y2ht_KngAAAMc"]
[Thu May 07 04:50:31.379000 2026] [:error] [pid 4539:tid 4545] [client 20.104.207.18:53824] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "afupl4PEZE1565sDGnwJHQAAAQQ"]
[Thu May 07 04:50:31.812677 2026] [:error] [pid 29606:tid 29661] [client 20.104.207.18:57852] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "afuplxR5HjZ1PlSAiKtVmAAAAFQ"]
[Thu May 07 04:50:32.327739 2026] [:error] [pid 4539:tid 4544] [client 20.104.207.18:57000] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "afupmIPEZE1565sDGnwJHwAAAQM"]
[Thu May 07 04:50:32.747626 2026] [:error] [pid 4539:tid 4549] [client 20.104.207.18:53828] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "afupmIPEZE1565sDGnwJIgAAAQg"]
[Thu May 07 04:50:33.172539 2026] [:error] [pid 29606:tid 29653] [client 20.104.207.18:47569] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "afupmRR5HjZ1PlSAiKtVmwAAAEw"]
[Thu May 07 04:50:33.598359 2026] [:error] [pid 29606:tid 29646] [client 20.104.207.18:47608] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "afupmRR5HjZ1PlSAiKtVnwAAAEU"]
[Thu May 07 04:50:34.038032 2026] [:error] [pid 29606:tid 29645] [client 20.104.207.18:53798] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "afupmhR5HjZ1PlSAiKtVogAAAEQ"]
[Thu May 07 04:50:34.517005 2026] [:error] [pid 29606:tid 29659] [client 20.104.207.18:57052] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "afupmhR5HjZ1PlSAiKtVowAAAFI"]
[Thu May 07 04:50:34.942904 2026] [:error] [pid 29606:tid 29658] [client 20.104.207.18:57004] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "afupmhR5HjZ1PlSAiKtVpgAAAFE"]
[Thu May 07 04:50:35.388994 2026] [:error] [pid 4539:tid 4562] [client 20.104.207.18:57038] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "afupm4PEZE1565sDGnwJKwAAARU"]
[Thu May 07 04:50:35.827693 2026] [:error] [pid 29607:tid 29689] [client 20.104.207.18:57838] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "afupm6bP7TJOAh7WSUNYMQAAAJU"]
[Thu May 07 04:50:36.241818 2026] [:error] [pid 29607:tid 29688] [client 20.104.207.18:53842] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "afupnKbP7TJOAh7WSUNYMgAAAJQ"]
[Thu May 07 04:50:36.723561 2026] [:error] [pid 4539:tid 4546] [client 20.104.207.18:53834] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "afupnIPEZE1565sDGnwJLwAAAQU"]
[Thu May 07 04:50:37.150743 2026] [:error] [pid 4539:tid 4557] [client 20.104.207.18:53789] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "afupnYPEZE1565sDGnwJMgAAARA"]
[Thu May 07 04:50:37.656078 2026] [:error] [pid 29607:tid 29671] [client 20.104.207.18:48028] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "afupnabP7TJOAh7WSUNYMwAAAIM"]
[Thu May 07 04:50:38.098098 2026] [:error] [pid 4539:tid 4550] [client 20.104.207.18:48022] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zdd.php"] [unique_id "afupnoPEZE1565sDGnwJNwAAAQk"]
[Thu May 07 04:50:38.512954 2026] [:error] [pid 4539:tid 4564] [client 20.104.207.18:56975] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zdd.php"] [unique_id "afupnoPEZE1565sDGnwJOQAAARc"]
[Thu May 07 04:50:38.960724 2026] [:error] [pid 29710:tid 29721] [client 20.104.207.18:53799] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zdd.php"] [unique_id "afupnv0atTQld9Y2ht_KqAAAAMk"]
[Thu May 07 04:50:39.393050 2026] [:error] [pid 4539:tid 4547] [client 20.104.207.18:53840] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zdd.php"] [unique_id "afupn4PEZE1565sDGnwJQAAAAQY"]
[Thu May 07 04:50:39.831127 2026] [:error] [pid 4539:tid 4546] [client 20.104.207.18:48087] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "afupn4PEZE1565sDGnwJQQAAAQU"]
[Thu May 07 04:50:40.257423 2026] [:error] [pid 29605:tid 29617] [client 20.104.207.18:53850] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "afupoInxrTjETioEY0TU6AAAAAM"]
[Thu May 07 04:50:40.701877 2026] [:error] [pid 29605:tid 29631] [client 20.104.207.18:53876] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "afupoInxrTjETioEY0TU6wAAABE"]
[Thu May 07 04:50:41.136927 2026] [:error] [pid 29607:tid 29670] [client 20.104.207.18:48082] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "afupoabP7TJOAh7WSUNYNwAAAII"]
[Thu May 07 04:50:41.588419 2026] [:error] [pid 29605:tid 29637] [client 20.104.207.18:47607] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "afupoYnxrTjETioEY0TU7QAAABc"]
[Thu May 07 04:50:42.010801 2026] [:error] [pid 29710:tid 29719] [client 20.104.207.18:57831] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "afupov0atTQld9Y2ht_KqwAAAMc"]
[Thu May 07 04:50:42.430761 2026] [:error] [pid 4539:tid 4548] [client 20.104.207.18:57825] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "afupooPEZE1565sDGnwJSgAAAQc"]
[Thu May 07 04:50:42.863995 2026] [:error] [pid 29606:tid 29654] [client 20.104.207.18:53826] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "afupohR5HjZ1PlSAiKtVrQAAAE0"]
[Thu May 07 04:50:43.301538 2026] [:error] [pid 4539:tid 4551] [client 20.104.207.18:48046] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "afupo4PEZE1565sDGnwJTgAAAQo"]
[Thu May 07 04:50:43.790875 2026] [:error] [pid 4539:tid 4543] [client 20.104.207.18:53885] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "afupo4PEZE1565sDGnwJTwAAAQI"]
[Thu May 07 04:50:44.210132 2026] [:error] [pid 29606:tid 29658] [client 20.104.207.18:53871] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "afuppBR5HjZ1PlSAiKtVsQAAAFE"]
[Thu May 07 04:50:44.652833 2026] [:error] [pid 4539:tid 4564] [client 20.104.207.18:53776] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "afuppIPEZE1565sDGnwJVAAAARc"]
[Thu May 07 04:50:45.101314 2026] [:error] [pid 29607:tid 29676] [client 20.104.207.18:56970] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "afuppabP7TJOAh7WSUNYOgAAAIg"]
[Thu May 07 04:50:45.527761 2026] [:error] [pid 29607:tid 29684] [client 20.104.207.18:47614] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "afuppabP7TJOAh7WSUNYPwAAAJA"]
[Thu May 07 04:50:45.973724 2026] [:error] [pid 29605:tid 29636] [client 20.104.207.18:57048] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "afuppYnxrTjETioEY0TU9AAAABY"]
[Thu May 07 04:50:46.400168 2026] [:error] [pid 29710:tid 29727] [client 20.104.207.18:57842] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "afuppv0atTQld9Y2ht_KsAAAAM8"]
[Thu May 07 04:50:46.819430 2026] [:error] [pid 29605:tid 29631] [client 20.104.207.18:48058] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "afupponxrTjETioEY0TU-AAAABE"]
[Thu May 07 04:50:47.278540 2026] [:error] [pid 29606:tid 29652] [client 20.104.207.18:57049] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "afuppxR5HjZ1PlSAiKtVtQAAAEs"]
[Thu May 07 04:50:47.695095 2026] [:error] [pid 29607:tid 29691] [client 20.104.207.18:48099] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "afupp6bP7TJOAh7WSUNYSwAAAJc"]
[Thu May 07 04:50:48.139902 2026] [:error] [pid 29607:tid 29682] [client 20.104.207.18:53760] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "afupqKbP7TJOAh7WSUNYTQAAAI4"]
[Thu May 07 04:50:48.579063 2026] [:error] [pid 29605:tid 29638] [client 20.104.207.18:48033] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "afupqInxrTjETioEY0TU-wAAABg"]
[Thu May 07 04:50:49.001340 2026] [:error] [pid 29607:tid 29681] [client 20.104.207.18:48121] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "afupqabP7TJOAh7WSUNYTwAAAI0"]
[Thu May 07 04:50:49.442228 2026] [:error] [pid 29607:tid 29685] [client 20.104.207.18:57830] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "afupqabP7TJOAh7WSUNYUgAAAJE"]
[Thu May 07 04:50:49.887931 2026] [:error] [pid 29605:tid 29626] [client 20.104.207.18:57768] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "afupqYnxrTjETioEY0TU_QAAAAw"]
[Thu May 07 04:50:50.333882 2026] [:error] [pid 29607:tid 29690] [client 20.104.207.18:57758] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "afupqqbP7TJOAh7WSUNYWgAAAJY"]
[Thu May 07 04:50:50.761932 2026] [:error] [pid 29605:tid 29629] [client 20.104.207.18:48094] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "afupqonxrTjETioEY0TU_wAAAA8"]
[Thu May 07 04:50:51.236442 2026] [:error] [pid 29606:tid 29656] [client 20.104.207.18:48067] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "afupqxR5HjZ1PlSAiKtVxwAAAE8"]
[Thu May 07 04:50:51.669973 2026] [:error] [pid 29605:tid 29616] [client 20.104.207.18:53765] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "afupq4nxrTjETioEY0TVBAAAAAI"]
[Thu May 07 04:50:52.095800 2026] [:error] [pid 29607:tid 29687] [client 20.104.207.18:57066] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "afuprKbP7TJOAh7WSUNYZQAAAJM"]
[Thu May 07 04:50:52.522323 2026] [:error] [pid 29605:tid 29621] [client 20.104.207.18:56982] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "afuprInxrTjETioEY0TVCAAAAAc"]
[Thu May 07 04:50:52.940664 2026] [:error] [pid 29606:tid 29661] [client 20.104.207.18:48097] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "afuprBR5HjZ1PlSAiKtVzgAAAFQ"]
[Thu May 07 04:50:53.365136 2026] [:error] [pid 29607:tid 29677] [client 20.104.207.18:56979] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "afuprabP7TJOAh7WSUNYbwAAAIk"]
[Thu May 07 04:50:53.782496 2026] [:error] [pid 29606:tid 29641] [client 20.104.207.18:53785] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "afuprRR5HjZ1PlSAiKtV1AAAAEA"]
[Thu May 07 04:50:54.220649 2026] [:error] [pid 29607:tid 29688] [client 20.104.207.18:48124] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "afuprqbP7TJOAh7WSUNYcQAAAJQ"]
[Thu May 07 04:50:54.644543 2026] [:error] [pid 29606:tid 29661] [client 20.104.207.18:57780] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "afuprhR5HjZ1PlSAiKtV2wAAAFQ"]
[Thu May 07 04:50:55.063580 2026] [:error] [pid 29605:tid 29627] [client 20.104.207.18:48068] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "afupr4nxrTjETioEY0TVDQAAAA0"]
[Thu May 07 04:50:55.509833 2026] [:error] [pid 29606:tid 29646] [client 20.104.207.18:57734] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "afuprxR5HjZ1PlSAiKtV4AAAAEU"]
[Thu May 07 04:50:55.932202 2026] [:error] [pid 4539:tid 4558] [client 20.104.207.18:53882] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "afupr4PEZE1565sDGnwJWwAAARE"]
[Thu May 07 04:50:56.354804 2026] [:error] [pid 4539:tid 4562] [client 20.104.207.18:53848] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "afupsIPEZE1565sDGnwJXQAAARU"]
[Thu May 07 04:50:56.773616 2026] [:error] [pid 29710:tid 29731] [client 20.104.207.18:53816] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "afupsP0atTQld9Y2ht_KtAAAANM"]
[Thu May 07 04:50:57.188029 2026] [:error] [pid 4539:tid 4543] [client 20.104.207.18:47555] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "afupsYPEZE1565sDGnwJYAAAAQI"]
[Thu May 07 04:50:57.644161 2026] [:error] [pid 29606:tid 29644] [client 20.104.207.18:57087] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "afupsRR5HjZ1PlSAiKtV4wAAAEM"]
[Thu May 07 04:50:58.057979 2026] [:error] [pid 4539:tid 4563] [client 20.104.207.18:48054] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "afupsoPEZE1565sDGnwJYwAAARY"]
[Thu May 07 04:50:58.494499 2026] [:error] [pid 29606:tid 29665] [client 20.104.207.18:53805] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "afupshR5HjZ1PlSAiKtV6AAAAFg"]
[Thu May 07 04:50:58.909424 2026] [:error] [pid 4539:tid 4541] [client 20.104.207.18:57819] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admlo.php"] [unique_id "afupsoPEZE1565sDGnwJZAAAAQA"]
[Thu May 07 04:50:59.321653 2026] [:error] [pid 4539:tid 4544] [client 20.104.207.18:48032] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admlo.php"] [unique_id "afups4PEZE1565sDGnwJagAAAQM"]
[Thu May 07 04:50:59.745445 2026] [:error] [pid 29606:tid 29658] [client 20.104.207.18:48118] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admlo.php"] [unique_id "afupsxR5HjZ1PlSAiKtV6gAAAFE"]
[Thu May 07 04:51:00.159937 2026] [:error] [pid 4539:tid 4557] [client 20.104.207.18:48017] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admlo.php"] [unique_id "afuptIPEZE1565sDGnwJbAAAARA"]
[Thu May 07 04:51:00.583006 2026] [:error] [pid 4539:tid 4559] [client 20.104.207.18:57057] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "afuptIPEZE1565sDGnwJbQAAARI"]
[Thu May 07 04:51:01.028444 2026] [:error] [pid 29710:tid 29718] [client 20.104.207.18:48020] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Thu May 07 04:51:01.238024 2026] [:error] [pid 29710:tid 29715] [client 20.104.207.18:48020] File does not exist: /usr/local/apache/htdocs/suspended-page/x=34.php
[Thu May 07 04:51:01.447779 2026] [:error] [pid 29710:tid 29716] [client 20.104.207.18:48020] File does not exist: /usr/local/apache/htdocs/suspended-page/tramuibs.php
[Thu May 07 04:51:01.658415 2026] [:error] [pid 29710:tid 29730] [client 20.104.207.18:48020] File does not exist: /usr/local/apache/htdocs/suspended-page/view.php
[Thu May 07 04:51:01.867727 2026] [:error] [pid 29710:tid 29712] [client 20.104.207.18:48020] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu May 07 04:51:02.077192 2026] [:error] [pid 29710:tid 29736] [client 20.104.207.18:48020] File does not exist: /usr/local/apache/htdocs/suspended-page/x402.php
[Thu May 07 04:51:02.286746 2026] [:error] [pid 29710:tid 29714] [client 20.104.207.18:48020] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Thu May 07 04:51:02.497705 2026] [:error] [pid 29710:tid 29723] [client 20.104.207.18:48020] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Thu May 07 04:51:02.708984 2026] [:error] [pid 29710:tid 29717] [client 20.104.207.18:48020] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php
[Thu May 07 04:51:02.918061 2026] [:error] [pid 29710:tid 29721] [client 20.104.207.18:48020] File does not exist: /usr/local/apache/htdocs/suspended-page/alpha.php
[Thu May 07 04:51:03.127793 2026] [:error] [pid 29710:tid 29729] [client 20.104.207.18:48020] File does not exist: /usr/local/apache/htdocs/suspended-page/son1.php
[Thu May 07 04:51:03.334293 2026] [:error] [pid 29710:tid 29734] [client 20.104.207.18:48020] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "afupt_0atTQld9Y2ht_K0QAAANY"]
[Thu May 07 04:51:03.760382 2026] [:error] [pid 29606:tid 29641] [client 20.104.207.18:57065] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "afuptxR5HjZ1PlSAiKtV7wAAAEA"]
[Thu May 07 04:51:04.184910 2026] [:error] [pid 4539:tid 4551] [client 20.104.207.18:48120] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "afupuIPEZE1565sDGnwJfAAAAQo"]
[Thu May 07 04:51:04.605012 2026] [:error] [pid 29606:tid 29658] [client 20.104.207.18:57775] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "afupuBR5HjZ1PlSAiKtV8wAAAFE"]
[Thu May 07 04:51:05.019202 2026] [:error] [pid 29605:tid 29616] [client 20.104.207.18:57063] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "afupuYnxrTjETioEY0TVHwAAAAI"]
[Thu May 07 04:51:05.432921 2026] [:error] [pid 4539:tid 4555] [client 20.104.207.18:46928] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "afupuYPEZE1565sDGnwJhQAAAQ4"]
[Thu May 07 04:51:05.850541 2026] [:error] [pid 4539:tid 4560] [client 20.104.207.18:53858] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "afupuYPEZE1565sDGnwJigAAARM"]
[Thu May 07 04:51:06.261715 2026] [:error] [pid 29606:tid 29651] [client 20.104.207.18:53829] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "afupuhR5HjZ1PlSAiKtV9QAAAEo"]
[Thu May 07 04:51:06.679518 2026] [:error] [pid 29607:tid 29676] [client 20.104.207.18:46956] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "afupuqbP7TJOAh7WSUNYigAAAIg"]
[Thu May 07 04:51:07.114703 2026] [:error] [pid 29605:tid 29633] [client 20.104.207.18:57794] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "afupu4nxrTjETioEY0TVIAAAABM"]
[Thu May 07 04:51:07.528387 2026] [:error] [pid 29605:tid 29637] [client 20.104.207.18:48012] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "afupu4nxrTjETioEY0TVIQAAABc"]
[Thu May 07 04:51:07.972030 2026] [:error] [pid 29710:tid 29734] [client 20.104.207.18:53807] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "afupu_0atTQld9Y2ht_K1wAAANY"]
[Thu May 07 04:51:08.405049 2026] [:error] [pid 4539:tid 4554] [client 20.104.207.18:57801] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "afupvIPEZE1565sDGnwJlgAAAQ0"]
[Thu May 07 04:51:08.819195 2026] [:error] [pid 4539:tid 4544] [client 20.104.207.18:48056] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "afupvIPEZE1565sDGnwJmgAAAQM"]
[Thu May 07 04:51:09.234512 2026] [:error] [pid 29710:tid 29731] [client 20.104.207.18:57040] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "afupvf0atTQld9Y2ht_K2QAAANM"]
[Thu May 07 04:51:09.662949 2026] [:error] [pid 4539:tid 4565] [client 20.104.207.18:48002] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "afupvYPEZE1565sDGnwJogAAARg"]
[Thu May 07 04:51:10.117733 2026] [:error] [pid 4539:tid 4554] [client 20.104.207.18:57753] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "afupvoPEZE1565sDGnwJpgAAAQ0"]
[Thu May 07 04:51:10.578208 2026] [:error] [pid 29607:tid 29690] [client 20.104.207.18:48127] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "afupvqbP7TJOAh7WSUNYlgAAAJY"]
[Thu May 07 04:51:10.997951 2026] [:error] [pid 29607:tid 29686] [client 20.104.207.18:53847] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "afupvqbP7TJOAh7WSUNYmAAAAJI"]
[Thu May 07 04:51:11.463946 2026] [:error] [pid 29607:tid 29670] [client 20.104.207.18:53797] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "afupv6bP7TJOAh7WSUNYnQAAAII"]
[Thu May 07 04:51:11.879333 2026] [:error] [pid 29607:tid 29675] [client 20.104.207.18:57729] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/99.php"] [unique_id "afupv6bP7TJOAh7WSUNYogAAAIc"]
[Thu May 07 04:51:12.293149 2026] [:error] [pid 29607:tid 29672] [client 20.104.207.18:47492] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/99.php"] [unique_id "afupwKbP7TJOAh7WSUNYpgAAAIQ"]
[Thu May 07 04:51:12.704562 2026] [:error] [pid 29605:tid 29634] [client 20.104.207.18:57759] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/99.php"] [unique_id "afupwInxrTjETioEY0TVJwAAABQ"]
[Thu May 07 04:51:13.123055 2026] [:error] [pid 29605:tid 29622] [client 20.104.207.18:57839] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/99.php"] [unique_id "afupwYnxrTjETioEY0TVKAAAAAg"]
[Thu May 07 04:51:13.536519 2026] [:error] [pid 29710:tid 29730] [client 20.104.207.18:57821] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "afupwf0atTQld9Y2ht_K3wAAANI"]
[Thu May 07 04:51:13.951719 2026] [:error] [pid 29607:tid 29686] [client 20.104.207.18:48100] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "afupwabP7TJOAh7WSUNYrgAAAJI"]
[Thu May 07 04:51:14.365134 2026] [:error] [pid 29710:tid 29727] [client 20.104.207.18:57078] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "afupwv0atTQld9Y2ht_K5QAAAM8"]
[Thu May 07 04:51:14.784328 2026] [:error] [pid 4539:tid 4542] [client 20.104.207.18:57853] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "afupwoPEZE1565sDGnwJsgAAAQE"]
[Thu May 07 04:51:15.225359 2026] [:error] [pid 4539:tid 4565] [client 20.104.207.18:53802] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "afupw4PEZE1565sDGnwJtAAAARg"]
[Thu May 07 04:51:15.669298 2026] [:error] [pid 4539:tid 4551] [client 20.104.207.18:48114] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "afupw4PEZE1565sDGnwJtwAAAQo"]
[Thu May 07 04:51:16.090346 2026] [:error] [pid 29607:tid 29680] [client 20.104.207.18:48085] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "afupxKbP7TJOAh7WSUNYswAAAIw"]
[Thu May 07 04:51:16.547525 2026] [:error] [pid 29605:tid 29632] [client 20.104.207.18:48019] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "afupxInxrTjETioEY0TVLQAAABI"]
[Thu May 07 04:51:16.959934 2026] [:error] [pid 29606:tid 29663] [client 20.104.207.18:48005] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "afupxBR5HjZ1PlSAiKtWAgAAAFY"]
[Thu May 07 04:51:17.411445 2026] [:error] [pid 29606:tid 29657] [client 20.104.207.18:47499] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "afupxRR5HjZ1PlSAiKtWBwAAAFA"]
[Thu May 07 04:51:17.868409 2026] [:error] [pid 29606:tid 29648] [client 20.104.207.18:47547] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "afupxRR5HjZ1PlSAiKtWDgAAAEc"]
[Thu May 07 04:51:18.302080 2026] [:error] [pid 29606:tid 29662] [client 20.104.207.18:47610] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "afupxhR5HjZ1PlSAiKtWEQAAAFU"]
[Thu May 07 04:51:18.761377 2026] [:error] [pid 29606:tid 29645] [client 20.104.207.18:46851] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "afupxhR5HjZ1PlSAiKtWGAAAAEQ"]
[Thu May 07 04:51:19.177511 2026] [:error] [pid 29606:tid 29655] [client 20.104.207.18:47550] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "afupxxR5HjZ1PlSAiKtWGwAAAE4"]
[Thu May 07 04:51:19.608601 2026] [:error] [pid 29710:tid 29725] [client 20.104.207.18:56989] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "afupx_0atTQld9Y2ht_K8QAAAM0"]
[Thu May 07 04:51:20.072012 2026] [:error] [pid 29607:tid 29669] [client 20.104.207.18:46963] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "afupyKbP7TJOAh7WSUNYvAAAAIE"]
[Thu May 07 04:51:20.504609 2026] [:error] [pid 29607:tid 29677] [client 20.104.207.18:47597] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "afupyKbP7TJOAh7WSUNYvQAAAIk"]
[Thu May 07 04:51:20.977525 2026] [:error] [pid 29710:tid 29729] [client 20.104.207.18:57058] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "afupyP0atTQld9Y2ht_K9QAAANE"]
[Thu May 07 04:51:21.397955 2026] [:error] [pid 29710:tid 29722] [client 20.104.207.18:53874] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "afupyf0atTQld9Y2ht_K-QAAAMo"]
[Thu May 07 04:51:21.819986 2026] [:error] [pid 29710:tid 29735] [client 20.104.207.18:57080] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "afupyf0atTQld9Y2ht_K-wAAANc"]
[Thu May 07 04:51:22.268325 2026] [:error] [pid 4539:tid 4551] [client 20.104.207.18:56962] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "afupyoPEZE1565sDGnwJwAAAAQo"]
[Thu May 07 04:51:22.692310 2026] [:error] [pid 4539:tid 4555] [client 20.104.207.18:47553] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "afupyoPEZE1565sDGnwJwgAAAQ4"]
[Thu May 07 04:51:23.135700 2026] [:error] [pid 29606:tid 29647] [client 20.104.207.18:57840] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "afupyxR5HjZ1PlSAiKtWIwAAAEY"]
[Thu May 07 04:51:23.548788 2026] [:error] [pid 29605:tid 29631] [client 20.104.207.18:48035] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "afupy4nxrTjETioEY0TVOgAAABE"]
[Thu May 07 04:51:23.967554 2026] [:error] [pid 29605:tid 29637] [client 20.104.207.18:57809] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "afupy4nxrTjETioEY0TVQAAAABc"]
[Thu May 07 04:51:24.415653 2026] [:error] [pid 29605:tid 29625] [client 20.104.207.18:53767] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "afupzInxrTjETioEY0TVRQAAAAs"]
[Thu May 07 04:51:24.865734 2026] [:error] [pid 29607:tid 29675] [client 20.104.207.18:47508] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "afupzKbP7TJOAh7WSUNYxwAAAIc"]
[Thu May 07 04:51:25.328086 2026] [:error] [pid 29605:tid 29620] [client 20.104.207.18:57024] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "afupzYnxrTjETioEY0TVSwAAAAY"]
[Thu May 07 04:51:25.751123 2026] [:error] [pid 29605:tid 29636] [client 20.104.207.18:47605] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfile25.php"] [unique_id "afupzYnxrTjETioEY0TVTgAAABY"]
[Thu May 07 04:51:26.243646 2026] [:error] [pid 29605:tid 29638] [client 20.104.207.18:56968] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfile25.php"] [unique_id "afupzonxrTjETioEY0TVTwAAABg"]
[Thu May 07 04:51:26.735173 2026] [:error] [pid 29606:tid 29660] [client 20.104.207.18:57062] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfile25.php"] [unique_id "afupzhR5HjZ1PlSAiKtWKAAAAFM"]
[Thu May 07 04:51:27.230673 2026] [:error] [pid 4539:tid 4561] [client 20.104.207.18:53778] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xfile25.php"] [unique_id "afupz4PEZE1565sDGnwJ0wAAARQ"]
[Thu May 07 15:16:42.222122 2026] [:error] [pid 28098:tid 28115] [client 206.189.36.189:59936] [client 206.189.36.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "afw8Wsvhwfljlt8trSqFZwAAAE8"]
[Thu May 07 18:10:23.265134 2026] [:error] [pid 28098:tid 28101] [client 34.150.161.155:63071] [client 34.150.161.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.150.161.155, incrementing ddos counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "afxlD8vhwfljlt8trSrGugAAAEE"]
[Thu May 07 18:10:23.267876 2026] [:error] [pid 28098:tid 28101] [client 34.150.161.155:63071] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu May 07 18:10:23.518217 2026] [:error] [pid 28098:tid 28106] [client 34.150.161.155:63071] [client 34.150.161.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "afxlD8vhwfljlt8trSrGvQAAAEY"]
[Thu May 07 18:10:24.491168 2026] [:error] [pid 15630:tid 15661] [client 34.150.161.155:63689] [client 34.150.161.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "afxlEHTithRAi4821qulYwAAAIE"]
[Thu May 07 18:10:25.386044 2026] [:error] [pid 28098:tid 28105] [client 34.150.161.155:58487] [client 34.150.161.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "afxlEcvhwfljlt8trSrGwAAAAEU"]
[Thu May 07 18:10:26.338890 2026] [:error] [pid 15630:tid 15674] [client 34.150.161.155:57905] [client 34.150.161.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "afxlEnTithRAi4821qulZgAAAI4"]
[Thu May 07 18:10:27.623605 2026] [:error] [pid 15630:tid 15665] [client 34.150.161.155:52978] [client 34.150.161.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "afxlE3TithRAi4821qulbAAAAIU"]
[Thu May 07 18:10:28.377579 2026] [:error] [pid 15631:tid 15707] [client 34.150.161.155:49702] [client 34.150.161.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "afxlFHvP1GkPUuuLfqUqPAAAANQ"]
[Thu May 07 18:10:28.936641 2026] [:error] [pid 15631:tid 15708] [client 34.150.161.155:52972] [client 34.150.161.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "afxlFHvP1GkPUuuLfqUqQAAAANU"]
[Thu May 07 20:38:11.059722 2026] [:error] [pid 15631:tid 15708] [client 34.41.82.126:62069] [client 34.41.82.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.41.82.126, incrementing ddos counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "afyHs3vP1GkPUuuLfqVAlgAAANU"]
[Thu May 07 20:38:11.064191 2026] [:error] [pid 15631:tid 15708] [client 34.41.82.126:62069] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu May 07 20:38:11.262374 2026] [:error] [pid 15631:tid 15695] [client 34.41.82.126:62069] [client 34.41.82.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "afyHs3vP1GkPUuuLfqVAlwAAAMg"]
[Thu May 07 20:38:11.723954 2026] [:error] [pid 28098:tid 28122] [client 34.41.82.126:53440] [client 34.41.82.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "afyHs8vhwfljlt8trSr0-AAAAFY"]
[Thu May 07 20:38:12.143098 2026] [:error] [pid 15631:tid 15688] [client 34.41.82.126:54083] [client 34.41.82.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "afyHtHvP1GkPUuuLfqVAmwAAAME"]
[Thu May 07 20:38:12.610196 2026] [:error] [pid 15715:tid 15730] [client 34.41.82.126:56665] [client 34.41.82.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "afyHtCY4dZsLOttMkcekrwAAAQo"]
[Thu May 07 20:38:13.043171 2026] [:error] [pid 15630:tid 15676] [client 34.41.82.126:61716] [client 34.41.82.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "afyHtXTithRAi4821qu27QAAAJA"]
[Thu May 07 20:38:13.524195 2026] [:error] [pid 15629:tid 15653] [client 34.41.82.126:49320] [client 34.41.82.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "afyHtfrIJCALdUrO43l7qwAAABQ"]
[Thu May 07 20:38:14.030736 2026] [:error] [pid 15631:tid 15702] [client 34.41.82.126:54542] [client 34.41.82.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "afyHtnvP1GkPUuuLfqVAnwAAAM8"]
[Thu May 07 20:38:14.434043 2026] [:error] [pid 15630:tid 15679] [client 34.41.82.126:50336] [client 34.41.82.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "afyHtnTithRAi4821qu2-QAAAJM"]
[Thu May 07 20:38:14.901307 2026] [:error] [pid 15715:tid 15733] [client 34.41.82.126:54524] [client 34.41.82.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "afyHtiY4dZsLOttMkcektAAAAQ0"]
[Thu May 07 20:38:15.361687 2026] [:error] [pid 15631:tid 15694] [client 34.41.82.126:61087] [client 34.41.82.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "afyHt3vP1GkPUuuLfqVAqgAAAMc"]
[Thu May 07 20:38:15.776405 2026] [:error] [pid 15630:tid 15673] [client 34.41.82.126:62202] [client 34.41.82.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afyHt3TithRAi4821qu2_AAAAI0"]
[Fri May 08 03:09:37.182803 2026] [:error] [pid 15715:tid 15739] [client 34.12.208.195:39626] [client 34.12.208.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "afzjcSY4dZsLOttMkccUVwAAARM"]
[Fri May 08 06:26:57.796988 2026] [:error] [pid 34318:tid 34323] [client 4.193.137.131:3739] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php
[Fri May 08 06:26:57.889526 2026] [:error] [pid 34318:tid 34340] [client 4.193.137.131:3739] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Fri May 08 06:26:57.980126 2026] [:error] [pid 34318:tid 34338] [client 4.193.137.131:3739] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri May 08 06:26:58.072080 2026] [:error] [pid 34318:tid 34329] [client 4.193.137.131:3739] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Fri May 08 06:26:58.163025 2026] [:error] [pid 34318:tid 34324] [client 4.193.137.131:3739] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Fri May 08 06:26:58.254908 2026] [:error] [pid 34318:tid 34344] [client 4.193.137.131:3739] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri May 08 06:26:58.349208 2026] [:error] [pid 34318:tid 34322] [client 4.193.137.131:3739] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Fri May 08 06:26:58.440725 2026] [:error] [pid 34318:tid 34339] [client 4.193.137.131:3739] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Fri May 08 06:26:58.532142 2026] [:error] [pid 34318:tid 34326] [client 4.193.137.131:3739] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri May 08 06:26:58.714757 2026] [:error] [pid 34318:tid 34335] [client 4.193.137.131:3739] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri May 08 06:26:58.802721 2026] [:error] [pid 34318:tid 34323] [client 4.193.137.131:3739] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "af0Rssr3guirgJiKhzB8ggAAAQM"]
[Fri May 08 06:26:59.171845 2026] [:error] [pid 51007:tid 51032] [client 4.193.137.131:3182] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "af0Rs1MagSGstWKyzzV7RwAAAAo"]
[Fri May 08 06:26:59.529886 2026] [:error] [pid 34318:tid 34340] [client 4.193.137.131:3649] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "af0Rs8r3guirgJiKhzB8hgAAARQ"]
[Fri May 08 06:26:59.887959 2026] [:error] [pid 51113:tid 51117] [client 4.193.137.131:3695] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "af0Rs0Qfs7sWtqkpQIcpvAAAAMI"]
[Fri May 08 07:00:55.349107 2026] [:error] [pid 61317:tid 61329] [client 4.193.137.131:26706] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php
[Fri May 08 07:00:55.443187 2026] [:error] [pid 61317:tid 61333] [client 4.193.137.131:26706] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Fri May 08 07:00:55.537036 2026] [:error] [pid 61317:tid 61327] [client 4.193.137.131:26706] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri May 08 07:00:55.629026 2026] [:error] [pid 61317:tid 61324] [client 4.193.137.131:26706] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Fri May 08 07:00:55.723431 2026] [:error] [pid 61317:tid 61338] [client 4.193.137.131:26706] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Fri May 08 07:00:55.816793 2026] [:error] [pid 61317:tid 61331] [client 4.193.137.131:26706] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri May 08 07:00:55.911833 2026] [:error] [pid 61317:tid 61334] [client 4.193.137.131:26706] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Fri May 08 07:00:56.004519 2026] [:error] [pid 61317:tid 61343] [client 4.193.137.131:26706] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Fri May 08 07:00:56.102569 2026] [:error] [pid 61317:tid 61320] [client 4.193.137.131:26706] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri May 08 07:00:56.286808 2026] [:error] [pid 61317:tid 61325] [client 4.193.137.131:26706] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri May 08 07:00:56.375739 2026] [:error] [pid 61317:tid 61339] [client 4.193.137.131:26706] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "af0ZqM-fFk_CedOCOYsvJQAAAVM"]
[Fri May 08 07:00:56.755762 2026] [:error] [pid 61356:tid 61399] [client 4.193.137.131:26708] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "af0ZqIx3vpB8oWhUq2N71AAAAcs"]
[Fri May 08 07:00:57.112644 2026] [:error] [pid 61356:tid 61402] [client 4.193.137.131:28918] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "af0ZqYx3vpB8oWhUq2N71QAAAc4"]
[Fri May 08 07:00:57.469510 2026] [:error] [pid 61317:tid 61340] [client 4.193.137.131:26718] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "af0Zqc-fFk_CedOCOYsvJwAAAVQ"]
[Fri May 08 09:29:37.789655 2026] [:error] [pid 61356:tid 61402] [client 35.229.182.141:55020] [client 35.229.182.141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "af08gYx3vpB8oWhUq2O_igAAAc4"]
[Fri May 08 14:01:02.154399 2026] [:error] [pid 61356:tid 61397] [client 34.13.27.56:44022] [client 34.13.27.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/api/.env"] [unique_id "af18Hox3vpB8oWhUq2MVYgAAAck"]
[Fri May 08 14:01:02.170595 2026] [:error] [pid 61356:tid 61392] [client 34.13.27.56:44050] [client 34.13.27.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/app/.env"] [unique_id "af18Hox3vpB8oWhUq2MVYwAAAcQ"]
[Fri May 08 14:01:02.193367 2026] [:error] [pid 61356:tid 61408] [client 34.13.27.56:44036] [client 34.13.27.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.dev.local"] [unique_id "af18Hox3vpB8oWhUq2MVZAAAAdQ"]
[Fri May 08 14:01:02.211379 2026] [:error] [pid 51008:tid 51050] [client 34.13.27.56:44060] [client 34.13.27.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/app/.env.local"] [unique_id "af18HnB58C2Y1tgLtuJm_wAAAEE"]
[Fri May 08 14:01:02.444306 2026] [:error] [pid 34318:tid 34341] [client 34.13.27.56:44064] [client 34.13.27.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.development.local"] [unique_id "af18Hsr3guirgJiKhzC0egAAARU"]
[Fri May 08 14:01:02.448985 2026] [:error] [pid 51007:tid 51032] [client 34.13.27.56:44078] [client 34.13.27.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin/.env"] [unique_id "af18HlMagSGstWKyzzW-gAAAAAo"]
[Fri May 08 14:01:02.453393 2026] [:error] [pid 61355:tid 61371] [client 34.13.27.56:44096] [client 34.13.27.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.dev"] [unique_id "af18HvkhJTi30CBXmMlIIgAAAYo"]
[Fri May 08 14:01:02.459140 2026] [:error] [pid 61356:tid 61389] [client 34.13.27.56:44080] [client 34.13.27.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "af18Hox3vpB8oWhUq2MVZQAAAcE"]
[Fri May 08 14:01:02.463205 2026] [:error] [pid 51009:tid 51083] [client 34.13.27.56:44068] [client 34.13.27.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "af18HuB0GbUWhxgzX9Xk2AAAAIc"]
[Fri May 08 14:01:02.481195 2026] [:error] [pid 61317:tid 61326] [client 34.13.27.56:44098] [client 34.13.27.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.docker"] [unique_id "af18Hs-fFk_CedOCOYuE0QAAAUY"]
[Fri May 08 19:39:03.975958 2026] [:error] [pid 61355:tid 61367] [client 20.63.39.182:5103] File does not exist: /usr/local/apache/htdocs/suspended-page/shoha.php
[Fri May 08 19:39:04.186204 2026] [:error] [pid 61355:tid 61369] [client 20.63.39.182:5103] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-thi.php
[Fri May 08 19:39:04.397396 2026] [:error] [pid 61355:tid 61380] [client 20.63.39.182:5103] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-slss.php
[Fri May 08 19:39:04.611374 2026] [:error] [pid 61355:tid 61378] [client 20.63.39.182:5103] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Fri May 08 19:39:04.833843 2026] [:error] [pid 61355:tid 61363] [client 20.63.39.182:5103] File does not exist: /usr/local/apache/htdocs/suspended-page/ftde.php
[Fri May 08 19:39:05.044166 2026] [:error] [pid 61355:tid 61383] [client 20.63.39.182:5103] File does not exist: /usr/local/apache/htdocs/suspended-page/tires.php
[Fri May 08 19:39:05.258124 2026] [:error] [pid 61355:tid 61379] [client 20.63.39.182:5103] File does not exist: /usr/local/apache/htdocs/suspended-page/ff1.php
[Fri May 08 19:39:05.469491 2026] [:error] [pid 61355:tid 61376] [client 20.63.39.182:5103] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Fri May 08 19:39:05.682909 2026] [:error] [pid 61355:tid 61362] [client 20.63.39.182:5103] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Fri May 08 19:39:05.895757 2026] [:error] [pid 61355:tid 61371] [client 20.63.39.182:5103] File does not exist: /usr/local/apache/htdocs/suspended-page/ccou.php
[Fri May 08 19:39:06.103317 2026] [:error] [pid 61355:tid 61366] [client 20.63.39.182:5103] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "af3LWvkhJTi30CBXmMmiigAAAYU"]
[Fri May 08 19:39:06.561370 2026] [:error] [pid 61355:tid 61369] [client 20.63.39.182:5095] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "af3LWvkhJTi30CBXmMmijQAAAYg"]
[Fri May 08 19:39:07.017927 2026] [:error] [pid 61317:tid 61329] [client 20.63.39.182:5065] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "af3LW8-fFk_CedOCOYu-DQAAAUk"]
[Fri May 08 19:39:07.498725 2026] [:error] [pid 61356:tid 61388] [client 20.63.39.182:5079] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "af3LW4x3vpB8oWhUq2OWswAAAcA"]
[Fri May 08 19:39:07.985730 2026] [:error] [pid 61356:tid 61400] [client 20.63.39.182:4992] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "af3LW4x3vpB8oWhUq2OWtgAAAcw"]
[Fri May 08 19:39:08.768759 2026] [:error] [pid 61317:tid 61342] [client 20.63.39.182:5099] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "af3LXM-fFk_CedOCOYu-DwAAAVY"]
[Fri May 08 19:39:09.257319 2026] [:error] [pid 51007:tid 51039] [client 20.63.39.182:5091] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "af3LXVMagSGstWKyzzXlmgAAABE"]
[Fri May 08 19:39:09.802733 2026] [:error] [pid 51007:tid 51046] [client 20.63.39.182:5105] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "af3LXVMagSGstWKyzzXlnAAAABg"]
[Fri May 08 19:39:10.238372 2026] [:error] [pid 51007:tid 51032] [client 20.63.39.182:5058] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "af3LXlMagSGstWKyzzXlngAAAAo"]
[Fri May 08 19:39:10.818098 2026] [:error] [pid 61355:tid 61385] [client 20.63.39.182:5109] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "af3LXvkhJTi30CBXmMmijgAAAZg"]
[Fri May 08 19:39:11.348087 2026] [:error] [pid 61356:tid 61403] [client 20.63.39.182:4993] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "af3LX4x3vpB8oWhUq2OWuQAAAc8"]
[Fri May 08 19:39:11.799294 2026] [:error] [pid 61355:tid 61381] [client 20.63.39.182:5097] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "af3LX_khJTi30CBXmMmijwAAAZQ"]
[Fri May 08 19:39:12.271562 2026] [:error] [pid 51009:tid 51089] [client 20.63.39.182:5063] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "af3LYOB0GbUWhxgzX9UyzQAAAI0"]
[Fri May 08 19:39:12.849303 2026] [:error] [pid 61355:tid 61384] [client 20.63.39.182:5007] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "af3LYPkhJTi30CBXmMmikgAAAZc"]
[Fri May 08 19:39:13.316747 2026] [:error] [pid 61317:tid 61324] [client 20.63.39.182:5082] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "af3LYc-fFk_CedOCOYu-FgAAAUQ"]
[Fri May 08 19:39:13.884546 2026] [:error] [pid 61355:tid 61372] [client 20.63.39.182:5046] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "af3LYfkhJTi30CBXmMmikwAAAYs"]
[Fri May 08 19:39:14.346281 2026] [:error] [pid 51009:tid 51091] [client 20.63.39.182:5090] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "af3LYuB0GbUWhxgzX9Uy0wAAAI8"]
[Fri May 08 19:39:14.892589 2026] [:error] [pid 61356:tid 61388] [client 20.63.39.182:5096] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "af3LYox3vpB8oWhUq2OWugAAAcA"]
[Fri May 08 19:39:15.323171 2026] [:error] [pid 51008:tid 51060] [client 20.63.39.182:5061] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "af3LY3B58C2Y1tgLtuKZxAAAAEs"]
[Fri May 08 19:39:15.855721 2026] [:error] [pid 61317:tid 61342] [client 20.63.39.182:5081] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "af3LY8-fFk_CedOCOYu-GQAAAVY"]
[Fri May 08 19:39:16.331658 2026] [:error] [pid 61355:tid 61377] [client 20.63.39.182:5116] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "af3LZPkhJTi30CBXmMmimQAAAZA"]
[Fri May 08 19:39:16.936080 2026] [:error] [pid 61355:tid 61366] [client 20.63.39.182:5057] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "af3LZPkhJTi30CBXmMmimwAAAYU"]
[Fri May 08 19:39:17.556919 2026] [:error] [pid 51008:tid 51070] [client 20.63.39.182:5028] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "af3LZXB58C2Y1tgLtuKZyAAAAFU"]
[Fri May 08 19:39:18.077297 2026] [:error] [pid 61317:tid 61320] [client 20.63.39.182:5098] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "af3LZs-fFk_CedOCOYu-HQAAAUA"]
[Fri May 08 19:39:18.613735 2026] [:error] [pid 61355:tid 61361] [client 20.63.39.182:5107] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/revealability.php"] [unique_id "af3LZvkhJTi30CBXmMminwAAAYA"]
[Fri May 08 19:39:19.181393 2026] [:error] [pid 61355:tid 61373] [client 20.63.39.182:5087] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/revealability.php"] [unique_id "af3LZ_khJTi30CBXmMmioQAAAYw"]
[Fri May 08 19:39:19.826614 2026] [:error] [pid 51008:tid 51067] [client 20.63.39.182:5052] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/revealability.php"] [unique_id "af3LZ3B58C2Y1tgLtuKZyQAAAFI"]
[Fri May 08 19:39:20.279697 2026] [:error] [pid 51008:tid 51050] [client 20.63.39.182:5080] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/revealability.php"] [unique_id "af3LaHB58C2Y1tgLtuKZywAAAEE"]
[Fri May 08 19:39:20.785518 2026] [:error] [pid 51009:tid 51077] [client 20.63.39.182:5017] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file4.php"] [unique_id "af3LaOB0GbUWhxgzX9Uy2QAAAIE"]
[Fri May 08 19:39:21.598687 2026] [:error] [pid 51008:tid 51056] [client 20.63.39.182:5031] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file4.php"] [unique_id "af3LaXB58C2Y1tgLtuKZzQAAAEc"]
[Fri May 08 19:39:22.583427 2026] [:error] [pid 51009:tid 51098] [client 20.63.39.182:5088] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file4.php"] [unique_id "af3LauB0GbUWhxgzX9Uy2wAAAJY"]
[Fri May 08 19:39:23.411955 2026] [:error] [pid 51009:tid 51091] [client 20.63.39.182:5059] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file4.php"] [unique_id "af3La-B0GbUWhxgzX9Uy3AAAAI8"]
[Fri May 08 19:39:24.153856 2026] [:error] [pid 61317:tid 61340] [client 20.63.39.182:5006] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "af3LbM-fFk_CedOCOYu-IgAAAVQ"]
[Fri May 08 19:39:24.630288 2026] [:error] [pid 51009:tid 51086] [client 20.63.39.182:5014] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "af3LbOB0GbUWhxgzX9Uy3gAAAIo"]
[Fri May 08 19:39:25.180404 2026] [:error] [pid 51008:tid 51055] [client 20.63.39.182:5085] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "af3LbXB58C2Y1tgLtuKZ0QAAAEY"]
[Fri May 08 19:39:25.735469 2026] [:error] [pid 61355:tid 61380] [client 20.63.39.182:5060] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "af3LbfkhJTi30CBXmMmisAAAAZM"]
[Fri May 08 19:39:26.204665 2026] [:error] [pid 61355:tid 61374] [client 20.63.39.182:5011] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file30.php"] [unique_id "af3LbvkhJTi30CBXmMmisgAAAY0"]
[Fri May 08 19:39:26.757163 2026] [:error] [pid 51007:tid 51026] [client 20.63.39.182:4931] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file30.php"] [unique_id "af3LblMagSGstWKyzzXlpwAAAAQ"]
[Fri May 08 19:39:27.205751 2026] [:error] [pid 61355:tid 61369] [client 20.63.39.182:4998] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file30.php"] [unique_id "af3Lb_khJTi30CBXmMmiuQAAAYg"]
[Fri May 08 19:39:27.773995 2026] [:error] [pid 61355:tid 61366] [client 20.63.39.182:5056] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file30.php"] [unique_id "af3Lb_khJTi30CBXmMmivAAAAYU"]
[Fri May 08 19:39:28.226314 2026] [:error] [pid 51007:tid 51040] [client 20.63.39.182:5004] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/forbidals.php"] [unique_id "af3LcFMagSGstWKyzzXlqQAAABI"]
[Fri May 08 19:39:28.652005 2026] [:error] [pid 61317:tid 61324] [client 20.63.39.182:5119] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/forbidals.php"] [unique_id "af3LcM-fFk_CedOCOYu-KQAAAUQ"]
[Fri May 08 19:39:29.270927 2026] [:error] [pid 61317:tid 61337] [client 20.63.39.182:4934] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/forbidals.php"] [unique_id "af3Lcc-fFk_CedOCOYu-KgAAAVE"]
[Fri May 08 19:39:29.871788 2026] [:error] [pid 34318:tid 34343] [client 20.63.39.182:5073] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/forbidals.php"] [unique_id "af3Lccr3guirgJiKhzDU8QAAARc"]
[Fri May 08 19:39:30.409992 2026] [:error] [pid 51007:tid 51042] [client 20.63.39.182:5117] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-firewall.php"] [unique_id "af3LclMagSGstWKyzzXluQAAABQ"]
[Fri May 08 19:39:30.957402 2026] [:error] [pid 61355:tid 61374] [client 20.63.39.182:5113] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-firewall.php"] [unique_id "af3LcvkhJTi30CBXmMmiwgAAAY0"]
[Fri May 08 19:39:31.539893 2026] [:error] [pid 34318:tid 34331] [client 20.63.39.182:5072] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-firewall.php"] [unique_id "af3Lc8r3guirgJiKhzDU9AAAAQs"]
[Fri May 08 19:39:32.303031 2026] [:error] [pid 34318:tid 34337] [client 20.63.39.182:5022] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-firewall.php"] [unique_id "af3LdMr3guirgJiKhzDU9gAAARE"]
[Fri May 08 19:39:32.747694 2026] [:error] [pid 61317:tid 61344] [client 20.63.39.182:5092] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell20211028.php"] [unique_id "af3LdM-fFk_CedOCOYu-LwAAAVg"]
[Fri May 08 19:39:33.240484 2026] [:error] [pid 51113:tid 51135] [client 20.63.39.182:5093] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell20211028.php"] [unique_id "af3LdUQfs7sWtqkpQIdzyQAAANQ"]
[Fri May 08 19:39:33.808364 2026] [:error] [pid 61355:tid 61362] [client 20.63.39.182:5002] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell20211028.php"] [unique_id "af3LdfkhJTi30CBXmMmiwwAAAYE"]
[Fri May 08 19:39:34.477977 2026] [:error] [pid 61355:tid 61363] [client 20.63.39.182:5067] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shell20211028.php"] [unique_id "af3LdvkhJTi30CBXmMmixQAAAYI"]
[Fri May 08 19:39:34.934090 2026] [:error] [pid 51009:tid 51081] [client 20.63.39.182:5009] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wuasr.php"] [unique_id "af3LduB0GbUWhxgzX9Uy6AAAAIU"]
[Fri May 08 19:39:35.439837 2026] [:error] [pid 51008:tid 51052] [client 20.63.39.182:5018] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wuasr.php"] [unique_id "af3Ld3B58C2Y1tgLtuKZ1AAAAEM"]
[Fri May 08 19:39:35.995194 2026] [:error] [pid 61356:tid 61406] [client 20.63.39.182:5070] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wuasr.php"] [unique_id "af3Ld4x3vpB8oWhUq2OWywAAAdI"]
[Fri May 08 19:39:36.540799 2026] [:error] [pid 61356:tid 61395] [client 20.63.39.182:5102] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wuasr.php"] [unique_id "af3LeIx3vpB8oWhUq2OW0AAAAcc"]
[Fri May 08 19:39:37.186803 2026] [:error] [pid 61356:tid 61405] [client 20.63.39.182:4994] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1index.php"] [unique_id "af3LeYx3vpB8oWhUq2OW0wAAAdE"]
[Fri May 08 19:39:37.816405 2026] [:error] [pid 61356:tid 61391] [client 20.63.39.182:5094] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1index.php"] [unique_id "af3LeYx3vpB8oWhUq2OW1QAAAcM"]
[Fri May 08 19:39:38.331491 2026] [:error] [pid 61356:tid 61404] [client 20.63.39.182:4997] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1index.php"] [unique_id "af3Leox3vpB8oWhUq2OW2QAAAdA"]
[Fri May 08 19:39:38.767894 2026] [:error] [pid 61356:tid 61403] [client 20.63.39.182:4995] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1index.php"] [unique_id "af3Leox3vpB8oWhUq2OW3gAAAc8"]
[Fri May 08 19:39:39.320533 2026] [:error] [pid 61317:tid 61320] [client 20.63.39.182:5015] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "af3Le8-fFk_CedOCOYu-MQAAAUA"]
[Fri May 08 19:39:39.832349 2026] [:error] [pid 51009:tid 51099] [client 20.63.39.182:5115] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "af3Le-B0GbUWhxgzX9Uy8AAAAJc"]
[Fri May 08 19:39:40.373411 2026] [:error] [pid 51008:tid 51066] [client 20.63.39.182:5048] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "af3LfHB58C2Y1tgLtuKZ2AAAAFE"]
[Fri May 08 19:39:40.873232 2026] [:error] [pid 61356:tid 61401] [client 20.63.39.182:4939] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/png.php"] [unique_id "af3LfIx3vpB8oWhUq2OW4QAAAc0"]
[Fri May 08 19:39:41.375703 2026] [:error] [pid 51008:tid 51071] [client 20.63.39.182:5030] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x.php"] [unique_id "af3LfXB58C2Y1tgLtuKZ3QAAAFY"]
[Fri May 08 19:39:42.000452 2026] [:error] [pid 51008:tid 51058] [client 20.63.39.182:5016] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x.php"] [unique_id "af3LfXB58C2Y1tgLtuKZ4gAAAEk"]
[Fri May 08 19:39:42.960083 2026] [:error] [pid 51008:tid 51053] [client 20.63.39.182:5049] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x.php"] [unique_id "af3LfnB58C2Y1tgLtuKZ6QAAAEQ"]
[Fri May 08 19:39:44.062620 2026] [:error] [pid 51113:tid 51128] [client 20.63.39.182:5071] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x.php"] [unique_id "af3LgEQfs7sWtqkpQIdzygAAAM0"]
[Fri May 08 19:39:44.514830 2026] [:error] [pid 51009:tid 51080] [client 20.63.39.182:5005] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "af3LgOB0GbUWhxgzX9Uy9wAAAIQ"]
[Fri May 08 19:39:45.105835 2026] [:error] [pid 51007:tid 51031] [client 20.63.39.182:5075] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "af3LgVMagSGstWKyzzXl5wAAAAk"]
[Fri May 08 19:39:45.640652 2026] [:error] [pid 51009:tid 51089] [client 20.63.39.182:5010] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "af3LgeB0GbUWhxgzX9Uy-wAAAI0"]
[Fri May 08 19:39:46.562467 2026] [:error] [pid 61356:tid 61399] [client 20.63.39.182:5034] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "af3Lgox3vpB8oWhUq2OW5gAAAcs"]
[Fri May 08 19:39:47.292986 2026] [:error] [pid 61356:tid 61409] [client 20.63.39.182:5040] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "af3Lg4x3vpB8oWhUq2OW5wAAAdU"]
[Fri May 08 19:39:48.241032 2026] [:error] [pid 61356:tid 61396] [client 20.63.39.182:5068] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "af3LhIx3vpB8oWhUq2OW6AAAAcg"]
[Fri May 08 19:39:49.577351 2026] [:error] [pid 61317:tid 61337] [client 20.63.39.182:4928] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "af3Lhc-fFk_CedOCOYu-PgAAAVE"]
[Fri May 08 19:39:50.635277 2026] [:error] [pid 61317:tid 61334] [client 20.63.39.182:5111] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "af3Lhs-fFk_CedOCOYu-QgAAAU4"]
[Fri May 08 19:39:51.286395 2026] [:error] [pid 51007:tid 51030] [client 20.63.39.182:4929] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "af3Lh1MagSGstWKyzzXl6wAAAAg"]
[Fri May 08 19:39:51.818750 2026] [:error] [pid 51113:tid 51129] [client 20.63.39.182:4936] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "af3Lh0Qfs7sWtqkpQIdzzAAAAM4"]
[Fri May 08 19:39:52.459088 2026] [:error] [pid 34318:tid 34340] [client 20.63.39.182:5008] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "af3LiMr3guirgJiKhzDVAQAAARQ"]
[Fri May 08 19:39:52.993150 2026] [:error] [pid 34318:tid 34327] [client 20.63.39.182:5110] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "af3LiMr3guirgJiKhzDVAwAAAQc"]
[Fri May 08 19:39:53.546914 2026] [:error] [pid 61317:tid 61322] [client 20.63.39.182:5026] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fun.php"] [unique_id "af3Lic-fFk_CedOCOYu-RgAAAUI"]
[Fri May 08 19:39:54.322428 2026] [:error] [pid 61317:tid 61335] [client 20.63.39.182:5001] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fun.php"] [unique_id "af3Lis-fFk_CedOCOYu-RwAAAU8"]
[Fri May 08 19:39:54.972896 2026] [:error] [pid 51008:tid 51064] [client 20.63.39.182:5106] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fun.php"] [unique_id "af3LinB58C2Y1tgLtuKaGQAAAE8"]
[Fri May 08 19:39:55.686362 2026] [:error] [pid 34318:tid 34334] [client 20.63.39.182:5020] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fun.php"] [unique_id "af3Li8r3guirgJiKhzDVCAAAAQ4"]
[Fri May 08 19:39:56.295739 2026] [:error] [pid 51113:tid 51131] [client 20.63.39.182:4948] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af3LjEQfs7sWtqkpQIdzzwAAANA"]
[Fri May 08 19:39:56.873452 2026] [:error] [pid 34318:tid 34326] [client 20.63.39.182:5025] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af3LjMr3guirgJiKhzDVCgAAAQY"]
[Fri May 08 19:39:57.507885 2026] [:error] [pid 61356:tid 61391] [client 20.63.39.182:5069] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af3LjYx3vpB8oWhUq2OW7wAAAcM"]
[Fri May 08 19:39:58.222904 2026] [:error] [pid 51007:tid 51037] [client 20.63.39.182:5101] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af3LjlMagSGstWKyzzXl8wAAAA8"]
[Fri May 08 19:39:59.036770 2026] [:error] [pid 51009:tid 51086] [client 20.63.39.182:5027] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/explorer/index_.php"] [unique_id "af3Lj-B0GbUWhxgzX9UzBQAAAIo"]
[Fri May 08 19:39:59.858291 2026] [:error] [pid 51007:tid 51025] [client 20.63.39.182:4981] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/explorer/index_.php"] [unique_id "af3Lj1MagSGstWKyzzXl9gAAAAM"]
[Fri May 08 19:40:00.521807 2026] [:error] [pid 61317:tid 61334] [client 20.63.39.182:4954] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/explorer/index_.php"] [unique_id "af3LkM-fFk_CedOCOYu-WQAAAU4"]
[Fri May 08 19:40:01.150863 2026] [:error] [pid 61355:tid 61374] [client 20.63.39.182:4976] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/explorer/index_.php"] [unique_id "af3LkfkhJTi30CBXmMmizgAAAY0"]
[Fri May 08 19:40:01.777693 2026] [:error] [pid 51009:tid 51080] [client 20.63.39.182:5118] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "af3LkeB0GbUWhxgzX9UzCQAAAIQ"]
[Fri May 08 19:40:02.394169 2026] [:error] [pid 61355:tid 61378] [client 20.63.39.182:5041] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "af3LkvkhJTi30CBXmMmi0AAAAZE"]
[Fri May 08 19:40:03.060789 2026] [:error] [pid 51009:tid 51088] [client 20.63.39.182:5042] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "af3Lk-B0GbUWhxgzX9UzDQAAAIw"]
[Fri May 08 19:40:03.603181 2026] [:error] [pid 51113:tid 51118] [client 20.63.39.182:5036] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "af3Lk0Qfs7sWtqkpQIdz1AAAAMM"]
[Fri May 08 19:40:04.063123 2026] [:error] [pid 51113:tid 51125] [client 20.63.39.182:5024] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "af3LlEQfs7sWtqkpQIdz1QAAAMo"]
[Fri May 08 19:40:04.605306 2026] [:error] [pid 61355:tid 61384] [client 20.63.39.182:4990] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "af3LlPkhJTi30CBXmMmi1QAAAZc"]
[Fri May 08 19:40:05.335218 2026] [:error] [pid 61317:tid 61326] [client 20.63.39.182:5045] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Fri May 08 19:40:05.547161 2026] [:error] [pid 61317:tid 61338] [client 20.63.39.182:5045] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Fri May 08 19:40:05.758568 2026] [:error] [pid 61317:tid 61333] [client 20.63.39.182:5045] File does not exist: /usr/local/apache/htdocs/suspended-page/app.php
[Fri May 08 19:40:06.013697 2026] [:error] [pid 61317:tid 61320] [client 20.63.39.182:5045] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Fri May 08 19:40:06.227205 2026] [:error] [pid 61317:tid 61324] [client 20.63.39.182:5045] File does not exist: /usr/local/apache/htdocs/suspended-page/file59.php
[Fri May 08 19:40:06.438863 2026] [:error] [pid 61317:tid 61334] [client 20.63.39.182:5045] File does not exist: /usr/local/apache/htdocs/suspended-page/lala.php
[Fri May 08 19:40:06.652281 2026] [:error] [pid 61317:tid 61332] [client 20.63.39.182:5045] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-at.php
[Fri May 08 19:40:06.864026 2026] [:error] [pid 61317:tid 61328] [client 20.63.39.182:5045] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri May 08 19:40:07.182292 2026] [:error] [pid 61317:tid 61329] [client 20.63.39.182:5045] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Fri May 08 19:40:07.402038 2026] [:error] [pid 61317:tid 61326] [client 20.63.39.182:5045] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Fri May 08 19:40:07.636959 2026] [:error] [pid 61317:tid 61335] [client 20.63.39.182:5045] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "af3Ll8-fFk_CedOCOYu-hAAAAU8"]
[Fri May 08 19:40:08.116591 2026] [:error] [pid 51009:tid 51079] [client 20.63.39.182:5054] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "af3LmOB0GbUWhxgzX9UzEAAAAIM"]
[Fri May 08 19:40:08.836275 2026] [:error] [pid 61356:tid 61409] [client 20.63.39.182:5012] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "af3LmIx3vpB8oWhUq2OW_QAAAdU"]
[Fri May 08 19:40:09.266408 2026] [:error] [pid 34318:tid 34329] [client 20.63.39.182:5084] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "af3Lmcr3guirgJiKhzDVFAAAAQk"]
[Fri May 08 19:40:09.737904 2026] [:error] [pid 61356:tid 61407] [client 20.63.39.182:4881] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "af3LmYx3vpB8oWhUq2OW_gAAAdM"]
[Fri May 08 19:40:10.347069 2026] [:error] [pid 61356:tid 61403] [client 20.63.39.182:4953] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "af3Lmox3vpB8oWhUq2OXAQAAAc8"]
[Fri May 08 19:40:10.784744 2026] [:error] [pid 51113:tid 51139] [client 20.63.39.182:4937] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "af3LmkQfs7sWtqkpQIdz3AAAANg"]
[Fri May 08 19:40:11.388856 2026] [:error] [pid 51007:tid 51033] [client 20.63.39.182:5076] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "af3Lm1MagSGstWKyzzXl-wAAAAs"]
[Fri May 08 19:40:12.298281 2026] [:error] [pid 51009:tid 51096] [client 20.63.39.182:5066] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "af3LnOB0GbUWhxgzX9UzEgAAAJQ"]
[Fri May 08 19:40:12.732295 2026] [:error] [pid 51007:tid 51027] [client 20.63.39.182:4965] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "af3LnFMagSGstWKyzzXl_gAAAAU"]
[Fri May 08 19:40:13.234251 2026] [:error] [pid 61356:tid 61409] [client 20.63.39.182:4945] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "af3LnYx3vpB8oWhUq2OXBwAAAdU"]
[Fri May 08 19:40:13.752870 2026] [:error] [pid 61356:tid 61412] [client 20.63.39.182:4871] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "af3LnYx3vpB8oWhUq2OXCQAAAdg"]
[Fri May 08 19:40:14.222007 2026] [:error] [pid 61355:tid 61378] [client 20.63.39.182:5086] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "af3LnvkhJTi30CBXmMmi2gAAAZE"]
[Fri May 08 19:40:14.712446 2026] [:error] [pid 61355:tid 61375] [client 20.63.39.182:5112] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "af3LnvkhJTi30CBXmMmi3AAAAY4"]
[Fri May 08 19:40:15.159293 2026] [:error] [pid 34318:tid 34343] [client 20.63.39.182:4955] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "af3Ln8r3guirgJiKhzDVGgAAARc"]
[Fri May 08 19:40:15.592139 2026] [:error] [pid 51007:tid 51029] [client 20.63.39.182:5077] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "af3Ln1MagSGstWKyzzXmAgAAAAc"]
[Fri May 08 19:40:16.086747 2026] [:error] [pid 61355:tid 61383] [client 20.63.39.182:4930] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "af3LoPkhJTi30CBXmMmi5QAAAZY"]
[Fri May 08 19:40:16.533535 2026] [:error] [pid 61355:tid 61382] [client 20.63.39.182:4891] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "af3LoPkhJTi30CBXmMmi6QAAAZU"]
[Fri May 08 19:40:16.979059 2026] [:error] [pid 61355:tid 61366] [client 20.63.39.182:4996] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "af3LoPkhJTi30CBXmMmi7AAAAYU"]
[Fri May 08 19:40:17.464807 2026] [:error] [pid 61355:tid 61371] [client 20.63.39.182:4942] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "af3LofkhJTi30CBXmMmi7gAAAYo"]
[Fri May 08 19:40:18.065155 2026] [:error] [pid 61356:tid 61410] [client 20.63.39.182:5074] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "af3Loox3vpB8oWhUq2OXEAAAAdY"]
[Fri May 08 19:40:18.547506 2026] [:error] [pid 61356:tid 61396] [client 20.63.39.182:5083] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "af3Loox3vpB8oWhUq2OXEgAAAcg"]
[Fri May 08 19:40:19.027701 2026] [:error] [pid 61356:tid 61405] [client 20.63.39.182:4935] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "af3Lo4x3vpB8oWhUq2OXFQAAAdE"]
[Fri May 08 19:40:19.488462 2026] [:error] [pid 61356:tid 61394] [client 20.63.39.182:4932] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "af3Lo4x3vpB8oWhUq2OXGAAAAcY"]
[Fri May 08 19:40:20.003744 2026] [:error] [pid 61355:tid 61375] [client 20.63.39.182:4866] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "af3LpPkhJTi30CBXmMmi8gAAAY4"]
[Fri May 08 19:40:20.468412 2026] [:error] [pid 61355:tid 61361] [client 20.63.39.182:4957] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "af3LpPkhJTi30CBXmMmi9AAAAYA"]
[Fri May 08 19:40:20.940001 2026] [:error] [pid 61355:tid 61372] [client 20.63.39.182:5029] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "af3LpPkhJTi30CBXmMmi9QAAAYs"]
[Fri May 08 19:40:21.444360 2026] [:error] [pid 51009:tid 51081] [client 20.63.39.182:4963] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "af3LpeB0GbUWhxgzX9UzGAAAAIU"]
[Fri May 08 21:16:10.678877 2026] [:error] [pid 51009:tid 51083] [client 34.10.76.198:51849] [client 34.10.76.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.10.76.198, incrementing ddos counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "af3iGuB0GbUWhxgzX9VK9QAAAIc"]
[Fri May 08 21:16:10.681134 2026] [:error] [pid 51009:tid 51083] [client 34.10.76.198:51849] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri May 08 21:16:10.875831 2026] [:error] [pid 51009:tid 51092] [client 34.10.76.198:51849] [client 34.10.76.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "af3iGuB0GbUWhxgzX9VK-AAAAJA"]
[Fri May 08 21:16:11.334070 2026] [:error] [pid 34318:tid 34320] [client 34.10.76.198:60948] [client 34.10.76.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "af3iG8r3guirgJiKhzDgcAAAAQA"]
[Fri May 08 21:16:11.742278 2026] [:error] [pid 51113:tid 51132] [client 34.10.76.198:54360] [client 34.10.76.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "af3iG0Qfs7sWtqkpQId-7AAAANE"]
[Fri May 08 21:16:12.134667 2026] [:error] [pid 61356:tid 61391] [client 34.10.76.198:58972] [client 34.10.76.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "af3iHIx3vpB8oWhUq2PAxgAAAcM"]
[Fri May 08 21:16:12.588611 2026] [:error] [pid 61356:tid 61411] [client 34.10.76.198:58634] [client 34.10.76.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "af3iHIx3vpB8oWhUq2PAyAAAAdc"]
[Fri May 08 21:16:13.014280 2026] [:error] [pid 51113:tid 51116] [client 34.10.76.198:56549] [client 34.10.76.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "af3iHUQfs7sWtqkpQId-7wAAAME"]
[Fri May 08 21:16:13.405068 2026] [:error] [pid 51009:tid 51098] [client 34.10.76.198:50545] [client 34.10.76.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "af3iHeB0GbUWhxgzX9VLBAAAAJY"]
[Fri May 08 22:35:43.990591 2026] [:error] [pid 61356:tid 61392] [client 172.71.124.15:11699] [client 172.71.124.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.vercel"] [unique_id "af30v4x3vpB8oWhUq2PlGAAAAcQ"]
[Fri May 08 22:35:44.081502 2026] [:error] [pid 61356:tid 61401] [client 172.68.242.117:10269] [client 172.68.242.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.development"] [unique_id "af30wIx3vpB8oWhUq2PlGgAAAc0"], referer: https://www.google.com/search?q=windfcau.windfarmcoolants.com.au
[Fri May 08 22:35:44.081932 2026] [:error] [pid 61356:tid 61400] [client 172.68.242.117:10271] [client 172.68.242.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.backup"] [unique_id "af30wIx3vpB8oWhUq2PlGwAAAcw"]
[Fri May 08 22:35:44.082266 2026] [:error] [pid 61356:tid 61393] [client 172.71.124.15:11701] [client 172.71.124.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.save"] [unique_id "af30wIx3vpB8oWhUq2PlHAAAAcU"]
[Fri May 08 22:35:44.085081 2026] [:error] [pid 61356:tid 61408] [client 172.68.242.117:10272] [client 172.68.242.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfcau.windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/backup.sql"] [unique_id "af30wIx3vpB8oWhUq2PlHQAAAdQ"], referer: https://www.google.com/search?q=windfcau.windfarmcoolants.com.au
[Fri May 08 22:35:44.101037 2026] [:error] [pid 61356:tid 61394] [client 162.158.189.34:12343] [client 162.158.189.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.dev"] [unique_id "af30wIx3vpB8oWhUq2PlHgAAAcY"]
[Fri May 08 22:35:44.191375 2026] [:error] [pid 61356:tid 61388] [client 172.68.164.21:11880] [client 172.68.164.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sftp-config.json"] [unique_id "af30wIx3vpB8oWhUq2PlIAAAAcA"]
[Fri May 08 22:35:45.295734 2026] [:error] [pid 51007:tid 51039] [client 172.70.208.14:11580] [client 172.70.208.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "af30wVMagSGstWKyzzX_awAAABE"], referer: https://www.google.com/search?q=windfcau.windfarmcoolants.com.au
[Fri May 08 22:35:45.374588 2026] [:error] [pid 34318:tid 34325] [client 172.70.208.15:12412] [client 172.70.208.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "af30wcr3guirgJiKhzDqcwAAAQU"]
[Fri May 08 22:36:33.851798 2026] [:error] [pid 61356:tid 61405] [client 34.177.105.146:36808] [client 34.177.105.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "af308Yx3vpB8oWhUq2PlsQAAAdE"], referer: https://www.google.com/search?q=windfcau.windfarmcoolants.com.au
[Sat May 09 00:46:24.627048 2026] [:error] [pid 61355:tid 61379] [client 34.65.237.18:58340] [client 34.65.237.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "af4TYPkhJTi30CBXmMkOTgAAAZI"]
[Sat May 09 00:46:24.976885 2026] [:error] [pid 51009:tid 51088] [client 34.65.237.18:34638] [client 34.65.237.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "af4TYOB0GbUWhxgzX9V9ogAAAIw"]
[Sat May 09 01:24:07.404114 2026] [:error] [pid 61355:tid 61381] [client 18.140.197.47:60910] [client 18.140.197.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "af4cN_khJTi30CBXmMkpFQAAAZQ"]
[Sat May 09 01:24:08.440620 2026] [:error] [pid 61355:tid 61379] [client 18.140.197.47:37754] [client 18.140.197.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4cOPkhJTi30CBXmMkpHQAAAZI"]
[Sat May 09 01:24:09.046021 2026] [:error] [pid 61355:tid 61362] [client 18.140.197.47:37824] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Sat May 09 01:24:09.176793 2026] [:error] [pid 61355:tid 61379] [client 18.140.197.47:37824] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat May 09 01:24:09.338222 2026] [:error] [pid 61355:tid 61372] [client 18.140.197.47:37824] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Sat May 09 01:24:09.465156 2026] [:error] [pid 61355:tid 61366] [client 18.140.197.47:37824] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Sat May 09 01:24:09.616253 2026] [:error] [pid 61355:tid 61384] [client 18.140.197.47:37824] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php
[Sat May 09 01:24:09.755372 2026] [:error] [pid 61355:tid 61370] [client 18.140.197.47:37824] File does not exist: /usr/local/apache/htdocs/suspended-page/pinfo.php
[Sat May 09 01:24:09.891108 2026] [:error] [pid 61355:tid 61362] [client 18.140.197.47:37824] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Sat May 09 01:24:10.202624 2026] [:error] [pid 61355:tid 61377] [client 18.140.197.47:37824] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Sat May 09 01:24:10.353456 2026] [:error] [pid 61355:tid 61385] [client 18.140.197.47:37824] File does not exist: /usr/local/apache/htdocs/suspended-page/debug.php
[Sat May 09 01:24:10.710459 2026] [:error] [pid 61355:tid 61384] [client 18.140.197.47:37824] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4cOvkhJTi30CBXmMkpPgAAAZc"]
[Sat May 09 01:24:14.242203 2026] [:error] [pid 61355:tid 61362] [client 18.140.197.47:37966] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4cPvkhJTi30CBXmMkpSQAAAYE"]
[Sat May 09 01:24:14.979803 2026] [:error] [pid 61355:tid 61370] [client 18.140.197.47:38026] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4cPvkhJTi30CBXmMkpUgAAAYk"]
[Sat May 09 01:24:15.640332 2026] [:error] [pid 51009:tid 51080] [client 18.140.197.47:38088] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4cP-B0GbUWhxgzX9WN_QAAAIQ"]
[Sat May 09 01:24:16.337078 2026] [:error] [pid 51009:tid 51079] [client 18.140.197.47:38120] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4cQOB0GbUWhxgzX9WOBQAAAIM"]
[Sat May 09 01:24:17.113130 2026] [:error] [pid 61355:tid 61376] [client 18.140.197.47:38182] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/info"] [unique_id "af4cQfkhJTi30CBXmMkpZgAAAY8"]
[Sat May 09 01:24:17.719787 2026] [:error] [pid 51009:tid 51097] [client 18.140.197.47:53234] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/php-info.php"] [unique_id "af4cQeB0GbUWhxgzX9WOCgAAAJU"]
[Sat May 09 01:24:18.476553 2026] [:error] [pid 61317:tid 61325] [client 18.140.197.47:53278] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/phpversion.php"] [unique_id "af4cQs-fFk_CedOCOYsJSwAAAUU"]
[Sat May 09 01:24:19.071827 2026] [:error] [pid 61355:tid 61381] [client 18.140.197.47:53320] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/_phpinfo.php"] [unique_id "af4cQ_khJTi30CBXmMkpcQAAAZQ"]
[Sat May 09 01:24:20.372452 2026] [:error] [pid 51113:tid 51120] [client 18.140.197.47:53338] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4cREQfs7sWtqkpQIeZ5gAAAMU"]
[Sat May 09 01:24:21.730333 2026] [:error] [pid 51009:tid 51079] [client 18.140.197.47:53378] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/server-info.php"] [unique_id "af4cReB0GbUWhxgzX9WOFwAAAIM"]
[Sat May 09 01:24:22.562860 2026] [:error] [pid 61317:tid 61344] [client 18.140.197.47:53412] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/server-status.php"] [unique_id "af4cRs-fFk_CedOCOYsJVAAAAVg"]
[Sat May 09 01:24:23.338495 2026] [:error] [pid 51009:tid 51094] [client 18.140.197.47:53466] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4cR-B0GbUWhxgzX9WOGwAAAJI"]
[Sat May 09 01:24:23.918094 2026] [:error] [pid 51009:tid 51078] [client 18.140.197.47:53522] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/_environment"] [unique_id "af4cR-B0GbUWhxgzX9WOHgAAAII"]
[Sat May 09 01:24:24.604938 2026] [:error] [pid 51009:tid 51082] [client 18.140.197.47:53578] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4cSOB0GbUWhxgzX9WOJAAAAIY"]
[Sat May 09 01:24:25.455498 2026] [:error] [pid 61355:tid 61377] [client 18.140.197.47:53638] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4cSfkhJTi30CBXmMkphwAAAZA"]
[Sat May 09 01:24:26.608997 2026] [:error] [pid 51009:tid 51086] [client 18.140.197.47:53698] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4cSuB0GbUWhxgzX9WOJwAAAIo"]
[Sat May 09 01:24:27.321882 2026] [:error] [pid 51009:tid 51095] [client 18.140.197.47:53754] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4cS-B0GbUWhxgzX9WOKAAAAJM"]
[Sat May 09 01:24:27.945329 2026] [:error] [pid 61355:tid 61372] [client 18.140.197.47:35276] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4cS_khJTi30CBXmMkpnQAAAYs"]
[Sat May 09 01:24:28.621976 2026] [:error] [pid 61356:tid 61400] [client 18.140.197.47:35328] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4cTIx3vpB8oWhUq2MjWQAAAcw"]
[Sat May 09 01:24:29.294305 2026] [:error] [pid 51009:tid 51100] [client 18.140.197.47:35392] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4cTeB0GbUWhxgzX9WOKgAAAJg"]
[Sat May 09 01:24:29.999326 2026] [:error] [pid 61356:tid 61392] [client 18.140.197.47:35436] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4cTYx3vpB8oWhUq2MjbgAAAcQ"]
[Sat May 09 01:24:30.651870 2026] [:error] [pid 34318:tid 34334] [client 18.140.197.47:35480] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/phpinfo.php~"] [unique_id "af4cTsr3guirgJiKhzACCwAAAQ4"]
[Sat May 09 01:24:31.266866 2026] [:error] [pid 61355:tid 61375] [client 18.140.197.47:35534] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/info.php.bak"] [unique_id "af4cT_khJTi30CBXmMkpowAAAY4"]
[Sat May 09 01:24:31.928435 2026] [:error] [pid 51009:tid 51091] [client 18.140.197.47:35592] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4cT-B0GbUWhxgzX9WONQAAAI8"]
[Sat May 09 01:24:32.861931 2026] [:error] [pid 61356:tid 61391] [client 18.140.197.47:35644] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4cUIx3vpB8oWhUq2MjcwAAAcM"]
[Sat May 09 01:24:33.644046 2026] [:error] [pid 51008:tid 51060] [client 18.140.197.47:35698] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4cUXB58C2Y1tgLtuLYsAAAAEs"]
[Sat May 09 01:24:34.437284 2026] [:error] [pid 51113:tid 51115] [client 18.140.197.47:35770] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4cUkQfs7sWtqkpQIeZ-gAAAMA"]
[Sat May 09 01:24:35.212565 2026] [:error] [pid 51009:tid 51093] [client 18.140.197.47:35828] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4cU-B0GbUWhxgzX9WOPAAAAJE"]
[Sat May 09 01:24:35.871968 2026] [:error] [pid 61356:tid 61394] [client 18.140.197.47:35878] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4cU4x3vpB8oWhUq2MjfAAAAcY"]
[Sat May 09 01:24:36.990746 2026] [:error] [pid 51113:tid 51116] [client 18.140.197.47:35936] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4cVEQfs7sWtqkpQIeZ_AAAAME"]
[Sat May 09 01:24:37.848887 2026] [:error] [pid 34318:tid 34327] [client 18.140.197.47:35142] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4cVcr3guirgJiKhzACJQAAAQc"]
[Sat May 09 01:24:38.643450 2026] [:error] [pid 61356:tid 61397] [client 18.140.197.47:35226] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4cVox3vpB8oWhUq2MjhQAAAck"]
[Sat May 09 01:24:39.341994 2026] [:error] [pid 34318:tid 34340] [client 18.140.197.47:35290] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4cV8r3guirgJiKhzACKgAAARQ"]
[Sat May 09 01:24:39.999386 2026] [:error] [pid 34318:tid 34338] [client 18.140.197.47:35356] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4cV8r3guirgJiKhzACMwAAARI"]
[Sat May 09 01:24:43.663771 2026] [:error] [pid 51113:tid 51127] [client 18.140.197.47:35400] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4cW0Qfs7sWtqkpQIeaDgAAAMw"]
[Sat May 09 01:24:44.433403 2026] [:error] [pid 51007:tid 51028] [client 18.140.197.47:35440] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4cXFMagSGstWKyzzUY6AAAAAY"]
[Sat May 09 01:24:45.232009 2026] [:error] [pid 34318:tid 34338] [client 18.140.197.47:35466] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4cXcr3guirgJiKhzACQQAAARI"]
[Sat May 09 01:24:46.115578 2026] [:error] [pid 61355:tid 61380] [client 18.140.197.47:35502] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4cXvkhJTi30CBXmMkpvQAAAZM"]
[Sat May 09 02:26:09.924143 2026] [:error] [pid 51008:tid 51054] [client 3.15.179.172:41912] [client 3.15.179.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "af4qwXB58C2Y1tgLtuLoggAAAEU"]
[Sat May 09 02:26:11.036623 2026] [:error] [pid 51009:tid 51093] [client 3.15.179.172:41968] [client 3.15.179.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4qw-B0GbUWhxgzX9WmngAAAJE"]
[Sat May 09 02:26:11.987369 2026] [:error] [pid 51008:tid 51053] [client 3.15.179.172:42026] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Sat May 09 02:26:12.232782 2026] [:error] [pid 51008:tid 51061] [client 3.15.179.172:42026] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat May 09 02:26:12.456744 2026] [:error] [pid 51008:tid 51058] [client 3.15.179.172:42026] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Sat May 09 02:26:12.713424 2026] [:error] [pid 51008:tid 51055] [client 3.15.179.172:42026] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Sat May 09 02:26:12.960639 2026] [:error] [pid 51008:tid 51064] [client 3.15.179.172:42026] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php
[Sat May 09 02:26:13.214964 2026] [:error] [pid 51008:tid 51071] [client 3.15.179.172:42026] File does not exist: /usr/local/apache/htdocs/suspended-page/pinfo.php
[Sat May 09 02:26:13.436054 2026] [:error] [pid 51008:tid 51056] [client 3.15.179.172:42026] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/test.php"] [unique_id "af4qxXB58C2Y1tgLtuLolQAAAEc"]
[Sat May 09 02:26:14.438598 2026] [:error] [pid 34318:tid 34337] [client 3.15.179.172:42078] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/phpinfo"] [unique_id "af4qxsr3guirgJiKhzAMxAAAARE"]
[Sat May 09 02:26:15.429759 2026] [:error] [pid 61356:tid 61405] [client 3.15.179.172:42156] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "af4qx4x3vpB8oWhUq2NEJgAAAdE"]
[Sat May 09 02:26:16.349527 2026] [:error] [pid 51007:tid 51029] [client 3.15.179.172:42230] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/debug.php"] [unique_id "af4qyFMagSGstWKyzzUllgAAAAc"]
[Sat May 09 02:26:17.297577 2026] [:error] [pid 34318:tid 34342] [client 3.15.179.172:34306] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin/phpinfo.php"] [unique_id "af4qycr3guirgJiKhzAMywAAARY"]
[Sat May 09 02:26:18.180402 2026] [:error] [pid 61355:tid 61368] [client 3.15.179.172:34352] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4qyvkhJTi30CBXmMlZxwAAAYc"]
[Sat May 09 02:26:19.091957 2026] [:error] [pid 51007:tid 51038] [client 3.15.179.172:34390] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4qy1MagSGstWKyzzUlmwAAABA"]
[Sat May 09 02:26:20.131056 2026] [:error] [pid 51113:tid 51135] [client 3.15.179.172:34442] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4qzEQfs7sWtqkpQIeh7AAAANQ"]
[Sat May 09 02:26:21.043355 2026] [:error] [pid 51113:tid 51133] [client 3.15.179.172:34500] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4qzUQfs7sWtqkpQIeh9AAAANI"]
[Sat May 09 02:26:21.984705 2026] [:error] [pid 51009:tid 51082] [client 3.15.179.172:34540] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4qzeB0GbUWhxgzX9WmrgAAAIY"]
[Sat May 09 02:26:22.938918 2026] [:error] [pid 51113:tid 51120] [client 3.15.179.172:34616] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/info"] [unique_id "af4qzkQfs7sWtqkpQIeh-gAAAMU"]
[Sat May 09 02:26:23.849711 2026] [:error] [pid 51007:tid 51035] [client 3.15.179.172:34658] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/php-info.php"] [unique_id "af4qz1MagSGstWKyzzUloAAAAA0"]
[Sat May 09 02:26:24.697058 2026] [:error] [pid 51008:tid 51058] [client 3.15.179.172:34710] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/phpversion.php"] [unique_id "af4q0HB58C2Y1tgLtuLonwAAAEk"]
[Sat May 09 02:26:25.619575 2026] [:error] [pid 61356:tid 61389] [client 3.15.179.172:34728] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/_phpinfo.php"] [unique_id "af4q0Yx3vpB8oWhUq2NEOgAAAcE"]
[Sat May 09 02:26:26.568141 2026] [:error] [pid 61355:tid 61361] [client 3.15.179.172:34786] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4q0vkhJTi30CBXmMlZ1wAAAYA"]
[Sat May 09 02:26:27.477938 2026] [:error] [pid 51007:tid 51037] [client 3.15.179.172:36122] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/server-info.php"] [unique_id "af4q01MagSGstWKyzzUlowAAAA8"]
[Sat May 09 02:26:28.583851 2026] [:error] [pid 61355:tid 61366] [client 3.15.179.172:36164] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/server-status.php"] [unique_id "af4q1PkhJTi30CBXmMlZ4AAAAYU"]
[Sat May 09 02:26:29.514913 2026] [:error] [pid 51009:tid 51082] [client 3.15.179.172:36206] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4q1eB0GbUWhxgzX9WmvwAAAIY"]
[Sat May 09 02:26:30.516845 2026] [:error] [pid 61355:tid 61379] [client 3.15.179.172:36262] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/_environment"] [unique_id "af4q1vkhJTi30CBXmMlZ7AAAAZI"]
[Sat May 09 02:26:31.473567 2026] [:error] [pid 61355:tid 61368] [client 3.15.179.172:36308] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4q1_khJTi30CBXmMlZ9QAAAYc"]
[Sat May 09 02:26:32.470001 2026] [:error] [pid 61355:tid 61385] [client 3.15.179.172:36362] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4q2PkhJTi30CBXmMlZ_AAAAZg"]
[Sat May 09 02:26:33.550805 2026] [:error] [pid 51009:tid 51079] [client 3.15.179.172:36422] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4q2eB0GbUWhxgzX9WmwwAAAIM"]
[Sat May 09 02:26:34.512906 2026] [:error] [pid 61356:tid 61412] [client 3.15.179.172:36482] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4q2ox3vpB8oWhUq2NERwAAAdg"]
[Sat May 09 02:26:35.432718 2026] [:error] [pid 61355:tid 61370] [client 3.15.179.172:36526] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4q2_khJTi30CBXmMlaAwAAAYk"]
[Sat May 09 02:26:36.415000 2026] [:error] [pid 61356:tid 61395] [client 3.15.179.172:36584] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4q3Ix3vpB8oWhUq2NESQAAAcc"]
[Sat May 09 02:26:37.369138 2026] [:error] [pid 61356:tid 61403] [client 3.15.179.172:59380] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4q3Yx3vpB8oWhUq2NETQAAAc8"]
[Sat May 09 02:26:38.313713 2026] [:error] [pid 51008:tid 51073] [client 3.15.179.172:59434] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4q3nB58C2Y1tgLtuLorAAAAFg"]
[Sat May 09 02:26:39.262898 2026] [:error] [pid 51009:tid 51085] [client 3.15.179.172:59486] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/phpinfo.php~"] [unique_id "af4q3-B0GbUWhxgzX9WmygAAAIk"]
[Sat May 09 02:26:40.233213 2026] [:error] [pid 34318:tid 34321] [client 3.15.179.172:59536] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/info.php.bak"] [unique_id "af4q4Mr3guirgJiKhzAM2QAAAQE"]
[Sat May 09 02:26:41.243455 2026] [:error] [pid 61356:tid 61396] [client 3.15.179.172:59592] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4q4Yx3vpB8oWhUq2NEUgAAAcg"]
[Sat May 09 02:26:42.169212 2026] [:error] [pid 61317:tid 61321] [client 3.15.179.172:59636] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4q4s-fFk_CedOCOYsb_AAAAUE"]
[Sat May 09 02:26:43.110410 2026] [:error] [pid 61355:tid 61365] [client 3.15.179.172:59680] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4q4_khJTi30CBXmMlaBgAAAYQ"]
[Sat May 09 02:26:44.099790 2026] [:error] [pid 61356:tid 61393] [client 3.15.179.172:59750] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4q5Ix3vpB8oWhUq2NEWwAAAcU"]
[Sat May 09 02:26:45.072589 2026] [:error] [pid 51009:tid 51079] [client 3.15.179.172:59820] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4q5eB0GbUWhxgzX9WmzwAAAIM"]
[Sat May 09 02:26:46.005490 2026] [:error] [pid 51008:tid 51049] [client 3.15.179.172:59890] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4q5nB58C2Y1tgLtuLosQAAAEA"]
[Sat May 09 02:26:46.991715 2026] [:error] [pid 34318:tid 34341] [client 3.15.179.172:34802] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4q5sr3guirgJiKhzAM3gAAARU"]
[Sat May 09 02:26:47.928947 2026] [:error] [pid 61356:tid 61411] [client 3.15.179.172:34850] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4q54x3vpB8oWhUq2NEYQAAAdc"]
[Sat May 09 02:26:48.858254 2026] [:error] [pid 51009:tid 51098] [client 3.15.179.172:34916] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4q6OB0GbUWhxgzX9Wm3QAAAJY"]
[Sat May 09 02:26:49.855042 2026] [:error] [pid 61356:tid 61410] [client 3.15.179.172:34978] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4q6Yx3vpB8oWhUq2NEaQAAAdY"]
[Sat May 09 02:26:50.906352 2026] [:error] [pid 61355:tid 61381] [client 3.15.179.172:35044] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4q6vkhJTi30CBXmMlaIAAAAZQ"]
[Sat May 09 02:26:51.944190 2026] [:error] [pid 34318:tid 34339] [client 3.15.179.172:35084] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4q68r3guirgJiKhzAM4AAAARM"]
[Sat May 09 02:26:52.963960 2026] [:error] [pid 61355:tid 61376] [client 3.15.179.172:35118] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4q7PkhJTi30CBXmMlaJAAAAY8"]
[Sat May 09 02:26:53.922872 2026] [:error] [pid 61355:tid 61367] [client 3.15.179.172:35168] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4q7fkhJTi30CBXmMlaKwAAAYY"]
[Sat May 09 02:26:54.954575 2026] [:error] [pid 61356:tid 61398] [client 3.15.179.172:35234] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4q7ox3vpB8oWhUq2NEdQAAAco"]
[Sat May 09 12:22:09.478228 2026] [:error] [pid 9833:tid 9842] [client 172.212.190.20:62262] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat May 09 12:22:09.671082 2026] [:error] [pid 9833:tid 9843] [client 172.212.190.20:62262] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat May 09 12:22:10.056747 2026] [:error] [pid 9833:tid 9841] [client 172.212.190.20:62262] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat May 09 12:22:10.266928 2026] [:error] [pid 9833:tid 9858] [client 172.212.190.20:62262] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat May 09 12:22:10.684077 2026] [:error] [pid 9833:tid 9854] [client 172.212.190.20:62262] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sat May 09 12:22:10.875403 2026] [:error] [pid 9833:tid 9847] [client 172.212.190.20:62262] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat May 09 12:22:11.066180 2026] [:error] [pid 9833:tid 9853] [client 172.212.190.20:62262] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sat May 09 12:22:11.445526 2026] [:error] [pid 9833:tid 9848] [client 172.212.190.20:62262] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af62cyM9JmxIS0KGZUBqKgAAAYo"]
[Sat May 09 12:22:12.212875 2026] [:error] [pid 9187:tid 9268] [client 172.212.190.20:62249] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af62dBC7An6gkXsRsaFaLQAAAI8"]
[Sat May 09 12:22:12.970221 2026] [:error] [pid 9187:tid 9275] [client 172.212.190.20:62612] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af62dBC7An6gkXsRsaFaOwAAAJY"]
[Sat May 09 12:22:13.737762 2026] [:error] [pid 9187:tid 9274] [client 172.212.190.20:62246] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af62dRC7An6gkXsRsaFaQAAAAJU"]
[Sat May 09 14:56:52.257122 2026] [:error] [pid 9293:tid 9300] [client 34.82.81.216:50633] [client 34.82.81.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.82.81.216, incrementing ddos counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "af7atJR__qEzV5O6Z2OXbQAAAMM"]
[Sat May 09 14:56:52.259156 2026] [:error] [pid 9293:tid 9300] [client 34.82.81.216:50633] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat May 09 14:56:52.428866 2026] [:error] [pid 9293:tid 9317] [client 34.82.81.216:50633] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "af7atJR__qEzV5O6Z2OXcAAAANQ"]
[Sat May 09 14:56:52.874785 2026] [:error] [pid 9760:tid 9789] [client 34.82.81.216:53978] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "af7atGIkCp-C_fh0s7JA6AAAAVc"]
[Sat May 09 14:56:53.478568 2026] [:error] [pid 9920:tid 9932] [client 34.82.81.216:63933] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "af7atUxitGYhlzgZb5bb9wAAAco"]
[Sat May 09 14:56:53.975597 2026] [:error] [pid 9187:tid 9275] [client 34.82.81.216:51756] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "af7atRC7An6gkXsRsaGO6gAAAJY"]
[Sat May 09 14:56:54.521184 2026] [:error] [pid 9187:tid 9253] [client 34.82.81.216:59385] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "af7athC7An6gkXsRsaGO8AAAAIA"]
[Sat May 09 14:56:55.046327 2026] [:error] [pid 9184:tid 9198] [client 34.82.81.216:65206] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "af7at4jfODqb_i0Fm9-QDgAAAAE"]
[Sat May 09 14:56:55.536863 2026] [:error] [pid 9760:tid 9771] [client 34.82.81.216:53047] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "af7at2IkCp-C_fh0s7JA7wAAAUU"]
[Sat May 09 14:56:55.975780 2026] [:error] [pid 9293:tid 9316] [client 34.82.81.216:65295] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "af7at5R__qEzV5O6Z2OXgwAAANM"]
[Sat May 09 14:56:56.355918 2026] [:error] [pid 9187:tid 9273] [client 34.82.81.216:54116] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "af7auBC7An6gkXsRsaGO_wAAAJQ"]
[Sat May 09 14:56:56.847643 2026] [:error] [pid 9187:tid 9266] [client 34.82.81.216:64208] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "af7auBC7An6gkXsRsaGPBQAAAI0"]
[Sat May 09 14:56:57.327518 2026] [:error] [pid 9187:tid 9269] [client 34.82.81.216:51743] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "af7auRC7An6gkXsRsaGPEQAAAJA"]
[Sat May 09 14:56:57.767744 2026] [:error] [pid 9187:tid 9272] [client 34.82.81.216:55773] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "af7auRC7An6gkXsRsaGPGAAAAJM"]
[Sat May 09 14:56:58.254897 2026] [:error] [pid 9187:tid 9275] [client 34.82.81.216:53942] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "af7auhC7An6gkXsRsaGPIQAAAJY"]
[Sat May 09 14:56:58.619812 2026] [:error] [pid 9187:tid 9274] [client 34.82.81.216:61594] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "af7auhC7An6gkXsRsaGPLAAAAJU"]
[Sun May 10 07:31:53.107602 2026] [:error] [pid 46331:tid 46366] [client 34.18.2.65:36698] [client 34.18.2.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "af_D6QP02hpYETwsZpgMVwAAAIQ"]
[Sun May 10 07:31:59.575658 2026] [:error] [pid 46417:tid 46443] [client 34.18.2.65:50948] [client 34.18.2.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "af_D72Inm7mhwgbe48Zc0AAAARg"]
[Mon May 11 02:51:38.571026 2026] [:error] [pid 16038:tid 16079] [client 94.26.106.111:58703] [client 94.26.106.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.111, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "agDTuk4hf5Tcsfa2scKLsgAAAYs"], referer: https://duckduckgo.com/
[Mon May 11 02:51:38.574794 2026] [:error] [pid 16038:tid 16079] [client 94.26.106.111:58703] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://duckduckgo.com/
[Mon May 11 02:51:39.263353 2026] [:error] [pid 16038:tid 16081] [client 94.26.106.111:62328] [client 94.26.106.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.111, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "agDTu04hf5Tcsfa2scKLtQAAAY0"], referer: https://duckduckgo.com/
[Mon May 11 02:51:39.267050 2026] [:error] [pid 16038:tid 16081] [client 94.26.106.111:62328] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://duckduckgo.com/
[Mon May 11 03:16:23.870308 2026] [:error] [pid 16038:tid 16091] [client 158.173.67.26:36859] [client 158.173.67.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "agDZh04hf5Tcsfa2scKQTAAAAZc"]
[Tue May 12 01:19:11.380617 2026] [:error] [pid 4645:tid 4671] [client 34.62.48.40:52686] [client 34.62.48.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "agIPj3y4dxn8-Cx5vOXn_gAAAFc"]
[Tue May 12 01:19:11.381096 2026] [:error] [pid 4645:tid 4650] [client 34.62.48.40:52700] [client 34.62.48.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app/.env.local"] [unique_id "agIPj3y4dxn8-Cx5vOXn_wAAAEI"]
[Tue May 12 01:19:11.382091 2026] [:error] [pid 4645:tid 4672] [client 34.62.48.40:52706] [client 34.62.48.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app/.env"] [unique_id "agIPj3y4dxn8-Cx5vOXoAAAAAFg"]
[Tue May 12 01:19:11.391528 2026] [:error] [pid 4685:tid 4688] [client 34.62.48.40:52720] [client 34.62.48.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/.env"] [unique_id "agIPj3wrjbU4NZilCZ899AAAAQA"]
[Tue May 12 01:19:11.393061 2026] [:error] [pid 4685:tid 4712] [client 34.62.48.40:52736] [client 34.62.48.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.dev"] [unique_id "agIPj3wrjbU4NZilCZ899QAAARg"]
[Tue May 12 01:19:11.395578 2026] [:error] [pid 4685:tid 4708] [client 34.62.48.40:52690] [client 34.62.48.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "agIPj3wrjbU4NZilCZ899gAAARQ"]
[Tue May 12 01:19:11.406563 2026] [:error] [pid 58616:tid 58656] [client 34.62.48.40:52726] [client 34.62.48.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/api/.env"] [unique_id "agIPj9nsbeF5ioCAecgCZQAAAMo"]
[Tue May 12 01:19:11.410078 2026] [:error] [pid 58616:tid 58649] [client 34.62.48.40:52732] [client 34.62.48.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.development.local"] [unique_id "agIPj9nsbeF5ioCAecgCZgAAAMM"]
[Tue May 12 01:19:11.410322 2026] [:error] [pid 4685:tid 4703] [client 34.62.48.40:52752] [client 34.62.48.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.docker"] [unique_id "agIPj3wrjbU4NZilCZ899wAAAQ8"]
[Tue May 12 01:19:11.419852 2026] [:error] [pid 58616:tid 58657] [client 34.62.48.40:52764] [client 34.62.48.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.dev.local"] [unique_id "agIPj9nsbeF5ioCAecgCZwAAAMs"]
[Tue May 12 21:20:29.582459 2026] [:error] [pid 21242:tid 21265] [client 141.101.76.40:11997] [client 141.101.76.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "agMpHczeh8JWZob6PnIRJgAAAZM"], referer: https://www.google.com/search?q=windfcau.windfarmcoolants.com.au
[Tue May 12 21:20:31.041862 2026] [:error] [pid 40061:tid 40085] [client 172.71.95.77:11788] [client 172.71.95.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "agMpH7ycIKt8hxHMBYsGMAAAANY"], referer: https://www.google.com/search?q=windfcau.windfarmcoolants.com.au
[Tue May 12 21:20:32.984988 2026] [:error] [pid 42143:tid 42170] [client 172.71.102.241:10610] [client 172.71.102.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "agMpIES2WmK92iCO2L0qzAAAAVc"]
[Wed May 13 01:24:54.996432 2026] [:error] [pid 42143:tid 42154] [client 141.98.11.120:63461] [client 141.98.11.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uploads/"] [unique_id "agNiZkS2WmK92iCO2L1PsAAAAUc"], referer: binance.com
[Wed May 13 01:24:57.377436 2026] [:error] [pid 39957:tid 39993] [client 141.98.11.120:51274] [client 141.98.11.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/images/"] [unique_id "agNiaeAfHHyq0DBh5BKntwAAAEE"], referer: binance.com
[Wed May 13 01:25:00.479624 2026] [:error] [pid 39956:tid 39977] [client 141.98.11.120:62255] [client 141.98.11.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/files/"] [unique_id "agNibI2K3wZDsNji3MwgIQAAAAw"], referer: binance.com
[Thu May 14 09:42:03.963877 2026] [:error] [pid 11690:tid 11701] [client 172.70.39.93:14021] [client 172.70.39.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "agUoaynxWuLN8Hptw8m6yAAAAMI"]
[Thu May 14 09:42:05.514208 2026] [:error] [pid 47721:tid 47730] [client 172.70.35.161:9992] [client 172.70.35.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "agUobXEmh7_G0hfOa6tN4gAAAYc"]
[Fri May 15 00:34:15.868777 2026] [:error] [pid 11690:tid 11717] [client 20.226.126.60:60633] File does not exist: /usr/local/apache/htdocs/suspended-page/shoha.php
[Fri May 15 00:34:16.376981 2026] [:error] [pid 11690:tid 11720] [client 20.226.126.60:60633] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-thi.php
[Fri May 15 00:34:16.737455 2026] [:error] [pid 11690:tid 11708] [client 20.226.126.60:60633] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-slss.php
[Fri May 15 00:34:17.097986 2026] [:error] [pid 11690:tid 11703] [client 20.226.126.60:60633] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Fri May 15 00:34:17.466769 2026] [:error] [pid 11690:tid 11719] [client 20.226.126.60:60633] File does not exist: /usr/local/apache/htdocs/suspended-page/ftde.php
[Fri May 15 00:34:17.981026 2026] [:error] [pid 11690:tid 11706] [client 20.226.126.60:60633] File does not exist: /usr/local/apache/htdocs/suspended-page/tires.php
[Fri May 15 00:34:18.364457 2026] [:error] [pid 11690:tid 11705] [client 20.226.126.60:60633] File does not exist: /usr/local/apache/htdocs/suspended-page/ff1.php
[Fri May 15 00:34:18.834513 2026] [:error] [pid 11690:tid 11700] [client 20.226.126.60:60633] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Fri May 15 00:34:19.392414 2026] [:error] [pid 11690:tid 11716] [client 20.226.126.60:60633] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Fri May 15 00:34:19.770676 2026] [:error] [pid 11690:tid 11721] [client 20.226.126.60:60633] File does not exist: /usr/local/apache/htdocs/suspended-page/ccou.php
[Fri May 15 00:34:20.140487 2026] [:error] [pid 11690:tid 11714] [client 20.226.126.60:60633] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "agX5jCnxWuLN8Hptw8lNAgAAAM8"]
[Fri May 15 00:34:21.702570 2026] [:error] [pid 47721:tid 47728] [client 20.226.126.60:60626] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "agX5jXEmh7_G0hfOa6tEcAAAAYU"]
[Fri May 15 00:34:23.155306 2026] [:error] [pid 47673:tid 47692] [client 20.226.126.60:60670] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "agX5j_CGe4cIn3sh5k08fAAAAVE"]
[Fri May 15 00:34:24.449812 2026] [:error] [pid 47673:tid 47696] [client 20.226.126.60:58573] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "agX5kPCGe4cIn3sh5k08fQAAAVU"]
[Fri May 15 00:34:25.603528 2026] [:error] [pid 11588:tid 11654] [client 20.226.126.60:60647] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "agX5kdUr21rOixkeGKbPAQAAAII"]
[Fri May 15 00:34:26.699525 2026] [:error] [pid 63033:tid 63035] [client 20.226.126.60:60646] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "agX5klMY49UWn5BpqVYTHwAAAQA"]
[Fri May 15 00:34:29.533622 2026] [:error] [pid 47721:tid 47730] [client 20.226.126.60:60624] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "agX5lXEmh7_G0hfOa6tEdAAAAYc"]
[Fri May 15 00:34:30.948176 2026] [:error] [pid 11581:tid 11607] [client 20.226.126.60:60623] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "agX5lv0vF48FbzpvQMVeIwAAAAo"]
[Fri May 15 00:34:31.821183 2026] [:error] [pid 47721:tid 47731] [client 20.226.126.60:60617] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "agX5l3Emh7_G0hfOa6tEdgAAAYg"]
[Fri May 15 00:34:33.053745 2026] [:error] [pid 47673:tid 47676] [client 20.226.126.60:60648] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "agX5mfCGe4cIn3sh5k08gAAAAUE"]
[Fri May 15 00:34:33.998786 2026] [:error] [pid 11588:tid 11667] [client 20.226.126.60:60665] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "agX5mdUr21rOixkeGKbPDgAAAI8"]
[Fri May 15 00:34:35.156403 2026] [:error] [pid 47721:tid 47746] [client 20.226.126.60:60659] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "agX5m3Emh7_G0hfOa6tEeQAAAZc"]
[Fri May 15 00:34:36.828363 2026] [:error] [pid 11588:tid 11669] [client 20.226.126.60:58578] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "agX5nNUr21rOixkeGKbPEwAAAJE"]
[Fri May 15 00:34:38.395556 2026] [:error] [pid 11581:tid 11605] [client 20.226.126.60:58566] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "agX5nv0vF48FbzpvQMVeKQAAAAg"]
[Fri May 15 00:34:40.255916 2026] [:error] [pid 11581:tid 11608] [client 20.226.126.60:58581] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "agX5oP0vF48FbzpvQMVeLQAAAAs"]
[Fri May 15 00:34:41.196858 2026] [:error] [pid 47721:tid 47732] [client 20.226.126.60:58560] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "agX5oXEmh7_G0hfOa6tEfAAAAYk"]
[Fri May 15 00:34:42.750664 2026] [:error] [pid 47673:tid 47696] [client 20.226.126.60:58582] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "agX5ovCGe4cIn3sh5k08jQAAAVU"]
[Fri May 15 00:34:44.635117 2026] [:error] [pid 11582:tid 11638] [client 20.226.126.60:60657] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "agX5pPuw2cmFDpGcKhBFSwAAAE0"]
[Fri May 15 00:34:45.953223 2026] [:error] [pid 47721:tid 47745] [client 20.226.126.60:58572] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "agX5pXEmh7_G0hfOa6tEfgAAAZY"]
[Fri May 15 00:34:47.304167 2026] [:error] [pid 47673:tid 47687] [client 20.226.126.60:60628] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "agX5p_CGe4cIn3sh5k08kwAAAUw"]
[Fri May 15 00:34:48.763145 2026] [:error] [pid 11582:tid 11634] [client 20.226.126.60:60655] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "agX5qPuw2cmFDpGcKhBFTAAAAEk"]
[Fri May 15 00:34:49.697749 2026] [:error] [pid 47673:tid 47688] [client 20.226.126.60:58602] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "agX5qfCGe4cIn3sh5k08mQAAAU0"]
[Fri May 15 00:34:51.970431 2026] [:error] [pid 63033:tid 63037] [client 20.226.126.60:58618] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "agX5q1MY49UWn5BpqVYTMAAAAQI"]
[Fri May 15 00:34:53.040763 2026] [:error] [pid 11588:tid 11668] [client 20.226.126.60:60614] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "agX5rdUr21rOixkeGKbPFwAAAJA"]
[Fri May 15 00:34:54.049128 2026] [:error] [pid 11581:tid 11611] [client 20.226.126.60:60639] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/revealability.php"] [unique_id "agX5rv0vF48FbzpvQMVeMAAAAA4"]
[Fri May 15 00:34:55.553929 2026] [:error] [pid 63033:tid 63057] [client 20.226.126.60:58534] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/revealability.php"] [unique_id "agX5r1MY49UWn5BpqVYTMQAAARY"]
[Fri May 15 00:34:56.718654 2026] [:error] [pid 63033:tid 63051] [client 20.226.126.60:60645] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/revealability.php"] [unique_id "agX5sFMY49UWn5BpqVYTMgAAARA"]
[Fri May 15 00:34:58.054984 2026] [:error] [pid 11581:tid 11607] [client 20.226.126.60:60644] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/revealability.php"] [unique_id "agX5sv0vF48FbzpvQMVeMwAAAAo"]
[Fri May 15 00:34:59.570867 2026] [:error] [pid 11581:tid 11620] [client 20.226.126.60:60619] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file4.php"] [unique_id "agX5s_0vF48FbzpvQMVeNQAAABc"]
[Fri May 15 00:35:00.347548 2026] [:error] [pid 11581:tid 11603] [client 20.226.126.60:58611] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file4.php"] [unique_id "agX5tP0vF48FbzpvQMVeNgAAAAY"]
[Fri May 15 00:35:01.653999 2026] [:error] [pid 11581:tid 11598] [client 20.226.126.60:60642] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file4.php"] [unique_id "agX5tf0vF48FbzpvQMVeOQAAAAE"]
[Fri May 15 00:35:03.485362 2026] [:error] [pid 11582:tid 11631] [client 20.226.126.60:58506] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file4.php"] [unique_id "agX5t_uw2cmFDpGcKhBFTgAAAEY"]
[Fri May 15 00:35:04.803210 2026] [:error] [pid 47673:tid 47691] [client 20.226.126.60:60612] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "agX5uPCGe4cIn3sh5k08pQAAAVA"]
[Fri May 15 00:35:06.928444 2026] [:error] [pid 47673:tid 47688] [client 20.226.126.60:58616] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "agX5uvCGe4cIn3sh5k08qQAAAU0"]
[Fri May 15 00:35:08.431180 2026] [:error] [pid 11581:tid 11618] [client 20.226.126.60:58569] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "agX5vP0vF48FbzpvQMVeOwAAABU"]
[Fri May 15 00:35:09.818279 2026] [:error] [pid 11588:tid 11675] [client 20.226.126.60:60641] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "agX5vdUr21rOixkeGKbPIQAAAJc"]
[Fri May 15 00:35:11.874655 2026] [:error] [pid 47673:tid 47689] [client 20.226.126.60:58584] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file30.php"] [unique_id "agX5v_CGe4cIn3sh5k08rQAAAU4"]
[Fri May 15 00:35:13.257494 2026] [:error] [pid 47721:tid 47739] [client 20.226.126.60:58591] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file30.php"] [unique_id "agX5wXEmh7_G0hfOa6tEjgAAAZA"]
[Fri May 15 00:35:16.032308 2026] [:error] [pid 47721:tid 47735] [client 20.226.126.60:60650] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file30.php"] [unique_id "agX5xHEmh7_G0hfOa6tElAAAAYw"]
[Fri May 15 00:35:19.342380 2026] [:error] [pid 47721:tid 47744] [client 20.226.126.60:60654] File does not exist: /usr/local/apache/htdocs/suspended-page/file30.php
[Fri May 15 00:35:19.684249 2026] [:error] [pid 47721:tid 47736] [client 20.226.126.60:60654] File does not exist: /usr/local/apache/htdocs/suspended-page/forbidals.php
[Fri May 15 00:35:20.007920 2026] [:error] [pid 47721:tid 47734] [client 20.226.126.60:60654] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-firewall.php
[Fri May 15 00:35:20.331674 2026] [:error] [pid 47721:tid 47726] [client 20.226.126.60:60654] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Fri May 15 00:35:20.654866 2026] [:error] [pid 47721:tid 47738] [client 20.226.126.60:60654] File does not exist: /usr/local/apache/htdocs/suspended-page/wuasr.php
[Fri May 15 00:35:21.135426 2026] [:error] [pid 47721:tid 47741] [client 20.226.126.60:60654] File does not exist: /usr/local/apache/htdocs/suspended-page/1index.php
[Fri May 15 00:35:21.458638 2026] [:error] [pid 47721:tid 47733] [client 20.226.126.60:60654] File does not exist: /usr/local/apache/htdocs/suspended-page/png.php
[Fri May 15 00:35:21.783798 2026] [:error] [pid 47721:tid 47731] [client 20.226.126.60:60654] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Fri May 15 00:35:22.136889 2026] [:error] [pid 47721:tid 47740] [client 20.226.126.60:60654] File does not exist: /usr/local/apache/htdocs/suspended-page/yas.php
[Fri May 15 00:35:22.459247 2026] [:error] [pid 47721:tid 47729] [client 20.226.126.60:60654] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Fri May 15 00:35:22.790013 2026] [:error] [pid 47721:tid 47727] [client 20.226.126.60:60654] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Fri May 15 00:35:23.113283 2026] [:error] [pid 47721:tid 47739] [client 20.226.126.60:60654] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fun.php"] [unique_id "agX5y3Emh7_G0hfOa6tEqAAAAZA"]
[Fri May 15 00:35:24.370884 2026] [:error] [pid 63033:tid 63053] [client 20.226.126.60:58606] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fun.php"] [unique_id "agX5zFMY49UWn5BpqVYTPwAAARI"]
[Fri May 15 00:35:26.100516 2026] [:error] [pid 11581:tid 11600] [client 20.226.126.60:58501] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fun.php"] [unique_id "agX5zv0vF48FbzpvQMVeRQAAAAM"]
[Fri May 15 00:35:27.331220 2026] [:error] [pid 11581:tid 11616] [client 20.226.126.60:58571] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fun.php"] [unique_id "agX5z_0vF48FbzpvQMVeRwAAABM"]
[Fri May 15 00:35:30.258622 2026] [:error] [pid 11588:tid 11656] [client 20.226.126.60:60611] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "agX50tUr21rOixkeGKbPKwAAAIQ"]
[Fri May 15 00:35:32.616849 2026] [:error] [pid 11588:tid 11664] [client 20.226.126.60:60661] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "agX51NUr21rOixkeGKbPLAAAAIw"]
[Fri May 15 00:35:33.927527 2026] [:error] [pid 11588:tid 11655] [client 20.226.126.60:60616] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "agX51dUr21rOixkeGKbPMAAAAIM"]
[Fri May 15 00:35:35.940136 2026] [:error] [pid 11581:tid 11619] [client 20.226.126.60:58527] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "agX51_0vF48FbzpvQMVeSAAAABY"]
[Fri May 15 00:35:37.295932 2026] [:error] [pid 11581:tid 11605] [client 20.226.126.60:60622] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/explorer/index_.php"] [unique_id "agX52f0vF48FbzpvQMVeSQAAAAg"]
[Fri May 15 00:35:40.145535 2026] [:error] [pid 47673:tid 47680] [client 20.226.126.60:60640] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/explorer/index_.php"] [unique_id "agX53PCGe4cIn3sh5k08uwAAAUU"]
[Fri May 15 00:35:42.579768 2026] [:error] [pid 11582:tid 11634] [client 20.226.126.60:60651] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/explorer/index_.php"] [unique_id "agX53vuw2cmFDpGcKhBFVwAAAEk"]
[Fri May 15 00:35:43.727576 2026] [:error] [pid 11582:tid 11631] [client 20.226.126.60:58508] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/explorer/index_.php"] [unique_id "agX53_uw2cmFDpGcKhBFWAAAAEY"]
[Fri May 15 00:35:45.014435 2026] [:error] [pid 47721:tid 47743] [client 20.226.126.60:60666] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "agX54XEmh7_G0hfOa6tEvQAAAZQ"]
[Fri May 15 00:35:46.534920 2026] [:error] [pid 47721:tid 47734] [client 20.226.126.60:58568] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "agX54nEmh7_G0hfOa6tEwgAAAYs"]
[Fri May 15 00:35:47.668426 2026] [:error] [pid 11581:tid 11597] [client 20.226.126.60:60656] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "agX54_0vF48FbzpvQMVeTgAAAAA"]
[Fri May 15 00:35:49.334323 2026] [:error] [pid 47673:tid 47676] [client 20.226.126.60:60653] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "agX55fCGe4cIn3sh5k08vAAAAUE"]
[Fri May 15 00:35:50.394388 2026] [:error] [pid 11581:tid 11610] [client 20.226.126.60:58621] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "agX55v0vF48FbzpvQMVeUAAAAA0"]
[Fri May 15 00:35:52.141009 2026] [:error] [pid 47721:tid 47746] [client 20.226.126.60:60637] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "agX56HEmh7_G0hfOa6tEzwAAAZc"]
[Fri May 15 00:35:53.647758 2026] [:error] [pid 11581:tid 11616] [client 20.226.126.60:60634] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "agX56f0vF48FbzpvQMVeUwAAABM"]
[Fri May 15 00:35:54.840230 2026] [:error] [pid 11581:tid 11602] [client 20.226.126.60:58497] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "agX56v0vF48FbzpvQMVeVQAAAAU"]
[Fri May 15 00:35:55.879300 2026] [:error] [pid 47673:tid 47693] [client 20.226.126.60:58597] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "agX56_CGe4cIn3sh5k08vwAAAVI"]
[Fri May 15 00:35:56.865712 2026] [:error] [pid 11581:tid 11605] [client 20.226.126.60:58617] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "agX57P0vF48FbzpvQMVeVgAAAAg"]
[Fri May 15 00:35:58.137944 2026] [:error] [pid 63033:tid 63040] [client 20.226.126.60:58596] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "agX57lMY49UWn5BpqVYTSAAAAQU"]
[Fri May 15 00:35:59.393715 2026] [:error] [pid 11582:tid 11628] [client 20.226.126.60:58605] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "agX57_uw2cmFDpGcKhBFYAAAAEM"]
[Fri May 15 00:36:01.324639 2026] [:error] [pid 47721:tid 47732] [client 20.226.126.60:60671] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "agX58XEmh7_G0hfOa6tE0gAAAYk"]
[Fri May 15 00:36:02.547926 2026] [:error] [pid 11588:tid 11664] [client 20.226.126.60:58562] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "agX58tUr21rOixkeGKbPSgAAAIw"]
[Fri May 15 00:36:03.543540 2026] [:error] [pid 47721:tid 47736] [client 20.226.126.60:58528] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "agX583Emh7_G0hfOa6tE1AAAAY0"]
[Fri May 15 00:36:04.793834 2026] [:error] [pid 11581:tid 11608] [client 20.226.126.60:58607] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "agX59P0vF48FbzpvQMVeXAAAAAs"]
[Fri May 15 00:36:06.250025 2026] [:error] [pid 63033:tid 63037] [client 20.226.126.60:60627] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app.php"] [unique_id "agX59lMY49UWn5BpqVYTSgAAAQI"]
[Fri May 15 00:36:07.444834 2026] [:error] [pid 11581:tid 11611] [client 20.226.126.60:58614] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app.php"] [unique_id "agX59_0vF48FbzpvQMVeXQAAAA4"]
[Fri May 15 00:36:09.199782 2026] [:error] [pid 11581:tid 11602] [client 20.226.126.60:60608] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app.php"] [unique_id "agX5-f0vF48FbzpvQMVeXgAAAAU"]
[Fri May 15 00:36:10.216550 2026] [:error] [pid 11581:tid 11619] [client 20.226.126.60:58585] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app.php"] [unique_id "agX5-v0vF48FbzpvQMVeYAAAABY"]
[Fri May 15 00:36:11.240826 2026] [:error] [pid 63033:tid 63051] [client 20.226.126.60:60658] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "agX5-1MY49UWn5BpqVYTSwAAARA"]
[Fri May 15 00:36:12.568162 2026] [:error] [pid 11582:tid 11644] [client 20.226.126.60:60610] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "agX5_Puw2cmFDpGcKhBFYwAAAFM"]
[Fri May 15 00:36:13.819863 2026] [:error] [pid 11581:tid 11614] [client 20.226.126.60:60631] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "agX5_f0vF48FbzpvQMVeYwAAABE"]
[Fri May 15 00:36:14.769786 2026] [:error] [pid 47721:tid 47729] [client 20.226.126.60:58583] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "agX5_nEmh7_G0hfOa6tE2AAAAYY"]
[Fri May 15 00:36:15.580130 2026] [:error] [pid 11690:tid 11704] [client 20.226.126.60:58608] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file59.php"] [unique_id "agX5_ynxWuLN8Hptw8lNDgAAAMU"]
[Fri May 15 00:36:16.536814 2026] [:error] [pid 63033:tid 63041] [client 20.226.126.60:60664] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file59.php"] [unique_id "agX6AFMY49UWn5BpqVYTTgAAAQY"]
[Fri May 15 00:36:17.868351 2026] [:error] [pid 11690:tid 11702] [client 20.226.126.60:60632] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file59.php"] [unique_id "agX6ASnxWuLN8Hptw8lNEAAAAMM"]
[Fri May 15 00:36:18.920289 2026] [:error] [pid 11690:tid 11707] [client 20.226.126.60:58590] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file59.php"] [unique_id "agX6AinxWuLN8Hptw8lNEgAAAMg"]
[Fri May 15 00:36:20.011980 2026] [:error] [pid 11588:tid 11664] [client 20.226.126.60:58601] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lala.php"] [unique_id "agX6BNUr21rOixkeGKbPUgAAAIw"]
[Fri May 15 00:36:21.016757 2026] [:error] [pid 11581:tid 11602] [client 20.226.126.60:58600] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lala.php"] [unique_id "agX6Bf0vF48FbzpvQMVeZwAAAAU"]
[Fri May 15 00:36:22.030533 2026] [:error] [pid 11588:tid 11675] [client 20.226.126.60:60629] File does not exist: /usr/local/apache/htdocs/suspended-page/lala.php
[Fri May 15 00:36:22.355432 2026] [:error] [pid 11588:tid 11663] [client 20.226.126.60:60629] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-at.php
[Fri May 15 00:36:22.684805 2026] [:error] [pid 11588:tid 11674] [client 20.226.126.60:60629] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri May 15 00:36:23.028524 2026] [:error] [pid 11588:tid 11654] [client 20.226.126.60:60629] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Fri May 15 00:36:23.354411 2026] [:error] [pid 11588:tid 11661] [client 20.226.126.60:60629] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Fri May 15 00:36:23.696503 2026] [:error] [pid 11588:tid 11669] [client 20.226.126.60:60629] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri May 15 00:36:24.020809 2026] [:error] [pid 11588:tid 11670] [client 20.226.126.60:60629] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Fri May 15 00:36:24.345692 2026] [:error] [pid 11588:tid 11672] [client 20.226.126.60:60629] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Fri May 15 00:36:24.777255 2026] [:error] [pid 11588:tid 11662] [client 20.226.126.60:60629] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Fri May 15 00:36:25.100517 2026] [:error] [pid 11588:tid 11659] [client 20.226.126.60:60629] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Fri May 15 00:36:25.430694 2026] [:error] [pid 11588:tid 11656] [client 20.226.126.60:60629] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Fri May 15 00:36:25.750960 2026] [:error] [pid 11588:tid 11668] [client 20.226.126.60:60629] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "agX6CdUr21rOixkeGKbPaAAAAJA"]
[Fri May 15 00:36:26.472974 2026] [:error] [pid 63033:tid 63058] [client 20.226.126.60:58496] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "agX6ClMY49UWn5BpqVYTUgAAARc"]
[Fri May 15 00:36:27.497298 2026] [:error] [pid 11690:tid 11722] [client 20.226.126.60:58514] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "agX6CynxWuLN8Hptw8lNEwAAANc"]
[Fri May 15 00:36:28.509199 2026] [:error] [pid 11582:tid 11625] [client 20.226.126.60:58579] [client 20.226.126.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "agX6DPuw2cmFDpGcKhBFZAAAAEA"]
[Fri May 15 01:20:36.227110 2026] [:error] [pid 11581:tid 11620] [client 34.78.86.247:36646] [client 34.78.86.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "agYEZP0vF48FbzpvQMVnjwAAABc"]
[Fri May 15 01:36:42.633862 2026] [:error] [pid 11690:tid 11706] [client 34.147.228.72:59850] [client 34.147.228.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "agYIKinxWuLN8Hptw8lTfAAAAMc"]
[Fri May 15 01:36:42.645292 2026] [:error] [pid 63033:tid 63059] [client 34.147.228.72:59838] [client 34.147.228.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.docker"] [unique_id "agYIKlMY49UWn5BpqVYYNgAAARg"]
[Fri May 15 01:36:42.664823 2026] [:error] [pid 63033:tid 63047] [client 34.147.228.72:59858] [client 34.147.228.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/api/.env"] [unique_id "agYIKlMY49UWn5BpqVYYNwAAAQw"]
[Fri May 15 01:36:42.675553 2026] [:error] [pid 63033:tid 63040] [client 34.147.228.72:59872] [client 34.147.228.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.development.local"] [unique_id "agYIKlMY49UWn5BpqVYYOAAAAQU"]
[Fri May 15 01:36:42.943449 2026] [:error] [pid 63033:tid 63037] [client 34.147.228.72:59878] [client 34.147.228.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "agYIKlMY49UWn5BpqVYYOgAAAQI"]
[Fri May 15 01:36:42.944377 2026] [:error] [pid 63033:tid 63050] [client 34.147.228.72:59904] [client 34.147.228.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/app/.env"] [unique_id "agYIKlMY49UWn5BpqVYYOwAAAQ8"]
[Fri May 15 01:36:42.954370 2026] [:error] [pid 11588:tid 11669] [client 34.147.228.72:59902] [client 34.147.228.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/app/.env.local"] [unique_id "agYIKtUr21rOixkeGKbW7wAAAJE"]
[Fri May 15 01:36:42.957903 2026] [:error] [pid 11588:tid 11660] [client 34.147.228.72:59888] [client 34.147.228.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin/.env"] [unique_id "agYIKtUr21rOixkeGKbW8AAAAIg"]
[Fri May 15 01:36:42.974584 2026] [:error] [pid 11690:tid 11702] [client 34.147.228.72:59930] [client 34.147.228.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.dev"] [unique_id "agYIKinxWuLN8Hptw8lTfQAAAMM"]
[Fri May 15 01:36:42.985019 2026] [:error] [pid 11690:tid 11710] [client 34.147.228.72:59916] [client 34.147.228.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.dev.local"] [unique_id "agYIKinxWuLN8Hptw8lTfgAAAMs"]
[Fri May 15 01:49:44.487812 2026] [:error] [pid 11581:tid 11605] [client 34.32.108.18:57648] [client 34.32.108.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.dev"] [unique_id "agYLOP0vF48FbzpvQMVt-wAAAAg"]
[Fri May 15 01:49:44.490519 2026] [:error] [pid 47721:tid 47740] [client 34.32.108.18:57662] [client 34.32.108.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "agYLOHEmh7_G0hfOa6tPAgAAAZE"]
[Fri May 15 01:49:44.533962 2026] [:error] [pid 11581:tid 11597] [client 34.32.108.18:57680] [client 34.32.108.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin/.env"] [unique_id "agYLOP0vF48FbzpvQMVt_AAAAAA"]
[Fri May 15 01:49:44.549932 2026] [:error] [pid 47721:tid 47735] [client 34.32.108.18:57676] [client 34.32.108.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/app/.env"] [unique_id "agYLOHEmh7_G0hfOa6tPAwAAAYw"]
[Fri May 15 01:49:44.565653 2026] [:error] [pid 11581:tid 11610] [client 34.32.108.18:57684] [client 34.32.108.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.dev.local"] [unique_id "agYLOP0vF48FbzpvQMVt_QAAAA0"]
[Fri May 15 01:49:44.573303 2026] [:error] [pid 47721:tid 47742] [client 34.32.108.18:57690] [client 34.32.108.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.development.local"] [unique_id "agYLOHEmh7_G0hfOa6tPBAAAAZM"]
[Fri May 15 01:49:44.794267 2026] [:error] [pid 11581:tid 11602] [client 34.32.108.18:57702] [client 34.32.108.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "agYLOP0vF48FbzpvQMVt_gAAAAU"]
[Fri May 15 01:49:44.829649 2026] [:error] [pid 11581:tid 11598] [client 34.32.108.18:57718] [client 34.32.108.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/api/.env"] [unique_id "agYLOP0vF48FbzpvQMVt_wAAAAE"]
[Fri May 15 01:49:44.846428 2026] [:error] [pid 11581:tid 11619] [client 34.32.108.18:57728] [client 34.32.108.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.docker"] [unique_id "agYLOP0vF48FbzpvQMVuAAAAABY"]
[Fri May 15 01:49:44.864173 2026] [:error] [pid 47721:tid 47741] [client 34.32.108.18:57730] [client 34.32.108.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/app/.env.local"] [unique_id "agYLOHEmh7_G0hfOa6tPBQAAAZI"]
[Fri May 15 02:09:16.415834 2026] [:error] [pid 11581:tid 11601] [client 34.129.86.101:33634] [client 34.129.86.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "agYPzP0vF48FbzpvQMVx4AAAAAQ"]
[Fri May 15 02:18:29.904683 2026] [:error] [pid 11582:tid 11629] [client 34.125.195.247:55256] [client 34.125.195.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "agYR9fuw2cmFDpGcKhBLpAAAAEQ"]
[Fri May 15 11:44:05.615714 2026] [:error] [pid 1190:tid 1260] [client 35.229.145.13:51256] [client 35.229.145.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "agaWhdqiXrD7hne4gFbWDwAAAIg"]
[Fri May 15 13:55:14.985267 2026] [:error] [pid 9304:tid 9328] [client 34.175.175.1:55042] [client 34.175.175.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aga1QtzcINh7UFIbVoGCZwAAABI"]
[Fri May 15 14:48:28.714568 2026] [:error] [pid 30240:tid 30248] [client 35.242.150.223:49980] [client 35.242.150.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "agbBvK8ckHvaA6bpews-yAAAAUY"]
[Sat May 16 01:35:21.332408 2026] [:error] [pid 30272:tid 30291] [client 20.211.121.114:3557] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat May 16 01:35:21.459210 2026] [:error] [pid 30272:tid 30275] [client 20.211.121.114:3557] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat May 16 01:35:21.497842 2026] [:error] [pid 30272:tid 30296] [client 20.211.121.114:3557] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat May 16 01:35:21.545139 2026] [:error] [pid 30272:tid 30295] [client 20.211.121.114:3557] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat May 16 01:35:21.581115 2026] [:error] [pid 30272:tid 30283] [client 20.211.121.114:3557] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sat May 16 01:35:21.599881 2026] [:error] [pid 30272:tid 30280] [client 20.211.121.114:3557] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat May 16 01:35:21.619444 2026] [:error] [pid 30272:tid 30281] [client 20.211.121.114:3557] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sat May 16 01:35:21.672356 2026] [:error] [pid 30272:tid 30294] [client 20.211.121.114:3557] [client 20.211.121.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agdZWXvc_jSFaQ_7_wcqBAAAAZQ"]
[Sat May 16 01:35:21.734978 2026] [:error] [pid 30272:tid 30289] [client 20.211.121.114:3559] [client 20.211.121.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agdZWXvc_jSFaQ_7_wcqBQAAAY8"]
[Sat May 16 01:35:21.823982 2026] [:error] [pid 30272:tid 30286] [client 20.211.121.114:2693] [client 20.211.121.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agdZWXvc_jSFaQ_7_wcqBgAAAYw"]
[Sat May 16 01:35:21.887376 2026] [:error] [pid 30272:tid 30292] [client 20.211.121.114:2544] [client 20.211.121.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agdZWXvc_jSFaQ_7_wcqBwAAAZI"]
[Sat May 16 04:01:02.836921 2026] [:error] [pid 24979:tid 24999] [client 191.234.164.241:45632] File does not exist: /usr/local/apache/htdocs/suspended-page/r.php
[Sat May 16 04:01:03.175479 2026] [:error] [pid 24979:tid 25001] [client 191.234.164.241:45632] File does not exist: /usr/local/apache/htdocs/suspended-page/ight.php
[Sat May 16 04:01:03.498407 2026] [:error] [pid 24979:tid 24995] [client 191.234.164.241:45632] File does not exist: /usr/local/apache/htdocs/suspended-page/wpns.php
[Sat May 16 04:01:03.848120 2026] [:error] [pid 24979:tid 24982] [client 191.234.164.241:45632] File does not exist: /usr/local/apache/htdocs/suspended-page/er.php
[Sat May 16 04:01:04.171508 2026] [:error] [pid 24979:tid 24991] [client 191.234.164.241:45632] File does not exist: /usr/local/apache/htdocs/suspended-page/sql.php
[Sat May 16 04:01:04.829859 2026] [:error] [pid 24979:tid 24989] [client 191.234.164.241:45632] File does not exist: /usr/local/apache/htdocs/suspended-page/getir.php
[Sat May 16 04:01:05.472795 2026] [:error] [pid 24979:tid 24990] [client 191.234.164.241:45632] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat May 16 04:01:05.796444 2026] [:error] [pid 24979:tid 24993] [client 191.234.164.241:45632] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Sat May 16 04:01:06.137381 2026] [:error] [pid 24979:tid 25000] [client 191.234.164.241:45632] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "agd7grvSFUQiwLaOL2oPEAAAANM"]
[Sat May 16 04:01:07.294005 2026] [:error] [pid 24979:tid 24986] [client 191.234.164.241:45642] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "agd7g7vSFUQiwLaOL2oPEgAAAMU"]
[Sat May 16 04:01:08.711579 2026] [:error] [pid 24979:tid 25001] [client 191.234.164.241:36704] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "agd7hLvSFUQiwLaOL2oPFgAAANQ"]
[Sat May 16 04:01:10.058326 2026] [:error] [pid 24979:tid 24982] [client 191.234.164.241:36712] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "agd7hrvSFUQiwLaOL2oPGQAAAME"]
[Sat May 16 04:01:10.802067 2026] [:error] [pid 24869:tid 24921] [client 191.234.164.241:36697] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "agd7huxo3FMprMltYl7vEwAAAE0"]
[Sat May 16 04:01:11.725721 2026] [:error] [pid 24979:tid 25003] [client 191.234.164.241:45638] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "agd7h7vSFUQiwLaOL2oPHgAAANY"]
[Sat May 16 04:01:12.567489 2026] [:error] [pid 24979:tid 24986] [client 191.234.164.241:45663] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "agd7iLvSFUQiwLaOL2oPIQAAAMU"]
[Sat May 16 04:01:13.718930 2026] [:error] [pid 24979:tid 24999] [client 191.234.164.241:45677] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "agd7ibvSFUQiwLaOL2oPJwAAANI"]
[Sat May 16 04:01:14.519874 2026] [:error] [pid 24979:tid 24981] [client 191.234.164.241:45691] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "agd7irvSFUQiwLaOL2oPKAAAAMA"]
[Sat May 16 04:01:15.449041 2026] [:error] [pid 24979:tid 25002] [client 191.234.164.241:45692] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "agd7i7vSFUQiwLaOL2oPLAAAANU"]
[Sat May 16 04:01:16.578432 2026] [:error] [pid 24869:tid 24923] [client 191.234.164.241:45655] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "agd7jOxo3FMprMltYl7vFAAAAE8"]
[Sat May 16 04:01:17.736632 2026] [:error] [pid 24869:tid 24914] [client 191.234.164.241:36686] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "agd7jexo3FMprMltYl7vFQAAAEY"]
[Sat May 16 04:01:18.610101 2026] [:error] [pid 24869:tid 24928] [client 191.234.164.241:45682] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "agd7juxo3FMprMltYl7vFwAAAFQ"]
[Sat May 16 04:01:19.675762 2026] [:error] [pid 24979:tid 25001] [client 191.234.164.241:36698] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "agd7j7vSFUQiwLaOL2oPMwAAANQ"]
[Sat May 16 04:01:20.779818 2026] [:error] [pid 24874:tid 24958] [client 191.234.164.241:45681] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "agd7kMiii6x3XidYGHGIKwAAAJc"]
[Sat May 16 04:01:21.495344 2026] [:error] [pid 24867:tid 24892] [client 191.234.164.241:45679] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "agd7kSDgFLCgyKq-zmbeQQAAAAs"]
[Sat May 16 04:01:22.488869 2026] [:error] [pid 24979:tid 24988] [client 191.234.164.241:45678] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aw.php"] [unique_id "agd7krvSFUQiwLaOL2oPOgAAAMc"]
[Sat May 16 04:01:23.422006 2026] [:error] [pid 24979:tid 24991] [client 191.234.164.241:36692] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aw.php"] [unique_id "agd7k7vSFUQiwLaOL2oPPAAAAMo"]
[Sat May 16 04:01:24.674990 2026] [:error] [pid 24979:tid 24986] [client 191.234.164.241:36694] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aw.php"] [unique_id "agd7lLvSFUQiwLaOL2oPPgAAAMU"]
[Sat May 16 04:01:25.582456 2026] [:error] [pid 24867:tid 24903] [client 191.234.164.241:45665] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aw.php"] [unique_id "agd7lSDgFLCgyKq-zmbeQwAAABY"]
[Sat May 16 04:01:26.487251 2026] [:error] [pid 24867:tid 24900] [client 191.234.164.241:45637] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bb.php"] [unique_id "agd7liDgFLCgyKq-zmbeRQAAABM"]
[Sat May 16 04:01:27.264826 2026] [:error] [pid 24979:tid 24983] [client 191.234.164.241:36680] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bb.php"] [unique_id "agd7l7vSFUQiwLaOL2oPRgAAAMI"]
[Sat May 16 04:01:28.064994 2026] [:error] [pid 24979:tid 24997] [client 191.234.164.241:36717] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bb.php"] [unique_id "agd7mLvSFUQiwLaOL2oPSwAAANA"]
[Sat May 16 04:01:29.157078 2026] [:error] [pid 24874:tid 24948] [client 191.234.164.241:45647] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bb.php"] [unique_id "agd7mciii6x3XidYGHGIMQAAAI0"]
[Sat May 16 04:01:30.115063 2026] [:error] [pid 24979:tid 25005] [client 191.234.164.241:36714] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "agd7mrvSFUQiwLaOL2oPUgAAANg"]
[Sat May 16 04:01:31.054967 2026] [:error] [pid 24979:tid 24990] [client 191.234.164.241:45653] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "agd7m7vSFUQiwLaOL2oPVQAAAMk"]
[Sat May 16 04:01:34.825553 2026] [:error] [pid 24874:tid 24947] [client 191.234.164.241:36655] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "agd7nsiii6x3XidYGHGIOQAAAIw"]
[Sat May 16 04:01:36.291915 2026] [:error] [pid 24979:tid 25000] [client 191.234.164.241:36707] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "agd7oLvSFUQiwLaOL2oPXwAAANM"]
[Sat May 16 04:01:37.268606 2026] [:error] [pid 24979:tid 24985] [client 191.234.164.241:36700] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "agd7obvSFUQiwLaOL2oPYwAAAMQ"]
[Sat May 16 04:01:38.101364 2026] [:error] [pid 24979:tid 24982] [client 191.234.164.241:36673] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "agd7orvSFUQiwLaOL2oPZQAAAME"]
[Sat May 16 04:01:38.815696 2026] [:error] [pid 24874:tid 24953] [client 191.234.164.241:45685] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "agd7osiii6x3XidYGHGIOwAAAJI"]
[Sat May 16 04:01:39.873523 2026] [:error] [pid 24867:tid 24905] [client 191.234.164.241:36674] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "agd7oyDgFLCgyKq-zmbeSwAAABg"]
[Sat May 16 04:01:40.990091 2026] [:error] [pid 24867:tid 24888] [client 191.234.164.241:36706] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "agd7pCDgFLCgyKq-zmbeTAAAAAc"]
[Sat May 16 04:01:41.787352 2026] [:error] [pid 24867:tid 24894] [client 191.234.164.241:45688] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "agd7pSDgFLCgyKq-zmbeTgAAAA0"]
[Sat May 16 04:01:42.665479 2026] [:error] [pid 24979:tid 24998] [client 191.234.164.241:45693] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "agd7prvSFUQiwLaOL2oPbQAAANE"]
[Sat May 16 04:01:43.677586 2026] [:error] [pid 24869:tid 24917] [client 191.234.164.241:45669] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "agd7p-xo3FMprMltYl7vKAAAAEk"]
[Sat May 16 04:01:44.565937 2026] [:error] [pid 24874:tid 24943] [client 191.234.164.241:45639] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "agd7qMiii6x3XidYGHGIPQAAAIg"]
[Sat May 16 04:01:45.388458 2026] [:error] [pid 24874:tid 24947] [client 191.234.164.241:36689] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "agd7qciii6x3XidYGHGIPgAAAIw"]
[Sat May 16 04:01:46.335146 2026] [:error] [pid 24979:tid 25005] [client 191.234.164.241:36684] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "agd7qrvSFUQiwLaOL2oPcQAAANg"]
[Sat May 16 04:01:47.246733 2026] [:error] [pid 24979:tid 24993] [client 191.234.164.241:45666] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "agd7q7vSFUQiwLaOL2oPdAAAAMw"]
[Sat May 16 04:01:48.099441 2026] [:error] [pid 24869:tid 24932] [client 191.234.164.241:45680] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "agd7rOxo3FMprMltYl7vLAAAAFg"]
[Sat May 16 04:01:48.969476 2026] [:error] [pid 24979:tid 24987] [client 191.234.164.241:45660] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "agd7rLvSFUQiwLaOL2oPdwAAAMY"]
[Sat May 16 04:01:49.870574 2026] [:error] [pid 24874:tid 24955] [client 191.234.164.241:36613] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "agd7rciii6x3XidYGHGIRAAAAJQ"]
[Sat May 16 04:01:50.791834 2026] [:error] [pid 24869:tid 24929] [client 191.234.164.241:45695] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "agd7ruxo3FMprMltYl7vMAAAAFU"]
[Sat May 16 04:01:51.650975 2026] [:error] [pid 24979:tid 24989] [client 191.234.164.241:45634] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "agd7r7vSFUQiwLaOL2oPeAAAAMg"]
[Sat May 16 04:01:52.552098 2026] [:error] [pid 24979:tid 25000] [client 191.234.164.241:36718] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "agd7sLvSFUQiwLaOL2oPfAAAANM"]
[Sat May 16 04:01:53.347200 2026] [:error] [pid 24874:tid 24940] [client 191.234.164.241:45650] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "agd7sciii6x3XidYGHGISQAAAIU"]
[Sat May 16 04:01:54.066824 2026] [:error] [pid 24874:tid 24942] [client 191.234.164.241:45694] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "agd7ssiii6x3XidYGHGISwAAAIc"]
[Sat May 16 04:01:55.062808 2026] [:error] [pid 24979:tid 24982] [client 191.234.164.241:36621] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/php8.php"] [unique_id "agd7s7vSFUQiwLaOL2oPfwAAAME"]
[Sat May 16 04:01:55.933016 2026] [:error] [pid 24979:tid 24988] [client 191.234.164.241:36685] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/php8.php"] [unique_id "agd7s7vSFUQiwLaOL2oPgQAAAMc"]
[Sat May 16 04:01:56.625286 2026] [:error] [pid 24874:tid 24958] [client 191.234.164.241:36662] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/php8.php"] [unique_id "agd7tMiii6x3XidYGHGITwAAAJc"]
[Sat May 16 04:01:57.466479 2026] [:error] [pid 24874:tid 24937] [client 191.234.164.241:45671] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/php8.php"] [unique_id "agd7tciii6x3XidYGHGIUQAAAII"]
[Sat May 16 04:01:58.342335 2026] [:error] [pid 24867:tid 24891] [client 191.234.164.241:36675] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "agd7tiDgFLCgyKq-zmbeVwAAAAo"]
[Sat May 16 04:01:59.028830 2026] [:error] [pid 24867:tid 24889] [client 191.234.164.241:36711] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "agd7tyDgFLCgyKq-zmbeWQAAAAg"]
[Sat May 16 04:01:59.992413 2026] [:error] [pid 24867:tid 24892] [client 191.234.164.241:45649] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "agd7tyDgFLCgyKq-zmbeXQAAAAs"]
[Sat May 16 04:02:01.438430 2026] [:error] [pid 24979:tid 25001] [client 191.234.164.241:36614] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "agd7ubvSFUQiwLaOL2oPiAAAANQ"]
[Sat May 16 04:02:02.575360 2026] [:error] [pid 24867:tid 24900] [client 191.234.164.241:36703] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "agd7uiDgFLCgyKq-zmbeYgAAABM"]
[Sat May 16 04:02:03.283412 2026] [:error] [pid 24979:tid 25002] [client 191.234.164.241:45676] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "agd7u7vSFUQiwLaOL2oPiQAAANU"]
[Sat May 16 04:02:03.963407 2026] [:error] [pid 24979:tid 24993] [client 191.234.164.241:36693] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "agd7u7vSFUQiwLaOL2oPigAAAMw"]
[Sat May 16 04:02:04.823249 2026] [:error] [pid 24979:tid 24994] [client 191.234.164.241:36699] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "agd7vLvSFUQiwLaOL2oPjAAAAM0"]
[Sat May 16 04:02:05.560764 2026] [:error] [pid 24979:tid 24997] [client 191.234.164.241:36664] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Sat May 16 04:02:05.897893 2026] [:error] [pid 24979:tid 24981] [client 191.234.164.241:36664] File does not exist: /usr/local/apache/htdocs/suspended-page/load.php
[Sat May 16 04:02:06.264749 2026] [:error] [pid 24979:tid 24986] [client 191.234.164.241:36664] File does not exist: /usr/local/apache/htdocs/suspended-page/166.php
[Sat May 16 04:02:06.602470 2026] [:error] [pid 24979:tid 24983] [client 191.234.164.241:36664] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Sat May 16 04:02:07.619866 2026] [:error] [pid 24979:tid 24992] [client 191.234.164.241:36664] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sat May 16 04:02:07.956722 2026] [:error] [pid 24979:tid 24995] [client 191.234.164.241:36664] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX2.php
[Sat May 16 04:02:08.290280 2026] [:error] [pid 24979:tid 24998] [client 191.234.164.241:36664] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php
[Sat May 16 04:02:08.625023 2026] [:error] [pid 24979:tid 24996] [client 191.234.164.241:36664] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Sat May 16 04:02:08.960665 2026] [:error] [pid 24979:tid 24982] [client 191.234.164.241:36664] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Sat May 16 04:02:09.293493 2026] [:error] [pid 24979:tid 24988] [client 191.234.164.241:36664] File does not exist: /usr/local/apache/htdocs/suspended-page/app.php
[Sat May 16 04:02:09.623923 2026] [:error] [pid 24979:tid 24994] [client 191.234.164.241:36664] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buy.php"] [unique_id "agd7wbvSFUQiwLaOL2oPngAAAM0"]
[Sat May 16 04:02:10.578877 2026] [:error] [pid 24979:tid 24989] [client 191.234.164.241:36727] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buy.php"] [unique_id "agd7wrvSFUQiwLaOL2oPoAAAAMg"]
[Sat May 16 04:02:11.276806 2026] [:error] [pid 24979:tid 24983] [client 191.234.164.241:36723] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buy.php"] [unique_id "agd7w7vSFUQiwLaOL2oPoQAAAMI"]
[Sat May 16 04:02:12.125367 2026] [:error] [pid 24979:tid 24990] [client 191.234.164.241:45644] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buy.php"] [unique_id "agd7xLvSFUQiwLaOL2oPowAAAMk"]
[Sat May 16 04:02:12.896335 2026] [:error] [pid 24874:tid 24952] [client 191.234.164.241:45664] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/core.php"] [unique_id "agd7xMiii6x3XidYGHGIWAAAAJE"]
[Sat May 16 04:02:13.684613 2026] [:error] [pid 24874:tid 24936] [client 191.234.164.241:36681] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/core.php"] [unique_id "agd7xciii6x3XidYGHGIWwAAAIE"]
[Sat May 16 04:02:14.464936 2026] [:error] [pid 24869:tid 24915] [client 191.234.164.241:36691] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/core.php"] [unique_id "agd7xuxo3FMprMltYl7vOgAAAEc"]
[Sat May 16 04:02:15.169688 2026] [:error] [pid 24874:tid 24949] [client 191.234.164.241:36639] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/core.php"] [unique_id "agd7x8iii6x3XidYGHGIXQAAAI4"]
[Sat May 16 04:02:15.845793 2026] [:error] [pid 24979:tid 24981] [client 191.234.164.241:45635] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "agd7x7vSFUQiwLaOL2oPqAAAAMA"]
[Sat May 16 04:02:16.957606 2026] [:error] [pid 24874:tid 24957] [client 191.234.164.241:36634] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "agd7yMiii6x3XidYGHGIYQAAAJY"]
[Sat May 16 04:02:17.687052 2026] [:error] [pid 24874:tid 24946] [client 191.234.164.241:36731] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "agd7yciii6x3XidYGHGIYgAAAIs"]
[Sat May 16 04:02:18.573018 2026] [:error] [pid 24979:tid 25000] [client 191.234.164.241:45643] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "agd7yrvSFUQiwLaOL2oPrAAAANM"]
[Sat May 16 04:02:19.707975 2026] [:error] [pid 24979:tid 24995] [client 191.234.164.241:45662] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "agd7y7vSFUQiwLaOL2oPrgAAAM4"]
[Sat May 16 04:02:20.444007 2026] [:error] [pid 24874:tid 24959] [client 191.234.164.241:45645] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "agd7zMiii6x3XidYGHGIZQAAAJg"]
[Sat May 16 04:02:21.133155 2026] [:error] [pid 24867:tid 24903] [client 191.234.164.241:36695] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "agd7zSDgFLCgyKq-zmbeaAAAABY"]
[Sat May 16 04:02:21.851892 2026] [:error] [pid 24874:tid 24948] [client 191.234.164.241:36677] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "agd7zciii6x3XidYGHGIagAAAI0"]
[Sat May 16 04:02:22.667065 2026] [:error] [pid 24869:tid 24910] [client 191.234.164.241:45690] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "agd7zuxo3FMprMltYl7vOwAAAEI"]
[Sat May 16 04:02:23.771854 2026] [:error] [pid 24979:tid 24994] [client 191.234.164.241:36708] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "agd7z7vSFUQiwLaOL2oPsQAAAM0"]
[Sat May 16 04:02:25.008427 2026] [:error] [pid 24979:tid 25003] [client 191.234.164.241:45684] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "agd70bvSFUQiwLaOL2oPtQAAANY"]
[Sat May 16 04:02:25.835735 2026] [:error] [pid 24869:tid 24924] [client 191.234.164.241:36647] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "agd70exo3FMprMltYl7vQAAAAFA"]
[Sat May 16 04:02:26.753401 2026] [:error] [pid 24867:tid 24900] [client 191.234.164.241:36721] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "agd70iDgFLCgyKq-zmbeawAAABM"]
[Sat May 16 04:02:27.726423 2026] [:error] [pid 24874:tid 24936] [client 191.234.164.241:36419] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "agd708iii6x3XidYGHGIcQAAAIE"]
[Sat May 16 04:02:28.685363 2026] [:error] [pid 24867:tid 24904] [client 191.234.164.241:36642] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "agd71CDgFLCgyKq-zmbecAAAABc"]
[Sat May 16 04:02:29.552210 2026] [:error] [pid 24867:tid 24895] [client 191.234.164.241:36710] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "agd71SDgFLCgyKq-zmbecgAAAA4"]
[Sat May 16 04:02:30.777324 2026] [:error] [pid 24869:tid 24917] [client 191.234.164.241:36726] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "agd71uxo3FMprMltYl7vQwAAAEk"]
[Sat May 16 04:02:31.590123 2026] [:error] [pid 24869:tid 24922] [client 191.234.164.241:36626] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "agd71-xo3FMprMltYl7vRgAAAE4"]
[Sat May 16 04:02:32.686350 2026] [:error] [pid 24867:tid 24897] [client 191.234.164.241:45652] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "agd72CDgFLCgyKq-zmbedwAAABA"]
[Sat May 16 04:02:33.422035 2026] [:error] [pid 24869:tid 24918] [client 191.234.164.241:36709] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "agd72exo3FMprMltYl7vSwAAAEo"]
[Sat May 16 04:02:34.093524 2026] [:error] [pid 24979:tid 24982] [client 191.234.164.241:36713] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "agd72rvSFUQiwLaOL2oPtwAAAME"]
[Sat May 16 04:02:35.049621 2026] [:error] [pid 24979:tid 24987] [client 191.234.164.241:36715] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "agd727vSFUQiwLaOL2oPuAAAAMY"]
[Sat May 16 04:02:35.719963 2026] [:error] [pid 24979:tid 25004] [client 191.234.164.241:36690] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "agd727vSFUQiwLaOL2oPugAAANc"]
[Sat May 16 04:02:36.464683 2026] [:error] [pid 24867:tid 24904] [client 191.234.164.241:36669] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "agd73CDgFLCgyKq-zmbeegAAABc"]
[Sat May 16 04:02:37.237035 2026] [:error] [pid 24979:tid 24997] [client 191.234.164.241:36663] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agd73bvSFUQiwLaOL2oPvQAAANA"]
[Sat May 16 04:02:37.996653 2026] [:error] [pid 24979:tid 24984] [client 191.234.164.241:36635] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agd73bvSFUQiwLaOL2oPwAAAAMM"]
[Sat May 16 04:02:38.693301 2026] [:error] [pid 24979:tid 24986] [client 191.234.164.241:36679] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agd73rvSFUQiwLaOL2oPwgAAAMU"]
[Sat May 16 04:02:39.627931 2026] [:error] [pid 24979:tid 24989] [client 191.234.164.241:36638] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agd737vSFUQiwLaOL2oPwwAAAMg"]
[Sat May 16 04:02:40.426176 2026] [:error] [pid 24874:tid 24956] [client 191.234.164.241:36682] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index0.php"] [unique_id "agd74Miii6x3XidYGHGIdQAAAJU"]
[Sat May 16 04:02:41.300325 2026] [:error] [pid 24979:tid 24991] [client 191.234.164.241:36633] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index0.php"] [unique_id "agd74bvSFUQiwLaOL2oPxQAAAMo"]
[Sat May 16 04:02:42.069788 2026] [:error] [pid 24867:tid 24884] [client 191.234.164.241:36733] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index0.php"] [unique_id "agd74iDgFLCgyKq-zmbegQAAAAM"]
[Sat May 16 04:02:42.966173 2026] [:error] [pid 24867:tid 24886] [client 191.234.164.241:36722] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index0.php"] [unique_id "agd74iDgFLCgyKq-zmbehgAAAAU"]
[Sat May 16 04:02:44.070715 2026] [:error] [pid 24979:tid 25003] [client 191.234.164.241:45656] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "agd75LvSFUQiwLaOL2oPyQAAANY"]
[Sat May 16 04:02:44.948047 2026] [:error] [pid 24979:tid 24997] [client 191.234.164.241:36629] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "agd75LvSFUQiwLaOL2oPywAAANA"]
[Sat May 16 04:02:45.974611 2026] [:error] [pid 24979:tid 25005] [client 191.234.164.241:36632] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "agd75bvSFUQiwLaOL2oPzgAAANg"]
[Sat May 16 04:02:47.094310 2026] [:error] [pid 24979:tid 24983] [client 191.234.164.241:36617] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "agd757vSFUQiwLaOL2oP0QAAAMI"]
[Sat May 16 04:02:48.479282 2026] [:error] [pid 24979:tid 25004] [client 191.234.164.241:36653] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "agd76LvSFUQiwLaOL2oP1AAAANc"]
[Sat May 16 04:02:49.600143 2026] [:error] [pid 24979:tid 25005] [client 191.234.164.241:45633] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "agd76bvSFUQiwLaOL2oP2QAAANg"]
[Sat May 16 04:02:50.414750 2026] [:error] [pid 24979:tid 24993] [client 191.234.164.241:36640] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "agd76rvSFUQiwLaOL2oP3AAAAMw"]
[Sat May 16 04:02:51.672543 2026] [:error] [pid 24979:tid 24985] [client 191.234.164.241:45651] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "agd767vSFUQiwLaOL2oP3gAAAMQ"]
[Sat May 16 04:02:52.634785 2026] [:error] [pid 24874:tid 24935] [client 191.234.164.241:36654] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "agd77Miii6x3XidYGHGIegAAAIA"]
[Sat May 16 04:02:53.754482 2026] [:error] [pid 24867:tid 24886] [client 191.234.164.241:36446] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "agd77SDgFLCgyKq-zmbejQAAAAU"]
[Sat May 16 04:02:54.610332 2026] [:error] [pid 24874:tid 24945] [client 191.234.164.241:45648] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "agd77siii6x3XidYGHGIfAAAAIo"]
[Sat May 16 04:02:55.376470 2026] [:error] [pid 24867:tid 24885] [client 191.234.164.241:36619] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "agd77yDgFLCgyKq-zmbekQAAAAQ"]
[Sat May 16 04:02:56.479927 2026] [:error] [pid 24874:tid 24956] [client 191.234.164.241:36618] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "agd78Miii6x3XidYGHGIfwAAAJU"]
[Sat May 16 04:02:57.356060 2026] [:error] [pid 24979:tid 24982] [client 191.234.164.241:36637] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "agd78bvSFUQiwLaOL2oP4QAAAME"]
[Sat May 16 04:02:58.870444 2026] [:error] [pid 24869:tid 24915] [client 191.234.164.241:45658] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "agd78uxo3FMprMltYl7vUQAAAEc"]
[Sat May 16 04:02:59.814303 2026] [:error] [pid 24874:tid 24957] [client 191.234.164.241:36463] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "agd788iii6x3XidYGHGIgQAAAJY"]
[Sat May 16 04:03:00.831811 2026] [:error] [pid 24979:tid 25003] [client 191.234.164.241:36611] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "agd79LvSFUQiwLaOL2oP5wAAANY"]
[Sat May 16 04:03:01.959001 2026] [:error] [pid 24979:tid 25000] [client 191.234.164.241:36620] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "agd79bvSFUQiwLaOL2oP6QAAANM"]
[Sat May 16 04:03:02.748504 2026] [:error] [pid 24874:tid 24954] [client 191.234.164.241:36666] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "agd79siii6x3XidYGHGIhQAAAJM"]
[Sat May 16 04:03:03.839759 2026] [:error] [pid 24979:tid 24996] [client 191.234.164.241:36375] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "agd797vSFUQiwLaOL2oP6wAAAM8"]
[Sat May 16 04:03:04.823698 2026] [:error] [pid 24869:tid 24927] [client 191.234.164.241:45636] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "agd7-Oxo3FMprMltYl7vVAAAAFM"]
[Sat May 16 04:03:05.579037 2026] [:error] [pid 24979:tid 25004] [client 191.234.164.241:36650] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "agd7-bvSFUQiwLaOL2oP8AAAANc"]
[Sat May 16 04:03:06.290217 2026] [:error] [pid 24979:tid 25005] [client 191.234.164.241:36672] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "agd7-rvSFUQiwLaOL2oP8gAAANg"]
[Sat May 16 04:03:07.033660 2026] [:error] [pid 24874:tid 24943] [client 191.234.164.241:36472] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "agd7-8iii6x3XidYGHGIjAAAAIg"]
[Sat May 16 04:03:08.009889 2026] [:error] [pid 24874:tid 24950] [client 191.234.164.241:45674] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "agd7_Miii6x3XidYGHGIkAAAAI8"]
[Sat May 16 04:03:08.747367 2026] [:error] [pid 24867:tid 24902] [client 191.234.164.241:36427] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "agd7_CDgFLCgyKq-zmbemgAAABU"]
[Sat May 16 04:03:09.522885 2026] [:error] [pid 24869:tid 24918] [client 191.234.164.241:36465] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Sat May 16 04:03:09.849451 2026] [:error] [pid 24869:tid 24919] [client 191.234.164.241:36465] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Sat May 16 04:03:10.192753 2026] [:error] [pid 24869:tid 24913] [client 191.234.164.241:36465] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Sat May 16 04:03:10.536005 2026] [:error] [pid 24869:tid 24915] [client 191.234.164.241:36465] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Sat May 16 04:03:10.867948 2026] [:error] [pid 24869:tid 24909] [client 191.234.164.241:36465] File does not exist: /usr/local/apache/htdocs/suspended-page/xff.php
[Sat May 16 04:03:11.227449 2026] [:error] [pid 24869:tid 24931] [client 191.234.164.241:36465] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Sat May 16 04:03:11.555249 2026] [:error] [pid 24869:tid 24932] [client 191.234.164.241:36465] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Sat May 16 04:03:11.896610 2026] [:error] [pid 24869:tid 24908] [client 191.234.164.241:36465] File does not exist: /usr/local/apache/htdocs/suspended-page/son.php
[Sat May 16 04:03:12.250707 2026] [:error] [pid 24869:tid 24911] [client 191.234.164.241:36465] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sat May 16 04:03:12.580285 2026] [:error] [pid 24869:tid 24927] [client 191.234.164.241:36465] File does not exist: /usr/local/apache/htdocs/suspended-page/zo.php
[Sat May 16 04:03:12.910517 2026] [:error] [pid 24869:tid 24914] [client 191.234.164.241:36465] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Sat May 16 04:03:13.238351 2026] [:error] [pid 24869:tid 24912] [client 191.234.164.241:36465] [client 191.234.164.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "agd8Aexo3FMprMltYl7vaQAAAEQ"]
[Sat May 16 04:03:13.896973 2026] [:error] [pid 24867:tid 24904] [client 191.234.164.241:36421] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/s1.php"] [unique_id "agd8ASDgFLCgyKq-zmbengAAABc"]
[Sat May 16 04:03:14.602360 2026] [:error] [pid 24874:tid 24950] [client 191.234.164.241:45649] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/s1.php"] [unique_id "agd8Asiii6x3XidYGHGImAAAAI8"]
[Sat May 16 04:03:15.459253 2026] [:error] [pid 24979:tid 24986] [client 191.234.164.241:36418] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/s1.php"] [unique_id "agd8A7vSFUQiwLaOL2oP_gAAAMU"]
[Sat May 16 04:03:16.306839 2026] [:error] [pid 24979:tid 24985] [client 191.234.164.241:36434] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/s1.php"] [unique_id "agd8BLvSFUQiwLaOL2oQAAAAAMQ"]
[Sat May 16 04:03:17.046809 2026] [:error] [pid 24979:tid 24997] [client 191.234.164.241:36636] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "agd8BbvSFUQiwLaOL2oQAwAAANA"]
[Sat May 16 04:03:17.915415 2026] [:error] [pid 24869:tid 24916] [client 191.234.164.241:36701] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "agd8Bexo3FMprMltYl7veAAAAEg"]
[Sat May 16 04:03:18.606399 2026] [:error] [pid 24867:tid 24899] [client 191.234.164.241:45673] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "agd8BiDgFLCgyKq-zmbeogAAABI"]
[Sat May 16 04:03:19.545777 2026] [:error] [pid 24979:tid 24981] [client 191.234.164.241:45675] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "agd8B7vSFUQiwLaOL2oQHwAAAMA"]
[Sat May 16 04:03:20.552841 2026] [:error] [pid 24979:tid 24988] [client 191.234.164.241:45670] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1a.php"] [unique_id "agd8CLvSFUQiwLaOL2oQLwAAAMc"]
[Sat May 16 04:03:21.445200 2026] [:error] [pid 24979:tid 24983] [client 191.234.164.241:36688] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1a.php"] [unique_id "agd8CbvSFUQiwLaOL2oQMwAAAMI"]
[Sat May 16 04:03:22.247209 2026] [:error] [pid 24979:tid 25004] [client 191.234.164.241:45683] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1a.php"] [unique_id "agd8CrvSFUQiwLaOL2oQNQAAANc"]
[Sat May 16 04:03:23.015642 2026] [:error] [pid 24869:tid 24920] [client 191.234.164.241:36631] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/1a.php"] [unique_id "agd8C-xo3FMprMltYl7vggAAAEw"]
[Sat May 16 04:03:23.884034 2026] [:error] [pid 24869:tid 24927] [client 191.234.164.241:36720] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "agd8C-xo3FMprMltYl7vhgAAAFM"]
[Sat May 16 04:03:24.737384 2026] [:error] [pid 24979:tid 24992] [client 191.234.164.241:45687] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "agd8DLvSFUQiwLaOL2oQOAAAAMs"]
[Sat May 16 04:03:25.614303 2026] [:error] [pid 24867:tid 24884] [client 191.234.164.241:36384] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "agd8DSDgFLCgyKq-zmbepQAAAAM"]
[Sat May 16 04:03:26.382571 2026] [:error] [pid 24867:tid 24886] [client 191.234.164.241:36667] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "agd8DiDgFLCgyKq-zmbeqAAAAAU"]
[Sat May 16 04:03:27.156323 2026] [:error] [pid 24869:tid 24919] [client 191.234.164.241:36734] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "agd8D-xo3FMprMltYl7viAAAAEs"]
[Sat May 16 04:03:27.819784 2026] [:error] [pid 24869:tid 24913] [client 191.234.164.241:36705] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "agd8D-xo3FMprMltYl7vigAAAEU"]
[Sat May 16 04:03:28.882214 2026] [:error] [pid 24874:tid 24950] [client 191.234.164.241:36442] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "agd8EMiii6x3XidYGHGIqwAAAI8"]
[Sat May 16 04:03:29.796036 2026] [:error] [pid 24979:tid 24987] [client 191.234.164.241:36610] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "agd8EbvSFUQiwLaOL2oQPAAAAMY"]
[Sat May 16 04:03:30.492214 2026] [:error] [pid 24979:tid 24983] [client 191.234.164.241:36612] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "agd8ErvSFUQiwLaOL2oQPgAAAMI"]
[Sat May 16 04:03:31.615628 2026] [:error] [pid 24869:tid 24925] [client 191.234.164.241:45640] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "agd8E-xo3FMprMltYl7vjgAAAFE"]
[Sat May 16 04:03:32.535958 2026] [:error] [pid 24867:tid 24885] [client 191.234.164.241:36445] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "agd8FCDgFLCgyKq-zmbetAAAAAQ"]
[Sat May 16 04:03:33.603649 2026] [:error] [pid 24979:tid 24987] [client 191.234.164.241:36649] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "agd8FbvSFUQiwLaOL2oQSgAAAMY"]
[Sat May 16 04:03:34.806989 2026] [:error] [pid 24874:tid 24935] [client 191.234.164.241:36615] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "agd8Fsiii6x3XidYGHGIswAAAIA"]
[Sat May 16 04:03:35.947274 2026] [:error] [pid 24979:tid 24982] [client 191.234.164.241:36644] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "agd8F7vSFUQiwLaOL2oQTAAAAME"]
[Sat May 16 04:03:37.029772 2026] [:error] [pid 24869:tid 24924] [client 191.234.164.241:36420] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "agd8Gexo3FMprMltYl7vlgAAAFA"]
[Sat May 16 04:03:37.810941 2026] [:error] [pid 24869:tid 24925] [client 191.234.164.241:36431] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "agd8Gexo3FMprMltYl7vmQAAAFE"]
[Sat May 16 04:03:38.649930 2026] [:error] [pid 24874:tid 24955] [client 191.234.164.241:36627] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "agd8Gsiii6x3XidYGHGIuQAAAJQ"]
[Sat May 16 04:03:39.387529 2026] [:error] [pid 24874:tid 24954] [client 191.234.164.241:36451] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "agd8G8iii6x3XidYGHGIvAAAAJM"]
[Sat May 16 04:03:40.634819 2026] [:error] [pid 24874:tid 24947] [client 191.234.164.241:36475] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "agd8HMiii6x3XidYGHGIwQAAAIw"]
[Sat May 16 04:03:41.893613 2026] [:error] [pid 24869:tid 24917] [client 191.234.164.241:36432] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "agd8Hexo3FMprMltYl7vqAAAAEk"]
[Sat May 16 04:03:42.660883 2026] [:error] [pid 24874:tid 24943] [client 191.234.164.241:36625] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agd8Hsiii6x3XidYGHGIzAAAAIg"]
[Sat May 16 04:03:43.466387 2026] [:error] [pid 24979:tid 25005] [client 191.234.164.241:36353] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agd8H7vSFUQiwLaOL2oQWAAAANg"]
[Sat May 16 04:03:44.411986 2026] [:error] [pid 24979:tid 24984] [client 191.234.164.241:45646] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agd8ILvSFUQiwLaOL2oQXQAAAMM"]
[Sat May 16 04:03:45.172158 2026] [:error] [pid 24869:tid 24924] [client 191.234.164.241:45659] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agd8Iexo3FMprMltYl7vuQAAAFA"]
[Sat May 16 04:03:45.888380 2026] [:error] [pid 24874:tid 24939] [client 191.234.164.241:36417] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "agd8Iciii6x3XidYGHGI0AAAAIQ"]
[Sat May 16 04:03:46.596208 2026] [:error] [pid 24979:tid 24987] [client 191.234.164.241:45672] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "agd8IrvSFUQiwLaOL2oQYwAAAMY"]
[Sat May 16 04:03:47.353399 2026] [:error] [pid 24869:tid 24922] [client 191.234.164.241:36390] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "agd8I-xo3FMprMltYl7vxgAAAE4"]
[Sat May 16 04:03:48.123175 2026] [:error] [pid 24874:tid 24937] [client 191.234.164.241:36403] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "agd8JMiii6x3XidYGHGI1AAAAII"]
[Sat May 16 04:03:49.134484 2026] [:error] [pid 24979:tid 24988] [client 191.234.164.241:36376] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "agd8JbvSFUQiwLaOL2oQaQAAAMc"]
[Sat May 16 04:03:49.847267 2026] [:error] [pid 24874:tid 24939] [client 191.234.164.241:36457] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "agd8Jciii6x3XidYGHGI2wAAAIQ"]
[Sat May 16 04:03:50.757488 2026] [:error] [pid 24979:tid 24985] [client 191.234.164.241:45667] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "agd8JrvSFUQiwLaOL2oQcAAAAMQ"]
[Sat May 16 04:03:51.498516 2026] [:error] [pid 24869:tid 24920] [client 191.234.164.241:36448] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "agd8J-xo3FMprMltYl7v1QAAAEw"]
[Sat May 16 04:03:52.245069 2026] [:error] [pid 24979:tid 24986] [client 191.234.164.241:36458] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "agd8KLvSFUQiwLaOL2oQcwAAAMU"]
[Sat May 16 04:03:53.015511 2026] [:error] [pid 24979:tid 24990] [client 191.234.164.241:36455] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "agd8KbvSFUQiwLaOL2oQdgAAAMk"]
[Sat May 16 04:03:53.836361 2026] [:error] [pid 24979:tid 24997] [client 191.234.164.241:36441] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "agd8KbvSFUQiwLaOL2oQegAAANA"]
[Sat May 16 04:03:54.785040 2026] [:error] [pid 24867:tid 24895] [client 191.234.164.241:36356] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "agd8KiDgFLCgyKq-zmbexgAAAA4"]
[Sat May 16 04:03:55.659306 2026] [:error] [pid 24867:tid 24884] [client 191.234.164.241:36729] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "agd8KyDgFLCgyKq-zmbeyAAAAAM"]
[Sat May 16 04:03:56.561638 2026] [:error] [pid 24979:tid 24995] [client 191.234.164.241:36380] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "agd8LLvSFUQiwLaOL2oQfQAAAM4"]
[Sat May 16 04:03:57.285971 2026] [:error] [pid 24867:tid 24887] [client 191.234.164.241:36622] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "agd8LSDgFLCgyKq-zmbeywAAAAY"]
[Sat May 16 04:03:58.281541 2026] [:error] [pid 24874:tid 24956] [client 191.234.164.241:36696] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "agd8Lsiii6x3XidYGHGI4gAAAJU"]
[Sat May 16 04:03:59.111249 2026] [:error] [pid 24867:tid 24881] [client 191.234.164.241:36450] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zdd.php"] [unique_id "agd8LyDgFLCgyKq-zmbezQAAAAA"]
[Sat May 16 04:04:00.127897 2026] [:error] [pid 24979:tid 24985] [client 191.234.164.241:36367] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zdd.php"] [unique_id "agd8MLvSFUQiwLaOL2oQhQAAAMQ"]
[Sat May 16 04:04:00.879854 2026] [:error] [pid 24867:tid 24882] [client 191.234.164.241:36429] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zdd.php"] [unique_id "agd8MCDgFLCgyKq-zmbe0QAAAAE"]
[Sat May 16 04:04:01.802040 2026] [:error] [pid 24869:tid 24920] [client 191.234.164.241:36426] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/zdd.php"] [unique_id "agd8Mexo3FMprMltYl7v3gAAAEw"]
[Sat May 16 04:04:02.770063 2026] [:error] [pid 24979:tid 24986] [client 191.234.164.241:36459] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "agd8MrvSFUQiwLaOL2oQiAAAAMU"]
[Sat May 16 04:04:03.483819 2026] [:error] [pid 24979:tid 25000] [client 191.234.164.241:36439] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "agd8M7vSFUQiwLaOL2oQiQAAANM"]
[Sat May 16 04:04:04.158133 2026] [:error] [pid 24979:tid 24988] [client 191.234.164.241:36628] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "agd8NLvSFUQiwLaOL2oQjAAAAMc"]
[Sat May 16 04:04:05.061967 2026] [:error] [pid 24867:tid 24897] [client 191.234.164.241:36713] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "agd8NSDgFLCgyKq-zmbe1wAAABA"]
[Sat May 16 04:04:05.899284 2026] [:error] [pid 24867:tid 24895] [client 191.234.164.241:36676] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "agd8NSDgFLCgyKq-zmbe2wAAAA4"]
[Sat May 16 04:04:06.967485 2026] [:error] [pid 24979:tid 24995] [client 191.234.164.241:36735] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "agd8NrvSFUQiwLaOL2oQkwAAAM4"]
[Sat May 16 04:04:07.635707 2026] [:error] [pid 24979:tid 24996] [client 191.234.164.241:36678] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "agd8N7vSFUQiwLaOL2oQlQAAAM8"]
[Sat May 16 04:04:08.423957 2026] [:error] [pid 24867:tid 24882] [client 191.234.164.241:36645] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "agd8OCDgFLCgyKq-zmbe4QAAAAE"]
[Sat May 16 04:04:09.128180 2026] [:error] [pid 24979:tid 25003] [client 191.234.164.241:36436] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "agd8ObvSFUQiwLaOL2oQmgAAANY"]
[Sat May 16 04:04:09.999866 2026] [:error] [pid 24979:tid 24991] [client 191.234.164.241:36608] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "agd8ObvSFUQiwLaOL2oQnwAAAMo"]
[Sat May 16 04:04:10.776647 2026] [:error] [pid 24869:tid 24920] [client 191.234.164.241:45657] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "agd8Ouxo3FMprMltYl7v6gAAAEw"]
[Sat May 16 04:04:11.481647 2026] [:error] [pid 24979:tid 24983] [client 191.234.164.241:36702] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "agd8O7vSFUQiwLaOL2oQpgAAAMI"]
[Sat May 16 04:04:12.174200 2026] [:error] [pid 24979:tid 24985] [client 191.234.164.241:36660] File does not exist: /usr/local/apache/htdocs/suspended-page/ayk.php
[Sat May 16 04:04:12.552033 2026] [:error] [pid 24979:tid 24998] [client 191.234.164.241:36660] File does not exist: /usr/local/apache/htdocs/suspended-page/one.php
[Sat May 16 04:04:12.886297 2026] [:error] [pid 24979:tid 24993] [client 191.234.164.241:36660] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Sat May 16 04:04:13.219097 2026] [:error] [pid 24979:tid 24997] [client 191.234.164.241:36660] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sat May 16 04:04:13.598563 2026] [:error] [pid 24979:tid 24991] [client 191.234.164.241:36660] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sat May 16 04:04:13.936305 2026] [:error] [pid 24979:tid 24982] [client 191.234.164.241:36660] File does not exist: /usr/local/apache/htdocs/suspended-page/options.php
[Sat May 16 04:04:14.269381 2026] [:error] [pid 24979:tid 24999] [client 191.234.164.241:36660] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php
[Sat May 16 04:04:14.611450 2026] [:error] [pid 24979:tid 24987] [client 191.234.164.241:36660] File does not exist: /usr/local/apache/htdocs/suspended-page/alpha.php
[Sat May 16 04:04:14.970062 2026] [:error] [pid 24979:tid 25000] [client 191.234.164.241:36660] File does not exist: /usr/local/apache/htdocs/suspended-page/son1.php
[Sat May 16 04:04:15.304077 2026] [:error] [pid 24979:tid 25001] [client 191.234.164.241:36660] File does not exist: /usr/local/apache/htdocs/suspended-page/ggb.php
[Sat May 16 04:04:15.636907 2026] [:error] [pid 24979:tid 24998] [client 191.234.164.241:36660] File does not exist: /usr/local/apache/htdocs/suspended-page/amxloxxr.php
[Sat May 16 04:04:15.967588 2026] [:error] [pid 24979:tid 24981] [client 191.234.164.241:36660] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "agd8P7vSFUQiwLaOL2oQuAAAAMA"]
[Sat May 16 04:04:16.746532 2026] [:error] [pid 24874:tid 24939] [client 191.234.164.241:36652] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "agd8QMiii6x3XidYGHGI9AAAAIQ"]
[Sat May 16 04:04:17.458508 2026] [:error] [pid 24979:tid 24994] [client 191.234.164.241:21444] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "agd8QbvSFUQiwLaOL2oQuQAAAM0"]
[Sat May 16 04:04:18.510028 2026] [:error] [pid 24979:tid 24999] [client 191.234.164.241:36433] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "agd8QrvSFUQiwLaOL2oQugAAANI"]
[Sat May 16 04:04:19.368951 2026] [:error] [pid 24979:tid 25001] [client 191.234.164.241:36630] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "agd8Q7vSFUQiwLaOL2oQvAAAANQ"]
[Sat May 16 04:04:20.151880 2026] [:error] [pid 24979:tid 24981] [client 191.234.164.241:21491] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "agd8RLvSFUQiwLaOL2oQvwAAAMA"]
[Sat May 16 04:04:20.950887 2026] [:error] [pid 24979:tid 24989] [client 191.234.164.241:36474] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "agd8RLvSFUQiwLaOL2oQxAAAAMg"]
[Sat May 16 04:04:22.096786 2026] [:error] [pid 24869:tid 24927] [client 191.234.164.241:36374] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "agd8Ruxo3FMprMltYl7v-wAAAFM"]
[Sat May 16 04:04:23.168550 2026] [:error] [pid 24874:tid 24950] [client 191.234.164.241:45689] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "agd8R8iii6x3XidYGHGI-gAAAI8"]
[Sat May 16 04:04:24.234065 2026] [:error] [pid 24979:tid 24995] [client 191.234.164.241:36719] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "agd8SLvSFUQiwLaOL2oQyQAAAM4"]
[Sat May 16 04:04:25.150139 2026] [:error] [pid 24874:tid 24943] [client 191.234.164.241:21481] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "agd8Sciii6x3XidYGHGI_QAAAIg"]
[Sat May 16 04:04:25.956033 2026] [:error] [pid 24874:tid 24958] [client 191.234.164.241:36394] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "agd8Sciii6x3XidYGHGI_gAAAJc"]
[Sat May 16 04:04:26.701094 2026] [:error] [pid 24874:tid 24947] [client 191.234.164.241:36456] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/99.php"] [unique_id "agd8Ssiii6x3XidYGHGJAQAAAIw"]
[Sat May 16 04:04:28.143440 2026] [:error] [pid 24869:tid 24924] [client 191.234.164.241:36354] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/99.php"] [unique_id "agd8TOxo3FMprMltYl7wBAAAAFA"]
[Sat May 16 04:04:28.883289 2026] [:error] [pid 24867:tid 24885] [client 191.234.164.241:36648] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/99.php"] [unique_id "agd8TCDgFLCgyKq-zmbe5wAAAAQ"]
[Sat May 16 04:04:29.730463 2026] [:error] [pid 24979:tid 24989] [client 191.234.164.241:36379] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/99.php"] [unique_id "agd8TbvSFUQiwLaOL2oQzwAAAMg"]
[Sat May 16 04:04:30.542175 2026] [:error] [pid 24867:tid 24890] [client 191.234.164.241:36416] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "agd8TiDgFLCgyKq-zmbe6AAAAAk"]
[Sat May 16 04:04:31.755509 2026] [:error] [pid 24867:tid 24881] [client 191.234.164.241:45686] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "agd8TyDgFLCgyKq-zmbe6QAAAAA"]
[Sat May 16 04:04:32.782814 2026] [:error] [pid 24979:tid 25005] [client 191.234.164.241:36430] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "agd8ULvSFUQiwLaOL2oQ1wAAANg"]
[Sat May 16 04:04:33.478303 2026] [:error] [pid 24869:tid 24932] [client 191.234.164.241:36478] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "agd8Uexo3FMprMltYl7wCwAAAFg"]
[Sat May 16 04:04:34.660397 2026] [:error] [pid 24867:tid 24904] [client 191.234.164.241:36460] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "agd8UiDgFLCgyKq-zmbe8AAAABc"]
[Sat May 16 04:04:35.421623 2026] [:error] [pid 24869:tid 24917] [client 191.234.164.241:36406] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "agd8U-xo3FMprMltYl7wEAAAAEk"]
[Sat May 16 04:04:36.289829 2026] [:error] [pid 24979:tid 24981] [client 191.234.164.241:36391] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "agd8VLvSFUQiwLaOL2oQ3AAAAMA"]
[Sat May 16 04:04:37.466307 2026] [:error] [pid 24979:tid 24982] [client 191.234.164.241:36687] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "agd8VbvSFUQiwLaOL2oQ4AAAAME"]
[Sat May 16 04:04:38.357189 2026] [:error] [pid 24979:tid 24991] [client 191.234.164.241:36731] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "agd8VrvSFUQiwLaOL2oQ4wAAAMo"]
[Sat May 16 04:04:39.239343 2026] [:error] [pid 24979:tid 24984] [client 191.234.164.241:36689] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "agd8V7vSFUQiwLaOL2oQ6AAAAMM"]
[Sat May 16 04:04:40.164626 2026] [:error] [pid 24874:tid 24946] [client 191.234.164.241:36713] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "agd8WMiii6x3XidYGHGJEAAAAIs"]
[Sat May 16 04:04:41.002680 2026] [:error] [pid 24979:tid 24993] [client 191.234.164.241:36386] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "agd8WbvSFUQiwLaOL2oQ_AAAAMw"]
[Sat May 16 04:04:41.843872 2026] [:error] [pid 24874:tid 24938] [client 191.234.164.241:36444] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "agd8Wciii6x3XidYGHGJGAAAAIM"]
[Sat May 16 04:04:42.589358 2026] [:error] [pid 24979:tid 25005] [client 191.234.164.241:36362] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "agd8WrvSFUQiwLaOL2oRHAAAANg"]
[Sat May 16 04:04:43.257528 2026] [:error] [pid 24979:tid 25005] [client 191.234.164.241:36452] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "agd8W7vSFUQiwLaOL2oRJgAAANg"]
[Sat May 16 04:04:44.075959 2026] [:error] [pid 24979:tid 24990] [client 191.234.164.241:36453] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "agd8XLvSFUQiwLaOL2oRMQAAAMk"]
[Sat May 16 04:04:45.522931 2026] [:error] [pid 24979:tid 24985] [client 191.234.164.241:36388] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "agd8XbvSFUQiwLaOL2oRRQAAAMQ"]
[Sat May 16 04:04:47.066661 2026] [:error] [pid 24867:tid 24900] [client 191.234.164.241:36378] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "agd8XyDgFLCgyKq-zmbe_AAAABM"]
[Sat May 16 04:04:48.613510 2026] [:error] [pid 24867:tid 24897] [client 191.234.164.241:36716] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "agd8YCDgFLCgyKq-zmbfAQAAABA"]
[Sat May 16 04:04:49.838069 2026] [:error] [pid 24874:tid 24951] [client 191.234.164.241:36609] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "agd8Yciii6x3XidYGHGJLgAAAJA"]
[Sat May 16 04:04:50.800660 2026] [:error] [pid 24979:tid 24999] [client 191.234.164.241:36422] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "agd8YrvSFUQiwLaOL2oRbAAAANI"]
[Sat May 16 04:04:52.034395 2026] [:error] [pid 24979:tid 24986] [client 191.234.164.241:36624] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "agd8ZLvSFUQiwLaOL2oRcgAAAMU"]
[Sat May 16 04:04:53.276718 2026] [:error] [pid 24867:tid 24902] [client 191.234.164.241:36395] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "agd8ZSDgFLCgyKq-zmbfAwAAABU"]
[Sat May 16 04:04:54.606362 2026] [:error] [pid 24869:tid 24928] [client 191.234.164.241:21471] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "agd8Zuxo3FMprMltYl7wHgAAAFQ"]
[Sat May 16 04:04:56.459061 2026] [:error] [pid 24869:tid 24927] [client 191.234.164.241:36443] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "agd8aOxo3FMprMltYl7wIQAAAFM"]
[Sat May 16 04:04:58.281388 2026] [:error] [pid 24874:tid 24939] [client 191.234.164.241:36376] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "agd8asiii6x3XidYGHGJTwAAAIQ"]
[Sat May 16 04:04:59.752012 2026] [:error] [pid 24874:tid 24944] [client 191.234.164.241:36732] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "agd8a8iii6x3XidYGHGJUAAAAIk"]
[Sat May 16 04:05:01.265199 2026] [:error] [pid 24869:tid 24928] [client 191.234.164.241:36477] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "agd8bexo3FMprMltYl7wKAAAAFQ"]
[Sat May 16 04:05:03.583266 2026] [:error] [pid 24869:tid 24915] [client 191.234.164.241:36357] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "agd8b-xo3FMprMltYl7wMAAAAEc"]
[Sat May 16 04:05:05.074933 2026] [:error] [pid 24979:tid 24994] [client 191.234.164.241:36670] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "agd8cbvSFUQiwLaOL2oRggAAAM0"]
[Sat May 16 04:05:05.889468 2026] [:error] [pid 24979:tid 24988] [client 191.234.164.241:36462] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "agd8cbvSFUQiwLaOL2oRhgAAAMc"]
[Sat May 16 04:05:06.659501 2026] [:error] [pid 24874:tid 24953] [client 191.234.164.241:36668] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "agd8csiii6x3XidYGHGJVAAAAJI"]
[Sat May 16 04:05:07.532264 2026] [:error] [pid 24979:tid 24992] [client 191.234.164.241:36476] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "agd8c7vSFUQiwLaOL2oRjgAAAMs"]
[Sat May 16 04:05:08.259283 2026] [:error] [pid 24874:tid 24938] [client 191.234.164.241:36364] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "agd8dMiii6x3XidYGHGJVgAAAIM"]
[Sat May 16 04:05:09.008954 2026] [:error] [pid 24979:tid 25004] [client 191.234.164.241:36661] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "agd8dbvSFUQiwLaOL2oRlAAAANc"]
[Sat May 16 04:05:09.851605 2026] [:error] [pid 24874:tid 24937] [client 191.234.164.241:45668] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "agd8dciii6x3XidYGHGJWgAAAII"]
[Sat May 16 04:05:10.496850 2026] [:error] [pid 24874:tid 24942] [client 191.234.164.241:21488] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file2.php"] [unique_id "agd8dsiii6x3XidYGHGJXgAAAIc"]
[Sat May 16 04:05:11.507078 2026] [:error] [pid 24979:tid 24987] [client 191.234.164.241:36665] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file2.php"] [unique_id "agd8d7vSFUQiwLaOL2oRpgAAAMY"]
[Sat May 16 04:05:12.375465 2026] [:error] [pid 24867:tid 24885] [client 191.234.164.241:36447] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file2.php"] [unique_id "agd8eCDgFLCgyKq-zmbfDgAAAAQ"]
[Sat May 16 04:05:13.045904 2026] [:error] [pid 24979:tid 25001] [client 191.234.164.241:36366] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file2.php"] [unique_id "agd8ebvSFUQiwLaOL2oRrwAAANQ"]
[Sat May 16 04:05:14.063712 2026] [:error] [pid 24979:tid 24986] [client 191.234.164.241:36383] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "agd8ervSFUQiwLaOL2oRtAAAAMU"]
[Sat May 16 04:05:14.930569 2026] [:error] [pid 24867:tid 24887] [client 191.234.164.241:36449] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "agd8eiDgFLCgyKq-zmbfDwAAAAY"]
[Sat May 16 04:05:16.469647 2026] [:error] [pid 24874:tid 24938] [client 191.234.164.241:21458] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sat May 16 04:05:16.797860 2026] [:error] [pid 24874:tid 24955] [client 191.234.164.241:21458] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-theme.php
[Sat May 16 04:05:17.126011 2026] [:error] [pid 24874:tid 24945] [client 191.234.164.241:21458] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Sat May 16 04:05:17.451023 2026] [:error] [pid 24874:tid 24951] [client 191.234.164.241:21458] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sat May 16 04:05:17.781573 2026] [:error] [pid 24874:tid 24946] [client 191.234.164.241:21458] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat May 16 04:05:18.110055 2026] [:error] [pid 24874:tid 24940] [client 191.234.164.241:21458] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Sat May 16 04:05:18.463817 2026] [:error] [pid 24874:tid 24935] [client 191.234.164.241:21458] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Sat May 16 04:05:18.812479 2026] [:error] [pid 24874:tid 24939] [client 191.234.164.241:21458] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Sat May 16 04:05:19.144472 2026] [:error] [pid 24874:tid 24955] [client 191.234.164.241:21458] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Sat May 16 04:05:19.467595 2026] [:error] [pid 24874:tid 24950] [client 191.234.164.241:21458] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ini.php"] [unique_id "agd8f8iii6x3XidYGHGJeAAAAI8"]
[Sat May 16 04:05:20.204683 2026] [:error] [pid 24869:tid 24923] [client 191.234.164.241:36461] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ini.php"] [unique_id "agd8gOxo3FMprMltYl7wRgAAAE8"]
[Sat May 16 04:05:20.922549 2026] [:error] [pid 24979:tid 24999] [client 191.234.164.241:36408] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ini.php"] [unique_id "agd8gLvSFUQiwLaOL2oRuwAAANI"]
[Sat May 16 04:05:21.602929 2026] [:error] [pid 24979:tid 24987] [client 191.234.164.241:45654] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ini.php"] [unique_id "agd8gbvSFUQiwLaOL2oRvQAAAMY"]
[Sat May 16 04:05:22.386855 2026] [:error] [pid 24979:tid 24989] [client 191.234.164.241:36725] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ca4.php"] [unique_id "agd8grvSFUQiwLaOL2oRwQAAAMg"]
[Sat May 16 04:05:23.041622 2026] [:error] [pid 24979:tid 24981] [client 191.234.164.241:36440] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ca4.php"] [unique_id "agd8g7vSFUQiwLaOL2oRwwAAAMA"]
[Sat May 16 04:05:23.747532 2026] [:error] [pid 24867:tid 24905] [client 191.234.164.241:21494] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ca4.php"] [unique_id "agd8gyDgFLCgyKq-zmbfGAAAABg"]
[Sat May 16 04:05:24.402232 2026] [:error] [pid 24869:tid 24930] [client 191.234.164.241:36425] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ca4.php"] [unique_id "agd8hOxo3FMprMltYl7wUgAAAFY"]
[Sat May 16 04:05:25.076314 2026] [:error] [pid 24979:tid 24993] [client 191.234.164.241:36683] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "agd8hbvSFUQiwLaOL2oRxgAAAMw"]
[Sat May 16 04:05:25.762329 2026] [:error] [pid 24874:tid 24951] [client 191.234.164.241:36470] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "agd8hciii6x3XidYGHGJeQAAAJA"]
[Sat May 16 04:05:26.544810 2026] [:error] [pid 24979:tid 24987] [client 191.234.164.241:36389] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "agd8hrvSFUQiwLaOL2oRygAAAMY"]
[Sat May 16 04:05:27.212525 2026] [:error] [pid 24867:tid 24895] [client 191.234.164.241:36435] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "agd8hyDgFLCgyKq-zmbfGgAAAA4"]
[Sat May 16 04:05:27.888914 2026] [:error] [pid 24979:tid 24989] [client 191.234.164.241:36424] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-info.php"] [unique_id "agd8h7vSFUQiwLaOL2oRywAAAMg"]
[Sat May 16 04:05:28.607028 2026] [:error] [pid 24869:tid 24915] [client 191.234.164.241:36724] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-info.php"] [unique_id "agd8iOxo3FMprMltYl7wWAAAAEc"]
[Sat May 16 04:05:29.430447 2026] [:error] [pid 24869:tid 24930] [client 191.234.164.241:36623] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-info.php"] [unique_id "agd8iexo3FMprMltYl7wWgAAAFY"]
[Sat May 16 04:05:30.210272 2026] [:error] [pid 24874:tid 24953] [client 191.234.164.241:36371] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-info.php"] [unique_id "agd8isiii6x3XidYGHGJgAAAAJI"]
[Sat May 16 04:05:31.285344 2026] [:error] [pid 24874:tid 24938] [client 191.234.164.241:21464] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "agd8i8iii6x3XidYGHGJgQAAAIM"]
[Sat May 16 04:05:32.146410 2026] [:error] [pid 24869:tid 24929] [client 191.234.164.241:45632] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "agd8jOxo3FMprMltYl7wYAAAAFU"]
[Sat May 16 04:05:32.850336 2026] [:error] [pid 24979:tid 24991] [client 191.234.164.241:45655] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "agd8jLvSFUQiwLaOL2oR0AAAAMo"]
[Sat May 16 04:05:33.910902 2026] [:error] [pid 24979:tid 25003] [client 191.234.164.241:36466] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "agd8jbvSFUQiwLaOL2oR0QAAANY"]
[Sat May 16 04:05:34.678882 2026] [:error] [pid 24869:tid 24925] [client 191.234.164.241:36656] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "agd8juxo3FMprMltYl7wYwAAAFE"]
[Sat May 16 04:05:35.431666 2026] [:error] [pid 24869:tid 24923] [client 191.234.164.241:21499] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "agd8j-xo3FMprMltYl7wZQAAAE8"]
[Sat May 16 04:05:37.700270 2026] [:error] [pid 24869:tid 24924] [client 191.234.164.241:21473] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "agd8kexo3FMprMltYl7wbQAAAFA"]
[Sat May 16 04:05:38.418043 2026] [:error] [pid 24869:tid 24929] [client 191.234.164.241:36359] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "agd8kuxo3FMprMltYl7wcAAAAFU"]
[Sat May 16 04:05:39.336175 2026] [:error] [pid 24874:tid 24959] [client 191.234.164.241:36467] [client 191.234.164.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "agd8k8iii6x3XidYGHGJhgAAAJg"]
[Sat May 16 04:05:40.048597 2026] [:error] [pid 24979:tid 24984] [client 191.234.164.241:36671] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.ph"] [unique_id "agd8lLvSFUQiwLaOL2oR2wAAAMM"]
[Sat May 16 04:05:40.778102 2026] [:error] [pid 24979:tid 25004] [client 191.234.164.241:36471] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.ph"] [unique_id "agd8lLvSFUQiwLaOL2oR3wAAANc"]
[Sat May 16 04:05:41.497790 2026] [:error] [pid 24979:tid 24991] [client 191.234.164.241:36659] [client 191.234.164.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/z.ph"] [unique_id "agd8lbvSFUQiwLaOL2oR4AAAAMo"]
[Sat May 16 05:10:36.378199 2026] [:error] [pid 5602:tid 5604] [client 34.138.196.151:56232] [client 34.138.196.151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ageLzNzTTsu77r3UIsmsNgAAAQA"]
[Sat May 16 15:03:00.578607 2026] [:error] [pid 5602:tid 5614] [client 20.28.209.84:1204] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat May 16 15:03:00.597406 2026] [:error] [pid 5602:tid 5605] [client 20.28.209.84:1204] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat May 16 15:03:00.633887 2026] [:error] [pid 5602:tid 5619] [client 20.28.209.84:1204] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat May 16 15:03:00.652160 2026] [:error] [pid 5602:tid 5610] [client 20.28.209.84:1204] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat May 16 15:03:00.720670 2026] [:error] [pid 5602:tid 5613] [client 20.28.209.84:1204] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sat May 16 15:03:00.737290 2026] [:error] [pid 5602:tid 5616] [client 20.28.209.84:1204] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat May 16 15:03:00.753569 2026] [:error] [pid 5602:tid 5607] [client 20.28.209.84:1204] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sat May 16 15:03:00.818202 2026] [:error] [pid 5602:tid 5606] [client 20.28.209.84:1204] [client 20.28.209.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aggWpNzTTsu77r3UIskkVAAAAQI"]
[Sat May 16 15:03:00.904952 2026] [:error] [pid 61361:tid 61374] [client 20.28.209.84:2162] [client 20.28.209.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aggWpJZojzbt3jGziNlFNwAAAUs"]
[Sat May 16 15:03:00.975221 2026] [:error] [pid 24869:tid 24910] [client 20.28.209.84:2172] [client 20.28.209.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aggWpOxo3FMprMltYl4vEAAAAEI"]
[Sat May 16 15:03:01.086306 2026] [:error] [pid 61463:tid 61481] [client 20.28.209.84:2224] [client 20.28.209.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aggWpTXdL1WU7nYXPmTqwQAAAdA"]
[Sat May 16 22:07:55.169864 2026] [:error] [pid 62341:tid 62347] [client 52.231.25.233:2992] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat May 16 22:07:55.313764 2026] [:error] [pid 62341:tid 62362] [client 52.231.25.233:2992] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat May 16 22:07:55.605325 2026] [:error] [pid 62341:tid 62359] [client 52.231.25.233:2992] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat May 16 22:07:55.786604 2026] [:error] [pid 62341:tid 62364] [client 52.231.25.233:2992] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat May 16 22:07:56.076555 2026] [:error] [pid 62341:tid 62348] [client 52.231.25.233:2992] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sat May 16 22:07:56.236138 2026] [:error] [pid 62341:tid 62370] [client 52.231.25.233:2992] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat May 16 22:07:56.380919 2026] [:error] [pid 62341:tid 62369] [client 52.231.25.233:2992] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sat May 16 22:07:56.845716 2026] [:error] [pid 62341:tid 62352] [client 52.231.25.233:2992] [client 52.231.25.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agh6PKnvQ59ep-XG78jGXQAAAoY"]
[Sat May 16 22:07:57.406477 2026] [:error] [pid 62341:tid 62353] [client 52.231.25.233:2993] [client 52.231.25.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agh6PanvQ59ep-XG78jGXwAAAoc"]
[Sat May 16 22:07:57.974870 2026] [:error] [pid 5602:tid 5619] [client 52.231.25.233:2956] [client 52.231.25.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agh6PdzTTsu77r3UIsk8eAAAAQ8"]
[Sat May 16 22:07:58.568010 2026] [:error] [pid 5602:tid 5606] [client 52.231.25.233:2974] [client 52.231.25.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agh6PtzTTsu77r3UIsk8ewAAAQI"]
[Sun May 17 05:22:35.581275 2026] [:error] [pid 36652:tid 36662] [client 20.89.251.192:1733] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun May 17 05:22:35.703891 2026] [:error] [pid 36652:tid 36670] [client 20.89.251.192:1733] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun May 17 05:22:35.950233 2026] [:error] [pid 36652:tid 36659] [client 20.89.251.192:1733] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sun May 17 05:22:36.073332 2026] [:error] [pid 36652:tid 36663] [client 20.89.251.192:1733] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun May 17 05:22:36.319550 2026] [:error] [pid 36652:tid 36676] [client 20.89.251.192:1733] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sun May 17 05:22:36.446067 2026] [:error] [pid 36652:tid 36673] [client 20.89.251.192:1733] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun May 17 05:22:36.569304 2026] [:error] [pid 36652:tid 36675] [client 20.89.251.192:1733] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sun May 17 05:22:36.953521 2026] [:error] [pid 36652:tid 36677] [client 20.89.251.192:1733] [client 20.89.251.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agjgHDZrzQadnZADvj8DxwAAARc"]
[Sun May 17 05:22:37.468877 2026] [:error] [pid 36652:tid 36672] [client 20.89.251.192:2595] [client 20.89.251.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agjgHTZrzQadnZADvj8DygAAARI"]
[Sun May 17 05:22:37.955153 2026] [:error] [pid 59061:tid 59118] [client 20.89.251.192:2590] [client 20.89.251.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agjgHYYS410zAmsYkoLv_AAAAFY"]
[Sun May 17 05:22:38.450363 2026] [:error] [pid 36652:tid 36674] [client 20.89.251.192:2582] [client 20.89.251.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agjgHjZrzQadnZADvj8D0QAAARQ"]
[Sun May 17 05:35:19.835150 2026] [:error] [pid 36652:tid 36671] [client 104.43.213.180:3578] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun May 17 05:35:20.025756 2026] [:error] [pid 36652:tid 36677] [client 104.43.213.180:3578] File does not exist: /usr/local/apache/htdocs/suspended-page/sx_pms.php
[Sun May 17 05:35:20.216685 2026] [:error] [pid 36652:tid 36668] [client 104.43.213.180:3578] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Sun May 17 05:35:20.412843 2026] [:error] [pid 36652:tid 36660] [client 104.43.213.180:3578] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Sun May 17 05:35:20.603802 2026] [:error] [pid 36652:tid 36654] [client 104.43.213.180:3578] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-test.php
[Sun May 17 05:35:20.794316 2026] [:error] [pid 36652:tid 36676] [client 104.43.213.180:3578] File does not exist: /usr/local/apache/htdocs/suspended-page/like.php
[Sun May 17 05:35:20.988944 2026] [:error] [pid 36652:tid 36656] [client 104.43.213.180:3578] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Sun May 17 05:35:21.189704 2026] [:error] [pid 36652:tid 36669] [client 104.43.213.180:3578] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun May 17 05:35:21.381337 2026] [:error] [pid 36652:tid 36658] [client 104.43.213.180:3578] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-indx.php
[Sun May 17 05:35:21.590750 2026] [:error] [pid 36652:tid 36665] [client 104.43.213.180:3578] File does not exist: /usr/local/apache/htdocs/suspended-page/zoo.php
[Sun May 17 05:35:21.793027 2026] [:error] [pid 36652:tid 36663] [client 104.43.213.180:3578] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-link-spm.php"] [unique_id "agjjGTZrzQadnZADvj8GqgAAAQk"]
[Sun May 17 05:35:28.945726 2026] [:error] [pid 36652:tid 36673] [client 104.43.213.180:43329] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-link-spm.php"] [unique_id "agjjIDZrzQadnZADvj8GuQAAARM"]
[Sun May 17 05:35:33.010064 2026] [:error] [pid 36652:tid 36678] [client 104.43.213.180:32092] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-link-spm.php"] [unique_id "agjjJTZrzQadnZADvj8GvAAAARg"]
[Sun May 17 05:35:44.144693 2026] [:error] [pid 36652:tid 36657] [client 104.43.213.180:18654] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-link-snpm.php"] [unique_id "agjjMDZrzQadnZADvj8GwgAAAQM"]
[Sun May 17 05:35:45.538222 2026] [:error] [pid 36652:tid 36667] [client 104.43.213.180:14285] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-link-snpm.php"] [unique_id "agjjMTZrzQadnZADvj8GxQAAAQ0"]
[Sun May 17 05:35:46.727676 2026] [:error] [pid 59062:tid 59127] [client 104.43.213.180:3099] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-link-snpm.php"] [unique_id "agjjMj4V9GkVWmCFmGa10gAAAIQ"]
[Sun May 17 05:35:47.527478 2026] [:error] [pid 36652:tid 36678] [client 104.43.213.180:12412] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-link-snpm.php"] [unique_id "agjjMzZrzQadnZADvj8GxwAAARg"]
[Sun May 17 05:35:52.036513 2026] [:error] [pid 59060:tid 59070] [client 104.43.213.180:22654] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xminie.php"] [unique_id "agjjOPvwvq3bndkPE4nBfAAAAAE"]
[Sun May 17 05:35:53.429337 2026] [:error] [pid 59060:tid 59082] [client 104.43.213.180:45573] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xminie.php"] [unique_id "agjjOfvwvq3bndkPE4nBfQAAAA0"]
[Sun May 17 05:36:03.134584 2026] [:error] [pid 59060:tid 59076] [client 104.43.213.180:3959] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xminie.php"] [unique_id "agjjQ_vwvq3bndkPE4nBgwAAAAc"]
[Sun May 17 05:36:05.960300 2026] [:error] [pid 59061:tid 59116] [client 104.43.213.180:45996] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "agjjRYYS410zAmsYkoLxfwAAAFQ"]
[Sun May 17 05:36:07.329328 2026] [:error] [pid 59062:tid 59133] [client 104.43.213.180:13103] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "agjjRz4V9GkVWmCFmGa17AAAAIo"]
[Sun May 17 05:36:10.380391 2026] [:error] [pid 36652:tid 36670] [client 104.43.213.180:8141] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "agjjSjZrzQadnZADvj8G0AAAARA"]
[Sun May 17 05:36:11.764105 2026] [:error] [pid 59061:tid 59114] [client 104.43.213.180:13325] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "agjjS4YS410zAmsYkoLxggAAAFI"]
[Sun May 17 05:36:19.613423 2026] [:error] [pid 59061:tid 59102] [client 104.43.213.180:4398] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "agjjU4YS410zAmsYkoLxiAAAAEY"]
[Sun May 17 05:36:30.799605 2026] [:error] [pid 36652:tid 36674] [client 104.43.213.180:20992] File does not exist: /usr/local/apache/htdocs/suspended-page/ws81.php
[Sun May 17 05:36:31.005769 2026] [:error] [pid 36652:tid 36655] [client 104.43.213.180:20992] File does not exist: /usr/local/apache/htdocs/suspended-page/drykl.php
[Sun May 17 05:36:31.195846 2026] [:error] [pid 36652:tid 36664] [client 104.43.213.180:20992] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sun May 17 05:36:31.395859 2026] [:error] [pid 36652:tid 36661] [client 104.43.213.180:20992] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Sun May 17 05:36:31.586415 2026] [:error] [pid 36652:tid 36671] [client 104.43.213.180:20992] File does not exist: /usr/local/apache/htdocs/suspended-page/77.php
[Sun May 17 05:36:31.780815 2026] [:error] [pid 36652:tid 36668] [client 104.43.213.180:20992] File does not exist: /usr/local/apache/htdocs/suspended-page/x402.php
[Sun May 17 05:36:31.972575 2026] [:error] [pid 36652:tid 36677] [client 104.43.213.180:20992] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun May 17 05:36:32.165471 2026] [:error] [pid 36652:tid 36656] [client 104.43.213.180:20992] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun May 17 05:36:32.352629 2026] [:error] [pid 36652:tid 36676] [client 104.43.213.180:20992] [client 104.43.213.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "agjjYDZrzQadnZADvj8G6QAAARY"]
[Sun May 17 05:36:33.050843 2026] [:error] [pid 59061:tid 59118] [client 104.43.213.180:7084] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Sun May 17 05:36:33.250131 2026] [:error] [pid 59061:tid 59115] [client 104.43.213.180:7084] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Sun May 17 05:36:33.441972 2026] [:error] [pid 59061:tid 59100] [client 104.43.213.180:7084] File does not exist: /usr/local/apache/htdocs/suspended-page/tires.php
[Sun May 17 05:36:33.628655 2026] [:error] [pid 59061:tid 59112] [client 104.43.213.180:7084] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "agjjYYYS410zAmsYkoLxlgAAAFA"]
[Sun May 17 05:36:37.406296 2026] [:error] [pid 36652:tid 36670] [client 104.43.213.180:21052] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "agjjZTZrzQadnZADvj8G6wAAARA"]
[Sun May 17 05:36:43.539055 2026] [:error] [pid 59060:tid 59074] [client 104.43.213.180:7897] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "agjja_vwvq3bndkPE4nBjgAAAAU"]
[Sun May 17 05:36:46.979322 2026] [:error] [pid 36652:tid 36654] [client 104.43.213.180:2304] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "agjjbjZrzQadnZADvj8G9gAAAQA"]
[Sun May 17 05:36:49.235308 2026] [:error] [pid 59061:tid 59109] [client 104.43.213.180:2958] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "agjjcYYS410zAmsYkoLxnAAAAE0"]
[Sun May 17 05:36:54.144767 2026] [:error] [pid 59061:tid 59104] [client 104.43.213.180:30277] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "agjjdoYS410zAmsYkoLxoQAAAEg"]
[Sun May 17 05:37:01.314962 2026] [:error] [pid 59060:tid 59082] [client 104.43.213.180:13091] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "agjjffvwvq3bndkPE4nBlAAAAA0"]
[Sun May 17 05:37:01.961384 2026] [:error] [pid 59166:tid 59169] [client 104.43.213.180:12748] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "agjjfU_puQ1I47_0UripEwAAAME"]
[Sun May 17 05:37:03.867106 2026] [:error] [pid 59060:tid 59077] [client 104.43.213.180:8188] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "agjjf_vwvq3bndkPE4nBlgAAAAg"]
[Sun May 17 05:37:07.644017 2026] [:error] [pid 59061:tid 59119] [client 104.43.213.180:29203] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "agjjg4YS410zAmsYkoLxowAAAFc"]
[Sun May 17 05:37:10.318284 2026] [:error] [pid 36652:tid 36663] [client 104.43.213.180:25401] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "agjjhjZrzQadnZADvj8HCwAAAQk"]
[Sun May 17 05:37:12.139930 2026] [:error] [pid 59062:tid 59140] [client 104.43.213.180:10492] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "agjjiD4V9GkVWmCFmGa2UAAAAJE"]
[Sun May 17 05:37:16.506879 2026] [:error] [pid 36652:tid 36659] [client 104.43.213.180:13402] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "agjjjDZrzQadnZADvj8HEQAAAQU"]
[Sun May 17 05:37:19.369167 2026] [:error] [pid 36652:tid 36666] [client 104.43.213.180:12564] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "agjjjzZrzQadnZADvj8HFAAAAQw"]
[Sun May 17 05:37:21.791500 2026] [:error] [pid 59166:tid 59185] [client 104.43.213.180:37443] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "agjjkU_puQ1I47_0UripFQAAANE"]
[Sun May 17 05:37:29.558654 2026] [:error] [pid 59166:tid 59174] [client 104.43.213.180:18237] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "agjjmU_puQ1I47_0UripGAAAAMY"]
[Sun May 17 05:37:33.821723 2026] [:error] [pid 59060:tid 59075] [client 104.43.213.180:18624] File does not exist: /usr/local/apache/htdocs/suspended-page/sallu.php
[Sun May 17 05:37:34.012518 2026] [:error] [pid 59060:tid 59079] [client 104.43.213.180:18624] File does not exist: /usr/local/apache/htdocs/suspended-page/ng.php
[Sun May 17 05:37:34.203497 2026] [:error] [pid 59060:tid 59089] [client 104.43.213.180:18624] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Sun May 17 05:37:34.393770 2026] [:error] [pid 59060:tid 59082] [client 104.43.213.180:18624] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Sun May 17 05:37:34.584952 2026] [:error] [pid 59060:tid 59077] [client 104.43.213.180:18624] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Sun May 17 05:37:34.775299 2026] [:error] [pid 59060:tid 59072] [client 104.43.213.180:18624] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun May 17 05:37:34.966185 2026] [:error] [pid 59060:tid 59069] [client 104.43.213.180:18624] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Sun May 17 05:37:35.173955 2026] [:error] [pid 59060:tid 59073] [client 104.43.213.180:18624] File does not exist: /usr/local/apache/htdocs/suspended-page/one.php
[Sun May 17 05:37:35.364541 2026] [:error] [pid 59060:tid 59087] [client 104.43.213.180:18624] File does not exist: /usr/local/apache/htdocs/suspended-page/error_log.php
[Sun May 17 05:37:35.556865 2026] [:error] [pid 59060:tid 59071] [client 104.43.213.180:18624] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Sun May 17 05:37:35.747797 2026] [:error] [pid 59060:tid 59081] [client 104.43.213.180:18624] File does not exist: /usr/local/apache/htdocs/suspended-page/roksad1.php
[Sun May 17 05:37:35.945850 2026] [:error] [pid 59060:tid 59088] [client 104.43.213.180:18624] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/axe.php"] [unique_id "agjjn_vwvq3bndkPE4nBrwAAABM"]
[Sun May 17 05:37:39.273923 2026] [:error] [pid 59062:tid 59147] [client 104.43.213.180:3085] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/axe.php"] [unique_id "agjjoz4V9GkVWmCFmGa2WwAAAJg"]
[Sun May 17 05:37:43.999489 2026] [:error] [pid 36652:tid 36674] [client 104.43.213.180:3532] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/axe.php"] [unique_id "agjjpzZrzQadnZADvj8HHwAAARQ"]
[Sun May 17 05:37:58.174483 2026] [:error] [pid 59062:tid 59131] [client 104.43.213.180:13753] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "agjjtj4V9GkVWmCFmGa2ZwAAAIg"]
[Sun May 17 05:38:01.438076 2026] [:error] [pid 59062:tid 59128] [client 104.43.213.180:4764] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "agjjuT4V9GkVWmCFmGa2bgAAAIU"]
[Sun May 17 05:38:04.341854 2026] [:error] [pid 59062:tid 59127] [client 104.43.213.180:2414] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "agjjvD4V9GkVWmCFmGa2cwAAAIQ"]
[Sun May 17 05:38:06.334146 2026] [:error] [pid 59060:tid 59069] [client 104.43.213.180:42968] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "agjjvvvwvq3bndkPE4nBtwAAAAA"]
[Sun May 17 05:38:08.131897 2026] [:error] [pid 59062:tid 59129] [client 104.43.213.180:34903] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "agjjwD4V9GkVWmCFmGa2fAAAAIY"]
[Sun May 17 05:38:11.667737 2026] [:error] [pid 59061:tid 59106] [client 104.43.213.180:4862] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "agjjw4YS410zAmsYkoLxtgAAAEo"]
[Sun May 17 05:38:21.243324 2026] [:error] [pid 36652:tid 36668] [client 104.43.213.180:29524] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "agjjzTZrzQadnZADvj8HQgAAAQ4"]
[Sun May 17 05:38:27.317577 2026] [:error] [pid 59062:tid 59140] [client 104.43.213.180:2100] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "agjj0z4V9GkVWmCFmGa2iAAAAJE"]
[Sun May 17 05:38:30.633622 2026] [:error] [pid 59062:tid 59132] [client 104.43.213.180:5778] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "agjj1j4V9GkVWmCFmGa2jQAAAIk"]
[Sun May 17 05:38:32.778535 2026] [:error] [pid 59062:tid 59145] [client 104.43.213.180:27429] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "agjj2D4V9GkVWmCFmGa2jgAAAJY"]
[Sun May 17 05:38:35.444885 2026] [:error] [pid 36652:tid 36671] [client 104.43.213.180:15785] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Sun May 17 05:38:35.636194 2026] [:error] [pid 36652:tid 36663] [client 104.43.213.180:15785] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php
[Sun May 17 05:38:35.838711 2026] [:error] [pid 36652:tid 36662] [client 104.43.213.180:15785] File does not exist: /usr/local/apache/htdocs/suspended-page/view.php
[Sun May 17 05:38:36.030220 2026] [:error] [pid 36652:tid 36668] [client 104.43.213.180:15785] File does not exist: /usr/local/apache/htdocs/suspended-page/bc.php
[Sun May 17 05:38:36.221481 2026] [:error] [pid 36652:tid 36675] [client 104.43.213.180:15785] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Sun May 17 05:38:36.426475 2026] [:error] [pid 36652:tid 36661] [client 104.43.213.180:15785] File does not exist: /usr/local/apache/htdocs/suspended-page/moshou.php
[Sun May 17 05:38:36.617339 2026] [:error] [pid 36652:tid 36665] [client 104.43.213.180:15785] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Sun May 17 05:38:36.809211 2026] [:error] [pid 36652:tid 36670] [client 104.43.213.180:15785] File does not exist: /usr/local/apache/htdocs/suspended-page/zoper1.php
[Sun May 17 05:38:37.010946 2026] [:error] [pid 36652:tid 36677] [client 104.43.213.180:15785] File does not exist: /usr/local/apache/htdocs/suspended-page/19.php
[Sun May 17 05:38:37.226285 2026] [:error] [pid 36652:tid 36660] [client 104.43.213.180:15785] File does not exist: /usr/local/apache/htdocs/suspended-page/geforce.php
[Sun May 17 05:38:37.431310 2026] [:error] [pid 36652:tid 36667] [client 104.43.213.180:15785] File does not exist: /usr/local/apache/htdocs/suspended-page/dostshell.php
[Sun May 17 05:38:37.620447 2026] [:error] [pid 36652:tid 36674] [client 104.43.213.180:15785] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "agjj3TZrzQadnZADvj8HYwAAARQ"]
[Sun May 17 05:38:39.782582 2026] [:error] [pid 59061:tid 59096] [client 104.43.213.180:13451] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "agjj34YS410zAmsYkoLxvgAAAEA"]
[Sun May 17 05:38:42.134115 2026] [:error] [pid 59060:tid 59072] [client 104.43.213.180:19107] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "agjj4vvwvq3bndkPE4nB0AAAAAM"]
[Sun May 17 05:38:45.089937 2026] [:error] [pid 59060:tid 59071] [client 104.43.213.180:37237] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "agjj5fvwvq3bndkPE4nB1AAAAAI"]
[Sun May 17 05:38:46.748089 2026] [:error] [pid 59060:tid 59085] [client 104.43.213.180:19127] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "agjj5vvwvq3bndkPE4nB2QAAABA"]
[Sun May 17 05:38:48.289466 2026] [:error] [pid 36652:tid 36662] [client 104.43.213.180:12425] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "agjj6DZrzQadnZADvj8HaAAAAQg"]
[Sun May 17 05:38:49.302498 2026] [:error] [pid 59061:tid 59102] [client 104.43.213.180:38650] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "agjj6YYS410zAmsYkoLxwgAAAEY"]
[Sun May 17 05:38:49.949939 2026] [:error] [pid 59166:tid 59169] [client 104.43.213.180:38627] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "agjj6U_puQ1I47_0UripKAAAAME"]
[Sun May 17 05:38:50.899300 2026] [:error] [pid 59166:tid 59178] [client 104.43.213.180:12438] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "agjj6k_puQ1I47_0UripKgAAAMo"]
[Sun May 17 05:38:52.960783 2026] [:error] [pid 59061:tid 59101] [client 104.43.213.180:38593] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "agjj7IYS410zAmsYkoLxxAAAAEU"]
[Sun May 17 05:38:58.599637 2026] [:error] [pid 59062:tid 59137] [client 104.43.213.180:38259] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "agjj8j4V9GkVWmCFmGa2nQAAAI4"]
[Sun May 17 05:39:02.532855 2026] [:error] [pid 59060:tid 59081] [client 104.43.213.180:38595] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "agjj9vvwvq3bndkPE4nB7QAAAAw"]
[Sun May 17 05:39:04.688562 2026] [:error] [pid 59062:tid 59143] [client 104.43.213.180:10762] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "agjj-D4V9GkVWmCFmGa2pAAAAJQ"]
[Sun May 17 05:39:07.015341 2026] [:error] [pid 36652:tid 36660] [client 104.43.213.180:37392] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "agjj-zZrzQadnZADvj8HbAAAAQY"]
[Sun May 17 05:39:09.829307 2026] [:error] [pid 59062:tid 59144] [client 104.43.213.180:5412] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "agjj_T4V9GkVWmCFmGa2pwAAAJU"]
[Sun May 17 05:39:14.372673 2026] [:error] [pid 59062:tid 59137] [client 104.43.213.180:38618] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "agjkAj4V9GkVWmCFmGa2rAAAAI4"]
[Sun May 17 05:39:20.841950 2026] [:error] [pid 59166:tid 59192] [client 104.43.213.180:37418] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "agjkCE_puQ1I47_0UripUAAAANg"]
[Sun May 17 05:39:22.634388 2026] [:error] [pid 36652:tid 36676] [client 104.43.213.180:12307] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "agjkCjZrzQadnZADvj8HbgAAARY"]
[Sun May 17 05:39:24.951647 2026] [:error] [pid 59166:tid 59169] [client 104.43.213.180:32529] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "agjkDE_puQ1I47_0UripVQAAAME"]
[Sun May 17 05:39:28.815601 2026] [:error] [pid 59062:tid 59126] [client 104.43.213.180:2696] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "agjkED4V9GkVWmCFmGa2sgAAAIM"]
[Sun May 17 05:39:30.245250 2026] [:error] [pid 59062:tid 59130] [client 104.43.213.180:5407] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "agjkEj4V9GkVWmCFmGa2tAAAAIc"]
[Sun May 17 05:39:31.988351 2026] [:error] [pid 59166:tid 59186] [client 104.43.213.180:18297] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "agjkE0_puQ1I47_0UripWAAAANI"]
[Sun May 17 05:39:35.712039 2026] [:error] [pid 59166:tid 59171] [client 104.43.213.180:10798] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "agjkF0_puQ1I47_0UripZwAAAMM"]
[Sun May 17 05:39:39.525570 2026] [:error] [pid 36652:tid 36661] [client 104.43.213.180:37435] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sun May 17 05:39:39.716704 2026] [:error] [pid 36652:tid 36665] [client 104.43.213.180:37435] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Sun May 17 05:39:39.915128 2026] [:error] [pid 36652:tid 36673] [client 104.43.213.180:37435] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Sun May 17 05:39:40.124628 2026] [:error] [pid 36652:tid 36655] [client 104.43.213.180:37435] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Sun May 17 05:39:40.330078 2026] [:error] [pid 36652:tid 36677] [client 104.43.213.180:37435] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Sun May 17 05:39:40.522030 2026] [:error] [pid 36652:tid 36674] [client 104.43.213.180:37435] File does not exist: /usr/local/apache/htdocs/suspended-page/ss.php
[Sun May 17 05:39:40.729747 2026] [:error] [pid 36652:tid 36676] [client 104.43.213.180:37435] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Sun May 17 05:39:40.932782 2026] [:error] [pid 36652:tid 36658] [client 104.43.213.180:37435] File does not exist: /usr/local/apache/htdocs/suspended-page/options.php
[Sun May 17 05:39:41.135264 2026] [:error] [pid 36652:tid 36669] [client 104.43.213.180:37435] File does not exist: /usr/local/apache/htdocs/suspended-page/min.php
[Sun May 17 05:39:41.382932 2026] [:error] [pid 36652:tid 36672] [client 104.43.213.180:37435] File does not exist: /usr/local/apache/htdocs/suspended-page/img.php
[Sun May 17 05:39:41.574787 2026] [:error] [pid 36652:tid 36656] [client 104.43.213.180:37435] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Sun May 17 05:39:41.763527 2026] [:error] [pid 36652:tid 36678] [client 104.43.213.180:37435] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "agjkHTZrzQadnZADvj8HhQAAARg"]
[Sun May 17 05:39:42.880398 2026] [:error] [pid 59166:tid 59186] [client 104.43.213.180:12305] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "agjkHk_puQ1I47_0UripbAAAANI"]
[Sun May 17 05:39:48.534739 2026] [:error] [pid 59062:tid 59136] [client 104.43.213.180:20443] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "agjkJD4V9GkVWmCFmGa2vgAAAI0"]
[Sun May 17 05:39:51.402438 2026] [:error] [pid 36652:tid 36661] [client 104.43.213.180:3323] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "agjkJzZrzQadnZADvj8HiQAAAQc"]
[Sun May 17 05:39:51.813859 2026] [:error] [pid 36652:tid 36665] [client 104.43.213.180:5771] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agjkJzZrzQadnZADvj8HjAAAAQs"]
[Sun May 17 05:39:52.839092 2026] [:error] [pid 36652:tid 36677] [client 104.43.213.180:5401] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agjkKDZrzQadnZADvj8HkAAAARc"]
[Sun May 17 05:39:53.876649 2026] [:error] [pid 36652:tid 36658] [client 104.43.213.180:3289] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agjkKTZrzQadnZADvj8HkwAAAQQ"]
[Sun May 17 05:39:56.105422 2026] [:error] [pid 59062:tid 59134] [client 104.43.213.180:31232] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agjkLD4V9GkVWmCFmGa2xAAAAIs"]
[Sun May 17 05:39:56.898029 2026] [:error] [pid 59062:tid 59147] [client 104.43.213.180:20477] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "agjkLD4V9GkVWmCFmGa2xQAAAJg"]
[Sun May 17 05:39:59.187518 2026] [:error] [pid 59166:tid 59182] [client 104.43.213.180:31269] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "agjkL0_puQ1I47_0UripcgAAAM4"]
[Sun May 17 05:40:01.754050 2026] [:error] [pid 36652:tid 36671] [client 104.43.213.180:3292] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "agjkMTZrzQadnZADvj8HnQAAARE"]
[Sun May 17 05:40:02.536554 2026] [:error] [pid 36652:tid 36661] [client 104.43.213.180:29624] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "agjkMjZrzQadnZADvj8HnwAAAQc"]
[Sun May 17 05:40:04.208396 2026] [:error] [pid 59060:tid 59089] [client 104.43.213.180:4894] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "agjkNPvwvq3bndkPE4nCBQAAABQ"]
[Sun May 17 05:40:08.629914 2026] [:error] [pid 59062:tid 59136] [client 104.43.213.180:12311] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "agjkOD4V9GkVWmCFmGa2ygAAAI0"]
[Sun May 17 05:40:12.590340 2026] [:error] [pid 59166:tid 59181] [client 104.43.213.180:10787] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "agjkPE_puQ1I47_0UripdQAAAM0"]
[Sun May 17 05:40:24.193677 2026] [:error] [pid 59062:tid 59124] [client 104.43.213.180:2096] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "agjkSD4V9GkVWmCFmGa25AAAAIE"]
[Sun May 17 05:40:27.290003 2026] [:error] [pid 59061:tid 59105] [client 104.43.213.180:34857] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "agjkS4YS410zAmsYkoLx9gAAAEk"]
[Sun May 17 05:40:36.159311 2026] [:error] [pid 59166:tid 59185] [client 104.43.213.180:29596] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "agjkVE_puQ1I47_0UriplwAAANE"]
[Sun May 17 05:40:37.227112 2026] [:error] [pid 36652:tid 36658] [client 104.43.213.180:14213] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "agjkVTZrzQadnZADvj8HrAAAAQQ"]
[Sun May 17 05:40:38.241955 2026] [:error] [pid 59062:tid 59130] [client 104.43.213.180:37685] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "agjkVj4V9GkVWmCFmGa27gAAAIc"]
[Sun May 17 05:40:39.263569 2026] [:error] [pid 59166:tid 59177] [client 104.43.213.180:29611] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "agjkV0_puQ1I47_0UripnAAAAMk"]
[Sun May 17 05:40:39.989168 2026] [:error] [pid 59060:tid 59092] [client 104.43.213.180:37415] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "agjkV_vwvq3bndkPE4nCHAAAABc"]
[Sun May 17 05:40:41.035067 2026] [:error] [pid 59062:tid 59129] [client 104.43.213.180:36163] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Sun May 17 05:40:41.283943 2026] [:error] [pid 59062:tid 59127] [client 104.43.213.180:36163] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Sun May 17 05:40:41.478971 2026] [:error] [pid 59062:tid 59139] [client 104.43.213.180:36163] File does not exist: /usr/local/apache/htdocs/suspended-page/wps.php
[Sun May 17 05:40:41.692459 2026] [:error] [pid 59062:tid 59140] [client 104.43.213.180:36163] File does not exist: /usr/local/apache/htdocs/suspended-page/alpha.php
[Sun May 17 05:40:41.909615 2026] [:error] [pid 59062:tid 59128] [client 104.43.213.180:36163] File does not exist: /usr/local/apache/htdocs/suspended-page/bob.php
[Sun May 17 05:40:42.101014 2026] [:error] [pid 59062:tid 59125] [client 104.43.213.180:36163] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Sun May 17 05:40:42.559362 2026] [:error] [pid 59062:tid 59143] [client 104.43.213.180:36163] File does not exist: /usr/local/apache/htdocs/suspended-page/insta.php
[Sun May 17 05:40:42.883719 2026] [:error] [pid 59062:tid 59141] [client 104.43.213.180:36163] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kz.php
[Sun May 17 05:40:43.091481 2026] [:error] [pid 59062:tid 59146] [client 104.43.213.180:36163] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Sun May 17 05:40:43.313274 2026] [:error] [pid 59062:tid 59142] [client 104.43.213.180:36163] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Sun May 17 05:40:43.602766 2026] [:error] [pid 59062:tid 59136] [client 104.43.213.180:36163] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sun May 17 05:40:43.793122 2026] [:error] [pid 59062:tid 59138] [client 104.43.213.180:36163] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "agjkWz4V9GkVWmCFmGa2_AAAAI8"]
[Sun May 17 05:40:46.373561 2026] [:error] [pid 59062:tid 59145] [client 104.43.213.180:20468] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "agjkXj4V9GkVWmCFmGa2_gAAAJY"]
[Sun May 17 05:40:49.853151 2026] [:error] [pid 59061:tid 59102] [client 104.43.213.180:37647] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "agjkYYYS410zAmsYkoLx-wAAAEY"]
[Sun May 17 05:40:54.595983 2026] [:error] [pid 59166:tid 59185] [client 104.43.213.180:30354] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "agjkZk_puQ1I47_0UripqQAAANE"]
[Sun May 17 05:40:56.356112 2026] [:error] [pid 36652:tid 36668] [client 104.43.213.180:32520] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "agjkaDZrzQadnZADvj8HsQAAAQ4"]
[Sun May 17 05:40:58.272657 2026] [:error] [pid 59061:tid 59100] [client 104.43.213.180:43757] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "agjkaoYS410zAmsYkoLx_gAAAEQ"]
[Sun May 17 05:40:59.594139 2026] [:error] [pid 59060:tid 59074] [client 104.43.213.180:4280] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "agjka_vwvq3bndkPE4nCIwAAAAU"]
[Sun May 17 05:41:05.740744 2026] [:error] [pid 59060:tid 59090] [client 104.43.213.180:4620] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "agjkcfvwvq3bndkPE4nCJwAAABU"]
[Sun May 17 05:41:10.329555 2026] [:error] [pid 59060:tid 59092] [client 104.43.213.180:30301] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "agjkdvvwvq3bndkPE4nCKAAAABc"]
[Sun May 17 05:41:12.353400 2026] [:error] [pid 59166:tid 59189] [client 104.43.213.180:7929] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "agjkeE_puQ1I47_0UripsQAAANU"]
[Sun May 17 05:41:12.983331 2026] [:error] [pid 59166:tid 59168] [client 104.43.213.180:3641] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "agjkeE_puQ1I47_0UripsgAAAMA"]
[Sun May 17 05:41:15.464806 2026] [:error] [pid 59166:tid 59178] [client 104.43.213.180:2974] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "agjke0_puQ1I47_0UripswAAAMo"]
[Sun May 17 05:41:16.240681 2026] [:error] [pid 36652:tid 36673] [client 104.43.213.180:12769] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "agjkfDZrzQadnZADvj8HtgAAARM"]
[Sun May 17 05:41:24.711867 2026] [:error] [pid 36652:tid 36674] [client 104.43.213.180:30274] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "agjkhDZrzQadnZADvj8HuQAAARQ"]
[Sun May 17 05:41:25.984496 2026] [:error] [pid 59166:tid 59177] [client 104.43.213.180:8183] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "agjkhU_puQ1I47_0UripuwAAAMk"]
[Sun May 17 05:41:27.818084 2026] [:error] [pid 36652:tid 36667] [client 104.43.213.180:30302] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "agjkhzZrzQadnZADvj8HuwAAAQ0"]
[Sun May 17 05:41:35.618821 2026] [:error] [pid 36652:tid 36671] [client 104.43.213.180:2367] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "agjkjzZrzQadnZADvj8HvgAAARE"]
[Sun May 17 05:41:38.333566 2026] [:error] [pid 59062:tid 59141] [client 104.43.213.180:30371] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "agjkkj4V9GkVWmCFmGa3EQAAAJI"]
[Sun May 17 05:41:40.252993 2026] [:error] [pid 59166:tid 59185] [client 104.43.213.180:26901] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "agjklE_puQ1I47_0UripxAAAANE"]
[Sun May 17 05:41:41.173653 2026] [:error] [pid 59060:tid 59084] [client 104.43.213.180:26918] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "agjklfvwvq3bndkPE4nCMAAAAA8"]
[Sun May 17 05:41:42.206394 2026] [:error] [pid 59166:tid 59169] [client 104.43.213.180:16073] [client 104.43.213.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wpxml.php"] [unique_id "agjklk_puQ1I47_0UripyQAAAME"]
[Sun May 17 05:41:44.993898 2026] [:error] [pid 59060:tid 59076] [client 104.43.213.180:30396] File does not exist: /usr/local/apache/htdocs/suspended-page/wpxml.php
[Sun May 17 05:41:45.187511 2026] [:error] [pid 59060:tid 59085] [client 104.43.213.180:30396] File does not exist: /usr/local/apache/htdocs/suspended-page/zo.php
[Sun May 17 05:41:45.378583 2026] [:error] [pid 59060:tid 59093] [client 104.43.213.180:30396] File does not exist: /usr/local/apache/htdocs/suspended-page/sky.php
[Sun May 17 05:41:45.570045 2026] [:error] [pid 59060:tid 59090] [client 104.43.213.180:30396] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Sun May 17 05:41:45.764194 2026] [:error] [pid 59060:tid 59092] [client 104.43.213.180:30396] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Sun May 17 05:41:45.956171 2026] [:error] [pid 59060:tid 59080] [client 104.43.213.180:30396] File does not exist: /usr/local/apache/htdocs/suspended-page/xstelth.php
[Sun May 17 05:41:46.160458 2026] [:error] [pid 59060:tid 59079] [client 104.43.213.180:30396] File does not exist: /usr/local/apache/htdocs/suspended-page/3369.php
[Sun May 17 10:03:34.341027 2026] [:error] [pid 59166:tid 59180] [client 92.118.39.29:42788] [client 92.118.39.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "agkh9k_puQ1I47_0UrjGkQAAAMw"]
[Sun May 17 12:32:48.375380 2026] [:error] [pid 17234:tid 17248] [client 92.118.39.29:33600] [client 92.118.39.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aglE8NJ4QOrYRCeDR2g3XAAAAUw"]
[Sun May 17 13:31:14.866460 2026] [:error] [pid 10834:tid 10851] [client 172.64.223.220:13157] [client 172.64.223.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aglSohISNQ_Nf83-VpqHnAAAAcU"]
[Sun May 17 23:01:36.115050 2026] [:error] [pid 36652:tid 36673] [client 20.213.75.189:1366] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sun May 17 23:01:36.189146 2026] [:error] [pid 36652:tid 36664] [client 20.213.75.189:1366] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Sun May 17 23:01:36.226426 2026] [:error] [pid 36652:tid 36656] [client 20.213.75.189:1366] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Sun May 17 23:01:36.279434 2026] [:error] [pid 36652:tid 36675] [client 20.213.75.189:1366] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun May 17 23:01:36.297928 2026] [:error] [pid 36652:tid 36668] [client 20.213.75.189:1366] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Sun May 17 23:01:36.313040 2026] [:error] [pid 36652:tid 36674] [client 20.213.75.189:1366] [client 20.213.75.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/120f9.php"] [unique_id "agnYUDZrzQadnZADvj9ggQAAARQ"]
[Sun May 17 23:01:36.378651 2026] [:error] [pid 10784:tid 10822] [client 20.213.75.189:2860] [client 20.213.75.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/120f9.php"] [unique_id "agnYUGBWRlKsFkSZGxBUlQAAAZY"]
[Sun May 17 23:01:36.440047 2026] [:error] [pid 36652:tid 36667] [client 20.213.75.189:1407] [client 20.213.75.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/120f9.php"] [unique_id "agnYUDZrzQadnZADvj9gggAAAQ0"]
[Sun May 17 23:01:36.538719 2026] [:error] [pid 10835:tid 10888] [client 20.213.75.189:2258] [client 20.213.75.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/120f9.php"] [unique_id "agnYUEk8lW0-dtknLl85WgAAAg8"]
[Mon May 18 01:07:23.463170 2026] [:error] [pid 10834:tid 10868] [client 20.213.75.189:2533] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon May 18 01:07:23.483066 2026] [:error] [pid 10834:tid 10860] [client 20.213.75.189:2533] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon May 18 01:07:23.520995 2026] [:error] [pid 10834:tid 10856] [client 20.213.75.189:2533] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Mon May 18 01:07:23.539372 2026] [:error] [pid 10834:tid 10862] [client 20.213.75.189:2533] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon May 18 01:07:23.574562 2026] [:error] [pid 10834:tid 10869] [client 20.213.75.189:2533] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Mon May 18 01:07:23.592920 2026] [:error] [pid 10834:tid 10870] [client 20.213.75.189:2533] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Mon May 18 01:07:23.610660 2026] [:error] [pid 10834:tid 10859] [client 20.213.75.189:2533] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Mon May 18 01:07:23.692867 2026] [:error] [pid 10834:tid 10846] [client 20.213.75.189:2533] [client 20.213.75.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agn1yxISNQ_Nf83-VprEyQAAAcA"]
[Mon May 18 01:07:23.755964 2026] [:error] [pid 10835:tid 10881] [client 20.213.75.189:5154] [client 20.213.75.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agn1y0k8lW0-dtknLl9EZgAAAgg"]
[Mon May 18 01:07:23.817498 2026] [:error] [pid 11079:tid 11123] [client 20.213.75.189:1639] [client 20.213.75.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agn1y2eR3-DrxhvUqxEcjAAAAlM"]
[Mon May 18 01:07:23.881090 2026] [:error] [pid 59062:tid 59144] [client 20.213.75.189:1631] [client 20.213.75.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agn1yz4V9GkVWmCFmGZVvgAAAJU"]
[Mon May 18 02:19:35.083843 2026] [:error] [pid 10784:tid 10819] [client 20.213.75.189:1898] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon May 18 02:19:35.102201 2026] [:error] [pid 10784:tid 10807] [client 20.213.75.189:1898] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon May 18 02:19:35.141645 2026] [:error] [pid 10784:tid 10821] [client 20.213.75.189:1898] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Mon May 18 02:19:35.160271 2026] [:error] [pid 10784:tid 10804] [client 20.213.75.189:1898] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon May 18 02:19:35.200068 2026] [:error] [pid 10784:tid 10814] [client 20.213.75.189:1898] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Mon May 18 02:19:35.219554 2026] [:error] [pid 10784:tid 10818] [client 20.213.75.189:1898] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Mon May 18 02:19:35.238632 2026] [:error] [pid 10784:tid 10812] [client 20.213.75.189:1898] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Mon May 18 02:19:35.310716 2026] [:error] [pid 10784:tid 10813] [client 20.213.75.189:1898] [client 20.213.75.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agoGt2BWRlKsFkSZGxBgygAAAY4"]
[Mon May 18 02:19:35.373687 2026] [:error] [pid 10784:tid 10808] [client 20.213.75.189:2242] [client 20.213.75.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agoGt2BWRlKsFkSZGxBgywAAAYk"]
[Mon May 18 02:19:35.438985 2026] [:error] [pid 10784:tid 10803] [client 20.213.75.189:1313] [client 20.213.75.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agoGt2BWRlKsFkSZGxBgzAAAAYQ"]
[Mon May 18 02:19:35.499110 2026] [:error] [pid 10784:tid 10811] [client 20.213.75.189:1869] [client 20.213.75.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agoGt2BWRlKsFkSZGxBgzQAAAYw"]
[Mon May 18 18:43:01.325140 2026] [:error] [pid 44087:tid 44103] [client 52.187.250.77:1134] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon May 18 18:43:01.343916 2026] [:error] [pid 44087:tid 44113] [client 52.187.250.77:1134] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon May 18 18:43:01.381986 2026] [:error] [pid 44087:tid 44110] [client 52.187.250.77:1134] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Mon May 18 18:43:01.402479 2026] [:error] [pid 44087:tid 44096] [client 52.187.250.77:1134] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon May 18 18:43:01.464366 2026] [:error] [pid 44087:tid 44089] [client 52.187.250.77:1134] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Mon May 18 18:43:01.485813 2026] [:error] [pid 44087:tid 44095] [client 52.187.250.77:1134] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Mon May 18 18:43:01.504767 2026] [:error] [pid 44087:tid 44108] [client 52.187.250.77:1134] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Mon May 18 18:43:01.560275 2026] [:error] [pid 44087:tid 44111] [client 52.187.250.77:1134] [client 52.187.250.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agrtNW5HPHbH9GK7l6zwGQAAAdY"]
[Mon May 18 18:43:01.642223 2026] [:error] [pid 36492:tid 36533] [client 52.187.250.77:2295] [client 52.187.250.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agrtNWCVlogrkn9m2w7VhQAAAAs"]
[Mon May 18 18:43:01.712670 2026] [:error] [pid 36492:tid 36522] [client 52.187.250.77:2564] [client 52.187.250.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agrtNWCVlogrkn9m2w7VhgAAAAA"]
[Mon May 18 18:43:01.841448 2026] [:error] [pid 36491:tid 36511] [client 52.187.250.77:2619] [client 52.187.250.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agrtNU555B9CZb6D60nAtgAAAVA"]
[Mon May 18 23:28:24.080728 2026] [:error] [pid 44010:tid 44015] [client 34.82.154.86:49402] [client 34.82.154.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "agswGDcFUuogD3-74-aD6gAAAMM"]
[Mon May 18 23:28:24.447363 2026] [:error] [pid 36579:tid 36602] [client 34.82.154.86:65320] [client 34.82.154.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "agswGF-aoZxBfgL5vDyiVwAAAFQ"]
[Mon May 18 23:28:24.884833 2026] [:error] [pid 36579:tid 36595] [client 34.82.154.86:63832] [client 34.82.154.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "agswGF-aoZxBfgL5vDyiWAAAAE0"]
[Mon May 18 23:28:25.241731 2026] [:error] [pid 36491:tid 36502] [client 34.82.154.86:63204] [client 34.82.154.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "agswGU555B9CZb6D60nlDgAAAUc"]
[Mon May 18 23:28:25.618969 2026] [:error] [pid 36491:tid 36508] [client 34.82.154.86:54294] [client 34.82.154.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "agswGU555B9CZb6D60nlEQAAAU0"]
[Mon May 18 23:28:26.027583 2026] [:error] [pid 36491:tid 36499] [client 34.82.154.86:52838] [client 34.82.154.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "agswGk555B9CZb6D60nlEwAAAUQ"]
[Mon May 18 23:28:26.408806 2026] [:error] [pid 36579:tid 36588] [client 34.82.154.86:61695] [client 34.82.154.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "agswGl-aoZxBfgL5vDyiXwAAAEY"]
[Mon May 18 23:28:26.846813 2026] [:error] [pid 36579:tid 36584] [client 34.82.154.86:49819] [client 34.82.154.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "agswGl-aoZxBfgL5vDyiYwAAAEI"]
[Mon May 18 23:28:27.181903 2026] [:error] [pid 36579:tid 36583] [client 34.82.154.86:50175] [client 34.82.154.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "agswG1-aoZxBfgL5vDyiZwAAAEE"]
[Mon May 18 23:28:27.572372 2026] [:error] [pid 44087:tid 44095] [client 34.82.154.86:50956] [client 34.82.154.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "agswG25HPHbH9GK7l6wC9AAAAcY"]
[Mon May 18 23:28:27.988935 2026] [:error] [pid 44010:tid 44030] [client 34.82.154.86:61847] [client 34.82.154.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "agswGzcFUuogD3-74-aD7gAAANI"]
[Mon May 18 23:28:28.440651 2026] [:error] [pid 44046:tid 44072] [client 34.82.154.86:55109] [client 34.82.154.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "agswHIYF4k2jfXJBXk0GfQAAAZg"]
[Mon May 18 23:28:28.813130 2026] [:error] [pid 36491:tid 36506] [client 34.82.154.86:52789] [client 34.82.154.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "agswHE555B9CZb6D60nlGQAAAUs"]
[Mon May 18 23:28:29.163951 2026] [:error] [pid 36491:tid 36495] [client 34.82.154.86:54457] [client 34.82.154.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "agswHU555B9CZb6D60nlGgAAAUA"]
[Tue May 19 01:53:43.492361 2026] [:error] [pid 44046:tid 44065] [client 20.28.235.248:1860] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue May 19 01:53:43.509178 2026] [:error] [pid 44046:tid 44048] [client 20.28.235.248:1860] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue May 19 01:53:43.543612 2026] [:error] [pid 44046:tid 44052] [client 20.28.235.248:1860] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Tue May 19 01:53:43.560498 2026] [:error] [pid 44046:tid 44056] [client 20.28.235.248:1860] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue May 19 01:53:43.602000 2026] [:error] [pid 44046:tid 44058] [client 20.28.235.248:1860] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Tue May 19 01:53:43.620999 2026] [:error] [pid 44046:tid 44061] [client 20.28.235.248:1860] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Tue May 19 01:53:43.639252 2026] [:error] [pid 44046:tid 44054] [client 20.28.235.248:1860] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Tue May 19 01:53:43.808636 2026] [:error] [pid 44046:tid 44060] [client 20.28.235.248:1860] [client 20.28.235.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agtSJ4YF4k2jfXJBXk0Q_AAAAYw"]
[Tue May 19 01:53:43.936747 2026] [:error] [pid 36579:tid 36591] [client 20.28.235.248:3112] [client 20.28.235.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agtSJ1-aoZxBfgL5vDy02gAAAEk"]
[Tue May 19 01:53:44.282342 2026] [:error] [pid 44046:tid 44067] [client 20.28.235.248:1118] [client 20.28.235.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agtSKIYF4k2jfXJBXk0Q_QAAAZM"]
[Tue May 19 01:53:44.348040 2026] [:error] [pid 36493:tid 36566] [client 20.28.235.248:1826] [client 20.28.235.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agtSKAynkzQB5nM668rkNgAAARE"]
[Tue May 19 23:31:47.693299 2026] [:error] [pid 46815:tid 46831] [client 40.74.77.197:1898] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue May 19 23:31:47.824483 2026] [:error] [pid 46815:tid 46833] [client 40.74.77.197:1898] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue May 19 23:31:48.071843 2026] [:error] [pid 46815:tid 46822] [client 40.74.77.197:1898] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Tue May 19 23:31:48.195613 2026] [:error] [pid 46815:tid 46818] [client 40.74.77.197:1898] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue May 19 23:31:48.442101 2026] [:error] [pid 46815:tid 46825] [client 40.74.77.197:1898] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Tue May 19 23:31:48.565463 2026] [:error] [pid 46815:tid 46821] [client 40.74.77.197:1898] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Tue May 19 23:31:48.688717 2026] [:error] [pid 46815:tid 46835] [client 40.74.77.197:1898] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Tue May 19 23:31:49.088278 2026] [:error] [pid 46815:tid 46829] [client 40.74.77.197:1898] [client 40.74.77.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agyCZSPnRhJOmA06LgqDnwAAAUw"]
[Tue May 19 23:31:49.572996 2026] [:error] [pid 38699:tid 38756] [client 40.74.77.197:1896] [client 40.74.77.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agyCZb--Adsw_P-dtha6dgAAAE4"]
[Tue May 19 23:31:50.140094 2026] [:error] [pid 46896:tid 46902] [client 40.74.77.197:1730] [client 40.74.77.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agyCZqCHyzL3Ci9LGE1r2AAAAYQ"]
[Tue May 19 23:31:50.793284 2026] [:error] [pid 29622:tid 29643] [client 40.74.77.197:1917] [client 40.74.77.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "agyCZjkOqPKWkPs_P15ZdwAAAhM"]
[Wed May 20 00:34:23.626627 2026] [:error] [pid 38705:tid 38778] [client 4.204.229.70:26893] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Wed May 20 00:34:23.838394 2026] [:error] [pid 38705:tid 38784] [client 4.204.229.70:26893] File does not exist: /usr/local/apache/htdocs/suspended-page/md5.php
[Wed May 20 00:34:24.053385 2026] [:error] [pid 38705:tid 38785] [client 4.204.229.70:26893] File does not exist: /usr/local/apache/htdocs/suspended-page/ops.php
[Wed May 20 00:34:24.265588 2026] [:error] [pid 38705:tid 38769] [client 4.204.229.70:26893] File does not exist: /usr/local/apache/htdocs/suspended-page/6ph78840.php
[Wed May 20 00:34:24.480478 2026] [:error] [pid 38705:tid 38780] [client 4.204.229.70:26893] File does not exist: /usr/local/apache/htdocs/suspended-page/zxz.php
[Wed May 20 00:34:24.694171 2026] [:error] [pid 38705:tid 38772] [client 4.204.229.70:26893] File does not exist: /usr/local/apache/htdocs/suspended-page/at.php
[Wed May 20 00:34:24.906282 2026] [:error] [pid 38705:tid 38789] [client 4.204.229.70:26893] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Wed May 20 00:34:25.358078 2026] [:error] [pid 38705:tid 38771] [client 4.204.229.70:26893] File does not exist: /usr/local/apache/htdocs/suspended-page/ingfo.php
[Wed May 20 00:34:25.879559 2026] [:error] [pid 38705:tid 38776] [client 4.204.229.70:26893] File does not exist: /usr/local/apache/htdocs/suspended-page/alfs.php
[Wed May 20 00:34:26.110886 2026] [:error] [pid 38705:tid 38770] [client 4.204.229.70:26893] File does not exist: /usr/local/apache/htdocs/suspended-page/genco.php
[Wed May 20 00:34:26.348518 2026] [:error] [pid 38705:tid 38774] [client 4.204.229.70:26893] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pha.php"] [unique_id "agyREsg5dNOZ5umN9ltr4gAAAIU"]
[Wed May 20 00:34:28.321617 2026] [:error] [pid 29823:tid 29850] [client 4.204.229.70:15537] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pha.php"] [unique_id "agyRFGO09C0nAz8vRk5oiQAAAcs"]
[Wed May 20 00:34:29.204292 2026] [:error] [pid 29823:tid 29851] [client 4.204.229.70:23107] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pha.php"] [unique_id "agyRFWO09C0nAz8vRk5oigAAAcw"]
[Wed May 20 00:34:30.156184 2026] [:error] [pid 38705:tid 38786] [client 4.204.229.70:12812] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/pha.php"] [unique_id "agyRFsg5dNOZ5umN9ltr4wAAAJE"]
[Wed May 20 00:34:31.939565 2026] [:error] [pid 38697:tid 38724] [client 4.204.229.70:12850] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/c55cdler.php"] [unique_id "agyRF6XP9pP6Kgt-msRoegAAAAk"]
[Wed May 20 00:34:32.877364 2026] [:error] [pid 55881:tid 55904] [client 4.204.229.70:19998] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/c55cdler.php"] [unique_id "agyRGO-UExma0LUC7WAWDQAAAlU"]
[Wed May 20 00:34:33.486814 2026] [:error] [pid 46815:tid 46825] [client 4.204.229.70:9277] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/c55cdler.php"] [unique_id "agyRGSPnRhJOmA06LgqHZAAAAUg"]
[Wed May 20 00:34:40.775768 2026] [:error] [pid 38699:tid 38764] [client 4.204.229.70:30295] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/c55cdler.php"] [unique_id "agyRIL--Adsw_P-dthbFTQAAAFY"]
[Wed May 20 00:34:41.599266 2026] [:error] [pid 38699:tid 38760] [client 4.204.229.70:8100] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/guiler.php"] [unique_id "agyRIb--Adsw_P-dthbFTgAAAFI"]
[Wed May 20 00:34:44.922748 2026] [:error] [pid 29823:tid 29842] [client 4.204.229.70:14961] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/guiler.php"] [unique_id "agyRJGO09C0nAz8vRk5ojAAAAcc"]
[Wed May 20 00:34:46.727344 2026] [:error] [pid 46815:tid 46833] [client 4.204.229.70:8534] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/guiler.php"] [unique_id "agyRJiPnRhJOmA06LgqHagAAAVA"]
[Wed May 20 00:34:48.830201 2026] [:error] [pid 41573:tid 41585] [client 4.204.229.70:31756] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/guiler.php"] [unique_id "agyRKC1A2bd6JDSW9Ra7HgAAAQo"]
[Wed May 20 00:34:51.311782 2026] [:error] [pid 41573:tid 41584] [client 4.204.229.70:12396] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doko.php"] [unique_id "agyRKy1A2bd6JDSW9Ra7HwAAAQk"]
[Wed May 20 00:34:52.548283 2026] [:error] [pid 38814:tid 38824] [client 4.204.229.70:36794] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doko.php"] [unique_id "agyRLAvkKuBwP0epzWerlwAAAMg"]
[Wed May 20 00:34:54.050099 2026] [:error] [pid 38699:tid 38762] [client 4.204.229.70:28122] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doko.php"] [unique_id "agyRLr--Adsw_P-dthbFUQAAAFQ"]
[Wed May 20 00:34:56.028992 2026] [:error] [pid 41573:tid 41576] [client 4.204.229.70:24998] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/doko.php"] [unique_id "agyRMC1A2bd6JDSW9Ra7IgAAAQE"]
[Wed May 20 00:34:59.647814 2026] [:error] [pid 46815:tid 46822] [client 4.204.229.70:45035] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Okxob.php"] [unique_id "agyRMyPnRhJOmA06LgqHbgAAAUU"]
[Wed May 20 00:35:03.076392 2026] [:error] [pid 38699:tid 38744] [client 4.204.229.70:45046] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Okxob.php"] [unique_id "agyRN7--Adsw_P-dthbFVAAAAEI"]
[Wed May 20 00:35:06.043006 2026] [:error] [pid 38699:tid 38756] [client 4.204.229.70:25001] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Okxob.php"] [unique_id "agyROr--Adsw_P-dthbFVgAAAE4"]
[Wed May 20 00:35:06.984396 2026] [:error] [pid 29823:tid 29851] [client 4.204.229.70:27336] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/Okxob.php"] [unique_id "agyROmO09C0nAz8vRk5omQAAAcw"]
[Wed May 20 00:35:07.879509 2026] [:error] [pid 29823:tid 29839] [client 4.204.229.70:3415] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "agyRO2O09C0nAz8vRk5omwAAAcQ"]
[Wed May 20 00:35:08.833331 2026] [:error] [pid 41573:tid 41589] [client 4.204.229.70:45027] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "agyRPC1A2bd6JDSW9Ra7MwAAAQ4"]
[Wed May 20 00:35:10.004337 2026] [:error] [pid 29823:tid 29857] [client 4.204.229.70:31207] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "agyRPmO09C0nAz8vRk5onAAAAdI"]
[Wed May 20 00:35:11.869252 2026] [:error] [pid 55881:tid 55898] [client 4.204.229.70:3419] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "agyRP--UExma0LUC7WAWFQAAAk8"]
[Wed May 20 00:35:12.789102 2026] [:error] [pid 41573:tid 41597] [client 4.204.229.70:36697] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xenon1337.php"] [unique_id "agyRQC1A2bd6JDSW9Ra7NQAAARY"]
[Wed May 20 00:35:13.735646 2026] [:error] [pid 41573:tid 41579] [client 4.204.229.70:49334] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xenon1337.php"] [unique_id "agyRQS1A2bd6JDSW9Ra7NwAAAQQ"]
[Wed May 20 00:35:14.826342 2026] [:error] [pid 29823:tid 29840] [client 4.204.229.70:49345] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xenon1337.php"] [unique_id "agyRQmO09C0nAz8vRk5opQAAAcU"]
[Wed May 20 00:35:16.025473 2026] [:error] [pid 46815:tid 46831] [client 4.204.229.70:3425] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xenon1337.php"] [unique_id "agyRRCPnRhJOmA06LgqHhAAAAU4"]
[Wed May 20 00:35:17.383928 2026] [:error] [pid 41573:tid 41584] [client 4.204.229.70:49298] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa403.php"] [unique_id "agyRRS1A2bd6JDSW9Ra7QgAAAQk"]
[Wed May 20 00:35:18.920349 2026] [:error] [pid 41573:tid 41576] [client 4.204.229.70:28373] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa403.php"] [unique_id "agyRRi1A2bd6JDSW9Ra7RQAAAQE"]
[Wed May 20 00:35:22.023862 2026] [:error] [pid 38697:tid 38736] [client 4.204.229.70:36742] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa403.php"] [unique_id "agyRSqXP9pP6Kgt-msRohgAAABU"]
[Wed May 20 00:35:22.538951 2026] [:error] [pid 46896:tid 46899] [client 4.204.229.70:31788] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfa403.php"] [unique_id "agyRSqCHyzL3Ci9LGE1ueAAAAYE"]
[Wed May 20 00:35:24.589070 2026] [:error] [pid 29823:tid 29858] [client 4.204.229.70:8898] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yenifm.php"] [unique_id "agyRTGO09C0nAz8vRk5oxAAAAdM"]
[Wed May 20 00:35:25.592635 2026] [:error] [pid 55881:tid 55888] [client 4.204.229.70:11452] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/yenifm.php"] [unique_id "agyRTe-UExma0LUC7WAWGwAAAkU"]
[Wed May 20 00:35:26.701148 2026] [:error] [pid 38697:tid 38719] [client 4.204.229.70:16779] File does not exist: /usr/local/apache/htdocs/suspended-page/yenifm.php
[Wed May 20 00:35:26.923232 2026] [:error] [pid 38697:tid 38731] [client 4.204.229.70:16779] File does not exist: /usr/local/apache/htdocs/suspended-page/test11.php
[Wed May 20 00:35:27.135980 2026] [:error] [pid 38697:tid 38735] [client 4.204.229.70:16779] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-widget.php
[Wed May 20 00:35:28.587055 2026] [:error] [pid 38697:tid 38735] [client 4.204.229.70:16779] File does not exist: /usr/local/apache/htdocs/suspended-page/25d653587fdfd1.php
[Wed May 20 00:35:28.812583 2026] [:error] [pid 38697:tid 38739] [client 4.204.229.70:16779] File does not exist: /usr/local/apache/htdocs/suspended-page/test5.php
[Wed May 20 00:35:29.053498 2026] [:error] [pid 38697:tid 38734] [client 4.204.229.70:16779] File does not exist: /usr/local/apache/htdocs/suspended-page/mih.php
[Wed May 20 00:35:29.412487 2026] [:error] [pid 38697:tid 38737] [client 4.204.229.70:16779] File does not exist: /usr/local/apache/htdocs/suspended-page/zero.php
[Wed May 20 00:35:29.627993 2026] [:error] [pid 38697:tid 38716] [client 4.204.229.70:16779] File does not exist: /usr/local/apache/htdocs/suspended-page/koala.php
[Wed May 20 00:35:29.846405 2026] [:error] [pid 38697:tid 38730] [client 4.204.229.70:16779] File does not exist: /usr/local/apache/htdocs/suspended-page/mac.php
[Wed May 20 00:35:30.103588 2026] [:error] [pid 38697:tid 38728] [client 4.204.229.70:16779] File does not exist: /usr/local/apache/htdocs/suspended-page/hayuk.php
[Wed May 20 00:35:30.316450 2026] [:error] [pid 38697:tid 38718] [client 4.204.229.70:16779] File does not exist: /usr/local/apache/htdocs/suspended-page/0d.php
[Wed May 20 00:35:30.670494 2026] [:error] [pid 38697:tid 38715] [client 4.204.229.70:16779] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wefile.php"] [unique_id "agyRUqXP9pP6Kgt-msRolAAAAAA"]
[Wed May 20 00:35:31.866355 2026] [:error] [pid 29823:tid 29850] [client 4.204.229.70:32113] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wefile.php"] [unique_id "agyRU2O09C0nAz8vRk5oxgAAAcs"]
[Wed May 20 00:35:32.986932 2026] [:error] [pid 38697:tid 38725] [client 4.204.229.70:22665] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wefile.php"] [unique_id "agyRVKXP9pP6Kgt-msRolgAAAAo"]
[Wed May 20 00:35:33.968553 2026] [:error] [pid 38699:tid 38745] [client 4.204.229.70:36747] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wefile.php"] [unique_id "agyRVb--Adsw_P-dthbFZAAAAEM"]
[Wed May 20 00:35:35.642596 2026] [:error] [pid 38814:tid 38824] [client 4.204.229.70:31768] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/casp3.php"] [unique_id "agyRVwvkKuBwP0epzWeroQAAAMg"]
[Wed May 20 00:35:36.796841 2026] [:error] [pid 38697:tid 38738] [client 4.204.229.70:13696] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/casp3.php"] [unique_id "agyRWKXP9pP6Kgt-msRomAAAABc"]
[Wed May 20 00:35:38.313933 2026] [:error] [pid 38699:tid 38755] [client 4.204.229.70:12346] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/casp3.php"] [unique_id "agyRWr--Adsw_P-dthbFZgAAAE0"]
[Wed May 20 00:35:39.821141 2026] [:error] [pid 38699:tid 38759] [client 4.204.229.70:36694] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/casp3.php"] [unique_id "agyRW7--Adsw_P-dthbFaAAAAFE"]
[Wed May 20 00:35:43.166725 2026] [:error] [pid 46896:tid 46906] [client 4.204.229.70:36727] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/unvouc.php"] [unique_id "agyRX6CHyzL3Ci9LGE1ufAAAAYg"]
[Wed May 20 00:35:43.973573 2026] [:error] [pid 38814:tid 38839] [client 4.204.229.70:24949] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/unvouc.php"] [unique_id "agyRXwvkKuBwP0epzWerpAAAANc"]
[Wed May 20 00:35:45.857071 2026] [:error] [pid 55881:tid 55897] [client 4.204.229.70:16887] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/unvouc.php"] [unique_id "agyRYe-UExma0LUC7WAWHAAAAk4"]
[Wed May 20 00:35:46.621482 2026] [:error] [pid 38814:tid 38823] [client 4.204.229.70:13722] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/unvouc.php"] [unique_id "agyRYgvkKuBwP0epzWerpQAAAMc"]
[Wed May 20 00:35:47.939178 2026] [:error] [pid 46896:tid 46912] [client 4.204.229.70:32189] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-signin.php"] [unique_id "agyRY6CHyzL3Ci9LGE1ufQAAAY4"]
[Wed May 20 00:35:49.678387 2026] [:error] [pid 38697:tid 38716] [client 4.204.229.70:32176] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-signin.php"] [unique_id "agyRZaXP9pP6Kgt-msRonAAAAAE"]
[Wed May 20 00:35:53.151218 2026] [:error] [pid 41573:tid 41599] [client 4.204.229.70:12295] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-signin.php"] [unique_id "agyRaS1A2bd6JDSW9Ra7UQAAARg"]
[Wed May 20 00:35:54.273842 2026] [:error] [pid 41573:tid 41593] [client 4.204.229.70:24923] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-signin.php"] [unique_id "agyRai1A2bd6JDSW9Ra7VAAAARI"]
[Wed May 20 00:35:56.021128 2026] [:error] [pid 38705:tid 38777] [client 4.204.229.70:6700] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agyRbMg5dNOZ5umN9ltr8QAAAIg"]
[Wed May 20 00:35:56.738463 2026] [:error] [pid 55881:tid 55907] [client 4.204.229.70:24597] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agyRbO-UExma0LUC7WAWHQAAAlg"]
[Wed May 20 00:35:57.930699 2026] [:error] [pid 38699:tid 38742] [client 4.204.229.70:32186] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agyRbb--Adsw_P-dthbFbAAAAEA"]
[Wed May 20 00:35:58.684421 2026] [:error] [pid 38699:tid 38754] [client 4.204.229.70:11829] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agyRbr--Adsw_P-dthbFbQAAAEw"]
[Wed May 20 00:35:59.576158 2026] [:error] [pid 46815:tid 46837] [client 4.204.229.70:41046] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "agyRbyPnRhJOmA06LgqHigAAAVQ"]
[Wed May 20 00:36:01.274860 2026] [:error] [pid 38699:tid 38761] [client 4.204.229.70:27388] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "agyRcb--Adsw_P-dthbFbwAAAFM"]
[Wed May 20 00:36:03.772585 2026] [:error] [pid 38699:tid 38747] [client 4.204.229.70:22716] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "agyRc7--Adsw_P-dthbFcQAAAEU"]
[Wed May 20 00:36:05.325458 2026] [:error] [pid 46815:tid 46828] [client 4.204.229.70:11792] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "agyRdSPnRhJOmA06LgqHiwAAAUs"]
[Wed May 20 00:36:08.130253 2026] [:error] [pid 38699:tid 38762] [client 4.204.229.70:41040] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links.php"] [unique_id "agyReL--Adsw_P-dthbFdQAAAFQ"]
[Wed May 20 00:36:10.415779 2026] [:error] [pid 38699:tid 38750] [client 4.204.229.70:30342] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links.php"] [unique_id "agyRer--Adsw_P-dthbFdgAAAEg"]
[Wed May 20 00:36:11.629782 2026] [:error] [pid 38699:tid 38765] [client 4.204.229.70:41067] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links.php"] [unique_id "agyRe7--Adsw_P-dthbFeQAAAFc"]
[Wed May 20 00:36:12.643490 2026] [:error] [pid 41573:tid 41593] [client 4.204.229.70:41087] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-links.php"] [unique_id "agyRfC1A2bd6JDSW9Ra7XQAAARI"]
[Wed May 20 00:36:13.368693 2026] [:error] [pid 41573:tid 41598] [client 4.204.229.70:15586] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/upload/wp-info.php"] [unique_id "agyRfS1A2bd6JDSW9Ra7XgAAARc"]
[Wed May 20 00:36:14.352430 2026] [:error] [pid 29823:tid 29853] [client 4.204.229.70:36258] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/upload/wp-info.php"] [unique_id "agyRfmO09C0nAz8vRk5o0QAAAc4"]
[Wed May 20 00:36:15.196861 2026] [:error] [pid 46896:tid 46908] [client 4.204.229.70:36225] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/upload/wp-info.php"] [unique_id "agyRf6CHyzL3Ci9LGE1ufgAAAYo"]
[Wed May 20 00:36:16.180151 2026] [:error] [pid 38699:tid 38755] [client 4.204.229.70:6257] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/upload/wp-info.php"] [unique_id "agyRgL--Adsw_P-dthbFfwAAAE0"]
[Wed May 20 00:36:17.993552 2026] [:error] [pid 38699:tid 38750] [client 4.204.229.70:37924] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "agyRgb--Adsw_P-dthbFhQAAAEg"]
[Wed May 20 00:36:21.167038 2026] [:error] [pid 38699:tid 38755] [client 4.204.229.70:3474] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "agyRhb--Adsw_P-dthbFjQAAAE0"]
[Wed May 20 00:36:22.376355 2026] [:error] [pid 29823:tid 29835] [client 4.204.229.70:3469] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "agyRhmO09C0nAz8vRk5o0wAAAcA"]
[Wed May 20 00:36:27.596249 2026] [:error] [pid 38697:tid 38726] [client 4.204.229.70:32566] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "agyRi6XP9pP6Kgt-msRoowAAAAs"]
[Wed May 20 00:36:28.520931 2026] [:error] [pid 29823:tid 29837] [client 4.204.229.70:22737] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/half.php"] [unique_id "agyRjGO09C0nAz8vRk5o3AAAAcI"]
[Wed May 20 00:36:29.917923 2026] [:error] [pid 41573:tid 41592] [client 4.204.229.70:32572] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/half.php"] [unique_id "agyRjS1A2bd6JDSW9Ra7YgAAARE"]
[Wed May 20 00:36:32.255488 2026] [:error] [pid 38699:tid 38763] [client 4.204.229.70:37920] File does not exist: /usr/local/apache/htdocs/suspended-page/half.php
[Wed May 20 00:36:32.465613 2026] [:error] [pid 38699:tid 38765] [client 4.204.229.70:37920] File does not exist: /usr/local/apache/htdocs/suspended-page/2P.php
[Wed May 20 00:36:32.686827 2026] [:error] [pid 38699:tid 38745] [client 4.204.229.70:37920] File does not exist: /usr/local/apache/htdocs/suspended-page/tires.php
[Wed May 20 00:36:32.895946 2026] [:error] [pid 38699:tid 38748] [client 4.204.229.70:37920] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Wed May 20 00:36:33.414833 2026] [:error] [pid 38699:tid 38753] [client 4.204.229.70:37920] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-block.php
[Wed May 20 00:36:33.624385 2026] [:error] [pid 38699:tid 38764] [client 4.204.229.70:37920] File does not exist: /usr/local/apache/htdocs/suspended-page/like.php
[Wed May 20 00:36:33.868451 2026] [:error] [pid 38699:tid 38751] [client 4.204.229.70:37920] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Wed May 20 00:36:34.284333 2026] [:error] [pid 38699:tid 38746] [client 4.204.229.70:37920] [client 4.204.229.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "agyRkr--Adsw_P-dthbFrgAAAEQ"]
[Wed May 20 00:36:36.030660 2026] [:error] [pid 38697:tid 38727] [client 4.204.229.70:22738] File does not exist: /usr/local/apache/htdocs/suspended-page/wpxml.php
[Wed May 20 00:36:36.528814 2026] [:error] [pid 38697:tid 38722] [client 4.204.229.70:22738] File does not exist: /usr/local/apache/htdocs/suspended-page/bob.php
[Wed May 20 00:36:36.742114 2026] [:error] [pid 38697:tid 38735] [client 4.204.229.70:22738] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/spawns.php"] [unique_id "agyRlKXP9pP6Kgt-msRopwAAABQ"]
[Wed May 20 00:36:37.767816 2026] [:error] [pid 38814:tid 38817] [client 4.204.229.70:32567] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/spawns.php"] [unique_id "agyRlQvkKuBwP0epzWerqgAAAME"]
[Wed May 20 00:36:38.860553 2026] [:error] [pid 29823:tid 29851] [client 4.204.229.70:32533] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/spawns.php"] [unique_id "agyRlmO09C0nAz8vRk5o4QAAAcw"]
[Wed May 20 00:36:40.342913 2026] [:error] [pid 38697:tid 38739] [client 4.204.229.70:24079] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/spawns.php"] [unique_id "agyRmKXP9pP6Kgt-msRoqAAAABg"]
[Wed May 20 00:36:42.347357 2026] [:error] [pid 41573:tid 41589] [client 4.204.229.70:3531] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t3s.php"] [unique_id "agyRmi1A2bd6JDSW9Ra7aQAAAQ4"]
[Wed May 20 00:36:43.438999 2026] [:error] [pid 41573:tid 41595] [client 4.204.229.70:11462] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t3s.php"] [unique_id "agyRmy1A2bd6JDSW9Ra7awAAARQ"]
[Wed May 20 00:36:44.483608 2026] [:error] [pid 38705:tid 38779] [client 4.204.229.70:4253] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t3s.php"] [unique_id "agyRnMg5dNOZ5umN9ltr8wAAAIo"]
[Wed May 20 00:36:45.905389 2026] [:error] [pid 38699:tid 38760] [client 4.204.229.70:4244] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t3s.php"] [unique_id "agyRnb--Adsw_P-dthbFtwAAAFI"]
[Wed May 20 00:36:46.907844 2026] [:error] [pid 41573:tid 41579] [client 4.204.229.70:13401] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "agyRni1A2bd6JDSW9Ra7bwAAAQQ"]
[Wed May 20 00:36:49.053393 2026] [:error] [pid 55881:tid 55894] [client 4.204.229.70:15248] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "agyRoe-UExma0LUC7WAWIwAAAks"]
[Wed May 20 00:36:50.355453 2026] [:error] [pid 38814:tid 38834] [client 4.204.229.70:32544] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "agyRogvkKuBwP0epzWerrQAAANI"]
[Wed May 20 00:36:50.851999 2026] [:error] [pid 55881:tid 55886] [client 4.204.229.70:4226] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "agyRou-UExma0LUC7WAWJQAAAkM"]
[Wed May 20 00:36:52.758542 2026] [:error] [pid 46896:tid 46919] [client 4.204.229.70:32536] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x/"] [unique_id "agyRpKCHyzL3Ci9LGE1ugQAAAZU"]
[Wed May 20 00:36:53.602132 2026] [:error] [pid 46896:tid 46910] [client 4.204.229.70:24067] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x/"] [unique_id "agyRpaCHyzL3Ci9LGE1ugwAAAYw"]
[Wed May 20 00:36:55.320320 2026] [:error] [pid 29622:tid 29626] [client 4.204.229.70:4256] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x/"] [unique_id "agyRpzkOqPKWkPs_P15bkAAAAgI"]
[Wed May 20 00:36:56.491779 2026] [:error] [pid 38699:tid 38756] [client 4.204.229.70:11496] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/x/"] [unique_id "agyRqL--Adsw_P-dthbFvAAAAE4"]
[Wed May 20 00:36:57.214937 2026] [:error] [pid 55881:tid 55900] [client 4.204.229.70:4266] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "agyRqe-UExma0LUC7WAWKwAAAlE"]
[Wed May 20 00:36:59.450000 2026] [:error] [pid 29823:tid 29863] [client 4.204.229.70:37919] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "agyRq2O09C0nAz8vRk5o9wAAAdg"]
[Wed May 20 00:37:00.364666 2026] [:error] [pid 29823:tid 29855] [client 4.204.229.70:44978] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "agyRrGO09C0nAz8vRk5o-QAAAdA"]
[Wed May 20 00:37:01.345095 2026] [:error] [pid 46896:tid 46907] [client 4.204.229.70:11483] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "agyRraCHyzL3Ci9LGE1uhgAAAYk"]
[Wed May 20 00:37:02.355178 2026] [:error] [pid 38697:tid 38725] [client 4.204.229.70:44960] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "agyRrqXP9pP6Kgt-msRorgAAAAo"]
[Wed May 20 00:37:03.167363 2026] [:error] [pid 41573:tid 41579] [client 4.204.229.70:12868] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "agyRry1A2bd6JDSW9Ra7fwAAAQQ"]
[Wed May 20 00:37:05.121119 2026] [:error] [pid 41573:tid 41585] [client 4.204.229.70:12907] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "agyRsS1A2bd6JDSW9Ra7gAAAAQo"]
[Wed May 20 00:37:08.134198 2026] [:error] [pid 38699:tid 38762] [client 4.204.229.70:28430] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "agyRtL--Adsw_P-dthbFwQAAAFQ"]
[Wed May 20 00:37:09.071877 2026] [:error] [pid 38699:tid 38743] [client 4.204.229.70:17294] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uwu.php"] [unique_id "agyRtb--Adsw_P-dthbFxAAAAEE"]
[Wed May 20 00:37:10.014543 2026] [:error] [pid 41573:tid 41575] [client 4.204.229.70:23425] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uwu.php"] [unique_id "agyRti1A2bd6JDSW9Ra7iAAAAQA"]
[Wed May 20 00:37:11.217142 2026] [:error] [pid 41573:tid 41577] [client 4.204.229.70:17374] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uwu.php"] [unique_id "agyRty1A2bd6JDSW9Ra7igAAAQI"]
[Wed May 20 00:37:13.336299 2026] [:error] [pid 41573:tid 41587] [client 4.204.229.70:28457] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uwu.php"] [unique_id "agyRuS1A2bd6JDSW9Ra7jgAAAQw"]
[Wed May 20 00:37:14.516633 2026] [:error] [pid 29622:tid 29638] [client 4.204.229.70:28418] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uwa.php"] [unique_id "agyRujkOqPKWkPs_P15bkQAAAg4"]
[Wed May 20 00:37:15.266664 2026] [:error] [pid 38697:tid 38716] [client 4.204.229.70:7274] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uwa.php"] [unique_id "agyRu6XP9pP6Kgt-msRouAAAAAE"]
[Wed May 20 00:37:17.016169 2026] [:error] [pid 41573:tid 41586] [client 4.204.229.70:7263] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uwa.php"] [unique_id "agyRvS1A2bd6JDSW9Ra7kQAAAQs"]
[Wed May 20 00:37:18.105780 2026] [:error] [pid 38699:tid 38759] [client 4.204.229.70:20086] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uwa.php"] [unique_id "agyRvr--Adsw_P-dthbFzAAAAFE"]
[Wed May 20 00:37:19.119364 2026] [:error] [pid 41573:tid 41592] [client 4.204.229.70:17319] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/crgio.php"] [unique_id "agyRvy1A2bd6JDSW9Ra7lAAAARE"]
[Wed May 20 00:37:20.858966 2026] [:error] [pid 38697:tid 38717] [client 4.204.229.70:37391] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/crgio.php"] [unique_id "agyRwKXP9pP6Kgt-msRovQAAAAI"]
[Wed May 20 00:37:21.489772 2026] [:error] [pid 38699:tid 38752] [client 4.204.229.70:14206] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/crgio.php"] [unique_id "agyRwb--Adsw_P-dthbFzgAAAEo"]
[Wed May 20 00:37:23.166015 2026] [:error] [pid 41573:tid 41589] [client 4.204.229.70:17286] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/crgio.php"] [unique_id "agyRwy1A2bd6JDSW9Ra7lgAAAQ4"]
[Wed May 20 00:37:25.647868 2026] [:error] [pid 38699:tid 38747] [client 4.204.229.70:15549] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/geforce.php"] [unique_id "agyRxb--Adsw_P-dthbF2wAAAEU"]
[Wed May 20 00:37:26.798687 2026] [:error] [pid 38699:tid 38757] [client 4.204.229.70:15547] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/geforce.php"] [unique_id "agyRxr--Adsw_P-dthbF3gAAAE8"]
[Wed May 20 00:37:28.749440 2026] [:error] [pid 38699:tid 38742] [client 4.204.229.70:7255] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/geforce.php"] [unique_id "agyRyL--Adsw_P-dthbF5gAAAEA"]
[Wed May 20 00:37:30.933400 2026] [:error] [pid 46896:tid 46911] [client 4.204.229.70:27406] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/geforce.php"] [unique_id "agyRyqCHyzL3Ci9LGE1uiAAAAY0"]
[Wed May 20 00:37:33.345044 2026] [:error] [pid 46815:tid 46830] [client 4.204.229.70:3899] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "agyRzSPnRhJOmA06LgqHlAAAAU0"]
[Wed May 20 00:37:34.017037 2026] [:error] [pid 38705:tid 38785] [client 4.204.229.70:3846] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "agyRzsg5dNOZ5umN9ltr9wAAAJA"]
[Wed May 20 00:37:35.327612 2026] [:error] [pid 41573:tid 41596] [client 4.204.229.70:3755] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "agyRzy1A2bd6JDSW9Ra7mQAAARU"]
[Wed May 20 00:37:36.276423 2026] [:error] [pid 38699:tid 38765] [client 4.204.229.70:28166] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Wed May 20 00:37:36.729908 2026] [:error] [pid 38699:tid 38761] [client 4.204.229.70:28166] File does not exist: /usr/local/apache/htdocs/suspended-page/3PJcpMFsD8B.php
[Wed May 20 00:37:36.944302 2026] [:error] [pid 38699:tid 38742] [client 4.204.229.70:28166] File does not exist: /usr/local/apache/htdocs/suspended-page/UsbXax.php
[Wed May 20 00:37:37.264102 2026] [:error] [pid 38699:tid 38750] [client 4.204.229.70:28166] File does not exist: /usr/local/apache/htdocs/suspended-page/zoko.php
[Wed May 20 00:37:37.498876 2026] [:error] [pid 38699:tid 38759] [client 4.204.229.70:28166] File does not exist: /usr/local/apache/htdocs/suspended-page/pucci.php
[Wed May 20 00:37:38.733987 2026] [:error] [pid 38699:tid 38760] [client 4.204.229.70:28166] File does not exist: /usr/local/apache/htdocs/suspended-page/one.php
[Wed May 20 00:37:39.129014 2026] [:error] [pid 38699:tid 38749] [client 4.204.229.70:28166] File does not exist: /usr/local/apache/htdocs/suspended-page/sl.php
[Wed May 20 00:37:39.352740 2026] [:error] [pid 38699:tid 38745] [client 4.204.229.70:28166] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "agyR07--Adsw_P-dthbGBAAAAEM"]
[Wed May 20 00:37:41.655562 2026] [:error] [pid 38699:tid 38755] [client 4.204.229.70:3613] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "agyR1b--Adsw_P-dthbGDAAAAE0"]
[Wed May 20 00:37:44.270603 2026] [:error] [pid 41573:tid 41594] [client 4.204.229.70:3609] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "agyR2C1A2bd6JDSW9Ra7nAAAARM"]
[Wed May 20 00:37:49.406112 2026] [:error] [pid 38697:tid 38715] [client 4.204.229.70:20557] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "agyR3aXP9pP6Kgt-msRoyAAAAAA"]
[Wed May 20 00:37:50.434746 2026] [:error] [pid 38697:tid 38717] [client 4.204.229.70:3749] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "agyR3qXP9pP6Kgt-msRoyQAAAAI"]
[Wed May 20 00:37:51.445648 2026] [:error] [pid 38697:tid 38729] [client 4.204.229.70:28201] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "agyR36XP9pP6Kgt-msRoywAAAA4"]
[Wed May 20 00:37:54.237570 2026] [:error] [pid 46896:tid 46908] [client 4.204.229.70:23156] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "agyR4qCHyzL3Ci9LGE1ujAAAAYo"]
[Wed May 20 00:37:55.794905 2026] [:error] [pid 29823:tid 29842] [client 4.204.229.70:23153] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "agyR42O09C0nAz8vRk5pHAAAAcc"]
[Wed May 20 00:37:56.959611 2026] [:error] [pid 55881:tid 55884] [client 4.204.229.70:28181] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "agyR5O-UExma0LUC7WAWQgAAAkE"]
[Wed May 20 00:37:58.778637 2026] [:error] [pid 38814:tid 38821] [client 4.204.229.70:4345] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "agyR5gvkKuBwP0epzWervgAAAMU"]
[Wed May 20 00:38:01.255860 2026] [:error] [pid 41573:tid 41579] [client 4.204.229.70:23151] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "agyR6S1A2bd6JDSW9Ra7pwAAAQQ"]
[Wed May 20 00:38:02.679478 2026] [:error] [pid 41573:tid 41594] [client 4.204.229.70:30822] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "agyR6i1A2bd6JDSW9Ra7qAAAARM"]
[Wed May 20 00:38:04.239196 2026] [:error] [pid 38699:tid 38744] [client 4.204.229.70:17039] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "agyR7L--Adsw_P-dthbGFwAAAEI"]
[Wed May 20 00:38:06.049341 2026] [:error] [pid 38699:tid 38760] [client 4.204.229.70:20588] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "agyR7r--Adsw_P-dthbGGQAAAFI"]
[Wed May 20 00:38:07.989455 2026] [:error] [pid 41573:tid 41590] [client 4.204.229.70:4294] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "agyR7y1A2bd6JDSW9Ra7rAAAAQ8"]
[Wed May 20 00:38:09.931944 2026] [:error] [pid 38814:tid 38816] [client 4.204.229.70:17061] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "agyR8QvkKuBwP0epzWerwAAAAMA"]
[Wed May 20 00:38:11.193570 2026] [:error] [pid 38699:tid 38755] [client 4.204.229.70:20601] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "agyR87--Adsw_P-dthbGHwAAAE0"]
[Wed May 20 00:38:12.445895 2026] [:error] [pid 41573:tid 41589] [client 4.204.229.70:17058] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "agyR9C1A2bd6JDSW9Ra7rQAAAQ4"]
[Wed May 20 00:38:13.417534 2026] [:error] [pid 41573:tid 41597] [client 4.204.229.70:23088] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "agyR9S1A2bd6JDSW9Ra7rgAAARY"]
[Wed May 20 00:38:15.219157 2026] [:error] [pid 41573:tid 41599] [client 4.204.229.70:17632] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "agyR9y1A2bd6JDSW9Ra7sQAAARg"]
[Wed May 20 00:38:16.775398 2026] [:error] [pid 46815:tid 46840] [client 4.204.229.70:3797] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "agyR-CPnRhJOmA06LgqHmQAAAVc"]
[Wed May 20 00:38:18.057132 2026] [:error] [pid 41573:tid 41593] [client 4.204.229.70:3808] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "agyR-i1A2bd6JDSW9Ra7sgAAARI"]
[Wed May 20 00:38:19.668941 2026] [:error] [pid 41573:tid 41580] [client 4.204.229.70:4328] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "agyR-y1A2bd6JDSW9Ra7tAAAAQU"]
[Wed May 20 00:38:21.187944 2026] [:error] [pid 46815:tid 46831] [client 4.204.229.70:17629] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "agyR_SPnRhJOmA06LgqHmwAAAU4"]
[Wed May 20 00:38:23.605375 2026] [:error] [pid 38699:tid 38763] [client 4.204.229.70:3386] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "agyR_7--Adsw_P-dthbGIQAAAFU"]
[Wed May 20 00:38:24.841883 2026] [:error] [pid 38699:tid 38743] [client 4.204.229.70:23521] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "agySAL--Adsw_P-dthbGIgAAAEE"]
[Wed May 20 00:38:30.458207 2026] [:error] [pid 38697:tid 38722] [client 4.204.229.70:6472] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "agySBqXP9pP6Kgt-msRo3AAAAAc"]
[Wed May 20 00:38:33.902058 2026] [:error] [pid 38699:tid 38755] [client 4.204.229.70:35639] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "agySCb--Adsw_P-dthbGLAAAAE0"]
[Wed May 20 00:38:35.344994 2026] [:error] [pid 38697:tid 38715] [client 4.204.229.70:31236] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "agySC6XP9pP6Kgt-msRo4QAAAAA"]
[Wed May 20 00:38:37.917183 2026] [:error] [pid 41573:tid 41595] [client 4.204.229.70:24687] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "agySDS1A2bd6JDSW9Ra7uwAAARQ"]
[Wed May 20 00:38:47.545577 2026] [:error] [pid 29823:tid 29847] [client 4.204.229.70:3665] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Wed May 20 00:38:47.772676 2026] [:error] [pid 29823:tid 29851] [client 4.204.229.70:3665] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Wed May 20 00:38:47.984830 2026] [:error] [pid 29823:tid 29835] [client 4.204.229.70:3665] File does not exist: /usr/local/apache/htdocs/suspended-page/awa.php
[Wed May 20 00:38:48.403991 2026] [:error] [pid 29823:tid 29861] [client 4.204.229.70:3665] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Wed May 20 00:38:48.624575 2026] [:error] [pid 29823:tid 29857] [client 4.204.229.70:3665] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Wed May 20 00:38:49.111406 2026] [:error] [pid 29823:tid 29860] [client 4.204.229.70:3665] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Wed May 20 00:38:49.352752 2026] [:error] [pid 29823:tid 29848] [client 4.204.229.70:3665] File does not exist: /usr/local/apache/htdocs/suspended-page/seo.php
[Wed May 20 00:38:49.582548 2026] [:error] [pid 29823:tid 29863] [client 4.204.229.70:3665] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Wed May 20 00:38:49.851060 2026] [:error] [pid 29823:tid 29838] [client 4.204.229.70:3665] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Wed May 20 00:38:50.061889 2026] [:error] [pid 29823:tid 29842] [client 4.204.229.70:3665] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Wed May 20 00:38:50.342601 2026] [:error] [pid 29823:tid 29855] [client 4.204.229.70:3665] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "agySGmO09C0nAz8vRk5pOAAAAdA"]
[Wed May 20 00:38:53.516064 2026] [:error] [pid 41573:tid 41592] [client 4.204.229.70:6501] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "agySHS1A2bd6JDSW9Ra7wAAAARE"]
[Wed May 20 00:38:55.193498 2026] [:error] [pid 41573:tid 41591] [client 4.204.229.70:8833] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "agySHy1A2bd6JDSW9Ra7wwAAARA"]
[Wed May 20 00:38:58.607755 2026] [:error] [pid 38697:tid 38739] [client 4.204.229.70:13786] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "agySIqXP9pP6Kgt-msRo6AAAABg"]
[Wed May 20 00:39:03.683504 2026] [:error] [pid 29622:tid 29646] [client 4.204.229.70:9269] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "agySJzkOqPKWkPs_P15boAAAAhY"]
[Wed May 20 00:39:04.606980 2026] [:error] [pid 41573:tid 41594] [client 4.204.229.70:20029] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "agySKC1A2bd6JDSW9Ra7yAAAARM"]
[Wed May 20 00:39:06.051149 2026] [:error] [pid 38814:tid 38824] [client 4.204.229.70:8487] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "agySKgvkKuBwP0epzWeryAAAAMg"]
[Wed May 20 00:39:09.712811 2026] [:error] [pid 38699:tid 38761] [client 4.204.229.70:9332] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "agySLb--Adsw_P-dthbGMQAAAFM"]
[Wed May 20 00:39:10.646905 2026] [:error] [pid 38699:tid 38765] [client 4.204.229.70:8573] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "agySLr--Adsw_P-dthbGMgAAAFc"]
[Wed May 20 00:39:14.701509 2026] [:error] [pid 38705:tid 38788] [client 4.204.229.70:28107] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "agySMsg5dNOZ5umN9ltsAAAAAJM"]
[Wed May 20 00:39:17.089121 2026] [:error] [pid 46815:tid 46829] [client 4.204.229.70:31254] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "agySNSPnRhJOmA06LgqHoQAAAUw"]
[Wed May 20 00:39:21.751339 2026] [:error] [pid 29823:tid 29852] [client 4.204.229.70:29776] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "agySOWO09C0nAz8vRk5pPQAAAc0"]
[Wed May 20 00:39:23.168976 2026] [:error] [pid 55881:tid 55886] [client 4.204.229.70:3407] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "agySO--UExma0LUC7WAWTQAAAkM"]
[Wed May 20 00:39:27.949749 2026] [:error] [pid 29823:tid 29839] [client 4.204.229.70:49384] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "agySP2O09C0nAz8vRk5pQQAAAcQ"]
[Wed May 20 00:39:30.709764 2026] [:error] [pid 38814:tid 38838] [client 4.204.229.70:25496] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "agySQgvkKuBwP0epzWerzQAAANY"]
[Wed May 20 00:39:33.926650 2026] [:error] [pid 29823:tid 29848] [client 4.204.229.70:49299] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "agySRWO09C0nAz8vRk5pQgAAAck"]
[Wed May 20 00:39:35.986312 2026] [:error] [pid 46815:tid 46834] [client 4.204.229.70:49406] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "agySRyPnRhJOmA06LgqHpwAAAVE"]
[Wed May 20 00:39:37.116642 2026] [:error] [pid 38814:tid 38833] [client 4.204.229.70:49291] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "agySSQvkKuBwP0epzWerzwAAANE"]
[Wed May 20 00:39:38.477046 2026] [:error] [pid 29823:tid 29837] [client 4.204.229.70:12412] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "agySSmO09C0nAz8vRk5pRQAAAcI"]
[Wed May 20 00:39:39.425629 2026] [:error] [pid 38705:tid 38771] [client 4.204.229.70:49301] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "agySS8g5dNOZ5umN9ltsBAAAAII"]
[Wed May 20 00:39:40.525314 2026] [:error] [pid 29823:tid 29841] [client 4.204.229.70:25478] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "agySTGO09C0nAz8vRk5pRgAAAcY"]
[Wed May 20 00:39:42.395339 2026] [:error] [pid 41573:tid 41577] [client 4.204.229.70:12565] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "agySTi1A2bd6JDSW9Ra7zwAAAQI"]
[Wed May 20 00:39:43.552153 2026] [:error] [pid 55881:tid 55884] [client 4.204.229.70:12399] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "agyST--UExma0LUC7WAWTwAAAkE"]
[Wed May 20 00:39:45.197739 2026] [:error] [pid 46896:tid 46918] [client 4.204.229.70:32076] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "agySUaCHyzL3Ci9LGE1umgAAAZQ"]
[Wed May 20 00:39:46.650866 2026] [:error] [pid 38814:tid 38837] [client 4.204.229.70:32086] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "agySUgvkKuBwP0epzWer0AAAANU"]
[Wed May 20 00:39:47.979013 2026] [:error] [pid 38697:tid 38731] [client 4.204.229.70:8945] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "agySU6XP9pP6Kgt-msRo7wAAABA"]
[Wed May 20 00:39:48.712992 2026] [:error] [pid 41573:tid 41596] [client 4.204.229.70:12371] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "agySVC1A2bd6JDSW9Ra70QAAARU"]
[Wed May 20 00:39:49.576780 2026] [:error] [pid 38697:tid 38720] [client 4.204.229.70:16793] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "agySVaXP9pP6Kgt-msRo8gAAAAU"]
[Wed May 20 00:39:51.270604 2026] [:error] [pid 38699:tid 38746] [client 4.204.229.70:28376] File does not exist: /usr/local/apache/htdocs/suspended-page/fvvff.php
[Wed May 20 00:39:51.482527 2026] [:error] [pid 38699:tid 38763] [client 4.204.229.70:28376] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed May 20 00:39:51.706722 2026] [:error] [pid 38699:tid 38754] [client 4.204.229.70:28376] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed May 20 00:39:52.129952 2026] [:error] [pid 38699:tid 38751] [client 4.204.229.70:28376] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Wed May 20 00:39:52.340338 2026] [:error] [pid 38699:tid 38744] [client 4.204.229.70:28376] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed May 20 00:39:52.560676 2026] [:error] [pid 38699:tid 38762] [client 4.204.229.70:28376] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Wed May 20 00:39:53.005833 2026] [:error] [pid 38699:tid 38749] [client 4.204.229.70:28376] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Wed May 20 00:39:53.215914 2026] [:error] [pid 38699:tid 38761] [client 4.204.229.70:28376] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Wed May 20 00:39:53.644968 2026] [:error] [pid 38699:tid 38758] [client 4.204.229.70:28376] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "agySWb--Adsw_P-dthbGRQAAAFA"]
[Wed May 20 00:39:56.040031 2026] [:error] [pid 41573:tid 41598] [client 4.204.229.70:49317] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "agySXC1A2bd6JDSW9Ra70wAAARc"]
[Wed May 20 00:39:57.194576 2026] [:error] [pid 41573:tid 41576] [client 4.204.229.70:32107] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "agySXS1A2bd6JDSW9Ra71AAAAQE"]
[Wed May 20 00:39:58.846695 2026] [:error] [pid 38697:tid 38734] [client 4.204.229.70:36706] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "agySXqXP9pP6Kgt-msRo9AAAABM"]
[Wed May 20 00:39:59.895459 2026] [:error] [pid 46815:tid 46824] [client 4.204.229.70:36780] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "agySXyPnRhJOmA06LgqHqQAAAUc"]
[Wed May 20 00:40:00.740213 2026] [:error] [pid 41573:tid 41585] [client 4.204.229.70:8929] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "agySYC1A2bd6JDSW9Ra71gAAAQo"]
[Wed May 20 00:40:02.494853 2026] [:error] [pid 46815:tid 46817] [client 4.204.229.70:31793] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "agySYiPnRhJOmA06LgqHrQAAAUA"]
[Wed May 20 00:40:04.180524 2026] [:error] [pid 38697:tid 38730] [client 4.204.229.70:36701] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "agySZKXP9pP6Kgt-msRo9wAAAA8"]
[Wed May 20 00:40:05.561133 2026] [:error] [pid 46896:tid 46904] [client 4.204.229.70:16835] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "agySZaCHyzL3Ci9LGE1unAAAAYY"]
[Wed May 20 00:40:06.531856 2026] [:error] [pid 46815:tid 46833] [client 4.204.229.70:36797] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "agySZiPnRhJOmA06LgqHsAAAAVA"]
[Wed May 20 00:40:07.143212 2026] [:error] [pid 38814:tid 38840] [client 4.204.229.70:26896] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "agySZwvkKuBwP0epzWer0gAAANg"]
[Wed May 20 00:40:09.261878 2026] [:error] [pid 46815:tid 46834] [client 4.204.229.70:16847] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "agySaSPnRhJOmA06LgqHtAAAAVE"]
[Wed May 20 00:40:11.642760 2026] [:error] [pid 41573:tid 41577] [client 4.204.229.70:22660] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "agySay1A2bd6JDSW9Ra72QAAAQI"]
[Wed May 20 00:40:13.750925 2026] [:error] [pid 38699:tid 38762] [client 4.204.229.70:36682] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "agySbb--Adsw_P-dthbGWAAAAFQ"]
[Wed May 20 00:40:15.923698 2026] [:error] [pid 38697:tid 38729] [client 4.204.229.70:24184] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "agySb6XP9pP6Kgt-msRo-QAAAA4"]
[Wed May 20 00:40:17.633291 2026] [:error] [pid 38697:tid 38736] [client 4.204.229.70:26921] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "agyScaXP9pP6Kgt-msRo-gAAABU"]
[Wed May 20 00:40:19.362628 2026] [:error] [pid 38705:tid 38775] [client 4.204.229.70:6707] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "agySc8g5dNOZ5umN9ltsCAAAAIY"]
[Wed May 20 00:40:19.949609 2026] [:error] [pid 41573:tid 41579] [client 4.204.229.70:6693] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "agyScy1A2bd6JDSW9Ra73AAAAQQ"]
[Wed May 20 00:40:20.747373 2026] [:error] [pid 38697:tid 38723] [client 4.204.229.70:13332] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "agySdKXP9pP6Kgt-msRo_QAAAAg"]
[Wed May 20 00:40:21.730092 2026] [:error] [pid 38697:tid 38733] [client 4.204.229.70:41049] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "agySdaXP9pP6Kgt-msRo_wAAABI"]
[Wed May 20 00:40:23.484633 2026] [:error] [pid 41573:tid 41578] [client 4.204.229.70:22688] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "agySdy1A2bd6JDSW9Ra73QAAAQM"]
[Wed May 20 00:40:25.584208 2026] [:error] [pid 41573:tid 41584] [client 4.204.229.70:30390] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "agySeS1A2bd6JDSW9Ra74AAAAQk"]
[Wed May 20 00:40:26.553576 2026] [:error] [pid 41573:tid 41585] [client 4.204.229.70:41039] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "agySei1A2bd6JDSW9Ra74gAAAQo"]
[Wed May 20 00:40:27.915273 2026] [:error] [pid 41573:tid 41591] [client 4.204.229.70:22704] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "agySey1A2bd6JDSW9Ra75AAAARA"]
[Wed May 20 00:40:29.391444 2026] [:error] [pid 41573:tid 41593] [client 4.204.229.70:24633] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "agySfS1A2bd6JDSW9Ra75gAAARI"]
[Wed May 20 00:40:31.731428 2026] [:error] [pid 41573:tid 41579] [client 4.204.229.70:26222] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "agySfy1A2bd6JDSW9Ra76AAAAQQ"]
[Wed May 20 00:40:33.278388 2026] [:error] [pid 38705:tid 38793] [client 4.204.229.70:24627] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "agySgcg5dNOZ5umN9ltsCQAAAJg"]
[Wed May 20 00:40:34.913071 2026] [:error] [pid 46896:tid 46916] [client 4.204.229.70:26221] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "agySgqCHyzL3Ci9LGE1uoAAAAZI"]
[Wed May 20 00:40:36.687091 2026] [:error] [pid 38699:tid 38764] [client 4.204.229.70:24949] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "agyShL--Adsw_P-dthbGXAAAAFY"]
[Wed May 20 00:40:38.815873 2026] [:error] [pid 38699:tid 38750] [client 4.204.229.70:11791] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "agyShr--Adsw_P-dthbGXgAAAEg"]
[Wed May 20 00:40:39.910308 2026] [:error] [pid 38697:tid 38715] [client 4.204.229.70:15577] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "agySh6XP9pP6Kgt-msRpBAAAAAA"]
[Wed May 20 00:40:41.143279 2026] [:error] [pid 38697:tid 38729] [client 4.204.229.70:26186] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "agySiaXP9pP6Kgt-msRpBgAAAA4"]
[Wed May 20 00:40:42.817468 2026] [:error] [pid 38697:tid 38738] [client 4.204.229.70:22315] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "agySiqXP9pP6Kgt-msRpCAAAABc"]
[Wed May 20 00:40:45.447455 2026] [:error] [pid 41573:tid 41587] [client 4.204.229.70:26199] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "agySjS1A2bd6JDSW9Ra76QAAAQw"]
[Wed May 20 00:40:48.396181 2026] [:error] [pid 38697:tid 38718] [client 4.204.229.70:13326] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "agySkKXP9pP6Kgt-msRpCwAAAAM"]
[Wed May 20 00:40:49.398043 2026] [:error] [pid 38697:tid 38735] [client 4.204.229.70:36252] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "agySkaXP9pP6Kgt-msRpDgAAABQ"]
[Wed May 20 00:40:51.629313 2026] [:error] [pid 29823:tid 29837] [client 4.204.229.70:13329] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "agySk2O09C0nAz8vRk5pXwAAAcI"]
[Wed May 20 00:40:52.524549 2026] [:error] [pid 38697:tid 38738] [client 4.204.229.70:41086] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "agySlKXP9pP6Kgt-msRpFQAAABc"]
[Wed May 20 00:40:53.876850 2026] [:error] [pid 46815:tid 46836] [client 4.204.229.70:30347] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Wed May 20 00:40:54.583343 2026] [:error] [pid 46815:tid 46841] [client 4.204.229.70:30347] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed May 20 00:40:55.022835 2026] [:error] [pid 46815:tid 46829] [client 4.204.229.70:30347] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Wed May 20 00:40:55.238541 2026] [:error] [pid 46815:tid 46828] [client 4.204.229.70:30347] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Wed May 20 00:40:55.537570 2026] [:error] [pid 46815:tid 46833] [client 4.204.229.70:30347] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Wed May 20 00:40:56.246512 2026] [:error] [pid 46815:tid 46822] [client 4.204.229.70:30347] [client 4.204.229.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "agySmCPnRhJOmA06LgqH1AAAAUU"]
[Wed May 20 00:40:57.237796 2026] [:error] [pid 55881:tid 55895] [client 4.204.229.70:36257] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Wed May 20 00:40:57.957319 2026] [:error] [pid 55881:tid 55901] [client 4.204.229.70:36257] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "agySme-UExma0LUC7WAWYAAAAlI"]
[Wed May 20 00:40:58.720474 2026] [:error] [pid 38705:tid 38790] [client 4.204.229.70:30356] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "agySmsg5dNOZ5umN9ltsDAAAAJU"]
[Wed May 20 00:41:03.198081 2026] [:error] [pid 38814:tid 38825] [client 4.204.229.70:22742] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "agySnwvkKuBwP0epzWer1AAAAMk"]
[Wed May 20 00:41:06.700579 2026] [:error] [pid 41573:tid 41580] [client 4.204.229.70:36226] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "agySoi1A2bd6JDSW9Ra8AwAAAQU"]
[Wed May 20 00:41:09.290415 2026] [:error] [pid 46815:tid 46818] [client 4.204.229.70:6243] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "agySpSPnRhJOmA06LgqH2QAAAUE"]
[Wed May 20 00:41:11.025586 2026] [:error] [pid 29823:tid 29849] [client 4.204.229.70:37892] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "agySp2O09C0nAz8vRk5pZgAAAco"]
[Wed May 20 00:41:13.446310 2026] [:error] [pid 38699:tid 38756] [client 4.204.229.70:24099] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "agySqb--Adsw_P-dthbGZAAAAE4"]
[Wed May 20 00:41:14.837388 2026] [:error] [pid 41573:tid 41588] [client 4.204.229.70:8186] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "agySqi1A2bd6JDSW9Ra8DAAAAQ0"]
[Wed May 20 00:41:15.653837 2026] [:error] [pid 29823:tid 29837] [client 4.204.229.70:28420] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "agySq2O09C0nAz8vRk5paAAAAcI"]
[Wed May 20 00:41:18.599303 2026] [:error] [pid 38699:tid 38745] [client 4.204.229.70:15232] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "agySrr--Adsw_P-dthbGZgAAAEM"]
[Wed May 20 00:41:20.036909 2026] [:error] [pid 46815:tid 46836] [client 4.204.229.70:4345] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "agySsCPnRhJOmA06LgqH2wAAAVM"]
[Wed May 20 00:41:21.091055 2026] [:error] [pid 55881:tid 55890] [client 4.204.229.70:28432] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "agySse-UExma0LUC7WAWYgAAAkc"]
[Wed May 20 00:41:22.891040 2026] [:error] [pid 41573:tid 41598] [client 4.204.229.70:17296] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "agySsi1A2bd6JDSW9Ra8EAAAARc"]
[Wed May 20 00:41:24.257338 2026] [:error] [pid 41573:tid 41577] [client 4.204.229.70:28473] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "agyStC1A2bd6JDSW9Ra8EQAAAQI"]
[Wed May 20 00:41:25.678050 2026] [:error] [pid 29823:tid 29853] [client 4.204.229.70:17290] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "agyStWO09C0nAz8vRk5pbAAAAc4"]
[Wed May 20 00:41:26.615900 2026] [:error] [pid 38697:tid 38737] [client 4.204.229.70:44962] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "agyStqXP9pP6Kgt-msRpHQAAABY"]
[Wed May 20 00:41:28.251034 2026] [:error] [pid 41573:tid 41597] [client 4.204.229.70:14561] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "agySuC1A2bd6JDSW9Ra8FAAAARY"]
[Wed May 20 00:41:29.842964 2026] [:error] [pid 29823:tid 29862] [client 4.204.229.70:37394] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "agySuWO09C0nAz8vRk5pfQAAAdc"]
[Wed May 20 00:41:30.530454 2026] [:error] [pid 38697:tid 38727] [client 4.204.229.70:23476] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "agySuqXP9pP6Kgt-msRpIwAAAAw"]
[Wed May 20 00:41:32.311198 2026] [:error] [pid 55881:tid 55899] [client 4.204.229.70:9719] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "agySvO-UExma0LUC7WAWZgAAAlA"]
[Wed May 20 00:41:34.981699 2026] [:error] [pid 55881:tid 55883] [client 4.204.229.70:12868] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "agySvu-UExma0LUC7WAWawAAAkA"]
[Wed May 20 00:41:36.335253 2026] [:error] [pid 38697:tid 38739] [client 4.204.229.70:20037] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "agySwKXP9pP6Kgt-msRpLQAAABg"]
[Wed May 20 00:41:37.184674 2026] [:error] [pid 41573:tid 41578] [client 4.204.229.70:35552] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "agySwS1A2bd6JDSW9Ra8KQAAAQM"]
[Wed May 20 00:41:38.295037 2026] [:error] [pid 38699:tid 38761] [client 4.204.229.70:20054] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "agySwr--Adsw_P-dthbGZwAAAFM"]
[Wed May 20 00:41:39.186610 2026] [:error] [pid 38697:tid 38730] [client 4.204.229.70:14120] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "agySw6XP9pP6Kgt-msRpMgAAAA8"]
[Wed May 20 00:41:39.883735 2026] [:error] [pid 29622:tid 29637] [client 4.204.229.70:3921] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "agySwzkOqPKWkPs_P15brAAAAg0"]
[Wed May 20 00:41:40.853520 2026] [:error] [pid 41573:tid 41582] [client 4.204.229.70:20506] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "agySxC1A2bd6JDSW9Ra8NQAAAQc"]
[Wed May 20 00:41:41.935502 2026] [:error] [pid 38814:tid 38839] [client 4.204.229.70:15538] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "agySxQvkKuBwP0epzWer1wAAANc"]
[Wed May 20 00:41:43.233918 2026] [:error] [pid 38705:tid 38770] [client 4.204.229.70:12840] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buy.php"] [unique_id "agySx8g5dNOZ5umN9ltsEwAAAIE"]
[Wed May 20 00:41:44.590113 2026] [:error] [pid 41573:tid 41599] [client 4.204.229.70:14115] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buy.php"] [unique_id "agySyC1A2bd6JDSW9Ra8QwAAARg"]
[Wed May 20 00:41:45.748703 2026] [:error] [pid 46815:tid 46825] [client 4.204.229.70:7233] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buy.php"] [unique_id "agySySPnRhJOmA06LgqH4gAAAUg"]
[Wed May 20 00:41:46.961518 2026] [:error] [pid 38697:tid 38735] [client 4.204.229.70:20536] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/buy.php"] [unique_id "agySyqXP9pP6Kgt-msRpOwAAABQ"]
[Wed May 20 00:41:49.236705 2026] [:error] [pid 29823:tid 29855] [client 4.204.229.70:27409] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "agySzWO09C0nAz8vRk5pigAAAdA"]
[Wed May 20 00:41:50.757864 2026] [:error] [pid 55881:tid 55890] [client 4.204.229.70:20527] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "agySzu-UExma0LUC7WAWbgAAAkc"]
[Wed May 20 00:41:51.989490 2026] [:error] [pid 38697:tid 38732] [client 4.204.229.70:3911] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "agySz6XP9pP6Kgt-msRpQAAAABE"]
[Wed May 20 00:41:56.184097 2026] [:error] [pid 38699:tid 38763] [client 4.204.229.70:27413] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "agyS1L--Adsw_P-dthbGawAAAFU"]
[Wed May 20 00:41:57.262725 2026] [:error] [pid 38705:tid 38782] [client 4.204.229.70:14200] File does not exist: /usr/local/apache/htdocs/suspended-page/hypo.php
[Wed May 20 00:41:57.848923 2026] [:error] [pid 38705:tid 38793] [client 4.204.229.70:14200] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Wed May 20 00:41:58.336688 2026] [:error] [pid 38705:tid 38788] [client 4.204.229.70:14200] File does not exist: /usr/local/apache/htdocs/suspended-page/00.php
[Wed May 20 00:41:58.779982 2026] [:error] [pid 38705:tid 38790] [client 4.204.229.70:14200] File does not exist: /usr/local/apache/htdocs/suspended-page/als.php
[Wed May 20 00:41:59.073515 2026] [:error] [pid 38705:tid 38778] [client 4.204.229.70:14200] File does not exist: /usr/local/apache/htdocs/suspended-page/pol.php
[Wed May 20 00:41:59.298184 2026] [:error] [pid 38705:tid 38784] [client 4.204.229.70:14200] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-amdin.php
[Wed May 20 00:41:59.541502 2026] [:error] [pid 38705:tid 38769] [client 4.204.229.70:14200] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Wed May 20 00:42:01.030709 2026] [:error] [pid 38705:tid 38769] [client 4.204.229.70:14200] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Wed May 20 00:42:01.257732 2026] [:error] [pid 38705:tid 38789] [client 4.204.229.70:14200] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Wed May 20 00:42:01.486293 2026] [:error] [pid 38705:tid 38780] [client 4.204.229.70:14200] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "agyS2cg5dNOZ5umN9ltsKAAAAIs"]
[Wed May 20 00:42:02.751974 2026] [:error] [pid 29622:tid 29633] [client 4.204.229.70:3754] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "agyS2jkOqPKWkPs_P15brQAAAgk"]
[Wed May 20 00:42:05.094945 2026] [:error] [pid 29823:tid 29862] [client 4.204.229.70:4082] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "agyS3WO09C0nAz8vRk5pkQAAAdc"]
[Wed May 20 00:42:05.985169 2026] [:error] [pid 55881:tid 55897] [client 4.204.229.70:4091] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "agyS3e-UExma0LUC7WAWcwAAAk4"]
[Wed May 20 00:42:07.655619 2026] [:error] [pid 55881:tid 55893] [client 4.204.229.70:3885] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "agyS3--UExma0LUC7WAWdQAAAko"]
[Wed May 20 00:42:09.167193 2026] [:error] [pid 29823:tid 29835] [client 4.204.229.70:4037] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "agyS4WO09C0nAz8vRk5pnQAAAcA"]
[Wed May 20 00:42:10.581375 2026] [:error] [pid 46815:tid 46821] [client 4.204.229.70:32509] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "agyS4iPnRhJOmA06LgqH7wAAAUQ"]
[Wed May 20 00:42:12.658944 2026] [:error] [pid 38697:tid 38723] [client 4.204.229.70:32503] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "agyS5KXP9pP6Kgt-msRpSQAAAAg"]
[Wed May 20 00:42:13.795880 2026] [:error] [pid 38697:tid 38726] [client 4.204.229.70:12629] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cfile.php"] [unique_id "agyS5aXP9pP6Kgt-msRpTAAAAAs"]
[Wed May 20 00:42:15.377277 2026] [:error] [pid 38697:tid 38734] [client 4.204.229.70:12648] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cfile.php"] [unique_id "agyS56XP9pP6Kgt-msRpTgAAABM"]
[Wed May 20 00:42:16.783515 2026] [:error] [pid 38699:tid 38760] [client 4.204.229.70:23071] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cfile.php"] [unique_id "agyS6L--Adsw_P-dthbGdgAAAFI"]
[Wed May 20 00:42:17.626121 2026] [:error] [pid 38699:tid 38750] [client 4.204.229.70:23053] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cfile.php"] [unique_id "agyS6b--Adsw_P-dthbGeAAAAEg"]
[Wed May 20 00:42:18.701151 2026] [:error] [pid 38697:tid 38727] [client 4.204.229.70:17578] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp.php"] [unique_id "agyS6qXP9pP6Kgt-msRpUAAAAAw"]
[Wed May 20 00:42:20.076537 2026] [:error] [pid 38699:tid 38748] [client 4.204.229.70:23091] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp.php"] [unique_id "agyS7L--Adsw_P-dthbGegAAAEY"]
[Wed May 20 00:42:21.094001 2026] [:error] [pid 38699:tid 38746] [client 4.204.229.70:23072] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp.php"] [unique_id "agyS7b--Adsw_P-dthbGewAAAEQ"]
[Wed May 20 00:42:23.797822 2026] [:error] [pid 46896:tid 46911] [client 4.204.229.70:23104] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/class-wp.php"] [unique_id "agyS76CHyzL3Ci9LGE1urQAAAY0"]
[Wed May 20 00:42:27.046149 2026] [:error] [pid 46896:tid 46916] [client 4.204.229.70:23162] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "agyS86CHyzL3Ci9LGE1usgAAAZI"]
[Wed May 20 00:42:28.075764 2026] [:error] [pid 38814:tid 38818] [client 4.204.229.70:17566] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "agyS9AvkKuBwP0epzWer4QAAAMI"]
[Wed May 20 00:42:29.458276 2026] [:error] [pid 38705:tid 38788] [client 4.204.229.70:17045] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "agyS9cg5dNOZ5umN9ltsMgAAAJM"]
[Wed May 20 00:42:30.141786 2026] [:error] [pid 55881:tid 55897] [client 4.204.229.70:17563] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "agyS9u-UExma0LUC7WAWfwAAAk4"]
[Wed May 20 00:42:31.987260 2026] [:error] [pid 38705:tid 38790] [client 4.204.229.70:17558] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa2.php"] [unique_id "agyS98g5dNOZ5umN9ltsMwAAAJU"]
[Wed May 20 00:42:32.789070 2026] [:error] [pid 46815:tid 46823] [client 4.204.229.70:17052] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa2.php"] [unique_id "agyS-CPnRhJOmA06LgqH8QAAAUY"]
[Wed May 20 00:42:34.406639 2026] [:error] [pid 38699:tid 38744] [client 4.204.229.70:30814] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa2.php"] [unique_id "agyS-r--Adsw_P-dthbGiwAAAEI"]
[Wed May 20 00:42:35.392464 2026] [:error] [pid 38699:tid 38765] [client 4.204.229.70:20859] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa2.php"] [unique_id "agyS-7--Adsw_P-dthbGjAAAAFc"]
[Wed May 20 00:42:36.940133 2026] [:error] [pid 41573:tid 41587] [client 4.204.229.70:17650] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccou.php"] [unique_id "agyS_C1A2bd6JDSW9Ra8iwAAAQw"]
[Wed May 20 00:42:38.066512 2026] [:error] [pid 38699:tid 38757] [client 4.204.229.70:17038] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccou.php"] [unique_id "agyS_r--Adsw_P-dthbGkAAAAE8"]
[Wed May 20 00:42:39.044127 2026] [:error] [pid 29823:tid 29855] [client 4.204.229.70:20558] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccou.php"] [unique_id "agyS_2O09C0nAz8vRk5p3AAAAdA"]
[Wed May 20 00:42:40.199722 2026] [:error] [pid 38705:tid 38778] [client 4.204.229.70:4297] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ccou.php"] [unique_id "agyTAMg5dNOZ5umN9ltsNAAAAIk"]
[Wed May 20 00:42:40.901850 2026] [:error] [pid 38699:tid 38755] [client 4.204.229.70:20844] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/login8.php"] [unique_id "agyTAL--Adsw_P-dthbGlAAAAE0"]
[Wed May 20 00:42:42.544894 2026] [:error] [pid 55881:tid 55886] [client 4.204.229.70:17028] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/login8.php"] [unique_id "agyTAu-UExma0LUC7WAWggAAAkM"]
[Wed May 20 00:42:43.481170 2026] [:error] [pid 41573:tid 41597] [client 4.204.229.70:22362] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/login8.php"] [unique_id "agyTAy1A2bd6JDSW9Ra8jQAAARY"]
[Wed May 20 00:42:45.464941 2026] [:error] [pid 46815:tid 46829] [client 4.204.229.70:20832] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/login8.php"] [unique_id "agyTBSPnRhJOmA06LgqH-QAAAUw"]
[Wed May 20 00:42:46.483127 2026] [:error] [pid 38697:tid 38738] [client 4.204.229.70:17080] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oiqcXuO.php"] [unique_id "agyTBqXP9pP6Kgt-msRpWAAAABc"]
[Wed May 20 00:42:48.221679 2026] [:error] [pid 29823:tid 29859] [client 4.204.229.70:17076] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oiqcXuO.php"] [unique_id "agyTCGO09C0nAz8vRk5p3gAAAdQ"]
[Wed May 20 00:42:49.661485 2026] [:error] [pid 29622:tid 29645] [client 4.204.229.70:20579] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oiqcXuO.php"] [unique_id "agyTCTkOqPKWkPs_P15bsQAAAhU"]
[Wed May 20 00:42:51.871645 2026] [:error] [pid 46896:tid 46920] [client 4.204.229.70:20588] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/oiqcXuO.php"] [unique_id "agyTC6CHyzL3Ci9LGE1uvAAAAZY"]
[Wed May 20 00:42:53.030365 2026] [:error] [pid 38699:tid 38765] [client 4.204.229.70:3873] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nx.php"] [unique_id "agyTDb--Adsw_P-dthbGogAAAFc"]
[Wed May 20 00:42:53.855694 2026] [:error] [pid 38699:tid 38758] [client 4.204.229.70:4326] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nx.php"] [unique_id "agyTDb--Adsw_P-dthbGpAAAAFA"]
[Wed May 20 00:42:54.797666 2026] [:error] [pid 29823:tid 29837] [client 4.204.229.70:37372] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nx.php"] [unique_id "agyTDmO09C0nAz8vRk5p4wAAAcI"]
[Wed May 20 00:42:56.721971 2026] [:error] [pid 38697:tid 38718] [client 4.204.229.70:4324] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/nx.php"] [unique_id "agyTEKXP9pP6Kgt-msRpZgAAAAM"]
[Wed May 20 00:42:57.222781 2026] [:error] [pid 38697:tid 38717] [client 4.204.229.70:20574] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dr.php"] [unique_id "agyTEaXP9pP6Kgt-msRpZwAAAAI"]
[Wed May 20 00:43:00.276672 2026] [:error] [pid 55881:tid 55897] [client 4.204.229.70:23113] [client 4.204.229.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/dr.php"] [unique_id "agyTFO-UExma0LUC7WAWjQAAAk4"]
[Wed May 20 00:43:01.084188 2026] [:error] [pid 41573:tid 41599] [client 4.204.229.70:4310] File does not exist: /usr/local/apache/htdocs/suspended-page/dr.php
[Wed May 20 00:43:01.305196 2026] [:error] [pid 41573:tid 41588] [client 4.204.229.70:4310] File does not exist: /usr/local/apache/htdocs/suspended-page/xamp.php
[Wed May 20 00:43:01.523480 2026] [:error] [pid 41573:tid 41592] [client 4.204.229.70:4310] File does not exist: /usr/local/apache/htdocs/suspended-page/cA3bHIkVhgP.php
[Wed May 20 00:43:01.740666 2026] [:error] [pid 41573:tid 41585] [client 4.204.229.70:4310] File does not exist: /usr/local/apache/htdocs/suspended-page/clas11.php
[Wed May 20 05:09:23.393900 2026] [:error] [pid 59349:tid 59360] [client 20.212.200.137:2307] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Wed May 20 05:09:24.561318 2026] [:error] [pid 59349:tid 59370] [client 20.212.200.137:2307] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Wed May 20 05:09:24.674699 2026] [:error] [pid 59349:tid 59362] [client 20.212.200.137:2307] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Wed May 20 05:09:24.766678 2026] [:error] [pid 59349:tid 59352] [client 20.212.200.137:2307] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed May 20 05:09:25.676596 2026] [:error] [pid 59349:tid 59358] [client 20.212.200.137:2307] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed May 20 05:09:26.569446 2026] [:error] [pid 59349:tid 59351] [client 20.212.200.137:2307] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Wed May 20 05:09:27.799747 2026] [:error] [pid 59349:tid 59355] [client 20.212.200.137:2307] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Wed May 20 05:09:29.099384 2026] [:error] [pid 59349:tid 59366] [client 20.212.200.137:2307] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Wed May 20 05:09:29.192743 2026] [:error] [pid 59349:tid 59356] [client 20.212.200.137:2307] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Wed May 20 05:09:29.505015 2026] [:error] [pid 59349:tid 59359] [client 20.212.200.137:2307] [client 20.212.200.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "agzRiTvvxTUy-ppKSZWE2QAAAMg"]
[Wed May 20 05:09:29.826759 2026] [:error] [pid 36145:tid 36163] [client 20.212.200.137:2753] [client 20.212.200.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "agzRiatS18KtvF2Vags4HgAAAQ8"]
[Wed May 20 05:09:30.107455 2026] [:error] [pid 36145:tid 36158] [client 20.212.200.137:2399] [client 20.212.200.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "agzRiqtS18KtvF2Vags4HwAAAQo"]
[Wed May 20 05:09:30.380718 2026] [:error] [pid 36145:tid 36169] [client 20.212.200.137:2785] [client 20.212.200.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "agzRiqtS18KtvF2Vags4IAAAARU"]
[Wed May 20 07:02:41.687483 2026] [:error] [pid 59244:tid 59274] [client 20.213.80.100:15904] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Wed May 20 07:02:41.761700 2026] [:error] [pid 59244:tid 59254] [client 20.213.80.100:15904] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Wed May 20 07:02:41.784108 2026] [:error] [pid 59244:tid 59259] [client 20.213.80.100:15904] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Wed May 20 07:02:41.980977 2026] [:error] [pid 59244:tid 59273] [client 20.213.80.100:15904] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed May 20 07:02:42.075781 2026] [:error] [pid 59244:tid 59269] [client 20.213.80.100:15904] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed May 20 07:02:42.121283 2026] [:error] [pid 59244:tid 59266] [client 20.213.80.100:15904] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Wed May 20 07:02:42.172358 2026] [:error] [pid 59244:tid 59258] [client 20.213.80.100:15904] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Wed May 20 07:02:42.207792 2026] [:error] [pid 59244:tid 59276] [client 20.213.80.100:15904] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Wed May 20 07:02:42.357495 2026] [:error] [pid 59244:tid 59264] [client 20.213.80.100:15904] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Wed May 20 07:02:42.551736 2026] [:error] [pid 59244:tid 59253] [client 20.213.80.100:15904] [client 20.213.80.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "agzsErxU0SdQQE7pLs3EDQAAAAA"]
[Wed May 20 07:02:42.678332 2026] [:error] [pid 59244:tid 59270] [client 20.213.80.100:5899] [client 20.213.80.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "agzsErxU0SdQQE7pLs3EDgAAABE"]
[Wed May 20 07:02:42.745863 2026] [:error] [pid 59349:tid 59371] [client 20.213.80.100:1318] [client 20.213.80.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "agzsEjvvxTUy-ppKSZWg4wAAANQ"]
[Wed May 20 07:02:42.840194 2026] [:error] [pid 59244:tid 59263] [client 20.213.80.100:5558] [client 20.213.80.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "agzsErxU0SdQQE7pLs3EDwAAAAo"]
[Wed May 20 19:46:25.972698 2026] [:error] [pid 7731:tid 7742] [client 136.107.63.119:50073] [client 136.107.63.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.107.63.119, incrementing ddos counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "ag2fEX9qQlHXbkl2nEsBlQAAAYk"]
[Wed May 20 19:46:25.975944 2026] [:error] [pid 7731:tid 7742] [client 136.107.63.119:50073] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed May 20 19:46:26.830404 2026] [:error] [pid 7731:tid 7745] [client 136.107.63.119:50073] [client 136.107.63.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ag2fEn9qQlHXbkl2nEsBmQAAAYw"]
[Wed May 20 19:46:27.363851 2026] [:error] [pid 44059:tid 44070] [client 136.107.63.119:49152] [client 136.107.63.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ag2fExfFs-oSOOcyjywWiQAAAQk"]
[Wed May 20 19:46:27.941122 2026] [:error] [pid 7664:tid 7688] [client 136.107.63.119:65307] [client 136.107.63.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ag2fE3Z8s7o3eiqT2kv5gAAAAVU"]
[Wed May 20 19:46:28.489094 2026] [:error] [pid 41277:tid 41284] [client 136.107.63.119:55319] [client 136.107.63.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ag2fFLTTCltJmboB5uf9YQAAAAI"]
[Wed May 20 19:46:29.103017 2026] [:error] [pid 44059:tid 44068] [client 136.107.63.119:55722] [client 136.107.63.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ag2fFRfFs-oSOOcyjywWjwAAAQc"]
[Wed May 20 19:46:29.526363 2026] [:error] [pid 44059:tid 44063] [client 136.107.63.119:53781] [client 136.107.63.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ag2fFRfFs-oSOOcyjywWkQAAAQI"]
[Wed May 20 20:18:50.664582 2026] [:error] [pid 7664:tid 7686] [client 195.178.110.105:46092] [client 195.178.110.105] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.windfcau.windfarmcoolants.com.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "ag2mqXZ8s7o3eiqT2kv_dwAAAVM"]
[Wed May 20 20:18:50.664686 2026] [:error] [pid 7664:tid 7686] [client 195.178.110.105:46092] [client 195.178.110.105] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||www.windfcau.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "ag2mqXZ8s7o3eiqT2kv_dwAAAVM"]
[Wed May 20 20:32:56.088984 2026] [:error] [pid 44059:tid 44073] [client 195.178.110.155:63690] [client 195.178.110.155] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.windfcau.windfarmcoolants.com.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "ag2p9xfFs-oSOOcyjywh0wAAAQw"]
[Wed May 20 20:32:56.089060 2026] [:error] [pid 44059:tid 44073] [client 195.178.110.155:63690] [client 195.178.110.155] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||www.windfcau.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "ag2p9xfFs-oSOOcyjywh0wAAAQw"]
[Wed May 20 21:08:20.917071 2026] [:error] [pid 44059:tid 44061] [client 35.226.206.220:50134] [client 35.226.206.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.226.206.220, incrementing ddos counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "ag2yRBfFs-oSOOcyjywqsQAAAQA"]
[Wed May 20 21:08:20.920726 2026] [:error] [pid 44059:tid 44061] [client 35.226.206.220:50134] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed May 20 21:08:21.564768 2026] [:error] [pid 44059:tid 44062] [client 35.226.206.220:50134] [client 35.226.206.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "ag2yRRfFs-oSOOcyjywqtAAAAQE"]
[Wed May 20 21:08:22.167343 2026] [:error] [pid 7731:tid 7757] [client 35.226.206.220:58474] [client 35.226.206.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ag2yRn9qQlHXbkl2nEseIwAAAZg"]
[Wed May 20 21:08:22.978869 2026] [:error] [pid 41364:tid 41368] [client 35.226.206.220:57747] [client 35.226.206.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "ag2yRhKTmyvxtNXrN-jcQQAAAII"]
[Wed May 20 21:08:23.645710 2026] [:error] [pid 41279:tid 41348] [client 35.226.206.220:58953] [client 35.226.206.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ag2yR7EFyfaehGZbt4yeEwAAAMw"]
[Wed May 20 21:08:24.263385 2026] [:error] [pid 7731:tid 7744] [client 35.226.206.220:53576] [client 35.226.206.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "ag2ySH9qQlHXbkl2nEseLQAAAYs"]
[Wed May 20 21:08:24.982349 2026] [:error] [pid 41364:tid 41367] [client 35.226.206.220:60600] [client 35.226.206.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "ag2ySBKTmyvxtNXrN-jcRQAAAIE"]
[Wed May 20 21:08:25.566597 2026] [:error] [pid 7664:tid 7676] [client 35.226.206.220:60336] [client 35.226.206.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ag2ySXZ8s7o3eiqT2ksHawAAAUk"]
[Wed May 20 21:08:26.195516 2026] [:error] [pid 41364:tid 41387] [client 35.226.206.220:50553] [client 35.226.206.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ag2yShKTmyvxtNXrN-jcSQAAAJU"]
[Wed May 20 21:08:27.002295 2026] [:error] [pid 44059:tid 44063] [client 35.226.206.220:61362] [client 35.226.206.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ag2ySxfFs-oSOOcyjywqugAAAQI"]
[Wed May 20 21:08:27.721127 2026] [:error] [pid 44059:tid 44069] [client 35.226.206.220:61452] [client 35.226.206.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ag2ySxfFs-oSOOcyjywqvQAAAQg"]
[Wed May 20 21:08:28.256655 2026] [:error] [pid 44059:tid 44067] [client 35.226.206.220:62859] [client 35.226.206.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ag2yTBfFs-oSOOcyjywqwgAAAQY"]
[Wed May 20 21:08:28.876096 2026] [:error] [pid 7731:tid 7750] [client 35.226.206.220:58482] [client 35.226.206.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ag2yTH9qQlHXbkl2nEseOQAAAZE"]
[Wed May 20 21:08:29.474479 2026] [:error] [pid 7664:tid 7668] [client 35.226.206.220:58719] [client 35.226.206.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ag2yTXZ8s7o3eiqT2ksHdwAAAUE"]
[Wed May 20 21:08:30.175046 2026] [:error] [pid 41277:tid 41303] [client 35.226.206.220:60681] [client 35.226.206.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ag2yTrTTCltJmboB5ucGCgAAABU"]
[Wed May 20 21:08:30.723259 2026] [:error] [pid 41279:tid 41347] [client 35.226.206.220:64173] [client 35.226.206.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ag2yTrEFyfaehGZbt4yeGgAAAMs"]
[Thu May 21 03:33:42.409851 2026] [:error] [pid 41279:tid 41336] [client 4.228.83.111:17570] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu May 21 03:33:42.783280 2026] [:error] [pid 41279:tid 41358] [client 4.228.83.111:17570] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu May 21 03:33:43.413710 2026] [:error] [pid 41279:tid 41348] [client 4.228.83.111:17570] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu May 21 03:33:43.765317 2026] [:error] [pid 41279:tid 41341] [client 4.228.83.111:17570] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Thu May 21 03:33:44.112155 2026] [:error] [pid 41279:tid 41346] [client 4.228.83.111:17570] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu May 21 03:33:44.782600 2026] [:error] [pid 41279:tid 41337] [client 4.228.83.111:17570] File does not exist: /usr/local/apache/htdocs/suspended-page/gelay.php
[Thu May 21 03:33:47.088115 2026] [:error] [pid 41279:tid 41343] [client 4.228.83.111:17570] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu May 21 03:33:47.436297 2026] [:error] [pid 41279:tid 41354] [client 4.228.83.111:17570] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "ag4Mm7EFyfaehGZbt4zP7AAAANI"]
[Thu May 21 03:33:53.976009 2026] [:error] [pid 41364:tid 41384] [client 4.228.83.111:6937] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "ag4MoRKTmyvxtNXrN-hQqgAAAJI"]
[Thu May 21 03:34:02.720612 2026] [:error] [pid 41277:tid 41299] [client 4.228.83.111:36605] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "ag4MqrTTCltJmboB5ucs3AAAABE"]
[Thu May 21 03:34:18.076398 2026] [:error] [pid 41279:tid 41344] [client 4.228.83.111:34535] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "ag4MurEFyfaehGZbt4zQDAAAAMg"]
[Thu May 21 03:34:22.750441 2026] [:error] [pid 41277:tid 41296] [client 4.228.83.111:4624] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ag4MvrTTCltJmboB5ucs6gAAAA4"]
[Thu May 21 03:34:24.157306 2026] [:error] [pid 7731:tid 7734] [client 4.228.83.111:4611] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ag4MwH9qQlHXbkl2nEt-EwAAAYE"]
[Thu May 21 03:34:30.759817 2026] [:error] [pid 41279:tid 41360] [client 4.228.83.111:11178] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ag4MxrEFyfaehGZbt4zQDwAAANg"]
[Thu May 21 03:34:42.072861 2026] [:error] [pid 7664:tid 7667] [client 4.228.83.111:48456] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/go.php"] [unique_id "ag4M0nZ8s7o3eiqT2ktE5gAAAUA"]
[Thu May 21 03:34:44.725805 2026] [:error] [pid 41364:tid 41384] [client 4.228.83.111:26944] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/go.php"] [unique_id "ag4M1BKTmyvxtNXrN-hQ6gAAAJI"]
[Thu May 21 03:34:54.761505 2026] [:error] [pid 7664:tid 7669] [client 4.228.83.111:23791] File does not exist: /usr/local/apache/htdocs/suspended-page/vv.php
[Thu May 21 03:34:55.405944 2026] [:error] [pid 7664:tid 7667] [client 4.228.83.111:23791] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu May 21 03:34:57.597536 2026] [:error] [pid 7664:tid 7675] [client 4.228.83.111:23791] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Thu May 21 03:34:57.946562 2026] [:error] [pid 7664:tid 7674] [client 4.228.83.111:23791] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu May 21 03:34:58.260519 2026] [:error] [pid 7664:tid 7678] [client 4.228.83.111:23791] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu May 21 03:34:58.918260 2026] [:error] [pid 7664:tid 7672] [client 4.228.83.111:23791] [client 4.228.83.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "ag4M4nZ8s7o3eiqT2ktE-wAAAUU"]
[Thu May 21 03:35:07.781488 2026] [:error] [pid 7664:tid 7672] [client 4.228.83.111:11179] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Thu May 21 03:35:08.097524 2026] [:error] [pid 7664:tid 7684] [client 4.228.83.111:11179] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ag4M7HZ8s7o3eiqT2ktFCAAAAVE"]
[Thu May 21 03:35:18.254056 2026] [:error] [pid 41364:tid 41367] [client 4.228.83.111:11158] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ag4M9hKTmyvxtNXrN-hRGwAAAIE"]
[Thu May 21 03:35:26.674490 2026] [:error] [pid 44059:tid 44079] [client 4.228.83.111:50564] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "ag4M_hfFs-oSOOcyjyxyQAAAARI"]
[Thu May 21 03:35:31.075302 2026] [:error] [pid 41364:tid 41383] [client 4.228.83.111:50561] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "ag4NAxKTmyvxtNXrN-hRSAAAAJE"]
[Thu May 21 03:35:33.248511 2026] [:error] [pid 7731:tid 7736] [client 4.228.83.111:1348] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "ag4NBX9qQlHXbkl2nEt-QwAAAYM"]
[Thu May 21 03:35:39.260870 2026] [:error] [pid 41364:tid 41389] [client 4.228.83.111:9640] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "ag4NCxKTmyvxtNXrN-hRYAAAAJc"]
[Thu May 21 03:35:43.154408 2026] [:error] [pid 7731:tid 7742] [client 4.228.83.111:34975] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ag4ND39qQlHXbkl2nEt-VAAAAYk"]
[Thu May 21 03:35:46.964107 2026] [:error] [pid 7731:tid 7740] [client 4.228.83.111:39449] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ag4NEn9qQlHXbkl2nEt-WwAAAYc"]
[Thu May 21 03:35:49.102418 2026] [:error] [pid 41279:tid 41357] [client 4.228.83.111:16186] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ag4NFbEFyfaehGZbt4zQQAAAANU"]
[Thu May 21 03:35:52.280362 2026] [:error] [pid 41277:tid 41282] [client 4.228.83.111:33219] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ag4NGLTTCltJmboB5uctDQAAAAA"]
[Thu May 21 03:35:55.997886 2026] [:error] [pid 41364:tid 41390] [client 4.228.83.111:49719] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/"] [unique_id "ag4NGxKTmyvxtNXrN-hRawAAAJg"]
[Thu May 21 03:35:58.179045 2026] [:error] [pid 44059:tid 44064] [client 4.228.83.111:49681] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/"] [unique_id "ag4NHhfFs-oSOOcyjyxyZQAAAQM"]
[Thu May 21 03:36:01.022515 2026] [:error] [pid 41277:tid 41292] [client 4.228.83.111:1310] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/"] [unique_id "ag4NIbTTCltJmboB5uctEQAAAAo"]
[Thu May 21 03:36:04.076979 2026] [:error] [pid 41364:tid 41383] [client 4.228.83.111:25295] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/images/"] [unique_id "ag4NJBKTmyvxtNXrN-hRegAAAJE"]
[Thu May 21 03:36:11.077534 2026] [:error] [pid 44059:tid 44080] [client 4.228.83.111:3499] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Thu May 21 03:36:11.719974 2026] [:error] [pid 44059:tid 44062] [client 4.228.83.111:3499] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu May 21 03:36:12.043709 2026] [:error] [pid 44059:tid 44077] [client 4.228.83.111:3499] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Thu May 21 03:36:12.680595 2026] [:error] [pid 44059:tid 44070] [client 4.228.83.111:3499] File does not exist: /usr/local/apache/htdocs/suspended-page/cah.php
[Thu May 21 03:36:13.342333 2026] [:error] [pid 44059:tid 44084] [client 4.228.83.111:3499] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Thu May 21 03:36:14.344376 2026] [:error] [pid 44059:tid 44083] [client 4.228.83.111:3499] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ag4NLhfFs-oSOOcyjyxyeQAAARY"]
[Thu May 21 03:36:15.818479 2026] [:error] [pid 7664:tid 7678] [client 4.228.83.111:26920] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ag4NL3Z8s7o3eiqT2ktFMgAAAUs"]
[Thu May 21 03:36:28.441751 2026] [:error] [pid 41277:tid 41295] [client 4.228.83.111:9672] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ag4NPLTTCltJmboB5uctIAAAAA0"]
[Thu May 21 03:36:35.326359 2026] [:error] [pid 7664:tid 7675] [client 4.228.83.111:16220] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ag4NQ3Z8s7o3eiqT2ktFPgAAAUg"]
[Thu May 21 03:36:43.176278 2026] [:error] [pid 7731:tid 7743] [client 4.228.83.111:51206] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ag4NS39qQlHXbkl2nEt-iAAAAYo"]
[Thu May 21 03:36:48.487273 2026] [:error] [pid 7731:tid 7751] [client 4.228.83.111:49111] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ag4NUH9qQlHXbkl2nEt-jgAAAZI"]
[Thu May 21 03:36:59.121827 2026] [:error] [pid 41279:tid 41354] [client 4.228.83.111:49120] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ag4NW7EFyfaehGZbt4zQwgAAANI"]
[Thu May 21 03:37:06.843049 2026] [:error] [pid 44059:tid 44083] [client 4.228.83.111:19560] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wk/index.php"] [unique_id "ag4NYhfFs-oSOOcyjyxysgAAARY"]
[Thu May 21 03:37:11.610290 2026] [:error] [pid 44059:tid 44074] [client 4.228.83.111:19565] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wk/index.php"] [unique_id "ag4NZxfFs-oSOOcyjyxyuAAAAQ0"]
[Thu May 21 03:37:13.550360 2026] [:error] [pid 7664:tid 7671] [client 4.228.83.111:24548] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wk/index.php"] [unique_id "ag4NaXZ8s7o3eiqT2ktFXQAAAUQ"]
[Thu May 21 03:37:21.589312 2026] [:error] [pid 41278:tid 41315] [client 4.228.83.111:48420] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu May 21 03:37:22.538432 2026] [:error] [pid 41278:tid 41326] [client 4.228.83.111:48420] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu May 21 03:37:23.188809 2026] [:error] [pid 41278:tid 41327] [client 4.228.83.111:48420] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-config-sample.php
[Thu May 21 03:37:23.580034 2026] [:error] [pid 41278:tid 41323] [client 4.228.83.111:48420] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Thu May 21 03:37:23.920722 2026] [:error] [pid 41278:tid 41332] [client 4.228.83.111:48420] [client 4.228.83.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/shortcode/index.php"] [unique_id "ag4Nc_WiNKASEfiGdwbmKwAAAFc"]
[Thu May 21 03:37:29.912928 2026] [:error] [pid 7731:tid 7735] [client 4.228.83.111:46429] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Thu May 21 03:37:30.539927 2026] [:error] [pid 7731:tid 7739] [client 4.228.83.111:46429] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ag4Nen9qQlHXbkl2nEt-uAAAAYY"]
[Thu May 21 03:37:36.436952 2026] [:error] [pid 41277:tid 41298] [client 4.228.83.111:48434] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ag4NgLTTCltJmboB5uctRwAAABA"]
[Thu May 21 03:37:40.514018 2026] [:error] [pid 7664:tid 7676] [client 4.228.83.111:53288] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ag4NhHZ8s7o3eiqT2ktFbAAAAUk"]
[Thu May 21 03:37:45.058736 2026] [:error] [pid 7664:tid 7681] [client 4.228.83.111:53273] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ag4NiXZ8s7o3eiqT2ktFeAAAAU4"]
[Thu May 21 03:37:51.649494 2026] [:error] [pid 7731:tid 7752] [client 4.228.83.111:20776] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ag4Nj39qQlHXbkl2nEt-5AAAAZM"]
[Thu May 21 03:37:52.793304 2026] [:error] [pid 7664:tid 7671] [client 4.228.83.111:1707] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ag4NkHZ8s7o3eiqT2ktFhQAAAUQ"]
[Thu May 21 03:37:55.638746 2026] [:error] [pid 41279:tid 41349] [client 4.228.83.111:37186] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ag4Nk7EFyfaehGZbt4zQ7AAAAM0"]
[Thu May 21 03:37:57.684876 2026] [:error] [pid 7731:tid 7747] [client 4.228.83.111:14516] [client 4.228.83.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ag4NlX9qQlHXbkl2nEt-7wAAAY4"]
[Thu May 21 03:44:20.342065 2026] [:error] [pid 44399:tid 44425] [client 135.119.26.13:29007] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ag4PFBJzuBxQmiZFmZi3SgAAABY"]
[Thu May 21 03:44:23.409132 2026] [:error] [pid 44671:tid 44694] [client 135.119.26.13:29002] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ag4PF53dfX9AXdp6S4jZQAAAAZU"]
[Thu May 21 03:44:25.530853 2026] [:error] [pid 44598:tid 44621] [client 135.119.26.13:29035] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ag4PGe01_Oy9stnT-xOeAgAAARU"]
[Thu May 21 03:44:26.999547 2026] [:error] [pid 44400:tid 44431] [client 135.119.26.13:29013] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ag4PGjmE6AhfOi_OmuvemwAAAEA"]
[Fri May 22 10:25:45.557786 2026] [:error] [pid 15679:tid 15686] [client 20.196.197.22:1212] File does not exist: /usr/local/apache/htdocs/suspended-page/php8.php
[Fri May 22 10:25:45.718670 2026] [:error] [pid 15679:tid 15693] [client 20.196.197.22:1212] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Fri May 22 10:25:45.881166 2026] [:error] [pid 15679:tid 15700] [client 20.196.197.22:1212] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Fri May 22 10:25:46.041978 2026] [:error] [pid 15679:tid 15704] [client 20.196.197.22:1212] File does not exist: /usr/local/apache/htdocs/suspended-page/past.php
[Fri May 22 10:25:46.214486 2026] [:error] [pid 15679:tid 15696] [client 20.196.197.22:1212] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Fri May 22 10:25:46.375404 2026] [:error] [pid 15679:tid 15689] [client 20.196.197.22:1212] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Fri May 22 10:25:46.538836 2026] [:error] [pid 15679:tid 15695] [client 20.196.197.22:1212] File does not exist: /usr/local/apache/htdocs/suspended-page/past.php
[Fri May 22 10:25:46.720311 2026] [:error] [pid 15679:tid 15691] [client 20.196.197.22:1212] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri May 22 10:25:46.881654 2026] [:error] [pid 15679:tid 15692] [client 20.196.197.22:1212] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Fri May 22 10:25:47.043334 2026] [:error] [pid 15679:tid 15703] [client 20.196.197.22:1212] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Fri May 22 10:25:47.204169 2026] [:error] [pid 15679:tid 15682] [client 20.196.197.22:1212] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Fri May 22 10:25:47.387140 2026] [:error] [pid 15679:tid 15699] [client 20.196.197.22:1212] [client 20.196.197.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "ag--qyh8tgGc38WJ-Gy9aQAAANI"]
[Fri May 22 10:25:48.020468 2026] [:error] [pid 58782:tid 58801] [client 20.196.197.22:1153] [client 20.196.197.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "ag--rIxsdTFafgO8vhTS-QAAARE"]
[Fri May 22 10:25:48.663469 2026] [:error] [pid 58813:tid 58836] [client 20.196.197.22:8849] [client 20.196.197.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "ag--rJ6yyKWDKULhxJ0myAAAAVQ"]
[Fri May 22 10:25:49.326602 2026] [:error] [pid 58813:tid 58823] [client 20.196.197.22:8426] [client 20.196.197.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "ag--rZ6yyKWDKULhxJ0myQAAAUc"]
[Fri May 22 10:54:12.266448 2026] [:error] [pid 15679:tid 15691] [client 165.245.209.163:49854] [client 165.245.209.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.245.209.163, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ag_FVCh8tgGc38WJ-GzEtAAAAMo"]
[Fri May 22 10:54:12.269889 2026] [:error] [pid 15679:tid 15691] [client 165.245.209.163:49854] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri May 22 11:42:47.084719 2026] [:error] [pid 58813:tid 58821] [client 20.205.110.7:16819] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Fri May 22 11:42:47.212731 2026] [:error] [pid 58813:tid 58830] [client 20.205.110.7:16819] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Fri May 22 11:42:47.339358 2026] [:error] [pid 58813:tid 58823] [client 20.205.110.7:16819] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Fri May 22 11:42:48.933645 2026] [:error] [pid 58813:tid 58833] [client 20.205.110.7:16819] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri May 22 11:42:49.061894 2026] [:error] [pid 58813:tid 58839] [client 20.205.110.7:16819] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri May 22 11:42:49.191605 2026] [:error] [pid 58813:tid 58831] [client 20.205.110.7:16819] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri May 22 11:42:49.318982 2026] [:error] [pid 58813:tid 58820] [client 20.205.110.7:16819] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Fri May 22 11:42:49.446715 2026] [:error] [pid 58813:tid 58836] [client 20.205.110.7:16819] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri May 22 11:42:49.573770 2026] [:error] [pid 58813:tid 58824] [client 20.205.110.7:16819] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Fri May 22 11:42:49.843208 2026] [:error] [pid 58813:tid 58816] [client 20.205.110.7:16819] [client 20.205.110.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ag_QuZ6yyKWDKULhxJ0zwQAAAUA"]
[Fri May 22 11:42:50.377521 2026] [:error] [pid 15583:tid 15601] [client 20.205.110.7:15138] [client 20.205.110.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ag_QunnaOncRcIm17YW5SQAAAA0"]
[Fri May 22 11:42:50.896181 2026] [:error] [pid 15679:tid 15704] [client 20.205.110.7:15124] [client 20.205.110.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ag_Quih8tgGc38WJ-GzSKwAAANc"]
[Fri May 22 11:42:51.418032 2026] [:error] [pid 15585:tid 15666] [client 20.205.110.7:12826] [client 20.205.110.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ag_QuyKb-vB41AF-LC3OywAAAJM"]
[Fri May 22 12:21:25.955083 2026] [:error] [pid 15585:tid 15655] [client 20.78.148.25:7118] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Fri May 22 12:21:26.087137 2026] [:error] [pid 15585:tid 15661] [client 20.78.148.25:7118] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Fri May 22 12:21:26.221576 2026] [:error] [pid 15585:tid 15665] [client 20.78.148.25:7118] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Fri May 22 12:21:26.344594 2026] [:error] [pid 15585:tid 15654] [client 20.78.148.25:7118] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri May 22 12:21:26.467469 2026] [:error] [pid 15585:tid 15652] [client 20.78.148.25:7118] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri May 22 12:21:26.595958 2026] [:error] [pid 15585:tid 15671] [client 20.78.148.25:7118] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri May 22 12:21:26.718900 2026] [:error] [pid 15585:tid 15668] [client 20.78.148.25:7118] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Fri May 22 12:21:26.844515 2026] [:error] [pid 15585:tid 15658] [client 20.78.148.25:7118] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri May 22 12:21:26.967738 2026] [:error] [pid 15585:tid 15650] [client 20.78.148.25:7118] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Fri May 22 12:21:27.221015 2026] [:error] [pid 15585:tid 15648] [client 20.78.148.25:7118] [client 20.78.148.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ag_ZxyKb-vB41AF-LC3dUgAAAIE"]
[Fri May 22 12:21:27.711797 2026] [:error] [pid 15585:tid 15655] [client 20.78.148.25:7158] [client 20.78.148.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ag_ZxyKb-vB41AF-LC3dVAAAAIg"]
[Fri May 22 12:21:28.213691 2026] [:error] [pid 15584:tid 15628] [client 20.78.148.25:7138] [client 20.78.148.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ag_ZyN9Z_TVLbNEx52jNTgAAAEg"]
[Fri May 22 12:21:28.715260 2026] [:error] [pid 15584:tid 15624] [client 20.78.148.25:11532] [client 20.78.148.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ag_ZyN9Z_TVLbNEx52jNTwAAAEQ"]
[Fri May 22 17:07:35.329887 2026] [:error] [pid 15679:tid 15686] [client 161.118.202.128:52361] [client 161.118.202.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file-manager/initialize"] [unique_id "ahAc1yh8tgGc38WJ-GwvXgAAAMU"]
[Fri May 22 17:07:35.506753 2026] [:error] [pid 15585:tid 15656] [client 161.118.202.128:52482] [client 161.118.202.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file-manager/initialize"] [unique_id "ahAc1yKb-vB41AF-LC1HnAAAAIk"]
[Sat May 23 00:10:37.182026 2026] [:error] [pid 15585:tid 15661] [client 35.175.113.28:54476] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ahB__SKb-vB41AF-LC25CAAAAI4"]
[Sat May 23 00:10:38.289353 2026] [:error] [pid 15679:tid 15681] [client 35.175.113.28:54620] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ahB__ih8tgGc38WJ-GyTogAAAMA"]
[Sat May 23 00:10:39.195955 2026] [:error] [pid 15679:tid 15699] [client 35.175.113.28:54694] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "ahB__yh8tgGc38WJ-GyTpQAAANI"]
[Sat May 23 00:10:40.082120 2026] [:error] [pid 15679:tid 15685] [client 35.175.113.28:54752] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "ahCAACh8tgGc38WJ-GyTpwAAAMQ"]
[Sat May 23 00:10:40.973912 2026] [:error] [pid 15583:tid 15609] [client 35.175.113.28:54810] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.staging"] [unique_id "ahCAAHnaOncRcIm17YVRWwAAABU"]
[Sat May 23 00:10:41.858606 2026] [:error] [pid 15583:tid 15599] [client 35.175.113.28:54874] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.development"] [unique_id "ahCAAXnaOncRcIm17YVRZgAAAAs"]
[Sat May 23 01:07:25.151263 2026] [:error] [pid 58782:tid 58789] [client 3.138.195.162:52574] [client 3.138.195.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ahCNTYxsdTFafgO8vhRLRwAAAQU"]
[Sat May 23 01:07:26.190499 2026] [:error] [pid 15585:tid 15671] [client 3.138.195.162:42508] [client 3.138.195.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ahCNTiKb-vB41AF-LC3FswAAAJg"]
[Sat May 23 01:07:27.017058 2026] [:error] [pid 58813:tid 58824] [client 3.138.195.162:42568] [client 3.138.195.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "ahCNT56yyKWDKULhxJ2wyQAAAUg"]
[Sat May 23 01:07:27.845634 2026] [:error] [pid 15679:tid 15687] [client 3.138.195.162:42602] [client 3.138.195.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "ahCNTyh8tgGc38WJ-GykFwAAAMY"]
[Sat May 23 01:07:28.674896 2026] [:error] [pid 15583:tid 15600] [client 3.138.195.162:42658] [client 3.138.195.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.staging"] [unique_id "ahCNUHnaOncRcIm17YVoDwAAAAw"]
[Sat May 23 01:07:29.497139 2026] [:error] [pid 15585:tid 15670] [client 3.138.195.162:42722] [client 3.138.195.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.development"] [unique_id "ahCNUSKb-vB41AF-LC3FvwAAAJc"]
[Sat May 23 01:07:30.328565 2026] [:error] [pid 15583:tid 15600] [client 3.138.195.162:42798] [client 3.138.195.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.test"] [unique_id "ahCNUnnaOncRcIm17YVoHQAAAAw"]
[Sat May 23 14:36:22.031514 2026] [:error] [pid 30941:tid 30988] [client 52.231.88.142:9921] File does not exist: /usr/local/apache/htdocs/suspended-page/php8.php
[Sat May 23 14:36:22.176491 2026] [:error] [pid 30941:tid 30981] [client 52.231.88.142:9921] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Sat May 23 14:36:22.321193 2026] [:error] [pid 30941:tid 30985] [client 52.231.88.142:9921] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Sat May 23 14:36:22.485419 2026] [:error] [pid 30941:tid 30996] [client 52.231.88.142:9921] File does not exist: /usr/local/apache/htdocs/suspended-page/past.php
[Sat May 23 14:36:22.629541 2026] [:error] [pid 30941:tid 31000] [client 52.231.88.142:9921] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Sat May 23 14:36:22.775200 2026] [:error] [pid 30941:tid 30993] [client 52.231.88.142:9921] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Sat May 23 14:36:22.921205 2026] [:error] [pid 30941:tid 30987] [client 52.231.88.142:9921] File does not exist: /usr/local/apache/htdocs/suspended-page/past.php
[Sat May 23 14:36:23.091002 2026] [:error] [pid 30941:tid 30983] [client 52.231.88.142:9921] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat May 23 14:36:23.257791 2026] [:error] [pid 30941:tid 30991] [client 52.231.88.142:9921] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Sat May 23 14:36:24.797771 2026] [:error] [pid 30941:tid 30992] [client 52.231.88.142:9921] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Sat May 23 14:36:24.942673 2026] [:error] [pid 30941:tid 30980] [client 52.231.88.142:9921] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Sat May 23 14:36:25.084684 2026] [:error] [pid 30941:tid 30990] [client 52.231.88.142:9921] [client 52.231.88.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "ahFK6XTIgjSDhiZmvlWCJAAAAE4"]
[Sat May 23 14:36:25.755665 2026] [:error] [pid 25876:tid 25889] [client 52.231.88.142:7176] [client 52.231.88.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "ahFK6QSpWUCKPezIBJBEtgAAAQs"]
[Sat May 23 14:36:26.442751 2026] [:error] [pid 25876:tid 25885] [client 52.231.88.142:9956] [client 52.231.88.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "ahFK6gSpWUCKPezIBJBEuQAAAQc"]
[Sat May 23 14:36:27.132365 2026] [:error] [pid 30942:tid 31011] [client 52.231.88.142:9976] [client 52.231.88.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "ahFK69Uosz64YFiBlG0yQAAAAIg"]
[Sun May 24 04:28:09.203416 2026] [:error] [pid 58918:tid 58926] [client 20.214.178.21:2987] File does not exist: /usr/local/apache/htdocs/suspended-page/php8.php
[Sun May 24 04:28:09.342050 2026] [:error] [pid 58918:tid 58934] [client 20.214.178.21:2987] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Sun May 24 04:28:09.478891 2026] [:error] [pid 58918:tid 58923] [client 20.214.178.21:2987] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Sun May 24 04:28:09.625742 2026] [:error] [pid 58918:tid 58938] [client 20.214.178.21:2987] File does not exist: /usr/local/apache/htdocs/suspended-page/past.php
[Sun May 24 04:28:09.761713 2026] [:error] [pid 58918:tid 58929] [client 20.214.178.21:2987] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Sun May 24 04:28:09.897915 2026] [:error] [pid 58918:tid 58930] [client 20.214.178.21:2987] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Sun May 24 04:28:10.033792 2026] [:error] [pid 58918:tid 58943] [client 20.214.178.21:2987] File does not exist: /usr/local/apache/htdocs/suspended-page/past.php
[Sun May 24 04:28:10.170392 2026] [:error] [pid 58918:tid 58937] [client 20.214.178.21:2987] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun May 24 04:28:10.327506 2026] [:error] [pid 58918:tid 58940] [client 20.214.178.21:2987] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Sun May 24 04:28:10.464305 2026] [:error] [pid 58918:tid 58939] [client 20.214.178.21:2987] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Sun May 24 04:28:10.600870 2026] [:error] [pid 58918:tid 58924] [client 20.214.178.21:2987] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Sun May 24 04:28:10.747511 2026] [:error] [pid 58918:tid 58927] [client 20.214.178.21:2987] [client 20.214.178.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "ahIN2qT5tvv40jh4HYboqwAAAYc"]
[Sun May 24 04:28:11.305470 2026] [:error] [pid 50873:tid 50949] [client 20.214.178.21:9473] [client 20.214.178.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "ahIN2-lYxsqwDcWZbhLAegAAAIk"]
[Sun May 24 04:28:11.851310 2026] [:error] [pid 58918:tid 58925] [client 20.214.178.21:9568] [client 20.214.178.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "ahIN26T5tvv40jh4HYbosQAAAYU"]
[Sun May 24 04:28:12.427432 2026] [:error] [pid 58797:tid 58808] [client 20.214.178.21:2402] [client 20.214.178.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "ahIN3PzoIKLVypLB5NgLwwAAAUg"]
[Sun May 24 11:05:52.891994 2026] [:error] [pid 49744:tid 49765] [client 18.144.169.7:60316] [client 18.144.169.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ahJrEDsE5kPdFpUbbHGA5QAAANM"]
[Sun May 24 11:05:53.776472 2026] [:error] [pid 49775:tid 49781] [client 18.144.169.7:50624] [client 18.144.169.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/credentials"] [unique_id "ahJrEYvZb8G6T8WpI1g_agAAAAQ"]
[Sun May 24 11:05:55.235357 2026] [:error] [pid 49775:tid 49800] [client 18.144.169.7:50692] [client 18.144.169.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ahJrE4vZb8G6T8WpI1g_bQAAABc"]
[Sun May 24 11:05:55.901737 2026] [:error] [pid 23497:tid 23500] [client 18.144.169.7:50758] [client 18.144.169.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "ahJrEyPlV47QcYwd2v9Q1gAAAUA"]
[Sun May 24 11:05:56.629071 2026] [:error] [pid 2639:tid 2655] [client 18.144.169.7:50812] [client 18.144.169.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "ahJrFEzQncQTd0Z0Oe_69wAAAQ4"]
[Sun May 24 11:13:29.687978 2026] [:error] [pid 2639:tid 2662] [client 20.63.100.211:41347] File does not exist: /usr/local/apache/htdocs/suspended-page/revealability.php
[Sun May 24 11:13:30.013614 2026] [:error] [pid 2639:tid 2645] [client 20.63.100.211:41347] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Sun May 24 11:13:30.229538 2026] [:error] [pid 2639:tid 2643] [client 20.63.100.211:41347] File does not exist: /usr/local/apache/htdocs/suspended-page/tires.php
[Sun May 24 11:13:31.842993 2026] [:error] [pid 2639:tid 2643] [client 20.63.100.211:41347] File does not exist: /usr/local/apache/htdocs/suspended-page/amxloxxr.php
[Sun May 24 11:13:32.077274 2026] [:error] [pid 2639:tid 2656] [client 20.63.100.211:41347] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-block.php
[Sun May 24 11:13:32.319883 2026] [:error] [pid 2639:tid 2661] [client 20.63.100.211:41347] File does not exist: /usr/local/apache/htdocs/suspended-page/wehrman.php
[Sun May 24 11:13:32.537439 2026] [:error] [pid 2639:tid 2658] [client 20.63.100.211:41347] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-thi.php
[Sun May 24 11:13:32.777294 2026] [:error] [pid 2639:tid 2654] [client 20.63.100.211:41347] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Sun May 24 11:13:32.993621 2026] [:error] [pid 2639:tid 2647] [client 20.63.100.211:41347] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sun May 24 11:13:33.209768 2026] [:error] [pid 2639:tid 2660] [client 20.63.100.211:41347] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Sun May 24 11:13:33.776034 2026] [:error] [pid 2639:tid 2645] [client 20.63.100.211:41347] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ahJs3UzQncQTd0Z0Oe_9-QAAAQQ"]
[Sun May 24 11:13:34.532465 2026] [:error] [pid 49744:tid 49764] [client 20.63.100.211:41367] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ahJs3jsE5kPdFpUbbHGDPQAAANI"]
[Sun May 24 11:13:35.070844 2026] [:error] [pid 23497:tid 23500] [client 20.63.100.211:38686] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ahJs3yPlV47QcYwd2v9WLwAAAUA"]
[Sun May 24 11:13:36.024813 2026] [:error] [pid 49744:tid 49761] [client 20.63.100.211:51464] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ahJs4DsE5kPdFpUbbHGDPgAAAM8"]
[Sun May 24 11:13:36.819303 2026] [:error] [pid 49744:tid 49767] [client 20.63.100.211:2735] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "ahJs4DsE5kPdFpUbbHGDQAAAANU"]
[Sun May 24 11:13:37.666675 2026] [:error] [pid 23497:tid 23518] [client 20.63.100.211:40146] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "ahJs4SPlV47QcYwd2v9WMAAAAVI"]
[Sun May 24 11:13:38.634643 2026] [:error] [pid 49744:tid 49757] [client 20.63.100.211:17638] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "ahJs4jsE5kPdFpUbbHGDRAAAAMs"]
[Sun May 24 11:13:40.590118 2026] [:error] [pid 49744:tid 49766] [client 20.63.100.211:19719] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "ahJs5DsE5kPdFpUbbHGDRwAAANQ"]
[Sun May 24 11:13:41.543865 2026] [:error] [pid 49744:tid 49756] [client 20.63.100.211:40172] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "ahJs5TsE5kPdFpUbbHGDSgAAAMo"]
[Sun May 24 11:13:42.382001 2026] [:error] [pid 49744:tid 49765] [client 20.63.100.211:22824] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "ahJs5jsE5kPdFpUbbHGDTQAAANM"]
[Sun May 24 11:13:43.211996 2026] [:error] [pid 49744:tid 49752] [client 20.63.100.211:22833] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "ahJs5zsE5kPdFpUbbHGDTwAAAMY"]
[Sun May 24 11:13:43.916991 2026] [:error] [pid 49775:tid 49782] [client 20.63.100.211:2707] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "ahJs54vZb8G6T8WpI1hBZgAAAAU"]
[Sun May 24 11:13:44.574766 2026] [:error] [pid 49689:tid 49742] [client 20.63.100.211:50254] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-der.php"] [unique_id "ahJs6AaxiY3NxLUD97UyKAAAAJg"]
[Sun May 24 11:13:45.467803 2026] [:error] [pid 23497:tid 23506] [client 20.63.100.211:18803] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-der.php"] [unique_id "ahJs6SPlV47QcYwd2v9WNQAAAUY"]
[Sun May 24 11:13:46.548386 2026] [:error] [pid 23497:tid 23508] [client 20.63.100.211:2241] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-der.php"] [unique_id "ahJs6iPlV47QcYwd2v9WOAAAAUg"]
[Sun May 24 11:13:47.150783 2026] [:error] [pid 23497:tid 23518] [client 20.63.100.211:22444] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-der.php"] [unique_id "ahJs6yPlV47QcYwd2v9WPAAAAVI"]
[Sun May 24 11:13:47.772136 2026] [:error] [pid 23497:tid 23515] [client 20.63.100.211:37387] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "ahJs6yPlV47QcYwd2v9WPgAAAU8"]
[Sun May 24 11:13:48.659933 2026] [:error] [pid 2639:tid 2660] [client 20.63.100.211:26684] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "ahJs7EzQncQTd0Z0Oe_-AQAAARM"]
[Sun May 24 11:13:49.724888 2026] [:error] [pid 49775:tid 49784] [client 20.63.100.211:52156] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "ahJs7YvZb8G6T8WpI1hBcAAAAAc"]
[Sun May 24 11:13:50.235005 2026] [:error] [pid 23497:tid 23505] [client 20.63.100.211:28237] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "ahJs7iPlV47QcYwd2v9WRQAAAUU"]
[Sun May 24 11:13:50.789227 2026] [:error] [pid 23497:tid 23500] [client 20.63.100.211:50205] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "ahJs7iPlV47QcYwd2v9WSQAAAUA"]
[Sun May 24 11:13:51.379921 2026] [:error] [pid 23497:tid 23521] [client 20.63.100.211:39448] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "ahJs7yPlV47QcYwd2v9WTAAAAVU"]
[Sun May 24 11:13:52.527465 2026] [:error] [pid 23497:tid 23523] [client 20.63.100.211:39450] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "ahJs8CPlV47QcYwd2v9WUQAAAVc"]
[Sun May 24 11:13:53.773361 2026] [:error] [pid 49688:tid 49695] [client 20.63.100.211:26649] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "ahJs8WYoQ9V6a_4pBsh11gAAAEQ"]
[Sun May 24 11:13:54.945378 2026] [:error] [pid 23497:tid 23522] [client 20.63.100.211:26716] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ahJs8iPlV47QcYwd2v9WWAAAAVY"]
[Sun May 24 11:13:57.505189 2026] [:error] [pid 23497:tid 23506] [client 20.63.100.211:26693] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ahJs9SPlV47QcYwd2v9WYwAAAUY"]
[Sun May 24 11:13:59.152468 2026] [:error] [pid 49689:tid 49729] [client 20.63.100.211:2665] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ahJs9waxiY3NxLUD97UyLAAAAIs"]
[Sun May 24 11:14:03.107576 2026] [:error] [pid 49744:tid 49756] [client 20.63.100.211:31187] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ahJs-zsE5kPdFpUbbHGDWwAAAMo"]
[Sun May 24 11:14:04.420956 2026] [:error] [pid 49744:tid 49747] [client 20.63.100.211:50790] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/app.php"] [unique_id "ahJs_DsE5kPdFpUbbHGDXwAAAME"]
[Sun May 24 11:14:05.847997 2026] [:error] [pid 23497:tid 23502] [client 20.63.100.211:18054] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/app.php"] [unique_id "ahJs_SPlV47QcYwd2v9WcAAAAUI"]
[Sun May 24 11:14:07.811903 2026] [:error] [pid 23497:tid 23519] [client 20.63.100.211:31177] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/app.php"] [unique_id "ahJs_yPlV47QcYwd2v9WdAAAAVM"]
[Sun May 24 11:14:09.020718 2026] [:error] [pid 2639:tid 2665] [client 20.63.100.211:24759] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/app.php"] [unique_id "ahJtAUzQncQTd0Z0Oe_-EwAAARg"]
[Sun May 24 11:14:09.598775 2026] [:error] [pid 23497:tid 23502] [client 20.63.100.211:31216] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahJtASPlV47QcYwd2v9WewAAAUI"]
[Sun May 24 11:14:10.309339 2026] [:error] [pid 49689:tid 49737] [client 20.63.100.211:24708] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahJtAgaxiY3NxLUD97UyOwAAAJM"]
[Sun May 24 11:14:11.418721 2026] [:error] [pid 49688:tid 49701] [client 20.63.100.211:59187] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahJtA2YoQ9V6a_4pBsh13AAAAEo"]
[Sun May 24 11:14:12.480960 2026] [:error] [pid 49688:tid 49692] [client 20.63.100.211:26732] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahJtBGYoQ9V6a_4pBsh14QAAAEE"]
[Sun May 24 11:14:13.420312 2026] [:error] [pid 49688:tid 49700] [client 20.63.100.211:17966] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wuasr.php"] [unique_id "ahJtBWYoQ9V6a_4pBsh14gAAAEk"]
[Sun May 24 11:14:14.383899 2026] [:error] [pid 49688:tid 49699] [client 20.63.100.211:21632] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wuasr.php"] [unique_id "ahJtBmYoQ9V6a_4pBsh15QAAAEg"]
[Sun May 24 11:14:15.488627 2026] [:error] [pid 49689:tid 49725] [client 20.63.100.211:25140] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wuasr.php"] [unique_id "ahJtBwaxiY3NxLUD97UyQwAAAIc"]
[Sun May 24 11:14:17.174526 2026] [:error] [pid 23497:tid 23511] [client 20.63.100.211:17949] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wuasr.php"] [unique_id "ahJtCSPlV47QcYwd2v9WiwAAAUs"]
[Sun May 24 11:14:18.083706 2026] [:error] [pid 23497:tid 23516] [client 20.63.100.211:18103] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "ahJtCiPlV47QcYwd2v9WjgAAAVA"]
[Sun May 24 11:14:18.917854 2026] [:error] [pid 23497:tid 23519] [client 20.63.100.211:24745] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "ahJtCiPlV47QcYwd2v9WkQAAAVM"]
[Sun May 24 11:14:19.778311 2026] [:error] [pid 49688:tid 49708] [client 20.63.100.211:30529] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "ahJtC2YoQ9V6a_4pBsh15wAAAFE"]
[Sun May 24 11:14:20.621866 2026] [:error] [pid 49688:tid 49706] [client 20.63.100.211:18058] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "ahJtDGYoQ9V6a_4pBsh16QAAAE8"]
[Sun May 24 11:14:21.666502 2026] [:error] [pid 2639:tid 2644] [client 20.63.100.211:21654] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "ahJtDUzQncQTd0Z0Oe_-JwAAAQM"]
[Sun May 24 11:14:24.160858 2026] [:error] [pid 23497:tid 23518] [client 20.63.100.211:20570] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "ahJtECPlV47QcYwd2v9WmgAAAVI"]
[Sun May 24 11:14:25.443367 2026] [:error] [pid 49744:tid 49753] [client 20.63.100.211:17933] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "ahJtETsE5kPdFpUbbHGDbgAAAMc"]
[Sun May 24 11:14:26.318368 2026] [:error] [pid 49775:tid 49793] [client 20.63.100.211:50779] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "ahJtEovZb8G6T8WpI1hBkAAAABA"]
[Sun May 24 11:14:27.518538 2026] [:error] [pid 49775:tid 49790] [client 20.63.100.211:50800] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wefile.php"] [unique_id "ahJtE4vZb8G6T8WpI1hBkQAAAA0"]
[Sun May 24 11:14:28.274016 2026] [:error] [pid 49744:tid 49765] [client 20.63.100.211:57170] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wefile.php"] [unique_id "ahJtFDsE5kPdFpUbbHGDcQAAANM"]
[Sun May 24 11:14:28.887184 2026] [:error] [pid 49689:tid 49724] [client 20.63.100.211:24728] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wefile.php"] [unique_id "ahJtFAaxiY3NxLUD97UyTgAAAIY"]
[Sun May 24 11:14:29.849181 2026] [:error] [pid 49775:tid 49788] [client 20.63.100.211:57208] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wefile.php"] [unique_id "ahJtFYvZb8G6T8WpI1hBmAAAAAs"]
[Sun May 24 11:14:30.522537 2026] [:error] [pid 49689:tid 49726] [client 20.63.100.211:59171] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file30.php"] [unique_id "ahJtFgaxiY3NxLUD97UyUwAAAIg"]
[Sun May 24 11:14:31.353061 2026] [:error] [pid 49689:tid 49738] [client 20.63.100.211:31179] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file30.php"] [unique_id "ahJtFwaxiY3NxLUD97UyVQAAAJQ"]
[Sun May 24 11:14:32.314633 2026] [:error] [pid 49688:tid 49698] [client 20.63.100.211:59136] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file30.php"] [unique_id "ahJtGGYoQ9V6a_4pBsh17QAAAEc"]
[Sun May 24 11:14:32.785638 2026] [:error] [pid 49744:tid 49755] [client 20.63.100.211:52782] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/file30.php"] [unique_id "ahJtGDsE5kPdFpUbbHGDdwAAAMk"]
[Sun May 24 11:14:33.560344 2026] [:error] [pid 49744:tid 49753] [client 20.63.100.211:24746] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php
[Sun May 24 11:14:33.852464 2026] [:error] [pid 49744:tid 49754] [client 20.63.100.211:24746] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun May 24 11:14:34.069720 2026] [:error] [pid 49744:tid 49751] [client 20.63.100.211:24746] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Sun May 24 11:14:34.386458 2026] [:error] [pid 49744:tid 49765] [client 20.63.100.211:24746] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Sun May 24 11:14:34.605356 2026] [:error] [pid 49744:tid 49761] [client 20.63.100.211:24746] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Sun May 24 11:14:34.831782 2026] [:error] [pid 49744:tid 49764] [client 20.63.100.211:24746] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Sun May 24 11:14:35.140125 2026] [:error] [pid 49744:tid 49769] [client 20.63.100.211:24746] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-wz.php
[Sun May 24 11:14:35.357277 2026] [:error] [pid 49744:tid 49746] [client 20.63.100.211:24746] File does not exist: /usr/local/apache/htdocs/suspended-page/crgio.php
[Sun May 24 11:14:35.596847 2026] [:error] [pid 49744:tid 49759] [client 20.63.100.211:24746] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun May 24 11:14:35.829758 2026] [:error] [pid 49744:tid 49750] [client 20.63.100.211:24746] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun May 24 11:14:36.048799 2026] [:error] [pid 49744:tid 49770] [client 20.63.100.211:24746] File does not exist: /usr/local/apache/htdocs/suspended-page/ccou.php
[Sun May 24 11:14:36.266959 2026] [:error] [pid 49744:tid 49753] [client 20.63.100.211:24746] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "ahJtHDsE5kPdFpUbbHGDigAAAMc"]
[Sun May 24 11:14:36.865851 2026] [:error] [pid 23497:tid 23515] [client 20.63.100.211:20567] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "ahJtHCPlV47QcYwd2v9XIgAAAU8"]
[Sun May 24 11:14:37.612048 2026] [:error] [pid 49688:tid 49705] [client 20.63.100.211:24706] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "ahJtHWYoQ9V6a_4pBsh19wAAAE4"]
[Sun May 24 11:14:38.374858 2026] [:error] [pid 2639:tid 2661] [client 20.63.100.211:18081] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "ahJtHkzQncQTd0Z0Oe_-WwAAARQ"]
[Sun May 24 11:14:39.545811 2026] [:error] [pid 2639:tid 2644] [client 20.63.100.211:57181] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ahJtH0zQncQTd0Z0Oe_-XAAAAQM"]
[Sun May 24 11:14:40.468375 2026] [:error] [pid 49689:tid 49735] [client 20.63.100.211:24710] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ahJtIAaxiY3NxLUD97UyagAAAJE"]
[Sun May 24 11:14:42.074544 2026] [:error] [pid 49689:tid 49722] [client 20.63.100.211:2504] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ahJtIgaxiY3NxLUD97UycgAAAIQ"]
[Sun May 24 11:14:45.446055 2026] [:error] [pid 23497:tid 23514] [client 20.63.100.211:2514] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ahJtJSPlV47QcYwd2v9XQAAAAU4"]
[Sun May 24 11:14:46.944781 2026] [:error] [pid 49744:tid 49767] [client 20.63.100.211:18049] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "ahJtJjsE5kPdFpUbbHGDmAAAANU"]
[Sun May 24 11:14:48.257780 2026] [:error] [pid 23497:tid 23505] [client 20.63.100.211:20607] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "ahJtKCPlV47QcYwd2v9XSwAAAUU"]
[Sun May 24 11:14:49.366637 2026] [:error] [pid 23497:tid 23504] [client 20.63.100.211:52798] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "ahJtKSPlV47QcYwd2v9XUgAAAUQ"]
[Sun May 24 11:14:51.872759 2026] [:error] [pid 2639:tid 2658] [client 20.63.100.211:2408] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "ahJtK0zQncQTd0Z0Oe_-YwAAARE"]
[Sun May 24 11:14:53.006650 2026] [:error] [pid 49689:tid 49722] [client 20.63.100.211:2430] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mifta.php"] [unique_id "ahJtLQaxiY3NxLUD97UyeAAAAIQ"]
[Sun May 24 11:14:53.816122 2026] [:error] [pid 23497:tid 23519] [client 20.63.100.211:2534] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mifta.php"] [unique_id "ahJtLSPlV47QcYwd2v9XYgAAAVM"]
[Sun May 24 11:14:54.756311 2026] [:error] [pid 23497:tid 23506] [client 20.63.100.211:22143] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mifta.php"] [unique_id "ahJtLiPlV47QcYwd2v9XcgAAAUY"]
[Sun May 24 11:14:56.038180 2026] [:error] [pid 23497:tid 23513] [client 20.63.100.211:24760] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mifta.php"] [unique_id "ahJtMCPlV47QcYwd2v9XegAAAU0"]
[Sun May 24 11:14:56.817292 2026] [:error] [pid 23497:tid 23519] [client 20.63.100.211:57757] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-firewall.php"] [unique_id "ahJtMCPlV47QcYwd2v9XfAAAAVM"]
[Sun May 24 11:14:57.483450 2026] [:error] [pid 49689:tid 49734] [client 20.63.100.211:57189] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-firewall.php"] [unique_id "ahJtMQaxiY3NxLUD97UyegAAAJA"]
[Sun May 24 11:14:58.356536 2026] [:error] [pid 2639:tid 2653] [client 20.63.100.211:24762] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-firewall.php"] [unique_id "ahJtMkzQncQTd0Z0Oe_-cAAAAQw"]
[Sun May 24 11:14:59.108339 2026] [:error] [pid 23497:tid 23509] [client 20.63.100.211:2499] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-firewall.php"] [unique_id "ahJtMyPlV47QcYwd2v9XgAAAAUk"]
[Sun May 24 11:14:59.791304 2026] [:error] [pid 2639:tid 2664] [client 20.63.100.211:57165] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fun.php"] [unique_id "ahJtM0zQncQTd0Z0Oe_-cwAAARc"]
[Sun May 24 11:15:01.044553 2026] [:error] [pid 23497:tid 23517] [client 20.63.100.211:22132] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fun.php"] [unique_id "ahJtNSPlV47QcYwd2v9XgwAAAVE"]
[Sun May 24 11:15:02.111098 2026] [:error] [pid 49688:tid 49714] [client 20.63.100.211:41464] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fun.php"] [unique_id "ahJtNmYoQ9V6a_4pBsh2BgAAAFc"]
[Sun May 24 11:15:02.805193 2026] [:error] [pid 2639:tid 2643] [client 20.63.100.211:57786] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/fun.php"] [unique_id "ahJtNkzQncQTd0Z0Oe_-egAAAQI"]
[Sun May 24 11:15:03.968195 2026] [:error] [pid 2639:tid 2644] [client 20.63.100.211:40123] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "ahJtN0zQncQTd0Z0Oe_-fQAAAQM"]
[Sun May 24 11:15:06.584034 2026] [:error] [pid 49688:tid 49707] [client 20.63.100.211:22471] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "ahJtOmYoQ9V6a_4pBsh2EgAAAFA"]
[Sun May 24 11:15:07.952714 2026] [:error] [pid 2639:tid 2663] [client 20.63.100.211:41432] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "ahJtO0zQncQTd0Z0Oe_-pgAAARY"]
[Sun May 24 11:15:10.862838 2026] [:error] [pid 23497:tid 23519] [client 20.63.100.211:2395] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "ahJtPiPlV47QcYwd2v9XngAAAVM"]
[Sun May 24 11:15:15.918058 2026] [:error] [pid 49775:tid 49796] [client 20.63.100.211:22514] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sys.php"] [unique_id "ahJtQ4vZb8G6T8WpI1hBtQAAABM"]
[Sun May 24 11:15:18.133424 2026] [:error] [pid 2639:tid 2662] [client 20.63.100.211:18041] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sys.php"] [unique_id "ahJtRkzQncQTd0Z0Oe_-ugAAARU"]
[Sun May 24 11:15:20.501862 2026] [:error] [pid 49689:tid 49728] [client 20.63.100.211:2776] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sys.php"] [unique_id "ahJtSAaxiY3NxLUD97UyogAAAIo"]
[Sun May 24 11:15:22.798732 2026] [:error] [pid 49775:tid 49801] [client 20.63.100.211:27428] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/sys.php"] [unique_id "ahJtSovZb8G6T8WpI1hBxwAAABg"]
[Sun May 24 11:15:24.139956 2026] [:error] [pid 49775:tid 49794] [client 20.63.100.211:17879] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1index.php"] [unique_id "ahJtTIvZb8G6T8WpI1hBzAAAABE"]
[Sun May 24 11:15:24.952581 2026] [:error] [pid 49689:tid 49731] [client 20.63.100.211:38084] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1index.php"] [unique_id "ahJtTAaxiY3NxLUD97UypgAAAI0"]
[Sun May 24 11:15:26.613722 2026] [:error] [pid 23497:tid 23505] [client 20.63.100.211:27404] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1index.php"] [unique_id "ahJtTiPlV47QcYwd2v9XuwAAAUU"]
[Sun May 24 11:15:27.461682 2026] [:error] [pid 2639:tid 2653] [client 20.63.100.211:2806] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/1index.php"] [unique_id "ahJtT0zQncQTd0Z0Oe_-wgAAAQw"]
[Sun May 24 11:15:28.736435 2026] [:error] [pid 49775:tid 49800] [client 20.63.100.211:57741] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shell20211028.php"] [unique_id "ahJtUIvZb8G6T8WpI1hBzgAAABc"]
[Sun May 24 11:15:29.528977 2026] [:error] [pid 23497:tid 23501] [client 20.63.100.211:2978] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shell20211028.php"] [unique_id "ahJtUSPlV47QcYwd2v9XwgAAAUE"]
[Sun May 24 11:15:30.201235 2026] [:error] [pid 49775:tid 49797] [client 20.63.100.211:40809] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shell20211028.php"] [unique_id "ahJtUovZb8G6T8WpI1hB0AAAABQ"]
[Sun May 24 11:15:30.708001 2026] [:error] [pid 49775:tid 49784] [client 20.63.100.211:23993] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/shell20211028.php"] [unique_id "ahJtUovZb8G6T8WpI1hB0wAAAAc"]
[Sun May 24 11:15:31.266813 2026] [:error] [pid 23497:tid 23517] [client 20.63.100.211:2951] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-ver.php"] [unique_id "ahJtUyPlV47QcYwd2v9XxAAAAVE"]
[Sun May 24 11:15:32.775860 2026] [:error] [pid 49744:tid 49766] [client 20.63.100.211:27436] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-ver.php"] [unique_id "ahJtVDsE5kPdFpUbbHGDqgAAANQ"]
[Sun May 24 11:15:35.789558 2026] [:error] [pid 49688:tid 49708] [client 20.63.100.211:2481] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-ver.php"] [unique_id "ahJtV2YoQ9V6a_4pBsh2OAAAAFE"]
[Sun May 24 11:15:38.306076 2026] [:error] [pid 23497:tid 23511] [client 20.63.100.211:18046] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ver.php
[Sun May 24 11:15:38.528281 2026] [:error] [pid 23497:tid 23513] [client 20.63.100.211:18046] File does not exist: /usr/local/apache/htdocs/suspended-page/lala.php
[Sun May 24 11:15:38.740854 2026] [:error] [pid 23497:tid 23522] [client 20.63.100.211:18046] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Sun May 24 11:15:38.961020 2026] [:error] [pid 23497:tid 23523] [client 20.63.100.211:18046] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sing.php
[Sun May 24 11:15:39.178724 2026] [:error] [pid 23497:tid 23509] [client 20.63.100.211:18046] File does not exist: /usr/local/apache/htdocs/suspended-page/file59.php
[Sun May 24 11:15:39.391524 2026] [:error] [pid 23497:tid 23516] [client 20.63.100.211:18046] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-slss.php
[Sun May 24 11:15:39.603735 2026] [:error] [pid 23497:tid 23515] [client 20.63.100.211:18046] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sun May 24 11:15:39.848859 2026] [:error] [pid 23497:tid 23506] [client 20.63.100.211:18046] File does not exist: /usr/local/apache/htdocs/suspended-page/atkno.php
[Sun May 24 11:15:40.075334 2026] [:error] [pid 23497:tid 23507] [client 20.63.100.211:18046] File does not exist: /usr/local/apache/htdocs/suspended-page/ff.php
[Sun May 24 11:15:40.315133 2026] [:error] [pid 23497:tid 23518] [client 20.63.100.211:18046] File does not exist: /usr/local/apache/htdocs/suspended-page/yas.php
[Sun May 24 11:15:40.536865 2026] [:error] [pid 23497:tid 23504] [client 20.63.100.211:18046] File does not exist: /usr/local/apache/htdocs/suspended-page/png.php
[Sun May 24 11:15:40.763274 2026] [:error] [pid 23497:tid 23512] [client 20.63.100.211:18046] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "ahJtXCPlV47QcYwd2v9X3AAAAUw"]
[Sun May 24 11:15:45.888710 2026] [:error] [pid 2639:tid 2653] [client 20.63.100.211:11317] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "ahJtYUzQncQTd0Z0Oe_-1QAAAQw"]
[Sun May 24 11:15:47.813391 2026] [:error] [pid 2639:tid 2649] [client 20.63.100.211:2447] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "ahJtY0zQncQTd0Z0Oe_-1wAAAQg"]
[Sun May 24 11:15:48.827757 2026] [:error] [pid 49688:tid 49701] [client 20.63.100.211:20603] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "ahJtZGYoQ9V6a_4pBsh2RQAAAEo"]
[Sun May 24 11:15:49.943205 2026] [:error] [pid 2639:tid 2644] [client 20.63.100.211:40786] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "ahJtZUzQncQTd0Z0Oe_-2wAAAQM"]
[Sun May 24 11:15:50.818081 2026] [:error] [pid 49689:tid 49740] [client 20.63.100.211:57761] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "ahJtZgaxiY3NxLUD97UyxQAAAJY"]
[Sun May 24 11:15:51.730114 2026] [:error] [pid 49688:tid 49705] [client 20.63.100.211:18006] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "ahJtZ2YoQ9V6a_4pBsh2SgAAAE4"]
[Sun May 24 11:15:52.711754 2026] [:error] [pid 2639:tid 2660] [client 20.63.100.211:11313] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "ahJtaEzQncQTd0Z0Oe_-5AAAARM"]
[Sun May 24 11:15:53.813443 2026] [:error] [pid 23497:tid 23506] [client 20.63.100.211:40769] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/forbidals.php"] [unique_id "ahJtaSPlV47QcYwd2v9X8wAAAUY"]
[Sun May 24 11:15:54.980278 2026] [:error] [pid 49744:tid 49746] [client 20.63.100.211:24340] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/forbidals.php"] [unique_id "ahJtajsE5kPdFpUbbHGDuwAAAMA"]
[Sun May 24 11:15:55.964515 2026] [:error] [pid 2639:tid 2645] [client 20.63.100.211:23937] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/forbidals.php"] [unique_id "ahJta0zQncQTd0Z0Oe_-8AAAAQQ"]
[Sun May 24 11:15:57.637142 2026] [:error] [pid 49688:tid 49692] [client 20.63.100.211:58407] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/forbidals.php"] [unique_id "ahJtbWYoQ9V6a_4pBsh2TQAAAEE"]
[Sun May 24 11:15:58.894477 2026] [:error] [pid 49744:tid 49746] [client 20.63.100.211:23967] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ahJtbjsE5kPdFpUbbHGDyQAAAMA"]
[Sun May 24 11:16:00.327559 2026] [:error] [pid 23497:tid 23500] [client 20.63.100.211:24373] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ahJtcCPlV47QcYwd2v9YBAAAAUA"]
[Sun May 24 11:16:01.361599 2026] [:error] [pid 49775:tid 49795] [client 20.63.100.211:11315] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ahJtcYvZb8G6T8WpI1hB7AAAABI"]
[Sun May 24 11:16:02.408119 2026] [:error] [pid 23497:tid 23512] [client 20.63.100.211:28596] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "ahJtciPlV47QcYwd2v9YEAAAAUw"]
[Sun May 24 11:16:03.942863 2026] [:error] [pid 23497:tid 23503] [client 20.63.100.211:64053] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/explorer/index_.php"] [unique_id "ahJtcyPlV47QcYwd2v9YGQAAAUM"]
[Sun May 24 11:16:04.426814 2026] [:error] [pid 49775:tid 49796] [client 20.63.100.211:64034] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/explorer/index_.php"] [unique_id "ahJtdIvZb8G6T8WpI1hB7wAAABM"]
[Sun May 24 11:16:05.081223 2026] [:error] [pid 23497:tid 23511] [client 20.63.100.211:38089] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/explorer/index_.php"] [unique_id "ahJtdSPlV47QcYwd2v9YIAAAAUs"]
[Sun May 24 11:16:06.057981 2026] [:error] [pid 49744:tid 49759] [client 20.63.100.211:29877] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/explorer/index_.php"] [unique_id "ahJtdjsE5kPdFpUbbHGD0AAAAM0"]
[Sun May 24 11:16:06.907007 2026] [:error] [pid 23497:tid 23505] [client 20.63.100.211:27401] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "ahJtdiPlV47QcYwd2v9YJAAAAUU"]
[Sun May 24 11:16:07.761671 2026] [:error] [pid 49744:tid 49757] [client 20.63.100.211:24339] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "ahJtdzsE5kPdFpUbbHGD1AAAAMs"]
[Sun May 24 11:16:08.768539 2026] [:error] [pid 49775:tid 49791] [client 20.63.100.211:28572] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "ahJteIvZb8G6T8WpI1hB9wAAAA4"]
[Sun May 24 11:16:09.508678 2026] [:error] [pid 49688:tid 49711] [client 20.63.100.211:11288] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "ahJteWYoQ9V6a_4pBsh2VAAAAFQ"]
[Sun May 24 11:16:10.249985 2026] [:error] [pid 49688:tid 49702] [client 20.63.100.211:64037] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "ahJtemYoQ9V6a_4pBsh2VwAAAEs"]
[Sun May 24 11:16:11.099764 2026] [:error] [pid 49775:tid 49794] [client 20.63.100.211:64016] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "ahJte4vZb8G6T8WpI1hB-gAAABE"]
[Sun May 24 11:16:11.783050 2026] [:error] [pid 49775:tid 49792] [client 20.63.100.211:64009] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "ahJte4vZb8G6T8WpI1hB_QAAAA8"]
[Sun May 24 11:16:12.231978 2026] [:error] [pid 49744:tid 49758] [client 20.63.100.211:18004] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "ahJtfDsE5kPdFpUbbHGD1QAAAMw"]
[Sun May 24 11:16:12.759204 2026] [:error] [pid 49744:tid 49761] [client 20.63.100.211:28574] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-at.php"] [unique_id "ahJtfDsE5kPdFpUbbHGD2AAAAM8"]
[Sun May 24 11:16:13.494764 2026] [:error] [pid 49688:tid 49694] [client 20.63.100.211:18027] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-at.php"] [unique_id "ahJtfWYoQ9V6a_4pBsh2WwAAAEM"]
[Sun May 24 11:16:14.312549 2026] [:error] [pid 49744:tid 49763] [client 20.63.100.211:24335] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-at.php"] [unique_id "ahJtfjsE5kPdFpUbbHGD2wAAANE"]
[Sun May 24 11:16:14.907940 2026] [:error] [pid 49744:tid 49755] [client 20.63.100.211:59800] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-at.php"] [unique_id "ahJtfjsE5kPdFpUbbHGD3QAAAMk"]
[Sun May 24 11:16:15.519743 2026] [:error] [pid 49744:tid 49759] [client 20.63.100.211:24377] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahJtfzsE5kPdFpUbbHGD3wAAAM0"]
[Sun May 24 11:16:16.677377 2026] [:error] [pid 49744:tid 49750] [client 20.63.100.211:24351] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahJtgDsE5kPdFpUbbHGD4gAAAMQ"]
[Sun May 24 11:16:17.336355 2026] [:error] [pid 49688:tid 49695] [client 20.63.100.211:2493] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahJtgWYoQ9V6a_4pBsh2ZAAAAEQ"]
[Sun May 24 11:16:17.788025 2026] [:error] [pid 49744:tid 49753] [client 20.63.100.211:64020] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahJtgTsE5kPdFpUbbHGD5QAAAMc"]
[Sun May 24 11:16:18.575136 2026] [:error] [pid 49744:tid 49751] [client 20.63.100.211:59826] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "ahJtgjsE5kPdFpUbbHGD6AAAAMU"]
[Sun May 24 11:16:19.210330 2026] [:error] [pid 2639:tid 2654] [client 20.63.100.211:58396] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "ahJtg0zQncQTd0Z0Oe__CQAAAQ0"]
[Sun May 24 11:16:20.042726 2026] [:error] [pid 2639:tid 2664] [client 20.63.100.211:24345] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "ahJthEzQncQTd0Z0Oe__DAAAARc"]
[Sun May 24 11:16:20.883456 2026] [:error] [pid 2639:tid 2663] [client 20.63.100.211:26272] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "ahJthEzQncQTd0Z0Oe__DwAAARY"]
[Sun May 24 11:16:21.935919 2026] [:error] [pid 23497:tid 23522] [client 20.63.100.211:2171] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ff1.php"] [unique_id "ahJthSPlV47QcYwd2v9YMgAAAVY"]
[Sun May 24 11:16:22.614110 2026] [:error] [pid 49744:tid 49770] [client 20.63.100.211:19459] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ff1.php"] [unique_id "ahJthjsE5kPdFpUbbHGD7gAAANg"]
[Sun May 24 11:16:23.326412 2026] [:error] [pid 23497:tid 23510] [client 20.63.100.211:51561] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ff1.php"] [unique_id "ahJthyPlV47QcYwd2v9YNgAAAUo"]
[Sun May 24 11:16:24.014448 2026] [:error] [pid 49744:tid 49758] [client 20.63.100.211:51546] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/ff1.php"] [unique_id "ahJtiDsE5kPdFpUbbHGD8gAAAMw"]
[Sun May 24 11:16:24.663477 2026] [:error] [pid 49744:tid 49750] [client 20.63.100.211:58429] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "ahJtiDsE5kPdFpUbbHGD9gAAAMQ"]
[Sun May 24 11:16:25.322127 2026] [:error] [pid 49688:tid 49704] [client 20.63.100.211:64040] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "ahJtiWYoQ9V6a_4pBsh2cgAAAE0"]
[Sun May 24 11:16:26.548627 2026] [:error] [pid 23497:tid 23503] [client 20.63.100.211:64023] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "ahJtiiPlV47QcYwd2v9YOAAAAUM"]
[Sun May 24 11:16:27.213518 2026] [:error] [pid 49775:tid 49787] [client 20.63.100.211:27445] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "ahJti4vZb8G6T8WpI1hB_wAAAAo"]
[Sun May 24 11:16:28.242621 2026] [:error] [pid 2639:tid 2658] [client 20.63.100.211:29826] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Okxob.php"] [unique_id "ahJtjEzQncQTd0Z0Oe__EwAAARE"]
[Sun May 24 11:16:29.364554 2026] [:error] [pid 2639:tid 2647] [client 20.63.100.211:27128] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Okxob.php"] [unique_id "ahJtjUzQncQTd0Z0Oe__FgAAAQY"]
[Sun May 24 11:16:30.255324 2026] [:error] [pid 23497:tid 23517] [client 20.63.100.211:36935] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Okxob.php"] [unique_id "ahJtjiPlV47QcYwd2v9YPgAAAVE"]
[Sun May 24 11:16:31.131058 2026] [:error] [pid 23497:tid 23512] [client 20.63.100.211:24348] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/Okxob.php"] [unique_id "ahJtjyPlV47QcYwd2v9YQAAAAUw"]
[Sun May 24 11:16:31.660826 2026] [:error] [pid 49775:tid 49796] [client 20.63.100.211:19460] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/pass4.php"] [unique_id "ahJtj4vZb8G6T8WpI1hCAwAAABM"]
[Sun May 24 11:16:32.287940 2026] [:error] [pid 49775:tid 49792] [client 20.63.100.211:19489] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/pass4.php"] [unique_id "ahJtkIvZb8G6T8WpI1hCBAAAAA8"]
[Sun May 24 11:16:33.235209 2026] [:error] [pid 23497:tid 23505] [client 20.63.100.211:27093] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/pass4.php"] [unique_id "ahJtkSPlV47QcYwd2v9YRAAAAUU"]
[Sun May 24 11:16:33.839873 2026] [:error] [pid 49688:tid 49713] [client 20.63.100.211:59827] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/pass4.php"] [unique_id "ahJtkWYoQ9V6a_4pBsh2fwAAAFY"]
[Sun May 24 11:16:34.423679 2026] [:error] [pid 49688:tid 49704] [client 20.63.100.211:26278] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-su.php"] [unique_id "ahJtkmYoQ9V6a_4pBsh2gQAAAE0"]
[Sun May 24 11:16:35.075266 2026] [:error] [pid 23497:tid 23502] [client 20.63.100.211:26309] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-su.php"] [unique_id "ahJtkyPlV47QcYwd2v9YSwAAAUI"]
[Sun May 24 11:16:35.945572 2026] [:error] [pid 23497:tid 23522] [client 20.63.100.211:59799] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-su.php"] [unique_id "ahJtkyPlV47QcYwd2v9YUwAAAVY"]
[Sun May 24 11:16:36.701446 2026] [:error] [pid 49775:tid 49797] [client 20.63.100.211:59776] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/wp-su.php"] [unique_id "ahJtlIvZb8G6T8WpI1hCJAAAABQ"]
[Sun May 24 11:16:37.375491 2026] [:error] [pid 49744:tid 49769] [client 20.63.100.211:29839] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/like.php"] [unique_id "ahJtlTsE5kPdFpUbbHGEHQAAANc"]
[Sun May 24 11:16:38.003075 2026] [:error] [pid 49688:tid 49692] [client 20.63.100.211:25871] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/like.php"] [unique_id "ahJtlmYoQ9V6a_4pBsh2iQAAAEE"]
[Sun May 24 11:16:38.894045 2026] [:error] [pid 49688:tid 49708] [client 20.63.100.211:20361] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/like.php"] [unique_id "ahJtlmYoQ9V6a_4pBsh2jAAAAFE"]
[Sun May 24 11:16:39.479016 2026] [:error] [pid 49688:tid 49693] [client 20.63.100.211:36972] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/like.php"] [unique_id "ahJtl2YoQ9V6a_4pBsh2jwAAAEI"]
[Sun May 24 11:16:39.940043 2026] [:error] [pid 49744:tid 49746] [client 20.63.100.211:18463] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/mass.php"] [unique_id "ahJtlzsE5kPdFpUbbHGEIQAAAMA"]
[Sun May 24 11:16:40.501599 2026] [:error] [pid 49689:tid 49725] [client 20.63.100.211:26350] File does not exist: /usr/local/apache/htdocs/suspended-page/mass.php
[Sun May 24 11:16:40.722710 2026] [:error] [pid 49689:tid 49723] [client 20.63.100.211:26350] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Sun May 24 11:16:40.935484 2026] [:error] [pid 49689:tid 49741] [client 20.63.100.211:26350] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Sun May 24 11:16:41.166229 2026] [:error] [pid 49689:tid 49734] [client 20.63.100.211:26350] File does not exist: /usr/local/apache/htdocs/suspended-page/la.php
[Sun May 24 11:16:41.404614 2026] [:error] [pid 49689:tid 49731] [client 20.63.100.211:26350] File does not exist: /usr/local/apache/htdocs/suspended-page/reze.php
[Sun May 24 11:16:41.619640 2026] [:error] [pid 49689:tid 49722] [client 20.63.100.211:26350] File does not exist: /usr/local/apache/htdocs/suspended-page/database.php
[Sun May 24 11:16:41.855608 2026] [:error] [pid 49689:tid 49719] [client 20.63.100.211:26350] File does not exist: /usr/local/apache/htdocs/suspended-page/favicon.php
[Sun May 24 11:35:28.030576 2026] [:error] [pid 49744:tid 49769] [client 88.151.33.24:41330] [client 88.151.33.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ahJyADsE5kPdFpUbbHGJcwAAANc"]
[Sun May 24 11:35:28.030866 2026] [:error] [pid 49775:tid 49789] [client 88.151.33.24:41354] [client 88.151.33.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/HEAD"] [unique_id "ahJyAIvZb8G6T8WpI1hHlwAAAAw"]
[Sun May 24 12:57:45.101829 2026] [:error] [pid 49775:tid 49777] [client 206.189.91.190:50766] [client 206.189.91.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ahKFSYvZb8G6T8WpI1hbsAAAAAA"]
[Sun May 24 17:59:07.110996 2026] [:error] [pid 49689:tid 49730] [client 34.26.204.147:56051] [client 34.26.204.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.204.147, incrementing ddos counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "ahLL6waxiY3NxLUD97Vy4gAAAIw"]
[Sun May 24 17:59:07.114473 2026] [:error] [pid 49689:tid 49730] [client 34.26.204.147:56051] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun May 24 17:59:09.322517 2026] [:error] [pid 49689:tid 49722] [client 34.26.204.147:56051] [client 34.26.204.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ahLL7QaxiY3NxLUD97Vy6wAAAIQ"]
[Sun May 24 17:59:09.934210 2026] [:error] [pid 4777:tid 4792] [client 34.26.204.147:61861] [client 34.26.204.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ahLL7ftPctoQOm4w5pNuxwAAAco"]
[Sun May 24 17:59:10.731180 2026] [:error] [pid 41708:tid 41715] [client 34.26.204.147:61882] [client 34.26.204.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ahLL7v4tQzoTxpuHBF7GBgAAAYU"]
[Sun May 24 17:59:11.342814 2026] [:error] [pid 41708:tid 41724] [client 34.26.204.147:57514] [client 34.26.204.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ahLL7_4tQzoTxpuHBF7GCQAAAY4"]
[Sun May 24 22:56:42.447752 2026] [:error] [pid 11281:tid 11316] [client 35.237.129.148:56918] [client 35.237.129.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "ahMRqpKmC9taWvA91j6WegAAAIM"]
[Sun May 24 22:56:43.090204 2026] [:error] [pid 15835:tid 15861] [client 35.237.129.148:49645] [client 35.237.129.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahMRq2WbknYlUM9P0qP94gAAABg"]
[Sun May 24 22:56:43.582778 2026] [:error] [pid 11368:tid 11375] [client 35.237.129.148:57524] [client 35.237.129.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/feed/"] [unique_id "ahMRq4fq_sTmmtTKm1VJVgAAAQU"]
[Mon May 25 06:24:36.353280 2026] [:error] [pid 21606:tid 21617] [client 170.64.221.168:49786] [client 170.64.221.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ahN6pGswdp0RYkH5t9XAngAAAUk"]
[Mon May 25 06:24:36.470561 2026] [:error] [pid 9304:tid 9378] [client 170.64.221.168:37792] [client 170.64.221.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ahN6pOVEV2qpMC_1UzR_EAAAAJE"]
[Mon May 25 06:24:36.645522 2026] [:error] [pid 9303:tid 9339] [client 170.64.221.168:50130] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "ahN6pH3bQScbssitjPQ3sAAAAEU"]
[Mon May 25 06:24:36.689276 2026] [:error] [pid 9304:tid 9364] [client 170.64.221.168:50154] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "ahN6pOVEV2qpMC_1UzR_FgAAAIM"]
[Mon May 25 06:24:36.863363 2026] [:error] [pid 9303:tid 9353] [client 170.64.221.168:37860] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "ahN6pH3bQScbssitjPQ3tgAAAFM"]
[Mon May 25 06:24:36.891606 2026] [:error] [pid 9304:tid 9375] [client 170.64.221.168:37872] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/"] [unique_id "ahN6pOVEV2qpMC_1UzR_GwAAAI4"]
[Mon May 25 06:24:37.024005 2026] [:error] [pid 9303:tid 9352] [client 170.64.221.168:50804] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vendor/laravel-filemanager/js/script.js"] [unique_id "ahN6pX3bQScbssitjPQ3zAAAAFI"]
[Mon May 25 06:24:37.030207 2026] [:error] [pid 9303:tid 9347] [client 170.64.221.168:50774] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugins/jquery.filer/php/readme.txt"] [unique_id "ahN6pX3bQScbssitjPQ30AAAAE0"]
[Mon May 25 06:24:37.032540 2026] [:error] [pid 9303:tid 9350] [client 170.64.221.168:50840] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahN6pX3bQScbssitjPQ30QAAAFA"]
[Mon May 25 06:24:37.040365 2026] [:error] [pid 9303:tid 9337] [client 170.64.221.168:50884] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/static/lib/jquery-file-upload/server/php/"] [unique_id "ahN6pX3bQScbssitjPQ31QAAAEM"]
[Mon May 25 06:24:37.043006 2026] [:error] [pid 9303:tid 9340] [client 170.64.221.168:50872] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jquery.filer/php/readme.txt"] [unique_id "ahN6pX3bQScbssitjPQ31wAAAEY"]
[Mon May 25 06:24:37.052178 2026] [:error] [pid 9303:tid 9345] [client 170.64.221.168:50946] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/vendor/jquery.filer/php/readme.txt"] [unique_id "ahN6pX3bQScbssitjPQ32wAAAEs"]
[Mon May 25 06:24:37.070826 2026] [:error] [pid 9303:tid 9341] [client 170.64.221.168:50948] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/admin/bower_components/jquery.filer/php/readme.txt"] [unique_id "ahN6pX3bQScbssitjPQ33QAAAEc"]
[Mon May 25 06:24:37.093707 2026] [:error] [pid 9303:tid 9335] [client 170.64.221.168:51000] [client 170.64.221.168] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||windfcau.windfarmcoolants.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ahN6pX3bQScbssitjPQ34AAAAEE"]
[Mon May 25 06:24:37.094020 2026] [:error] [pid 9303:tid 9335] [client 170.64.221.168:51000] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ahN6pX3bQScbssitjPQ34AAAAEE"]
[Mon May 25 06:24:37.097270 2026] [:error] [pid 9303:tid 9346] [client 170.64.221.168:51036] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "ahN6pX3bQScbssitjPQ34wAAAEw"]
[Mon May 25 06:24:37.110663 2026] [:error] [pid 9304:tid 9371] [client 170.64.221.168:51072] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/jquery.filer/php/readme.txt"] [unique_id "ahN6peVEV2qpMC_1UzR_JwAAAIo"]
[Mon May 25 06:24:37.111913 2026] [:error] [pid 9303:tid 9354] [client 170.64.221.168:51086] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file-manager/initialize"] [unique_id "ahN6pX3bQScbssitjPQ35gAAAFQ"]
[Mon May 25 06:24:37.134099 2026] [:error] [pid 9304:tid 9372] [client 170.64.221.168:51146] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vendor/laravel-filemanager/js/script.js"] [unique_id "ahN6peVEV2qpMC_1UzR_KQAAAIs"]
[Mon May 25 06:24:37.137806 2026] [:error] [pid 50423:tid 50438] [client 170.64.221.168:51168] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "ahN6paJWO7En4nKEQ3gvvgAAAQ0"]
[Mon May 25 06:24:37.139565 2026] [:error] [pid 50423:tid 50433] [client 170.64.221.168:51204] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugins/jquery.filer/php/readme.txt"] [unique_id "ahN6paJWO7En4nKEQ3gvvwAAAQg"]
[Mon May 25 06:24:37.142844 2026] [:error] [pid 50423:tid 50446] [client 170.64.221.168:51210] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahN6paJWO7En4nKEQ3gvwAAAARU"]
[Mon May 25 06:24:37.152185 2026] [:error] [pid 9303:tid 9337] [client 170.64.221.168:51254] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/static/lib/jquery-file-upload/server/php/"] [unique_id "ahN6pX3bQScbssitjPQ37QAAAEM"]
[Mon May 25 06:24:37.155143 2026] [:error] [pid 9303:tid 9336] [client 170.64.221.168:51278] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jquery.filer/php/readme.txt"] [unique_id "ahN6pX3bQScbssitjPQ37gAAAEI"]
[Mon May 25 06:24:37.163631 2026] [:error] [pid 21606:tid 21628] [client 170.64.221.168:51320] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/vendor/jquery.filer/php/readme.txt"] [unique_id "ahN6pWswdp0RYkH5t9XArAAAAVQ"]
[Mon May 25 06:24:37.205928 2026] [:error] [pid 50423:tid 50441] [client 170.64.221.168:51340] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/admin/bower_components/jquery.filer/php/readme.txt"] [unique_id "ahN6paJWO7En4nKEQ3gvxwAAARA"]
[Mon May 25 06:24:37.227747 2026] [:error] [pid 9398:tid 9414] [client 170.64.221.168:51566] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/vendor/laravel-filemanager/js/script.js"] [unique_id "ahN6pehIu7KstzsCua-pZwAAAMo"]
[Mon May 25 06:24:37.232706 2026] [:error] [pid 9302:tid 9316] [client 170.64.221.168:51472] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file-manager/initialize"] [unique_id "ahN6pS1RaFfTSnDQnqFRcwAAAAk"]
[Mon May 25 06:24:37.234738 2026] [:error] [pid 21606:tid 21610] [client 170.64.221.168:51444] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/jquery.filer/php/readme.txt"] [unique_id "ahN6pWswdp0RYkH5t9XAtwAAAUI"]
[Mon May 25 06:24:37.238011 2026] [:error] [pid 9303:tid 9339] [client 170.64.221.168:51586] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugins/jquery.filer/php/readme.txt"] [unique_id "ahN6pX3bQScbssitjPQ39AAAAEU"]
[Mon May 25 06:24:37.247074 2026] [:error] [pid 21606:tid 21619] [client 170.64.221.168:51644] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jquery.filer/php/readme.txt"] [unique_id "ahN6pWswdp0RYkH5t9XAuAAAAUs"]
[Mon May 25 06:24:37.257633 2026] [:error] [pid 9302:tid 9310] [client 170.64.221.168:51638] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/static/lib/jquery-file-upload/server/php/"] [unique_id "ahN6pS1RaFfTSnDQnqFRdQAAAAM"]
[Mon May 25 06:24:37.259653 2026] [:error] [pid 50423:tid 50439] [client 170.64.221.168:51624] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahN6paJWO7En4nKEQ3gvyAAAAQ4"]
[Mon May 25 06:24:37.260688 2026] [:error] [pid 50423:tid 50436] [client 170.64.221.168:51612] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahN6paJWO7En4nKEQ3gvyQAAAQs"]
[Mon May 25 06:24:37.267759 2026] [:error] [pid 50423:tid 50448] [client 170.64.221.168:51648] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/vendor/jquery.filer/php/readme.txt"] [unique_id "ahN6paJWO7En4nKEQ3gvzAAAARc"]
[Mon May 25 06:24:37.299470 2026] [:error] [pid 50423:tid 50438] [client 170.64.221.168:51722] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahN6paJWO7En4nKEQ3gv1QAAAQ0"]
[Mon May 25 06:24:37.299972 2026] [:error] [pid 50423:tid 50433] [client 170.64.221.168:51748] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/admin/bower_components/jquery.filer/php/readme.txt"] [unique_id "ahN6paJWO7En4nKEQ3gv1gAAAQg"]
[Mon May 25 06:24:37.324658 2026] [:error] [pid 50423:tid 50436] [client 170.64.221.168:51858] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/file-manager/initialize"] [unique_id "ahN6paJWO7En4nKEQ3gv4AAAAQs"]
[Mon May 25 06:24:37.328426 2026] [:error] [pid 50423:tid 50428] [client 170.64.221.168:51876] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/jquery.filer/php/readme.txt"] [unique_id "ahN6paJWO7En4nKEQ3gv4gAAAQM"]
[Mon May 25 06:24:37.339871 2026] [:error] [pid 50423:tid 50445] [client 170.64.221.168:51906] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahN6paJWO7En4nKEQ3gv5QAAARQ"]
[Mon May 25 06:24:37.350513 2026] [:error] [pid 50423:tid 50443] [client 170.64.221.168:51926] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahN6paJWO7En4nKEQ3gv5wAAARI"]
[Mon May 25 06:24:37.386661 2026] [:error] [pid 9398:tid 9420] [client 170.64.221.168:52002] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahN6pehIu7KstzsCua-paQAAANA"]
[Mon May 25 06:24:37.427130 2026] [:error] [pid 50423:tid 50442] [client 170.64.221.168:52162] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahN6paJWO7En4nKEQ3gv8wAAARE"]
[Mon May 25 06:24:37.431531 2026] [:error] [pid 9304:tid 9380] [client 170.64.221.168:52182] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_MwAAAJM"]
[Mon May 25 06:24:37.439472 2026] [:error] [pid 9304:tid 9381] [client 170.64.221.168:52194] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_NQAAAJQ"]
[Mon May 25 06:24:37.441516 2026] [:error] [pid 9304:tid 9370] [client 170.64.221.168:52202] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_NgAAAIk"]
[Mon May 25 06:24:37.452484 2026] [:error] [pid 9398:tid 9416] [client 170.64.221.168:52270] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahN6pehIu7KstzsCua-pawAAAMw"]
[Mon May 25 06:24:37.456952 2026] [:error] [pid 9304:tid 9376] [client 170.64.221.168:52276] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_OwAAAI8"]
[Mon May 25 06:24:37.466531 2026] [:error] [pid 9304:tid 9373] [client 170.64.221.168:52298] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_PgAAAIw"]
[Mon May 25 06:24:37.469343 2026] [:error] [pid 9304:tid 9371] [client 170.64.221.168:52302] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_PwAAAIo"]
[Mon May 25 06:24:37.475283 2026] [:error] [pid 9304:tid 9372] [client 170.64.221.168:52328] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_QQAAAIs"]
[Mon May 25 06:24:37.476872 2026] [:error] [pid 9304:tid 9363] [client 170.64.221.168:52316] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_QgAAAII"]
[Mon May 25 06:24:37.505142 2026] [:error] [pid 9304:tid 9382] [client 170.64.221.168:52430] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_SgAAAJU"]
[Mon May 25 06:24:37.517571 2026] [:error] [pid 9304:tid 9370] [client 170.64.221.168:52468] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_TwAAAIk"]
[Mon May 25 06:24:37.522109 2026] [:error] [pid 9304:tid 9368] [client 170.64.221.168:52494] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_UQAAAIc"]
[Mon May 25 06:24:37.524383 2026] [:error] [pid 9304:tid 9361] [client 170.64.221.168:52500] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_UgAAAIA"]
[Mon May 25 06:24:37.531516 2026] [:error] [pid 50423:tid 50441] [client 170.64.221.168:52526] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahN6paJWO7En4nKEQ3gv9QAAARA"]
[Mon May 25 06:24:37.542100 2026] [:error] [pid 9304:tid 9373] [client 170.64.221.168:52566] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_VgAAAIw"]
[Mon May 25 06:24:37.545214 2026] [:error] [pid 9304:tid 9371] [client 170.64.221.168:52572] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_VwAAAIo"]
[Mon May 25 06:24:37.555855 2026] [:error] [pid 9304:tid 9363] [client 170.64.221.168:52594] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_WwAAAII"]
[Mon May 25 06:24:37.557830 2026] [:error] [pid 9304:tid 9374] [client 170.64.221.168:52600] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_XAAAAI0"]
[Mon May 25 06:24:37.562907 2026] [:error] [pid 9304:tid 9385] [client 170.64.221.168:52616] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_XgAAAJg"]
[Mon May 25 06:24:37.586105 2026] [:error] [pid 9304:tid 9365] [client 170.64.221.168:52644] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_ZAAAAIQ"]
[Mon May 25 06:24:37.586950 2026] [:error] [pid 9304:tid 9380] [client 170.64.221.168:52648] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_ZQAAAJM"]
[Mon May 25 06:24:37.596736 2026] [:error] [pid 9304:tid 9383] [client 170.64.221.168:52686] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_aQAAAJY"]
[Mon May 25 06:24:37.598335 2026] [:error] [pid 9304:tid 9368] [client 170.64.221.168:52702] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_agAAAIc"]
[Mon May 25 06:24:37.605512 2026] [:error] [pid 9304:tid 9384] [client 170.64.221.168:52724] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_bQAAAJc"]
[Mon May 25 06:24:37.608054 2026] [:error] [pid 9304:tid 9377] [client 170.64.221.168:52728] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_bgAAAJA"]
[Mon May 25 06:24:37.615089 2026] [:error] [pid 9304:tid 9378] [client 170.64.221.168:52780] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_cQAAAJE"]
[Mon May 25 06:24:37.617028 2026] [:error] [pid 9304:tid 9376] [client 170.64.221.168:52788] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_cwAAAI8"]
[Mon May 25 06:24:37.628907 2026] [:error] [pid 9304:tid 9362] [client 170.64.221.168:52842] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_eAAAAIE"]
[Mon May 25 06:24:37.629968 2026] [:error] [pid 9304:tid 9379] [client 170.64.221.168:52844] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_eQAAAJI"]
[Mon May 25 06:24:37.635591 2026] [:error] [pid 9304:tid 9369] [client 170.64.221.168:52858] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_ewAAAIg"]
[Mon May 25 06:24:37.653882 2026] [:error] [pid 9304:tid 9365] [client 170.64.221.168:52894] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_fQAAAIQ"]
[Mon May 25 06:24:37.655834 2026] [:error] [pid 9304:tid 9366] [client 170.64.221.168:52910] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_fwAAAIU"]
[Mon May 25 06:24:37.661879 2026] [:error] [pid 9304:tid 9383] [client 170.64.221.168:52950] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_ggAAAJY"]
[Mon May 25 06:24:37.668113 2026] [:error] [pid 9304:tid 9367] [client 170.64.221.168:52968] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_hgAAAIY"]
[Mon May 25 06:24:37.706684 2026] [:error] [pid 9303:tid 9351] [client 170.64.221.168:53032] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/server/php/"] [unique_id "ahN6pX3bQScbssitjPQ3-QAAAFE"]
[Mon May 25 06:24:37.712595 2026] [:error] [pid 9302:tid 9321] [client 170.64.221.168:53086] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahN6pS1RaFfTSnDQnqFRfQAAAA4"]
[Mon May 25 06:24:37.718842 2026] [:error] [pid 50423:tid 50436] [client 170.64.221.168:53118] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahN6paJWO7En4nKEQ3gv9gAAAQs"]
[Mon May 25 06:24:37.721783 2026] [:error] [pid 50423:tid 50448] [client 170.64.221.168:53136] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahN6paJWO7En4nKEQ3gv-QAAARc"]
[Mon May 25 06:24:37.726118 2026] [:error] [pid 50423:tid 50445] [client 170.64.221.168:53158] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahN6paJWO7En4nKEQ3gv-gAAARQ"]
[Mon May 25 06:24:37.750528 2026] [:error] [pid 50423:tid 50438] [client 170.64.221.168:53220] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahN6paJWO7En4nKEQ3gwAAAAAQ0"]
[Mon May 25 06:24:37.768962 2026] [:error] [pid 50423:tid 50433] [client 170.64.221.168:53254] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahN6paJWO7En4nKEQ3gwAgAAAQg"]
[Mon May 25 06:24:37.773131 2026] [:error] [pid 9304:tid 9364] [client 170.64.221.168:53302] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_kgAAAIM"]
[Mon May 25 06:24:37.777949 2026] [:error] [pid 21606:tid 21608] [client 170.64.221.168:53326] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahN6pWswdp0RYkH5t9XAxAAAAUA"]
[Mon May 25 06:24:37.782566 2026] [:error] [pid 9304:tid 9382] [client 170.64.221.168:53334] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_lAAAAJU"]
[Mon May 25 06:24:37.801203 2026] [:error] [pid 9304:tid 9365] [client 170.64.221.168:53350] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_lQAAAIQ"]
[Mon May 25 06:24:37.806780 2026] [:error] [pid 9304:tid 9366] [client 170.64.221.168:53376] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_lwAAAIU"]
[Mon May 25 06:24:37.814107 2026] [:error] [pid 9304:tid 9383] [client 170.64.221.168:53400] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_mgAAAJY"]
[Mon May 25 06:24:37.817924 2026] [:error] [pid 9304:tid 9361] [client 170.64.221.168:53442] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_nQAAAIA"]
[Mon May 25 06:24:37.821910 2026] [:error] [pid 9304:tid 9384] [client 170.64.221.168:53462] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_nwAAAJc"]
[Mon May 25 06:24:37.824742 2026] [:error] [pid 9304:tid 9377] [client 170.64.221.168:53464] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_oAAAAJA"]
[Mon May 25 06:24:37.844410 2026] [:error] [pid 9304:tid 9373] [client 170.64.221.168:53472] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_oQAAAIw"]
[Mon May 25 06:24:37.850309 2026] [:error] [pid 9304:tid 9378] [client 170.64.221.168:53482] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_ogAAAJE"]
[Mon May 25 06:24:37.866498 2026] [:error] [pid 9304:tid 9375] [client 170.64.221.168:53510] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_pQAAAI4"]
[Mon May 25 06:24:37.893311 2026] [:error] [pid 9304:tid 9369] [client 170.64.221.168:53556] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahN6peVEV2qpMC_1UzR_qwAAAIg"]
[Mon May 25 06:24:38.018263 2026] [:error] [pid 9304:tid 9375] [client 170.64.221.168:53920] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzR_0QAAAI4"]
[Mon May 25 06:24:38.027277 2026] [:error] [pid 9304:tid 9370] [client 170.64.221.168:53912] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugins/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzR_0wAAAIk"]
[Mon May 25 06:24:38.038326 2026] [:error] [pid 9304:tid 9362] [client 170.64.221.168:54018] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzR_2AAAAIE"]
[Mon May 25 06:24:38.041543 2026] [:error] [pid 9304:tid 9374] [client 170.64.221.168:53922] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzR_2QAAAI0"]
[Mon May 25 06:24:38.046738 2026] [:error] [pid 9304:tid 9369] [client 170.64.221.168:53936] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzR_2wAAAIg"]
[Mon May 25 06:24:38.051437 2026] [:error] [pid 9304:tid 9365] [client 170.64.221.168:53974] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzR_3QAAAIQ"]
[Mon May 25 06:24:38.053364 2026] [:error] [pid 9304:tid 9380] [client 170.64.221.168:53934] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzR_3gAAAJM"]
[Mon May 25 06:24:38.073531 2026] [:error] [pid 9304:tid 9377] [client 170.64.221.168:54078] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzR_6AAAAJA"]
[Mon May 25 06:24:38.075745 2026] [:error] [pid 9304:tid 9375] [client 170.64.221.168:54082] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugin/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzR_6QAAAI4"]
[Mon May 25 06:24:38.088738 2026] [:error] [pid 9304:tid 9378] [client 170.64.221.168:54104] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzR_7QAAAJE"]
[Mon May 25 06:24:38.091539 2026] [:error] [pid 9304:tid 9379] [client 170.64.221.168:54116] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asset/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzR_7gAAAJI"]
[Mon May 25 06:24:38.095599 2026] [:error] [pid 9304:tid 9362] [client 170.64.221.168:54138] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzR_8AAAAIE"]
[Mon May 25 06:24:38.098267 2026] [:error] [pid 9304:tid 9374] [client 170.64.221.168:54154] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzR_8QAAAI0"]
[Mon May 25 06:24:38.099759 2026] [:error] [pid 9304:tid 9364] [client 170.64.221.168:54158] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugins/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzR_8gAAAIM"]
[Mon May 25 06:24:38.110931 2026] [:error] [pid 9304:tid 9380] [client 170.64.221.168:54204] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzR_9QAAAJM"]
[Mon May 25 06:24:38.115711 2026] [:error] [pid 9304:tid 9366] [client 170.64.221.168:54208] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzR_9gAAAIU"]
[Mon May 25 06:24:38.118736 2026] [:error] [pid 9304:tid 9383] [client 170.64.221.168:54210] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzR_9wAAAJY"]
[Mon May 25 06:24:38.127003 2026] [:error] [pid 9304:tid 9363] [client 170.64.221.168:54226] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzR_-QAAAII"]
[Mon May 25 06:24:38.128448 2026] [:error] [pid 9304:tid 9368] [client 170.64.221.168:54228] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzR_-gAAAIc"]
[Mon May 25 06:24:38.147531 2026] [:error] [pid 9304:tid 9381] [client 170.64.221.168:54290] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugin/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzSAAAAAAJQ"]
[Mon May 25 06:24:38.147953 2026] [:error] [pid 9304:tid 9375] [client 170.64.221.168:54288] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAAQAAAI4"]
[Mon May 25 06:24:38.161331 2026] [:error] [pid 9304:tid 9367] [client 170.64.221.168:54322] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSABQAAAIY"]
[Mon May 25 06:24:38.163803 2026] [:error] [pid 9304:tid 9362] [client 170.64.221.168:54350] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asset/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzSABwAAAIE"]
[Mon May 25 06:24:38.167624 2026] [:error] [pid 9304:tid 9364] [client 170.64.221.168:54380] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzSACQAAAIM"]
[Mon May 25 06:24:38.171197 2026] [:error] [pid 9304:tid 9369] [client 170.64.221.168:54388] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSACgAAAIg"]
[Mon May 25 06:24:38.172108 2026] [:error] [pid 9304:tid 9365] [client 170.64.221.168:54400] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugins/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzSACwAAAIQ"]
[Mon May 25 06:24:38.177075 2026] [:error] [pid 9304:tid 9380] [client 170.64.221.168:54410] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSADAAAAJM"]
[Mon May 25 06:24:38.182539 2026] [:error] [pid 9304:tid 9383] [client 170.64.221.168:54432] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzSADgAAAJY"]
[Mon May 25 06:24:38.187496 2026] [:error] [pid 9304:tid 9363] [client 170.64.221.168:54448] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzSAEAAAAII"]
[Mon May 25 06:24:38.193644 2026] [:error] [pid 9304:tid 9368] [client 170.64.221.168:54456] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzSAEgAAAIc"]
[Mon May 25 06:24:38.194639 2026] [:error] [pid 9304:tid 9372] [client 170.64.221.168:54472] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzSAEwAAAIs"]
[Mon May 25 06:24:38.207916 2026] [:error] [pid 9304:tid 9370] [client 170.64.221.168:54534] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAGAAAAIk"]
[Mon May 25 06:24:38.208406 2026] [:error] [pid 9304:tid 9375] [client 170.64.221.168:54528] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugin/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzSAGQAAAI4"]
[Mon May 25 06:24:38.219368 2026] [:error] [pid 9304:tid 9367] [client 170.64.221.168:54546] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asset/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzSAHAAAAIY"]
[Mon May 25 06:24:38.224775 2026] [:error] [pid 9304:tid 9362] [client 170.64.221.168:54568] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahN6puVEV2qpMC_1UzSAHgAAAIE"]
[Mon May 25 06:24:38.228965 2026] [:error] [pid 9304:tid 9369] [client 170.64.221.168:54598] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAIAAAAIg"]
[Mon May 25 06:24:38.282486 2026] [:error] [pid 9304:tid 9385] [client 170.64.221.168:54754] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAMwAAAJg"]
[Mon May 25 06:24:38.335014 2026] [:error] [pid 9304:tid 9363] [client 170.64.221.168:54948] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSARAAAAII"]
[Mon May 25 06:24:38.342083 2026] [:error] [pid 9304:tid 9378] [client 170.64.221.168:54980] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSARwAAAJE"]
[Mon May 25 06:24:38.342369 2026] [:error] [pid 9304:tid 9367] [client 170.64.221.168:54996] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSASAAAAIY"]
[Mon May 25 06:24:38.347147 2026] [:error] [pid 9304:tid 9362] [client 170.64.221.168:55022] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSASgAAAIE"]
[Mon May 25 06:24:38.352690 2026] [:error] [pid 9304:tid 9373] [client 170.64.221.168:55036] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSASwAAAIw"]
[Mon May 25 06:24:38.357621 2026] [:error] [pid 9304:tid 9380] [client 170.64.221.168:55062] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSATgAAAJM"]
[Mon May 25 06:24:38.378280 2026] [:error] [pid 9304:tid 9372] [client 170.64.221.168:55124] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAVAAAAIs"]
[Mon May 25 06:24:38.384097 2026] [:error] [pid 9304:tid 9384] [client 170.64.221.168:55150] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAVgAAAJc"]
[Mon May 25 06:24:38.389149 2026] [:error] [pid 9304:tid 9381] [client 170.64.221.168:55152] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAWAAAAJQ"]
[Mon May 25 06:24:38.393789 2026] [:error] [pid 9304:tid 9363] [client 170.64.221.168:55174] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAWQAAAII"]
[Mon May 25 06:24:38.405525 2026] [:error] [pid 9304:tid 9367] [client 170.64.221.168:55204] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAXgAAAIY"]
[Mon May 25 06:24:38.410343 2026] [:error] [pid 9304:tid 9362] [client 170.64.221.168:55224] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAYAAAAIE"]
[Mon May 25 06:24:38.413628 2026] [:error] [pid 9304:tid 9373] [client 170.64.221.168:55246] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAYQAAAIw"]
[Mon May 25 06:24:38.415014 2026] [:error] [pid 9304:tid 9369] [client 170.64.221.168:55234] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAYgAAAIg"]
[Mon May 25 06:24:38.416067 2026] [:error] [pid 9304:tid 9365] [client 170.64.221.168:55248] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAYwAAAIQ"]
[Mon May 25 06:24:38.420586 2026] [:error] [pid 9304:tid 9377] [client 170.64.221.168:55278] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAZgAAAJA"]
[Mon May 25 06:24:38.424088 2026] [:error] [pid 9304:tid 9364] [client 170.64.221.168:55292] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAZwAAAIM"]
[Mon May 25 06:24:38.430520 2026] [:error] [pid 9304:tid 9370] [client 170.64.221.168:55296] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAaAAAAIk"]
[Mon May 25 06:24:38.448122 2026] [:error] [pid 9304:tid 9384] [client 170.64.221.168:55332] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAbAAAAJc"]
[Mon May 25 06:24:38.454402 2026] [:error] [pid 9304:tid 9363] [client 170.64.221.168:55354] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAbwAAAII"]
[Mon May 25 06:24:38.457807 2026] [:error] [pid 9304:tid 9383] [client 170.64.221.168:55368] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAcAAAAJY"]
[Mon May 25 06:24:38.463080 2026] [:error] [pid 9304:tid 9376] [client 170.64.221.168:55386] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAcgAAAI8"]
[Mon May 25 06:24:38.475663 2026] [:error] [pid 9304:tid 9373] [client 170.64.221.168:55426] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAdwAAAIw"]
[Mon May 25 06:24:38.478926 2026] [:error] [pid 9304:tid 9365] [client 170.64.221.168:55438] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAeQAAAIQ"]
[Mon May 25 06:24:38.480958 2026] [:error] [pid 9304:tid 9380] [client 170.64.221.168:55466] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAegAAAJM"]
[Mon May 25 06:24:38.484109 2026] [:error] [pid 9304:tid 9366] [client 170.64.221.168:55480] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAfAAAAIU"]
[Mon May 25 06:24:38.485451 2026] [:error] [pid 9304:tid 9364] [client 170.64.221.168:55490] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAfQAAAIM"]
[Mon May 25 06:24:38.488731 2026] [:error] [pid 9304:tid 9361] [client 170.64.221.168:55508] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAfwAAAIA"]
[Mon May 25 06:24:38.497577 2026] [:error] [pid 9304:tid 9372] [client 170.64.221.168:55512] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAgAAAAIs"]
[Mon May 25 06:24:38.515361 2026] [:error] [pid 9304:tid 9379] [client 170.64.221.168:55540] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAhQAAAJI"]
[Mon May 25 06:24:38.520075 2026] [:error] [pid 9304:tid 9375] [client 170.64.221.168:55564] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAhwAAAI4"]
[Mon May 25 06:24:38.521767 2026] [:error] [pid 9304:tid 9376] [client 170.64.221.168:55570] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAiAAAAI8"]
[Mon May 25 06:24:38.525035 2026] [:error] [pid 9304:tid 9367] [client 170.64.221.168:55588] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAigAAAIY"]
[Mon May 25 06:24:38.540248 2026] [:error] [pid 9304:tid 9380] [client 170.64.221.168:55628] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAkAAAAJM"]
[Mon May 25 06:24:38.542477 2026] [:error] [pid 9304:tid 9377] [client 170.64.221.168:55632] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAkQAAAJA"]
[Mon May 25 06:24:38.579458 2026] [:error] [pid 9304:tid 9379] [client 170.64.221.168:55712] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAmwAAAJI"]
[Mon May 25 06:24:38.601484 2026] [:error] [pid 9304:tid 9373] [client 170.64.221.168:55784] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAowAAAIw"]
[Mon May 25 06:24:38.622091 2026] [:error] [pid 9304:tid 9377] [client 170.64.221.168:55820] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSApwAAAJA"]
[Mon May 25 06:24:38.631560 2026] [:error] [pid 9304:tid 9364] [client 170.64.221.168:55844] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAqQAAAIM"]
[Mon May 25 06:24:38.636964 2026] [:error] [pid 9304:tid 9372] [client 170.64.221.168:55854] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSArAAAAIs"]
[Mon May 25 06:24:38.654154 2026] [:error] [pid 9304:tid 9381] [client 170.64.221.168:55882] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSArwAAAJQ"]
[Mon May 25 06:24:38.667464 2026] [:error] [pid 9304:tid 9379] [client 170.64.221.168:55898] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAsQAAAJI"]
[Mon May 25 06:24:38.669538 2026] [:error] [pid 9304:tid 9383] [client 170.64.221.168:55904] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAsgAAAJY"]
[Mon May 25 06:24:38.671651 2026] [:error] [pid 9304:tid 9375] [client 170.64.221.168:55902] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAswAAAI4"]
[Mon May 25 06:24:38.674874 2026] [:error] [pid 9304:tid 9376] [client 170.64.221.168:55932] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAtQAAAI8"]
[Mon May 25 06:24:38.676252 2026] [:error] [pid 9304:tid 9378] [client 170.64.221.168:55934] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAtgAAAJE"]
[Mon May 25 06:24:38.680184 2026] [:error] [pid 9304:tid 9385] [client 170.64.221.168:55940] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAtwAAAJg"]
[Mon May 25 06:24:38.686215 2026] [:error] [pid 9304:tid 9362] [client 170.64.221.168:55960] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAuAAAAIE"]
[Mon May 25 06:24:38.696722 2026] [:error] [pid 9304:tid 9380] [client 170.64.221.168:55990] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAuwAAAJM"]
[Mon May 25 06:24:38.716447 2026] [:error] [pid 9304:tid 9364] [client 170.64.221.168:56024] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAvAAAAIM"]
[Mon May 25 06:24:38.716723 2026] [:error] [pid 9304:tid 9366] [client 170.64.221.168:56016] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAvQAAAIU"]
[Mon May 25 06:24:38.718547 2026] [:error] [pid 9304:tid 9365] [client 170.64.221.168:55992] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAvgAAAIQ"]
[Mon May 25 06:24:38.723025 2026] [:error] [pid 9304:tid 9370] [client 170.64.221.168:56036] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAwAAAAIk"]
[Mon May 25 06:24:38.734840 2026] [:error] [pid 9304:tid 9361] [client 170.64.221.168:56050] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAwQAAAIA"]
[Mon May 25 06:24:38.736548 2026] [:error] [pid 9304:tid 9368] [client 170.64.221.168:56058] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAwgAAAIc"]
[Mon May 25 06:24:38.761011 2026] [:error] [pid 9304:tid 9375] [client 170.64.221.168:56086] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAyAAAAI4"]
[Mon May 25 06:24:38.761735 2026] [:error] [pid 9304:tid 9376] [client 170.64.221.168:56092] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAyQAAAI8"]
[Mon May 25 06:24:38.771287 2026] [:error] [pid 9304:tid 9373] [client 170.64.221.168:56150] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAzgAAAIw"]
[Mon May 25 06:24:38.780810 2026] [:error] [pid 9304:tid 9369] [client 170.64.221.168:56164] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahN6puVEV2qpMC_1UzSAzwAAAIg"]
[Mon May 25 06:24:38.939818 2026] [:error] [pid 9398:tid 9403] [client 170.64.221.168:56556] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6puhIu7KstzsCua-pdgAAAMM"]
[Mon May 25 06:24:38.942309 2026] [:error] [pid 50423:tid 50447] [client 170.64.221.168:56542] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahN6pqJWO7En4nKEQ3gwCAAAARY"]
[Mon May 25 06:24:38.967297 2026] [:error] [pid 50423:tid 50441] [client 170.64.221.168:56632] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahN6pqJWO7En4nKEQ3gwDAAAARA"]
[Mon May 25 06:24:38.971741 2026] [:error] [pid 9398:tid 9406] [client 170.64.221.168:56618] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahN6puhIu7KstzsCua-peQAAAMY"]
[Mon May 25 06:24:38.974256 2026] [:error] [pid 9303:tid 9347] [client 170.64.221.168:56644] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahN6pn3bQScbssitjPQ4AAAAAE0"]
[Mon May 25 06:24:38.977422 2026] [:error] [pid 50423:tid 50448] [client 170.64.221.168:56666] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6pqJWO7En4nKEQ3gwDwAAARc"]
[Mon May 25 06:24:38.983534 2026] [:error] [pid 9303:tid 9356] [client 170.64.221.168:56692] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahN6pn3bQScbssitjPQ4AgAAAFY"]
[Mon May 25 06:24:39.001436 2026] [:error] [pid 9398:tid 9420] [client 170.64.221.168:56760] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-pfgAAANA"]
[Mon May 25 06:24:39.006864 2026] [:error] [pid 9304:tid 9363] [client 170.64.221.168:56768] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahN6p-VEV2qpMC_1UzSA8AAAAII"]
[Mon May 25 06:24:39.007120 2026] [:error] [pid 9398:tid 9421] [client 170.64.221.168:56784] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-pfwAAANE"]
[Mon May 25 06:24:39.009031 2026] [:error] [pid 9398:tid 9416] [client 170.64.221.168:56788] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-pgAAAAMw"]
[Mon May 25 06:24:39.014434 2026] [:error] [pid 9304:tid 9377] [client 170.64.221.168:56802] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahN6p-VEV2qpMC_1UzSA8QAAAJA"]
[Mon May 25 06:24:39.017815 2026] [:error] [pid 9304:tid 9365] [client 170.64.221.168:56830] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahN6p-VEV2qpMC_1UzSA8gAAAIQ"]
[Mon May 25 06:24:39.019729 2026] [:error] [pid 9304:tid 9375] [client 170.64.221.168:56818] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahN6p-VEV2qpMC_1UzSA8wAAAI4"]
[Mon May 25 06:24:39.032881 2026] [:error] [pid 9398:tid 9422] [client 170.64.221.168:56864] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-phAAAANI"]
[Mon May 25 06:24:39.037141 2026] [:error] [pid 9398:tid 9427] [client 170.64.221.168:56882] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahN6p-hIu7KstzsCua-phgAAANc"]
[Mon May 25 06:24:39.041066 2026] [:error] [pid 9398:tid 9413] [client 170.64.221.168:56898] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahN6p-hIu7KstzsCua-phwAAAMk"]
[Mon May 25 06:24:39.043902 2026] [:error] [pid 9398:tid 9405] [client 170.64.221.168:56912] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-piQAAAMU"]
[Mon May 25 06:24:39.049654 2026] [:error] [pid 9398:tid 9425] [client 170.64.221.168:56922] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-pjAAAANU"]
[Mon May 25 06:24:39.061161 2026] [:error] [pid 9398:tid 9404] [client 170.64.221.168:56976] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-pjwAAAMQ"]
[Mon May 25 06:24:39.066831 2026] [:error] [pid 9398:tid 9412] [client 170.64.221.168:56982] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-pkAAAAMg"]
[Mon May 25 06:24:39.068423 2026] [:error] [pid 9304:tid 9385] [client 170.64.221.168:56996] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahN6p-VEV2qpMC_1UzSA9gAAAJg"]
[Mon May 25 06:24:39.069001 2026] [:error] [pid 9398:tid 9400] [client 170.64.221.168:57004] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-pkQAAAMA"]
[Mon May 25 06:24:39.075588 2026] [:error] [pid 9398:tid 9406] [client 170.64.221.168:57018] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-pkgAAAMY"]
[Mon May 25 06:24:39.076724 2026] [:error] [pid 9398:tid 9428] [client 170.64.221.168:57030] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-pkwAAANg"]
[Mon May 25 06:24:39.079806 2026] [:error] [pid 9398:tid 9423] [client 170.64.221.168:57044] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-plAAAANM"]
[Mon May 25 06:24:39.092846 2026] [:error] [pid 9398:tid 9420] [client 170.64.221.168:57066] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-plwAAANA"]
[Mon May 25 06:24:39.096954 2026] [:error] [pid 9398:tid 9421] [client 170.64.221.168:57068] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahN6p-hIu7KstzsCua-pmAAAANE"]
[Mon May 25 06:24:39.099600 2026] [:error] [pid 9398:tid 9416] [client 170.64.221.168:57076] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahN6p-hIu7KstzsCua-pmQAAAMw"]
[Mon May 25 06:24:39.100935 2026] [:error] [pid 9398:tid 9417] [client 170.64.221.168:57080] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-pmgAAAM0"]
[Mon May 25 06:24:39.108163 2026] [:error] [pid 9304:tid 9362] [client 170.64.221.168:57122] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahN6p-VEV2qpMC_1UzSA-AAAAIE"]
[Mon May 25 06:24:39.118292 2026] [:error] [pid 9398:tid 9401] [client 170.64.221.168:57186] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-pnwAAAME"]
[Mon May 25 06:24:39.131407 2026] [:error] [pid 9398:tid 9425] [client 170.64.221.168:57204] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-ppQAAANU"]
[Mon May 25 06:24:39.135971 2026] [:error] [pid 9398:tid 9424] [client 170.64.221.168:57238] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-ppwAAANQ"]
[Mon May 25 06:24:39.136531 2026] [:error] [pid 21606:tid 21612] [client 170.64.221.168:57216] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahN6p2swdp0RYkH5t9XAxQAAAUQ"]
[Mon May 25 06:24:39.139037 2026] [:error] [pid 9398:tid 9404] [client 170.64.221.168:57226] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-pqAAAAMQ"]
[Mon May 25 06:24:39.198921 2026] [:error] [pid 50423:tid 50434] [client 170.64.221.168:57428] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6p6JWO7En4nKEQ3gwHQAAAQk"]
[Mon May 25 06:24:39.209794 2026] [:error] [pid 50423:tid 50432] [client 170.64.221.168:57462] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahN6p6JWO7En4nKEQ3gwIQAAAQc"]
[Mon May 25 06:24:39.217015 2026] [:error] [pid 50423:tid 50441] [client 170.64.221.168:57478] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahN6p6JWO7En4nKEQ3gwIgAAARA"]
[Mon May 25 06:24:39.259248 2026] [:error] [pid 50423:tid 50433] [client 170.64.221.168:57588] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahN6p6JWO7En4nKEQ3gwLwAAAQg"]
[Mon May 25 06:24:39.262164 2026] [:error] [pid 50423:tid 50446] [client 170.64.221.168:57598] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6p6JWO7En4nKEQ3gwMQAAARU"]
[Mon May 25 06:24:39.263141 2026] [:error] [pid 50423:tid 50434] [client 170.64.221.168:57614] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6p6JWO7En4nKEQ3gwMgAAAQk"]
[Mon May 25 06:24:39.269718 2026] [:error] [pid 50423:tid 50447] [client 170.64.221.168:57624] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6p6JWO7En4nKEQ3gwMwAAARY"]
[Mon May 25 06:24:39.270801 2026] [:error] [pid 50423:tid 50435] [client 170.64.221.168:57640] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahN6p6JWO7En4nKEQ3gwNAAAAQo"]
[Mon May 25 06:24:39.272577 2026] [:error] [pid 50423:tid 50427] [client 170.64.221.168:57650] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahN6p6JWO7En4nKEQ3gwNQAAAQI"]
[Mon May 25 06:24:39.279727 2026] [:error] [pid 21606:tid 21630] [client 170.64.221.168:57698] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahN6p2swdp0RYkH5t9XAxgAAAVY"]
[Mon May 25 06:24:39.284413 2026] [:error] [pid 9304:tid 9380] [client 170.64.221.168:57720] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahN6p-VEV2qpMC_1UzSA-wAAAJM"]
[Mon May 25 06:24:39.292861 2026] [:error] [pid 21606:tid 21631] [client 170.64.221.168:57734] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahN6p2swdp0RYkH5t9XAyAAAAVc"]
[Mon May 25 06:24:39.317846 2026] [:error] [pid 9303:tid 9336] [client 170.64.221.168:57810] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahN6p33bQScbssitjPQ4BgAAAEI"]
[Mon May 25 06:24:39.321474 2026] [:error] [pid 9303:tid 9340] [client 170.64.221.168:57826] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahN6p33bQScbssitjPQ4BwAAAEY"]
[Mon May 25 06:24:39.326303 2026] [:error] [pid 21606:tid 21624] [client 170.64.221.168:57836] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahN6p2swdp0RYkH5t9XAzAAAAVA"]
[Mon May 25 06:24:39.329549 2026] [:error] [pid 9303:tid 9342] [client 170.64.221.168:57852] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahN6p33bQScbssitjPQ4CAAAAEg"]
[Mon May 25 06:24:39.330111 2026] [:error] [pid 21606:tid 21610] [client 170.64.221.168:57866] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6p2swdp0RYkH5t9XAzQAAAUI"]
[Mon May 25 06:24:39.331847 2026] [:error] [pid 9303:tid 9345] [client 170.64.221.168:57872] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6p33bQScbssitjPQ4CQAAAEs"]
[Mon May 25 06:24:39.334443 2026] [:error] [pid 9398:tid 9422] [client 170.64.221.168:57878] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-ptQAAANI"]
[Mon May 25 06:24:39.336637 2026] [:error] [pid 9303:tid 9355] [client 170.64.221.168:57894] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahN6p33bQScbssitjPQ4CgAAAFU"]
[Mon May 25 06:24:39.341157 2026] [:error] [pid 9303:tid 9349] [client 170.64.221.168:57900] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahN6p33bQScbssitjPQ4CwAAAE8"]
[Mon May 25 06:24:39.344129 2026] [:error] [pid 50423:tid 50448] [client 170.64.221.168:57916] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahN6p6JWO7En4nKEQ3gwOgAAARc"]
[Mon May 25 06:24:39.347913 2026] [:error] [pid 9303:tid 9339] [client 170.64.221.168:57922] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahN6p33bQScbssitjPQ4DAAAAEU"]
[Mon May 25 06:24:39.357596 2026] [:error] [pid 21606:tid 21621] [client 170.64.221.168:57950] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahN6p2swdp0RYkH5t9XAzwAAAU0"]
[Mon May 25 06:24:39.381080 2026] [:error] [pid 9398:tid 9427] [client 170.64.221.168:58016] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-puwAAANc"]
[Mon May 25 06:24:39.384821 2026] [:error] [pid 9398:tid 9407] [client 170.64.221.168:58032] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-pvAAAAMc"]
[Mon May 25 06:24:39.388848 2026] [:error] [pid 21606:tid 21622] [client 170.64.221.168:58060] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahN6p2swdp0RYkH5t9XA0wAAAU4"]
[Mon May 25 06:24:39.392742 2026] [:error] [pid 21606:tid 21613] [client 170.64.221.168:58082] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6p2swdp0RYkH5t9XA1AAAAUU"]
[Mon May 25 06:24:39.393564 2026] [:error] [pid 9398:tid 9403] [client 170.64.221.168:58076] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-pvgAAAMM"]
[Mon May 25 06:24:39.395337 2026] [:error] [pid 9398:tid 9404] [client 170.64.221.168:58104] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-pwAAAAMQ"]
[Mon May 25 06:24:39.396933 2026] [:error] [pid 9398:tid 9412] [client 170.64.221.168:58110] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-pwQAAAMg"]
[Mon May 25 06:24:39.402206 2026] [:error] [pid 21606:tid 21615] [client 170.64.221.168:58122] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahN6p2swdp0RYkH5t9XA1QAAAUc"]
[Mon May 25 06:24:39.405555 2026] [:error] [pid 21606:tid 21611] [client 170.64.221.168:58134] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahN6p2swdp0RYkH5t9XA1gAAAUM"]
[Mon May 25 06:24:39.431067 2026] [:error] [pid 50423:tid 50445] [client 170.64.221.168:58200] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahN6p6JWO7En4nKEQ3gwOwAAARQ"]
[Mon May 25 06:24:39.438700 2026] [:error] [pid 21606:tid 21608] [client 170.64.221.168:58216] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahN6p2swdp0RYkH5t9XA2gAAAUA"]
[Mon May 25 06:24:39.439479 2026] [:error] [pid 21606:tid 21628] [client 170.64.221.168:58226] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahN6p2swdp0RYkH5t9XA2wAAAVQ"]
[Mon May 25 06:24:39.442056 2026] [:error] [pid 21606:tid 21609] [client 170.64.221.168:58248] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahN6p2swdp0RYkH5t9XA3gAAAUE"]
[Mon May 25 06:24:39.477950 2026] [:error] [pid 21606:tid 21624] [client 170.64.221.168:58320] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6p2swdp0RYkH5t9XA5QAAAVA"]
[Mon May 25 06:24:39.484122 2026] [:error] [pid 9302:tid 9307] [client 170.64.221.168:58346] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahN6py1RaFfTSnDQnqFRggAAAAA"]
[Mon May 25 06:24:39.494743 2026] [:error] [pid 50423:tid 50431] [client 170.64.221.168:58384] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahN6p6JWO7En4nKEQ3gwPAAAAQY"]
[Mon May 25 06:24:39.499748 2026] [:error] [pid 21606:tid 21610] [client 170.64.221.168:58396] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6p2swdp0RYkH5t9XA5gAAAUI"]
[Mon May 25 06:24:39.518365 2026] [:error] [pid 9302:tid 9323] [client 170.64.221.168:58424] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6py1RaFfTSnDQnqFRhwAAABA"]
[Mon May 25 06:24:39.521849 2026] [:error] [pid 9304:tid 9370] [client 170.64.221.168:58444] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6p-VEV2qpMC_1UzSBAgAAAIk"]
[Mon May 25 06:24:39.526348 2026] [:error] [pid 9302:tid 9315] [client 170.64.221.168:58446] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahN6py1RaFfTSnDQnqFRiQAAAAg"]
[Mon May 25 06:24:39.530818 2026] [:error] [pid 9304:tid 9379] [client 170.64.221.168:58466] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahN6p-VEV2qpMC_1UzSBAwAAAJI"]
[Mon May 25 06:24:39.537392 2026] [:error] [pid 9302:tid 9329] [client 170.64.221.168:58484] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahN6py1RaFfTSnDQnqFRiwAAABY"]
[Mon May 25 06:24:39.543999 2026] [:error] [pid 9302:tid 9324] [client 170.64.221.168:58492] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6py1RaFfTSnDQnqFRjAAAABE"]
[Mon May 25 06:24:39.561519 2026] [:error] [pid 9398:tid 9417] [client 170.64.221.168:58512] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-pxwAAAM0"]
[Mon May 25 06:24:39.567573 2026] [:error] [pid 9304:tid 9374] [client 170.64.221.168:58540] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6p-VEV2qpMC_1UzSBBAAAAI0"]
[Mon May 25 06:24:39.568791 2026] [:error] [pid 9304:tid 9368] [client 170.64.221.168:58524] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6p-VEV2qpMC_1UzSBBQAAAIc"]
[Mon May 25 06:24:39.574852 2026] [:error] [pid 9304:tid 9373] [client 170.64.221.168:58554] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahN6p-VEV2qpMC_1UzSBBgAAAIw"]
[Mon May 25 06:24:39.580811 2026] [:error] [pid 9304:tid 9363] [client 170.64.221.168:58556] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahN6p-VEV2qpMC_1UzSBBwAAAII"]
[Mon May 25 06:24:39.589705 2026] [:error] [pid 50423:tid 50443] [client 170.64.221.168:58572] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6p6JWO7En4nKEQ3gwPgAAARI"]
[Mon May 25 06:24:39.603507 2026] [:error] [pid 9302:tid 9311] [client 170.64.221.168:58584] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6py1RaFfTSnDQnqFRjgAAAAQ"]
[Mon May 25 06:24:39.609898 2026] [:error] [pid 9302:tid 9313] [client 170.64.221.168:58600] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6py1RaFfTSnDQnqFRjwAAAAY"]
[Mon May 25 06:24:39.619928 2026] [:error] [pid 9303:tid 9335] [client 170.64.221.168:58616] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahN6p33bQScbssitjPQ4DwAAAEE"]
[Mon May 25 06:24:39.653926 2026] [:error] [pid 9302:tid 9321] [client 170.64.221.168:58644] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6py1RaFfTSnDQnqFRkwAAAA4"]
[Mon May 25 06:24:39.756991 2026] [:error] [pid 9303:tid 9348] [client 170.64.221.168:58746] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6p33bQScbssitjPQ4GQAAAE4"]
[Mon May 25 06:24:39.763949 2026] [:error] [pid 50423:tid 50442] [client 170.64.221.168:58776] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6p6JWO7En4nKEQ3gwQAAAARE"]
[Mon May 25 06:24:39.774474 2026] [:error] [pid 50423:tid 50438] [client 170.64.221.168:58794] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6p6JWO7En4nKEQ3gwQwAAAQ0"]
[Mon May 25 06:24:39.800784 2026] [:error] [pid 9304:tid 9377] [client 170.64.221.168:58838] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6p-VEV2qpMC_1UzSBCAAAAJA"]
[Mon May 25 06:24:39.805972 2026] [:error] [pid 9303:tid 9344] [client 170.64.221.168:58852] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6p33bQScbssitjPQ4GwAAAEo"]
[Mon May 25 06:24:39.816852 2026] [:error] [pid 9303:tid 9336] [client 170.64.221.168:58874] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6p33bQScbssitjPQ4HQAAAEI"]
[Mon May 25 06:24:39.828431 2026] [:error] [pid 9398:tid 9416] [client 170.64.221.168:58902] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-pyQAAAMw"]
[Mon May 25 06:24:39.844915 2026] [:error] [pid 9398:tid 9415] [client 170.64.221.168:58918] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6p-hIu7KstzsCua-pygAAAMs"]
[Mon May 25 06:24:39.849003 2026] [:error] [pid 9303:tid 9345] [client 170.64.221.168:58920] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6p33bQScbssitjPQ4IAAAAEs"]
[Mon May 25 06:24:39.860193 2026] [:error] [pid 9303:tid 9355] [client 170.64.221.168:58930] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6p33bQScbssitjPQ4IQAAAFU"]
[Mon May 25 06:24:39.873102 2026] [:error] [pid 9303:tid 9349] [client 170.64.221.168:58938] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6p33bQScbssitjPQ4IgAAAE8"]
[Mon May 25 06:24:39.919792 2026] [:error] [pid 9303:tid 9339] [client 170.64.221.168:58954] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6p33bQScbssitjPQ4IwAAAEU"]
[Mon May 25 09:22:15.246927 2026] [:error] [pid 62722:tid 62748] [client 52.238.197.40:40516] File does not exist: /usr/local/apache/htdocs/suspended-page/ups.php
[Mon May 25 10:41:54.992935 2026] [:error] [pid 62515:tid 62539] [client 35.88.192.252:46220] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ahO28hig0_XsOwmnrv-JiQAAANY"]
[Mon May 25 10:41:56.134595 2026] [:error] [pid 62722:tid 62742] [client 35.88.192.252:46234] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.git/credentials"] [unique_id "ahO29KM6ssnLWYf6CVCUuQAAAFI"]
[Mon May 25 10:41:57.944724 2026] [:error] [pid 62515:tid 62517] [client 35.88.192.252:46240] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ahO29Rig0_XsOwmnrv-JjgAAAMA"]
[Mon May 25 10:41:59.139780 2026] [:error] [pid 62428:tid 62484] [client 35.88.192.252:46248] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "ahO295NosGBa7mui3VTNkQAAAIA"]
[Mon May 25 10:42:00.463744 2026] [:error] [pid 62426:tid 62439] [client 35.88.192.252:46260] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "ahO2-Ej3D3Mo8ANpTRCSswAAAAk"]
[Mon May 25 10:42:02.299583 2026] [:error] [pid 62427:tid 62458] [client 35.88.192.252:46262] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.staging"] [unique_id "ahO2-vMUa83fc4GDyBwbfgAAAUE"]
[Mon May 25 10:42:03.291177 2026] [:error] [pid 62428:tid 62502] [client 35.88.192.252:59424] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.development"] [unique_id "ahO2-5NosGBa7mui3VTNlgAAAJI"]
[Mon May 25 10:42:04.818565 2026] [:error] [pid 62426:tid 62445] [client 35.88.192.252:59440] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.test"] [unique_id "ahO2_Ej3D3Mo8ANpTRCSuAAAAA8"]
[Mon May 25 10:42:05.694925 2026] [:error] [pid 62722:tid 62733] [client 35.88.192.252:59444] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.remote"] [unique_id "ahO2_aM6ssnLWYf6CVCU1gAAAEk"]
[Mon May 25 10:42:06.712465 2026] [:error] [pid 62722:tid 62731] [client 35.88.192.252:59452] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.bak"] [unique_id "ahO2_qM6ssnLWYf6CVCU3gAAAEc"]
[Mon May 25 10:42:07.765627 2026] [:error] [pid 62427:tid 62459] [client 35.88.192.252:59456] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.backup"] [unique_id "ahO2__MUa83fc4GDyBwbfwAAAUI"]
[Mon May 25 10:42:08.734583 2026] [:error] [pid 62427:tid 62463] [client 35.88.192.252:59458] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.save"] [unique_id "ahO3APMUa83fc4GDyBwbgQAAAUY"]
[Mon May 25 10:42:09.569972 2026] [:error] [pid 62428:tid 62484] [client 35.88.192.252:59466] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.old"] [unique_id "ahO3AZNosGBa7mui3VTNnQAAAIA"]
[Mon May 25 10:42:16.033053 2026] [:error] [pid 62722:tid 62747] [client 35.88.192.252:43690] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.sample"] [unique_id "ahO3CKM6ssnLWYf6CVCU4wAAAFc"]
[Mon May 25 10:42:17.069345 2026] [:error] [pid 62722:tid 62735] [client 35.88.192.252:43704] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.example"] [unique_id "ahO3CaM6ssnLWYf6CVCU6QAAAEs"]
[Mon May 25 10:42:18.096635 2026] [:error] [pid 62515:tid 62530] [client 35.88.192.252:43714] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.dev"] [unique_id "ahO3Chig0_XsOwmnrv-JmQAAAM0"]
[Mon May 25 10:42:19.143544 2026] [:error] [pid 62722:tid 62729] [client 35.88.192.252:43718] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.prod"] [unique_id "ahO3C6M6ssnLWYf6CVCU7AAAAEU"]
[Mon May 25 10:42:20.112310 2026] [:error] [pid 62427:tid 62466] [client 35.88.192.252:43720] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.stage"] [unique_id "ahO3DPMUa83fc4GDyBwbjwAAAUk"]
[Mon May 25 10:42:21.419780 2026] [:error] [pid 62515:tid 62535] [client 35.88.192.252:43732] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.ci"] [unique_id "ahO3DRig0_XsOwmnrv-JnwAAANI"]
[Mon May 25 10:42:22.764436 2026] [:error] [pid 62722:tid 62739] [client 35.88.192.252:43740] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.docker"] [unique_id "ahO3DqM6ssnLWYf6CVCU-QAAAE8"]
[Mon May 25 10:42:23.725311 2026] [:error] [pid 62515:tid 62517] [client 35.88.192.252:42232] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.live"] [unique_id "ahO3Dxig0_XsOwmnrv-JpAAAAMA"]
[Mon May 25 10:42:24.572139 2026] [:error] [pid 62427:tid 62463] [client 35.88.192.252:42238] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.preprod"] [unique_id "ahO3EPMUa83fc4GDyBwbkgAAAUY"]
[Mon May 25 10:42:26.118554 2026] [:error] [pid 62426:tid 62444] [client 35.88.192.252:42254] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.uat"] [unique_id "ahO3Ekj3D3Mo8ANpTRCSxwAAAA4"]
[Mon May 25 10:42:27.025464 2026] [:error] [pid 62722:tid 62739] [client 35.88.192.252:42256] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.dist"] [unique_id "ahO3E6M6ssnLWYf6CVCVCAAAAE8"]
[Mon May 25 10:42:28.325206 2026] [:error] [pid 62722:tid 62747] [client 35.88.192.252:42264] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.swp"] [unique_id "ahO3FKM6ssnLWYf6CVCVDAAAAFc"]
[Mon May 25 10:42:29.172544 2026] [:error] [pid 62722:tid 62725] [client 35.88.192.252:42278] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env~"] [unique_id "ahO3FaM6ssnLWYf6CVCVEAAAAEE"]
[Mon May 25 10:42:30.164876 2026] [:error] [pid 62515:tid 62521] [client 35.88.192.252:42286] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env1"] [unique_id "ahO3Fhig0_XsOwmnrv-J2QAAAMQ"]
[Mon May 25 10:42:31.023878 2026] [:error] [pid 62515:tid 62537] [client 35.88.192.252:42292] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env2"] [unique_id "ahO3Fxig0_XsOwmnrv-J3AAAANQ"]
[Mon May 25 10:42:32.512520 2026] [:error] [pid 62428:tid 62501] [client 35.88.192.252:42302] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env_copy"] [unique_id "ahO3GJNosGBa7mui3VTNvwAAAJE"]
[Mon May 25 10:42:33.871679 2026] [:error] [pid 62515:tid 62541] [client 35.88.192.252:57966] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.txt"] [unique_id "ahO3GRig0_XsOwmnrv-J3wAAANg"]
[Mon May 25 10:42:35.250076 2026] [:error] [pid 62515:tid 62524] [client 35.88.192.252:57980] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.json"] [unique_id "ahO3Gxig0_XsOwmnrv-J4QAAAMc"]
[Mon May 25 10:42:36.176517 2026] [:error] [pid 62426:tid 62442] [client 35.88.192.252:57988] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.yaml"] [unique_id "ahO3HEj3D3Mo8ANpTRCSzAAAAAw"]
[Mon May 25 10:42:37.428288 2026] [:error] [pid 62428:tid 62506] [client 35.88.192.252:57998] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/.env.yml"] [unique_id "ahO3HZNosGBa7mui3VTNwQAAAJY"]
[Mon May 25 10:42:38.222998 2026] [:error] [pid 62515:tid 62534] [client 35.88.192.252:58002] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/app/.env"] [unique_id "ahO3Hhig0_XsOwmnrv-J5wAAANE"]
[Mon May 25 10:42:39.006047 2026] [:error] [pid 62515:tid 62541] [client 35.88.192.252:58004] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/apps/.env"] [unique_id "ahO3Hxig0_XsOwmnrv-J6QAAANg"]
[Mon May 25 10:42:39.792103 2026] [:error] [pid 62427:tid 62463] [client 35.88.192.252:58014] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/api/.env"] [unique_id "ahO3H_MUa83fc4GDyBwbnAAAAUY"]
[Mon May 25 10:42:40.582631 2026] [:error] [pid 62722:tid 62732] [client 35.88.192.252:58022] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/web/.env"] [unique_id "ahO3IKM6ssnLWYf6CVCVEwAAAEg"]
[Mon May 25 10:42:41.372157 2026] [:error] [pid 62722:tid 62725] [client 35.88.192.252:58032] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/site/.env"] [unique_id "ahO3IaM6ssnLWYf6CVCVGQAAAEE"]
[Mon May 25 10:42:42.334040 2026] [:error] [pid 62427:tid 62480] [client 35.88.192.252:58034] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/public/.env"] [unique_id "ahO3IvMUa83fc4GDyBwbpgAAAVc"]
[Mon May 25 10:42:43.345861 2026] [:error] [pid 62428:tid 62490] [client 35.88.192.252:51792] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/admin/.env"] [unique_id "ahO3I5NosGBa7mui3VTNzgAAAIY"]
[Mon May 25 10:42:44.445657 2026] [:error] [pid 62515:tid 62531] [client 35.88.192.252:51806] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/backend/.env"] [unique_id "ahO3JBig0_XsOwmnrv-KCAAAAM4"]
[Mon May 25 10:42:45.327271 2026] [:error] [pid 62722:tid 62733] [client 35.88.192.252:51820] [client 35.88.192.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfcau.windfarmcoolants.com.au"] [uri "/server/.env"] [unique_id "ahO3JaM6ssnLWYf6CVCVNwAAAEk"]
[Mon May 25 11:53:33.755827 2026] [:error] [pid 62428:tid 62505] [client 178.128.238.60:58069] [client 178.128.238.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.238.60, incrementing brute counter"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ahPHvZNosGBa7mui3VTc_gAAAJU"]
[Mon May 25 11:53:33.759936 2026] [:error] [pid 62428:tid 62505] [client 178.128.238.60:58069] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon May 25 18:31:37.245005 2026] [:error] [pid 62515:tid 62523] [client 20.226.32.254:48392] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Mon May 25 18:31:37.564456 2026] [:error] [pid 62515:tid 62526] [client 20.226.32.254:48392] File does not exist: /usr/local/apache/htdocs/suspended-page/casp1.php
[Mon May 25 18:31:37.878022 2026] [:error] [pid 62515:tid 62524] [client 20.226.32.254:48392] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Mon May 25 18:31:38.190945 2026] [:error] [pid 62515:tid 62527] [client 20.226.32.254:48392] File does not exist: /usr/local/apache/htdocs/suspended-page/koiy.php
[Mon May 25 18:31:38.514546 2026] [:error] [pid 62515:tid 62541] [client 20.226.32.254:48392] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Mon May 25 18:31:38.830334 2026] [:error] [pid 62515:tid 62517] [client 20.226.32.254:48392] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Mon May 25 18:31:39.146117 2026] [:error] [pid 62515:tid 62529] [client 20.226.32.254:48392] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Mon May 25 18:31:39.457989 2026] [:error] [pid 62515:tid 62528] [client 20.226.32.254:48392] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Mon May 25 18:31:39.772228 2026] [:error] [pid 62515:tid 62535] [client 20.226.32.254:48392] File does not exist: /usr/local/apache/htdocs/suspended-page/wxfyf.php
[Mon May 25 18:31:40.091844 2026] [:error] [pid 62515:tid 62540] [client 20.226.32.254:48392] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "ahQlDBig0_XsOwmnrv8WGgAAANc"]
[Mon May 25 18:31:42.770906 2026] [:error] [pid 62515:tid 62520] [client 20.226.32.254:23410] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "ahQlDhig0_XsOwmnrv8WHwAAAMM"]
[Mon May 25 18:31:44.668974 2026] [:error] [pid 62722:tid 62728] [client 20.226.32.254:29047] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "ahQlEKM6ssnLWYf6CVA5kAAAAEQ"]
[Mon May 25 18:31:49.775326 2026] [:error] [pid 62722:tid 62738] [client 20.226.32.254:47604] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "ahQlFaM6ssnLWYf6CVA5lgAAAE4"]
[Mon May 25 18:31:52.448682 2026] [:error] [pid 62515:tid 62528] [client 20.226.32.254:30962] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "ahQlGBig0_XsOwmnrv8WNQAAAMs"]
[Mon May 25 18:31:54.571625 2026] [:error] [pid 62515:tid 62519] [client 20.226.32.254:41600] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "ahQlGhig0_XsOwmnrv8WOgAAAMI"]
[Mon May 25 18:31:56.187430 2026] [:error] [pid 62515:tid 62528] [client 20.226.32.254:48114] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "ahQlHBig0_XsOwmnrv8WPQAAAMs"]
[Mon May 25 18:31:58.450721 2026] [:error] [pid 62515:tid 62539] [client 20.226.32.254:18591] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "ahQlHhig0_XsOwmnrv8WSwAAANY"]
[Mon May 25 18:32:01.475458 2026] [:error] [pid 62515:tid 62528] [client 20.226.32.254:52099] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/ws49.php"] [unique_id "ahQlIRig0_XsOwmnrv8WVgAAAMs"]
[Mon May 25 18:32:04.207469 2026] [:error] [pid 62515:tid 62527] [client 20.226.32.254:55987] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/ws49.php"] [unique_id "ahQlJBig0_XsOwmnrv8WXgAAAMo"]
[Mon May 25 18:32:05.641847 2026] [:error] [pid 62515:tid 62530] [client 20.226.32.254:20511] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/ws49.php"] [unique_id "ahQlJRig0_XsOwmnrv8WYQAAAM0"]
[Mon May 25 18:32:06.734090 2026] [:error] [pid 53791:tid 53793] [client 20.226.32.254:20505] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/public/ws49.php"] [unique_id "ahQlJiCRhhNTD40Nf1UEvgAAAYA"]
[Mon May 25 18:32:08.269724 2026] [:error] [pid 62428:tid 62507] [client 20.226.32.254:55961] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ahQlKJNosGBa7mui3VQv3AAAAJc"]
[Mon May 25 18:32:10.144840 2026] [:error] [pid 3698:tid 3713] [client 20.226.32.254:20480] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ahQlKgtZBEwA4fyFLKPc6gAAAQ0"]
[Mon May 25 18:32:11.685562 2026] [:error] [pid 62428:tid 62490] [client 20.226.32.254:42658] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ahQlK5NosGBa7mui3VQv3gAAAIY"]
[Mon May 25 18:32:13.859020 2026] [:error] [pid 53791:tid 53814] [client 20.226.32.254:6135] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ahQlLSCRhhNTD40Nf1UExQAAAZU"]
[Mon May 25 18:32:15.650368 2026] [:error] [pid 62428:tid 62500] [client 20.226.32.254:29629] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxw.php"] [unique_id "ahQlL5NosGBa7mui3VQv6QAAAJA"]
[Mon May 25 18:32:18.619590 2026] [:error] [pid 62722:tid 62747] [client 20.226.32.254:29578] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxw.php"] [unique_id "ahQlMqM6ssnLWYf6CVA5tQAAAFc"]
[Mon May 25 18:32:20.230839 2026] [:error] [pid 53791:tid 53815] [client 20.226.32.254:19543] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxw.php"] [unique_id "ahQlNCCRhhNTD40Nf1UEygAAAZY"]
[Mon May 25 18:32:22.568522 2026] [:error] [pid 62426:tid 62448] [client 20.226.32.254:17127] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xxw.php"] [unique_id "ahQlNkj3D3Mo8ANpTRDjBgAAABI"]
[Mon May 25 18:32:29.469184 2026] [:error] [pid 62428:tid 62485] [client 20.226.32.254:28389] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amwxl.php"] [unique_id "ahQlPZNosGBa7mui3VQv-AAAAIE"]
[Mon May 25 18:32:33.080644 2026] [:error] [pid 62722:tid 62725] [client 20.226.32.254:27238] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amwxl.php"] [unique_id "ahQlQaM6ssnLWYf6CVA5ugAAAEE"]
[Mon May 25 18:32:35.087166 2026] [:error] [pid 62428:tid 62494] [client 20.226.32.254:17080] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amwxl.php"] [unique_id "ahQlQ5NosGBa7mui3VQv-gAAAIo"]
[Mon May 25 18:32:36.810620 2026] [:error] [pid 53791:tid 53805] [client 20.226.32.254:6549] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/amwxl.php"] [unique_id "ahQlRCCRhhNTD40Nf1UE2QAAAYw"]
[Mon May 25 18:32:38.212311 2026] [:error] [pid 53791:tid 53815] [client 20.226.32.254:6413] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ahQlRiCRhhNTD40Nf1UE3QAAAZY"]
[Mon May 25 18:32:40.570648 2026] [:error] [pid 3698:tid 3718] [client 20.226.32.254:18950] File does not exist: /usr/local/apache/htdocs/suspended-page/ws83.php
[Mon May 25 18:32:41.240093 2026] [:error] [pid 3698:tid 3714] [client 20.226.32.254:18950] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Mon May 25 18:32:41.563978 2026] [:error] [pid 3698:tid 3703] [client 20.226.32.254:18950] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-104.php
[Mon May 25 18:32:41.877090 2026] [:error] [pid 3698:tid 3704] [client 20.226.32.254:18950] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Mon May 25 18:32:42.206860 2026] [:error] [pid 3698:tid 3723] [client 20.226.32.254:18950] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Mon May 25 18:32:42.518787 2026] [:error] [pid 3698:tid 3706] [client 20.226.32.254:18950] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Mon May 25 18:32:42.832177 2026] [:error] [pid 3698:tid 3717] [client 20.226.32.254:18950] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon May 25 18:32:43.143929 2026] [:error] [pid 3698:tid 3724] [client 20.226.32.254:18950] File does not exist: /usr/local/apache/htdocs/suspended-page/5b9ac.php
[Mon May 25 18:32:43.458741 2026] [:error] [pid 3698:tid 3711] [client 20.226.32.254:18950] File does not exist: /usr/local/apache/htdocs/suspended-page/tool.php
[Mon May 25 18:32:43.770696 2026] [:error] [pid 3698:tid 3722] [client 20.226.32.254:18950] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Mon May 25 18:32:44.079808 2026] [:error] [pid 3698:tid 3707] [client 20.226.32.254:18950] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "ahQlTAtZBEwA4fyFLKPdDAAAAQc"]
[Mon May 25 18:32:45.480049 2026] [:error] [pid 62427:tid 62458] [client 20.226.32.254:44330] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "ahQlTfMUa83fc4GDyBxuhAAAAUE"]
[Mon May 25 18:32:46.503606 2026] [:error] [pid 62722:tid 62736] [client 20.226.32.254:31888] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "ahQlTqM6ssnLWYf6CVA5xAAAAEw"]
[Mon May 25 18:32:48.128190 2026] [:error] [pid 62428:tid 62493] [client 20.226.32.254:41146] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "ahQlUJNosGBa7mui3VQwEgAAAIk"]
[Mon May 25 18:32:48.972197 2026] [:error] [pid 53791:tid 53810] [client 20.226.32.254:43829] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "ahQlUCCRhhNTD40Nf1UE6AAAAZE"]
[Mon May 25 18:32:50.039695 2026] [:error] [pid 62722:tid 62725] [client 20.226.32.254:6436] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "ahQlUqM6ssnLWYf6CVA5xgAAAEE"]
[Mon May 25 18:32:50.855272 2026] [:error] [pid 62722:tid 62733] [client 20.226.32.254:44300] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "ahQlUqM6ssnLWYf6CVA5yQAAAEk"]
[Mon May 25 18:32:52.262816 2026] [:error] [pid 62722:tid 62735] [client 20.226.32.254:6402] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "ahQlVKM6ssnLWYf6CVA5zgAAAEs"]
[Mon May 25 18:32:53.571448 2026] [:error] [pid 62426:tid 62433] [client 20.226.32.254:6040] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "ahQlVUj3D3Mo8ANpTRDjJAAAAAM"]
[Mon May 25 18:32:54.946623 2026] [:error] [pid 62427:tid 62463] [client 20.226.32.254:6455] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "ahQlVvMUa83fc4GDyBxuhwAAAUY"]
[Mon May 25 18:32:55.763002 2026] [:error] [pid 62515:tid 62529] [client 20.226.32.254:41108] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "ahQlVxig0_XsOwmnrv8WgAAAAMw"]
[Mon May 25 18:32:56.966607 2026] [:error] [pid 62428:tid 62493] [client 20.226.32.254:35316] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "ahQlWJNosGBa7mui3VQwGAAAAIk"]
[Mon May 25 18:32:58.822970 2026] [:error] [pid 62722:tid 62742] [client 20.226.32.254:6039] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "ahQlWqM6ssnLWYf6CVA5zwAAAFI"]
[Mon May 25 18:33:01.628131 2026] [:error] [pid 3698:tid 3717] [client 20.226.32.254:6067] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "ahQlXQtZBEwA4fyFLKPdIQAAARE"]
[Mon May 25 18:33:02.867321 2026] [:error] [pid 62428:tid 62488] [client 20.226.32.254:44321] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "ahQlXpNosGBa7mui3VQwHAAAAIQ"]
[Mon May 25 18:33:04.638756 2026] [:error] [pid 62722:tid 62746] [client 20.226.32.254:33244] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "ahQlYKM6ssnLWYf6CVA51gAAAFY"]
[Mon May 25 18:33:07.400641 2026] [:error] [pid 62428:tid 62500] [client 20.226.32.254:6052] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "ahQlY5NosGBa7mui3VQwJQAAAJA"]
[Mon May 25 18:33:10.903033 2026] [:error] [pid 62722:tid 62746] [client 20.226.32.254:6058] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "ahQlZqM6ssnLWYf6CVA54gAAAFY"]
[Mon May 25 18:33:12.555839 2026] [:error] [pid 62426:tid 62435] [client 20.226.32.254:35283] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "ahQlaEj3D3Mo8ANpTRDjTAAAAAU"]
[Mon May 25 18:33:15.033384 2026] [:error] [pid 62426:tid 62443] [client 20.226.32.254:24608] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "ahQla0j3D3Mo8ANpTRDjUQAAAA0"]
[Mon May 25 18:33:15.923530 2026] [:error] [pid 3698:tid 3705] [client 20.226.32.254:32698] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "ahQlawtZBEwA4fyFLKPdMwAAAQU"]
[Mon May 25 18:33:18.152651 2026] [:error] [pid 62427:tid 62476] [client 20.226.32.254:43250] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "ahQlbvMUa83fc4GDyBxujAAAAVM"]
[Mon May 25 18:33:20.404406 2026] [:error] [pid 62428:tid 62496] [client 20.226.32.254:53151] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "ahQlcJNosGBa7mui3VQwKQAAAIw"]
[Mon May 25 18:33:23.266290 2026] [:error] [pid 62428:tid 62494] [client 20.226.32.254:32655] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "ahQlc5NosGBa7mui3VQwKgAAAIo"]
[Mon May 25 18:33:24.411328 2026] [:error] [pid 62428:tid 62501] [client 20.226.32.254:43253] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "ahQldJNosGBa7mui3VQwLAAAAJE"]
[Mon May 25 18:33:26.421532 2026] [:error] [pid 62428:tid 62499] [client 20.226.32.254:24585] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "ahQldpNosGBa7mui3VQwLwAAAI8"]
[Mon May 25 18:33:27.814169 2026] [:error] [pid 62427:tid 62480] [client 20.226.32.254:32293] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "ahQld_MUa83fc4GDyBxujgAAAVc"]
[Mon May 25 18:33:30.337795 2026] [:error] [pid 62722:tid 62725] [client 20.226.32.254:43210] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "ahQleqM6ssnLWYf6CVA59AAAAEE"]
[Mon May 25 18:33:32.564813 2026] [:error] [pid 62515:tid 62533] [client 20.226.32.254:49889] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/csv.php"] [unique_id "ahQlfBig0_XsOwmnrv8WrQAAANA"]
[Mon May 25 18:33:36.892386 2026] [:error] [pid 62515:tid 62530] [client 20.226.32.254:32693] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/csv.php"] [unique_id "ahQlgBig0_XsOwmnrv8WtQAAAM0"]
[Mon May 25 18:33:38.565430 2026] [:error] [pid 62515:tid 62526] [client 20.226.32.254:49860] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/csv.php"] [unique_id "ahQlghig0_XsOwmnrv8WvAAAAMk"]
[Mon May 25 18:33:40.196251 2026] [:error] [pid 62515:tid 62522] [client 20.226.32.254:32275] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/csv.php"] [unique_id "ahQlhBig0_XsOwmnrv8WwAAAAMU"]
[Mon May 25 18:33:41.480676 2026] [:error] [pid 62515:tid 62530] [client 20.226.32.254:32354] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ahQlhRig0_XsOwmnrv8WxAAAAM0"]
[Mon May 25 18:33:42.547618 2026] [:error] [pid 62426:tid 62434] [client 20.226.32.254:32262] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ahQlhkj3D3Mo8ANpTRDjeAAAAAQ"]
[Mon May 25 18:33:43.707819 2026] [:error] [pid 62427:tid 62479] [client 20.226.32.254:31981] File does not exist: /usr/local/apache/htdocs/suspended-page/n3yUmQ6Q9xwQ8ocdefault.php
[Mon May 25 18:33:44.021705 2026] [:error] [pid 62427:tid 62459] [client 20.226.32.254:31981] File does not exist: /usr/local/apache/htdocs/suspended-page/ne2026.php
[Mon May 25 18:33:44.333828 2026] [:error] [pid 62427:tid 62463] [client 20.226.32.254:31981] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Mon May 25 18:33:44.648490 2026] [:error] [pid 62427:tid 62481] [client 20.226.32.254:31981] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Mon May 25 18:33:44.960858 2026] [:error] [pid 62427:tid 62462] [client 20.226.32.254:31981] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Mon May 25 18:33:45.731567 2026] [:error] [pid 62427:tid 62475] [client 20.226.32.254:31981] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Mon May 25 18:33:46.043409 2026] [:error] [pid 62427:tid 62468] [client 20.226.32.254:31981] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Mon May 25 18:33:46.360309 2026] [:error] [pid 62427:tid 62466] [client 20.226.32.254:31981] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Mon May 25 18:33:46.672932 2026] [:error] [pid 62427:tid 62477] [client 20.226.32.254:31981] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Mon May 25 18:33:46.994706 2026] [:error] [pid 62427:tid 62473] [client 20.226.32.254:31981] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Mon May 25 18:33:47.311792 2026] [:error] [pid 62427:tid 62470] [client 20.226.32.254:31981] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Mon May 25 18:33:47.623524 2026] [:error] [pid 62427:tid 62476] [client 20.226.32.254:31981] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ahQli_MUa83fc4GDyBxunAAAAVM"]
[Mon May 25 18:33:49.794496 2026] [:error] [pid 53791:tid 53798] [client 20.226.32.254:30312] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ahQljSCRhhNTD40Nf1UFEAAAAYU"]
[Mon May 25 18:33:51.729765 2026] [:error] [pid 62426:tid 62444] [client 20.226.32.254:31994] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ahQlj0j3D3Mo8ANpTRDjjQAAAA4"]
[Mon May 25 18:33:54.216519 2026] [:error] [pid 62427:tid 62467] [client 20.226.32.254:32297] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ahQlkvMUa83fc4GDyBxunwAAAUo"]
[Mon May 25 18:33:56.268579 2026] [:error] [pid 53791:tid 53806] [client 20.226.32.254:43212] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "ahQllCCRhhNTD40Nf1UFEwAAAY0"]
[Mon May 25 18:33:58.095337 2026] [:error] [pid 62515:tid 62532] [client 20.226.32.254:47054] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "ahQllhig0_XsOwmnrv8W0QAAAM8"]
[Mon May 25 18:33:59.958633 2026] [:error] [pid 62515:tid 62524] [client 20.226.32.254:32324] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "ahQllxig0_XsOwmnrv8W1AAAAMc"]
[Mon May 25 18:34:01.641986 2026] [:error] [pid 53791:tid 53817] [client 20.226.32.254:32372] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "ahQlmSCRhhNTD40Nf1UFFgAAAZg"]
[Mon May 25 18:34:03.658750 2026] [:error] [pid 62722:tid 62735] [client 20.226.32.254:32281] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "ahQlm6M6ssnLWYf6CVA5_wAAAEs"]
[Mon May 25 18:34:05.142826 2026] [:error] [pid 62515:tid 62535] [client 20.226.32.254:25124] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "ahQlnRig0_XsOwmnrv8W3wAAANI"]
[Mon May 25 18:34:08.901071 2026] [:error] [pid 62426:tid 62449] [client 20.226.32.254:43259] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "ahQloEj3D3Mo8ANpTRDjnwAAABM"]
[Mon May 25 18:34:11.008604 2026] [:error] [pid 62426:tid 62441] [client 20.226.32.254:25088] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "ahQlo0j3D3Mo8ANpTRDjowAAAAs"]
[Mon May 25 18:34:12.525917 2026] [:error] [pid 62722:tid 62747] [client 20.226.32.254:21579] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "ahQlpKM6ssnLWYf6CVA6BAAAAFc"]
[Mon May 25 18:34:14.000411 2026] [:error] [pid 62426:tid 62442] [client 20.226.32.254:35266] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "ahQlpUj3D3Mo8ANpTRDjrgAAAAw"]
[Mon May 25 18:34:15.285025 2026] [:error] [pid 62426:tid 62452] [client 20.226.32.254:31360] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "ahQlp0j3D3Mo8ANpTRDjswAAABY"]
[Mon May 25 18:34:16.675269 2026] [:error] [pid 3698:tid 3703] [client 20.226.32.254:16594] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "ahQlqAtZBEwA4fyFLKPdSQAAAQM"]
[Mon May 25 18:34:18.222856 2026] [:error] [pid 62426:tid 62451] [client 20.226.32.254:31986] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "ahQlqkj3D3Mo8ANpTRDjtwAAABU"]
[Mon May 25 18:34:19.872152 2026] [:error] [pid 62426:tid 62445] [client 20.226.32.254:24622] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "ahQlq0j3D3Mo8ANpTRDjugAAAA8"]
[Mon May 25 18:34:22.256373 2026] [:error] [pid 62426:tid 62442] [client 20.226.32.254:53120] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "ahQlrkj3D3Mo8ANpTRDjvwAAAAw"]
[Mon May 25 18:34:23.399752 2026] [:error] [pid 62515:tid 62521] [client 20.226.32.254:31401] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "ahQlrxig0_XsOwmnrv8W7AAAAMQ"]
[Mon May 25 18:34:25.674694 2026] [:error] [pid 62515:tid 62531] [client 20.226.32.254:32305] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shop.php"] [unique_id "ahQlsRig0_XsOwmnrv8W7wAAAM4"]
[Mon May 25 18:34:28.082566 2026] [:error] [pid 62426:tid 62439] [client 20.226.32.254:25127] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shop.php"] [unique_id "ahQltEj3D3Mo8ANpTRDjwwAAAAk"]
[Mon May 25 18:34:29.744342 2026] [:error] [pid 62515:tid 62526] [client 20.226.32.254:21570] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shop.php"] [unique_id "ahQltRig0_XsOwmnrv8W9QAAAMk"]
[Mon May 25 18:34:33.177950 2026] [:error] [pid 62426:tid 62444] [client 20.226.32.254:25133] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/shop.php"] [unique_id "ahQluUj3D3Mo8ANpTRDjyAAAAA4"]
[Mon May 25 18:34:35.491081 2026] [:error] [pid 3698:tid 3700] [client 20.226.32.254:31992] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maul.php"] [unique_id "ahQluwtZBEwA4fyFLKPdVAAAAQA"]
[Mon May 25 18:34:36.348199 2026] [:error] [pid 62515:tid 62525] [client 20.226.32.254:6875] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maul.php"] [unique_id "ahQlvBig0_XsOwmnrv8W-QAAAMg"]
[Mon May 25 18:34:37.893573 2026] [:error] [pid 62515:tid 62518] [client 20.226.32.254:29686] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maul.php"] [unique_id "ahQlvRig0_XsOwmnrv8W_AAAAME"]
[Mon May 25 18:34:40.088057 2026] [:error] [pid 62515:tid 62535] [client 20.226.32.254:53171] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/maul.php"] [unique_id "ahQlwBig0_XsOwmnrv8XAgAAANI"]
[Mon May 25 18:34:41.867559 2026] [:error] [pid 3698:tid 3718] [client 20.226.32.254:6708] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "ahQlwQtZBEwA4fyFLKPdVgAAARI"]
[Mon May 25 18:34:43.534477 2026] [:error] [pid 62427:tid 62474] [client 20.226.32.254:27742] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "ahQlw_MUa83fc4GDyBxutAAAAVE"]
[Mon May 25 18:34:45.500545 2026] [:error] [pid 62722:tid 62727] [client 20.226.32.254:19570] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "ahQlxaM6ssnLWYf6CVA6IwAAAEM"]
[Mon May 25 18:34:47.727967 2026] [:error] [pid 62515:tid 62539] [client 20.226.32.254:27248] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Mon May 25 18:34:50.038957 2026] [:error] [pid 62515:tid 62539] [client 20.226.32.254:27248] [client 20.226.32.254] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "57.141.14.112_bb694759cd2c22a01c1316c1c32e166b75850636"): Internal error (specific information not available) [hostname "windfcau.windfarmcoolants.com.au"] [uri "/index.html"] [unique_id "ahQlxxig0_XsOwmnrv8XCQAAANY"]
[Mon May 25 18:34:50.043265 2026] [:error] [pid 62515:tid 62539] [client 20.226.32.254:27248] File does not exist: /usr/local/apache/htdocs/suspended-page/bjfl.php
[Mon May 25 18:34:50.369532 2026] [:error] [pid 62515:tid 62531] [client 20.226.32.254:27248] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Mon May 25 18:34:50.684367 2026] [:error] [pid 62515:tid 62523] [client 20.226.32.254:27248] File does not exist: /usr/local/apache/htdocs/suspended-page/lowpr.php
[Mon May 25 18:34:50.995999 2026] [:error] [pid 62515:tid 62537] [client 20.226.32.254:27248] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Mon May 25 18:34:51.330833 2026] [:error] [pid 62515:tid 62518] [client 20.226.32.254:27248] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Mon May 25 18:34:51.642202 2026] [:error] [pid 62515:tid 62525] [client 20.226.32.254:27248] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Mon May 25 18:34:51.969133 2026] [:error] [pid 62515:tid 62528] [client 20.226.32.254:27248] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Mon May 25 18:34:52.280563 2026] [:error] [pid 62515:tid 62541] [client 20.226.32.254:27248] File does not exist: /usr/local/apache/htdocs/suspended-page/gk.php
[Mon May 25 18:34:52.593379 2026] [:error] [pid 62515:tid 62524] [client 20.226.32.254:27248] File does not exist: /usr/local/apache/htdocs/suspended-page/varb.php
[Mon May 25 18:34:53.219706 2026] [:error] [pid 62515:tid 62536] [client 20.226.32.254:27248] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ahQlzRig0_XsOwmnrv8XGwAAANM"]
[Mon May 25 18:34:55.218726 2026] [:error] [pid 62427:tid 62469] [client 20.226.32.254:28315] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ahQlz_MUa83fc4GDyBxuvAAAAUw"]
[Mon May 25 18:34:57.286099 2026] [:error] [pid 62722:tid 62732] [client 20.226.32.254:26716] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ahQl0aM6ssnLWYf6CVA6MQAAAEg"]
[Mon May 25 18:34:59.870984 2026] [:error] [pid 53791:tid 53810] [client 20.226.32.254:6495] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ahQl0yCRhhNTD40Nf1UFIAAAAZE"]
[Mon May 25 18:35:03.247546 2026] [:error] [pid 62515:tid 62533] [client 20.226.32.254:36552] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "ahQl1xig0_XsOwmnrv8XKgAAANA"]
[Mon May 25 18:35:04.080826 2026] [:error] [pid 62515:tid 62519] [client 20.226.32.254:23359] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "ahQl2Big0_XsOwmnrv8XKwAAAMI"]
[Mon May 25 18:35:04.747320 2026] [:error] [pid 62515:tid 62526] [client 20.226.32.254:41056] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "ahQl2Big0_XsOwmnrv8XLQAAAMk"]
[Mon May 25 18:35:08.280422 2026] [:error] [pid 53791:tid 53804] [client 20.226.32.254:39242] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "ahQl3CCRhhNTD40Nf1UFJAAAAYs"]
[Mon May 25 18:35:10.272721 2026] [:error] [pid 3698:tid 3700] [client 20.226.32.254:39293] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ahQl3gtZBEwA4fyFLKPdbwAAAQA"]
[Mon May 25 18:35:12.781698 2026] [:error] [pid 53791:tid 53797] [client 20.226.32.254:25184] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ahQl4CCRhhNTD40Nf1UFJgAAAYQ"]
[Mon May 25 18:35:14.503504 2026] [:error] [pid 3698:tid 3713] [client 20.226.32.254:47036] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ahQl4gtZBEwA4fyFLKPddQAAAQ0"]
[Mon May 25 18:35:15.598453 2026] [:error] [pid 62426:tid 62436] [client 20.226.32.254:34332] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ahQl40j3D3Mo8ANpTRDj5gAAAAY"]
[Mon May 25 18:35:16.539032 2026] [:error] [pid 62426:tid 62437] [client 20.226.32.254:6295] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "ahQl5Ej3D3Mo8ANpTRDj7AAAAAc"]
[Mon May 25 18:35:18.636578 2026] [:error] [pid 62722:tid 62743] [client 20.226.32.254:39243] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "ahQl5qM6ssnLWYf6CVA6OwAAAFM"]
[Mon May 25 18:35:20.074038 2026] [:error] [pid 62722:tid 62725] [client 20.226.32.254:35227] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "ahQl6KM6ssnLWYf6CVA6PQAAAEE"]
[Mon May 25 18:35:21.345226 2026] [:error] [pid 62428:tid 62501] [client 20.226.32.254:25166] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "ahQl6ZNosGBa7mui3VQwZgAAAJE"]
[Mon May 25 18:35:22.352846 2026] [:error] [pid 62515:tid 62523] [client 20.226.32.254:37078] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ahQl6hig0_XsOwmnrv8XOgAAAMY"]
[Mon May 25 18:35:24.048099 2026] [:error] [pid 3698:tid 3710] [client 20.226.32.254:20995] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ahQl7AtZBEwA4fyFLKPdeAAAAQo"]
[Mon May 25 18:35:25.501489 2026] [:error] [pid 53791:tid 53811] [client 20.226.32.254:6944] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ahQl7SCRhhNTD40Nf1UFMAAAAZI"]
[Mon May 25 18:35:27.880416 2026] [:error] [pid 62427:tid 62476] [client 20.226.32.254:6607] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ahQl7_MUa83fc4GDyBxuzQAAAVM"]
[Mon May 25 18:35:31.170575 2026] [:error] [pid 3698:tid 3700] [client 20.226.32.254:57025] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws60.php"] [unique_id "ahQl8wtZBEwA4fyFLKPdfwAAAQA"]
[Mon May 25 18:35:33.754080 2026] [:error] [pid 62722:tid 62745] [client 20.226.32.254:20998] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws60.php"] [unique_id "ahQl9aM6ssnLWYf6CVA6QgAAAFU"]
[Mon May 25 18:35:35.950205 2026] [:error] [pid 62426:tid 62446] [client 20.226.32.254:21039] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws60.php"] [unique_id "ahQl90j3D3Mo8ANpTRDj-wAAABA"]
[Mon May 25 18:35:37.461221 2026] [:error] [pid 62722:tid 62731] [client 20.226.32.254:26692] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws60.php"] [unique_id "ahQl-aM6ssnLWYf6CVA6RAAAAEc"]
[Mon May 25 18:35:38.959806 2026] [:error] [pid 53791:tid 53794] [client 20.226.32.254:36036] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "ahQl-iCRhhNTD40Nf1UFOAAAAYE"]
[Mon May 25 18:35:40.398922 2026] [:error] [pid 62427:tid 62468] [client 20.226.32.254:39369] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "ahQl_PMUa83fc4GDyBxu3AAAAUs"]
[Mon May 25 18:35:41.597370 2026] [:error] [pid 3698:tid 3714] [client 20.226.32.254:62026] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "ahQl_QtZBEwA4fyFLKPdhwAAAQ4"]
[Mon May 25 18:35:43.570757 2026] [:error] [pid 62426:tid 62452] [client 20.226.32.254:38085] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "ahQl_0j3D3Mo8ANpTRDj_wAAABY"]
[Mon May 25 18:35:44.528745 2026] [:error] [pid 3698:tid 3708] [client 20.226.32.254:26743] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ahQmAAtZBEwA4fyFLKPdkAAAAQg"]
[Mon May 25 18:35:45.504858 2026] [:error] [pid 3698:tid 3710] [client 20.226.32.254:6593] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ahQmAQtZBEwA4fyFLKPdkwAAAQo"]
[Mon May 25 18:35:46.534857 2026] [:error] [pid 62426:tid 62447] [client 20.226.32.254:39406] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ahQmAkj3D3Mo8ANpTRDkAAAAABE"]
[Mon May 25 18:35:47.804027 2026] [:error] [pid 62722:tid 62735] [client 20.226.32.254:62033] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ahQmA6M6ssnLWYf6CVA6TAAAAEs"]
[Mon May 25 18:35:51.829870 2026] [:error] [pid 62426:tid 62437] [client 20.226.32.254:39381] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "ahQmB0j3D3Mo8ANpTRDkBQAAAAc"]
[Mon May 25 18:35:53.857616 2026] [:error] [pid 62427:tid 62472] [client 20.226.32.254:39379] File does not exist: /usr/local/apache/htdocs/suspended-page/G-In.php
[Mon May 25 18:35:54.495330 2026] [:error] [pid 62427:tid 62465] [client 20.226.32.254:39379] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Mon May 25 18:35:54.814254 2026] [:error] [pid 62427:tid 62468] [client 20.226.32.254:39379] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Mon May 25 18:35:55.125956 2026] [:error] [pid 62427:tid 62457] [client 20.226.32.254:39379] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Mon May 25 18:35:55.437851 2026] [:error] [pid 62427:tid 62473] [client 20.226.32.254:39379] File does not exist: /usr/local/apache/htdocs/suspended-page/buc.php
[Mon May 25 18:35:55.757615 2026] [:error] [pid 62427:tid 62477] [client 20.226.32.254:39379] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Mon May 25 18:35:56.071438 2026] [:error] [pid 62427:tid 62469] [client 20.226.32.254:39379] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Mon May 25 18:35:56.383792 2026] [:error] [pid 62427:tid 62474] [client 20.226.32.254:39379] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Mon May 25 18:35:56.694770 2026] [:error] [pid 62427:tid 62461] [client 20.226.32.254:39379] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Mon May 25 18:35:57.506120 2026] [:error] [pid 62427:tid 62470] [client 20.226.32.254:39379] File does not exist: /usr/local/apache/htdocs/suspended-page/155.php
[Mon May 25 18:35:57.834991 2026] [:error] [pid 62427:tid 62479] [client 20.226.32.254:39379] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "ahQmDfMUa83fc4GDyBxu8AAAAVY"]
[Mon May 25 18:35:59.147446 2026] [:error] [pid 62428:tid 62499] [client 20.226.32.254:34916] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "ahQmD5NosGBa7mui3VQwcAAAAI8"]
[Mon May 25 18:36:00.491676 2026] [:error] [pid 3698:tid 3723] [client 20.226.32.254:41046] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "ahQmEAtZBEwA4fyFLKPdmQAAARc"]
[Mon May 25 18:36:01.494890 2026] [:error] [pid 3698:tid 3717] [client 20.226.32.254:34912] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "ahQmEQtZBEwA4fyFLKPdmgAAARE"]
[Mon May 25 18:36:03.082929 2026] [:error] [pid 62426:tid 62445] [client 20.226.32.254:37004] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "ahQmE0j3D3Mo8ANpTRDkCAAAAA8"]
[Mon May 25 18:36:06.153781 2026] [:error] [pid 62515:tid 62537] [client 20.226.32.254:62613] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "ahQmFhig0_XsOwmnrv8XTAAAANQ"]
[Mon May 25 18:36:07.990430 2026] [:error] [pid 62515:tid 62520] [client 20.226.32.254:62552] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "ahQmFxig0_XsOwmnrv8XUQAAAMM"]
[Mon May 25 18:36:09.270545 2026] [:error] [pid 62722:tid 62747] [client 20.226.32.254:22750] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "ahQmGaM6ssnLWYf6CVA6WgAAAFc"]
[Mon May 25 18:36:10.253838 2026] [:error] [pid 62722:tid 62739] [client 20.226.32.254:47540] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ahQmGqM6ssnLWYf6CVA6XQAAAE8"]
[Mon May 25 18:36:10.905522 2026] [:error] [pid 62426:tid 62452] [client 20.226.32.254:47529] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ahQmGkj3D3Mo8ANpTRDkDwAAABY"]
[Mon May 25 18:36:12.636273 2026] [:error] [pid 62722:tid 62744] [client 20.226.32.254:30933] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ahQmHKM6ssnLWYf6CVA6XgAAAFQ"]
[Mon May 25 18:36:13.569291 2026] [:error] [pid 62515:tid 62525] [client 20.226.32.254:47495] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ahQmHRig0_XsOwmnrv8XWQAAAMg"]
[Mon May 25 18:36:14.926570 2026] [:error] [pid 62515:tid 62537] [client 20.226.32.254:41645] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/users.php"] [unique_id "ahQmHhig0_XsOwmnrv8XWwAAANQ"]
[Mon May 25 18:36:17.792206 2026] [:error] [pid 62426:tid 62437] [client 20.226.32.254:19055] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/users.php"] [unique_id "ahQmIUj3D3Mo8ANpTRDkEwAAAAc"]
[Mon May 25 18:36:19.700791 2026] [:error] [pid 53791:tid 53811] [client 20.226.32.254:20500] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/users.php"] [unique_id "ahQmIyCRhhNTD40Nf1UFUQAAAZI"]
[Mon May 25 18:36:21.423388 2026] [:error] [pid 3698:tid 3723] [client 20.226.32.254:30943] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/users.php"] [unique_id "ahQmJQtZBEwA4fyFLKPdoQAAARc"]
[Mon May 25 18:36:22.399376 2026] [:error] [pid 3698:tid 3716] [client 20.226.32.254:6490] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ahQmJgtZBEwA4fyFLKPdowAAARA"]
[Mon May 25 18:36:24.216728 2026] [:error] [pid 53791:tid 53798] [client 20.226.32.254:52100] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ahQmKCCRhhNTD40Nf1UFVQAAAYU"]
[Mon May 25 18:36:25.287475 2026] [:error] [pid 62426:tid 62451] [client 20.226.32.254:20521] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ahQmKUj3D3Mo8ANpTRDkGQAAABU"]
[Mon May 25 18:36:27.616343 2026] [:error] [pid 62428:tid 62497] [client 20.226.32.254:47605] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ahQmK5NosGBa7mui3VQwfAAAAI0"]
[Mon May 25 18:36:29.075726 2026] [:error] [pid 53791:tid 53806] [client 20.226.32.254:30238] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ahQmLSCRhhNTD40Nf1UFWAAAAY0"]
[Mon May 25 18:36:30.766261 2026] [:error] [pid 62427:tid 62462] [client 20.226.32.254:20555] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ahQmLvMUa83fc4GDyBxu-AAAAUU"]
[Mon May 25 18:36:32.271408 2026] [:error] [pid 62515:tid 62532] [client 20.226.32.254:37513] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ahQmMBig0_XsOwmnrv8XaQAAAM8"]
[Mon May 25 18:36:33.966371 2026] [:error] [pid 62426:tid 62449] [client 20.226.32.254:52597] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ahQmMUj3D3Mo8ANpTRDkIwAAABM"]
[Mon May 25 18:36:36.382491 2026] [:error] [pid 53791:tid 53813] [client 20.226.32.254:19466] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ox.php"] [unique_id "ahQmNCCRhhNTD40Nf1UFWgAAAZQ"]
[Mon May 25 18:36:38.697531 2026] [:error] [pid 62426:tid 62439] [client 20.226.32.254:33795] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ox.php"] [unique_id "ahQmNkj3D3Mo8ANpTRDkKgAAAAk"]
[Mon May 25 18:36:43.557935 2026] [:error] [pid 62515:tid 62528] [client 20.226.32.254:19506] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ox.php"] [unique_id "ahQmOxig0_XsOwmnrv8XdwAAAMs"]
[Mon May 25 18:36:45.760028 2026] [:error] [pid 62428:tid 62501] [client 20.226.32.254:28339] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ox.php"] [unique_id "ahQmPZNosGBa7mui3VQwgAAAAJE"]
[Mon May 25 18:36:46.771134 2026] [:error] [pid 62515:tid 62517] [client 20.226.32.254:47586] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ahQmPhig0_XsOwmnrv8XegAAAMA"]
[Mon May 25 18:36:49.234902 2026] [:error] [pid 62722:tid 62732] [client 20.226.32.254:29042] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ahQmQaM6ssnLWYf6CVA6cAAAAEg"]
[Mon May 25 18:36:50.743494 2026] [:error] [pid 62426:tid 62453] [client 20.226.32.254:47595] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ahQmQkj3D3Mo8ANpTRDkOAAAABc"]
[Mon May 25 18:36:52.215445 2026] [:error] [pid 62515:tid 62523] [client 20.226.32.254:33803] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ahQmRBig0_XsOwmnrv8XiAAAAMY"]
[Mon May 25 18:36:53.884889 2026] [:error] [pid 62515:tid 62532] [client 20.226.32.254:48059] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drhunthq.php"] [unique_id "ahQmRRig0_XsOwmnrv8XjwAAAM8"]
[Mon May 25 18:36:54.930410 2026] [:error] [pid 62515:tid 62520] [client 20.226.32.254:33845] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drhunthq.php"] [unique_id "ahQmRhig0_XsOwmnrv8XkgAAAMM"]
[Mon May 25 18:36:56.570155 2026] [:error] [pid 53791:tid 53797] [client 20.226.32.254:53540] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/drhunthq.php"] [unique_id "ahQmSCCRhhNTD40Nf1UFXgAAAYQ"]
[Mon May 25 18:36:57.292911 2026] [:error] [pid 53791:tid 53794] [client 20.226.32.254:48000] File does not exist: /usr/local/apache/htdocs/suspended-page/drhunthq.php
[Mon May 25 18:36:57.614940 2026] [:error] [pid 53791:tid 53807] [client 20.226.32.254:48000] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Mon May 25 18:36:57.939301 2026] [:error] [pid 53791:tid 53808] [client 20.226.32.254:48000] File does not exist: /usr/local/apache/htdocs/suspended-page/clss.php
[Mon May 25 18:36:58.249283 2026] [:error] [pid 53791:tid 53796] [client 20.226.32.254:48000] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Mon May 25 18:36:58.562107 2026] [:error] [pid 53791:tid 53813] [client 20.226.32.254:48000] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Mon May 25 18:36:58.875655 2026] [:error] [pid 53791:tid 53812] [client 20.226.32.254:48000] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Mon May 25 18:36:59.227518 2026] [:error] [pid 53791:tid 53814] [client 20.226.32.254:48000] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Mon May 25 18:36:59.547548 2026] [:error] [pid 53791:tid 53798] [client 20.226.32.254:48000] File does not exist: /usr/local/apache/htdocs/suspended-page/bfil.php
[Mon May 25 18:36:59.996186 2026] [:error] [pid 53791:tid 53801] [client 20.226.32.254:48000] File does not exist: /usr/local/apache/htdocs/suspended-page/ww.php
[Mon May 25 18:37:00.308464 2026] [:error] [pid 53791:tid 53803] [client 20.226.32.254:48000] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Mon May 25 18:37:00.648398 2026] [:error] [pid 53791:tid 53795] [client 20.226.32.254:48000] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Mon May 25 18:37:00.958422 2026] [:error] [pid 53791:tid 53804] [client 20.226.32.254:48000] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "ahQmTCCRhhNTD40Nf1UFbgAAAYs"]
[Mon May 25 18:37:02.497332 2026] [:error] [pid 62722:tid 62740] [client 20.226.32.254:52116] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "ahQmTqM6ssnLWYf6CVA6eQAAAFA"]
[Mon May 25 18:37:03.928435 2026] [:error] [pid 62722:tid 62734] [client 20.226.32.254:30263] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "ahQmT6M6ssnLWYf6CVA6fAAAAEo"]
[Mon May 25 18:37:05.327331 2026] [:error] [pid 62722:tid 62739] [client 20.226.32.254:52558] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "ahQmUaM6ssnLWYf6CVA6fwAAAE8"]
[Mon May 25 18:37:06.127335 2026] [:error] [pid 62722:tid 62743] [client 20.226.32.254:52549] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa21.php"] [unique_id "ahQmUqM6ssnLWYf6CVA6gQAAAFM"]
[Mon May 25 18:37:07.829899 2026] [:error] [pid 62722:tid 62733] [client 20.226.32.254:43276] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa21.php"] [unique_id "ahQmU6M6ssnLWYf6CVA6iAAAAEk"]
[Mon May 25 18:37:08.799978 2026] [:error] [pid 62515:tid 62531] [client 20.226.32.254:29054] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa21.php"] [unique_id "ahQmVBig0_XsOwmnrv8XqQAAAM4"]
[Mon May 25 18:37:09.675598 2026] [:error] [pid 62722:tid 62731] [client 20.226.32.254:52865] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/aa21.php"] [unique_id "ahQmVaM6ssnLWYf6CVA6igAAAEc"]
[Mon May 25 18:37:10.879020 2026] [:error] [pid 3698:tid 3716] [client 20.226.32.254:63222] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/okxh.php"] [unique_id "ahQmVgtZBEwA4fyFLKPdugAAARA"]
[Mon May 25 18:37:13.126423 2026] [:error] [pid 62515:tid 62528] [client 20.226.32.254:63245] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/okxh.php"] [unique_id "ahQmWRig0_XsOwmnrv8XrAAAAMs"]
[Mon May 25 18:37:15.852720 2026] [:error] [pid 62428:tid 62498] [client 20.226.32.254:52924] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/okxh.php"] [unique_id "ahQmW5NosGBa7mui3VQwiAAAAI4"]
[Mon May 25 18:37:16.860965 2026] [:error] [pid 62428:tid 62491] [client 20.226.32.254:43836] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/okxh.php"] [unique_id "ahQmXJNosGBa7mui3VQwigAAAIc"]
[Mon May 25 18:37:20.430123 2026] [:error] [pid 62722:tid 62735] [client 20.226.32.254:63232] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "ahQmYKM6ssnLWYf6CVA6iwAAAEs"]
[Mon May 25 18:37:23.227301 2026] [:error] [pid 62426:tid 62435] [client 20.226.32.254:43297] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "ahQmY0j3D3Mo8ANpTRDkQgAAAAU"]
[Mon May 25 18:37:24.349512 2026] [:error] [pid 62426:tid 62434] [client 20.226.32.254:43729] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "ahQmZEj3D3Mo8ANpTRDkRQAAAAQ"]
[Mon May 25 18:37:26.441508 2026] [:error] [pid 62515:tid 62517] [client 20.226.32.254:43326] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "ahQmZhig0_XsOwmnrv8XvAAAAMA"]
[Mon May 25 18:37:28.260668 2026] [:error] [pid 3698:tid 3719] [client 20.226.32.254:55952] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fsjzs.php"] [unique_id "ahQmaAtZBEwA4fyFLKPdxQAAARM"]
[Mon May 25 18:37:29.877630 2026] [:error] [pid 62428:tid 62508] [client 20.226.32.254:55991] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fsjzs.php"] [unique_id "ahQmaZNosGBa7mui3VQwmQAAAJg"]
[Mon May 25 18:37:31.292393 2026] [:error] [pid 62428:tid 62505] [client 20.226.32.254:48486] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fsjzs.php"] [unique_id "ahQma5NosGBa7mui3VQwmwAAAJU"]
[Mon May 25 18:37:32.914888 2026] [:error] [pid 62428:tid 62494] [client 20.226.32.254:31964] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/fsjzs.php"] [unique_id "ahQmbJNosGBa7mui3VQwnAAAAIo"]
[Mon May 25 18:37:34.326000 2026] [:error] [pid 62426:tid 62442] [client 20.226.32.254:52926] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sale.php"] [unique_id "ahQmbkj3D3Mo8ANpTRDkTQAAAAw"]
[Mon May 25 18:37:35.280557 2026] [:error] [pid 62426:tid 62441] [client 20.226.32.254:43832] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sale.php"] [unique_id "ahQmb0j3D3Mo8ANpTRDkTwAAAAs"]
[Mon May 25 18:37:36.367793 2026] [:error] [pid 62722:tid 62737] [client 20.226.32.254:49793] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sale.php"] [unique_id "ahQmcKM6ssnLWYf6CVA6kwAAAE0"]
[Mon May 25 18:37:37.352307 2026] [:error] [pid 62722:tid 62747] [client 20.226.32.254:23413] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/sale.php"] [unique_id "ahQmcaM6ssnLWYf6CVA6mQAAAFc"]
[Mon May 25 18:37:38.551298 2026] [:error] [pid 62722:tid 62732] [client 20.226.32.254:41002] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t00l.php"] [unique_id "ahQmcqM6ssnLWYf6CVA6ngAAAEg"]
[Mon May 25 18:37:39.528033 2026] [:error] [pid 62722:tid 62741] [client 20.226.32.254:43727] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t00l.php"] [unique_id "ahQmc6M6ssnLWYf6CVA6nwAAAFE"]
[Mon May 25 18:37:40.869027 2026] [:error] [pid 62426:tid 62432] [client 20.226.32.254:34408] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t00l.php"] [unique_id "ahQmdEj3D3Mo8ANpTRDkVAAAAAI"]
[Mon May 25 18:37:42.388682 2026] [:error] [pid 62426:tid 62454] [client 20.226.32.254:34407] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/t00l.php"] [unique_id "ahQmdkj3D3Mo8ANpTRDkVQAAABg"]
[Mon May 25 18:37:43.097276 2026] [:error] [pid 62428:tid 62487] [client 20.226.32.254:55967] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "ahQmd5NosGBa7mui3VQwpAAAAIM"]
[Mon May 25 18:37:44.648888 2026] [:error] [pid 62428:tid 62499] [client 20.226.32.254:23401] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "ahQmeJNosGBa7mui3VQwpQAAAI8"]
[Mon May 25 18:37:45.831117 2026] [:error] [pid 62426:tid 62440] [client 20.226.32.254:23372] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "ahQmeUj3D3Mo8ANpTRDkXwAAAAo"]
[Mon May 25 18:37:47.519948 2026] [:error] [pid 62426:tid 62434] [client 20.226.32.254:63933] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "ahQme0j3D3Mo8ANpTRDkaAAAAAQ"]
[Mon May 25 18:37:50.161308 2026] [:error] [pid 3698:tid 3701] [client 20.226.32.254:28987] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ahQmfgtZBEwA4fyFLKPdzAAAAQE"]
[Mon May 25 18:37:53.565198 2026] [:error] [pid 62515:tid 62521] [client 20.226.32.254:34382] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ahQmgRig0_XsOwmnrv8XygAAAMQ"]
[Mon May 25 18:37:55.067208 2026] [:error] [pid 62426:tid 62450] [client 20.226.32.254:48444] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ahQmg0j3D3Mo8ANpTRDkeQAAABQ"]
[Mon May 25 18:37:57.063794 2026] [:error] [pid 62722:tid 62736] [client 20.226.32.254:23360] [client 20.226.32.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ahQmhaM6ssnLWYf6CVA6qAAAAEw"]
[Mon May 25 18:38:00.128477 2026] [:error] [pid 62426:tid 62439] [client 20.226.32.254:23379] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Mon May 25 18:38:00.453485 2026] [:error] [pid 62426:tid 62437] [client 20.226.32.254:23379] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Mon May 25 18:38:00.769191 2026] [:error] [pid 62426:tid 62448] [client 20.226.32.254:23379] File does not exist: /usr/local/apache/htdocs/suspended-page/amp.php
[Mon May 25 18:38:01.661795 2026] [:error] [pid 62426:tid 62453] [client 20.226.32.254:23379] File does not exist: /usr/local/apache/htdocs/suspended-page/bo.php
[Mon May 25 18:38:01.974153 2026] [:error] [pid 62426:tid 62432] [client 20.226.32.254:23379] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-243.php
[Mon May 25 18:38:02.298839 2026] [:error] [pid 62426:tid 62446] [client 20.226.32.254:23379] File does not exist: /usr/local/apache/htdocs/suspended-page/ws81.php
[Mon May 25 18:38:02.611503 2026] [:error] [pid 62426:tid 62436] [client 20.226.32.254:23379] File does not exist: /usr/local/apache/htdocs/suspended-page/callback.php
[Mon May 25 18:38:02.923897 2026] [:error] [pid 62426:tid 62440] [client 20.226.32.254:23379] File does not exist: /usr/local/apache/htdocs/suspended-page/sd.php
[Mon May 25 18:38:03.236090 2026] [:error] [pid 62426:tid 62454] [client 20.226.32.254:23379] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Mon May 25 18:38:03.569552 2026] [:error] [pid 62426:tid 62439] [client 20.226.32.254:23379] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Mon May 25 23:43:55.518715 2026] [:error] [pid 3698:tid 3722] [client 159.223.174.29:52986] [client 159.223.174.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ahRuOwtZBEwA4fyFLKMPYgAAARY"]
[Tue May 26 06:42:56.636170 2026] [:error] [pid 55988:tid 56001] [client 40.113.217.8:61683] [client 40.113.217.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ahTQcP3kVIz2sql52sdwlgAAAQo"]
[Tue May 26 06:42:59.310343 2026] [:error] [pid 55988:tid 56002] [client 40.113.217.8:61633] [client 40.113.217.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ahTQc_3kVIz2sql52sdwmgAAAQs"]
[Tue May 26 06:43:02.028951 2026] [:error] [pid 55988:tid 56000] [client 40.113.217.8:65210] [client 40.113.217.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ahTQdv3kVIz2sql52sdwpQAAAQk"]
[Tue May 26 06:43:04.660185 2026] [:error] [pid 20125:tid 20127] [client 40.113.217.8:65236] [client 40.113.217.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ahTQeNk9jeWERFDLJc6QFgAAAMA"]
[Tue May 26 07:17:28.878682 2026] [:error] [pid 55988:tid 56005] [client 198.23.130.204:44788] [client 198.23.130.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/HEAD"] [unique_id "ahTYiP3kVIz2sql52seEsgAAAQ4"]
[Tue May 26 07:17:28.879331 2026] [:error] [pid 20026:tid 20110] [client 198.23.130.204:43156] [client 198.23.130.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ahTYiDXIXIr-5BZ8nR78GAAAAJI"]
[Tue May 26 07:17:30.428886 2026] [:error] [pid 20125:tid 20136] [client 198.23.130.204:36074] [client 198.23.130.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/api/.env"] [unique_id "ahTYitk9jeWERFDLJc6eeAAAAMk"]
[Tue May 26 07:17:30.429336 2026] [:error] [pid 20125:tid 20146] [client 198.23.130.204:36072] [client 198.23.130.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/backend/.env"] [unique_id "ahTYitk9jeWERFDLJc6eeQAAANM"]
[Tue May 26 07:17:30.429918 2026] [:error] [pid 20125:tid 20145] [client 198.23.130.204:36054] [client 198.23.130.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "ahTYitk9jeWERFDLJc6eegAAANI"]
[Tue May 26 07:17:30.429966 2026] [:error] [pid 20026:tid 20107] [client 198.23.130.204:36062] [client 198.23.130.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.development"] [unique_id "ahTYijXIXIr-5BZ8nR78HAAAAI8"]
[Tue May 26 07:17:30.430091 2026] [:error] [pid 20125:tid 20139] [client 198.23.130.204:36044] [client 198.23.130.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "ahTYitk9jeWERFDLJc6eewAAAMw"]
[Tue May 26 07:17:31.293514 2026] [:error] [pid 20125:tid 20148] [client 198.23.130.204:47940] [client 198.23.130.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfcau.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ahTYi9k9jeWERFDLJc6efgAAANU"]